ropshell> use ca9d1a667e2467e4682012f045bfeb74 (download)
name         : lab5B (i386/ELF)
base address : 0x8049090
total gadgets: 7088

ropshell> suggest "stack pivoting"
> 0x0804a404 : xchg eax, esp; ret
> 0x080aa849 : mov esp, ecx; ret
> 0x08049b9a : lea esp, [ecx - 4]; ret
> 0x080a5808 : lea esp, [ebp - 8]; pop ebx; pop esi; pop ebp; ret
> 0x08079f96 : lea esp, [ebx - 3]; call [eax - 1]
> 0x08084867 : lea esp, [edi + esi*8 - 1]; call [eax - 0x73]
> 0x08049a45 : leave ; ret