ropshell> use 8960272039c30e86a48481f9652a230f (download)
name         : unegg (i386/ELF)
base address : 0x8049a60
total gadgets: 4499

ropshell> suggest "write mem"
> 0x08055755 : add [ecx], esi; ret
> 0x0806f85f : add [ecx], edi; ret
> 0x08049ade : add [ebx + 0x5d5b04c4], eax; ret
> 0x08092461 : add [edi], ecx; mov dh, 0x4d; ret
> 0x08084c9e : add [ebx + 0x518b0c41], ecx; adc cl, cl; ret
> 0x08062e19 : add [eax + 0x14], edx; xor eax, eax; pop ebp; ret
> 0x080857b1 : add [ecx], ebp; rol cl, 1; clc ; add bh, [ecx]; ret
> 0x08067f65 : add [ebx], eax; add [eax], al; add [ebx + 0x5e5b3cc4], al; pop edi; pop ebp; ret
> 0x08067f98 : add [edx], eax; add [eax], al; add [ebx + 0x5e5b3cc4], al; pop edi; pop ebp; ret
> 0x0806874d : add [ebx + 4], esi; mov ebx, [ebp - 8]; mov esi, [ebp - 4]; mov esp, ebp; pop ebp; ret
> 0x0806b37f : adc [ecx], eax; add [eax], al; cmova ecx, [ebp - 0x48]; mov [esp], eax; mov [ebp - 0x48], ecx; call [ebx + 0xc]
> 0x0806b538 : add [ebx + 0x31738], edx; mov [esp + 4], edx; mov edx, [ebx + 0x18]; mov [ebp - 0xf8], eax; mov [esp], edx; call [ebx + 0x14]