ropshell> use 1aff244ca134956c54474f4e2433e4ce (download) name : advapi32.dll (i386/PE) base address : 0x77dd1000 total gadgets: 6815
ropshell> suggest "load reg" > 0x77e25887 : pop eax; ret > 0x77dd94a1 : pop ebx; ret > 0x77ddbf7c : pop ecx; ret > 0x77de9efe : pop esi; ret > 0x77e04d7d : pop edi; ret > 0x77dee305 : pop ebp; ret > 0x77dea5f9 : pop esp; ret > 0x77de6092 : pop edx; or bh, bh; dec ecx; ret 8 > 0x77dfee0f : mov eax, [esp + 4]; mul ecx; ret 0x10 > 0x77e04a0d : popal ; std ; jmp [esi - 0x7b] > 0x77dfee99 : mov edx, [esp + 0x10]; mov [edx], eax; mov eax, 3; ret