ropshell> use c7815c121632e8ce3ad8019f2c1ff910 (download)
name         : msvcrt.dll (i386/PE)
base address : 0x10101000
total gadgets: 5093

ropshell> suggest "stack pivoting"
> 0x1010fad5 : xchg eax, esp; ret
> 0x1019ac12 : mov esp, ebx; pop ebx; ret
> 0x1013afe2 : mov esp, ebp; pop ebp; ret
> 0x1019eba9 : lea esp, [esp]; fstp st(0); fld1 ; ret
> 0x101a6dbb : lea esp, [edi + edi*8 - 1]; jmp [ebx]
> 0x1012f832 : leave ; ret