ropshell> use 6dc548e90a706d06409314d4026c41b1 (download)
name         : PlugY.exe (i386/PE)
base address : 0x401000
total gadgets: 328
ropshell> suggest
call
    > 0x004028f4 : call eax
    > 0x00401228 : call ebx
    > 0x004018ba : call esi
    > 0x00401507 : call edi
    > 0x0040180d : call [ebx]
load reg
    > 0x004023f5 : pop ecx; ret
    > 0x0040164c : pop esi; ret
    > 0x00402362 : pop edi; ret
    > 0x004028d8 : pop ebp; ret
    > 0x004017da : pop esp; ret
pop pop ret
    > 0x004028d8 : pop ebp; ret
    > 0x004029b1 : pop ebx; pop ebp; ret
    > 0x004029b0 : pop esi; pop ebx; pop ebp; ret
    > 0x004029af : pop edi; pop esi; pop ebx; pop ebp; ret
sp lifting
    > 0x00401b63 : add esp, 0x374; ret
    > 0x00401b63 : add esp, 0x374; ret
    > 0x004017d8 : add esp, 0x5c; ret
stack pivoting
    > 0x00402a47 : mov esp, ebp; pop ebp; ret
    > 0x004027c5 : leave ; ret