ropshell> use 5b3cc79e0cc8510d48524bf583b24b02 (download)
name         : mission6 (i386/ELF)
base address : 0x80480d8
total gadgets: 22

ropshell> suggest
call
    > 0x08048190 : call [eax + 0x6a]
load reg
    > 0x08048120 : pop ebp; ret
    > 0x0804811f : pop ebx; pop ebp; ret
    > 0x08048251 : popal ; cld ; ret
    > 0x0804824d : pop ecx; pop ebx; pop ebp; lea esp, [ecx - 4]; ret
pop pop ret
    > 0x08048120 : pop ebp; ret
    > 0x0804811f : pop ebx; pop ebp; ret
    > 0x0804824d : pop ecx; pop ebx; pop ebp; lea esp, [ecx - 4]; ret
stack pivoting
    > 0x08048250 : lea esp, [ecx - 4]; ret
    > 0x0804824a : lea esp, [ebp - 8]; pop ecx; pop ebx; pop ebp; lea esp, [ecx - 4]; ret
syscall
    > 0x08048130 : int 0x80; nop ; pop ebx; pop ebp; ret