ropshell> use a27f2d7915fd455a2c4147e4b70bbd98 (download)
name         : EQNEDT32.EXE (i386/PE)
base address : 0x401000
total gadgets: 4450

ropshell> suggest "call"
> 0x0044c3ef : call eax
> 0x00450a1a : call ebx
> 0x0044dfef : call ecx
> 0x0044e866 : call edx
> 0x0044d195 : call esi
> 0x0044d3e5 : call edi
> 0x0044d325 : call ebp
> 0x0040782a : call [eax]
> 0x00424710 : call [ebx]
> 0x00409a6e : call [ecx]
> 0x00409abf : call [edx]
> 0x0044f3a5 : call [esi + 0x33]
> 0x00409aa9 : call [edi]
> 0x0041ce6b : call [ebp + 0x10]