ropshell> use e5d432e9bceb5cb71b71258f1046dd67 (download) name : qwet.exe (i386/RAW) base address : 0x0 total gadgets: 3245
ropshell> suggest call > 0x00008a15 : call eax > 0x0000174d : call ebx > 0x00004e31 : call ecx > 0x00000df1 : call esi > 0x00001917 : call edi jmp > 0x00009176 : push esp; ret > 0x000073d5 : jmp eax > 0x00024948 : jmp ebx > 0x00019cdb : jmp ecx > 0x00025135 : jmp edx load mem > 0x000147f4 : mov eax, [edx + 4]; ret > 0x0001600d : mov eax, [ebp + 0xc]; pop ebp; ret > 0x00008dcf : mov ebp, [ebx + 0x20]; jmp eax > 0x00003fbf : mov eax, [esi]; pop esi; mov esp, ebp; pop ebp; ret > 0x00062149 : mov edx, [ebx]; jmp [eax + 0x72] load reg > 0x00019dd7 : pop eax; ret > 0x00003ad0 : pop ebx; ret > 0x00000414 : pop ecx; ret > 0x00013d2e : pop edx; ret > 0x00002eee : pop esi; ret pop pop ret > 0x00019dd7 : pop eax; ret > 0x0000a41e : pop eax; pop ebp; ret > 0x0000dcf1 : pop ebx; pop edi; pop ebp; ret > 0x0000d9d5 : pop eax; pop edi; pop esi; pop ebp; ret > 0x0000e339 : pop ecx; pop edi; pop ebx; pop esi; pop ebp; ret sp lifting > 0x0000dbda : add esp, 0x10; ret > 0x0000dbda : add esp, 0x10; ret stack pivoting > 0x00009c90 : xchg eax, esp; ret > 0x000150f6 : mov esp, ebx; pop ebx; ret > 0x00000700 : mov esp, ebp; pop ebp; ret > 0x000047f3 : lea esp, [ebp + edi*8 - 1]; call [ecx - 1] > 0x00004e54 : lea esp, [esp + edi*8 - 1]; dec [ebp - 0x33f7b]; call [eax - 1] write mem > 0x0000696a : add [eax], ebp; ret 0x41 > 0x000142b0 : adc [edx], eax; ret > 0x0000459d : add [ebx + 0x3b6602c1], eax; ret > 0x00008cea : add [esi + 0x5d], ebx; ret > 0x00024c08 : adc [ebx], edx; mov bh, 6; ret