ropshell> use 54ca9391f382047eb9fb6acc51b2ea0d (download)
name         : lab6A (i386/ELF)
base address : 0x780
total gadgets: 55

ropshell> suggest
call
    > 0x00000808 : call eax
    > 0x00000855 : call ecx
    > 0x000007a2 : call [eax + 0x51]
    > 0x00000dd3 : call [esi + 0x53]
    > 0x000008ea : call [ebp - 0x77]
jmp
    > 0x000007b0 : push esp; mov ebx, [esp]; ret
load reg
    > 0x000007f9 : pop ebp; ret
    > 0x000007f8 : pop ebx; pop ebp; ret
    > 0x00000bdf : pop edi; pop ebp; ret
    > 0x00000bde : pop esi; pop edi; pop ebp; ret
    > 0x000007b2 : mov ebx, [esp]; ret
pop pop ret
    > 0x000007f9 : pop ebp; ret
    > 0x000007f8 : pop ebx; pop ebp; ret
    > 0x00000bde : pop esi; pop edi; pop ebp; ret
    > 0x00000bdd : pop ebx; pop esi; pop edi; pop ebp; ret
stack pivoting
    > 0x00000dc2 : leave ; ret
syscall
    > 0x00000976 : int 0x80; pop ebp; ret
write mem
    > 0x0000089e : add [ebx + 0x5d5b14c4], eax; ret