ropshell> use 2c9e63afd03e5323cfcac84153133f44 (download)
name         : target7 (i386/RAW)
base address : 0x0
total gadgets: 10952

ropshell> suggest "stack pivoting"
> 0x0000292d : xchg eax, esp; ret
> 0x0006a09b : mov esp, ecx; ret
> 0x00002031 : lea esp, [ecx - 4]; ret
> 0x000893a5 : mov esp, edi; call eax
> 0x0000245d : push esi; pop esp; pop ebx; pop esi; pop edi; ret
> 0x00060df8 : lea esp, [ebp - 8]; pop ebx; pop esi; pop ebp; ret
> 0x0004f706 : xchg esp, eax; sbb dh, bh; call [eax + 0x68]
> 0x00089391 : xchg esp, edi; lcall [edi + 0xfffc89]; mov bh, ah; jmp [eax]
> 0x00002e13 : xchg esp, ebp; adc al, [eax]; add [ebx + 0x5e5b3cc4], al; pop edi; pop ebp; ret
> 0x0004c6dd : lea esp, [edi + esi*8 - 1]; dec [ecx - 0x88b6b]; call [esi + 0x6a]
> 0x0005baf7 : xchg esp, ebx; pop es; add [eax], al; mov eax, [ebp - 0x60]; add eax, [eax + edi*4 - 0x1c684]; jmp eax
> 0x00001c15 : leave ; ret