ropshell> use 2baf5bfad99c4c4431432c9df390c739 (download)
name         : ntkrnlpa.exe (i386/PE)
base address : 0x401000
total gadgets: 8015

ropshell> suggest "call"
> 0x004026a3 : call eax
> 0x0040351b : call ebx
> 0x004034fb : call ecx
> 0x00402a1c : call edx
> 0x00405923 : call esi
> 0x00402cbf : call edi
> 0x0040534b : call ebp
> 0x00451d76 : call esp
> 0x0040470e : call [eax]
> 0x00402a6b : call [ebx]
> 0x004022ab : call [ecx]
> 0x0040223b : call [edx]
> 0x00402577 : call [esi]
> 0x00402457 : call [edi]
> 0x0041c155 : call [ebp + 0x10]