ropshell> use 7e99a20c758abb5ae89c7aeea3a9aeb2 (download)
name         : kernel32.dll (i386/PE)
base address : 0x77de1000
total gadgets: 9044

ropshell> suggest "stack pivoting"
> 0x77e0e050 : xchg eax, esp; ret
> 0x77e801f7 : mov esp, ebx; pop ebx; ret 0x20
> 0x77e49b3c : mov esp, ebp; pop ebp; ret
> 0x77e9127a : mov esp, edx; stc ; dec ecx; ret 4
> 0x77e4bb12 : xchg esp, edi; jmp [esi - 0x75]
> 0x77e2eef8 : mov esp, esi; pop ebx; pop edi; pop esi; pop ebp; ret 0x10
> 0x77e834f4 : mov esp, edi; call [edi + 0x3d]
> 0x77e51c62 : push edi; pop esp; cld ; call [eax + 0x33]
> 0x77e3b025 : xchg esp, ebx; add [eax], al; add [edi + 0x5e], bl; pop ebp; ret 8
> 0x77e4e5fc : lea esp, [esp + edi*8 - 0x72ae0001]; lea ebx, [eax + 0x51fffffd]; push eax; call esi
> 0x77e12fe0 : leave ; ret