ropshell> use 3891413139eaabfefe9b0ca49b5cd395 (download)
name         : msvcrt.dll (i386/PE)
base address : 0x77be1000
total gadgets: 3854

ropshell> suggest "stack pivoting"
> 0x77be5ed5 : xchg eax, esp; ret
> 0x77c1fa1a : mov esp, ebx; pop ebx; ret
> 0x77bf282e : mov esp, ebp; pop ebp; ret
> 0x77c1f4b8 : lea esp, [eax + 6]; ret
> 0x77bef117 : lea esp, [ebp - 8]; pop edi; pop esi; pop ebp; ret 0xc
> 0x77c0380e : lea esp, [esi + edi*8 - 1]; dec [ebp + 0x189cb53c]; ret
> 0x77c0a634 : mov esp, ecx; mov ecx, [eax]; mov eax, [eax + 4]; push eax; ret
> 0x77c06ee9 : lea esp, [esp]; push ebx; push esi; call [ebp + 0x10]
> 0x77bec09b : leave ; ret