ropshell> use 7433d9a8a217c89f0100d7400595b5c4 (download)
name         : PlugY.dll (i386/PE)
base address : 0x10001000
total gadgets: 2588

ropshell> suggest "sp lifting"
> 0x10011ada : add esp, 0x104; ret
> 0x10011ada : add esp, 0x104; ret
> 0x100258b5 : add esp, 0x20; ret
> 0x10018c97 : add esp, 0x34; ret
> 0x1001fe38 : add esp, 0x40c; ret
> 0x10015ced : add esp, 0x50c; ret
> 0x10022bea : sub esp, 0x5f4; jmp eax