ropshell> use 4e38150e304446a25fa46443144af0dc (download) name : ch73.exe (i386/PE) base address : 0x401000 total gadgets: 228
ropshell> suggest "load reg" > 0x0040194d : pop ebx; ret > 0x00402948 : pop ecx; ret > 0x004023b6 : pop esi; ret > 0x00401eb1 : pop edi; ret > 0x00401410 : pop ebp; ret > 0x00402947 : pop eax; pop ecx; ret > 0x00401d40 : mov eax, [esp + 4]; ret > 0x004011f0 : popal ; inc eax; add bl, ch; adc al, 0x39; ret > 0x00401c9a : mov edx, [esp + 0x44]; fstp [esp + 0x28]; mov [esp + 0x14], edx; lea edx, [esp + 0x10]; mov [esp], edx; call eax