ropshell> use 5e124c849547140f30263959295e972c (download)
name         : VulnerableApp.exe (i386/PE)
base address : 0x401000
total gadgets: 303

ropshell> suggest "call"
> 0x0040294b : call ebx
> 0x00402667 : call esi
> 0x00402d7f : call edi
> 0x0040221f : call [eax + 4]
> 0x00401aa1 : call [esi + 0x54]
> 0x00402723 : call [ebp - 0x75]