ropshell> use f041baaf75aae07d3f96385dd209dd37 (download)
name         : tcpip.sys (x86_64/PE)
base address : 0x1c0001000
total gadgets: 7426

ropshell> suggest "write mem"
> 0x1c01b7558 : add [rbx], eax; ret
> 0x1c00416f6 : add [rbx], esi; ret
> 0x1c019377a : add [rbx], edi; ret
> 0x1c01430e3 : adc [rdx], eax; ret
> 0x1c005aea7 : add [rdx], edi; ret
> 0x1c0052184 : add [rax + 0x3b], ecx; ret
> 0x1c0129719 : add [rax + 1], edi; ret
> 0x1c0164f37 : add [rbx + 0x448b48c8], ecx; ret
> 0x1c00836a8 : adc [rcx + 0x2a], eax; ret
> 0x1c007a8cc : add [rcx + 0x20], edx; ret
> 0x1c0084bee : add [rbp + 2], esi; ret
> 0x1c00563f8 : add [r9 + 0x22], eax; ret
> 0x1c002df7f : add [rdi], ecx; test bl, al; ret 8
> 0x1c002fee2 : add [r8], eax; add bh, dh; ret
> 0x1c00463b1 : add [rax], ecx; add [rax - 0x75], cl; ret
> 0x1c0084837 : add [rax], edx; add [rax], al; ret
> 0x1c00a7023 : adc [rbx], ecx; movaps xmm[rcx - 0x10], xmm0; ret
> 0x1c0129471 : add [rcx], edi; add [rax], al; ret
> 0x1c01742f7 : add [rdx + 0x2c], eax; xor eax, eax; ret
> 0x1c00a6ef0 : adc [rcx], eax; movups xmm[rcx + r8 - 0x10], xmm1; ret
> 0x1c009e01d : add [r9], rax; and [rcx + 0x10], r11; ret
> 0x1c00ef62b : add [rdi + 4], esi;  inc [rcx + 0x10]; ret
> 0x1c01b0543 : add [rbp + 0x3b], ecx; sal [rdx - 0x21], 1; ret
> 0x1c0045b03 : add [r8], rax; add [rcx - 0x7f], al; jmp rdi
> 0x1c0146376 : add [rbx + 0x44000c62], eax; mov [rdx + 4], eax; ret
> 0x1c01b2f7f : add [rsi], ebx; add [rax], al; mov [rip + 0x57cee], 0; add rsp, 0x28; ret
> 0x1c0110457 : adc [rdx + 0x45706354], edi; call [rip + 0x1101a4]; nop [rax + rax]; add rsp, 0x28; ret
> 0x1c0012e3f : adc [rbp + 0x3b], eax; fimul [rax - 0x75]; pop rcx; and [rcx - 0x73], al; inc [rcx + 0xf]; ret
> 0x1c01bffd0 : add [rax], ebp; mov rax, [rip + 0x47ba7]; shl r8, 8; add [r8 + rax + 0x30], rdx; ret