ropshell> use 4eef400ca444724e99340eeccb07d409 (download)
name         : hash (i386/ELF)
base address : 0x8048a20
total gadgets: 42

ropshell> suggest
call
    > 0x08048acf : call eax
jmp
    > 0x08048de9 : jmp [ebp - 0x5f]
load reg
    > 0x08048aa3 : pop ebp; ret
    > 0x08048aa2 : pop ebx; pop ebp; ret
    > 0x08048c33 : pop edi; pop ebp; ret
    > 0x080491fd : pop esi; pop edi; pop ebp; ret
    > 0x08049212 : mov ebx, [esp]; ret
pop pop ret
    > 0x08048aa3 : pop ebp; ret
    > 0x08048aa2 : pop ebx; pop ebp; ret
    > 0x0804908b : pop ebx; pop edi; pop ebp; ret
    > 0x080491fc : pop ebx; pop esi; pop edi; pop ebp; ret
stack pivoting
    > 0x08048ad1 : leave ; ret
write mem
    > 0x08048a9e : add [ebx + 0x5d5b04c4], eax; ret