ropshell> use 6ca1ff4c257aa667e9569063f70482d0 (download)
name         : VulnApp2.exe (i386/PE)
base address : 0x14801000
total gadgets: 992
ropshell> suggest "stack pivoting"
> 0x1480c351 : xchg eax, esp; ret
> 0x1480acb2 : mov esp, ebx; pop ebx; ret
> 0x14801149 : mov esp, ebp; pop ebp; ret
> 0x1480c38e : lea esp, [ebx + eax*8 - 0x5b6feb80]; ret
> 0x1480bfa6 : lea esp, [esp]; lea ecx, [ecx]; mov eax, [esp + 0xc]; pop esi; pop edi; ret
> 0x14807ede : leave ; ret