ropshell> use 40f241ba0b3f4812c3ddab15e1e70138 (download)
name         : ntdll.dll (i386/PE)
base address : 0x6b281000
total gadgets: 9198

ropshell> suggest "jmp"
> 0x6b309a43 : push esp; ret
> 0x6b2ece2b : jmp eax
> 0x6b29501b : jmp ebx
> 0x6b2835ed : jmp ecx
> 0x6b2d8eaf : jmp edx
> 0x6b2c0f5c : jmp esi
> 0x6b312c6c : jmp edi
> 0x6b2c6353 : jmp ebp
> 0x6b29e50d : jmp esp
> 0x6b2812d4 : jmp [eax]
> 0x6b285521 : jmp [ebx]
> 0x6b28128e : jmp [ecx]
> 0x6b283efb : jmp [edx]
> 0x6b374e6b : jmp [esi]
> 0x6b281395 : jmp [edi]
> 0x6b298ab2 : jmp [ebp + 6]
> 0x6b2d8f4c : jmp [esp + edx]