This new ROP is failing in my test, I guess this ptr hasn't into account the "ADD AL, 0EF" afther the next pushad instruction. I think this ptr should be adjusted, as was done before:

```
<gadget offset="0x0003a151">ptr to VirtualProtect()</gadget>
```