ropshell> use d7eef2c46a9880f21be01511024b53ab (download)
name         : MSCOMCTL.OCX (i386/PE)
base address : 0x27581000
total gadgets: 20271

ropshell> suggest "stack pivoting"
> 0x27598bee : xchg eax, esp; ret
> 0x275de37c : mov esp, ebp; pop ebp; ret
> 0x275ae3eb : mov esp, ebx; add [eax], eax; add [ecx - 0x3fccfbb8], cl; ret 4
> 0x275c8276 : mov esp, ecx; mov ecx, [eax]; mov eax, [eax + 4]; push eax; ret
> 0x2761ffb7 : lea esp, [edi + edi*8 - 1]; call [eax]
> 0x275f27e4 : xchg ebx, esp; add [eax], al; add [edi + edx - 0x7d], dh; call [ebp + 0xf]
> 0x2758ac9e : leave ; ret