ropshell> use 5c5c3266cf1340ec7af63770be0e5398 (download)
name         : BoF.exe (i386/PE)
base address : 0x401000
total gadgets: 343
ropshell> suggest "call"
> 0x004029b2 : call ebx
> 0x00403080 : call esi
> 0x004023be : call edi
> 0x004010eb : call [eax + 0x68]
> 0x0040287b : call [ebx + 0x56]
> 0x00402ecf : call [ecx + 0x50]
> 0x00401049 : call [edx - 0x18]
> 0x004031f6 : call [esi + 0x50]
> 0x00403552 : call [edi + 0x6a]
> 0x004014fe : call [ebp - 0x28]