ropshell> use 411f9ce38478e2a3877860e2bfa8533a (download) name : ps3.bin (i386/RAW) base address : 0x0 total gadgets: 707
ropshell> suggest "stack pivoting" > 0x000377be : push ecx; add [ebx], dl; pop esp; jmp eax > 0x0003776a : push esi; add [eax], dl; pop esp; jmp edx > 0x00037782 : push ebp; add [ecx], dl; pop esp; jmp ecx > 0x000377bd : push edi; push ecx; add [ebx], dl; pop esp; jmp eax > 0x000377bb : push ebx; add [edi - 1], dl; int1 ; add [ebx], dl; pop esp; jmp eax > 0x000377b5 : push edx; add [edi + 0x5300f7ff], dh; add [edi - 1], dl; int1 ; add [ebx], dl; pop esp; jmp eax > 0x00036ca1 : leave ; jmp edi