ropshell> use 1fab4c106642a4dfe4b8a489cc2b3334 (download)
name         : ncat.exe (i386/PE)
base address : 0x401000
total gadgets: 22194

ropshell> suggest "sp lifting"
> 0x00451f9a : add esp, 0x1004; ret
> 0x00451f9a : add esp, 0x1004; ret
> 0x00499611 : add esp, 0x204; ret
> 0x00428bf2 : add esp, 0x30; ret
> 0x0049764e : add esp, 0x404; ret
> 0x0048d460 : add esp, 0x50; ret