ropshell> use 561fa2abb31dfa8fab762145f81667c2 (download)
name         : msvcp71.dll (i386/PE)
base address : 0x7c3a1000
total gadgets: 3474

ropshell> suggest "write mem"
> 0x7c3a7a07 : add [eax], ecx; ret 4
> 0x7c3a792f : add [eax], edx; ret 4
> 0x7c3aa710 : add [edx], eax; ret
> 0x7c3a3fd8 : add [ebp + 0x11890150], ecx; ret
> 0x7c3a4bc5 : adc [edi], ecx; mov dh, 0; ret
> 0x7c3b1d4d : add [edi + 0x5b], ebx; pop esi; ret 0xc
> 0x7c3b5700 : add [ebx], esi; jmp [ecx]
> 0x7c3a34d0 : add [ebx + 0x4c2c9c1], ecx; add [eax + 0x7c3d05f4], bh; ret
> 0x7c3bb89e : add [ebx + 0x16a34c4], eax; call [eax + 4]
> 0x7c3b28dc : add [edi + 0x6a], edx; dec eax; call [eax + 8]
> 0x7c3aac04 : add [edx], ebp; push [esp + 0x10]; call [eax + 0x20]
> 0x7c3aac39 : add [edx + 1], ebp; push 0; push [esp + 0x10]; call [eax + 0x20]
> 0x7c3c9a4e : add [esi + 0x1f], edi; xor eax, eax; cmp [ebp + 8], eax; setne al; push eax; push [ebp + 8]; call esi