ropshell> use 3cd632d4245d08e76014e7240e5f5f82 (download) name : dbman.exe (i386/PE) base address : 0x401000 total gadgets: 11623
ropshell> suggest "load reg" > 0x00428f99 : pop eax; ret > 0x00495ca5 : pop ebx; ret > 0x00496b58 : pop ecx; ret > 0x00489c7e : pop esi; ret > 0x0049b1e6 : pop edi; ret 0x10 > 0x00402b45 : pop ebp; ret > 0x00428f73 : pop esp; ret > 0x0040189b : popal ; ret 2 > 0x00490960 : mov eax, [esp + 4]; ret > 0x004981a8 : pop edx; push eax; call esi > 0x00494922 : mov ecx, [esp + 4]; mov [eax], ecx; ret 4 > 0x00498893 : mov edx, [esp + 4]; mov [eax], edx; pop esi; pop ecx; ret 0x10 > 0x0049557a : mov esi, [esp + 0xc]; push esi; mov [esp + 8], 0; call edx > 0x00497c13 : mov edi, [esp + 0x10]; mov esi, ecx; mov eax, [esi]; mov edx, [eax + 0x9c]; push 0; push edi; call edx