ropshell> use 1ff0163f62112cb49e9000e0bc8c0e86 (download)
name         : vuln.exe (x86_64/PE)
base address : 0x140001000
total gadgets: 1233

ropshell> suggest "stack pivoting"
> 0x140001a13 : xchg eax, esp; ret
> 0x1400097c5 : mov rsp, r11; pop r14; ret
> 0x1400097c6 : mov esp, ebx; pop r14; ret
> 0x14000e7e4 : lea rsp, [rbp + 0x10]; pop r15; pop r14; pop r13; pop r12; pop rbp; ret
> 0x14000e7e5 : lea esp, [rbp + 0x10]; pop r15; pop r14; pop r13; pop r12; pop rbp; ret
> 0x140002804 : leave ; jmp rcx