ropshell> use 5081e2ba40b2df97f193382b0212d17a (download)
name         : binkw32.dll (i386/PE)
base address : 0x10001000
total gadgets: 2597

ropshell> suggest "load reg"
> 0x10005f42 : pop eax; ret
> 0x1000424b : pop ebx; ret
> 0x100041cc : pop ecx; ret
> 0x1001d117 : pop edx; ret
> 0x10008767 : pop esi; ret
> 0x1001e297 : pop edi; ret
> 0x10005433 : pop ebp; ret
> 0x10020473 : mov eax, [esp + 4]; ret
> 0x100204d6 : mov ecx, [esp + 4]; sub eax, ecx; ret
> 0x10021e00 : mov edx, [esp + 0x10]; pop esi; mov [edx], ecx; ret
> 0x10005a95 : pop esp; push ecx; push 0; push esi; call [eax + 0x64]
> 0x1001c911 : mov esi, [esp + 8]; mov eax, [esi]; mov ecx, [eax]; push eax; call [ecx + 0x48]
> 0x1001fee4 : mov edi, [esp + 8]; xor eax, eax; stosd es:[edi], eax; stosd es:[edi], eax; stosd es:[edi], eax; pop edi; ret