ropshell> use d924c371dec38ef931be57fae9b57aae (download)
name         : ntdll.dll (i386/PE)
base address : 0x6a201000
total gadgets: 9150

ropshell> suggest "stack pivoting"
> 0x6a213e90 : xchg eax, esp; ret
> 0x6a274f61 : mov esp, ebx; pop ebx; ret
> 0x6a213a23 : mov esp, ebp; pop ebp; ret
> 0x6a27d9ef : lea esp, [esp + 0x80]; pop ecx; ret
> 0x6a268f1e : mov esp, esi; pop ebx; pop edi; pop esi; pop ebp; ret 0x10
> 0x6a2988ac : lea esp, [ecx]; add [eax], eax; ret
> 0x6a225947 : xchg esp, edx; mov al, [esi]; add bh, dh; ret 0
> 0x6a24a33f : lea esp, [ebx]; add al, [eax]; mov esp, ebp; pop ebp; ret 4
> 0x6a2da9e4 : lea esp, [edi + edi*8 - 1]; call [ecx - 0x73]
> 0x6a2a574d : mov esp, edi; dec [ebx + 0x1890c4d]; mov eax, ecx; mov [ecx + 4], edx; pop ebp; ret 8
> 0x6a26e5f5 : leave ; ret