ropshell> use 27bb6e8e11ba28265ea870b280cd9ed6 (download)
name         : VBoxC.dll (x86_64/PE)
base address : 0x180001000
total gadgets: 19001

ropshell> suggest
call
    > 0x18000a55e : call rax
    > 0x1800ffe4d : call rbx
    > 0x1800f9261 : call rcx
    > 0x18001f58c : call rdx
    > 0x18001b3e0 : call rsi
jmp
    > 0x180001d53 : jmp rax
    > 0x1800d7835 : jmp rbx
    > 0x180005c30 : jmp rcx
    > 0x180008fa2 : jmp rdx
    > 0x180181929 : jmp rdi
load mem
    > 0x18000c440 : mov rax, [rcx + 0x10]; ret
    > 0x180150e3a : mov rax, [rdx + 0x160]; ret
    > 0x18000c441 : mov eax, [rcx + 0x10]; ret
    > 0x180150e3b : mov eax, [rdx + 0x160]; ret
    > 0x18001e875 : movzx eax, [rcx]; add eax, 4; ret
load reg
    > 0x180001c23 : pop rax; ret
    > 0x1800018f0 : pop rbx; ret
    > 0x18009ccba : pop rdx; ret
    > 0x180001bc4 : pop rsi; ret
    > 0x1800010a8 : pop rdi; ret
pop pop ret
    > 0x180003eb3 : pop r12; ret
    > 0x180003aad : pop r12; pop rbp; ret
    > 0x18014b358 : pop r12; pop rbp; pop rbx; ret
    > 0x180159483 : pop r12; pop rdi; pop rbp; pop rbx; ret
    > 0x180004405 : pop r12; pop rdi; pop rsi; pop rbp; pop rbx; ret
sp lifting
    > 0x1800ffcb9 : add rsp, 0x10; ret
    > 0x1800ffcb9 : add rsp, 0x10; ret
    > 0x18000191b : add rsp, 0x28; ret
    > 0x18000c31d : add rsp, 0x38; ret
    > 0x180002262 : add rsp, 0x48; ret
stack pivoting
    > 0x180009656 : xchg eax, esp; ret
    > 0x18001960f : mov rsp, r11; pop r12; ret
    > 0x180019610 : mov esp, ebx; pop r12; ret
    > 0x18003de63 : lea esp, [rax - 0x18000000]; ret
    > 0x1800781b7 : lea rsp, [rbp + 0x60]; pop r15; pop r14; pop r13; pop r12; pop rbp; ret
write mem
    > 0x1800ab003 : add [rcx], edx; adc [rax], al; ret
    > 0x1800e8be5 : add [rdx], ecx; add [rax - 0x7d], cl; ret
    > 0x1800aa403 : add [rsi], edx; adc [rax], al; ret
    > 0x1800ecbc2 : add [rbp + 3], esi; mov eax, ecx; ret
    > 0x180152581 : add [rbx + 0x8e8c1c2], ecx; mov [rcx + 2], al; ret