ropshell> use 4adef160e45df91fe18773f187f7189c (download)
name         : server (i386/ELF)
base address : 0x8048470
total gadgets: 47

ropshell> suggest
call
    > 0x0804859f : call [edx - 0x77]; ret
    > 0x080484f0 : call eax
    > 0x0804853d : call edx
    > 0x08048492 : call [eax + 0x51]
jmp
    > 0x080484a1 : push esp; mov ebx, [esp]; ret
load reg
    > 0x080486df : pop ebp; ret
    > 0x080486de : pop ebx; pop ebp; ret
    > 0x080488ea : pop edi; pop ebp; ret
    > 0x08048697 : popal ; cld ; ret
    > 0x080488e9 : pop esi; pop edi; pop ebp; ret
pop pop ret
    > 0x080486df : pop ebp; ret
    > 0x080486de : pop ebx; pop ebp; ret
    > 0x080488e9 : pop esi; pop edi; pop ebp; ret
    > 0x080488e8 : pop ebx; pop esi; pop edi; pop ebp; ret
stack pivoting
    > 0x08048696 : lea esp, [ecx - 4]; ret
    > 0x08048690 : lea esp, [ebp - 8]; pop ecx; pop ebx; pop ebp; lea esp, [ecx - 4]; ret
    > 0x080484f5 : leave ; ret
write mem
    > 0x080486d3 : add [ebx + 0x7e3ff87d], eax; ficom [eax + 0x5b10c483]; pop ebp; ret