ropshell> use d924c371dec38ef931be57fae9b57aae (download)
name         : ntdll.dll (i386/PE)
base address : 0x6a201000
total gadgets: 9150

ropshell> suggest "jmp"
> 0x6a20f288 : push esp; ret
> 0x6a208e7d : jmp eax
> 0x6a204364 : jmp ebx
> 0x6a2b376d : jmp ecx
> 0x6a26ec3c : jmp esi
> 0x6a20a3cc : jmp edi
> 0x6a20eaa0 : jmp ebp
> 0x6a2210b7 : jmp esp
> 0x6a225000 : jmp [eax]
> 0x6a203b09 : jmp [ebx]
> 0x6a234499 : jmp [ecx]
> 0x6a2097a1 : jmp [edx]
> 0x6a2e5d73 : jmp [esi]
> 0x6a296fd4 : jmp [edi]