ropshell> use aad8314b8930c06eb75b2c93a6f2cbd3 (download)
name         : AntReg.dll (i386/PE)
base address : 0x10001000
total gadgets: 583

ropshell> suggest "load reg"
> 0x10002644 : pop eax; ret
> 0x1000203a : pop ebx; ret
> 0x100017a6 : pop ecx; ret
> 0x10001c9e : pop esi; ret
> 0x10001c60 : pop edi; ret
> 0x10002340 : pop ebp; ret
> 0x10004cd3 : mov eax, [esp + 4]; ret
> 0x10003c76 : mov ecx, [esp + 4]; sub eax, ecx; ret
> 0x10001d83 : pop esp; pushal ; add [eax], dl; mov eax, esi; pop edi; pop esi; ret
> 0x10003836 : mov edx, [esp + 0x10]; mov [edx], eax; mov eax, 3; ret