ropshell> use 2c16d813a61f3bd254c8edf535ecb384 (download)
name         : exp6 (i386/ELF)
base address : 0x8048400
total gadgets: 26

ropshell> suggest
call
    > 0x08048466 : call eax
    > 0x080484a3 : call edx
    > 0x08048663 : call [esi + 0x53]
    > 0x080484fc : call [ebp - 0x77]
    > 0x080484f6 : call [eax - 0x8c17]; call [ebp - 0x77]
load reg
    > 0x08048657 : pop ebp; ret
    > 0x08048656 : pop edi; pop ebp; ret
    > 0x08048655 : pop esi; pop edi; pop ebp; ret
    > 0x08048430 : mov ebx, [esp]; ret
    > 0x08048654 : pop ebx; pop esi; pop edi; pop ebp; ret
pop pop ret
    > 0x08048657 : pop ebp; ret
    > 0x08048656 : pop edi; pop ebp; ret
    > 0x08048655 : pop esi; pop edi; pop ebp; ret
    > 0x08048654 : pop ebx; pop esi; pop edi; pop ebp; ret
stack pivoting
    > 0x08048651 : lea esp, [ebp - 0xc]; pop ebx; pop esi; pop edi; pop ebp; ret
    > 0x08048468 : leave ; ret