ropshell> use 9c2d399093753a35bd07d9316ecb6685 (download)
name         : level3 (i386/ELF)
base address : 0x840
total gadgets: 74

ropshell> suggest
call
    > 0x000008bf : call eax
    > 0x0000090d : call edx
    > 0x00000862 : call [eax + 0x51]
jmp
    > 0x00000870 : push esp; mov ebx, [esp]; ret
load reg
    > 0x000009e1 : pop ebp; ret
    > 0x000009e0 : pop ebx; pop ebp; ret
    > 0x0000105a : pop edi; pop ebp; ret
    > 0x00000fef : popal ; cld ; ret
    > 0x00001059 : pop esi; pop edi; pop ebp; ret
pop pop ret
    > 0x000009e1 : pop ebp; ret
    > 0x000009e0 : pop ebx; pop ebp; ret
    > 0x00001059 : pop esi; pop edi; pop ebp; ret
    > 0x00001058 : pop ebx; pop esi; pop edi; pop ebp; ret
    > 0x00000fe9 : pop ecx; pop ebx; pop esi; pop edi; pop ebp; lea esp, [ecx - 4]; ret
stack pivoting
    > 0x00000fee : lea esp, [ecx - 4]; ret
    > 0x00000915 : leave ; ret
syscall
    > 0x00000a4a : int 0x80; nop ; pop ebp; ret