ropshell> use b45cd437b8cf1335baff2f4508f4cde1 (download)
name         : babywin_level3.exe (x86_64/PE)
base address : 0x140001000
total gadgets: 5125

ropshell> suggest "write mem"
> 0x14001c6ba : adc [rcx], eax; ret
> 0x140023279 : adc [rdx], eax; ret
> 0x140019447 : adc [rcx + 0x18], eax; ret
> 0x1400197a8 : adc [rdx + 0x20], eax; ret
> 0x14001972c : adc [rdx + 0x10], ecx; ret
> 0x14003051c : adc [rdi + rax], eax; ret
> 0x140025395 : adc [rdi], ecx; mov bh, 0; ret
> 0x14001c6b7 : adc [rax], edx; movups xmm[rcx], xmm0; ret
> 0x14005d1a8 : add [rbx + 0x3a8a0], eax; add ch, bh; ret
> 0x140052b83 : adc [rdi + 6], esi; mov eax, 0xd; ret
> 0x1400307dc : adc [rbp + 2], esi; mov al, 1; ret
> 0x14001ccc9 : add [rax + 0x28b48c3], edx; mov [rcx], rax; mov rax, rcx; ret
> 0x14000829e : add [rax + 0xa], edi; cmovne ax, [rsp + 0x60]; add rsp, 0x98; ret
> 0x14000aeb6 : add [rsi + 7], edi; and [rcx], 0; mov [rcx + 8], al; mov rax, rcx; ret