ropshell> use 5e28284f9b5f9097640d58a73d38ad4c (download)
name         : notepad.exe (i386/PE)
base address : 0x1001000
total gadgets: 869

ropshell> suggest "load reg"
> 0x0100753c : pop ecx; ret
> 0x01001956 : pop esi; ret
> 0x01004ca4 : pop edi; ret
> 0x010044ce : pop ebp; ret 0x10
> 0x010044b1 : pop ebx; pop ebp; ret 4
> 0x010023fd : pop eax; pop esi; pop edi; pop ebp; ret 8
> 0x01005844 : pop esp; mov ebx, [ebp + 8]; push ebx; call edi