ropshell> use 86f1895ae8c5e8b17d99ece768a70732 (download)
name         : msvcr71.dll (i386/PE)
base address : 0x7c341000
total gadgets: 3036

ropshell> suggest "jmp"
> 0x7c345c30 : push esp; ret
> 0x7c34888f : jmp eax
> 0x7c35a78d : jmp ebx
> 0x7c346b0e : jmp ecx
> 0x7c35a51f : jmp edi
> 0x7c3415a2 : jmp [eax]
> 0x7c345669 : jmp [ebx]
> 0x7c35aaa0 : jmp [ecx]
> 0x7c3436bb : jmp [edx + 0x14]
> 0x7c3734a1 : jmp [esi]
> 0x7c367a6f : jmp [edi + 0x7e]