ropshell> use 4547677fe0407ffc12937106101df1aa (download)
name         : 7 (i386/ELF)
base address : 0x8049030
total gadgets: 4976

ropshell> suggest
call
    > 0x08049a50 : call eax
    > 0x08059bc9 : call ebx
    > 0x0805394b : call ecx
    > 0x08049a9d : call edx
    > 0x080675a3 : call esi
jmp
    > 0x080b821a : push esp; ret
    > 0x080590bb : jmp eax
    > 0x0804998f : jmp ebx
    > 0x0804f06d : jmp ecx
    > 0x08065368 : jmp edx
load mem
    > 0x080b8184 : mov eax, [edx + 0x4c]; ret
    > 0x080a334d : mov eax, [edx]; pop ebx; pop esi; ret
    > 0x080a416f : mov edx, [eax]; mov eax, edx; ret
    > 0x0805e970 : mov eax, [ecx]; mov [edx], eax; ret
    > 0x080b6039 : mov eax, [ebx + 0x5e5b4cc4]; pop edi; pop ebp; ret
load reg
    > 0x080b820a : pop eax; ret
    > 0x0805bef0 : pop ebx; ret
    > 0x0807e1b2 : pop ecx; ret
    > 0x0805f6cc : pop edx; ret
    > 0x0804ac3a : pop esi; ret
pop pop ret
    > 0x080b820a : pop eax; ret
    > 0x0806317e : pop ebx; pop edi; ret
    > 0x0805de08 : pop eax; pop edx; pop ebx; ret
    > 0x080847ba : pop eax; pop ebx; pop esi; pop edi; ret
    > 0x0805c387 : pop esp; pop ebx; pop esi; pop edi; pop ebp; ret
sp lifting
    > 0x0804dc99 : add esp, 0x1c; ret
    > 0x0804dc99 : add esp, 0x1c; ret
    > 0x080b6196 : add esp, 0x20; ret
    > 0x0809a5a9 : add esp, 0x4c; ret
stack pivoting
    > 0x0804a748 : xchg eax, esp; ret
    > 0x08088f65 : lea esp, [eax - 0x76000037]; ret
    > 0x08049c2a : lea esp, [ecx - 4]; ret
    > 0x080a6378 : mov esp, ecx; jmp edx
    > 0x08085da9 : lea esp, [edi - 8]; pop edi; ret
syscall
    > 0x0806b5a0 : int 0x80; ret
    > 0x0809a309 : call gs:[0x10]; ret
write mem
    > 0x0805724a : add [ecx], eax; ret
    > 0x08050982 : add [ecx], edi; ret
    > 0x080b2df4 : add [edi], ecx; dec ecx; ret
    > 0x080673c6 : add [ebx + 0x5e5b04c4], eax; ret
    > 0x08055d3d : add [ebp + 0x440f9304], ecx; ret