ropshell> use d72f6df37ec295e7657a38d2c76ebc01 (download)
name         : static (x86_64/ELF)
base address : 0x4011c0
total gadgets: 7746

ropshell> suggest "stack pivoting"
> 0x004018f7 : xchg eax, esp; ret
> 0x00493859 : mov rsp, rcx; pop rcx; jmp rcx
> 0x0049385a : mov esp, ecx; pop rcx; jmp rcx
> 0x0047e2cd : mov rsp, rbx; mov rbx, [rsp]; add rsp, 0x30; ret
> 0x0045c0bb : mov rsp, r8; mov rbp, r9; nop ; jmp rdx
> 0x0047726e : lea rsp, [rbp - 0x18]; pop rbx; pop r12; pop r13; pop rbp; ret
> 0x0045c0bc : mov esp, eax; mov rbp, r9; nop ; jmp rdx
> 0x0047e2ce : mov esp, ebx; mov rbx, [rsp]; add rsp, 0x30; ret
> 0x0047726f : lea esp, [rbp - 0x18]; pop rbx; pop r12; pop r13; pop rbp; ret
> 0x0045ddb1 : movsxd rsp, esp; mov rdx, r12; call [r13 + 0x38]
> 0x0045c454 : lea esp, [rcx + rax]; mov r13, rax; mov rdi, r12; call rbx
> 0x00401876 : leave ; ret