ropshell> use b6b54db931f001203eeef2a6f8b07555 (download)
name         : vcat6 (i386/ELF)
base address : 0x10e0
total gadgets: 87

ropshell> suggest
call
    > 0x0000115c : call eax
    > 0x000011ad : call edx
    > 0x00001102 : call [eax + 0x51]
    > 0x000012f2 : call [edx + 0x50]
    > 0x00001238 : call [ebp - 0x77]
jmp
    > 0x00001110 : push esp; mov ebx, [esp]; ret
load mem
    > 0x000015ac : mov eax, [ebx + 0x2014]; sub esp, 8; push eax; lea eax, [ebp - 0x4c]; push eax; mov eax, [ebp - 0xc]; call eax
load reg
    > 0x0000156c : pop ebp; ret
    > 0x00001742 : pop edi; pop ebp; ret
    > 0x000016e0 : popal ; cld ; ret
    > 0x00001741 : pop esi; pop edi; pop ebp; ret
    > 0x000016e3 : mov eax, [esp]; ret
pop pop ret
    > 0x0000156c : pop ebp; ret
    > 0x00001742 : pop edi; pop ebp; ret
    > 0x00001741 : pop esi; pop edi; pop ebp; ret
    > 0x00001740 : pop ebx; pop esi; pop edi; pop ebp; ret
stack pivoting
    > 0x0000122e : xchg ecx, esp; ret
    > 0x000016df : lea esp, [ecx - 4]; ret
    > 0x000016d9 : lea esp, [ebp - 8]; pop ecx; pop ebx; pop ebp; lea esp, [ecx - 4]; ret
    > 0x00001161 : leave ; ret