ropshell> use d051839a298060557fc2e44868ca8ae6 (download)
name         : ntdll.dll (x86_64/PE)
base address : 0x180001000
total gadgets: 8395

ropshell> suggest
call
    > 0x18000be3e : call rax
    > 0x180014b9d : call rbx
    > 0x1800694aa : call rcx
    > 0x18000d596 : call rdx
    > 0x1800176cf : call rsi
jmp
    > 0x180010020 : push rsp; ret
    > 0x180009c15 : jmp rax
    > 0x1800052ec : jmp rbx
    > 0x18002e11f : jmp rcx
    > 0x18009272e : jmp rdx
load mem
    > 0x180061ca0 : movzx eax, [rcx]; ret
    > 0x18000b06d : mov edx, [rbx]; ret
    > 0x180010428 : mov ebp, [rax]; ret
    > 0x1800e1752 : mov rax, [rcx + 0x24]; ret
    > 0x180073760 : mov eax, [rcx + 0x24]; ret
load reg
    > 0x180023de9 : pop rax; ret
    > 0x1800148bc : pop rbx; ret
    > 0x180011fe9 : pop rcx; ret
    > 0x18000b0a8 : pop rdx; ret
    > 0x180014cb4 : pop rsi; ret
pop pop ret
    > 0x180017373 : pop r12; ret
    > 0x1800187ea : pop r12; pop rbp; ret
    > 0x18003b845 : pop r12; pop rdi; pop rbp; ret
    > 0x1800183f1 : pop r12; pop rdi; pop rsi; pop rbp; ret
    > 0x1800148b7 : pop r12; pop rdi; pop rsi; pop rbp; pop rbx; ret
sp lifting
    > 0x180093448 : add rsp, 0x10; ret
    > 0x180093448 : add rsp, 0x10; ret
    > 0x1800c02ae : add rsp, 0x288; ret
    > 0x180021433 : add rsp, 0x38; ret
    > 0x18006d360 : add rsp, 0x438; ret
stack pivoting
    > 0x180050b46 : xchg eax, esp; ret
    > 0x18001be87 : mov rsp, r11; pop r14; ret
    > 0x18001be88 : mov esp, ebx; pop r14; ret
    > 0x1800fcb3a : lea rsp, [rbp + 0x10]; pop rbp; ret
    > 0x1800fcb3b : lea esp, [rbp + 0x10]; pop rbp; ret
syscall
    > 0x180090768 : syscall ; ret
write mem
    > 0x18003f59d : add [rbx], edi; ret
    > 0x18001d271 : add [rcx], edx; ret
    > 0x18000a46d : adc [rdx], ebp; lahf ; ret
    > 0x180092e23 : adc [rax + 0xf], ecx; ret
    > 0x18006fffa : add [rax + 1], edi; ret