ropshell> use 335a9fab2ac3ae212e9feee4bcd19e80 (download)
name         : libc-2.3.6.so (i386/ELF)
base address : 0x14cb0
total gadgets: 10011

ropshell> suggest "stack pivoting"
> 0x00014dc7 : mov esp, ebp; pop ebp; ret
> 0x0002abd7 : lea esp, [ebp - 8]; pop ebx; pop esi; pop ebp; ret
> 0x0006abd1 : xchg eax, esp; add [eax], al; add [edx - 9], al; ret 3
> 0x00078b90 : lea esp, [edi + ebp*8 - 1]; inc [ebx - 0x11077b]; jmp [eax]
> 0x0002a522 : lea esp, [eax + 0x1fffffe]; into ; mov ecx, [ebp - 0x114]; mov [esp + 4], esi; mov [esp], ecx; call [ebp + 0x14]
> 0x0003d7c6 : lea esp, [edx + edi*8 + 0x4c89ffff]; and al, 4; mov edx, [ebp + 8]; mov [esp], edx; call [eax + 0x1c]
> 0x00022e21 : leave ; ret