ropshell> use 8072c981b4b780c764d2ebb63ef84c02 (download)
name         : BlizzardError.exe (i386/PE)
base address : 0x401000
total gadgets: 11968

ropshell> suggest "load reg"
> 0x0047ab7a : pop eax; ret
> 0x00401a1d : pop ebx; ret
> 0x004098a5 : pop ecx; ret
> 0x00423ed2 : pop edx; ret
> 0x004010ca : pop esi; ret
> 0x00408dc8 : pop edi; ret
> 0x004010f9 : pop ebp; ret
> 0x00449230 : pop esp; ret
> 0x0046dd55 : mov eax, [esp + 4]; ret
> 0x00472746 : mov ecx, [esp + 4]; sub eax, ecx; ret
> 0x00465153 : popal ; add [eax], al; mov esp, ebp; pop ebp; ret 4
> 0x0047a3ca : mov edx, [esp + 0x10]; mov [edx], eax; mov eax, 3; ret