ropshell> use b03d591dc7da45ece20b3b467e6aadaa (download)
name         : monitor.sys (x86_64/PE)
base address : 0x11000
total gadgets: 145
ropshell> suggest
call
    > 0x00011dca : call rax
    > 0x000110c4 : call rdx
jmp
    > 0x000121c4 : jmp [rsi + 0x66]
load mem
    > 0x000110bd : mov rcx, [rbx + 0x128]; call rdx
    > 0x0001124d : mov rsi, [r11 + 0x20]; mov rsp, r11; pop rdi; ret
    > 0x0001175a : mov rdi, [r11 + 0x28]; mov rsp, r11; pop r12; ret
    > 0x000110be : mov ecx, [rbx + 0x128]; call rdx
    > 0x0001124e : mov esi, [rbx + 0x20]; mov rsp, r11; pop rdi; ret
load reg
    > 0x000117d0 : pop rax; ret
    > 0x00011457 : pop rbx; ret
    > 0x000110d8 : pop rdi; ret
    > 0x00011ae4 : pop rbp; ret
    > 0x00011762 : pop rsp; ret
pop pop ret
    > 0x00011761 : pop r12; ret
    > 0x000115ae : pop rbp; pop rbx; ret
    > 0x00011ae2 : pop rdi; pop rsi; pop rbp; ret
    > 0x000115ac : pop rdi; pop rsi; pop rbp; pop rbx; ret
sp lifting
    > 0x000125d4 : add rsp, 0x28; ret
    > 0x000125d4 : add rsp, 0x28; ret
    > 0x000113df : add rsp, 0x48; ret
    > 0x000117cd : add rsp, 0x58; ret
stack pivoting
    > 0x0001175e : mov rsp, r11; pop r12; ret
    > 0x0001175f : mov esp, ebx; pop r12; ret
write mem
    > 0x00012513 : adc [rax + 0xf], ecx; ret