ropshell> use 0f4c6ea7b2c6e8f34cc3fda602a8dc87 (download) name : m2.exe (i386/PE) base address : 0x401000 total gadgets: 318
ropshell> suggest "sp lifting" > 0x00401bb0 : add esp, 0x1c; ret > 0x00401bb0 : add esp, 0x1c; ret > 0x0040652d : add esp, 0x24; ret > 0x004056b4 : add esp, 0x3c; ret > 0x00405235 : add esp, 0x4c; ret > 0x00401805 : add esp, 0x5c; ret > 0x00401a9b : sub esp, 0xc; nop ; call eax