Enter "gdb-q loudong", "run" and the string generated above in turn, and the addresses of each register can be viewed after the program runs. It can be seen that the string stored in the RBP register that we need to view is "haabiaab". According to the structure of the stack frame, the address of the upper 8 bytes pointed to by the RBP register is the return address, and the overflow point position is RBP position +8, which is easily obtained as 128+8=136. You can generate an item in the payload:
民国年间，绸布庄少东家黄绍宁娶刘婉云为妻，不料新娘无故失踪。黄老夫人为传宗接代逼绍宁再娶，贫苦女秋荷为报恩嫁给绍宁，住进了被诅咒且灵异传奇不断的黄家大院，饱受惊悚及悲惨凄苦的折磨。陈父与黄家生意竞争失败含恨而死，陈文海立誓报仇！他凭借超人女性的胆识潜入瑞盛祥卧底，与黄家管家吴妈及黄家养女雁儿串通把黄家大院搅得天翻地覆。绍宁同父异母的弟弟绍华回乡认祖归宗，遭陈文海算计爱上嫂子秋荷。绍宁妻离子散，黄家被逼到断子绝孙的境地。陈文海利用绍宁的信任抢得黄家产业，并陷害绍宁，使其被投入死牢待斩。已被富家收养的秋荷倾囊而出帮绍宁脱罪。绍宁欲接秋荷回家却遭到雁儿百般阻挠，雁儿如愿嫁给绍宁成为黄家第三任新娘，终因难产而死，留下一个女婴。陈文海深爱火影忍者雁儿，雁儿之死使他在世上再没一个亲人，他失去人性杀婴儿解恨，却不知这是他和雁儿的女儿。最后凭秋荷的大义和坚忍挽救了黄家，改变了陈文海的命运！
Tussilago farfara
明朝中叶，阉宦作乱，倭寇侵扰，民不聊生。少林俗家弟子杨恕与结拜兄弟共讨作恶多端的大太监“九千岁”。三人齐心协力，几经生死，最终用智谋与武力将不可一世的“九千岁”扳倒，恢复了朝野秩序。随后，杨恕与一众少林僧兵随同大军南下抗击倭寇。杨恕有勇有谋，挫败了倭寇的数番诡计。然而，结义兄弟朱辰钧却在篡位野心的驱使下，勾结倭寇，出卖国家。杨恕和马千秋经历了被利用而相互追杀的苦痛，最终弄清真相，兄弟联手阻止了朱辰钧与倭寇的阴谋。杨恕被任命为靖海将军，取得抗倭大捷，重振海防声威，保护了百姓安宁。
ハッピーバースデーツー・マイホーム 役所広司 岩崎良美
2015圣丹斯世界剧情片单元最佳导演奖。17岁的少女珊葛莉梦想有天能开飞机，但却受限于胆怯而内向的个性，还有惧高症。然而当珊葛莉遇上大胆、自由、自我主张的奥丝特，有了一百八十度转变。珊葛莉最后鼓起勇气登上飞机，但令她印象最深刻的是若即若离的关係。全片展现立陶宛的优美风光，藉由诗意的影像叙事，捕捉少女青涩的美感以及追求梦想的年轻力量。
"When this thing first appeared (that kind of dog-like 'living biological weapon'), I thought it was the gunfire that frightened the wild animals in the nearby woods. However, when I thought about it later, I was not right. Although I don't have a high diploma, The highest education received is high school. But before going to the front, In order to better adapt us to the fighting and life in Vietnam, Every backbone and cadre from the vice squad leader to the battalion level has gone through half a month to a month of 'surprise study'. The main content of the study is to catch up on the knowledge related to Vietnam. Among them, it is related to the local tropical rain forest, And what biological part of it takes up at least half of the class hours, What leeches, leeches, all kinds of poisonous snakes and insects, All said, but did not mention that there are social carnivores here, and they will also take the initiative to attack human beings so fiercely. I think if there are, it is impossible not to write in the textbook of "surprise learning", then it is not a natural creature. I was wondering at that time, when they appeared just at the time when the Vietnamese army's attack was frustrated, would it be related to them?
他纵横朝廷几十载，见惯倾轧，本不应对这样事动容，何况张杨确有失职之处，该当受到惩处
查理特(weir饰)少年时因误杀了继母珑苏的前夫被迫流亡，投奔到朋友的家中。多年后亚因为派善农场的继承问题又再次回到了农场，并再次遇到了自己多年来一直心仪的女孩冰娜侬(Min Pechaya饰)，冰与母亲温婶因为珑苏的救命之恩一直对珑苏忠心不二，恶毒的珑苏为了保护自己的农场继承权不断利用冰陷害亚，冰与亚在误会与磨难中逐渐产生了感情，最终两人终于打败了珑苏，又使派善农场恢复了生机。
Departure Position-Select the position where you want to start the flight.
Episode 12
唐僧（罗家英 饰）、孙悟空（陈浩民 饰）、朱八戒（林子聪 饰）、沙僧（火星 饰）师徒四人行至盘丝山，偶遇被捕兽夹夹伤的蜘蛛精小七（云千千 饰）并将其送至家中。孙悟空火眼金睛，见小七的母亲及众仆人是妖精所变遂下手除妖，但唐僧误以为悟空滥杀无辜，师徒二人就此决裂。没有孙悟空保护的唐僧和悟净被众蜘蛛精抓至盘丝洞，幸得本性善良的蜘蛛精小七所救，不料危后突然出现，大战一触即发。危急时刻孙悟空赶来加入战斗，众人合力压制住了危后。师徒四人坚定不移地继续踏上取经之路……
Identity: Poet [in Wenyi Village]
这样的安排本就有些怪胎，出兵一事宋义反对最为激烈，如今要他领军出征，他能全心全意投入作战？延缓贻误战机倒是大有可能。
《巨人》是韩国SBS电视台2010年播出的创社20年台庆剧，由刘仁植导演，张英哲编剧，李凡秀、郑宝石领衔主演。是一部以上世纪60~70年代首尔江南大开发为题材的时代剧，以上世纪60年代的首尔为舞台，讲述了三兄妹在首尔城市大开发中的成长故事。
严嵩何等老辣，只看过御史身份姓名，再看弹劾矛头，便知此事的蹊跷。
张老太太忙笑道：就是，就是这意思。
殿内，裕皇下令众臣平身。
恩里科是一名电台DJ，他的工作是接听夜间节目热线电话，倾听陌生人的故事。他和女儿分别居住在巴里和米兰，在一辆夜车上，他遇到了一个神秘的女人......该剧改编自Gianrico Carofiglio的短篇小说《夜间乘客》（Passeggeri notturni）和《失智》（Non esiste saggezza）。
