ropshell> use 00dfcfa3da8c5e7c15e89a1a2ed510d6 (download)
name         : ntdll.dll (i386/PE)
base address : 0x4b281000
total gadgets: 12442
ropshell> suggest "jmp"
> 0x4b29b5b8 : push esp; ret
> 0x4b2a23dd : jmp eax
> 0x4b289ccc : jmp ebx
> 0x4b28f8d0 : jmp ecx
> 0x4b3127d6 : jmp edx
> 0x4b2f63ef : jmp esi
> 0x4b29f12c : jmp edi
> 0x4b29add0 : jmp ebp
> 0x4b310778 : jmp esp
> 0x4b2a9b20 : jmp [eax]
> 0x4b2ad552 : jmp [ebx]
> 0x4b2af0dc : jmp [ecx]
> 0x4b29e501 : jmp [edx]
> 0x4b2b6405 : jmp [esi + 0x29]
> 0x4b35807d : jmp [edi]
> 0x4b387123 : jmp [ebp - 0x6f]
> 0x4b307232 : jmp [esp + ecx]