ropshell> use a7466bf9943f93479bd5c6ab5adee1c0 (download)
name         : m2.exe (i386/PE)
base address : 0x401000
total gadgets: 319

ropshell> suggest "sp lifting"
> 0x00401c30 : add esp, 0x1c; ret
> 0x00401c30 : add esp, 0x1c; ret
> 0x004065ad : add esp, 0x24; ret
> 0x00405734 : add esp, 0x3c; ret
> 0x004052b5 : add esp, 0x4c; ret
> 0x00401885 : add esp, 0x5c; ret
> 0x00401b1b : sub esp, 0xc; nop ; call eax