ropshell> use 4252e39aafeb85e37dc47cefc9d4e391 (download) name : DiscordHook64.dll (x86_64/PE) base address : 0x180001000 total gadgets: 5995
ropshell> suggest "load reg" > 0x180055cb2 : pop rax; ret > 0x18001c9bc : pop rbx; ret > 0x18000e269 : pop rcx; ret > 0x180001f9b : pop rsi; ret > 0x180001218 : pop rdi; ret > 0x180017917 : pop rbp; ret > 0x1800317c4 : pop rsp; ret > 0x180069e5c : pop r12; ret > 0x1800ae55b : pop r13; ret > 0x180003ea3 : pop r14; ret > 0x180001217 : pop r15; ret > 0x1800c0123 : pop rdx; add cl, [rbp - 0x75]; ret > 0x180090e94 : mov rdi, [rsp + 0x18]; ret > 0x1800c06f6 : mov r14, [rsp + 0x18]; ret > 0x1800c06f7 : mov esi, [rsp + 0x18]; ret > 0x180090e95 : mov edi, [rsp + 0x18]; ret > 0x1800aad13 : mov rsi, [rsp + 0x18]; pop rdi; ret > 0x1800bfea8 : mov eax, [rsp]; add rsp, 8; ret > 0x18006c427 : mov rax, [rsp + 0x30]; add rsp, 0x28; ret > 0x1800a1564 : mov rbx, [rsp + 8]; mov al, r8b; ret > 0x1800644d4 : mov r11, [rsp + 8]; add rsp, 0x10; ret > 0x1800644d5 : mov ebx, [rsp + 8]; add rsp, 0x10; ret > 0x1800bb673 : mov rcx, [rsp + 0x40]; call rax > 0x1800bb674 : mov ecx, [rsp + 0x40]; call rax > 0x1800644d0 : mov r10, [rsp]; mov r11, [rsp + 8]; add rsp, 0x10; ret > 0x1800644d1 : mov edx, [rsp]; mov r11, [rsp + 8]; add rsp, 0x10; ret > 0x180056b31 : pop r8; mov ecx, eax; not ecx; shr eax, 2; and eax, ecx; and eax, 1; ret > 0x18009f296 : mov rbp, [rsp + 0x10]; mov rsi, [rsp + 0x18]; mov rdi, [rsp + 0x20]; ret > 0x18009f297 : mov ebp, [rsp + 0x10]; mov rsi, [rsp + 0x18]; mov rdi, [rsp + 0x20]; ret