ropshell> use 7b93c623333f121dc9e689ccb1b7a733 (download) name : mfc71u.dll (i386/PE) base address : 0x7c251000 total gadgets: 29480
ropshell> suggest "jmp" > 0x7c283769 : push esp; ret > 0x7c25690f : jmp eax > 0x7c2d4c0b : jmp ebx > 0x7c2d4e0b : jmp ecx > 0x7c2d6ba8 : jmp edx > 0x7c28a7cb : jmp esi > 0x7c29a5ca : jmp edi > 0x7c322263 : jmp ebp > 0x7c289989 : jmp esp > 0x7c267d12 : jmp [eax] > 0x7c287bef : jmp [ebx] > 0x7c284037 : jmp [ecx] > 0x7c26e0e0 : jmp [edx] > 0x7c323063 : jmp [esi] > 0x7c27fea9 : jmp [edi] > 0x7c25642b : jmp [ebp + 0x46] > 0x7c31c42f : jmp [esp + eax*8]