ropshell> use cd491c8ea3c952decf24e0a3414977b1 (download)
name         : lab4B (i386/RAW)
base address : 0x0
total gadgets: 9731

ropshell> suggest "stack pivoting"
> 0x0000330c : xchg eax, esp; ret
> 0x00073d66 : mov esp, ecx; ret
> 0x00073dd5 : mov esp, ebp; pop ebp; ret
> 0x00000e83 : lea esp, [ebp - 8]; pop ebx; pop edi; pop ebp; ret
> 0x00003001 : lea esp, [edi + edi*8 - 1]; jmp [esi - 0x7b]
> 0x00023d46 : lea esp, [eax + 0x4e]; or al, 8; sub eax, ecx; pop esi; pop edi; ret
> 0x00000d88 : leave ; ret