ropshell> use c3d11f960dfbbafd2e6d5c87414e987e (download)
name         : challt (i386/ELF)
base address : 0x1090
total gadgets: 40

ropshell> suggest
call
    > 0x000010fc : call eax
    > 0x0000114d : call edx
    > 0x000011d7 : call [eax - 0x18]
load reg
    > 0x00001346 : popal ; cld ; ret
    > 0x000010c0 : mov ebx, [esp]; ret
    > 0x000011b9 : mov edx, [esp]; ret
    > 0x00001344 : pop ebp; lea esp, [ecx - 4]; ret
    > 0x00001343 : pop ebx; pop ebp; lea esp, [ecx - 4]; ret
pop pop ret
    > 0x00001344 : pop ebp; lea esp, [ecx - 4]; ret
    > 0x00001343 : pop ebx; pop ebp; lea esp, [ecx - 4]; ret
    > 0x00001342 : pop ecx; pop ebx; pop ebp; lea esp, [ecx - 4]; ret
stack pivoting
    > 0x00001345 : lea esp, [ecx - 4]; ret
    > 0x0000133f : lea esp, [ebp - 8]; pop ecx; pop ebx; pop ebp; lea esp, [ecx - 4]; ret
    > 0x00001101 : leave ; ret