ropshell> use 1b602357a3bec392e0ca6ae2c1adf2be (download)
name         : rtarget (i386/RAW)
base address : 0x0
total gadgets: 315

ropshell> suggest
call
    > 0x00001014 : call eax
    > 0x00004d10 : call edx
    > 0x00004c6b : call esp
    > 0x00004bbb : call [eax]
    > 0x00005327 : call [ebx]
jmp
    > 0x000012cf : jmp eax
    > 0x00004c0b : jmp esp
    > 0x00004c23 : jmp [eax]
    > 0x00004e13 : jmp [esi]
load reg
    > 0x00001d5b : pop eax; ret
    > 0x0000212e : pop ebx; ret
    > 0x000016b7 : pop esi; ret
    > 0x000029eb : pop edi; ret
    > 0x0000133d : pop ebp; ret
pop pop ret
    > 0x00001d5b : pop eax; ret
    > 0x0000145f : pop ebx; pop ebp; ret
sp lifting
    > 0x00001bbd : add esp, 0x38; ret
    > 0x00001bbd : add esp, 0x38; ret
stack pivoting
    > 0x00001de7 : xchg eax, esp; ret
    > 0x00001e58 : leave ; ret
write mem
    > 0x00009fdb : add [esi], eax; cdq ; add [eax], eax; add [ecx], al; or [edi], al; ret
    > 0x00009c62 : add [ecx], eax; push ebp; add dh, [ebx]; add [eax], dl; jmp [eax + eax*2]
    > 0x00009fe1 : add [eax], ecx; pop es; ret