ropshell> use 26aeadc5a715313a32a701e57ab3a529 (download)
name         : plc.elf (i386/ELF)
base address : 0x8048540
total gadgets: 50

ropshell> suggest
call
    > 0x080485a3 : call eax
    > 0x080485dd : call edx
    > 0x080487f6 : call [eax - 0x18]
jmp
    > 0x08048b63 : jmp esp
load reg
    > 0x08048c6b : pop ebp; ret
    > 0x08048c6a : pop edi; pop ebp; ret
    > 0x08048780 : popal ; cld ; ret
    > 0x08048c69 : pop esi; pop edi; pop ebp; ret
    > 0x08048570 : mov ebx, [esp]; ret
pop pop ret
    > 0x08048c6b : pop ebp; ret
    > 0x08048c6a : pop edi; pop ebp; ret
    > 0x08048c69 : pop esi; pop edi; pop ebp; ret
    > 0x08048c68 : pop ebx; pop esi; pop edi; pop ebp; ret
sp lifting
    > 0x08048b60 : add esp, 0x10; jmp esp
    > 0x08048b60 : add esp, 0x10; jmp esp
stack pivoting
    > 0x0804877f : lea esp, [ecx - 4]; ret
    > 0x080488a5 : leave ; ret