ropshell> use a64364e9226cb992f750b46d1ddde79b (download)
name         : challenge_32_bits (i386/ELF)
base address : 0x80490d0
total gadgets: 51

ropshell> suggest
call
    > 0x0804933c : call [eax - 0x3603a275]; ret
    > 0x08049150 : call eax
    > 0x0804919d : call edx
jmp
    > 0x08049101 : push esp; mov ebx, [esp]; ret
load reg
    > 0x0804948b : pop ebp; ret
    > 0x0804948a : pop edi; pop ebp; ret
    > 0x08049429 : popal ; cld ; ret
    > 0x08049489 : pop esi; pop edi; pop ebp; ret
    > 0x08049103 : mov ebx, [esp]; ret
pop pop ret
    > 0x0804948b : pop ebp; ret
    > 0x0804948a : pop edi; pop ebp; ret
    > 0x08049489 : pop esi; pop edi; pop ebp; ret
    > 0x08049488 : pop ebx; pop esi; pop edi; pop ebp; ret
stack pivoting
    > 0x08049428 : lea esp, [ecx - 4]; ret
    > 0x08049422 : lea esp, [ebp - 8]; pop ecx; pop ebx; pop ebp; lea esp, [ecx - 4]; ret
    > 0x08049155 : leave ; ret