ropshell> use 561fa2abb31dfa8fab762145f81667c2 (download)
name         : msvcp71.dll (i386/PE)
base address : 0x7c3a1000
total gadgets: 3474

ropshell> suggest "load mem"
> 0x7c3a3490 : mov eax, [ecx]; ret
> 0x7c3a4b9a : mov eax, [edx]; ret
> 0x7c3a3a22 : mov eax, [ecx + 0x10]; ret
> 0x7c3b2669 : mov eax, [esi + 6]; pop esi; ret
> 0x7c3a7990 : mov eax, [ebp + 8]; pop ebp; ret 0x10
> 0x7c3a4a20 : mov eax, [esi]; call [eax + 0x10]
> 0x7c3c4636 : mov eax, [edi]; call [eax + 0x1c]
> 0x7c3a3549 : mov edx, [eax]; push 1; mov ecx, eax; call [edx]; ret
> 0x7c3a3486 : mov edx, [ecx]; mov [eax], edx; and [ecx], 0; ret 4
> 0x7c3c57be : mov ecx, [ebp + 0x10]; mov [eax + 4], ecx; pop ebp; ret 0x20
> 0x7c3c39a1 : mov eax, [ebx]; mov ecx, ebx; call [eax + 0x1c]
> 0x7c3a345a : mov ecx, [eax]; mov eax, ecx; inc eax; neg eax; sbb eax, eax; and eax, ecx; ret
> 0x7c3a441e : mov edx, [ecx + 4]; add edx, esi; or [edx + 0x10], 2; pop esi; ret
> 0x7c3a4b05 : movzx ecx, [ebx]; mov eax, [edi]; push ecx; mov ecx, edi; call [eax + 4]
> 0x7c3bbb52 : mov edi, [ebp + 0x10]; mov ecx, [ebp - 0x40]; mov eax, [ecx]; call [eax + 8]
> 0x7c3a7a9a : mov edx, [edi]; xor eax, eax; mov ax, [ebx]; mov ecx, edi; push eax; call [edx + 4]
> 0x7c3aac33 : mov ecx, [eax + 0x28]; mov eax, [ecx]; push 1; push 1; push 0; push [esp + 0x10]; call [eax + 0x20]
> 0x7c3a5ca0 : mov edx, [ebp + 0x14]; add ecx, edx; add ecx, [ebp + 0x18]; add eax, [ebp + 0xc]; push ecx; push eax; call ebx
> 0x7c3bbb4f : mov esi, [ebp + 0x14]; mov edi, [ebp + 0x10]; mov ecx, [ebp - 0x40]; mov eax, [ecx]; call [eax + 8]