ropshell> use d3a21f576bd28cf1ab5ef85f67746df5 (download)
name         : msctf_.dll (i386/PE)
base address : 0x10001000
total gadgets: 10164

ropshell> suggest "jmp"
> 0x1008ad48 : push esp; ret
> 0x10019031 : jmp eax
> 0x1001f6bd : jmp ebx
> 0x100e45fb : jmp edx
> 0x100096e8 : jmp edi
> 0x10065f6f : jmp ebp
> 0x1007f773 : jmp esp
> 0x1001447f : jmp [eax]
> 0x1004a4b3 : jmp [ebx]
> 0x1003a869 : jmp [ecx]
> 0x100d99a7 : jmp [edx]
> 0x1006c265 : jmp [esi]
> 0x100da227 : jmp [edi]
> 0x100e544f : jmp [ebp - 0x4f]
> 0x100e3b0b : jmp [esp + eax]