ropshell> use 9042649d1f5489ba94a85363efd26e22 (download)
name         : ntdll.dll (i386/PE)
base address : 0x4b281000
total gadgets: 11260

ropshell> suggest "jmp"
> 0x4b29c0e8 : push esp; ret
> 0x4b2a2f0d : jmp eax
> 0x4b298a84 : jmp ebx
> 0x4b2f27c5 : jmp ecx
> 0x4b2e1bc3 : jmp esi
> 0x4b29fc5c : jmp edi
> 0x4b29b900 : jmp ebp
> 0x4b3255ad : jmp esp
> 0x4b2a9d26 : jmp [eax]
> 0x4b2b34b3 : jmp [ebx]
> 0x4b2ad7f3 : jmp [ecx]
> 0x4b29165c : jmp [edx]
> 0x4b2b5332 : jmp [esi + 0x29]
> 0x4b3594b5 : jmp [edi]
> 0x4b34d4ac : jmp [esp + edi*8]