ropshell> use 6886a7d522b453a57f0a69191236326b (download)
name         : ntdll.dll (x86_64/PE)
base address : 0x180001000
total gadgets: 6630

ropshell> suggest "stack pivoting"
> 0x180030004 : xchg eax, esp; ret
> 0x18001a2d2 : xchg ecx, esp; ret
> 0x180028549 : mov rsp, r11; pop r14; ret
> 0x18002854a : mov esp, ebx; pop r14; ret
> 0x180124612 : lea rsp, [rbp + 0x10]; pop rbp; ret
> 0x1800e90bd : xchg esp, ebx; lahf ; xor eax, eax; ret
> 0x1800d7f2c : lea esp, [rdi - 0x72b742e4]; add eax, 0xae009; ret
> 0x180124613 : lea esp, [rbp + 0x10]; pop rbp; ret
> 0x1800a8869 : lea esp, [rax - 0x18000000]; std ; fdivr st(7), st(0); call [rax + 0x40c48348]; pop rbp; ret
> 0x18005949e : xchg ebp, esp; mov dl, 6; add [rbp - 0x72f68740], al; jmp [rsi + 3]
> 0x18001a340 : leave ; ret