ropshell> use c394b60fbc0f8c1a1c0c9a015dcbef97 (download) name : ntdll.dll (x86_64/PE) base address : 0x180001000 total gadgets: 6480
ropshell> suggest "sp lifting" > 0x1800a46a8 : add rsp, 0x10; ret > 0x1800a46a8 : add rsp, 0x10; ret > 0x180002e64 : add rsp, 0x28; ret > 0x180002a3b : add rsp, 0x38; ret > 0x18007edb6 : add rsp, 0x438; ret > 0x18010bba5 : add rsp, 0x508; ret