ropshell> use 63fd1700ad01b939a5d3f3ecef145fb5 (download)
name         : test.exe (i386/RAW)
base address : 0x0
total gadgets: 352

ropshell> suggest
call
    > 0x00000821 : call eax
    > 0x000012bd : call esi
    > 0x0000161f : call edi
    > 0x000007be : call ebp
    > 0x000025eb : call esp
jmp
    > 0x00000daf : jmp eax
    > 0x00001433 : jmp [eax]
    > 0x00016885 : jmp [ecx]
    > 0x00001325 : jmp [esi + 0x2e]
    > 0x00000799 : jmp [ebp + 0x48]
load mem
    > 0x00001618 : mov ecx, [ebx]; call ebp
    > 0x00001a20 : movzx ecx, [eax + 6]; mov eax, ecx; ret
    > 0x00001b70 : mov eax, [edx + 0x24]; not eax; shr eax, 0x1f; ret
    > 0x00001cd9 : mov eax, [edx]; add [eax], al; dec eax; add esp, 0x48; ret
    > 0x0000162b : mov eax, [ebx + 8]; dec eax; mov ecx, esi; call eax
load reg
    > 0x0000140c : pop eax; ret
    > 0x00001516 : pop ebx; ret
    > 0x00001c80 : pop ecx; ret
    > 0x00000d0c : pop esi; ret
    > 0x00000fdb : pop edi; ret
pop pop ret
    > 0x0000140c : pop eax; ret
    > 0x00001c7f : pop eax; pop ecx; ret
    > 0x00000fd9 : pop ebx; pop esi; pop edi; ret
    > 0x00000910 : pop ebx; pop esi; pop edi; pop ebp; inc ecx; pop esp; ret
sp lifting
    > 0x000006ab : add esp, 0x28; ret
    > 0x000006ab : add esp, 0x28; ret
    > 0x00000775 : add esp, 0x38; ret
    > 0x00001cde : add esp, 0x48; ret
    > 0x0000140a : add esp, 0x58; ret
stack pivoting
    > 0x00016897 : xchg eax, esp; add [eax], ecx; lcall [edx]; or eax, [eax]; jmp [ecx]
    > 0x00000820 : leave ; call eax
write mem
    > 0x0000e16a : add [eax], ecx; ret 0x18
    > 0x0001702a : add [eax + 4], ebx; ret
    > 0x00016fab : add [ecx + 4], edx; ret