ropshell> use 100bad1728cc6239217f4d1c02b99b93 (download)
name         : 2.4 (i386/ELF)
base address : 0x8048850
total gadgets: 53

ropshell> suggest
call
    > 0x080488ff : call eax
    > 0x0804900e : call [eax + 0x5b44c483]; pop ebp; ret
jmp
    > 0x08048ef1 : jmp esp
    > 0x08048d60 : jmp [esi - 0x77]
load reg
    > 0x080488d3 : pop ebp; ret
    > 0x080488d2 : pop ebx; pop ebp; ret
    > 0x08048adb : pop edi; pop ebp; ret
    > 0x0804907d : pop esi; pop edi; pop ebp; ret
    > 0x08049092 : mov ebx, [esp]; ret
pop pop ret
    > 0x080488d3 : pop ebp; ret
    > 0x080488d2 : pop ebx; pop ebp; ret
    > 0x08048ada : pop ebx; pop edi; pop ebp; ret
    > 0x0804907c : pop ebx; pop esi; pop edi; pop ebp; ret
stack pivoting
    > 0x08048901 : leave ; ret
write mem
    > 0x080488ce : add [ebx + 0x5d5b04c4], eax; ret