ropshell> use efeb7f6c44b3ef7f5adaad87d52bbbf4 (download)
name         : ntdll.dll (x86_64/PE)
base address : 0x180001000
total gadgets: 6434

ropshell> suggest "sp lifting"
> 0x1800a10f8 : add rsp, 0x10; ret
> 0x1800a10f8 : add rsp, 0x10; ret
> 0x1800854cf : add rsp, 0x238; ret
> 0x1800026fb : add rsp, 0x38; ret
> 0x18007be6a : add rsp, 0x438; ret
> 0x18010a345 : add rsp, 0x508; ret