ropshell> use caaf1d03a067c40c069c6b3b5f6aa406 (download)
name         : ntdll.dll (x86_64/PE)
base address : 0x180001000
total gadgets: 6238

ropshell> suggest "sp lifting"
> 0x1800a4158 : add rsp, 0x10; ret
> 0x1800a4158 : add rsp, 0x10; ret
> 0x18006d003 : add rsp, 0x238; ret
> 0x180006f1e : add rsp, 0x38; ret
> 0x18007cd6e : add rsp, 0x438; ret
> 0x180017d0a : add rsp, 0x58; ret