ropshell> use 561fa2abb31dfa8fab762145f81667c2 (download)
name         : msvcp71.dll (i386/PE)
base address : 0x7c3a1000
total gadgets: 3474

ropshell> suggest "load reg"
> 0x7c3a36a6 : pop eax; ret
> 0x7c3a6ff8 : pop ebx; ret
> 0x7c3a1860 : pop ecx; ret
> 0x7c3a124d : pop esi; ret
> 0x7c3a87b4 : pop edi; ret
> 0x7c3a9b3d : pop ebp; ret
> 0x7c3a8a82 : pop esp; setne al; ret
> 0x7c3a6bc8 : mov eax, [esp + 0x10]; ret 0x10
> 0x7c3a44aa : mov ecx, [esp + 4]; add eax, ecx; ret 4
> 0x7c3c642a : pop edx; mov ah, 0xfd; call [ecx + 0x51]
> 0x7c3b2351 : popal ; or bh, bh; call [eax - 0x75]
> 0x7c3a83b3 : mov edx, [esp + 4]; mov ax, [ecx + 0x30]; mov [ecx + 0x30], dx; ret 4
> 0x7c3a6a45 : mov edi, [esp + 0xc]; mov eax, [edi]; mov esi, ecx; mov ecx, edi; call [eax + 4]