ropshell> use 2ee5c7b33bd187926818844fb4a6fe04 (download)
name         : no-win (x86_64/RAW)
base address : 0x0
total gadgets: 7328

ropshell> suggest "stack pivoting"
> 0x0002741a : xchg eax, esp; ret
> 0x00006ade : lea esp, [rax - 0x7600000a]; ret
> 0x0007ae99 : mov rsp, rcx; pop rcx; jmp rcx
> 0x0007ae9a : mov esp, ecx; pop rcx; jmp rcx
> 0x000480d5 : lea rsp, [rbp - 0x10]; pop rbx; pop r12; pop rbp; ret
> 0x000480d6 : lea esp, [rbp - 0x10]; pop rbx; pop r12; pop rbp; ret
> 0x0006a38d : mov rsp, r8; mov rbp, r9; nop ; jmp rdx
> 0x0006a38e : mov esp, eax; mov rbp, r9; nop ; jmp rdx
> 0x00009125 : xchg edx, esp; add [rax], al; add [rcx - 0x7d], cl; ret
> 0x00066c11 : mov rsp, rbx; mov rbx, [rsp]; add rsp, 0x18; jmp r11
> 0x00066c12 : mov esp, ebx; mov rbx, [rsp]; add rsp, 0x18; jmp r11
> 0x0000b9e6 : xchg ebp, esp; add [rax], al; add [rsi - 1], bh; call [r14 + 0x18]
> 0x0009a697 : xchg esp, edi; adc ch, [rip + 0x8acc8c6]; and cs:[rax], edx; jmp [rdi]
> 0x0000cc2f : xchg esp, ecx; add [rax], eax; add [rsi - 1], bh; mov rdi, rbx; call [rax + 0x18]
> 0x00045aea : xchg ecx, esp; add [rax], al; add [rcx + rcx*4 - 0x16], cl; mov rsi, r12; mov rdi, rbx; call [r14 + 0x38]
> 0x0000196d : leave ; ret