ropshell> use b15f0003e67f7e9b811223ce3cf16dbc (download)
name         : win32k-23h2-22631.sys (x86_64/PE)
base address : 0xfffff97fff001000
total gadgets: 15840

ropshell> suggest
call
    > 0xfffff97fff02aaf2 : call rdx
    > 0xfffff97fff025df2 : call [rdx]
    > 0xfffff97fff038a62 : call [rdi]
jmp
    > 0xfffff97fff019863 : jmp rax
    > 0xfffff97fff0582dc : push rsp; add eax, edi; ret
load mem
    > 0xfffff97fff017541 : mov eax, [rbx]; add [rax], al; ret
    > 0xfffff97fff015541 : mov eax, [rcx]; add [rax], al; ret
    > 0xfffff97fff016541 : mov eax, [rdx]; add [rax], al; ret
    > 0xfffff97fff001434 : mov eax, [rcx + 0x318]; add rsp, 0x28; ret
    > 0xfffff97fff0015fe : mov rdi, [r11 + 0x38]; mov rsp, r11; pop r14; pop r12; pop rbp; ret
load reg
    > 0xfffff97fff04462c : pop rax; ret
    > 0xfffff97fff001795 : pop rbx; ret
    > 0xfffff97fff0587a4 : pop rcx; ret
    > 0xfffff97fff02e4a2 : pop rdx; ret
    > 0xfffff97fff011fc2 : pop rsi; ret
pop pop ret
    > 0xfffff97fff011fc1 : pop r14; ret
    > 0xfffff97fff001607 : pop r12; pop rbp; ret
    > 0xfffff97fff0122cb : pop r12; pop rdi; pop rsi; ret
    > 0xfffff97fff011f14 : pop r12; pop rdi; pop rsi; pop rbp; ret
    > 0xfffff97fff011f12 : pop r13; pop r12; pop rdi; pop rsi; pop rbp; ret
sp lifting
    > 0xfffff97fff001257 : add rsp, 0x28; ret
    > 0xfffff97fff001257 : add rsp, 0x28; ret
    > 0xfffff97fff001f10 : add rsp, 0x38; ret
    > 0xfffff97fff00203a : add rsp, 0x48; ret
stack pivoting
    > 0xfffff97fff001602 : mov rsp, r11; pop r14; pop r12; pop rbp; ret
    > 0xfffff97fff001603 : mov esp, ebx; pop r14; pop r12; pop rbp; ret
    > 0xfffff97fff001073 : leave ; push rcx; or [rax], al; ret
syscall
    > 0xfffff97fff018d81 : syscall ; add [rax], al; ret
write mem
    > 0xfffff97fff058648 : adc [rdx], eax; ret
    > 0xfffff97fff058673 : adc [rcx + rax], eax; ret
    > 0xfffff97fff016da1 : adc [rbx], eax; add [rax], al; ret
    > 0xfffff97fff058423 : adc [rbx], ecx; movaps xmm[rcx - 0x10], xmm0; ret
    > 0xfffff97fff014da1 : adc [rcx], eax; add [rax], al; ret