ropshell> use 86f1895ae8c5e8b17d99ece768a70732 (download)
name         : msvcr71.dll (i386/PE)
base address : 0x7c341000
total gadgets: 3036

ropshell> suggest "stack pivoting"
> 0x7c348b05 : xchg eax, esp; ret
> 0x7c376ffc : mov esp, ebx; pop ebx; ret
> 0x7c3424ef : mov esp, ebp; pop ebp; ret
> 0x7c3422fe : lea esp, [ebp - 8]; pop edi; pop esi; pop ebp; ret 0xc
> 0x7c341f0a : mov esp, ecx; mov ecx, [eax]; mov eax, [eax + 4]; push eax; ret
> 0x7c3411a4 : leave ; ret