ropshell> use 8072c981b4b780c764d2ebb63ef84c02 (download)
name         : BlizzardError.exe (i386/PE)
base address : 0x401000
total gadgets: 11968

ropshell> suggest "stack pivoting"
> 0x0040b92b : xchg eax, esp; ret
> 0x004018b2 : mov esp, ebp; pop ebp; ret
> 0x00437d44 : xchg esp, ebx; add al, 0; add [esi - 0x75], bl; ret
> 0x00432582 : xchg esp, eax; add al, [eax]; add [ebx], bh; ret
> 0x00421058 : xchg esp, ecx; add eax, [eax]; add [ebx], bh; ret
> 0x00420f43 : xchg esp, esi; add eax, [eax]; add [ebx], bh; ret
> 0x0046b1af : lea esp, [ecx - 1]; call [esi - 0x18]
> 0x00405515 : lea esp, [esi + esi*8 - 1]; call [ecx - 0x73]
> 0x00468d4c : lea esp, [edi + edi*8 - 1]; call [ecx - 0x18]
> 0x0046f649 : lea esp, [esp]; push ebx; push esi; call [ebp + 0x10]
> 0x00432acf : lea esp, [ebp - 1]; inc [ebx + 0x17b808c4]; add [eax], al; add [esi + 0x5d], bl; ret
> 0x00430298 : lea esp, [eax - 0x74ffbcfd]; dec ebp; or [ecx + 0x55881], cl; add [ecx + 0x55c91], cl; add [esi + 0x5d], bl; ret
> 0x0041d7a3 : leave ; ret