ropshell> use 0903490aa687f48220bcabd0f0e0285b (download)
name         : binex_vuln_custom (x86_64/ELF)
base address : 0x6050
total gadgets: 4203

ropshell> suggest "write mem"
> 0x00008783 : adc [rcx], eax; ret
> 0x0002f1fb : adc [rdi], eax; ret
> 0x0002e318 : add [rax + 0x6b], ecx; ret
> 0x0002f3a5 : add [rdi + 0x18], rsi; ret
> 0x0002f3a6 : add [rdi + 0x18], esi; ret
> 0x0002aee3 : add [rdi], ecx; xchg eax, esp; ret
> 0x000386d1 : add [r8], rax; add rsp, 0x38; ret
> 0x0001cb90 : add [rbx], eax; add [rax - 0x77], cl; ret
> 0x0002f1f7 : adc [rdi + 0x10], eax; movups xmm[rdi], xmm0; ret
> 0x000307e3 : add [rcx], esi; rol [rcx + 0xf], cl; mov dh, 0xc3; ret
> 0x00035cca : add [r8], eax; add [rsi - 0x70], ah; movzx edi, al; call r14
> 0x00015c60 : adc [rsi + 8], eax; mov [r14], 8; add rsp, 8; pop rbx; pop r14; ret
> 0x0002f363 : add [rbp + 0xd], esi; mov rdx, [rdi + 0x18]; mov rdi, [rdi + 8]; mov rax, rdi; pop rcx; ret
> 0x000385fa : add [rcx + 0x110000fd], eax; add [rbx + rbp*2 + 0x4c], dh; mov edi, ebp; mov rsi, r15; mov rdx, rbx; call [r14 + 0x18]