ropshell> use 24777d07d67497a1437e33dfbd3d1ebe (download) name : lab7A (i386/ELF) base address : 0x80482b0 total gadgets: 6769
ropshell> suggest "load reg" > 0x080bd226 : pop eax; ret > 0x0804dcb6 : pop ebx; ret > 0x0807030a : pop edx; ret > 0x0804a2d5 : pop esi; ret > 0x0804846f : pop edi; ret > 0x0804838e : pop ebp; ret > 0x080bd1d6 : pop esp; ret > 0x08070331 : pop ecx; pop ebx; ret > 0x08048d50 : mov ebx, [esp]; ret > 0x080bd76f : mov ecx, [esp]; ret > 0x080565a0 : mov eax, [esp + 4]; ret > 0x0809180b : popal ; cmp al, [eax]; add [ecx], bh; ret > 0x080ba2f7 : mov edx, [esp + 0x18]; mov eax, edx; add esp, 0x2c; ret > 0x08055849 : mov esi, [esp + 0x24]; mov eax, [ebx + 0x94]; mov [esp], ebx; call [eax + 0x30] > 0x0809fb41 : mov edi, [esp + 0x30]; mov eax, [esp + 0x2c]; mov [esp], eax; call [edi + 0x24] > 0x0805320f : mov ebp, [esp + 0x14]; mov [esp + 0xc], 0; mov [esp], esi; mov [esp + 4], edi; mov [esp + 8], ebp; call [eax + 0x40]