ropshell> use 3891413139eaabfefe9b0ca49b5cd395 (download)
name         : msvcrt.dll (i386/PE)
base address : 0x77be1000
total gadgets: 3854

ropshell> suggest "call"
> 0x77be6085 : call eax
> 0x77be9525 : call ebx
> 0x77bf2538 : call ecx
> 0x77be9515 : call esi
> 0x77be61d5 : call edi
> 0x77be4a7f : call ebp
> 0x77befa5e : call [eax]
> 0x77be8ea5 : call [ebx]
> 0x77be4afb : call [ecx]
> 0x77be487b : call [edx]
> 0x77be4fe8 : call [esi]
> 0x77c2904c : call [edi]
> 0x77c06ef2 : call [ebp + 0x10]
> 0x77c0e9b9 : call [esp + edi*2]