ropshell> use 4e44765502a8aafba57c8661983c23ad (download)
name         : vuln10.exe (i386/PE)
base address : 0x401000
total gadgets: 423

ropshell> suggest "load reg"
> 0x00401be1 : pop ebx; ret
> 0x00402298 : pop ecx; ret
> 0x004028e8 : pop esi; ret
> 0x004021a4 : pop edi; ret
> 0x0040158b : pop ebp; ret
> 0x00402297 : pop eax; pop ecx; ret
> 0x00404fd8 : pop esp; pop ebx; pop esi; pop edi; pop ebp; ret
> 0x00407a93 : mov edx, [esp + 0x20]; mov [eax + 0x10], 1; mov [eax + 0x14], edx; add esp, 0x1c; ret