ropshell> use 2e92b666a7cc8af174d4445be8fdb0ed (download)
name         : ntdll.dll (i386/PE)
base address : 0x77ec1000
total gadgets: 10918

ropshell> suggest
call
    > 0x77ec6ce9 : call eax
    > 0x77f11d6b : call ebx
    > 0x77ec5019 : call ecx
    > 0x77f1066b : call edx
    > 0x77ee6565 : call esi
jmp
    > 0x77eca4e6 : push esp; ret
    > 0x77f1e6e9 : jmp eax
    > 0x77f18675 : jmp ecx
    > 0x77ee719d : jmp edx
    > 0x77edd690 : jmp esi
load mem
    > 0x77f86e16 : mov eax, [ecx + 0x10]; ret
    > 0x77f05e44 : mov eax, [edx + 4]; ret
    > 0x77f17867 : mov edx, [ecx + 4]; ret
    > 0x77ec6b25 : mov eax, [ebp + 0x10]; pop ebp; ret
    > 0x77f1f115 : movzx ecx, [edx]; sub eax, ecx; pop ebp; ret
load reg
    > 0x77f8489c : pop eax; ret
    > 0x77ec38e9 : pop ebx; ret
    > 0x77f779d4 : pop ecx; ret
    > 0x77ef33c0 : pop edx; ret
    > 0x77ec42c6 : pop esi; ret
pop pop ret
    > 0x77f8489c : pop eax; ret
    > 0x77f8acc4 : pop eax; pop ebp; ret
    > 0x77f89a56 : pop eax; pop esi; pop ebp; ret
    > 0x77f8cac2 : pop eax; pop edi; pop esi; pop ebp; ret
    > 0x77f836f2 : pop ecx; pop ecx; pop edi; pop esi; pop ebx; ret
sp lifting
    > 0x77f05bb9 : add esp, 0x14; ret
    > 0x77f05bb9 : add esp, 0x14; ret
stack pivoting
    > 0x77ed097f : xchg eax, esp; ret
    > 0x77f8ae9b : mov esp, ebx; pop ebx; ret
    > 0x77edbf75 : mov esp, ebp; pop ebp; ret
    > 0x77f606f3 : lea esp, [ebx + edi*8 - 1]; ret 0xc
    > 0x77f1adc8 : mov esp, esi; pop ebx; pop edi; pop esi; pop ebp; ret 0x10
write mem
    > 0x77ece785 : add [ebx], edi; ret
    > 0x77eebf97 : add [edx], edi; ret
    > 0x77f28a6c : add [edx], eax; pop ebp; ret
    > 0x77eeba2b : add [eax + 0x5d5e5f01], esi; ret 8
    > 0x77f235e8 : add [eax + 0x1069], edi; ret