ropshell> use cecd42a89999e1e5e78311de5488bf1c (download)
name         : lab4B (i386/ELF)
base address : 0x8048590
total gadgets: 29

ropshell> suggest
call
    > 0x080485f6 : call eax
    > 0x08048633 : call edx
    > 0x08048743 : call [esi + 0x53]
    > 0x0804868c : call [ebp - 0x77]
    > 0x08048686 : call [eax - 0x8c17]; call [ebp - 0x77]
jmp
    > 0x08048734 : jmp [esi - 0x70]
load reg
    > 0x0804879f : pop ebp; ret
    > 0x0804879e : pop edi; pop ebp; ret
    > 0x0804879d : pop esi; pop edi; pop ebp; ret
    > 0x080485c0 : mov ebx, [esp]; ret
    > 0x0804879c : pop ebx; pop esi; pop edi; pop ebp; ret
pop pop ret
    > 0x0804879f : pop ebp; ret
    > 0x0804879e : pop edi; pop ebp; ret
    > 0x0804879d : pop esi; pop edi; pop ebp; ret
    > 0x0804879c : pop ebx; pop esi; pop edi; pop ebp; ret
stack pivoting
    > 0x080485f8 : leave ; ret