ropshell> use ddfdc0ca6fbb9372402f9e6cb0ed1097 (download)
name         : ntdll.dll (x86_64/PE)
base address : 0x78e51000
total gadgets: 12000

ropshell> suggest "sp lifting"
> 0x78e8032a : add rsp, 0x108; ret
> 0x78e8032a : add rsp, 0x108; ret
> 0x78e907cf : add rsp, 0x268; ret
> 0x78e51c20 : add rsp, 0x38; ret
> 0x78e8d40e : add rsp, 0x438; ret
> 0x78f1875c : add rsp, 0x508; ret