ropshell> use ca340a2a594352105b120027f64359ea (download)
name         : avpmain.dll (i386/PE)
base address : 0x67111000
total gadgets: 10618

ropshell> suggest "stack pivoting"
> 0x67121880 : xchg eax, esp; ret
> 0x6718579e : mov esp, ebx; pop ebx; ret
> 0x67111045 : mov esp, ebp; pop ebp; ret
> 0x67162c87 : push ecx; pop esp; and [esi], 0; pop ecx; pop esi; ret
> 0x6718d449 : lea esp, [ebp + edi*8 + 0x45c6ffff]; cld ; add eax, ebp; ret
> 0x67182685 : lea esp, [edi + edi*8 - 1]; call [eax - 0x73]
> 0x6712fc32 : push eax; pop esp; mov esi, [ebx]; mov ecx, ebx; push 1; call [esi + 0x48]
> 0x671124f8 : lea esp, [eax - 0x17000003]; rcr [ecx], 0; add [ebx], dh; fisttp [ebp - 0x2a373]; call [ebx - 0x18]
> 0x6719f9ca : leave ; ret