ropshell> use 6dc548e90a706d06409314d4026c41b1 (download)
name         : PlugY.exe (i386/PE)
base address : 0x401000
total gadgets: 328

ropshell> suggest "call"
> 0x004028f4 : call eax
> 0x00401228 : call ebx
> 0x004018ba : call esi
> 0x00401507 : call edi
> 0x0040180d : call [ebx]
> 0x00402b0b : call [esi + 0x68]
> 0x00401374 : call [edi + 0x51]
> 0x004027c8 : call [ebp - 0x75]