ropshell> use 3899f258e06eda564292b936b806261f (download)
name         : RM2MP3Converter.exe (i386/PE)
base address : 0x401000
total gadgets: 6308

ropshell> suggest "sp lifting"
> 0x00437038 : add esp, 0x100; ret
> 0x00437038 : add esp, 0x100; ret
> 0x00431c03 : add esp, 0x200; ret
> 0x00416814 : add esp, 0x304; ret
> 0x00404c7d : add esp, 0x440c; ret
> 0x00421615 : add esp, 0x50; ret