We shoud have an option to export all calldata to hit all branches

[msooseth]

In talk with Alex from Recon, it came up that it would be very helpful to have an option to emit all calldatas to reach all endstates (also ones that aren't assert-fail). Of course not all can be computed within reasonable time, but the ones that can be, we should emit them. This because these calldatas can then be picked up as corpus elements for feedback-fuzzers such as Echidna, and used to further explore parts of the search space, that these fuzzers could otherwise not reach.

Ping @GalloDaSballo from getrecon.xyz

[gustavo-grieco]

Related with #710. In general, when you have a fuzzing campaign, you already know which code locations you visited, so you can just solve the endstate that you know you don't have in your corpus. This is in the roadmap for echidna.