ropshell> use aa0090103f634320f58b990311b3c020 (download)
name         : pop_test (i386/RAW)
base address : 0x0
total gadgets: 40

ropshell> suggest
call
    > 0x0000043f : call eax
jmp
    > 0x000005ef : jmp [eax]
    > 0x00000653 : jmp [ecx]
load reg
    > 0x00000320 : pop ebx; ret
    > 0x00000413 : pop ebp; ret
    > 0x0000050e : pop edi; pop ebp; ret
    > 0x0000050d : pop esi; pop edi; pop ebp; ret
    > 0x00000522 : mov ebx, [esp]; ret
pop pop ret
    > 0x00000413 : pop ebp; ret
    > 0x00000412 : pop ebx; pop ebp; ret
    > 0x0000050d : pop esi; pop edi; pop ebp; ret
    > 0x0000050c : pop ebx; pop esi; pop edi; pop ebp; ret
stack pivoting
    > 0x00000441 : leave ; ret
write mem
    > 0x0000040e : add [ebx + 0x5d5b04c4], eax; ret