ropshell> use d3a21f576bd28cf1ab5ef85f67746df5 (download)
name         : msctf_.dll (i386/PE)
base address : 0x10001000
total gadgets: 10164

ropshell> suggest "load reg"
> 0x1004523c : pop eax; ret
> 0x10010021 : pop ebx; ret
> 0x1000fdea : pop ecx; ret
> 0x1006260e : pop edx; ret
> 0x100109ec : pop esi; ret
> 0x1001149a : pop edi; ret
> 0x1001079e : pop ebp; ret
> 0x1004db8a : pop esp; pop ebp; ret 4
> 0x1004ea61 : popal ; and [eax], al; ret
> 0x10058800 : mov eax, [esp + 4]; mul ecx; ret 0x10
> 0x10029beb : mov ecx, [esp + 0x10]; call edi
> 0x1006025a : mov edi, [esp + 0x1c]; mov ecx, edi; call esi