ropshell> use cd889d78b8b5a30624126f9e7e16834b (download) name : rop2 (i386/ELF) base address : 0x80490a0 total gadgets: 6669
ropshell> suggest "load reg" > 0x080b020a : pop eax; ret > 0x0804df6e : pop ebx; ret > 0x0804adaa : pop esi; ret > 0x0804b1bf : pop edi; ret > 0x08049799 : pop ebp; ret > 0x080b01ba : pop esp; ret > 0x0805e6e9 : pop edx; pop ebx; ret > 0x08063bb1 : pop ecx; add al, 0xf6; ret > 0x0804a8ef : mov eax, [esp]; ret > 0x08049b97 : mov ebx, [esp]; ret > 0x0805f88d : mov ecx, [esp]; ret > 0x0805816a : mov edx, [esp]; ret > 0x0804a8f3 : mov esi, [esp]; ret > 0x0804aca7 : mov edi, [esp]; ret > 0x0804f95f : mov ebp, [esp]; ret > 0x080a4c61 : popal ; add [eax], al; pop edx; pop ecx; pop eax; jmp [eax]