ropshell> use baed91a9080cd181b577639419e224c0 (download)
name         : esrv (i386/ELF)
base address : 0x80486a0
total gadgets: 51

ropshell> suggest
call
    > 0x08048703 : call eax
    > 0x0804873d : call edx
    > 0x08048812 : call [eax - 1]
    > 0x0804879a : call [ebp - 0x77]
jmp
    > 0x080488d7 : jmp esp
load reg
    > 0x080487a7 : pop ebx; ret
    > 0x080487ac : pop edx; ret
    > 0x08048c1b : pop ebp; ret
    > 0x08048c1a : pop edi; pop ebp; ret
    > 0x08048bb2 : popal ; cld ; ret
pop pop ret
    > 0x08048c1b : pop ebp; ret
    > 0x08048c1a : pop edi; pop ebp; ret
    > 0x08048c19 : pop esi; pop edi; pop ebp; ret
    > 0x08048c18 : pop ebx; pop esi; pop edi; pop ebp; ret
stack pivoting
    > 0x08048bb1 : lea esp, [ecx - 4]; ret
    > 0x08048bab : lea esp, [ebp - 8]; pop ecx; pop ebx; pop ebp; lea esp, [ecx - 4]; ret
    > 0x080487f9 : leave ; ret