ropshell> use e32753aabb8677b24a6fe2ae0fb006f8 (download)
name         : badchars32 (i386/ELF)
base address : 0x8048540
total gadgets: 36

ropshell> suggest
call
    > 0x080485a3 : call eax
    > 0x080485dd : call edx
load reg
    > 0x08048897 : pop ecx; ret
    > 0x0804889a : pop edi; ret
    > 0x080488fb : pop ebp; ret
    > 0x08048896 : pop ebx; pop ecx; ret
    > 0x08048899 : pop esi; pop edi; ret
pop pop ret
    > 0x080488fb : pop ebp; ret
    > 0x08048896 : pop ebx; pop ecx; ret
    > 0x080488f9 : pop esi; pop edi; pop ebp; ret
    > 0x080488f8 : pop ebx; pop esi; pop edi; pop ebp; ret
stack pivoting
    > 0x080486b2 : lea esp, [ecx - 4]; ret
    > 0x080487a7 : leave ; ret