ropshell> use f1066e2543d511b6540dab8925034363 (download)
name         : ntdll.dll (i386/RAW)
base address : 0x0
total gadgets: 11366

ropshell> suggest "stack pivoting"
> 0x0005a66b : xchg eax, esp; ret
> 0x00189543 : mov esp, ebp; ret
> 0x00031d63 : mov esp, ebx; pop ebx; ret
> 0x0007e498 : lea esp, [esp + 0x80]; pop ecx; ret
> 0x00069c96 : mov esp, esi; pop ebx; pop edi; pop esi; pop ebp; ret 0x10
> 0x0009f3c8 : xchg esp, edi; call [eax + 0x56]
> 0x00093d54 : lea esp, [edi + edi*8 - 1]; jmp [eax]
> 0x00056e38 : xchg esp, esi; add [eax], eax; add [eax + 0x5b5e5f01], dh; mov esp, ebp; pop ebp; ret 0x18
> 0x0003ad15 : lea esp, [edx + edx - 0x7a74fffb]; nop ; idiv bh; dec [ebp - 0x95f73]; call [ecx - 0x73]
> 0x00041518 : leave ; ret