ropshell> use 5d63b69dccbd0d46bcf3e559bf79b4a7 (download)
name         : watermelon.dms (i386/ELF)
base address : 0x80485d0
total gadgets: 58

ropshell> suggest
call
    > 0x08048636 : call eax
    > 0x08048673 : call edx
    > 0x08049a73 : call [esi + 0x53]
    > 0x080486cc : call [ebp - 0x77]
    > 0x080486c6 : call [eax - 0x8c17]; call [ebp - 0x77]
jmp
    > 0x08049544 : jmp eax
    > 0x08048932 : jmp [ebp - 0x5f]
load reg
    > 0x080487a0 : pop ebp; ret
    > 0x0804879f : pop ebx; pop ebp; ret
    > 0x08048f0e : pop esi; pop ebp; ret
    > 0x080495ae : pop edi; pop ebp; ret
    > 0x08048600 : mov ebx, [esp]; ret
pop pop ret
    > 0x080487a0 : pop ebp; ret
    > 0x0804879f : pop ebx; pop ebp; ret
    > 0x080495ad : pop ebx; pop edi; pop ebp; ret
    > 0x08049acc : pop ebx; pop esi; pop edi; pop ebp; ret
stack pivoting
    > 0x080495aa : lea esp, [ebp - 8]; pop ebx; pop edi; pop ebp; ret
    > 0x08048638 : leave ; ret
write mem
    > 0x08049537 : add [ebx + 0x487705f8], eax; mov eax, [eax*4 + 0x8049b7c]; jmp eax