ropshell> use ca9d1a667e2467e4682012f045bfeb74 (download)
name         : lab5B (i386/ELF)
base address : 0x8049090
total gadgets: 7088

ropshell> suggest "jmp"
> 0x080aa616 : push esp; ret
> 0x080527e7 : jmp eax
> 0x08049988 : jmp ebx
> 0x0805e736 : jmp ecx
> 0x0804efb9 : jmp edx
> 0x0804a55d : jmp edi
> 0x0804f118 : jmp ebp
> 0x0807ef81 : jmp [eax]
> 0x08053da0 : jmp [ebx]
> 0x08053dc0 : jmp [ecx]
> 0x0807b55d : jmp [edx]
> 0x0805854d : jmp [esi]
> 0x08098b1a : jmp [edi + 0x6d]
> 0x0807c3af : jmp [ebp + 3]