ropshell> use 79d35f7e0c03f572c4f76e065f0f4c06 (download) name : ntdll.dll (x86_64/PE) base address : 0x180001000 total gadgets: 6381
ropshell> suggest "sp lifting" > 0x1800a1238 : add rsp, 0x10; ret > 0x1800a1238 : add rsp, 0x10; ret > 0x18006d1f7 : add rsp, 0x238; ret > 0x18000144b : add rsp, 0x38; ret > 0x18007139a : add rsp, 0x438; ret > 0x18010d805 : add rsp, 0x508; ret