ropshell> use 6ca1ff4c257aa667e9569063f70482d0 (download) name : VulnApp2.exe (i386/PE) base address : 0x14801000 total gadgets: 992
ropshell> suggest "stack pivoting" > 0x1480c351 : xchg eax, esp; ret > 0x1480acb2 : mov esp, ebx; pop ebx; ret > 0x14801149 : mov esp, ebp; pop ebp; ret > 0x1480c38e : lea esp, [ebx + eax*8 - 0x5b6feb80]; ret > 0x1480bfa6 : lea esp, [esp]; lea ecx, [ecx]; mov eax, [esp + 0xc]; pop esi; pop edi; ret > 0x14807ede : leave ; ret