ropshell> use 4e38150e304446a25fa46443144af0dc (download)
name         : ch73.exe (i386/PE)
base address : 0x401000
total gadgets: 228
ropshell> suggest "load reg"
> 0x0040194d : pop ebx; ret
> 0x00402948 : pop ecx; ret
> 0x004023b6 : pop esi; ret
> 0x00401eb1 : pop edi; ret
> 0x00401410 : pop ebp; ret
> 0x00402947 : pop eax; pop ecx; ret
> 0x00401d40 : mov eax, [esp + 4]; ret
> 0x004011f0 : popal ; inc eax; add bl, ch; adc al, 0x39; ret
> 0x00401c9a : mov edx, [esp + 0x44]; fstp [esp + 0x28]; mov [esp + 0x14], edx; lea edx, [esp + 0x10]; mov [esp], edx; call eax