ropshell> use 13031e736ee4698b8c4813a8f2ae1848 (download) name : PassFreely_Implant.dll (i386/PE) base address : 0x68001000 total gadgets: 890
ropshell> suggest "load reg" > 0x68009476 : pop eax; ret > 0x68004880 : pop ebx; ret > 0x68004d8f : pop ecx; ret > 0x680089a8 : pop esi; ret > 0x680038ba : pop ebp; ret > 0x68008c73 : pop edi; pop esi; ret > 0x68004824 : mov eax, [esp + 0x10]; pop edi; pop esi; pop ebp; pop ebx; add esp, 0x364; ret