ropshell> use ca9d1a667e2467e4682012f045bfeb74 (download)
name         : lab5B (i386/ELF)
base address : 0x8049090
total gadgets: 7088

ropshell> suggest "write mem"
> 0x08097d90 : add [ecx], edi; ret
> 0x08066a71 : add [eax + 0x5f028d02], ecx; ret
> 0x0806d9de : adc [ebx + 0x5e5b04c4], eax; ret
> 0x080aa773 : add [edx + 1], ebp; call eax
> 0x08092b48 : add [ecx + 0x23cc4], eax; add [ecx + 0x5f5e5bf8], cl; pop ebp; ret
> 0x080525e5 : add [edx], ebp; push 0; push ebp; call [ebx + 0x40]
> 0x0806bc07 : add [edi], ecx; test [edi + edi*8 - 1], ebx; jmp [esi - 0x70]
> 0x08065403 : add [ebx + 0xf660741], ecx; adc eax, [edx]; mov [edx + 7], eax; mov eax, edx; ret
> 0x080653c3 : add [edx + 0xf660841], ecx; adc eax, [edx]; mov [edx + 8], al; mov eax, edx; ret
> 0x080a807b : add [ebp + 0x1c850fc9], eax; add [eax], eax; add [ebx + 0x5e5b5cc4], al; pop edi; pop ebp; ret
> 0x0808e9ae : add [eax + 0x57], edx; lea eax, [esp + 0x40]; push eax; push [ebp]; call esi
> 0x0806b435 : add [ecx], eax; rep stosd es:[edi], eax; mov ecx, edx; rep stosb es:[edi], al; mov eax, [esp + 8]; pop edi; ret
> 0x0808b655 : add [ebp + 0x10], esi; sub edx, [ebx + 8]; sar edx, 2; mov eax, [ecx + 8]; pop ebx; sub eax, edx; ret