ropshell> use 27bb6e8e11ba28265ea870b280cd9ed6 (download)
name         : VBoxC.dll (x86_64/PE)
base address : 0x180001000
total gadgets: 19001

ropshell> suggest "load reg"
> 0x180001c23 : pop rax; ret
> 0x1800018f0 : pop rbx; ret
> 0x18009ccba : pop rdx; ret
> 0x180001bc4 : pop rsi; ret
> 0x1800010a8 : pop rdi; ret
> 0x180001432 : pop rbp; ret
> 0x180003eb4 : pop rsp; ret
> 0x18014c19a : pop r8; ret
> 0x180003eb3 : pop r12; ret
> 0x180078e35 : pop r13; ret
> 0x18007e460 : pop r14; pop r12; ret
> 0x1800ff0ce : pop rcx; or bh, bh; ret
> 0x18014b4b4 : pop r15; pop r12; pop rbx; ret
> 0x1800a1b23 : pop r9; adc [rax], al; ret
> 0x18001b627 : mov rbx, [rsp + 0x18]; ret
> 0x18015598f : mov rdi, [rsp + 0x10]; ret
> 0x18001b628 : mov ebx, [rsp + 0x18]; ret
> 0x180155990 : mov edi, [rsp + 0x10]; ret
> 0x1801519d2 : mov rsi, [rsp + 0x28]; pop rdi; ret
> 0x1801529d9 : mov rbp, [rsp + 0x18]; pop rsi; ret
> 0x1801519d3 : mov esi, [rsp + 0x28]; pop rdi; ret
> 0x1801529da : mov ebp, [rsp + 0x18]; pop rsi; ret
> 0x1800ff9f5 : mov rax, [rsp + 0x50]; add rsp, 0x38; ret
> 0x1800ffcb4 : mov r11, [rsp + 8]; add rsp, 0x10; ret
> 0x18000f8d1 : mov eax, [rsp + 0x40]; add rsp, 0xa8; ret
> 0x180041b16 : mov edx, [rsp + 0xd0]; jmp rcx
> 0x18009c399 : mov ecx, [rsp + 0x48]; call r15
> 0x1800ffcb0 : mov r10, [rsp]; mov r11, [rsp + 8]; add rsp, 0x10; ret
> 0x180006575 : mov rdx, [rsp + 0x58]; mov rcx, rbx; call [rax + 0x50]
> 0x1800635fc : mov r8, [rsp + 0x100]; mov rdx, r14; call [rax + 0x28]
> 0x1801008ba : mov rcx, [rsp + 0x20]; mov rax, [rcx]; call [rax + 0x10]
> 0x180002fdf : mov r9, [rsp + 0x58]; mov r8d, ebx; mov rdx, rdi; call [rax + 0x50]
> 0x1801519c5 : mov r12, [rsp + 0x18]; mov rax, r10; mov rbx, [rsp + 0x20]; mov rsi, [rsp + 0x28]; pop rdi; ret
> 0x1801519c6 : mov esp, [rsp + 0x18]; mov rax, r10; mov rbx, [rsp + 0x20]; mov rsi, [rsp + 0x28]; pop rdi; ret
> 0x18009c473 : mov r13, [rsp + 0x4be0]; mov rcx, [rsp + 0x50]; mov rax, [rcx]; call [rax + 0x10]
> 0x18009c46b : mov r14, [rsp + 0x4bd8]; mov r13, [rsp + 0x4be0]; mov rcx, [rsp + 0x50]; mov rax, [rcx]; call [rax + 0x10]
> 0x180067163 : mov r15, [rsp + 0x270]; mov rax, [r15]; mov r8, [rsp + 0x100]; lea rdx, [rip + 0x128503]; mov rcx, r15; call [rax + 0x20]