ropshell> use 0d2e302910fccc2094dcab8e24739dc8 (download)
name         : TEFW.exe (i386/PE)
base address : 0x401000
total gadgets: 19404

ropshell> suggest "load reg"
> 0x0041bca3 : pop eax; ret
> 0x00406a64 : pop ebx; ret
> 0x004021aa : pop ecx; ret
> 0x004020c5 : pop esi; ret
> 0x0041cd0e : pop edi; ret
> 0x00406d97 : pop ebp; ret
> 0x004887f7 : pop esp; ret 0x4a
> 0x0043d3d1 : popal ; add al, 0; ret
> 0x00456031 : pop edx; add [eax], eax; ret 4
> 0x00464de5 : mov eax, [esp + 4]; ret
> 0x0046b976 : mov ecx, [esp + 4]; sub eax, ecx; ret
> 0x00409b18 : mov edx, [esp + 0x10]; push edx; call ebx
> 0x0043d880 : mov edi, [esp + 0x14]; mov esi, ecx; push edi; push [esi + 0x20]; call ebp
> 0x0040af6c : mov ebp, [esp + 0x18]; push 1; mov ecx, eax; mov eax, [edx]; push ebp; call eax
> 0x0040a10c : mov ebx, [esp + 0x1024]; mov eax, [esi + 0x158]; push ebx; push ebp; push 0; push edi; call eax
> 0x004555f4 : mov esi, [esp + 0xc]; mov ebx, ecx; mov eax, [ebx]; push esi; call [eax + 0x44]