ropshell> use b03d591dc7da45ece20b3b467e6aadaa (download)
name         : monitor.sys (x86_64/PE)
base address : 0x11000
total gadgets: 145

ropshell> suggest "load mem"
> 0x000110bd : mov rcx, [rbx + 0x128]; call rdx
> 0x0001124d : mov rsi, [r11 + 0x20]; mov rsp, r11; pop rdi; ret
> 0x0001175a : mov rdi, [r11 + 0x28]; mov rsp, r11; pop r12; ret
> 0x000110be : mov ecx, [rbx + 0x128]; call rdx
> 0x0001124e : mov esi, [rbx + 0x20]; mov rsp, r11; pop rdi; ret
> 0x0001175b : mov edi, [rbx + 0x28]; mov rsp, r11; pop r12; ret
> 0x00011249 : mov rbx, [r11 + 0x18]; mov rsi, [r11 + 0x20]; mov rsp, r11; pop rdi; ret
> 0x00011d70 : mov rbp, [r11 + 0x20]; mov rsi, [r11 + 0x28]; mov rsp, r11; pop rdi; ret
> 0x00011d71 : mov ebp, [rbx + 0x20]; mov rsi, [r11 + 0x28]; mov rsp, r11; pop rdi; ret