ropshell> use b0685fcead72b1dff7130f3ce152549f (download) name : KernelBase.dll (x86_64/RAW) base address : 0x0 total gadgets: 19289
ropshell> suggest "sp lifting" > 0x0000be1d : add rsp, 0x1538; ret > 0x0000be1d : add rsp, 0x1538; ret > 0x00001302 : add rsp, 0x28; ret > 0x0000245f : add rsp, 0x38; ret > 0x00007b7b : add rsp, 0x48; ret > 0x0000ba55 : add rsp, 0x58; ret