update ret_to_jmp with "pop %ecx; jmp *%ecx"