ropshell> use cdd4395fb735e6c3bdc4d597f54c364f (download) name : ret2win (i386/RAW) base address : 0x0 total gadgets: 41
ropshell> suggest call > 0x00000538 : call eax > 0x0000098f : call [eax] > 0x00000a33 : call [ecx] > 0x000007ca : call [esp + ebx*8] jmp > 0x00000611 : jmp eax > 0x00000a93 : jmp [ebp] load reg > 0x000007e3 : pop edi; ret > 0x00000618 : pop ebp; ret > 0x000007e1 : pop esi; inc ecx; pop edi; ret > 0x0000060d : pop eax; adc [eax], ah; jmp eax pop pop ret > 0x00000618 : pop ebp; ret stack pivoting > 0x00000754 : leave ; ret