ropshell> use d056e7fe224475c023f235ec1615b4cb (download)
name         : lordofbinaries.exe (i386/PE)
base address : 0x10101000
total gadgets: 2019
ropshell> suggest "stack pivoting"
> 0x1010b4e6 : mov esp, ebx; pop ebx; ret
> 0x101012cd : mov esp, ebp; pop ebp; ret
> 0x101128a9 : lea esp, [esp]; ret
> 0x10106f27 : xchg eax, esp; inc ebp; call ecx
> 0x1010ce65 : lea esp, [edi - 0x74330001]; call [ebp - 0x75]
> 0x10101969 : leave ; ret