ropshell> use 496b8f2985017169a4201a8d263aeac0 (download)
name         : msvcrt.dll (i386/PE)
base address : 0x10101000
total gadgets: 5057

ropshell> suggest "call"
> 0x1010c1b2 : call eax
> 0x10113a05 : call ebx
> 0x1013943b : call ecx
> 0x101139f5 : call esi
> 0x1010fdd5 : call edi
> 0x1010801d : call esp
> 0x10191839 : call [edi + 2]; ret
> 0x1013b19e : call [ebp + 0xc]; pop ebp; ret 0x10
> 0x1013375e : call [eax]
> 0x10113385 : call [ebx]
> 0x10158dc4 : call [ecx]
> 0x1014ece5 : call [edx + 0x50]
> 0x1010e988 : call [esi]