ropshell> use a1f9191578ccf9869a952e47591e1708 (download)
name         : SystemSurvey.exe (i386/PE)
base address : 0x401000
total gadgets: 21654

ropshell> suggest "sp lifting"
> 0x0047c540 : add esp, 0x1004; ret
> 0x0047c540 : add esp, 0x1004; ret
> 0x004835f1 : add esp, 0x204; ret
> 0x004864ed : add esp, 0x30; ret
> 0x00499eca : add esp, 0x408; ret
> 0x0048c9c8 : add esp, 0x50; ret