ropshell> use 51b157e0717dbab01888f8076979645a (download)
name         : ropcha (i386/ELF)
base address : 0x8048250
total gadgets: 7185
ropshell> suggest "write mem"
> 0x080bcae7 : add [ecx], eax; ret
> 0x0805ed96 : add [ecx], edi; ret
> 0x0805e014 : add [edi], ecx; inc ebp; ret
> 0x080667a1 : add [eax + 0x5f028d02], ecx; ret
> 0x0809ad4e : adc [ebx + 0x5e5b04c4], eax; ret
> 0x080b1425 : add [ebp + 0x390475c9], eax; ret
> 0x080bda2b : add [edx + 1], ebp; call eax
> 0x08056745 : add [eax + 0x55], edx; call [esi + 0xc]
> 0x0809de16 : add [ecx + 0x23cc4], eax; add [ecx + 0x5f5e5bf8], cl; pop ebp; ret
> 0x08051ce5 : add [edx], ebp; push 0; push ebp; call [ebx + 0x40]
> 0x0804f81e : add [ebp + 0x7989af04], ecx; or [ecx - 0x3fcee7bf], cl; pop ebx; pop esi; pop edi; pop ebp; ret
> 0x08065133 : add [ebx + 0xf660741], ecx; adc eax, [edx]; mov [edx + 7], eax; mov eax, edx; ret
> 0x080650f3 : add [edx + 0xf660841], ecx; adc eax, [edx]; mov [edx + 8], al; mov eax, edx; ret
> 0x0808f050 : add [eax], edx; add [eax], al; mov eax, [ebp - 0x58c]; movzx edx, dl; add eax, [eax + edx*4 - 0x1f720]; jmp eax
> 0x08053d1b : add [esi], eax; add [eax], al; push [esp + 0xcc]; push [esp + 8]; push [esp + 8]; push esi; call [ebx + 0x40]