ropshell> use f503e4ae1d2faf5a499a8119610ab505 (download)
name         : BNUpdate.exe (i386/PE)
base address : 0x401000
total gadgets: 4767

ropshell> suggest "jmp"
> 0x00419e43 : jmp ebp
> 0x004233c4 : push esp; xor dl, [eax]; ret
> 0x00414ea1 : jmp [eax]
> 0x00404dfe : jmp [ebx]
> 0x0040fb20 : jmp [ecx]
> 0x004178e0 : jmp [esi + 3]