ropshell> use f503e4ae1d2faf5a499a8119610ab505 (download)
name         : BNUpdate.exe (i386/PE)
base address : 0x401000
total gadgets: 4767

ropshell> suggest "sp lifting"
> 0x00403ab0 : add esp, 0x100; ret
> 0x00403ab0 : add esp, 0x100; ret
> 0x0040354f : add esp, 0x204; ret
> 0x00402f5e : add esp, 0x30; ret
> 0x00423e04 : add esp, 0x40; ret
> 0x0041dcd0 : add esp, 0x50; ret