ropshell> use 022d546dbb73745fca8e0c8dc8442f93 (download)
name         : ntdll.dll (x86_64/PE)
base address : 0x180001000
total gadgets: 6482

ropshell> suggest "stack pivoting"
> 0x180017888 : xchg eax, esp; ret
> 0x18002377a : mov rsp, r11; pop r14; ret
> 0x18002377b : mov esp, ebx; pop r14; ret
> 0x18010f586 : lea rsp, [rbp + 0x10]; pop rbp; ret
> 0x18010f587 : lea esp, [rbp + 0x10]; pop rbp; ret
> 0x1800cf6b1 : xchg esp, esi; jmp [rbp + 0x48]
> 0x1800fb965 : xchg esp, ebp; call [rax + 0x30c48348]; pop rbp; ret
> 0x1800a77db : lea esp, [rax]; add al, [rax]; add al, ch; imul esp, ecx, -9; call [rax + 0x50c48348]; pop rbp; ret
> 0x1800610a4 : leave ; ret