ropshell> use 72830e8ced936faef098dcab0fa16136 (download) name : tbbmalloc.dll (i386/PE) base address : 0x10001000 total gadgets: 1702
ropshell> suggest "load reg" > 0x10001522 : pop eax; ret > 0x10002519 : pop ebx; ret > 0x10001100 : pop ecx; ret > 0x1000147d : pop esi; ret > 0x10001b39 : pop edi; ret > 0x1000109d : pop ebp; ret > 0x10001ba4 : pop esp; ret > 0x10001300 : mov eax, [esp + 8]; ret > 0x10004ab7 : mov ecx, [esp + 0xc]; mov [ecx], 0; ret 0xc > 0x10003d44 : mov edx, [esp + 4]; and [edx], eax; ret > 0x10001d23 : mov esi, [esp + 0x14]; mov ecx, esi; call ebx > 0x10001d1e : mov ebp, [esp + 0x14]; push esi; mov esi, [esp + 0x14]; mov ecx, esi; call ebx > 0x10001d19 : mov ebx, [esp + 0x18]; push ebp; mov ebp, [esp + 0x14]; push esi; mov esi, [esp + 0x14]; mov ecx, esi; call ebx