ropshell> use a27f2d7915fd455a2c4147e4b70bbd98 (download)
name         : EQNEDT32.EXE (i386/PE)
base address : 0x401000
total gadgets: 4450

ropshell> suggest "load reg"
> 0x0044c163 : pop ebx; ret
> 0x0044bf00 : pop esi; ret
> 0x0044c0b8 : pop edi; ret
> 0x0040f794 : pop ebp; ret
> 0x0044d0dd : pop ecx; pop ebx; ret 4
> 0x0044a9a8 : pop esp; dec edx; add al, 3; ret
> 0x0044d6d0 : mov eax, [esp + 4]; mul ecx; ret 0x10
> 0x00451b96 : mov ecx, [esp + 4]; sub eax, ecx; ret
> 0x0044c852 : mov edx, [esp + 8]; pop esi; add esp, 8; ret
> 0x004182ba : pop edx; add [eax], al; add [ebp - 0x1fb7b], cl; call [eax - 0x18]
> 0x0044dc41 : pop eax; adc [ebx + 0x81080], cl; add [ebx + 5], bl; add [ecx], al; add [eax], al; ret