ropshell> use 0d2e302910fccc2094dcab8e24739dc8 (download)
name         : TEFW.exe (i386/PE)
base address : 0x401000
total gadgets: 19404

ropshell> suggest
call
    > 0x004025bc : call eax
    > 0x004063e3 : call ebx
    > 0x004026ef : call ecx
    > 0x004025c8 : call edx
    > 0x004021a3 : call esi
jmp
    > 0x0040280a : push esp; ret
    > 0x004153c0 : jmp eax
    > 0x004045fd : jmp ebx
    > 0x00445df8 : jmp ecx
    > 0x00409fbd : jmp edx
load mem
    > 0x00458bf4 : mov eax, [ebp]; ret
    > 0x0040772c : mov ecx, [ebx]; ret
    > 0x00449668 : mov eax, [esi]; pop esi; ret
    > 0x00403436 : mov eax, [ecx + 0x10]; ret
    > 0x0040939d : mov eax, [edx + 0x350]; ret 4
load reg
    > 0x0041bca3 : pop eax; ret
    > 0x00406a64 : pop ebx; ret
    > 0x004021aa : pop ecx; ret
    > 0x004020c5 : pop esi; ret
    > 0x0041cd0e : pop edi; ret
pop pop ret
    > 0x0041bca3 : pop eax; ret
    > 0x0047e2bf : pop eax; pop ebp; ret
    > 0x0044ca68 : pop eax; pop ecx; pop ecx; ret
    > 0x004654b3 : pop eax; pop edi; pop esi; pop ebp; ret
    > 0x0047e299 : pop eax; pop edi; pop esi; pop ebx; pop ebp; ret
sp lifting
    > 0x00402166 : add esp, 0x1004; ret
    > 0x00402166 : add esp, 0x1004; ret
    > 0x00426b44 : add esp, 0x204; ret
    > 0x00409793 : add esp, 0x30; ret
    > 0x0040124a : add esp, 0x404; ret
stack pivoting
    > 0x00404681 : xchg eax, esp; ret
    > 0x00406d95 : mov esp, ebp; pop ebp; ret
    > 0x00464b5f : mov esp, ecx; pop ecx; call eax; ret
    > 0x0043f7cc : push ecx; pop esp; pop edi; pop esi; ret 0x18
    > 0x004613a0 : push eax; pop esp; mov eax, edi; pop edi; pop esi; ret
write mem
    > 0x00408297 : adc [ebx], ecx; ret
    > 0x0045b05f : adc [ebx], edi; ret
    > 0x00404b15 : add [edx], edi; ret
    > 0x004511e9 : adc [ebp], eax; ret
    > 0x0040c70d : add [esi + 0x5f], ebx; ret 4