ropshell> use 56b034b9ab67b78d8cf316af38dc5177 (download)
name         : VBoxDD.dll (x86_64/PE)
base address : 0x180001000
total gadgets: 24103

ropshell> suggest "load reg"
> 0x1800aa559 : pop rax; ret
> 0x18000168a : pop rbx; ret
> 0x18008ffda : pop rcx; ret
> 0x1800a4b06 : pop rdx; ret
> 0x1800057a7 : pop rsi; ret
> 0x180001389 : pop rdi; ret
> 0x18000208e : pop rbp; ret
> 0x1800025b8 : pop rsp; ret
> 0x180101812 : pop r8; ret
> 0x1800b5113 : pop r10; ret
> 0x1800025b7 : pop r12; ret
> 0x1800a1826 : pop r13; ret
> 0x180106ddd : pop r14; ret
> 0x1800e7c6b : pop r15; ret
> 0x1800a469f : pop r9; mov al, 1; ret
> 0x18000234f : mov rbx, [rsp + 8]; ret
> 0x18011666e : mov rsi, [rsp + 0x10]; ret
> 0x1800058b9 : mov rdi, [rsp + 0x10]; ret
> 0x180002350 : mov ebx, [rsp + 8]; ret
> 0x18011666f : mov esi, [rsp + 0x10]; ret
> 0x1800058ba : mov edi, [rsp + 0x10]; ret
> 0x180017d1e : mov rbp, [rsp + 0x20]; pop rsi; ret
> 0x180013a63 : mov r12, [rsp]; add rsp, 8; ret
> 0x180017d1f : mov ebp, [rsp + 0x20]; pop rsi; ret
> 0x180013a64 : mov esp, [rsp]; add rsp, 8; ret
> 0x180130ec4 : mov r11, [rsp + 8]; add rsp, 0x10; ret
> 0x180088a6b : mov r15, [rsp + 0x20]; add rsp, 0x48; ret
> 0x1800bf260 : mov rax, [rsp + 0x28]; mov [rax], 0; xor eax, eax; ret
> 0x18001eea7 : mov rcx, [rsp + 0x40]; call [r15 + 8]
> 0x180130ec0 : mov r10, [rsp]; mov r11, [rsp + 8]; add rsp, 0x10; ret
> 0x1800d5e83 : mov eax, [rsp + 0x10]; call [rax + 0x48]
> 0x1800b6185 : mov ecx, [rsp + 0x30]; mov rdx, r12; call rax
> 0x180130ec1 : mov edx, [rsp]; mov r11, [rsp + 8]; add rsp, 0x10; ret
> 0x1800668f9 : mov rdx, [rsp + 0x30]; mov rcx, rax; call [rax]
> 0x1800effb2 : mov r8, [rsp + 0x48]; mov rcx, r8; call [r8]
> 0x18005542d : mov r9, [rsp + r9*8 + 0x50]; call [rdi]
> 0x1800eb252 : mov r13, [rsp + 0x20]; mov rbx, [rsp + 0x58]; mov rsi, [rsp + 0x38]; add rsp, 0x48; ret
> 0x1800f988f : mov r14, [rsp + 0x50]; mov r15d, [rsp + 0xc8]; lea rdx, [rip + 0x82ad5]; mov r8d, esi; mov rcx, rbx; call [rbx]