ropshell> use 3899f258e06eda564292b936b806261f (download)
name         : RM2MP3Converter.exe (i386/PE)
base address : 0x401000
total gadgets: 6308

ropshell> suggest "load reg"
> 0x00437552 : pop eax; ret
> 0x0040329f : pop ebx; ret
> 0x0040545a : pop ecx; ret
> 0x00401880 : pop esi; ret
> 0x00419ec7 : pop edi; ret
> 0x0040aea1 : pop ebp; ret
> 0x004128b6 : pop esp; ret
> 0x004054cb : pop edx; add [eax], al; ret
> 0x00423287 : mov eax, [esp + 0x10]; pop ebx; ret 0xc
> 0x00405961 : popal ; inc esp; add [ebp + 9], dh; ret
> 0x0040d489 : mov ecx, [esp + 0x20]; push ecx; call edi
> 0x0040d220 : mov edx, [esp + 0x34]; push edx; call edi
> 0x00420584 : mov edi, [esp + 0x10]; mov esi, [edi + 0x230c]; push edi; call ebx
> 0x00409dfc : mov esi, [esp + 0x40]; push eax; mov edx, [esi + 4]; push edx; call ebp
> 0x00412d2b : mov ebx, [esp + 0x1c]; push eax; mov ecx, edi; mov [esp + 0x24], esi; call [edx + 0x30]