ropshell> use a07010e2d96ff74adf3bc216557c58d9 (download)
name         : webserver_orig (i386/ELF)
base address : 0x80490b0
total gadgets: 7868
ropshell> suggest "load mem"
> 0x080cd4d0 : mov eax, [edx + 0x4c]; ret
> 0x080be59d : mov eax, [edx]; pop ebx; pop esi; ret
> 0x08083cfb : mov edx, [eax]; mov eax, edx; ret
> 0x08067068 : mov eax, [ecx]; mov [edx], eax; ret
> 0x08067099 : mov eax, [ecx + 8]; sub eax, edx; ret
> 0x08071470 : movzx ecx, [eax]; movzx eax, [edx]; sub eax, ecx; ret
> 0x08062fba : mov eax, [esi + 0x10]; pop esi; pop edi; jmp eax
> 0x08063db9 : mov eax, [edi + 0x10]; pop esi; pop edi; jmp eax
> 0x0805f8cf : mov ecx, [eax + 0x58]; mov [ecx + 0x88], edx; ret
> 0x080716b9 : movzx ecx, [esi + ecx]; sub eax, ecx; pop esi; pop edi; ret
> 0x080bf5d2 : mov eax, [ebx + 0x14]; call [ebx]
> 0x080c20dc : mov edx, [ecx + 0x1ea8]; add [edx + eax*2], 1; ret
> 0x080833e8 : mov eax, [edi]; mov [ebx + 0x948], eax; pop ebx; pop esi; pop edi; ret
> 0x080796f1 : mov edx, [esi]; mov [eax], dx; mov eax, [esp + 8]; pop esi; ret
> 0x080c1afc : mov edx, [ebx + 8]; mov [edx], eax; add esp, 4; pop ebx; pop esi; ret
> 0x0806406a : mov edx, [esi + 0x58]; mov [edx + 0x88], ecx; add esp, 4; pop ebx; pop esi; ret
> 0x08093956 : mov ebp, [eax + 0xc]; mov eax, [esp + 8]; mov esp, ecx; jmp edx
> 0x080bf5cf : mov ecx, [ebx + 0x10]; mov eax, [ebx + 0x14]; call [ebx]
> 0x08079720 : mov ecx, [esi]; mov [eax + 4], dh; mov [eax], ecx; mov eax, [esp + 8]; pop esi; ret
> 0x08065669 : mov edx, [eax + 0x24]; mov [eax + 0x24], ecx; mov [eax + 0xc], edx; mov [eax + 4], edx; ret
> 0x0806281b : mov edx, [edi + 0x20]; sub esp, 4; sub edx, eax; push edx; push eax; push edi; call [ebx + 0x38]
> 0x08093953 : mov edi, [eax + 8]; mov ebp, [eax + 0xc]; mov eax, [esp + 8]; mov esp, ecx; jmp edx
> 0x08081bbf : mov ecx, [edx + 0x30]; mov edx, [edx + 0x34]; mov [eax + 0x50], ecx; mov [eax + 0x54], edx; xor eax, eax; ret
> 0x08083d56 : mov ecx, [edx]; mov edx, [esp + 4]; mov [edx], ecx; mov edx, [eax]; mov eax, [esp + 8]; mov [eax], edx; ret
> 0x08093950 : mov esi, [eax + 4]; mov edi, [eax + 8]; mov ebp, [eax + 0xc]; mov eax, [esp + 8]; mov esp, ecx; jmp edx
> 0x0809394e : mov ebx, [eax]; mov esi, [eax + 4]; mov edi, [eax + 8]; mov ebp, [eax + 0xc]; mov eax, [esp + 8]; mov esp, ecx; jmp edx
> 0x080bf5c7 : mov edi, [ebx + 4]; mov [ebx], eax; mov edx, [ebx + 0xc]; mov ecx, [ebx + 0x10]; mov eax, [ebx + 0x14]; call [ebx]
> 0x080bf5c5 : mov esi, [ebx]; mov edi, [ebx + 4]; mov [ebx], eax; mov edx, [ebx + 0xc]; mov ecx, [ebx + 0x10]; mov eax, [ebx + 0x14]; call [ebx]