ropshell> use e22d1c83c8baea386a09a0dfbb2833a1 (download) name : upload (i386/ELF) base address : 0x8048140 total gadgets: 4521
ropshell> suggest call > 0x08048197 : call eax > 0x08060208 : call ebx > 0x080500ac : call ecx > 0x080481d4 : call edx > 0x0805cae3 : call esi jmp > 0x08067701 : push esp; ret > 0x08048972 : jmp eax > 0x080a985c : jmp ecx > 0x080889ff : jmp edx > 0x080ad72d : jmp edi load mem > 0x08076a8c : movzx eax, [ecx]; pop ebp; ret > 0x080ab580 : mov eax, [edx + 0x4c]; ret > 0x08048b1c : mov eax, [ebp + 8]; pop ebp; ret > 0x080ac070 : mov eax, [edx]; add esp, 8; pop ebx; ret > 0x0804cee4 : mov eax, [ecx + 8]; sub eax, edx; pop ebp; ret load reg > 0x080ab606 : pop eax; ret > 0x0805b6ae : pop ebx; ret > 0x0805b686 : pop edx; ret > 0x08059ee9 : pop esi; ret > 0x08058e98 : pop edi; ret pop pop ret > 0x080ab606 : pop eax; ret > 0x08048d3e : pop ebx; pop ebp; ret > 0x08089575 : pop ebp; pop esi; pop edi; ret > 0x0808916a : pop eax; pop ebx; pop esi; pop edi; ret > 0x0808850c : pop eax; pop ebx; pop esi; pop edi; pop ebp; ret sp lifting > 0x080ab138 : add esp, 0x10c; ret > 0x080ab138 : add esp, 0x10c; ret > 0x080a8f97 : add esp, 0x2c; ret > 0x08087320 : add esp, 0x3c; ret stack pivoting > 0x0807daa6 : xchg eax, esp; ret > 0x080ab86e : mov esp, ecx; ret > 0x0804a80e : mov esp, ebp; pop ebp; ret > 0x08048782 : lea esp, [ecx - 4]; ret > 0x080873bf : lea esp, [ebp - 8]; pop ebx; pop esi; pop ebp; ret syscall > 0x0805bdb0 : int 0x80; ret write mem > 0x0804b889 : add [eax], edi; ret > 0x0807f67a : add [ecx], eax; ret > 0x0805baa7 : add [ecx], edi; ret > 0x0805166b : add [ebx + 0x5d5b08c4], eax; ret > 0x0808aadb : adc [ecx], ebx; add cl, cl; ret