ropshell> use 22f450c23d8abdfa6bed991ad1c34b1c (download)
name         : VsaVb7rt.dll (i386/RAW)
base address : 0x0
total gadgets: 29415
ropshell> suggest
call
    > 0x0002230e : call eax
    > 0x0001d8fc : call ebx
    > 0x000532ae : call ecx
    > 0x00053318 : call edx
    > 0x0001d9be : call esi
jmp
    > 0x000564a6 : jmp eax
    > 0x0012037f : jmp ebx
    > 0x00052998 : jmp ecx
    > 0x000a0a23 : jmp esi
    > 0x000abe31 : jmp edi
load mem
    > 0x00035b31 : mov eax, [esi]; pop esi; ret
    > 0x0005ec46 : mov eax, [ecx + 0x10]; ret
    > 0x0005882f : mov eax, [edx + 0x13c]; pop ebp; ret 8
    > 0x000bfa87 : mov eax, [esi + 0x1c]; pop esi; ret
    > 0x0001f7ac : mov eax, [ebp + 0xc]; pop ebp; ret 8
load reg
    > 0x00052e69 : pop eax; ret
    > 0x00012968 : pop ebx; ret
    > 0x0002060f : pop ecx; ret
    > 0x0001558f : pop esi; ret
    > 0x0001f38d : pop edi; ret
pop pop ret
    > 0x00052e69 : pop eax; ret
    > 0x00035619 : pop eax; pop esi; ret
    > 0x000846b4 : pop ebx; pop edi; pop ebp; ret
    > 0x000fd4ad : pop edi; pop esi; pop ebx; pop ebp; ret
    > 0x00118a79 : pop ecx; pop edi; pop esi; pop ebx; pop ebp; ret 8
sp lifting
    > 0x0004e23e : add esp, 0x10; ret
    > 0x0004e23e : add esp, 0x10; ret
stack pivoting
    > 0x0000f230 : xchg eax, esp; ret
    > 0x0004f9a4 : push eax; pop esp; ret
    > 0x00022431 : mov esp, ebp; pop ebp; ret
    > 0x00048173 : lea esp, [edi]; pop esi; ret
    > 0x000afca5 : mov esp, edi; inc [ebx + 0x5e5f20c4]; pop ebx; pop ebp; ret 4
write mem
    > 0x0007c2d6 : add [ebx], eax; ret
    > 0x0004adb0 : adc [ebx], edi; ret
    > 0x000c35ff : add [edx], edi; ret
    > 0x000de262 : add [ecx], eax; pop ebp; ret 0x2c
    > 0x00058439 : add [ecx], esi; pop ebp; ret 0xc