ropshell> use f503e4ae1d2faf5a499a8119610ab505 (download)
name         : BNUpdate.exe (i386/PE)
base address : 0x401000
total gadgets: 4767

ropshell> suggest "call"
> 0x00401f36 : call eax
> 0x00402119 : call ebx
> 0x00411f38 : call ecx
> 0x0040d568 : call edx
> 0x00405ccb : call esi
> 0x00402739 : call edi
> 0x0040212c : call ebp
> 0x0040c809 : call [eax]
> 0x0041fe0f : call [ebx + 0x20]
> 0x0040d986 : call [ecx + 0x10]
> 0x004044b3 : call [edx]
> 0x0040e09c : call [esi]
> 0x0040e4b3 : call [edi]
> 0x00420373 : call [ebp + 0x20]