ropshell> use 51b157e0717dbab01888f8076979645a (download)
name         : ropcha (i386/ELF)
base address : 0x8048250
total gadgets: 7185

ropshell> suggest "stack pivoting"
> 0x080493f6 : xchg eax, esp; ret
> 0x080bdaf3 : mov esp, ecx; ret
> 0x08048dae : lea esp, [ecx - 4]; ret
> 0x080b15f8 : lea esp, [ebp - 8]; pop ebx; pop esi; pop ebp; ret
> 0x0807e850 : lea esp, [edi + esi*8 - 1]; call [ebx - 0x7d]; ret
> 0x08088a9d : lea esp, [eax]; idiv edi; jmp [ebp - 0x75]
> 0x080ba23f : xchg esp, edx; mov dh, bh; call [eax - 0x18]
> 0x0808dac6 : lea esp, [ebx + edi*8 - 1]; call [edx - 0x18]
> 0x080487c5 : leave ; ret