ropshell> use f3d27287b482d8f31801dc62e77dbee2 (download)
name         : Angrydoraemon (i386/ELF)
base address : 0x80487a0
total gadgets: 43

ropshell> suggest
call
    > 0x08048806 : call eax
    > 0x08048843 : call edx
    > 0x08049563 : call [esi + 0x53]
    > 0x0804889c : call [ebp - 0x77]
    > 0x08048896 : call [eax - 0x8c17]; call [ebp - 0x77]
jmp
    > 0x08048db2 : jmp [esi + 0x73]
load reg
    > 0x08048b2e : pop ebp; ret
    > 0x08048b2d : pop edi; pop ebp; ret
    > 0x08048b2c : pop ebx; pop edi; pop ebp; ret
    > 0x080495bd : pop esi; pop edi; pop ebp; ret
    > 0x080487d0 : mov ebx, [esp]; ret
pop pop ret
    > 0x08048b2e : pop ebp; ret
    > 0x08048b2d : pop edi; pop ebp; ret
    > 0x08048b2c : pop ebx; pop edi; pop ebp; ret
    > 0x080495bc : pop ebx; pop esi; pop edi; pop ebp; ret
stack pivoting
    > 0x08048808 : leave ; ret