ropshell> use 2d16e455648f41e816d1951ab7d09667 (download)
name         : ch72.exe (i386/PE)
base address : 0x401000
total gadgets: 1567

ropshell> suggest "call"
> 0x004025a4 : call eax
> 0x00401461 : call ebx
> 0x0040207e : call ecx
> 0x00401294 : call esi
> 0x0040189c : call edi
> 0x0040c528 : call [eax]
> 0x0040cc47 : call [ebx]
> 0x0040c6d2 : call [ecx + 0x50]
> 0x00408fc4 : call [esi + 0x1b]
> 0x004090c3 : call [edi + 0x50]
> 0x00404813 : call [ebp + 8]