ropshell> use 68f7ab3cef06859204cfb8eb975fb52b (download)
name         : vuln1 (i386/RAW)
base address : 0x0
total gadgets: 70

ropshell> suggest
call
    > 0x0000101d : call eax
    > 0x000011cd : call edx
    > 0x000013d8 : call [eax + 0x6a]
    > 0x0000222f : call [ecx + eax]
    > 0x000022ab : call [edx]
jmp
    > 0x00001223 : jmp esp
    > 0x0000112b : push esp; mov ebx, [esp]; ret
load reg
    > 0x00001022 : pop ebx; ret
    > 0x00001226 : pop ebp; ret
    > 0x00001465 : popal ; cld ; ret
    > 0x00001468 : mov eax, [esp]; ret
    > 0x0000112d : mov ebx, [esp]; ret
pop pop ret
    > 0x00001226 : pop ebp; ret
    > 0x00001462 : pop ebx; pop ebp; lea esp, [ecx - 4]; ret
    > 0x00001461 : pop ecx; pop ebx; pop ebp; lea esp, [ecx - 4]; ret
stack pivoting
    > 0x00001464 : lea esp, [ecx - 4]; ret
    > 0x0000145e : lea esp, [ebp - 8]; pop ecx; pop ebx; pop ebp; lea esp, [ecx - 4]; ret
    > 0x00001185 : leave ; ret