ropshell> use d7c7e50f2d5d32b260ed380c475fc37f (download) name : ntdll.dll (i386/PE) base address : 0x4b281000 total gadgets: 12633
ropshell> suggest "jmp" > 0x4b29b2b8 : push esp; ret > 0x4b2a20dd : jmp eax > 0x4b297c24 : jmp ebx > 0x4b2ea5bd : jmp ecx > 0x4b3198ad : jmp edx > 0x4b2f5c4f : jmp esi > 0x4b29ee2c : jmp edi > 0x4b29aad0 : jmp ebp > 0x4b38c08b : jmp esp > 0x4b2aa220 : jmp [eax] > 0x4b2b4031 : jmp [ebx] > 0x4b2af67c : jmp [ecx] > 0x4b29e201 : jmp [edx] > 0x4b316eb8 : jmp [esi] > 0x4b3347b6 : jmp [edi] > 0x4b38d433 : jmp [ebp + 0x6a] > 0x4b350188 : jmp [esp + edi*8]