ropshell> use c1cfc1afb4ce826843c02e3334a022b0 (download)
name         : level12 (i386/ELF)
base address : 0x8048470
total gadgets: 26

ropshell> suggest
call
    > 0x080484d3 : call eax
    > 0x0804850d : call edx
    > 0x080486be : call [eax - 0x18]
    > 0x080486f3 : call [esi + 0x53]
load reg
    > 0x0804874f : pop ebp; ret
    > 0x0804874e : pop edi; pop ebp; ret
    > 0x080486e7 : popal ; cld ; ret
    > 0x0804874d : pop esi; pop edi; pop ebp; ret
    > 0x080484a0 : mov ebx, [esp]; ret
pop pop ret
    > 0x0804874f : pop ebp; ret
    > 0x0804874e : pop edi; pop ebp; ret
    > 0x0804874d : pop esi; pop edi; pop ebp; ret
    > 0x0804874c : pop ebx; pop esi; pop edi; pop ebp; ret
stack pivoting
    > 0x080486e6 : lea esp, [ecx - 4]; ret
    > 0x080486e0 : lea esp, [ebp - 8]; pop ecx; pop ebx; pop ebp; lea esp, [ecx - 4]; ret
    > 0x080484d8 : leave ; rep ; ret