ropshell> use d40c10c9c401a206c019e64220a403a8 (download) name : m2.exe (i386/PE) base address : 0x401000 total gadgets: 317
ropshell> suggest "sp lifting" > 0x00401b70 : add esp, 0x1c; ret > 0x00401b70 : add esp, 0x1c; ret > 0x004064ed : add esp, 0x24; ret > 0x00405674 : add esp, 0x3c; ret > 0x004051f5 : add esp, 0x4c; ret > 0x004017c5 : add esp, 0x5c; ret > 0x00401a5b : sub esp, 0xc; nop ; call eax