ropshell> use 9c136f6ecd7d1f38b04a9eee91a9244f (download)
name         : rop1 (i386/RAW)
base address : 0x0
total gadgets: 55

ropshell> suggest
call
    > 0x0000043f : call eax
jmp
    > 0x000019bb : jmp ebx
load reg
    > 0x00000413 : pop ebp; ret
    > 0x00000412 : pop ebx; pop ebp; ret
    > 0x000004e7 : pop edi; pop ebp; ret
    > 0x000004e6 : pop esi; pop edi; pop ebp; ret
    > 0x000004ea : mov ebx, [esp]; ret
pop pop ret
    > 0x00000413 : pop ebp; ret
    > 0x00000412 : pop ebx; pop ebp; ret
    > 0x000004e6 : pop esi; pop edi; pop ebp; ret
    > 0x000004e5 : pop ebx; pop esi; pop edi; pop ebp; ret
stack pivoting
    > 0x00000332 : leave ; ret
write mem
    > 0x0000040e : add [ebx + 0x5d5b04c4], eax; ret