ropshell> use 1aff244ca134956c54474f4e2433e4ce (download)
name         : advapi32.dll (i386/PE)
base address : 0x77dd1000
total gadgets: 6815

ropshell> suggest "stack pivoting"
> 0x77de9e53 : xchg eax, esp; ret
> 0x77dee303 : mov esp, ebp; pop ebp; ret
> 0x77dd802d : lea esp, [ebp + 0x3b000246]; ret
> 0x77dde2a9 : lea esp, [esi + edi*8 - 1]; jmp [esi - 0x77]
> 0x77dde355 : lea esp, [edi + edi*8 - 1]; call [ecx - 0x73]
> 0x77dd7bce : leave ; ret