ropshell> use a27f2d7915fd455a2c4147e4b70bbd98 (download) name : EQNEDT32.EXE (i386/PE) base address : 0x401000 total gadgets: 4450
ropshell> suggest "jmp" > 0x00423297 : jmp eax > 0x004150df : jmp [eax] > 0x0044c57c : jmp [ebx] > 0x0040fc06 : jmp [ecx] > 0x0044c425 : jmp [edx + 0x14] > 0x00421cc6 : jmp [esi + 0x33] > 0x004099f9 : jmp [edi + ecx]