ropshell> use 22c241e7dd67820ed6085c61869c6f98 (download)
name         : HEVD.sys (i386/PE)
base address : 0x11000
total gadgets: 85

ropshell> suggest "load reg"
> 0x000112de : pop ebx; ret
> 0x00011154 : pop ebp; ret
> 0x000113cb : pop ecx; pop ebx; ret 4
> 0x00011356 : pop esi; pop ebp; ret
> 0x00011355 : pop edi; pop esi; pop ebp; ret
> 0x000113c8 : pop eax; pop ecx; pop ebp; pop ecx; pop ebx; ret 4
> 0x0001131a : mov edx, [esp + 0x10]; mov [edx], eax; mov eax, 3; ret
> 0x00011316 : mov eax, [esp + 8]; mov edx, [esp + 0x10]; mov [edx], eax; mov eax, 3; ret