ropshell> use cd491c8ea3c952decf24e0a3414977b1 (download)
name         : lab4B (i386/RAW)
base address : 0x0
total gadgets: 9731

ropshell> suggest "write mem"
> 0x0004d042 : add [ecx], eax; ret
> 0x00014351 : add [ecx], edi; ret
> 0x000931b6 : add [edx], ecx; ret
> 0x0001f361 : add [eax + 0x5f028d02], ecx; ret
> 0x00047017 : add [eax + 0x39f47503], ebp; ret
> 0x000247ab : add [ebx + 0x5e5b04c4], eax; ret
> 0x00098e32 : add [esi], ecx; adc al, 0x41; ret
> 0x00066cbe : add [edi], ecx; inc esp; fucompp ; ret
> 0x00024105 : add [esi + 0x5f], ebx; pop ebp; ret
> 0x0005ad70 : add [ebp + 0xffcba44], ecx; inc esp; ret 0x8b
> 0x00026ef2 : add [ecx], ebx; rol [ebx - 0x1f7ce33c], 0xc; ret
> 0x0004092b : adc [eax + eax], edi; add [ecx], bh; ret
> 0x0009eba9 : adc [edx], eax; cld ; jmp [edx]
> 0x0003dc6f : add [ebp + 0x58], esi; mov eax, edx; add esp, 0x1c; ret
> 0x000999ec : add [ebx], eax; mov ch, 2; or cl, [esi]; adc al, 0x41; ret
> 0x00023907 : add [ebx + 0x4e608d0c], ecx; or al, 8; mov eax, [eax*4 + 0x80c4e60]; sub eax, ecx; ret
> 0x0001dcb3 : add [edx + 0xf660841], ecx; adc eax, [edx]; mov [edx + 8], al; mov eax, edx; ret
> 0x0009c6a4 : add [eax + 0xa], ebx; push cs; adc al, 0x41; ret