ropshell> use 6f020a220388eca0ab6062dc27bd16b6 (download)
name         : tdi.sys (x86_64/PE)
base address : 0x11000
total gadgets: 329

ropshell> suggest "load reg"
> 0x00012d8f : pop rbx; ret
> 0x000128b4 : pop rsi; ret
> 0x0001149f : pop rdi; ret
> 0x000121b1 : pop rbp; ret
> 0x000110e9 : pop rsp; ret
> 0x000110e8 : pop r12; ret
> 0x0001258e : pop r13; ret
> 0x000110e6 : pop r15; pop r12; ret
> 0x000110e5 : pop rax; pop r15; pop r12; ret
> 0x00014429 : pop r14; pop r13; pop r12; ret
> 0x00012321 : mov rdi, [rsp + 8]; ret
> 0x00012322 : mov edi, [rsp + 8]; ret
> 0x0001244e : pop r8; lea rdx, [rbx + 0x40]; lea rcx, [rbx + 0x78]; call rax