ropshell> use a1f9191578ccf9869a952e47591e1708 (download)
name         : SystemSurvey.exe (i386/PE)
base address : 0x401000
total gadgets: 21654

ropshell> suggest "load reg"
> 0x004621c6 : pop eax; ret
> 0x00402786 : pop ebx; ret
> 0x0040418c : pop ecx; ret
> 0x0048ba32 : pop edx; ret
> 0x004015b0 : pop esi; ret
> 0x004032bb : pop edi; ret
> 0x004013c2 : pop ebp; ret
> 0x004a6c5f : pop esp; ret
> 0x00514645 : popal ; ret
> 0x004a1ff1 : mov eax, [esp + 4]; ret
> 0x0051d5f6 : mov ecx, [esp + 4]; sub eax, ecx; ret
> 0x004a702c : mov edx, [esp + 4]; add esp, 8; ret
> 0x004841ff : mov ebp, [esp + 0x18]; push ebp; push esi; call eax
> 0x0047e102 : mov edi, [esp + 0x1c]; movzx eax, [esi]; push edi; push eax; call ebx
> 0x004ab2cc : mov ebx, [esp + 0x1c]; mov eax, [edi + 4]; mov ecx, [esi]; push eax; call ecx
> 0x0047c8e4 : mov esi, [esp + 0xc]; mov [esi], ecx; mov ecx, [edx]; mov ecx, [ecx]; mov [edx], ecx; pop esi; ret