ropshell> use 561fa2abb31dfa8fab762145f81667c2 (download)
name         : msvcp71.dll (i386/PE)
base address : 0x7c3a1000
total gadgets: 3474
ropshell> suggest "jmp"
> 0x7c3c5946 : push esp; ret
> 0x7c3c5137 : jmp ebx
> 0x7c3afcb0 : jmp edx
> 0x7c3a361a : jmp [eax + 0x10]
> 0x7c3ce5d8 : jmp [ebx - 3]
> 0x7c3b5702 : jmp [ecx]
> 0x7c3cd341 : jmp [esi + 0x2b]