ropshell> use 7b93c623333f121dc9e689ccb1b7a733 (download) name : mfc71u.dll (i386/PE) base address : 0x7c251000 total gadgets: 29480
ropshell> suggest "load reg" > 0x7c25e8db : pop eax; ret > 0x7c255fb4 : pop ebx; ret > 0x7c254dc7 : pop ecx; ret > 0x7c25190b : pop esi; ret > 0x7c2838cc : pop edi; ret > 0x7c2570f8 : pop ebp; ret > 0x7c26ea98 : pop esp; ret > 0x7c2c6555 : pop edx; sub al, 0x7c; ret > 0x7c305378 : popal ; adc al, 0; ret > 0x7c2a88cd : mov eax, [esp + 4]; ret > 0x7c2e6834 : mov ecx, [esp + 0x10]; mov [ecx], eax; ret 0x10 > 0x7c2ea844 : mov edx, [esp + 0x10]; mov [eax + ecx], edx; pop esi; ret 0xc > 0x7c267188 : mov edi, [esp + 0x10]; push [edi + 0x20]; call esi > 0x7c30f61f : mov esi, [esp + 8]; push 2; push esi; call [eax + 0x6c]