ropshell> use c7815c121632e8ce3ad8019f2c1ff910 (download) name : msvcrt.dll (i386/PE) base address : 0x10101000 total gadgets: 5093
ropshell> suggest "load reg" > 0x1013aa22 : pop eax; ret > 0x1013c69b : pop ebx; ret > 0x1010c14d : pop ecx; ret > 0x101932e4 : pop edx; ret > 0x1013be2d : pop esi; ret > 0x1013c630 : pop edi; ret > 0x1012fa11 : pop ebp; ret > 0x10195149 : pop esp; ret > 0x1011628e : popal ; aas ; ret > 0x10189545 : mov eax, [esp + 4]; ret > 0x10195b4d : mov esp, [esp + 8]; ret > 0x10189856 : mov ecx, [esp + 4]; sub eax, ecx; ret > 0x1015789d : mov edx, [esp + 0x10]; mov [edx], eax; mov eax, 3; ret