ropshell> use 335a9fab2ac3ae212e9feee4bcd19e80 (download)
name         : libc-2.3.6.so (i386/ELF)
base address : 0x14cb0
total gadgets: 10011

ropshell> suggest "jmp"
> 0x00104849 : push esp; ret
> 0x00015e3e : jmp eax
> 0x0006c364 : jmp ebx
> 0x0002853d : jmp ecx
> 0x00028699 : jmp edx
> 0x0002649d : jmp edi
> 0x00052410 : jmp esp
> 0x0002a0ad : jmp [eax]
> 0x0003d00b : jmp [ebx]
> 0x000207f1 : jmp [ecx]
> 0x00036957 : jmp [edx]
> 0x00014d80 : jmp [esi + 0x39]
> 0x000240cd : jmp [edi]
> 0x00015354 : jmp [ebp + 3]
> 0x0003c25f : jmp [esp + edi*8]