ropshell> use 1ab5406f33d8be8febd070750080329a (download)
name         : win32k.sys (i386/PE)
base address : 0xbf800380
total gadgets: 16986

ropshell> suggest "call"
> 0xbf805231 : call eax
> 0xbf8176ec : call ebx
> 0xbf803379 : call ecx
> 0xbf818ff5 : call edx
> 0xbf800995 : call esi
> 0xbf802a2d : call edi
> 0xbf8076f1 : call [eax]
> 0xbf80cbe8 : call [ebx]
> 0xbf82296a : call [ecx]
> 0xbf806aab : call [edx]
> 0xbf96bdf8 : call [esi]
> 0xbf881843 : call [edi]
> 0xbf93d19d : call [ebp]
> 0xbf9762e4 : call [esp + edi*2]