ropshell> use f13e5713ae0c7776b423cc534ec805e0 (download) name : adminsrv.exe (i386/PE) base address : 0x401000 total gadgets: 410
ropshell> suggest "load reg" > 0x00401e30 : pop ebx; ret > 0x00404398 : pop ecx; ret > 0x004041ae : pop esi; ret > 0x00401eaf : pop edi; ret > 0x00401343 : pop ebp; ret > 0x00403e27 : pop esp; ret > 0x00404397 : pop eax; pop ecx; ret > 0x0040948d : popal ; cld ; ret > 0x004041cc : mov esi, [esp + 0x18]; add esp, 0x1c; ret > 0x0040842e : mov edi, [esp + 0x18]; add esp, 0x1c; ret > 0x00408bf9 : mov ebp, [esp + 0x20]; add esp, 0x24; ret > 0x00402580 : mov eax, [esp + 0x100]; mov [esp], eax; call edx > 0x0040842a : mov ebx, [esp + 0x10]; mov edi, [esp + 0x18]; add esp, 0x1c; ret > 0x004078fa : mov edx, [esp + 0x50]; mov [edx], al; mov eax, 1; add esp, 0x4c; ret