ropshell> use b729ba1592acacb47f2b06dd3d5753fa (download)
name         : Flash6.ocx (i386/PE)
base address : 0x10001000
total gadgets: 18015

ropshell> suggest "call"
> 0x1004ac31 : call eax
> 0x10001162 : call ebx
> 0x10007323 : call ecx
> 0x10049779 : call esi
> 0x10047f0a : call edi
> 0x1003866a : call ebp
> 0x10081c02 : call [esi + 0xc]; pop esi; ret 0xc
> 0x100010de : call [eax]
> 0x1008401e : call [ebx + 0x10]
> 0x10048adc : call [ecx]
> 0x1000b98a : call [edx]
> 0x1000ffcf : call [edi]
> 0x1003ec0b : call [ebp + 0x1c]
> 0x10085b9a : call [esp + 0x14]; mov esi, eax; mov eax, [esp + 4]; push eax; mov ecx, [eax]; call [ecx + 8]