ropshell> use 676af3657767cef877136f12ff2fb2d6 (download)
name         : rop_train (i386/ELF)
base address : 0x8049090
total gadgets: 6950

ropshell> suggest "write mem"
> 0x0809ce5a : add [ecx], edi; ret
> 0x0805e574 : add [edi], ecx; inc ebp; ret
> 0x08066cd1 : add [eax + 0x5f028d02], ecx; ret
> 0x0806dd5e : adc [ebx + 0x5e5b04c4], eax; ret
> 0x080a15ed : add [ebp + 0x390475c9], eax; ret
> 0x0809ce56 : add [ebp + 0x39010a54], ecx; ret
> 0x080aa67b : add [edx + 1], ebp; call eax
> 0x0805f6bb : adc [edx], eax; lea edx, [edx - 0x768f0]; cmovne eax, edx; ret
> 0x08097cbe : add [ecx + 0x23cc4], eax; add [ecx + 0x5f5e5bf8], cl; pop ebp; ret
> 0x08055406 : add [edx], ebp; push 0; push ebx; call [ebp + 0x24]
> 0x08065663 : add [ebx + 0xf660741], ecx; adc eax, [edx]; mov [edx + 7], eax; mov eax, edx; ret
> 0x08065623 : add [edx + 0xf660841], ecx; adc eax, [edx]; mov [edx + 8], al; mov eax, edx; ret
> 0x08093bce : add [eax + 0x57], edx; lea eax, [esp + 0x40]; push eax; push [ebp]; call esi
> 0x0806b725 : add [ecx], eax; rep stosd es:[edi], eax; mov ecx, edx; rep stosb es:[edi], al; mov eax, [esp + 8]; pop edi; ret
> 0x0805f6b0 : add [ebp + 0x13], esi; lea eax, [edx - 0x704d0]; test [ecx + 0x11], 2; lea edx, [edx - 0x768f0]; cmovne eax, edx; ret