ropshell> use b76f8a048f5a0a05018d2413694d4daa (download)
name         : rpcrt4.dll (i386/RAW)
base address : 0x0
total gadgets: 4073
ropshell> suggest "load reg"
> 0x000049df : pop eax; ret
> 0x00000a48 : pop ebx; ret
> 0x0008d9bd : pop edx; ret
> 0x000006f6 : pop esi; ret
> 0x00000555 : pop edi; ret
> 0x00003091 : pop ebp; ret
> 0x00012a63 : pop esp; ret
> 0x0006149b : popal ; ret 8
> 0x0006698c : movzx eax, [esp + 8]; ret
> 0x00010a82 : mov ebx, [esp + 8]; ret
> 0x0002654c : mov esi, [esp + 0x20]; ret
> 0x000662a3 : mov edi, [esp + 0x10]; ret
> 0x00069833 : pop ecx; imul ecx, [eax], 0; ret
> 0x000427fa : mov ecx, [esp + eax*4 + 0x435a0]; dec ecx; add ecx, esp; jmp ecx