ropshell> use 7b93c623333f121dc9e689ccb1b7a733 (download)
name         : mfc71u.dll (i386/PE)
base address : 0x7c251000
total gadgets: 29480

ropshell> suggest "stack pivoting"
> 0x7c28ab23 : xchg eax, esp; ret
> 0x7c25d960 : push eax; pop esp; ret 0x10
> 0x7c31dc31 : mov esp, eax; idiv edi; ret
> 0x7c31487b : mov esp, edx; push esi; ret
> 0x7c2d32a6 : mov esp, ebp; pop ebp; ret
> 0x7c2571ed : mov esp, ecx; pop ecx; call eax; ret
> 0x7c2dda77 : push ecx; pop esp; pop edi; pop esi; ret 0x18
> 0x7c2e0ef4 : lea esp, [ebp - 8]; pop edi; pop esi; pop ebp; ret 4
> 0x7c29b5c5 : xchg esp, ebp; cld ; call [esi - 0x75]
> 0x7c2c3df2 : lea esp, [ecx - 0x7e740001]; mov ah, 0; add [eax], al; ret
> 0x7c261776 : lea esp, [eax + 0x51000003]; mov ecx, esi; call [eax + 0x70]
> 0x7c2be569 : xchg esp, esi; add [eax], al; add [ebx + 0x8558d08], cl; push edx; push eax; call [ecx + 0xc]
> 0x7c251a9a : leave ; ret