ropshell> use c7815c121632e8ce3ad8019f2c1ff910 (download)
name         : msvcrt.dll (i386/PE)
base address : 0x10101000
total gadgets: 5093

ropshell> suggest
call
    > 0x1010c1b2 : call eax
    > 0x10113a05 : call ebx
    > 0x1013827b : call ecx
    > 0x101139f5 : call esi
    > 0x1010fdd5 : call edi
jmp
    > 0x10197448 : push esp; ret
    > 0x10110dad : jmp eax
    > 0x101131b8 : jmp ebx
    > 0x10196a0b : jmp ecx
    > 0x101139a5 : jmp edx
load mem
    > 0x10140a80 : mov eax, [ecx + 0xc]; ret
    > 0x1019ed84 : mov eax, [edx + 4]; ret
    > 0x1016665c : mov eax, [ebp + 0x10]; ret
    > 0x10143d1e : mov eax, [ecx]; add cl, cl; ret
    > 0x10133d00 : mov eax, [edx]; add cl, cl; ret
load reg
    > 0x1013aa22 : pop eax; ret
    > 0x1013c69b : pop ebx; ret
    > 0x1010c14d : pop ecx; ret
    > 0x101932e4 : pop edx; ret
    > 0x1013be2d : pop esi; ret
pop pop ret
    > 0x1013aa22 : pop eax; ret
    > 0x10136212 : pop eax; pop ebp; ret
    > 0x1014aed8 : pop ebx; pop edi; pop ebp; ret
    > 0x10144e8a : pop ebx; pop edi; pop esi; pop ebp; ret
    > 0x101890f3 : pop eax; pop ebx; pop esi; pop edi; pop ebp; ret
sp lifting
    > 0x10166146 : add esp, 0x10; ret
    > 0x10166146 : add esp, 0x10; ret
    > 0x1019b968 : add esp, 0x20; ret
stack pivoting
    > 0x1010fad5 : xchg eax, esp; ret
    > 0x1019ac12 : mov esp, ebx; pop ebx; ret
    > 0x1013afe2 : mov esp, ebp; pop ebp; ret
    > 0x1019eba9 : lea esp, [esp]; fstp st(0); fld1 ; ret
    > 0x101a6dbb : lea esp, [edi + edi*8 - 1]; jmp [ebx]
write mem
    > 0x1019662d : adc [eax], edx; ret
    > 0x10116d9a : add [ebx], esi; ret
    > 0x10158aba : add [ebx], edi; ret
    > 0x1014592e : add [ebx + 0x300f465], eax; ret
    > 0x10186947 : add [esi + 0x5b], ebx; ret