ropshell> use bd94baeec6bf96d111fadb01c4e0f1f4 (download)
name         : urlaubsverwaltung (i386/RAW)
base address : 0x0
total gadgets: 558

ropshell> suggest "write mem"
> 0x0000be97 : adc [eax], ecx; ret
> 0x0000342e : add [ecx], eax; ret
> 0x0000a6c4 : add [esi + 0x1900000a], edi; ret 0x3e
> 0x0000f212 : adc [ebx + 0xa], edi; sbb [eax], ebx; cmp bh, [ebx + 0x200000a]; ret 7
> 0x00011020 : add [edi], ebp; pop ds; sub eax, [eax]; add [edx], ah; call esi
> 0x000138d4 : add [edx], ebx; push es; add [eax], al; pop ss; ret 0x3e