ropshell> use 67b2026b5d9009b183a8f4eb23a6180e (download) name : KernelBase.dll (x86_64/PE) base address : 0x180001000 total gadgets: 17820
ropshell> suggest "sp lifting" > 0x1800117f3 : add rsp, 0x1538; ret > 0x1800117f3 : add rsp, 0x1538; ret > 0x180001715 : add rsp, 0x28; ret > 0x180005b21 : add rsp, 0x38; ret > 0x18001168d : add rsp, 0x48; ret > 0x1800115c9 : add rsp, 0x58; ret