ropshell> use e745ab563c120e513cd39a44d9b1fcf9 (download)
name         : libc.so.6 (i386/ELF)
base address : 0x1d0f0
total gadgets: 17559

ropshell> suggest "stack pivoting"
> 0x00055e83 : xchg eax, esp; ret
> 0x00034b6d : mov esp, ecx; jmp edx
> 0x00048f58 : lea esp, [ebp - 8]; pop ebx; pop esi; pop ebp; ret
> 0x0002e86e : mov esp, esp; call [eax - 0x77]
> 0x000edbb3 : xchg ebx, esp; mov bh, dl; call [eax - 0x18]
> 0x0006686c : xchg esp, eax; mov dh, 0xfa; call [eax - 0x18]
> 0x000438b1 : xchg esp, ecx; mov bl, 0xfa; call [eax - 0x73]
> 0x0010fa20 : lea esp, [edi + edi*8 - 1]; dec [ebx - 0x9f6b]; call [edi + 0x50]
> 0x00113928 : mov esp, edi; mov ebx, [ecx]; mov esi, [ecx + 4]; mov edi, [ecx + 8]; mov ebp, [ecx + 0xc]; jmp edx
> 0x0006783f : xchg esp, edi; pop es; add [eax], al; mov ecx, [ebp - 0x89c]; add ecx, [ecx + eax*4 - 0x5ea20]; jmp ecx
> 0x00111442 : leave ; ret