ropshell> use 22c241e7dd67820ed6085c61869c6f98 (download)
name         : HEVD.sys (i386/PE)
base address : 0x11000
total gadgets: 85

ropshell> suggest
call
    > 0x000113d0 : call eax
    > 0x00011352 : call ecx
    > 0x00011081 : call [ebp - 0x75]
jmp
    > 0x00011370 : jmp esi
load reg
    > 0x000112de : pop ebx; ret
    > 0x00011154 : pop ebp; ret
    > 0x000113cb : pop ecx; pop ebx; ret 4
    > 0x00011356 : pop esi; pop ebp; ret
    > 0x00011355 : pop edi; pop esi; pop ebp; ret
pop pop ret
    > 0x00011154 : pop ebp; ret
    > 0x00011389 : pop ebx; pop ebp; ret
    > 0x00011355 : pop edi; pop esi; pop ebp; ret
    > 0x00011354 : pop ebx; pop edi; pop esi; pop ebp; ret
    > 0x000113c8 : pop eax; pop ecx; pop ebp; pop ecx; pop ebx; ret 4
stack pivoting
    > 0x00011152 : mov esp, ebp; pop ebp; ret
    > 0x0001136b : leave ; xor edx, edx; xor edi, edi; jmp esi