ropshell> use cd491c8ea3c952decf24e0a3414977b1 (download)
name         : lab4B (i386/RAW)
base address : 0x0
total gadgets: 9731

ropshell> suggest "load reg"
> 0x00073b06 : pop eax; ret
> 0x000001c9 : pop ebx; ret
> 0x0009d1d1 : pop ecx; ret
> 0x00026d3a : pop edx; ret
> 0x00001a75 : pop esi; ret
> 0x0000046f : pop edi; ret
> 0x0000038e : pop ebp; ret
> 0x00073ab6 : pop esp; ret
> 0x00000d50 : mov ebx, [esp]; ret
> 0x0007404f : mov ecx, [esp]; ret
> 0x0009d665 : popal ; add [edx], ecx; ret
> 0x0000cf40 : mov eax, [esp + 4]; ret
> 0x0006d947 : mov edx, [esp + 0x18]; mov eax, edx; add esp, 0x2c; ret
> 0x0000c1e9 : mov esi, [esp + 0x24]; mov eax, [ebx + 0x94]; mov [esp], ebx; call [eax + 0x30]
> 0x0004ebd1 : mov edi, [esp + 0x30]; mov eax, [esp + 0x2c]; mov [esp], eax; call [edi + 0x24]
> 0x00009baf : mov ebp, [esp + 0x14]; mov [esp + 0xc], 0; mov [esp], esi; mov [esp + 4], edi; mov [esp + 8], ebp; call [eax + 0x40]