ropshell> use d85f70db20c12c10421e2e75402329d9 (download)
name         : hexchat (i386/ELF)
base address : 0x8065ac0
total gadgets: 4152

ropshell> suggest "stack pivoting"
> 0x0807aac7 : xchg eax, esp; ret
> 0x08065c60 : lea esp, [ecx - 4]; ret
> 0x080a8f90 : lea esp, [ebp - 8]; pop ebx; pop esi; pop ebp; ret
> 0x08099fa2 : mov esp, eax; fdiv st(5); call [edx + 0x6a]
> 0x080a9872 : mov esp, esp; and al, 0xfa; call [ecx + 0x52]
> 0x080c7bc9 : xchg esp, edx; add [eax], al; add [eax + 1], bh; pop ebx; pop esi; pop edi; ret
> 0x080664e1 : leave ; ret