ropshell> use 3891413139eaabfefe9b0ca49b5cd395 (download) name : msvcrt.dll (i386/PE) base address : 0x77be1000 total gadgets: 3854
ropshell> suggest "load reg" > 0x77bf1d16 : pop eax; ret > 0x77bf362c : pop ebx; ret > 0x77bef519 : pop ecx; ret > 0x77c1cb29 : pop edx; ret > 0x77bf1891 : pop esi; ret > 0x77bf3b47 : pop edi; ret > 0x77bebb36 : pop ebp; ret > 0x77c04fbf : pop esp; ret > 0x77c23678 : popal ; and dh, bh; pop ebp; ret > 0x77c17643 : mov eax, [esp + 4]; ret > 0x77c178f6 : mov ecx, [esp + 4]; sub eax, ecx; ret > 0x77c0549b : mov edx, [esp + 0x10]; mov [edx], eax; mov eax, 3; ret