ropshell> use ff74c0b3c6ad10144db7be734607dfc2 (download)
name         : vuln3 (i386/ELF)
base address : 0x1090
total gadgets: 28

ropshell> suggest
call
    > 0x000010fc : call eax
    > 0x0000114d : call edx
    > 0x000011d2 : call [eax - 0x18]
load reg
    > 0x000010c0 : mov ebx, [esp]; ret
    > 0x000011b5 : mov edx, [esp]; ret
stack pivoting
    > 0x00001101 : leave ; ret