ropshell> use d7c7e50f2d5d32b260ed380c475fc37f (download)
name         : ntdll.dll (i386/PE)
base address : 0x4b281000
total gadgets: 12633
ropshell> suggest "jmp"
> 0x4b29b2b8 : push esp; ret
> 0x4b2a20dd : jmp eax
> 0x4b297c24 : jmp ebx
> 0x4b2ea5bd : jmp ecx
> 0x4b3198ad : jmp edx
> 0x4b2f5c4f : jmp esi
> 0x4b29ee2c : jmp edi
> 0x4b29aad0 : jmp ebp
> 0x4b38c08b : jmp esp
> 0x4b2aa220 : jmp [eax]
> 0x4b2b4031 : jmp [ebx]
> 0x4b2af67c : jmp [ecx]
> 0x4b29e201 : jmp [edx]
> 0x4b316eb8 : jmp [esi]
> 0x4b3347b6 : jmp [edi]
> 0x4b38d433 : jmp [ebp + 0x6a]
> 0x4b350188 : jmp [esp + edi*8]