ropshell> use 5c5c3266cf1340ec7af63770be0e5398 (download)
name         : BoF.exe (i386/PE)
base address : 0x401000
total gadgets: 343

ropshell> suggest "load reg"
> 0x004023cc : pop esi; ret
> 0x00401058 : pop ebp; ret
> 0x004023cb : pop edi; pop esi; ret
> 0x00401055 : pop ebx; mov esp, ebp; pop ebp; ret
> 0x004015ec : pop ecx; pop edi; pop esi; pop ebx; mov esp, ebp; pop ebp; ret
> 0x0040168d : pop eax; and al, 0; add [ebx + 0x889fc4d], cl; mov esp, ebp; pop ebp; ret
> 0x004010e2 : pop edx; add [eax], eax; add [ebp - 0x38f7b], cl; call [eax + 0x68]