ropshell> use 1be0c3a992b01e1edd41e9d2a9dbf6fd (download)
name         : a.out (i386/ELF)
base address : 0x8048420
total gadgets: 29

ropshell> suggest
call
    > 0x08048483 : call eax
    > 0x080484bd : call edx
    > 0x08048598 : call [eax + 0x68]
    > 0x080485c3 : call [esi + 0x53]
load reg
    > 0x0804861f : pop ebp; ret
    > 0x0804861e : pop edi; pop ebp; ret
    > 0x080485b3 : popal ; cld ; ret
    > 0x0804861d : pop esi; pop edi; pop ebp; ret
    > 0x08048450 : mov ebx, [esp]; ret
pop pop ret
    > 0x0804861f : pop ebp; ret
    > 0x0804861e : pop edi; pop ebp; ret
    > 0x0804861d : pop esi; pop edi; pop ebp; ret
    > 0x0804861c : pop ebx; pop esi; pop edi; pop ebp; ret
stack pivoting
    > 0x080485b2 : lea esp, [ecx - 4]; ret
    > 0x080485ac : lea esp, [ebp - 8]; pop ecx; pop ebx; pop ebp; lea esp, [ecx - 4]; ret