ropshell> use 1e7470d9d8980aa43ae10f4784802be1 (download)
name         : lab2 (i386/ELF)
base address : 0x430
total gadgets: 57

ropshell> suggest
call
    > 0x000004ac : call eax
    > 0x000004fd : call edx
    > 0x00000452 : call [eax + 0x51]
jmp
    > 0x00000460 : push esp; mov ebx, [esp]; ret
    > 0x000006cb : jmp [edi - 0x18]
load reg
    > 0x000005e3 : pop ebp; ret
    > 0x000005e2 : pop edi; pop ebp; ret
    > 0x000006a9 : popal ; cld ; ret
    > 0x000005e1 : pop ebx; pop edi; pop ebp; ret
    > 0x00000709 : pop esi; pop edi; pop ebp; ret
pop pop ret
    > 0x000005e3 : pop ebp; ret
    > 0x000005e2 : pop edi; pop ebp; ret
    > 0x000005e1 : pop ebx; pop edi; pop ebp; ret
    > 0x00000708 : pop ebx; pop esi; pop edi; pop ebp; ret
stack pivoting
    > 0x000006a8 : lea esp, [ecx - 4]; ret
    > 0x000004b1 : leave ; ret