ropshell> use 6dc548e90a706d06409314d4026c41b1 (download)
name         : PlugY.exe (i386/PE)
base address : 0x401000
total gadgets: 328

ropshell> suggest "load reg"
> 0x004023f5 : pop ecx; ret
> 0x0040164c : pop esi; ret
> 0x00402362 : pop edi; ret
> 0x004028d8 : pop ebp; ret
> 0x004017da : pop esp; ret
> 0x004029b1 : pop ebx; pop ebp; ret
> 0x00401d5c : mov eax, [esp + 0x10]; push eax; call esi
> 0x00401ca5 : mov ecx, [esp + 0x10]; push ecx; call esi
> 0x00401afc : mov edx, [esp + 0x14]; push edx; call ebx