ropshell> use 2e92b666a7cc8af174d4445be8fdb0ed (download)
name         : ntdll.dll (i386/PE)
base address : 0x77ec1000
total gadgets: 10918

ropshell> suggest "stack pivoting"
> 0x77ed097f : xchg eax, esp; ret
> 0x77f8ae9b : mov esp, ebx; pop ebx; ret
> 0x77edbf75 : mov esp, ebp; pop ebp; ret
> 0x77f606f3 : lea esp, [ebx + edi*8 - 1]; ret 0xc
> 0x77f1adc8 : mov esp, esi; pop ebx; pop edi; pop esi; pop ebp; ret 0x10
> 0x77ef4c4c : lea esp, [esp]; mov eax, ecx; bswap eax; ret
> 0x77f8552a : xchg esp, eax; add [eax], al; add [ebx], bh; ret
> 0x77f2d68e : push eax; add cl, [ecx + 0x41895871]; pop esp; pop esi; pop ebp; ret 8
> 0x77f7a9f8 : xchg ebx, esp; add al, 0; add [ebp - 0x20373], cl; call [ecx + 0x50]
> 0x77ec2184 : leave ; ret