ropshell> use 60da4db38c5e7af83d781d6225eecde9 (download)
name         : 4080_cut (i386/RAW)
base address : 0x0
total gadgets: 44943

ropshell> suggest "stack pivoting"
> 0x0000d905 : xchg eax, esp; ret
> 0x00029502 : mov esp, esp; ret
> 0x0003b7df : push ecx; pop esp; pop ebp; ret
> 0x00358e05 : lea esp, [eax]; clc ; ret
> 0x0029c6c8 : lea esp, [edi - 8]; pop edi; ret
> 0x0001c0cb : xchg esp, ebx; call edi
> 0x0001c0cf : mov esp, ebx; pop ebx; pop edi; pop ebp; ret
> 0x001cbc21 : mov esp, edi; lcall [ebx + 0x5d]; ret
> 0x0004618c : lea esp, [esp + 4]; pop ebp; ret
> 0x002efc32 : push eax; pop esp; mov ebp, esp; pop ebp; ret
> 0x003113e8 : mov esp, ebp; lcall [ebx + 0x5f]; pop ebp; ret
> 0x00051cee : lea esp, [ebp - 8]; pop ebx; pop esi; pop ebp; ret
> 0x0002e08b : push ebx; pop esp; pop ebx; pop esi; pop edi; pop ebp; ret
> 0x001597f4 : xchg edi, esp; add [eax], al; add bh, dh; ret
> 0x0022d188 : xchg esi, esp; inc [ebx - 0xf76f73c]; pop ebx; pop esi; pop edi; pop ebp; ret
> 0x00291431 : push edx; pop esp; xor eax, eax; pop ebp; test edx, edx; setne al; ret
> 0x001cb56f : xchg esp, ebp; dec [ecx - 0x12781728]; stc ; inc [ebx + 0x5e5b10c4]; pop ebp; ret
> 0x000e08c6 : lea esp, [ebx]; add [ebx - 0x2776e73c], al; pop ebx; pop esi; pop edi; pop ebp; ret
> 0x0031a068 : push esi; pop esp; add [ebx - 0x39fefbbd], al; add eax, [eax]; pop ebx; pop ebp; ret
> 0x00196abd : push ebp; or al, -0x18; pop esp; xor bh, bh; inc [ebx + 0x5e5b04c4]; pop ebp; ret
> 0x00382ec8 : xchg ecx, esp; add [eax], al; add [edi], cl; mov bh, -0x40; jmp [0]
> 0x00315231 : xchg edx, esp; add [eax], al; add [edi], cl; mov dh, -0x37; jmp [0]
> 0x002f8d27 : mov esp, eax; add [eax], al; add [ebx + 0xb093], cl; add [ebx + 0xb49b], cl; add [ecx], bh; ret
> 0x003339af : xchg esp, edi; add [eax], al; add [edi], cl; mov bh, -0x2e; mov [ebp - 0x10], eax; jmp [0]
> 0x00003837 : leave ; ret