ropshell> use c7815c121632e8ce3ad8019f2c1ff910 (download)
name         : msvcrt.dll (i386/PE)
base address : 0x10101000
total gadgets: 5093

ropshell> suggest "load mem"
> 0x10140a80 : mov eax, [ecx + 0xc]; ret
> 0x1019ed84 : mov eax, [edx + 4]; ret
> 0x1016665c : mov eax, [ebp + 0x10]; ret
> 0x10143d1e : mov eax, [ecx]; add cl, cl; ret
> 0x10133d00 : mov eax, [edx]; add cl, cl; ret
> 0x1013af00 : mov ebp, [ebx + 0x20]; jmp eax
> 0x1013b7b5 : mov eax, [esi]; add eax, edx; pop esi; pop ebp; ret
> 0x10136776 : mov ecx, [ebp + 0x10]; mov [ecx], edx; pop ebp; ret
> 0x1013af62 : mov eax, [esi + 4]; mov [ecx + 0x98], eax; pop esi; pop ebp; ret
> 0x101395ad : mov ecx, [edx + ecx]; add ecx, esi; add eax, ecx; pop esi; pop ebp; ret
> 0x1014110a : mov ecx, [edx]; mov [edx], eax; mov [esi], ecx; pop esi; pop ebp; ret
> 0x1013abd4 : mov eax, [edi + 0xc]; mov [esi + 0x8c], eax; pop esi; pop edi; pop ebp; ret
> 0x101410b8 : mov ecx, [eax]; mov eax, [ebp + 0xc]; cmp ecx, [eax]; sete al; pop ebp; ret
> 0x1013add4 : mov ebx, [ebp + 0xc]; mov ebp, [ebp - 4]; mov esp, [ebx - 4]; jmp eax
> 0x10130659 : mov ecx, [edi + 4]; mov [eax], ecx; xor eax, eax; pop edi; pop esi; pop ebp; ret
> 0x101a2928 : mov ecx, [eax + 0x9c]; mov eax, [ebp + 8]; mov [eax], ecx; xor eax, eax; pop ebp; ret
> 0x101395aa : mov edx, [esi + edx]; mov ecx, [edx + ecx]; add ecx, esi; add eax, ecx; pop esi; pop ebp; ret
> 0x10169578 : mov edx, [ecx]; lea eax, [edx + 8]; mov [ecx], eax; mov eax, [edx]; mov edx, [edx + 4]; pop ebp; ret
> 0x1013adc9 : mov eax, [ebx]; mov fs:[0], eax; mov eax, [ebp + 8]; mov ebx, [ebp + 0xc]; mov ebp, [ebp - 4]; mov esp, [ebx - 4]; jmp eax
> 0x1015fef3 : mov esi, [edx + 0xc]; mov eax, [esp + 0x5c]; cmp eax, 1; adc eax, 0; mov esp, [edx + 0x10]; add esp, 4; jmp [edx + 0x14]