ropshell> use 496b8f2985017169a4201a8d263aeac0 (download) name : msvcrt.dll (i386/PE) base address : 0x10101000 total gadgets: 5057
ropshell> suggest "jmp" > 0x10198928 : push esp; ret > 0x10110dad : jmp eax > 0x101131b8 : jmp ebx > 0x10197eeb : jmp ecx > 0x101139a5 : jmp edx > 0x10113975 : jmp esi > 0x101094d9 : jmp edi > 0x1010d178 : jmp [eax] > 0x1014ca7c : jmp [ebx] > 0x1010b780 : jmp [ecx] > 0x1015b3e9 : jmp [edx] > 0x101a7730 : jmp [esi + 0x23] > 0x1019303b : jmp [edi + 0x29] > 0x1016b22f : jmp [ebp + 0xf]