ropshell> use 0d2e302910fccc2094dcab8e24739dc8 (download)
name         : TEFW.exe (i386/PE)
base address : 0x401000
total gadgets: 19404

ropshell> suggest "sp lifting"
> 0x00402166 : add esp, 0x1004; ret
> 0x00402166 : add esp, 0x1004; ret
> 0x00426b44 : add esp, 0x204; ret
> 0x00409793 : add esp, 0x30; ret
> 0x0040124a : add esp, 0x404; ret
> 0x004095c6 : add esp, 0x50; ret