ropshell> use 147134e164e0d8e0d405a4bc5f1fa8af (download)
name         : SERVER.exe (i386/PE)
base address : 0x10471000
total gadgets: 4587

ropshell> suggest "jmp"
> 0x104820dd : jmp eax
> 0x1047915f : jmp esi
> 0x10476d73 : jmp esp
> 0x104aa3f3 : jmp [eax]
> 0x104a6c9c : jmp [ebx]
> 0x104bc434 : jmp [ecx]
> 0x104a5b4f : jmp [esi + 0x39]
> 0x104c2058 : push esp; and al, 4; mov esp, ecx; ret