ropshell> use 7433d9a8a217c89f0100d7400595b5c4 (download)
name         : PlugY.dll (i386/PE)
base address : 0x10001000
total gadgets: 2588

ropshell> suggest "load reg"
> 0x1000cdb8 : pop eax; ret
> 0x10001241 : pop ebx; ret
> 0x100012fa : pop ecx; ret
> 0x10002509 : pop esi; ret
> 0x1000137f : pop edi; ret
> 0x1000ddb6 : pop ebp; ret
> 0x10013400 : pop edx; pop ecx; ret
> 0x1000108a : mov eax, [esp + 4]; ret 4
> 0x10025831 : pop esp; and al, 0x10; call edi
> 0x100117bd : popal ; add [eax], eax; add esp, 0x84c; ret 0xc
> 0x1000eb35 : mov esi, [esp + 0x10]; test esi, esi; ret
> 0x10022b77 : mov edi, [esp + 0x14]; test edi, edi; ret
> 0x1000cdff : mov ecx, [esp]; add ecx, 0xb9b0; jmp ecx
> 0x1002029b : mov edx, [esp + 0x18]; push edx; jmp eax