stdlib.h exploiter
says to
YSITD
反射式好像也可以