ropshell> use f268ecefc18706b3f2aa69ee7319b141 (download)
name         : ntdll.dll (x86_64/PE)
base address : 0x180001000
total gadgets: 6328

ropshell> suggest "sp lifting"
> 0x1800a1ff8 : add rsp, 0x10; ret
> 0x1800a1ff8 : add rsp, 0x10; ret
> 0x18006b10f : add rsp, 0x238; ret
> 0x18000144b : add rsp, 0x38; ret
> 0x18007cfaa : add rsp, 0x438; ret
> 0x18010d9a5 : add rsp, 0x508; ret