ropshell> use acb0504a5cd299154111632d9f240d4e (download)
name         : brokenwindow.exe (i386/PE)
base address : 0x401000
total gadgets: 937

ropshell> suggest "load reg"
> 0x0040876e : pop ebx; ret
> 0x00401388 : pop ecx; ret
> 0x0040133e : pop esi; ret
> 0x00401b7d : pop edi; ret
> 0x00401067 : pop ebp; ret
> 0x00403803 : pop eax; pop ebp; ret
> 0x004080fb : mov eax, [esp + 4]; ret
> 0x00403d56 : mov ecx, [esp + 4]; sub eax, ecx; ret
> 0x00406e8e : popal ; inc ecx; add [ebp - 0x3e6af040], al; mov eax, ecx; ret
> 0x004087aa : mov edx, [esp + 0x10]; mov [edx], eax; mov eax, 3; ret