ropshell> use 67b2026b5d9009b183a8f4eb23a6180e (download)
name         : KernelBase.dll (x86_64/PE)
base address : 0x180001000
total gadgets: 17820

ropshell> suggest "sp lifting"
> 0x1800117f3 : add rsp, 0x1538; ret
> 0x1800117f3 : add rsp, 0x1538; ret
> 0x180001715 : add rsp, 0x28; ret
> 0x180005b21 : add rsp, 0x38; ret
> 0x18001168d : add rsp, 0x48; ret
> 0x1800115c9 : add rsp, 0x58; ret