ropshell> use 1dbbd1e9643de8084d5c98e41b117bf8 (download)
name         : ch18 (i386/ELF)
base address : 0x80485e0
total gadgets: 43

ropshell> suggest
call
    > 0x08048646 : call eax
    > 0x080489f2 : call ecx
    > 0x08048683 : call edx
    > 0x08048d43 : call [esi + 0x53]
    > 0x080486dc : call [ebp - 0x77]
jmp
    > 0x08048626 : push esp; mov al, 4; or [ebx + 0x17706f8], al; ret
load reg
    > 0x08048d9f : pop ebp; ret
    > 0x08048d9e : pop edi; pop ebp; ret
    > 0x08048d9d : pop esi; pop edi; pop ebp; ret
    > 0x08048610 : mov ebx, [esp]; ret
    > 0x08048d9c : pop ebx; pop esi; pop edi; pop ebp; ret
pop pop ret
    > 0x08048d9f : pop ebp; ret
    > 0x08048d9e : pop edi; pop ebp; ret
    > 0x08048d9d : pop esi; pop edi; pop ebp; ret
    > 0x08048d9c : pop ebx; pop esi; pop edi; pop ebp; ret
stack pivoting
    > 0x08048648 : leave ; ret