ropshell> use b45cd437b8cf1335baff2f4508f4cde1 (download)
name         : babywin_level3.exe (x86_64/PE)
base address : 0x140001000
total gadgets: 5125

ropshell> suggest "stack pivoting"
> 0x140011449 : xchg eax, esp; ret
> 0x140014a83 : mov rsp, r11; pop r14; ret
> 0x140014a84 : mov esp, ebx; pop r14; ret
> 0x14006e360 : lea rsp, [rbp + 0x10]; pop rbp; ret
> 0x14006e361 : lea esp, [rbp + 0x10]; pop rbp; ret
> 0x140039521 : xchg esp, edi; jmp [rsi - 0x7d]
> 0x140070a7c : leave ; ret