ropshell> use 496b8f2985017169a4201a8d263aeac0 (download)
name         : msvcrt.dll (i386/PE)
base address : 0x10101000
total gadgets: 5057

ropshell> suggest "load reg"
> 0x1013bbf2 : pop eax; ret
> 0x1013d85e : pop ebx; ret
> 0x1010c14d : pop ecx; ret
> 0x101947c4 : pop edx; ret
> 0x1013cfe7 : pop esi; ret
> 0x1013b6a7 : pop edi; ret
> 0x10130904 : pop ebp; ret
> 0x10196629 : pop esp; ret
> 0x1011628e : popal ; aas ; ret
> 0x1018a995 : mov eax, [esp + 4]; ret
> 0x1019702d : mov esp, [esp + 8]; ret
> 0x1018aca6 : mov ecx, [esp + 4]; sub eax, ecx; ret
> 0x10158a5d : mov edx, [esp + 0x10]; mov [edx], eax; mov eax, 3; ret