ropshell> use 4f096d96285e06cd51aef7d2d3de04da (download)
name         : msvcp100.dll (x86_64/PE)
base address : 0x79631000
total gadgets: 5666

ropshell> suggest "stack pivoting"
> 0x79636f4a : xchg eax, esp; ret
> 0x7963dab0 : mov rsp, r11; pop r12; ret
> 0x7963dab1 : mov esp, ebx; pop r12; ret
> 0x79655db7 : mov esp, ecx; mov rdi, r8; mov r13, rcx; call [rax + 8]
> 0x796766e9 : push rdx; add cl, [rax - 0x75]; pop rsp; and al, 8; mov rdi, [rsp + 0x10]; movzx eax, r9w; ret
> 0x7963c8d7 : leave ; call [rax + 0x18]