ropshell> use f1066e2543d511b6540dab8925034363 (download)
name         : ntdll.dll (i386/RAW)
base address : 0x0
total gadgets: 11366

ropshell> suggest "call"
> 0x00019966 : call eax
> 0x0002402d : call ebx
> 0x0003ba82 : call ecx
> 0x0001b0be : call edx
> 0x0002042c : call esi
> 0x00013121 : call edi
> 0x0006e90d : call esp
> 0x00008906 : call [eax]
> 0x0001df28 : call [ebx]
> 0x00013891 : call [ecx]
> 0x000356eb : call [edx]
> 0x000b504c : call [esi]
> 0x00047c0f : call [edi]
> 0x000d4d14 : call [ebp]
> 0x000aed4d : call [esp + edi*8]