ropshell> use 1aee20173ca5259f866644667ad046d8 (download)
name         : vuln (i386/ELF)
base address : 0x80490a0
total gadgets: 6653

ropshell> suggest "write mem"
> 0x080afb94 : add [ecx], eax; ret
> 0x0809cbcf : add [ecx], esi; ret
> 0x08050e8a : add [ecx], edi; ret
> 0x080685f1 : add [eax + 0x5f028d02], ecx; ret
> 0x08059485 : add [ebx + 0x5e5b04c4], eax; ret
> 0x080b08ab : add [edx + 1], ebp; call eax
> 0x08097ca6 : add [ecx + 0x23cc4], eax; add [ecx + 0x5f5e5bf8], cl; pop ebp; ret
> 0x080904ce : adc [ebp + 0x10899f14], ecx; xor eax, eax; pop ebx; pop esi; pop edi; ret
> 0x08090a45 : adc [ecx], edx; cld ; inc [ecx + 0x545b7c2]; add [ebx - 0x39], dl; ret
> 0x080564fa : add [edx], ebp; push 0; push ebx; call [ebp + 0x24]
> 0x08057ea5 : add [eax + 0x51], edx; mov [esp + 0x40], ecx; call [ebx + 0xc]
> 0x08066f83 : add [ebx + 0xf660741], ecx; adc eax, [edx]; mov [edx + 7], eax; mov eax, edx; ret
> 0x08066f43 : add [edx + 0xf660841], ecx; adc eax, [edx]; mov [edx + 8], al; mov eax, edx; ret
> 0x080839af : add [edi], ecx; test esi, edi; or [eax], al; add [eax - 0x89743], al; call [ebx + 0xf]
> 0x08090479 : add [ebp + 0x14], esi; sub edx, [ebx + 8]; sar edx, 2; mov eax, [ecx + 8]; pop ebx; sub eax, edx; ret