ropshell> use b76f8a048f5a0a05018d2413694d4daa (download)
name         : rpcrt4.dll (i386/RAW)
base address : 0x0
total gadgets: 4073

ropshell> suggest "jmp"
> 0x0008c528 : push esp; ret
> 0x0004f488 : jmp eax
> 0x001206b0 : jmp ebx
> 0x000073dd : jmp ecx
> 0x0004cb53 : jmp edx
> 0x000301e3 : jmp ebp
> 0x0000951f : jmp esp
> 0x000cbe2e : jmp [eax + eax*8]
> 0x00032844 : jmp [ebx]
> 0x00003c2c : jmp [ecx]
> 0x00032858 : jmp [edx]
> 0x00077ec9 : jmp [esi]
> 0x0004bf0f : jmp [edi]
> 0x000016a4 : jmp [ebp + 0x48]