ropshell> use 13f6e93ae581129e5dbc1d4126de3767 (download)
name         : libspp.dll (i386/PE)
base address : 0x10001000
total gadgets: 37331

ropshell> suggest "stack pivoting"
> 0x101394a9 : xchg eax, esp; ret
> 0x100e1d04 : push ecx; pop esp; ret
> 0x1005e9f3 : mov esp, ebp; pop ebp; ret
> 0x1009f7fe : push eax; pop esp; mov eax, 1; ret 8
> 0x1010d3cf : lea esp, [ebp + 0x5e5f0004]; mov eax, 1; pop ebx; add esp, 0x2640; ret 8
> 0x10157286 : mov esp, ecx; mov ecx, [eax]; mov eax, [eax + 4]; push eax; ret
> 0x100ea5b6 : lea esp, [eax + 0x59]; add [eax], al; push edx; call [eax + 8]
> 0x10104cb2 : xchg esp, esp; add [eax], al; add [ebp + 0xe48f], cl; add [ebx + 0x56], dl; call [eax + 8]
> 0x10104cb2 : xchg esp, esp; add [eax], al; add [ebp + 0xe48f], cl; add [ebx + 0x56], dl; call [eax + 8]
> 0x101013d5 : push esp; pop ds; adc al, ch; pop esp; popal ; add eax, 0x8c48300; call eax
> 0x100acff6 : leave ; ret