ropshell> use bb5cbffc096497506167bce1d9690ef2 (download)
name         : ntdll.dll (i386/PE)
base address : 0x7c901000
total gadgets: 6382

ropshell> suggest "jmp"
> 0x7c92c35c : push esp; ret
> 0x7c9556d8 : jmp eax
> 0x7c955b47 : jmp ebx
> 0x7c9200d3 : jmp ecx
> 0x7c965a3b : jmp edx
> 0x7c903e7c : jmp esi
> 0x7c923da3 : jmp ebp
> 0x7c941eed : jmp esp
> 0x7c91bbeb : jmp [eax]
> 0x7c90fba3 : jmp [ebx]
> 0x7c94b4ff : jmp [ecx]
> 0x7c94eb44 : jmp [esi]
> 0x7c91bf08 : jmp [edi]