ropshell> use e7f8665936ee7011654bea6aca0c6d06 (download)
name         : ret2syscall (i386/ELF)
base address : 0x80482b0
total gadgets: 6731

ropshell> suggest "load reg"
> 0x080bb196 : pop eax; ret
> 0x0804d436 : pop ebx; ret
> 0x0806eb6a : pop edx; ret
> 0x08049a95 : pop esi; ret
> 0x0804846f : pop edi; ret
> 0x0804838e : pop ebp; ret
> 0x080bb146 : pop esp; ret
> 0x0806eb91 : pop ecx; pop ebx; ret
> 0x08048d30 : mov ebx, [esp]; ret
> 0x080bb6df : mov ecx, [esp]; ret
> 0x08054ff0 : mov eax, [esp + 4]; ret
> 0x0808590c : popal ; add [eax], al; add esp, 0x1c; ret
> 0x080b4fe7 : mov edx, [esp + 0x18]; mov eax, edx; add esp, 0x2c; ret
> 0x08054299 : mov esi, [esp + 0x24]; mov eax, [ebx + 0x94]; mov [esp], ebx; call [eax + 0x30]
> 0x080965e1 : mov edi, [esp + 0x30]; mov eax, [esp + 0x2c]; mov [esp], eax; call [edi + 0x24]
> 0x08051ccf : mov ebp, [esp + 0x14]; mov [esp + 0xc], 0; mov [esp], esi; mov [esp + 4], edi; mov [esp + 8], ebp; call [eax + 0x40]