ropshell> use b94b59adfba87d97669ec2ad881973d4 (download) name : ucrtbase.dll (i386/RAW) base address : 0x0 total gadgets: 4531
ropshell> suggest "load reg" > 0x00016e32 : pop eax; ret > 0x00000484 : pop ebx; ret > 0x000242d0 : pop ecx; ret > 0x000201c2 : pop edx; ret 4 > 0x00000e69 : pop esi; ret > 0x00000462 : pop edi; ret > 0x00000bfd : pop ebp; ret > 0x00000d69 : pop esp; ret > 0x000c3c39 : popal ; ret > 0x00080ce2 : mov eax, [esp + 0x18]; ret > 0x000200ff : mov ebx, [esp + 8]; ret > 0x000a10df : mov esi, [esp + 8]; ret > 0x00066684 : mov edi, [esp + 0x10]; ret > 0x00018125 : mov esp, [esp + 0x28]; inc ecx; pop edi; ret > 0x0000efb1 : mov ecx, [esp + ecx*4 + 0xfed4]; dec ecx; add ecx, esp; jmp ecx > 0x00035582 : mov ebp, [esp + 0x10]; dec eax; mov esi, [esp + 0x18]; dec eax; mov edi, [esp + 0x20]; ret