ropshell> use 0497f8f2e3a4c3292e1f742bad0120e6 (download)
name         : chall1_symbols (i386/RAW)
base address : 0x0
total gadgets: 88

ropshell> suggest
call
    > 0x00000750 : call eax
    > 0x0000079d : call edx
    > 0x000006f2 : call [eax + 0x51]
    > 0x00000d53 : call [ebx - 0x7d]
    > 0x000008b3 : call [ebp - 0x77]
jmp
    > 0x00000701 : push esp; mov ebx, [esp]; ret
load reg
    > 0x00000585 : pop ebx; ret
    > 0x00000a3a : pop ebp; ret
    > 0x00000a39 : pop esi; pop ebp; ret
    > 0x00000d2a : pop edi; pop ebp; ret
    > 0x00000cca : popal ; cld ; ret
pop pop ret
    > 0x00000a3a : pop ebp; ret
    > 0x00000d2a : pop edi; pop ebp; ret
    > 0x00000a38 : pop ebx; pop esi; pop ebp; ret
    > 0x00000d28 : pop ebx; pop esi; pop edi; pop ebp; ret
stack pivoting
    > 0x00000cc9 : lea esp, [ecx - 4]; ret
    > 0x00000a35 : lea esp, [ebp - 8]; pop ebx; pop esi; pop ebp; ret
    > 0x00000755 : leave ; ret