// https://syzkaller.appspot.com/bug?id=7b765435e0b3227e40a8aab0cca847af63ca637a // autogenerated by syzkaller (http://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include __attribute__((noreturn)) static void doexit(int status) { volatile unsigned i; syscall(__NR_exit_group, status); for (i = 0;; i++) { } } #include #include #include #include #include #include #include const int kFailStatus = 67; const int kRetryStatus = 69; static void fail(const char* msg, ...) { int e = errno; va_list args; va_start(args, msg); vfprintf(stderr, msg, args); va_end(args); fprintf(stderr, " (errno %d)\n", e); doexit((e == ENOMEM || e == EAGAIN) ? kRetryStatus : kFailStatus); } static void use_temporary_dir() { char tmpdir_template[] = "./syzkaller.XXXXXX"; char* tmpdir = mkdtemp(tmpdir_template); if (!tmpdir) fail("failed to mkdtemp"); if (chmod(tmpdir, 0777)) fail("failed to chmod"); if (chdir(tmpdir)) fail("failed to chdir"); } static void test(); void loop() { while (1) { test(); } } struct thread_t { int created, running, call; pthread_t th; }; static struct thread_t threads[16]; static void execute_call(int call); static int running; static void* thr(void* arg) { struct thread_t* th = (struct thread_t*)arg; for (;;) { while (!__atomic_load_n(&th->running, __ATOMIC_ACQUIRE)) syscall(SYS_futex, &th->running, FUTEX_WAIT, 0, 0); execute_call(th->call); __atomic_fetch_sub(&running, 1, __ATOMIC_RELAXED); __atomic_store_n(&th->running, 0, __ATOMIC_RELEASE); syscall(SYS_futex, &th->running, FUTEX_WAKE); } return 0; } static void execute(int num_calls) { int call, thread; running = 0; for (call = 0; call < num_calls; call++) { for (thread = 0; thread < sizeof(threads) / sizeof(threads[0]); thread++) { struct thread_t* th = &threads[thread]; if (!th->created) { th->created = 1; pthread_attr_t attr; pthread_attr_init(&attr); pthread_attr_setstacksize(&attr, 128 << 10); pthread_create(&th->th, &attr, thr, th); } if (!__atomic_load_n(&th->running, __ATOMIC_ACQUIRE)) { th->call = call; __atomic_fetch_add(&running, 1, __ATOMIC_RELAXED); __atomic_store_n(&th->running, 1, __ATOMIC_RELEASE); syscall(SYS_futex, &th->running, FUTEX_WAKE); struct timespec ts; ts.tv_sec = 0; ts.tv_nsec = 20 * 1000 * 1000; syscall(SYS_futex, &th->running, FUTEX_WAIT, 1, &ts); if (running) usleep((call == num_calls - 1) ? 10000 : 1000); break; } } } } #ifndef __NR_io_setup #define __NR_io_setup 245 #endif #ifndef __NR_socketpair #define __NR_socketpair 360 #endif #ifndef __NR_readlink #define __NR_readlink 85 #endif #ifndef __NR_connect #define __NR_connect 362 #endif #ifndef __NR_recvmsg #define __NR_recvmsg 372 #endif #ifndef __NR_mlock2 #define __NR_mlock2 376 #endif #ifndef __NR_pipe2 #define __NR_pipe2 331 #endif #ifndef __NR_socket #define __NR_socket 359 #endif #ifndef __NR_accept4 #define __NR_accept4 364 #endif #ifndef __NR_wait4 #define __NR_wait4 114 #endif #ifndef __NR_keyctl #define __NR_keyctl 288 #endif #ifndef __NR_unshare #define __NR_unshare 310 #endif #ifndef __NR_mmap #define __NR_mmap 192 #endif #ifndef __NR_openat #define __NR_openat 295 #endif #ifndef __NR_sendmmsg #define __NR_sendmmsg 345 #endif #ifndef __NR_bpf #define __NR_bpf 357 #endif #ifndef __NR_ppoll #define __NR_ppoll 309 #endif #ifndef __NR_creat #define __NR_creat 8 #endif #ifndef __NR_close #define __NR_close 6 #endif #ifndef __NR_bind #define __NR_bind 361 #endif #ifndef __NR_ioctl #define __NR_ioctl 54 #endif #ifndef __NR_mount #define __NR_mount 21 #endif #ifndef __NR_open #define __NR_open 5 #endif #ifndef __NR_sendfile #define __NR_sendfile 187 #endif #ifndef __NR_getdents #define __NR_getdents 141 #endif #ifndef __NR_getsockopt #define __NR_getsockopt 365 #endif #ifndef __NR_clock_gettime #define __NR_clock_gettime 265 #endif #ifndef __NR_unlink #define __NR_unlink 10 #endif #ifndef __NR_setsockopt #define __NR_setsockopt 366 #endif #ifndef __NR_readv #define __NR_readv 145 #endif #ifndef __NR_sendmsg #define __NR_sendmsg 370 #endif #ifndef __NR_sendto #define __NR_sendto 369 #endif #ifndef __NR_mkdir #define __NR_mkdir 39 #endif #undef __NR_mmap #define __NR_mmap __NR_mmap2 long r[15]; void execute_call(int call) { switch (call) { case 0: r[0] = syscall(__NR_socket, 0x15, 5, 0); break; case 1: *(uint32_t*)0x206dbffc = 0; syscall(__NR_setsockopt, r[0], 1, 8, 0x206dbffc, 4); break; case 2: *(uint16_t*)0x208a5ff0 = 2; *(uint16_t*)0x208a5ff2 = htobe16(0x4e20); *(uint32_t*)0x208a5ff4 = htobe32(0x7f000001); *(uint8_t*)0x208a5ff8 = 0; *(uint8_t*)0x208a5ff9 = 0; *(uint8_t*)0x208a5ffa = 0; *(uint8_t*)0x208a5ffb = 0; *(uint8_t*)0x208a5ffc = 0; *(uint8_t*)0x208a5ffd = 0; *(uint8_t*)0x208a5ffe = 0; *(uint8_t*)0x208a5fff = 0; syscall(__NR_bind, r[0], 0x208a5ff0, 0x10); break; case 3: memcpy( (void*)0x20f7db7f, "\xba\x67\x13\x68\xd1\x01\x00\x00\x00\x49\x00\x00\x00\x01\x00\x00\x00" "\x01\x8b\xe4\x9e\x93\x01\x44\x28\x65\x31\x99\x97\xd0\xef\xdb\x2f\x54" "\xb6\xa1\x0c\x73\x27\x75\x74\x82\xbf\xce\x94\x5c\x2a\x91\xfb\x8d\xfa" "\xfc\x1d\x3f\x56\xbc\x54\x3a\xb8\x73\x21\xe1\x2c\xca\x08\xa7\x44\xa2" "\xd1\x28\xb0\x06\x34\xbc\x88\x21\x51\xd3\x68\x09\x22\x9a\x96\xbc\x34" "\x37\xef\x15\x94\x89\x38\x4a\xde\x07\x7b\xa2\x95\xea\xc2\x88\x2d\xbf" "\xd3\x78\x1d\xd4\xd4\xe6\x09\xc4\x26\x28\xdb\xb7\x09\xb3\xeb\x1f\xa0" "\x30\x00\x90\x45\xdd\x98\xb9\xe6\xd7\x7b\x6c\xec\x9c\xeb\x68\x55\x95" "\xd4\x39\x95\xe0\xf0\x4c\x32\x26\x09\x43\xad\xd7\x98\x31\xe6\x61\xc6" "\xa3\x51\xde\xdc\x8b\x9d\x22\x0f\xbf\x9f\xb6\xe4\x4f\xb6\xa6\x29\xce" "\x9a\x82\x02\x51\x24\xfe\xc9\xf3\xee\x75\x1f\x7d\xa0\xcd\x7e\x79\x9b" "\xe8\x8d\xdb\xda\xc2\x0b\x48\xe8\x90\xff\x81\xd7\xfa\x28\xc2\xd0\x17" "\xd7\x93\x2f\x25\x69\x03\x87\x40\x46\x1a\xcc\xd4\x58\x2f\x57\x6e\x4f" "\xdb\x61\x50\xa3\x39\x9f\x82\x66\xbc\x19\xeb\x94\x36\x48\xad\x1a\xd8" "\x14\x20\xed\x6c\x38\x24\x36\xe4\x74\x39\x0c\x89\x95\xe8\x29\xe4\xf9" "\xdf\x43\xee\xd8\x5a\x60\xb9\xee\x25\x4e\x31\xeb\x62\x90\x08\x57\xfa" "\x13\x4e\x76\xcc\x64\x88\x03\x34\xad\xbf\xf0\x69\xa2\xe5\xe6\x47\xd2" "\xed\x36\xa9\x6b\x23\x83\x4b\x6f\x6c\xa6\xb8\x11\x3b\xaf\x4c\xf3\x03" "\x47\xfb\xb7\xff\xc3\x0a\xea\x99\x87\x2c\xc0\xdb\xa0\x3b\x07\xd3\x34" "\x7b\x2d\x25\x7e\xdb\xe2\x73\x3c\x26\xb7\x33\x7a\x79\x96\x2d\x8c\xe8" "\x54\x69\xe3\xbc\xbe\x0e\x4a\x48\xa6\xae\x69\xd1\x3f\x2d\x4b\x51\x55" "\xb3\x90\xef\x67\xaa\x71\x4b\x82\xb6\x31\x3e\xe2\x77\xcb\x89\x86\xec" "\xa5\xdb\x2e\x97\xcb\x1a\xe2\x24\x3b\xba\x80\x27\x4f\x61\x4e\xce\x52" "\x1b\xae\xf4\x43\x39\x4b\x4c\x16\x1c\xb9\xae\x92\x6e\x21\x89\x25\x78" "\xb4\x9c\xfd\x6e\xfe\x1c\xb1\x57\x21\x48\xc1\x0d\x92\x21\x8e\xd7\x3e" "\xc1\x16\xa1\x8d\xe8\x0a\xc4\x2d\x27\x26\xa4\x52\x3a\x76\x4f\xc6\xdc" "\x35\x6c\x5f\xbb\xf9\xd2\xc9\x47\xae\x3b\xc9\xa3\xdc\x76\x09\x9f\x32" "\x57\xc8\xd5\x95\x28\x76\x15\x1b\x03\x26\xd8\xcb\x1d\x56\x83\xee\x4a" "\xb5\xde\xd9\xa3\x4c\x00\xac\x1b\x03\xf3\x46\x27\xec\x18\xa7\xc2\xe9" "\x2c\x87\xb7\x89\x65\x49\xcf\xab\x5e\xb5\x5f\xa8\x5a\x97\x09\x94\xbd" "\x4b\x22\xb5\xf0\xd0\x45\xe2\x41\x25\x6d\x06\xf4\x85\xa4\x7b\x4a\x55" "\xed\x38\x9b\xc1\x73\x45\x41\x23\x2c\xd4\x19\x08\xb5\xcf\xa4\xb8\xfc" "\xfc\xaf\xce\x50\x0a\x0c\x7a\xe9\x97\x67\x71\x3a\x98\xe7\x92\x7a\xa6" "\x9f\x6c\xcd\x7d\xae\xa6\x2f\x19\xce\xb8\x25\x59\xf4\x18\x99\xc9\xa9" "\xae\xe9\x91\x13\xe7\xe6\x4b\x5f\x8b\x98\x24\xbe\x9f\xdb\xfa\x4d\xd4" "\x99\x56\x73\xd8\x82\xbb\x4d\xae\xb6\x44\x13\xb3\x34\xe1\x14\x96\x5d" "\x2b\xa3\xce\xa8\x05\x1e\x69\x25\x08\x70\x1b\x94\x00\xcb\x12\xea\xe4" "\x57\xf8\xb8\x54\x99\x44\x09\x1b\x72\x91\x60\x93\x99\x18\xd8\xfc\xae" "\x61\x1a\x48\xed\x66\x5f\x77\x0d\xb6\x37\x48\x7a\x23\x6d\xa1\xa5\x8b" "\xa7\x56\x66\x68\x65\x1a\x77\x17\x1f\xc4\xfe\x50\x64\x96\xd1\x90\x59" "\x34\x3d\xbe\x4f\x42\x66\x25\xd3\xf2\xb7\x05\xf5\x45\x81\x37\x23\x61" "\x77\x0b\xf5\xa9\x09\x8a\x9f\xaf\xef\xaf\x54\x64\x26\xb2\x94\x23\x9a" "\xc3\x3e\x31\x86\xe4\xd5\x8a\xd2\xfa\x99\x5a\x6a\xd4\xdc\x07\x4e\x7c" "\xca\x11\xae\xad\x10\x95\x63\xb2\x07\x6c\x7c\x6e\x9f\x57\xec\x63\xdf" "\x96\x08\x04\xe2\xe7\xf9\xd8\x44\x4d\xe9\x55\x0c\xca\x3d\xf7\x83\x4d" "\x86\x4e\x97\x77\x29\x1c\x2e\x1f\x62\x05\xde\x2e\x43\xdc\x99\x5a\xb8" "\xbb\x15\x15\xa3\x65\xef\xc2\x83\x0f\xa3\xe7\xa1\xdd\x13\x7f\x55\x0d" "\x60\x35\x21\x2b\xc1\xf5\x1c\x3b\x4c\xee\xa4\x30\xdf\x49\xff\xc9\x21" "\x00\x84\xef\x15\x6a\xd7\xe0\xd2\x19\xef\xd6\xc1\x16\x69\x37\x35\xb4" "\x45\x21\xd3\x89\x96\x9a\x3a\x65\x61\x7c\xd2\xfd\x6e\x14\x06\x06\x01" "\xce\xe4\xcd\x05\x4c\xf3\x6f\xe0\x48\xb5\x7d\x1d\x9e\xe3\xca\xd2\xa7" "\x35\x52\x44\x99\x26\xb4\xa6\xb0\x3f\xbe\x9c\x0e\xc6\x83\x57\xe1\xfb" "\xe5\x2e\xd7\x7b\x67\xf5\x87\x0c\x0a\xef\xb7\xee\x82\x36\x74\x7e\x0d" "\x67\xa2\x67\x25\xfb\x51\x55\x44\xcb\xbe\x84\x64\xda\x94\xcf\xd8\xc0" "\xb9\x4b\xb4\xe5\x1a\x26\x3b\x17\x49\xbd\x0a\x7c\xf6\x51\x93\x1f\x80" "\x6d\x1b\x92\x8d\x1f\x99\x94\xf1\xad\x4d\x50\xe6\xa5\xcd\x7a\x8e\x4e" "\x68\x7f\x85\x64\xfd\xac\xc8\x64\x01\x3d\x09\x5b\xa9\xd5\x70\x9e\xce" "\xd3\xc2\x8e\xab\xda\x47\x6d\x17\x7a\x78\x36\x40\x0a\x01\xe0\x2b\xee" "\xd5\xa6\x63\x6d\x40\x64\xfd\xda\x34\x49\x67\xad\x86\x82\xd1\x4b\x87" "\xc7\x17\x27\xcb\x66\xbe\x27\xd1\xd3\x91\x91\xf4\x22\x3c\x54\x5b\x62" "\xfb\x5d\x60\x26\x2b\xa8\x07\x6a\x65\xdb\xc1\x94\xce\xe1\xdf\x84\x6c" "\x58\x4b\x7b\xbe\x9d\xce\x6e\x68\x95\xb2\xcb\xbb\x64\xb0\x3b\x55\x54" "\x8b\x84\x5c\xc3\xde\x2f\x93\x9e\xf9\x18\x42\x1a\xf9\xa5\xe9\x15\x7e" "\x83\x76\x51\x24\x52\x99\xc0\x39\x92\xd0\xdd\xee\x06\xbd\x22\xa3\x15" "\x22\xac\xa0\xf3\x09\xb1\xfe\xcc\xeb\xc0\xb1\xc0\xed\x9d\x21\xc1\x9b" "\xfd\x15\xcd\x31\x3f\xf6\x43\x94\xfd\x6a\x10\x90\x48\x90\xc9\xf6\xd6" "\x46\xb0\x26\xf2\x72\x53\xe8\xf5\x84\xc3\xff\xd2\x0a\xd6\x7e\x8b\x62" "\xed\x76\x76\x70\x6d\x40\xbc\x5c\x80\xe3\x76\x98\x0b\x81", 1153); *(uint16_t*)0x2069affb = 2; *(uint16_t*)0x2069affd = htobe16(0x4e20); *(uint32_t*)0x2069afff = htobe32(0x7f000001); *(uint8_t*)0x2069b003 = 0; *(uint8_t*)0x2069b004 = 0; *(uint8_t*)0x2069b005 = 0; *(uint8_t*)0x2069b006 = 0; *(uint8_t*)0x2069b007 = 0; *(uint8_t*)0x2069b008 = 0; *(uint8_t*)0x2069b009 = 0; *(uint8_t*)0x2069b00a = 0; syscall(__NR_sendto, r[0], 0x20f7db7f, 0x481, 0, 0x2069affb, 0x10); break; case 4: memcpy((void*)0x20000000, "/dev/hwrng", 11); r[1] = syscall(__NR_openat, 0xffffff9c, 0x20000000, 0x40000, 0); break; case 5: *(uint32_t*)0x20000040 = 3; *(uint32_t*)0x20000044 = 0xc4cf431b; syscall(__NR_ioctl, r[1], 0x40086414, 0x20000040); break; case 6: *(uint32_t*)0x20000040 = 0x814; syscall(__NR_ioctl, r[1], 0x5423, 0x20000040); break; case 7: *(uint16_t*)0x202b4000 = 2; *(uint16_t*)0x202b4002 = htobe16(0x4e20); *(uint32_t*)0x202b4004 = htobe32(0x7f000001); *(uint8_t*)0x202b4008 = 0; *(uint8_t*)0x202b4009 = 0; *(uint8_t*)0x202b400a = 0; *(uint8_t*)0x202b400b = 0; *(uint8_t*)0x202b400c = 0; *(uint8_t*)0x202b400d = 0; *(uint8_t*)0x202b400e = 0; *(uint8_t*)0x202b400f = 0; syscall(__NR_sendto, r[0], 0x204b3fff, 0, 0, 0x202b4000, 0x10); break; case 8: *(uint32_t*)0x207af000 = 0x20dd0fe6; *(uint32_t*)0x207af004 = 0x1a; syscall(__NR_readv, r[0], 0x207af000, 1); break; case 9: *(uint32_t*)0x20000080 = 0xc6a8; syscall(__NR_setsockopt, r[1], 0x84, 0x21, 0x20000080, 4); break; case 10: *(uint32_t*)0x20000040 = 0x10; r[2] = syscall(__NR_accept4, 0xffffff9c, 0x20000000, 0x20000040, 0x800); break; case 11: *(uint32_t*)0x20000080 = 1; *(uint32_t*)0x20000084 = r[2]; *(uint32_t*)0x20000088 = 1; if (syscall(__NR_ioctl, -1, 0xc00caee0, 0x20000080) != -1) r[3] = *(uint32_t*)0x20000084; break; case 12: *(uint64_t*)0x20000040 = 9; syscall(__NR_ioctl, r[3], 0x4004ae52, 0x20000040); break; case 13: memcpy((void*)0x20632000, "./file0", 8); syscall(__NR_mkdir, 0x20632000, 0); break; case 14: memcpy((void*)0x2000a000, "./file0", 8); memcpy((void*)0x20014ff8, "./file0", 8); memcpy((void*)0x20014000, "proc", 5); syscall(__NR_mount, 0x2000a000, 0x20014ff8, 0x20014000, 0, 0x20fc9000); break; case 15: memcpy((void*)0x202cb000, "./file0", 8); r[4] = syscall(__NR_open, 0x202cb000, 0, 0xfffffffd); break; case 16: memcpy((void*)0x20000100, "\x62\x63\x73\x68\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16); *(uint32_t*)0x20000110 = 0; *(uint8_t*)0x20000114 = 0; *(uint8_t*)0x20000115 = 0; *(uint8_t*)0x20000116 = 0; *(uint8_t*)0x20000117 = 0; *(uint8_t*)0x20000118 = 0; *(uint8_t*)0x20000119 = 0; *(uint8_t*)0x2000011a = 0; *(uint8_t*)0x2000011b = 0; *(uint8_t*)0x2000011c = 0; *(uint8_t*)0x2000011d = 0; *(uint8_t*)0x2000011e = 0; *(uint8_t*)0x2000011f = 0; *(uint8_t*)0x20000120 = 0; *(uint8_t*)0x20000121 = 0; *(uint8_t*)0x20000122 = 0; *(uint8_t*)0x20000123 = 0; *(uint8_t*)0x20000124 = 0; *(uint8_t*)0x20000125 = 0; *(uint8_t*)0x20000126 = 0; *(uint8_t*)0x20000127 = 0; if (syscall(__NR_ioctl, r[4], 0x8933, 0x20000100) != -1) r[5] = *(uint32_t*)0x20000110; break; case 17: *(uint32_t*)0x20000200 = 0x200000c0; *(uint16_t*)0x200000c0 = 0x10; *(uint16_t*)0x200000c2 = 0; *(uint32_t*)0x200000c4 = 0; *(uint32_t*)0x200000c8 = 0x100200; *(uint32_t*)0x20000204 = 0xc; *(uint32_t*)0x20000208 = 0x200001c0; *(uint32_t*)0x200001c0 = 0x20000140; *(uint32_t*)0x20000140 = 0x44; *(uint16_t*)0x20000144 = 0x12; *(uint16_t*)0x20000146 = 0x11c; *(uint32_t*)0x20000148 = 0x70bd26; *(uint32_t*)0x2000014c = 0x25dfdbfd; *(uint8_t*)0x20000150 = 0; *(uint8_t*)0x20000151 = 0; *(uint16_t*)0x20000152 = 0; *(uint32_t*)0x20000154 = r[5]; *(uint32_t*)0x20000158 = 0x28000; *(uint32_t*)0x2000015c = 0xec23c108; *(uint16_t*)0x20000160 = 0x14; *(uint16_t*)0x20000162 = 0x14; memcpy((void*)0x20000164, "\x62\x72\x69\x64\x67\x65\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16); *(uint16_t*)0x20000174 = 8; *(uint16_t*)0x20000176 = 0x11; *(uint8_t*)0x20000178 = 7; *(uint16_t*)0x2000017c = 8; *(uint16_t*)0x2000017e = 0x23; *(uint32_t*)0x20000180 = 0x917; *(uint32_t*)0x200001c4 = 0x44; *(uint32_t*)0x2000020c = 1; *(uint32_t*)0x20000210 = 0; *(uint32_t*)0x20000214 = 0; *(uint32_t*)0x20000218 = 4; syscall(__NR_sendmsg, r[4], 0x20000200, 0x4000); break; case 18: syscall(__NR_getdents, r[4], 0x20554000, 0x1000); break; case 19: memcpy((void*)0x20000240, "/dev/vhost-vsock", 17); syscall(__NR_openat, 0xffffff9c, 0x20000240, 2, 0); break; case 20: syscall(__NR_wait4, 0, 0, 0x80000000, 0x20a94f70); break; case 21: memcpy((void*)0x20000000, "/dev/qat_adf_ctl", 17); r[6] = syscall(__NR_openat, 0xffffff9c, 0x20000000, 0x284200, 0); break; case 22: *(uint64_t*)0x20000040 = 9; *(uint64_t*)0x20000048 = 2; syscall(__NR_ioctl, r[6], 0x4010640d, 0x20000040); break; case 23: *(uint32_t*)0x20000100 = 0x58; syscall(__NR_accept4, r[6], 0x20000080, 0x20000100, 0x80000); break; case 24: memcpy((void*)0x20000080, "/selinux/avc/cache_threshold", 29); syscall(__NR_openat, 0xffffff9c, 0x20000080, 2, 0); break; case 25: memcpy((void*)0x200000c0, "\x66\x69\x6c\x74\x65\x72\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00", 32); *(uint32_t*)0x200000e0 = 0xe; *(uint32_t*)0x200000e4 = 4; *(uint32_t*)0x200000e8 = 0x644; *(uint32_t*)0x200000ec = -1; *(uint32_t*)0x200000f0 = 0x354; *(uint32_t*)0x200000f4 = 0x108; *(uint32_t*)0x200000f8 = 0; *(uint32_t*)0x200000fc = -1; *(uint32_t*)0x20000100 = -1; *(uint32_t*)0x20000104 = 0x578; *(uint32_t*)0x20000108 = 0x578; *(uint32_t*)0x2000010c = 0x578; *(uint32_t*)0x20000110 = -1; *(uint32_t*)0x20000114 = 4; *(uint32_t*)0x20000118 = 0x20000080; *(uint8_t*)0x2000011c = 0; *(uint8_t*)0x2000011d = 0; *(uint8_t*)0x2000011e = 0; *(uint8_t*)0x2000011f = 0; *(uint8_t*)0x20000120 = 0; *(uint8_t*)0x20000121 = 0; *(uint8_t*)0x20000122 = 0; *(uint8_t*)0x20000123 = 0; *(uint8_t*)0x20000124 = 0; *(uint8_t*)0x20000125 = 0; *(uint8_t*)0x20000126 = 0; *(uint8_t*)0x20000127 = 0; *(uint8_t*)0x20000128 = 0; *(uint8_t*)0x20000129 = 0; *(uint8_t*)0x2000012a = 0; *(uint8_t*)0x2000012b = 0; *(uint8_t*)0x2000012c = 0; *(uint8_t*)0x2000012d = 0; *(uint8_t*)0x2000012e = 0; *(uint8_t*)0x2000012f = 0; *(uint8_t*)0x20000130 = 0; *(uint8_t*)0x20000131 = 0; *(uint8_t*)0x20000132 = 0; *(uint8_t*)0x20000133 = 0; *(uint8_t*)0x20000134 = 0; *(uint8_t*)0x20000135 = 0; *(uint8_t*)0x20000136 = 0; *(uint8_t*)0x20000137 = 0; *(uint8_t*)0x20000138 = 0; *(uint8_t*)0x20000139 = 0; *(uint8_t*)0x2000013a = 0; *(uint8_t*)0x2000013b = 0; *(uint8_t*)0x2000013c = 0; *(uint8_t*)0x2000013d = 0; *(uint8_t*)0x2000013e = 0; *(uint8_t*)0x2000013f = 0; *(uint8_t*)0x20000140 = 0; *(uint8_t*)0x20000141 = 0; *(uint8_t*)0x20000142 = 0; *(uint8_t*)0x20000143 = 0; *(uint8_t*)0x20000144 = 0; *(uint8_t*)0x20000145 = 0; *(uint8_t*)0x20000146 = 0; *(uint8_t*)0x20000147 = 0; *(uint8_t*)0x20000148 = 0; *(uint8_t*)0x20000149 = 0; *(uint8_t*)0x2000014a = 0; *(uint8_t*)0x2000014b = 0; *(uint8_t*)0x2000014c = 0; *(uint8_t*)0x2000014d = 0; *(uint8_t*)0x2000014e = 0; *(uint8_t*)0x2000014f = 0; *(uint8_t*)0x20000150 = 0; *(uint8_t*)0x20000151 = 0; *(uint8_t*)0x20000152 = 0; *(uint8_t*)0x20000153 = 0; *(uint8_t*)0x20000154 = 0; *(uint8_t*)0x20000155 = 0; *(uint8_t*)0x20000156 = 0; *(uint8_t*)0x20000157 = 0; *(uint8_t*)0x20000158 = 0; *(uint8_t*)0x20000159 = 0; *(uint8_t*)0x2000015a = 0; *(uint8_t*)0x2000015b = 0; *(uint8_t*)0x2000015c = 0; *(uint8_t*)0x2000015d = 0; *(uint8_t*)0x2000015e = 0; *(uint8_t*)0x2000015f = 0; *(uint8_t*)0x20000160 = 0; *(uint8_t*)0x20000161 = 0; *(uint8_t*)0x20000162 = 0; *(uint8_t*)0x20000163 = 0; *(uint8_t*)0x20000164 = 0; *(uint8_t*)0x20000165 = 0; *(uint8_t*)0x20000166 = 0; *(uint8_t*)0x20000167 = 0; *(uint8_t*)0x20000168 = 0; *(uint8_t*)0x20000169 = 0; *(uint8_t*)0x2000016a = 0; *(uint8_t*)0x2000016b = 0; *(uint8_t*)0x2000016c = 0; *(uint8_t*)0x2000016d = 0; *(uint8_t*)0x2000016e = 0; *(uint8_t*)0x2000016f = 0; *(uint8_t*)0x20000170 = 0; *(uint8_t*)0x20000171 = 0; *(uint8_t*)0x20000172 = 0; *(uint8_t*)0x20000173 = 0; *(uint8_t*)0x20000174 = 0; *(uint8_t*)0x20000175 = 0; *(uint8_t*)0x20000176 = 0; *(uint8_t*)0x20000177 = 0; *(uint8_t*)0x20000178 = 0; *(uint8_t*)0x20000179 = 0; *(uint8_t*)0x2000017a = 0; *(uint8_t*)0x2000017b = 0; *(uint8_t*)0x2000017c = 0; *(uint8_t*)0x2000017d = 0; *(uint8_t*)0x2000017e = 0; *(uint8_t*)0x2000017f = 0; *(uint8_t*)0x20000180 = 0; *(uint8_t*)0x20000181 = 0; *(uint8_t*)0x20000182 = 0; *(uint8_t*)0x20000183 = 0; *(uint8_t*)0x20000184 = 0; *(uint8_t*)0x20000185 = 0; *(uint8_t*)0x20000186 = 0; *(uint8_t*)0x20000187 = 0; *(uint8_t*)0x20000188 = 0; *(uint8_t*)0x20000189 = 0; *(uint8_t*)0x2000018a = 0; *(uint8_t*)0x2000018b = 0; *(uint8_t*)0x2000018c = 0; *(uint8_t*)0x2000018d = 0; *(uint8_t*)0x2000018e = 0; *(uint8_t*)0x2000018f = 0; *(uint8_t*)0x20000190 = 0; *(uint8_t*)0x20000191 = 0; *(uint8_t*)0x20000192 = 0; *(uint8_t*)0x20000193 = 0; *(uint8_t*)0x20000194 = 0; *(uint8_t*)0x20000195 = 0; *(uint8_t*)0x20000196 = 0; *(uint8_t*)0x20000197 = 0; *(uint8_t*)0x20000198 = 0; *(uint8_t*)0x20000199 = 0; *(uint8_t*)0x2000019a = 0; *(uint8_t*)0x2000019b = 0; *(uint8_t*)0x2000019c = 0; *(uint8_t*)0x2000019d = 0; *(uint8_t*)0x2000019e = 0; *(uint8_t*)0x2000019f = 0; *(uint8_t*)0x200001a0 = 0; *(uint8_t*)0x200001a1 = 0; *(uint8_t*)0x200001a2 = 0; *(uint8_t*)0x200001a3 = 0; *(uint32_t*)0x200001a4 = 0; *(uint16_t*)0x200001a8 = 0xd4; *(uint16_t*)0x200001aa = 0x108; *(uint32_t*)0x200001ac = 0; *(uint64_t*)0x200001b4 = 0; *(uint64_t*)0x200001bc = 0; *(uint16_t*)0x200001c4 = 0x2c; memcpy((void*)0x200001c6, "\x73\x72\x68\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00", 29); *(uint8_t*)0x200001e3 = 0; *(uint8_t*)0x200001e4 = 0x87; *(uint8_t*)0x200001e5 = 1; *(uint8_t*)0x200001e6 = 9; *(uint8_t*)0x200001e7 = 6; *(uint16_t*)0x200001e8 = 0x1ff; *(uint16_t*)0x200001ea = 0x600; *(uint16_t*)0x200001ec = 2; *(uint16_t*)0x200001f0 = 0x34; memcpy((void*)0x200001f2, "\x53\x45\x54\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00", 29); *(uint8_t*)0x2000020f = 3; *(uint16_t*)0x20000210 = 0; *(uint8_t*)0x20000212 = 3; *(uint8_t*)0x20000213 = 4; *(uint16_t*)0x20000214 = 0xd92c; *(uint8_t*)0x20000216 = 0x1f; *(uint8_t*)0x20000217 = 4; *(uint16_t*)0x20000218 = 1; *(uint8_t*)0x2000021a = 1; *(uint8_t*)0x2000021b = 1; *(uint32_t*)0x2000021c = 4; *(uint32_t*)0x20000220 = 5; *(uint8_t*)0x20000224 = 0xfe; *(uint8_t*)0x20000225 = 0x80; *(uint8_t*)0x20000226 = 0; *(uint8_t*)0x20000227 = 0; *(uint8_t*)0x20000228 = 0; *(uint8_t*)0x20000229 = 0; *(uint8_t*)0x2000022a = 0; *(uint8_t*)0x2000022b = 0; *(uint8_t*)0x2000022c = 0; *(uint8_t*)0x2000022d = 0; *(uint8_t*)0x2000022e = 0; *(uint8_t*)0x2000022f = 0; *(uint8_t*)0x20000230 = 0; *(uint8_t*)0x20000231 = 0; *(uint8_t*)0x20000232 = 0; *(uint8_t*)0x20000233 = 0xaa; *(uint8_t*)0x20000234 = 0xfe; *(uint8_t*)0x20000235 = 0x80; *(uint8_t*)0x20000236 = 0; *(uint8_t*)0x20000237 = 0; *(uint8_t*)0x20000238 = 0; *(uint8_t*)0x20000239 = 0; *(uint8_t*)0x2000023a = 0; *(uint8_t*)0x2000023b = 0; *(uint8_t*)0x2000023c = 0; *(uint8_t*)0x2000023d = 0; *(uint8_t*)0x2000023e = 0; *(uint8_t*)0x2000023f = 0; *(uint8_t*)0x20000240 = 0; *(uint8_t*)0x20000241 = 0; *(uint8_t*)0x20000242 = 0; *(uint8_t*)0x20000243 = 0xaa; *(uint32_t*)0x20000244 = htobe32(-1); *(uint32_t*)0x20000248 = htobe32(0xff000000); *(uint32_t*)0x2000024c = htobe32(0xff000000); *(uint32_t*)0x20000250 = htobe32(0xff0000ff); *(uint32_t*)0x20000254 = htobe32(0xffffff00); *(uint32_t*)0x20000258 = htobe32(0xffffff00); *(uint32_t*)0x2000025c = htobe32(-1); *(uint32_t*)0x20000260 = htobe32(-1); memcpy((void*)0x20000264, "\x65\x72\x73\x70\x61\x6e\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16); memcpy((void*)0x20000274, "\x79\x61\x6d\x30\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00", 16); *(uint8_t*)0x20000284 = -1; *(uint8_t*)0x20000285 = 0; *(uint8_t*)0x20000286 = 0; *(uint8_t*)0x20000287 = 0; *(uint8_t*)0x20000288 = 0; *(uint8_t*)0x20000289 = 0; *(uint8_t*)0x2000028a = 0; *(uint8_t*)0x2000028b = 0; *(uint8_t*)0x2000028c = 0; *(uint8_t*)0x2000028d = 0; *(uint8_t*)0x2000028e = 0; *(uint8_t*)0x2000028f = 0; *(uint8_t*)0x20000290 = 0; *(uint8_t*)0x20000291 = 0; *(uint8_t*)0x20000292 = 0; *(uint8_t*)0x20000293 = 0; *(uint8_t*)0x20000294 = 0; *(uint8_t*)0x20000295 = 0; *(uint8_t*)0x20000296 = 0; *(uint8_t*)0x20000297 = 0; *(uint8_t*)0x20000298 = 0; *(uint8_t*)0x20000299 = 0; *(uint8_t*)0x2000029a = 0; *(uint8_t*)0x2000029b = 0; *(uint8_t*)0x2000029c = 0; *(uint8_t*)0x2000029d = 0; *(uint8_t*)0x2000029e = 0; *(uint8_t*)0x2000029f = 0; *(uint8_t*)0x200002a0 = 0; *(uint8_t*)0x200002a1 = 0; *(uint8_t*)0x200002a2 = 0; *(uint8_t*)0x200002a3 = 0; *(uint16_t*)0x200002a4 = 0x3c; *(uint8_t*)0x200002a6 = 6; *(uint8_t*)0x200002a7 = 1; *(uint8_t*)0x200002a8 = 4; *(uint32_t*)0x200002ac = 0; *(uint16_t*)0x200002b0 = 0x228; *(uint16_t*)0x200002b2 = 0x24c; *(uint32_t*)0x200002b4 = 0; *(uint64_t*)0x200002bc = 0; *(uint64_t*)0x200002c4 = 0; *(uint16_t*)0x200002cc = 0x138; memcpy((void*)0x200002ce, "\x72\x74\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00", 29); *(uint8_t*)0x200002eb = 0; *(uint32_t*)0x200002ec = 0xffff; *(uint32_t*)0x200002f0 = 0x100; *(uint32_t*)0x200002f4 = 7; *(uint32_t*)0x200002f8 = 0x101; *(uint8_t*)0x200002fc = 0x20; *(uint8_t*)0x200002fd = 4; *(uint8_t*)0x20000300 = 0xfe; *(uint8_t*)0x20000301 = 0x80; *(uint8_t*)0x20000302 = 0; *(uint8_t*)0x20000303 = 0; *(uint8_t*)0x20000304 = 0; *(uint8_t*)0x20000305 = 0; *(uint8_t*)0x20000306 = 0; *(uint8_t*)0x20000307 = 0; *(uint8_t*)0x20000308 = 0; *(uint8_t*)0x20000309 = 0; *(uint8_t*)0x2000030a = 0; *(uint8_t*)0x2000030b = 0; *(uint8_t*)0x2000030c = 0; *(uint8_t*)0x2000030d = 0; *(uint8_t*)0x2000030e = 0; *(uint8_t*)0x2000030f = 0x11; *(uint64_t*)0x20000310 = htobe64(0); *(uint64_t*)0x20000318 = htobe64(1); *(uint8_t*)0x20000320 = 0xfe; *(uint8_t*)0x20000321 = 0x80; *(uint8_t*)0x20000322 = 0; *(uint8_t*)0x20000323 = 0; *(uint8_t*)0x20000324 = 0; *(uint8_t*)0x20000325 = 0; *(uint8_t*)0x20000326 = 0; *(uint8_t*)0x20000327 = 0; *(uint8_t*)0x20000328 = 0; *(uint8_t*)0x20000329 = 0; *(uint8_t*)0x2000032a = 0; *(uint8_t*)0x2000032b = 0; *(uint8_t*)0x2000032c = 0; *(uint8_t*)0x2000032d = 0; *(uint8_t*)0x2000032e = 0; *(uint8_t*)0x2000032f = 0x11; *(uint8_t*)0x20000330 = 0xfe; *(uint8_t*)0x20000331 = 0x80; *(uint8_t*)0x20000332 = 0; *(uint8_t*)0x20000333 = 0; *(uint8_t*)0x20000334 = 0; *(uint8_t*)0x20000335 = 0; *(uint8_t*)0x20000336 = 0; *(uint8_t*)0x20000337 = 0; *(uint8_t*)0x20000338 = 0; *(uint8_t*)0x20000339 = 0; *(uint8_t*)0x2000033a = 0; *(uint8_t*)0x2000033b = 0; *(uint8_t*)0x2000033c = 0; *(uint8_t*)0x2000033d = 0; *(uint8_t*)0x2000033e = 0; *(uint8_t*)0x2000033f = 0xbb; *(uint8_t*)0x20000340 = 0; *(uint8_t*)0x20000341 = 0; *(uint8_t*)0x20000342 = 0; *(uint8_t*)0x20000343 = 0; *(uint8_t*)0x20000344 = 0; *(uint8_t*)0x20000345 = 0; *(uint8_t*)0x20000346 = 0; *(uint8_t*)0x20000347 = 0; *(uint8_t*)0x20000348 = 0; *(uint8_t*)0x20000349 = 0; *(uint8_t*)0x2000034a = 0; *(uint8_t*)0x2000034b = 0; *(uint8_t*)0x2000034c = 0; *(uint8_t*)0x2000034d = 0; *(uint8_t*)0x2000034e = 0; *(uint8_t*)0x2000034f = 0; *(uint64_t*)0x20000350 = htobe64(0); *(uint64_t*)0x20000358 = htobe64(1); *(uint8_t*)0x20000360 = 0; *(uint8_t*)0x20000361 = 0; *(uint8_t*)0x20000362 = 0; *(uint8_t*)0x20000363 = 0; *(uint8_t*)0x20000364 = 0; *(uint8_t*)0x20000365 = 0; *(uint8_t*)0x20000366 = 0; *(uint8_t*)0x20000367 = 0; *(uint8_t*)0x20000368 = 0; *(uint8_t*)0x20000369 = 0; *(uint8_t*)0x2000036a = -1; *(uint8_t*)0x2000036b = -1; *(uint32_t*)0x2000036c = htobe32(-1); *(uint8_t*)0x20000370 = 0xfe; *(uint8_t*)0x20000371 = 0x80; *(uint8_t*)0x20000372 = 0; *(uint8_t*)0x20000373 = 0; *(uint8_t*)0x20000374 = 0; *(uint8_t*)0x20000375 = 0; *(uint8_t*)0x20000376 = 0; *(uint8_t*)0x20000377 = 0; *(uint8_t*)0x20000378 = 0; *(uint8_t*)0x20000379 = 0; *(uint8_t*)0x2000037a = 0; *(uint8_t*)0x2000037b = 0; *(uint8_t*)0x2000037c = 0; *(uint8_t*)0x2000037d = 0; *(uint8_t*)0x2000037e = 0; *(uint8_t*)0x2000037f = 0xe; *(uint8_t*)0x20000380 = -1; *(uint8_t*)0x20000381 = 1; *(uint8_t*)0x20000382 = 0; *(uint8_t*)0x20000383 = 0; *(uint8_t*)0x20000384 = 0; *(uint8_t*)0x20000385 = 0; *(uint8_t*)0x20000386 = 0; *(uint8_t*)0x20000387 = 0; *(uint8_t*)0x20000388 = 0; *(uint8_t*)0x20000389 = 0; *(uint8_t*)0x2000038a = 0; *(uint8_t*)0x2000038b = 0; *(uint8_t*)0x2000038c = 0; *(uint8_t*)0x2000038d = 0; *(uint8_t*)0x2000038e = 0; *(uint8_t*)0x2000038f = 1; *(uint8_t*)0x20000390 = 0; *(uint8_t*)0x20000391 = 0; *(uint8_t*)0x20000392 = 0; *(uint8_t*)0x20000393 = 0; *(uint8_t*)0x20000394 = 0; *(uint8_t*)0x20000395 = 0; *(uint8_t*)0x20000396 = 0; *(uint8_t*)0x20000397 = 0; *(uint8_t*)0x20000398 = 0; *(uint8_t*)0x20000399 = 0; *(uint8_t*)0x2000039a = 0; *(uint8_t*)0x2000039b = 0; *(uint8_t*)0x2000039c = 0; *(uint8_t*)0x2000039d = 0; *(uint8_t*)0x2000039e = 0; *(uint8_t*)0x2000039f = 0; *(uint8_t*)0x200003a0 = 0; *(uint8_t*)0x200003a1 = 0; *(uint8_t*)0x200003a2 = 0; *(uint8_t*)0x200003a3 = 0; *(uint8_t*)0x200003a4 = 0; *(uint8_t*)0x200003a5 = 0; *(uint8_t*)0x200003a6 = 0; *(uint8_t*)0x200003a7 = 0; *(uint8_t*)0x200003a8 = 0; *(uint8_t*)0x200003a9 = 0; *(uint8_t*)0x200003aa = 0; *(uint8_t*)0x200003ab = 0; *(uint8_t*)0x200003ac = 0; *(uint8_t*)0x200003ad = 0; *(uint8_t*)0x200003ae = 0; *(uint8_t*)0x200003af = 0; *(uint8_t*)0x200003b0 = 0xfe; *(uint8_t*)0x200003b1 = 0x80; *(uint8_t*)0x200003b2 = 0; *(uint8_t*)0x200003b3 = 0; *(uint8_t*)0x200003b4 = 0; *(uint8_t*)0x200003b5 = 0; *(uint8_t*)0x200003b6 = 0; *(uint8_t*)0x200003b7 = 0; *(uint8_t*)0x200003b8 = 0; *(uint8_t*)0x200003b9 = 0; *(uint8_t*)0x200003ba = 0; *(uint8_t*)0x200003bb = 0; *(uint8_t*)0x200003bc = 0; *(uint8_t*)0x200003bd = 0; *(uint8_t*)0x200003be = 0; *(uint8_t*)0x200003bf = 0xbb; *(uint64_t*)0x200003c0 = htobe64(0); *(uint64_t*)0x200003c8 = htobe64(1); *(uint8_t*)0x200003d0 = 0xfe; *(uint8_t*)0x200003d1 = 0x80; *(uint8_t*)0x200003d2 = 0; *(uint8_t*)0x200003d3 = 0; *(uint8_t*)0x200003d4 = 0; *(uint8_t*)0x200003d5 = 0; *(uint8_t*)0x200003d6 = 0; *(uint8_t*)0x200003d7 = 0; *(uint8_t*)0x200003d8 = 0; *(uint8_t*)0x200003d9 = 0; *(uint8_t*)0x200003da = 0; *(uint8_t*)0x200003db = 0; *(uint8_t*)0x200003dc = 0; *(uint8_t*)0x200003dd = 0; *(uint8_t*)0x200003de = 0; *(uint8_t*)0x200003df = 0xc; *(uint8_t*)0x200003e0 = 0xfe; *(uint8_t*)0x200003e1 = 0x80; *(uint8_t*)0x200003e2 = 0; *(uint8_t*)0x200003e3 = 0; *(uint8_t*)0x200003e4 = 0; *(uint8_t*)0x200003e5 = 0; *(uint8_t*)0x200003e6 = 0; *(uint8_t*)0x200003e7 = 0; *(uint8_t*)0x200003e8 = 0; *(uint8_t*)0x200003e9 = 0; *(uint8_t*)0x200003ea = 0; *(uint8_t*)0x200003eb = 0; *(uint8_t*)0x200003ec = 0; *(uint8_t*)0x200003ed = 0; *(uint8_t*)0x200003ee = 0; *(uint8_t*)0x200003ef = 0xbb; *(uint64_t*)0x200003f0 = htobe64(0); *(uint64_t*)0x200003f8 = htobe64(1); *(uint8_t*)0x20000400 = 2; *(uint16_t*)0x20000404 = 0x48; memcpy((void*)0x20000406, "\x64\x73\x74\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00", 29); *(uint8_t*)0x20000423 = 0; *(uint32_t*)0x20000424 = 6; *(uint8_t*)0x20000428 = 5; *(uint8_t*)0x20000429 = 1; *(uint16_t*)0x2000042a = 1; *(uint16_t*)0x2000042c = 4; *(uint16_t*)0x2000042e = 1; *(uint16_t*)0x20000430 = 3; *(uint16_t*)0x20000432 = 0x81; *(uint16_t*)0x20000434 = 0xff; *(uint16_t*)0x20000436 = 9; *(uint16_t*)0x20000438 = 7; *(uint16_t*)0x2000043a = 1; *(uint16_t*)0x2000043c = 6; *(uint16_t*)0x2000043e = 2; *(uint16_t*)0x20000440 = 0xfffa; *(uint16_t*)0x20000442 = 6; *(uint16_t*)0x20000444 = 4; *(uint16_t*)0x20000446 = 7; *(uint16_t*)0x20000448 = 0x2a21; *(uint8_t*)0x2000044a = 0xa; *(uint16_t*)0x2000044c = 0x24; memcpy((void*)0x2000044e, "\x52\x45\x4a\x45\x43\x54\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00", 29); *(uint8_t*)0x2000046b = 0; *(uint32_t*)0x2000046c = 0; *(uint64_t*)0x20000470 = htobe64(0); *(uint64_t*)0x20000478 = htobe64(1); *(uint8_t*)0x20000480 = 0xfe; *(uint8_t*)0x20000481 = 0x80; *(uint8_t*)0x20000482 = 0; *(uint8_t*)0x20000483 = 0; *(uint8_t*)0x20000484 = 0; *(uint8_t*)0x20000485 = 0; *(uint8_t*)0x20000486 = 0; *(uint8_t*)0x20000487 = 0; *(uint8_t*)0x20000488 = 0; *(uint8_t*)0x20000489 = 0; *(uint8_t*)0x2000048a = 0; *(uint8_t*)0x2000048b = 0; *(uint8_t*)0x2000048c = 0; *(uint8_t*)0x2000048d = 0; *(uint8_t*)0x2000048e = 0; *(uint8_t*)0x2000048f = 0xbb; *(uint32_t*)0x20000490 = htobe32(-1); *(uint32_t*)0x20000494 = htobe32(0); *(uint32_t*)0x20000498 = htobe32(-1); *(uint32_t*)0x2000049c = htobe32(0); *(uint32_t*)0x200004a0 = htobe32(0); *(uint32_t*)0x200004a4 = htobe32(0xff000000); *(uint32_t*)0x200004a8 = htobe32(0); *(uint32_t*)0x200004ac = htobe32(0xffffff00); memcpy((void*)0x200004b0, "\x96\xd8\x72\x02\xc4\x33\xfb\xc0\x5f\x8b\x50\x18\xe8\xd0\x46\x23", 16); memcpy((void*)0x200004c0, "\xc5\x71\xb3\xcc\x2d\x77\xe5\x59\x50\x18\xf6\xc5\xdb\x30\xd5\xf1", 16); *(uint8_t*)0x200004d0 = 0; *(uint8_t*)0x200004d1 = 0; *(uint8_t*)0x200004d2 = 0; *(uint8_t*)0x200004d3 = 0; *(uint8_t*)0x200004d4 = 0; *(uint8_t*)0x200004d5 = 0; *(uint8_t*)0x200004d6 = 0; *(uint8_t*)0x200004d7 = 0; *(uint8_t*)0x200004d8 = 0; *(uint8_t*)0x200004d9 = 0; *(uint8_t*)0x200004da = 0; *(uint8_t*)0x200004db = 0; *(uint8_t*)0x200004dc = 0; *(uint8_t*)0x200004dd = 0; *(uint8_t*)0x200004de = 0; *(uint8_t*)0x200004df = 0; *(uint8_t*)0x200004e0 = -1; *(uint8_t*)0x200004e1 = 0; *(uint8_t*)0x200004e2 = 0; *(uint8_t*)0x200004e3 = 0; *(uint8_t*)0x200004e4 = 0; *(uint8_t*)0x200004e5 = 0; *(uint8_t*)0x200004e6 = 0; *(uint8_t*)0x200004e7 = 0; *(uint8_t*)0x200004e8 = 0; *(uint8_t*)0x200004e9 = 0; *(uint8_t*)0x200004ea = 0; *(uint8_t*)0x200004eb = 0; *(uint8_t*)0x200004ec = 0; *(uint8_t*)0x200004ed = 0; *(uint8_t*)0x200004ee = 0; *(uint8_t*)0x200004ef = 0; *(uint16_t*)0x200004f0 = 0x3b; *(uint8_t*)0x200004f2 = 1; *(uint8_t*)0x200004f3 = 2; *(uint8_t*)0x200004f4 = 0x20; *(uint32_t*)0x200004f8 = 0; *(uint16_t*)0x200004fc = 0x1e0; *(uint16_t*)0x200004fe = 0x224; *(uint32_t*)0x20000500 = 0; *(uint64_t*)0x20000508 = 0; *(uint64_t*)0x20000510 = 0; *(uint16_t*)0x20000518 = 0x138; memcpy((void*)0x2000051a, "\x72\x74\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00", 29); *(uint8_t*)0x20000537 = 0; *(uint32_t*)0x20000538 = 6; *(uint32_t*)0x2000053c = 7; *(uint32_t*)0x20000540 = 9; *(uint32_t*)0x20000544 = 8; *(uint8_t*)0x20000548 = 0x20; *(uint8_t*)0x20000549 = 1; *(uint8_t*)0x2000054c = 0; *(uint8_t*)0x2000054d = 0; *(uint8_t*)0x2000054e = 0; *(uint8_t*)0x2000054f = 0; *(uint8_t*)0x20000550 = 0; *(uint8_t*)0x20000551 = 0; *(uint8_t*)0x20000552 = 0; *(uint8_t*)0x20000553 = 0; *(uint8_t*)0x20000554 = 0; *(uint8_t*)0x20000555 = 0; *(uint8_t*)0x20000556 = 0; *(uint8_t*)0x20000557 = 0; *(uint8_t*)0x20000558 = 0; *(uint8_t*)0x20000559 = 0; *(uint8_t*)0x2000055a = 0; *(uint8_t*)0x2000055b = 0; *(uint8_t*)0x2000055c = 0xfe; *(uint8_t*)0x2000055d = 0x80; *(uint8_t*)0x2000055e = 0; *(uint8_t*)0x2000055f = 0; *(uint8_t*)0x20000560 = 0; *(uint8_t*)0x20000561 = 0; *(uint8_t*)0x20000562 = 0; *(uint8_t*)0x20000563 = 0; *(uint8_t*)0x20000564 = 0; *(uint8_t*)0x20000565 = 0; *(uint8_t*)0x20000566 = 0; *(uint8_t*)0x20000567 = 0; *(uint8_t*)0x20000568 = 0; *(uint8_t*)0x20000569 = 0; *(uint8_t*)0x2000056a = 0; *(uint8_t*)0x2000056b = 0x10; *(uint8_t*)0x2000056c = 0xfe; *(uint8_t*)0x2000056d = 0x80; *(uint8_t*)0x2000056e = 0; *(uint8_t*)0x2000056f = 0; *(uint8_t*)0x20000570 = 0; *(uint8_t*)0x20000571 = 0; *(uint8_t*)0x20000572 = 0; *(uint8_t*)0x20000573 = 0; *(uint8_t*)0x20000574 = 0; *(uint8_t*)0x20000575 = 0; *(uint8_t*)0x20000576 = 0; *(uint8_t*)0x20000577 = 0; *(uint8_t*)0x20000578 = 0; *(uint8_t*)0x20000579 = 0; *(uint8_t*)0x2000057a = 0; *(uint8_t*)0x2000057b = 0x17; *(uint8_t*)0x2000057c = 0; *(uint8_t*)0x2000057d = 0; *(uint8_t*)0x2000057e = 0; *(uint8_t*)0x2000057f = 0; *(uint8_t*)0x20000580 = 0; *(uint8_t*)0x20000581 = 0; *(uint8_t*)0x20000582 = 0; *(uint8_t*)0x20000583 = 0; *(uint8_t*)0x20000584 = 0; *(uint8_t*)0x20000585 = 0; *(uint8_t*)0x20000586 = -1; *(uint8_t*)0x20000587 = -1; *(uint32_t*)0x20000588 = htobe32(0x7f000001); *(uint8_t*)0x2000058c = 0xfe; *(uint8_t*)0x2000058d = 0x80; *(uint8_t*)0x2000058e = 0; *(uint8_t*)0x2000058f = 0; *(uint8_t*)0x20000590 = 0; *(uint8_t*)0x20000591 = 0; *(uint8_t*)0x20000592 = 0; *(uint8_t*)0x20000593 = 0; *(uint8_t*)0x20000594 = 0; *(uint8_t*)0x20000595 = 0; *(uint8_t*)0x20000596 = 0; *(uint8_t*)0x20000597 = 0; *(uint8_t*)0x20000598 = 0; *(uint8_t*)0x20000599 = 0; *(uint8_t*)0x2000059a = 0; *(uint8_t*)0x2000059b = 0xaa; *(uint8_t*)0x2000059c = 0xfe; *(uint8_t*)0x2000059d = 0x80; *(uint8_t*)0x2000059e = 0; *(uint8_t*)0x2000059f = 0; *(uint8_t*)0x200005a0 = 0; *(uint8_t*)0x200005a1 = 0; *(uint8_t*)0x200005a2 = 0; *(uint8_t*)0x200005a3 = 0; *(uint8_t*)0x200005a4 = 0; *(uint8_t*)0x200005a5 = 0; *(uint8_t*)0x200005a6 = 0; *(uint8_t*)0x200005a7 = 0; *(uint8_t*)0x200005a8 = 0; *(uint8_t*)0x200005a9 = 0; *(uint8_t*)0x200005aa = 0; *(uint8_t*)0x200005ab = 0xbb; *(uint64_t*)0x200005ac = htobe64(0); *(uint64_t*)0x200005b4 = htobe64(1); *(uint64_t*)0x200005bc = htobe64(0); *(uint64_t*)0x200005c4 = htobe64(1); *(uint64_t*)0x200005cc = htobe64(0); *(uint64_t*)0x200005d4 = htobe64(1); *(uint8_t*)0x200005dc = -1; *(uint8_t*)0x200005dd = 1; *(uint8_t*)0x200005de = 0; *(uint8_t*)0x200005df = 0; *(uint8_t*)0x200005e0 = 0; *(uint8_t*)0x200005e1 = 0; *(uint8_t*)0x200005e2 = 0; *(uint8_t*)0x200005e3 = 0; *(uint8_t*)0x200005e4 = 0; *(uint8_t*)0x200005e5 = 0; *(uint8_t*)0x200005e6 = 0; *(uint8_t*)0x200005e7 = 0; *(uint8_t*)0x200005e8 = 0; *(uint8_t*)0x200005e9 = 0; *(uint8_t*)0x200005ea = 0; *(uint8_t*)0x200005eb = 1; *(uint8_t*)0x200005ec = 0xfe; *(uint8_t*)0x200005ed = 0x80; *(uint8_t*)0x200005ee = 0; *(uint8_t*)0x200005ef = 0; *(uint8_t*)0x200005f0 = 0; *(uint8_t*)0x200005f1 = 0; *(uint8_t*)0x200005f2 = 0; *(uint8_t*)0x200005f3 = 0; *(uint8_t*)0x200005f4 = 0; *(uint8_t*)0x200005f5 = 0; *(uint8_t*)0x200005f6 = 0; *(uint8_t*)0x200005f7 = 0; *(uint8_t*)0x200005f8 = 0; *(uint8_t*)0x200005f9 = 0; *(uint8_t*)0x200005fa = 0; *(uint8_t*)0x200005fb = 0xaa; *(uint8_t*)0x200005fc = 0xfe; *(uint8_t*)0x200005fd = 0x80; *(uint8_t*)0x200005fe = 0; *(uint8_t*)0x200005ff = 0; *(uint8_t*)0x20000600 = 0; *(uint8_t*)0x20000601 = 0; *(uint8_t*)0x20000602 = 0; *(uint8_t*)0x20000603 = 0; *(uint8_t*)0x20000604 = 0; *(uint8_t*)0x20000605 = 0; *(uint8_t*)0x20000606 = 0; *(uint8_t*)0x20000607 = 0; *(uint8_t*)0x20000608 = 0; *(uint8_t*)0x20000609 = 0; *(uint8_t*)0x2000060a = 0; *(uint8_t*)0x2000060b = 0xaa; *(uint8_t*)0x2000060c = 0; *(uint8_t*)0x2000060d = 0; *(uint8_t*)0x2000060e = 0; *(uint8_t*)0x2000060f = 0; *(uint8_t*)0x20000610 = 0; *(uint8_t*)0x20000611 = 0; *(uint8_t*)0x20000612 = 0; *(uint8_t*)0x20000613 = 0; *(uint8_t*)0x20000614 = 0; *(uint8_t*)0x20000615 = 0; *(uint8_t*)0x20000616 = -1; *(uint8_t*)0x20000617 = -1; *(uint8_t*)0x20000618 = 0xac; *(uint8_t*)0x20000619 = 0x14; *(uint8_t*)0x2000061a = 0; *(uint8_t*)0x2000061b = 0xbb; *(uint8_t*)0x2000061c = 0; *(uint8_t*)0x2000061d = 0; *(uint8_t*)0x2000061e = 0; *(uint8_t*)0x2000061f = 0; *(uint8_t*)0x20000620 = 0; *(uint8_t*)0x20000621 = 0; *(uint8_t*)0x20000622 = 0; *(uint8_t*)0x20000623 = 0; *(uint8_t*)0x20000624 = 0; *(uint8_t*)0x20000625 = 0; *(uint8_t*)0x20000626 = -1; *(uint8_t*)0x20000627 = -1; *(uint32_t*)0x20000628 = htobe32(0x1f); *(uint8_t*)0x2000062c = 0xfe; *(uint8_t*)0x2000062d = 0x80; *(uint8_t*)0x2000062e = 0; *(uint8_t*)0x2000062f = 0; *(uint8_t*)0x20000630 = 0; *(uint8_t*)0x20000631 = 0; *(uint8_t*)0x20000632 = 0; *(uint8_t*)0x20000633 = 0; *(uint8_t*)0x20000634 = 0; *(uint8_t*)0x20000635 = 0; *(uint8_t*)0x20000636 = 0; *(uint8_t*)0x20000637 = 0; *(uint8_t*)0x20000638 = 0; *(uint8_t*)0x20000639 = 0; *(uint8_t*)0x2000063a = 0; *(uint8_t*)0x2000063b = 0xbb; *(uint8_t*)0x2000063c = -1; *(uint8_t*)0x2000063d = 1; *(uint8_t*)0x2000063e = 0; *(uint8_t*)0x2000063f = 0; *(uint8_t*)0x20000640 = 0; *(uint8_t*)0x20000641 = 0; *(uint8_t*)0x20000642 = 0; *(uint8_t*)0x20000643 = 0; *(uint8_t*)0x20000644 = 0; *(uint8_t*)0x20000645 = 0; *(uint8_t*)0x20000646 = 0; *(uint8_t*)0x20000647 = 0; *(uint8_t*)0x20000648 = 0; *(uint8_t*)0x20000649 = 0; *(uint8_t*)0x2000064a = 0; *(uint8_t*)0x2000064b = 1; *(uint8_t*)0x2000064c = 0xf; *(uint16_t*)0x20000650 = 0x44; memcpy((void*)0x20000652, "\x4c\x45\x44\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00", 29); *(uint8_t*)0x2000066f = 0; memcpy((void*)0x20000670, "\x73\x79\x7a\x31\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00", 27); *(uint8_t*)0x2000068b = 0; *(uint32_t*)0x2000068c = 3; *(uint32_t*)0x20000690 = 8; *(uint8_t*)0x20000694 = 0; *(uint8_t*)0x20000695 = 0; *(uint8_t*)0x20000696 = 0; *(uint8_t*)0x20000697 = 0; *(uint8_t*)0x20000698 = 0; *(uint8_t*)0x20000699 = 0; *(uint8_t*)0x2000069a = 0; *(uint8_t*)0x2000069b = 0; *(uint8_t*)0x2000069c = 0; *(uint8_t*)0x2000069d = 0; *(uint8_t*)0x2000069e = 0; *(uint8_t*)0x2000069f = 0; *(uint8_t*)0x200006a0 = 0; *(uint8_t*)0x200006a1 = 0; *(uint8_t*)0x200006a2 = 0; *(uint8_t*)0x200006a3 = 0; *(uint8_t*)0x200006a4 = 0; *(uint8_t*)0x200006a5 = 0; *(uint8_t*)0x200006a6 = 0; *(uint8_t*)0x200006a7 = 0; *(uint8_t*)0x200006a8 = 0; *(uint8_t*)0x200006a9 = 0; *(uint8_t*)0x200006aa = 0; *(uint8_t*)0x200006ab = 0; *(uint8_t*)0x200006ac = 0; *(uint8_t*)0x200006ad = 0; *(uint8_t*)0x200006ae = 0; *(uint8_t*)0x200006af = 0; *(uint8_t*)0x200006b0 = 0; *(uint8_t*)0x200006b1 = 0; *(uint8_t*)0x200006b2 = 0; *(uint8_t*)0x200006b3 = 0; *(uint8_t*)0x200006b4 = 0; *(uint8_t*)0x200006b5 = 0; *(uint8_t*)0x200006b6 = 0; *(uint8_t*)0x200006b7 = 0; *(uint8_t*)0x200006b8 = 0; *(uint8_t*)0x200006b9 = 0; *(uint8_t*)0x200006ba = 0; *(uint8_t*)0x200006bb = 0; *(uint8_t*)0x200006bc = 0; *(uint8_t*)0x200006bd = 0; *(uint8_t*)0x200006be = 0; *(uint8_t*)0x200006bf = 0; *(uint8_t*)0x200006c0 = 0; *(uint8_t*)0x200006c1 = 0; *(uint8_t*)0x200006c2 = 0; *(uint8_t*)0x200006c3 = 0; *(uint8_t*)0x200006c4 = 0; *(uint8_t*)0x200006c5 = 0; *(uint8_t*)0x200006c6 = 0; *(uint8_t*)0x200006c7 = 0; *(uint8_t*)0x200006c8 = 0; *(uint8_t*)0x200006c9 = 0; *(uint8_t*)0x200006ca = 0; *(uint8_t*)0x200006cb = 0; *(uint8_t*)0x200006cc = 0; *(uint8_t*)0x200006cd = 0; *(uint8_t*)0x200006ce = 0; *(uint8_t*)0x200006cf = 0; *(uint8_t*)0x200006d0 = 0; *(uint8_t*)0x200006d1 = 0; *(uint8_t*)0x200006d2 = 0; *(uint8_t*)0x200006d3 = 0; *(uint8_t*)0x200006d4 = 0; *(uint8_t*)0x200006d5 = 0; *(uint8_t*)0x200006d6 = 0; *(uint8_t*)0x200006d7 = 0; *(uint8_t*)0x200006d8 = 0; *(uint8_t*)0x200006d9 = 0; *(uint8_t*)0x200006da = 0; *(uint8_t*)0x200006db = 0; *(uint8_t*)0x200006dc = 0; *(uint8_t*)0x200006dd = 0; *(uint8_t*)0x200006de = 0; *(uint8_t*)0x200006df = 0; *(uint8_t*)0x200006e0 = 0; *(uint8_t*)0x200006e1 = 0; *(uint8_t*)0x200006e2 = 0; *(uint8_t*)0x200006e3 = 0; *(uint8_t*)0x200006e4 = 0; *(uint8_t*)0x200006e5 = 0; *(uint8_t*)0x200006e6 = 0; *(uint8_t*)0x200006e7 = 0; *(uint8_t*)0x200006e8 = 0; *(uint8_t*)0x200006e9 = 0; *(uint8_t*)0x200006ea = 0; *(uint8_t*)0x200006eb = 0; *(uint8_t*)0x200006ec = 0; *(uint8_t*)0x200006ed = 0; *(uint8_t*)0x200006ee = 0; *(uint8_t*)0x200006ef = 0; *(uint8_t*)0x200006f0 = 0; *(uint8_t*)0x200006f1 = 0; *(uint8_t*)0x200006f2 = 0; *(uint8_t*)0x200006f3 = 0; *(uint8_t*)0x200006f4 = 0; *(uint8_t*)0x200006f5 = 0; *(uint8_t*)0x200006f6 = 0; *(uint8_t*)0x200006f7 = 0; *(uint8_t*)0x200006f8 = 0; *(uint8_t*)0x200006f9 = 0; *(uint8_t*)0x200006fa = 0; *(uint8_t*)0x200006fb = 0; *(uint8_t*)0x200006fc = 0; *(uint8_t*)0x200006fd = 0; *(uint8_t*)0x200006fe = 0; *(uint8_t*)0x200006ff = 0; *(uint8_t*)0x20000700 = 0; *(uint8_t*)0x20000701 = 0; *(uint8_t*)0x20000702 = 0; *(uint8_t*)0x20000703 = 0; *(uint8_t*)0x20000704 = 0; *(uint8_t*)0x20000705 = 0; *(uint8_t*)0x20000706 = 0; *(uint8_t*)0x20000707 = 0; *(uint8_t*)0x20000708 = 0; *(uint8_t*)0x20000709 = 0; *(uint8_t*)0x2000070a = 0; *(uint8_t*)0x2000070b = 0; *(uint8_t*)0x2000070c = 0; *(uint8_t*)0x2000070d = 0; *(uint8_t*)0x2000070e = 0; *(uint8_t*)0x2000070f = 0; *(uint8_t*)0x20000710 = 0; *(uint8_t*)0x20000711 = 0; *(uint8_t*)0x20000712 = 0; *(uint8_t*)0x20000713 = 0; *(uint8_t*)0x20000714 = 0; *(uint8_t*)0x20000715 = 0; *(uint8_t*)0x20000716 = 0; *(uint8_t*)0x20000717 = 0; *(uint8_t*)0x20000718 = 0; *(uint8_t*)0x20000719 = 0; *(uint8_t*)0x2000071a = 0; *(uint8_t*)0x2000071b = 0; *(uint32_t*)0x2000071c = 0; *(uint16_t*)0x20000720 = 0xa8; *(uint16_t*)0x20000722 = 0xcc; *(uint32_t*)0x20000724 = 0; *(uint64_t*)0x2000072c = 0; *(uint64_t*)0x20000734 = 0; *(uint16_t*)0x2000073c = 0x24; memcpy((void*)0x2000073e, "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00" "\x00\x00\x00\x00\x00", 29); *(uint8_t*)0x2000075b = 0; *(uint32_t*)0x2000075c = 0xfffffffe; syscall(__NR_setsockopt, -1, 0x29, 0x40, 0x200000c0, 0x6a0); break; case 26: *(uint32_t*)0x20691000 = 0; *(uint32_t*)0x20691004 = 0; *(uint32_t*)0x20691008 = 0x20bff000; *(uint32_t*)0x2069100c = 0; *(uint32_t*)0x20691010 = 0x20cc3fe8; *(uint32_t*)0x20691014 = 0xec; *(uint32_t*)0x20691018 = 0; *(uint32_t*)0x2069101c = 0; syscall(__NR_sendmmsg, -1, 0x20691000, 1, 0); break; case 27: memcpy((void*)0x20000780, "/dev/qat_adf_ctl", 17); r[7] = syscall(__NR_openat, 0xffffff9c, 0x20000780, 0x2000, 0); break; case 28: *(uint32_t*)0x20000800 = 4; syscall(__NR_getsockopt, r[7], 0x84, 7, 0x200007c0, 0x20000800); break; case 29: syscall(__NR_keyctl, 0x12); break; case 30: memcpy((void*)0x20000040, "\x2e\x82\x5e\xaf\xc6\x27\x46\x20\x55\x0a\x22\xfd\xc8\x19\xd9\x0f" "\x6d\xd6\x04\xda\xf1\x1f\x4a\x93\xa4\xb5\xd8\x25\xa1\x52\x8e\x95" "\xcd\x86\xa7\x11\xba\x86\x8e\xc5\x5c\x49\x8b\xf9\xd3\x55\x0d\x64" "\xf1\x02\xae\x52\xa2\x29\x9f\x3a\xd9\xb2\x53\x81\xed\x9f\xb7\xa7" "\xf0\x76\xe0\x28\x26\x16\x90\x24\x46\x72", 74); syscall(__NR_ioctl, -1, 0x80487436, 0x20000040); break; case 31: syscall(__NR_ioctl, -1, 0x8904, 0x200000c0); break; case 32: memcpy( (void*)0x200000c0, "\xf5\x6e\xa7\xa7\xd0\xda\xd9\xb0\x0d\x36\x6f\x4d\x74\xbb\x26\x95\xe0" "\xbd\xf6\xa2\x12\xdf\xcf\x2e\x56\x2e\x97\x75\xc6\xf7\xcb\xe6\x2e\x0f" "\x78\x3e\x1d\xd9\xe9\xa6\x19\x0c\x36\xd3\x03\x42\x20\xf2\x4f\x43\x57" "\x96\xd1\x18\x49\x80\x68\x70\x38\x99\xee\x01\x93\x73\xdf\xb3\xa9\x6f" "\x3a\x37\xac\xe2\x25\x46\x67\xeb\xc8\x6a\xb8\xdd\xa3\x36\x1e\x5e\xa5" "\x68\xc3\xe9\xf4\x62\x45\xe1\xfe\xf2\xc2\xde\x2a\x3c\x3e\xfc\x8c\x52" "\xff\x9a\x52\xc7\xbc\xda\xdb\x58\x66\x4f\xf8\x9f\xd8\x4c\x30\x99\x8c" "\xcc\x40\x57\x5e\xe9\x6e\x0c\x34\x90\x10\xb3\x10\x0f\xfa\x1b\x4a\xce" "\x9b\xdf\x25\x01\x52\x8d\x1b\xc0\x6a\x05\x83\xc1\xa0\x5f\xeb\x57\x85" "\xcf\x3f\x6b\x1a\x76\x5f\x96\x5e\xa8\x2f\xcd\x4f\x4b\x03\xb7\xca\x7c" "\x02\xe0\xcb\x58\xc8\x0a\x07\xde\xa9\x01\xd3\x57\x2e\x91\x98\x3f\x82" "\xf0\xd6\x3e\x68\x58\xf9\x5f\xca\x23\xb7\xe9\x2e\x79\xd8\x09\xbd\xb8" "\xd3\x6b\x53\x22\x2a\xf8\x10\x3f\x59\x06\xad\x93\x12\xe4\xe0\xa9\xc0" "\xf6\x58\x90\x6b\x9d\xad\x7f\x21\xa0\x5a\x57\xc8\xe1\xaa\xf3\x2a\x04" "\xec\xbe\xa2\x24\xcf\x47\x21\x51\x33\x10\x08\xa5\x99\x3f\x8b\x98\x8e" "\x18\xd7\x5e\xa9\x38\xda\x1e\xf8\x86\xba\x85\x17\x67\xa8\x9e\xf8\x7e" "\xbc\x67\x85\x98\xe2\xa4\x0e\x83\x30\xdd\x77\x56\xf4\xf2\x0b\x13\x15" "\x51\x17\xcd\x23\xe8\x4d\xfc\x47\x20\x90\x36\xb9\x18\x29\x94\x3f\xf5" "\x39\x52\x11\xd2\x61\x71\xe3\x10\xd9\x7b\x8a\x34\xaf\xe1\x30\x3d\xfb" "\xb1\xf3\x49\x89\x7d\x16\xa5\xa1\x70\x67\x54\x92\xb9\x02\x80\xb3\xc6" "\xc4\x47\x14\x8d\x9e\x24\x10\x7a\x04\xc9\x9d\xe4\x0f\x00\x16\xf4\x75" "\x91\x2b\x04\xd6\xae\xf4\x2b\x33\x58\xc6\xe2\x86\x6e\x3f\x89\x2b\x0e" "\xb0\xae\x61\x7a\x0e\xdd\x30\xe5\x7b\x63\x17\x11\x79\xe8\xb9\x06\x9e" "\x66\xbe\x60\xa2\xf2\x8d\x23\xe5\x5a\x32\x62\x42\xa5\xdc\x81\xc3\x5c" "\x88\x21\x6d\xea\x5e\x9c\x19\x14\x93\xc0\x12\xe8\xb3\xa3\x0e\x3d\xfa" "\xae\x6e\x79\x44\xcc\xca\xe1\x83\xfd\x60\xd6\xbe\xc5\x2b\x2c\xdd\xe1" "\x0d\x27\x26\x3e\x0a\x43\xdf\x3a\xbc\xdd\xf8\xc7\xd4\x17\x26\x55\xf3" "\x7a\xf4\x75\x6e\x0f\x23\xc2\x3f\x42\xf6\x20\x1d\x6b\x87\x86\xb1\x3d" "\xef\xe9\x0c\xe4\xd2\x24\x67\xcc\xb3\xb0\x5d\x5c\xcd\xb1\x3b\x31\xc2" "\xa4\x68\x1d\xfd\xc9\xae\x5f\x1a\xc3\x06\xae\x48\xf0\x78\x59\xb9\x1a" "\x14\x70\x1b\xdf\x26\xfb\xe9\x0d\xd7\xc1\x57\xd6\x2e\x57\x83\x0d\x6d" "\x31\xd8\xbb\x0b\xbd\x40\xd7\x94\x0d\x37\x55\xc3\xf9\x43\xf4\xe4\xbc" "\x85\x40\xe4\xa3\xf8\x7f\x31\x06\x46\x0d\xb1\x1d\xa7\xbb\x02\x96\x66" "\xf3\xaa\x5b\x99\x89\x12\xa0\x41\x26\x7d\xd9\x90\x42\x90\x0d\x78\x08" "\x0c\x8a\x30\xb9\xfc\xcc\xb8\xc9\x66\x72\x6f\x79\x2c\x9d\x64\xf9\x0a" "\x08\x23\xcb\x5c\x30\x72\x6a\x1f\xc5\x52\xa3\x41\x88\x28\xa9\x28\x84" "\xa1\x9d\xf7\x21\xc3\x0d\x72\x84\x35\x2a\x5f\x7e\xa2\x06\xa3\x28\xd3" "\x44\xc0\x82\x32\x6e\x23\xba\x22\xff\x3e\xf5\xf2\xfe\xad\x5d\x62\x14" "\xb5\xca\xbb\x98\x4d\x12\x1f\x50\xd8\xca\xa7\x6f\xa8\x4b\x01\x03\x87" "\x07\xd7\xf7\xf9\x90\xf3\x20\x97\xc4\x0d\xdc\xd1\x7d\xdd\x89\x63\xe9" "\xa3\xef\x0d\x35\x54\x16\x7a\xbc\x4b\xb2\x1e\xb8\x50\x76\x8c\x02\x9f" "\x3f\x90\x6d\x6b\x07\xab\xf4\x1d\xc1\xf9\xec\x28\xbd\x60\x7e\xf4\x9a" "\xbb\xe8\x7f\x8c\x8d\x03\xe2\xb8\x86\xed\x77\x84\x94\x15\x6f\x84\x3f" "\x62\x87\x29\x06\x7f\xc3\x33\xd2\x39\x5e\x41\xee\xb8\x4a\xad\x87\x04" "\xcb\x0a\xa9\x77\xe9\x56\xe5\x08\x2b\x9f\x08\xe3\x2b\x0c\x1c\x56\xa8" "\x22\x3b\xc6\xc6\x2c\x97\xfd\xab\x1e\x7a\xd1\x2b\x4b\xd0\x44\xb1\x82" "\x24\x1c\x4f\xc4\xe1\xfa\x53\x18\x9f\x70\x01\xda\xc6\x04\x95\xeb\x66" "\x67\x90\xa3\xdf\xc3\xa7\x6e\x51\x6d\x17\xf5\x0e\x96\x64\x96\x17\x0e" "\xb5\x95\x80\x3d\xaa\xa6\x12\x43\xea\x27\xb6\x71\x13\x00\x4c\x6d\x34" "\x13\x73\xcb\xfc\xf4\xe1\xdb\x81\xeb\x1a\xa8\xde\x7c\x00\x33\x32\x47" "\x50\x2e\xdc\x64\xc9\x04\x72\x52\x08\xf2\x0a\xfd\x92\x04\xfb\x0d\x31" "\xe5\x26\x1b\x51\x17\xb5\x8a\xd2\xc8\x63\x4b\x21\xfe\xef\xad\x41\x0a" "\x29\xb0\x21\x28\xff\x3a\x64\x66\x77\x40\x3e\x74\xd0\xba\xd3\xc7\x11" "\x21\x41\x08\xa2\xc3\xa4\xdd\xd2\x4c\x93\x7e\xea\x2b\x50\xbe\x30\xc3" "\x86\x99\xda\x95\x13\xd7\x46\xcf\x31\x09\x07\xa2\x21\x9b\x94\x8a\x80" "\x9e\xac\x79\x67\x60\xe5\x85\xda\x99\x44\xc1\xa3\x96\xc4\xf1\x16\x01" "\x0d\xb3\x6a\x11\xff\xf2\xfb\x89\xbd\x61\xa6\x94\x49\x7c\x7a\x63\xb1" "\x93\x6b\xc4\xc5\x32\xe9\x31\x63\x5d\x4b\x24\xfb\xd9\x6c\xc1\xf9\x03" "\x77\xeb\xce\xfa\xf0\xa5\x14\x5c\xa1\x40\xf4\x15\xeb\x53\x75\x11\x76" "\xcc\x86\x6c\x83\x39\xe1\x06\xd9\xaf\xbb\x21\x9d\x77\xd9\xb8\x97\xe5" "\xa1\xe4\x1f\x3d\x37\xfc\x3f\x98\xac\x39\xdc\x02\x92\x9a\x85\x61\x23" "\x72\x03\xbe\xc3\x26\x02\x55\xc3\xd6\x4a\x58\xb2\x38\x73\xf6\x82\xbc" "\xc5\x04\x56\x0c\xa2\xd9\xc2\x28\x2f\xc5\xc5\xf5\x55\xbb\x7a\x03\xfb" "\x89\x2a\xd0\xe5\xd5\xe3\xc4\xda\xd9\xf3\xc9\x33\xfd\x80\x70\x7b\xea" "\x32\x1c\x62\x34\xee\x07\x02\xdf\xf5\x26\x59\x78\x16\x7b\x1d\x49\x37" "\xe2\x73\x8d\x8e\x03\xa3\x29\xcc\xfa\x44\xd4\xc2\xf2\xec\x1c\x13\x59" "\x43\x39\x3b\xb4\x25\x21\xda\xa0\xa9\x8b\xff\x78\x2e\x6a\xc0\x07\xcb" "\x71\xbc\xbb\x29\x89\x6c\x79\x83\x15\xbd\x48\x07\xa6\x3f\xd3\x51\x3a" "\x89\x5a\xb6\x68\x35\xb0\x57\x0c\x21\x79\xd6\xa5\x67\x7a\x16\x6d\x50" "\x24\xc1\x83\x2f\x20\x9d\x35\x1f\x63\x59\x0b\x87\xf7\xb6\x81\x78\x2c" "\x90\x3f\x62\x41\x07\x83\x51\x73\x6d\x96\x03\x11\xaa\x44\x66\xf1\xba" "\xf3\x08\xcc\x3e\xba\x04\x27\x0d\x03\x43\x6d\x45\x44\x33\xbc\x13\xda" "\x0f\x7f\x37\x9f\x3c\x5e\x71\x9e\x8f\x60\x8a\x7a\xd9\x0a\xfe\xad\xd2" "\xd5\x4e\x8e\xc3\x03\x27\xdb\x2f\x11\xbb\xad\x39\xb0\xa3\x28\x59\x46" "\x15\x97\x3c\xa7\xc5\x97\x15\xbd\xa7\xa2\x43\x7b\x1d\xc2\x4a\x6f\xa2" "\x6a\xed\x1d\x30\x91\x15\xb3\x83\xb7\x38\x1e\x0a\x40\x67\xe7\xee\xec" "\xfc\x1b\xa1\x6b\xef\x56\xb4\x8f\x0f\x39\x3c\x7c\x41\x22\x07\xf1\x69" "\xce\x67\x21\x80\xbd\x13\x2b\x13\x23\x55\x3f\xf2\x6e\x21\xf2\x83\x10" "\xbf\xa8\xbd\xdd\xf9\x19\x5e\x57\x3d\x9e\x4a\x05\x57\xdd\xe5\x80\x82" "\xbf\xbd\xfc\x09\x43\x17\xd2\x7c\x24\x86\x7b\xcd\xfe\x08\x29\xe8\x65" "\x41\x18\x25\x8d\xd3\xf6\xea\x2d\xeb\x12\x7c\x01\x9a\x51\x41\xe3\x76" "\xce\xe0\x1e\xab\x08\xd4\xce\x75\x9c\x3e\xf6\x56\xe7\x0e\x3c\xe0\xf4" "\x53\x97\x52\xda\x24\x27\xfb\xa1\xa5\x3f\x77\x66\xdf\xbf\x0d\x9f\xcb" "\x72\xe0\x0e\x29\x40\x7e\x7b\x10\xe7\xac\xd5\x57\xbd\x3c\xbf\x11\xfb" "\xe0\x9b\x9e\xa1\x8f\xec\x21\x6a\x0c\x6d\xe6\x0b\xb9\xda\x45\x12\x61" "\x32\x00\x43\x6e\x49\xc9\x7b\xb1\x20\x96\x8b\x53\xd7\x25\x92\xe5\x41" "\x31\x03\x91\x6b\x33\x12\x80\xe3\x77\x69\xa3\x35\xf6\xd1\x60\xb8\x08" "\x70\x7d\xda\x95\xa2\x06\x26\x26\xfc\xb0\x85\x77\x6f\xf4\x55\xe5\x12" "\x14\x74\xe6\xaf\xe0\x7b\xd2\x41\x58\x63\x27\x9c\x9c\x1b\x12\xa1\x70" "\x76\xb3\x21\xda\x56\x82\x12\x07\x80\xd0\xeb\x71\xbf\x4a\x7d\xbd\x6d" "\x1e\x5b\x66\x6d\xb0\xcc\x39\x36\x58\x3c\x2d\xc4\x19\xca\x3c\xb2\xd0" "\x88\xf0\xc8\xb7\x75\x53\xb8\x49\x48\xa8\x4e\x20\x18\xf4\xd1\xf9\xed" "\xde\xf8\xa5\x5f\xcd\x95\xeb\xfe\x0c\x89\x9c\xee\x10\xac\xe7\xcc\x24" "\x52\xff\xcb\x7e\xcb\xe2\x0e\x04\x7f\xe4\x4e\x42\x6a\x5a\xef\xed\x73" "\xb6\xd4\x04\x5e\x1d\xed\x2f\x49\xaa\xb3\xb0\xc1\xd1\xdd\x49\x68\xb9" "\x64\xc6\x97\xab\xc5\x65\xb4\x4a\x56\xdd\x1e\x61\x6e\xe2\x27\x67\x20" "\x61\x80\xb1\xd2\xc7\xb0\xf9\x7c\xc8\x71\x73\x9f\x74\x9d\x0f\x05\x0a" "\x79\x24\xa3\xf5\xf6\x61\x87\x07\xe8\x93\xc1\xb2\x1c\xec\x65\x48\x83" "\xcd\x16\xbf\x82\xa0\xea\x1c\x51\x5d\x1f\x42\x73\xf0\x09\x8f\xf3\x75" "\xaf\x37\xbb\xe7\x1c\x09\xb1\x78\x90\x58\x28\xbf\x8a\xda\x9e\xf3\xff" "\x03\xe2\x7b\x93\xc7\xe8\x64\x37\xe6\x2a\xb7\x1d\xed\x2c\x67\xd4\x15" "\x04\x5b\xcc\x3e\xb3\x1e\x8b\x6e\x9e\x3c\xa9\xe4\x96\x11\x61\x46\x0b" "\x62\x0b\xa3\x3b\xf6\x33\x8a\xae\x4e\x37\x70\x6f\xa7\xb3\x8d\x8a\x42" "\x74\xea\x01\xf0\x53\xeb\x0e\xcd\x65\xd0\x02\xbf\x01\xc9\xaa\xbd\x1b" "\xc2\x6c\x80\x08\x28\xb7\x21\x3a\xbc\x6f\xd0\x78\xc0\x5d\x9e\x41\xc2" "\x0d\xac\xd3\x84\x33\x62\x09\x09\xbe\x01\x48\x17\x02\xfe\xac\xbf\xc5" "\xf0\x6f\xce\xd4\x03\xb4\xde\xe4\x7b\xbf\x2d\xe8\xb8\x22\x97\x7a\x6d" "\xd4\xb0\xfd\xcb\xfa\xe2\x98\xfc\x7d\x05\xbc\x28\x30\x97\x2b\x71\x35" "\x4b\x50\x96\x34\xbf\x57\x10\xc5\x08\x0a\x37\x6e\xc3\x5e\x3a\xaa\xd0" "\x4b\x2e\x2f\xdc\x39\x78\x1c\xbf\xa7\xa8\x3e\x95\x57\x01\x96\x96\xb2" "\x0b\xcb\x91\xab\x01\x60\x69\x4c\x0c\xf5\x22\x53\x2b\xbf\xfb\x7a\xfa" "\xcf\x17\x4a\x4e\xe3\xe4\x6f\xf5\xb1\x3d\xcb\x0a\x5d\x8a\x84\x93\x56" "\x77\x15\x10\xc0\x0b\x03\x2c\x3a\x9f\xcf\x63\xdd\x6e\xdb\xbe\x8f\xc3" "\x1e\xa4\x38\xc6\x4a\x35\x54\xf5\x28\xdb\x17\xd2\x72\xc4\xa9\x42\x41" "\x9c\x2b\x6d\xfd\x21\xeb\xef\x74\x2e\x42\xa0\xc5\x33\xad\x05\x99\x37" "\x8c\x81\xb3\xe0\x6d\x98\xd7\xaf\x81\xba\x41\x8d\x00\xa2\xff\x2c\xc7" "\xf6\xed\x10\x67\xa5\x44\xea\xff\x88\x28\x0e\x2d\xec\xce\x4b\x12\xdd" "\xea\xd3\xd1\x69\x7c\xa9\x75\x73\x7c\xdb\x1d\x9d\x38\x2e\x63\x3b\x6b" "\x32\x5e\xad\x49\x7a\x6e\x9a\x6a\x6e\x5c\xd7\x3c\xe2\x88\xc1\xb6\xcb" "\xc0\xf0\xfa\xe9\x9d\x28\x42\xcb\x0a\x24\xe1\xfd\xa0\x9d\x67\x4b\x4d" "\x07\xe4\xd7\x8d\x75\x0f\xc2\xda\x14\x01\x81\x31\xaa\xc0\xa1\x0c\x8b" "\x8b\x89\x5e\xf4\x1b\xbf\xb5\xe0\x2e\x50\xe7\x89\x48\x05\x90\x18\xf3" "\xd7\x71\x53\x46\x3d\xa7\xe9\xd5\xb6\xdc\x78\x35\x58\x35\xfd\x2c\x1d" "\x73\xfa\xd6\xfa\x7c\x80\x5a\x07\xf1\xd2\xea\xce\x3d\xa4\x7e\xdb\x51" "\xb1\x1d\x91\xef\x98\xe7\xf4\xac\xe1\x1b\xac\xa7\xe5\x76\x7f\x14\x01" "\x52\x5e\x36\xaf\xac\x25\xea\xdc\x0a\x25\x65\xac\xb3\xb3\x68\x04\x47" "\x7f\x45\x02\xea\xe7\x2e\x25\x82\x16\x48\xa7\xf2\xdc\x1b\x88\xb2\xf0" "\x4d\x87\x61\x92\xf6\x32\x04\x87\xe9\x82\x36\xb8\xe9\x56\x2f\xe3\x60" "\xec\x63\x14\x1c\x4a\xa8\xf1\x3c\xe7\x87\x9c\x87\x2f\x6d\xa6\x3d\x5b" "\xa6\x2d\xa9\xb8\xab\x99\x78\xbe\x50\x18\xc8\x8b\x88\x46\xc8\x08\x5f" "\x2f\xcb\x75\x18\xb0\xd1\xac\xc1\x51\x77\xaa\x5a\x2a\xf9\x44\xb1\x5e" "\x9c\x41\xcb\x0a\xbd\x8c\xf9\x46\x92\xa8\x21\x61\xef\x81\x53\xd2\xf3" "\x77\xef\x6a\xd9\xd8\x19\xe4\x5e\x9d\x98\x2e\x18\xa6\x11\x71\x40\x08" "\x3e\x71\xda\xba\xfd\x3e\x5c\x91\x5f\xe2\x23\xa0\x6b\x4f\xed\xe5\xdc" "\x55\x4f\xaf\x0a\x68\xbd\xe1\x8a\x73\xfd\x4f\x4c\xeb\x19\x43\xa8\xd3" "\xd5\x72\x68\x8a\x42\xc5\xe7\xcc\xa5\xa9\x18\xe1\x00\x82\x18\xfa\x13" "\x36\x6c\x1b\xbd\xb7\x2d\x2d\xb0\x07\x7c\xd5\x97\x36\x06\x8d\xe0\xc0" "\xa9\x17\xf7\xfc\x30\xc5\xa4\x4c\xf1\x8f\x97\xf2\xec\x54\xa9\xcc\x0f" "\x26\x62\x20\xa1\x7d\xae\x16\x91\x88\x43\x66\xba\xaa\x42\x37\xee\x7f" "\x08\x81\xc8\x3b\xcb\x7e\x3f\x5b\xd1\x9c\x90\x05\x91\xaa\x25\x86\x03" "\x08\xd2\x57\x4d\x5e\x68\x60\xb5\x0a\x7f\x5c\x6e\xb5\x92\x4a\x04\x48" "\x63\x5b\x67\xf4\xb0\xf4\x3d\xec\xdb\xb7\xe5\x2b\x9d\x23\x82\x3c\x08" "\xfc\x5e\x29\x7d\xaa\x15\x16\xdd\xa5\xad\xc3\x15\xc6\x8c\x19\x54\xad" "\xd3\xe6\x84\xde\x98\xb2\x5b\x35\x1f\x15\xf4\x6c\x03\x39\xec\x64\xa3" "\xb8\xfc\x28\x1c\x27\x81\x17\xb5\x9b\x21\x31\x6d\xd3\x5e\x9c\x83\x77" "\xd4\xc2\xec\x51\x60\xea\x2e\xd0\xbf\xe6\xae\x7b\x96\x54\xd8\x74\x09" "\xc0\x98\x17\x82\x0e\xd2\x25\xd8\x81\x4d\xf2\xa4\x29\x42\x43\x92\x95" "\x42\x0b\x37\x7d\x48\x88\x96\x57\xd0\x16\x3b\x77\xd8\x05\x91\x14\xdd" "\xf7\xa4\x2a\x0a\xa8\x3b\xf6\x52\x39\x5c\x28\xf1\x37\x4b\x4a\x38\x8b" "\x3e\x92\x67\x03\x95\x14\x10\xce\x55\x08\x24\x65\x3d\x97\xbc\xea\x06" "\xc7\x45\xc3\xdd\x4c\x09\x83\x14\x37\x79\x97\x86\xd9\x6c\xcd\x23\x16" "\x6b\xac\x22\xe9\x44\x83\x53\xe8\x6f\xa5\xd5\xe0\xd8\xee\x93\x7f\xa0" "\x58\x20\x6b\xa4\xe6\xc6\x5a\x1a\x7e\x52\x8f\xb2\x81\x09\xd8\xf6\x5d" "\x6a\x1f\x8b\x74\xd8\x4e\x63\xdc\x7a\x54\xcb\x03\x25\x4b\x01\xf2\x46" "\x7d\xc0\xcc\x8e\xfd\x54\xea\xf9\x19\x4a\xfa\x32\x7b\x9a\x3d\x20\x8b" "\xa8\x4b\x4c\xd2\x60\xac\x7c\xdf\xf8\x39\xe8\xdd\x0d\x75\x81\xb3\xfc" "\x12\xcb\xac\x6c\x4f\xe0\x99\x0b\x75\xac\x8c\xe8\xfa\x3f\xf0\x3e\x20" "\x07\x19\x3c\x96\x45\x97\x7e\x86\xf1\x6b\xcf\xd8\x02\x0e\x76\xc8\x7a" "\xaf\xe5\x33\xe0\x59\x22\x4a\x6f\x13\xa2\xda\xe1\x88\xc1\x62\x14\xd0" "\x2d\x2d\xee\x76\xb1\x83\x81\x99\xda\x9e\xf0\x45\x1e\x21\xcb\xdc\xfc" "\x8a\xac\xa8\x09\x37\xd3\x29\xfc\x2c\x1b\x36\x32\xc0\x31\x95\x4c\x2f" "\x9c\xbe\x9f\xf6\x77\xc6\x96\xe2\x84\x28\xeb\xf6\xfa\xdb\x56\xc2\x5c" "\x38\xe5\x1b\x2e\xca\xb6\xc5\x01\xf4\x09\x00\xe3\xf2\xb1\xa3\xd6\x89" "\xc7\x47\x93\x21\x00\x7f\x40\x80\xad\x00\xf9\x9c\x64\x3b\x19\xad\x5e" "\x85\xe9\xe1\x11\x91\x45\xc3\x26\xc0\xe0\x99\x83\x98\x64\xf4\x02\xe4" "\x25\xb7\x50\xb7\x1b\x5d\x9f\x98\x15\x1e\x11\x83\x95\x08\x0d\xd5\x9b" "\xd8\x74\x06\x15\x55\xf7\x63\xad\x0d\x7c\x2b\xf6\x22\x1b\x38\xd7\xe0" "\xa2\x65\xf3\xb4\x92\x66\xe4\x43\x69\xc3\x77\xc9\x58\xc8\x59\x6c\x58" "\xb9\x3c\x7e\x09\x3c\x14\xde\x00\x2b\xef\x93\x98\xf1\xf3\xe4\x92\xf3" "\x9b\xc7\xb0\xea\x56\xfb\xef\xce\x2b\x68\x3a\xa8\x59\x74\xfa\x0c\x5b" "\x04\x5f\x4b\x40\x8c\x4c\xa1\xd5\x12\x5c\xf3\xcd\x07\xed\x03\xc7\x62" "\x51\x8f\x17\xf1\x7b\x79\x8e\x7d\x62\x11\x34\xfb\x13\x79\x91\x3f\x6b" "\x29\x40\x7b\xb3\xe9\x25\x77\xcf\x12\x03\x8c\x4d\x92\x12\x36\xed\x6f" "\xe5\xac\x66\x2d\x25\xdd\x8a\x6a\xda\x9a\x38\xde\xff\x65\x2e\x17\x46" "\x28\xc6\x76\xbc\x24\xc0\xdd\xf4\xb2\x4a\x90\x5a\xea\x09\x89\x9e\xdf" "\x4f\x6d\x89\xbf\x12\x41\x89\x12\x43\xff\x24\xf4\x4e\xf0\x79\x19\x3b" "\x64\xeb\x61\xb3\x89\x94\x42\xde\x8f\x76\x1f\x7e\x96\x1c\x99\x89\xfd" "\x24\xd9\xab\x7a\xae\x5c\xf1\x33\x06\x06\x65\xf3\xf2\x59\x05\xd3\x6c" "\x71\x4f\xc2\xc0\xdb\x8e\xcb\x8c\x8d\x0e\x5d\xad\xb6\xd8\x36\x81\x6e" "\x3c\x23\x7c\xb3\x36\xf4\xec\x44\xba\x9a\x64\x9c\x54\x60\x64\x36\xd5" "\xdf\x9d\x9e\x7d\x33\xc3\xb3\x96\x85\x5d\x64\x10\x57\x5b\x51\x45\x63" "\xce\x53\x88\x10\x9e\xca\xd8\x36\xec\xed\x92\x1a\x43\x2d\x20\x8f\xe4" "\x6d\xfd\x4d\x88\x62\x48\x9c\x8d\xf0\x51\x0f\xc0\x38\x2e\x52\xb6\x20" "\x68\x39\xbd\xc4\xca\xce\xdd\xbc\x48\xfb\xd7\x54\xc0\xfc\xf2\x64\x15" "\x94\xb0\x8f\xb8\x65\x64\x05\x15\x4c\x75\x28\x1f\xd7\x83\x5b\xe8\x27" "\x07\xab\x95\x05\xf3\x7a\x61\x2d\x66\xe8\x52\x41\x70\x9e\x37\xd8\x58" "\x64\x87\x73\x83\xba\x23\xd3\x7b\x42\xdf\x7f\x09\x39\xb4\x0f\xed\x0c" "\xe5\xa4\x78\x87\x96\x50\x59\x66\x6b\xf6\x90\xd4\x53\x33\xe5\x35\x25" "\x31\x83\x5a\xf9\x06\x78\xd8\xf9\xd9\xea\xf9\xe9\xb7\xb1\x9d\xab\xc5" "\xbe\x48\x89\xe1\x82\xf1\xe0\xaf\xb6\xdc\x8d\x7e\x5b\xc0\x32\xbc\x15" "\x9b\x13\xbf\x90\x06\x1e\xf2\x58\x8f\xef\x6a\x1c\x02\x35\x56\x5c\xff" "\x8c\xcc\x4c\x82\xf8\xfa\x1e\x96\x88\xc5\xb3\x20\x07\x19\x9d\xe6\x68" "\x1b\xfe\xf6\xd7\x5f\x16\x7c\x3d\x1d\x7f\xb4\x3f\x86\xb0\x58\x2f\xce" "\x95\xa2\x5f\x9c\xe6\x7d\x34\xf4\x42\x7c\xcf\xdf\xa2\xd8\x8c\xe6\x2d" "\x8f\xbc\xbe\xd6\x63\xb6\x6f\x53\x4d\xf0\x22\x2e\xdb\xe4\xc6\xac\x32" "\xf2\xbd\xbc\x56\x51\x27\x3a\x0a\x65\x86\x77\x61\x27\x00\x09\x6e\x6d" "\xa9\x08\x9a\xca\x98\x69\xf6\x73\xc7\x1a\xa9\x93\xac\x16\xfa\x48\xbc" "\x2a\x64\x36\x0c\x39\x89\xc0\xd3\x12\x43\xaf\xef\x53\x29\x49\x4e\x5a" "\x9a\x33\xff\x41\x91\x62\x2b\x8e\x3f\x93\x27\x98\x88\x80\xc2\x73\xb6" "\x9f\xa9\xba\x6b\xc4\xc4\x6a\x42\xf8\x62\xa8\x35\xda\xa9\xde\x04\xf5" "\x5b\x57\xd6\x4f\x98\xff\xe8\x9d\x7a\x40\x78\x0c\x44\x8e\xd4\x12\x03" "\x85\xa7\x44\xab\x24\x04\xfe\xf6\x35\x73\xbe\xee\x19\xe4\xa5\x4c\x2e" "\x4f\xc8\x35\x81\xff\xe5\x19\xf6\x96\x7b\xb7\x60\xac\x9f\xa7\xc4\x7f" "\x72\xc9\xe8\xe1\x4a\x0d\x1a\xb1\x2e\xc5\x62\xe9\x8e\x90\xb2\xef\x72" "\x3a\x10\x84\x85\xe9\x99\x11\xc9\xed\xbe\x7c\xec\x84\x7e\x61\x87\x02" "\xc0\xad\x17\xb5\x49\xbc\x99\x39\x23\xb1\xe8\xe8\x82\xba\x0b\x72\x49" "\x62\x3c\xe8\xd1\xec\xfa\xec\xfa\x46\x92\xb7\xcc\x6d\x91\x4d\x48\xd7" "\x78\x1a\x49\xaf\x93\x2c\xf6\x32\x10\x1a\x05\x1e\x49\x47\x94\x51\xcf" "\x8e\x93\xce\x08\xda\xeb\x63\x0e\x4f\x54\x6c\x23\x25\x32\x16\x85\x55" "\xac\x1f\x0d\x39\x37\x1e\x5b\x34\x5a\x70\x94\x15\x08\x69\x4f\x49\x0a" "\xee\x6d\xb1\x70\x20\xf4\x10\x59\x5d\xd7\x8f\x02\x7e\x48\x6d\x86\xbf" "\x73\x7b\xd0\x00\x56\x76\x1c\x88\xfb\xdf\x9f\xb2\xc6\x12\x62\xbc\xf7" "\x02\xec\xe7\x29\x40\xb7\xe8\x8c\x90\x60\xa3\xa6\xb8\x85\xc1\x75\xf6" "\x19\x1b\x98\x3c\x13\x9e\x7d\xb3\x2c\x18\x16\x1c\x61\xa2\xeb\x0a\x2a" "\xe8\x65\xbf\x8c\x4f\xef\x10\xe1\x66\x75\x14\x96\xd5\xab\xfd\x76\xaa" "\xaa\x8c\xed\x74\x06\x29\x60\xbf\xa2\x5c\x98\x7e\x15\x77\x48\x5b\x37" "\xb8\x0e\xed\x5b\xac\xfd\x10\x40\xf9\xcb\x86\xdc\xdb\x98\x16\xe4\xb1" "\xcd\x5e\xdd\x31\x98\xb7\x1f\x42\x24\x56\x02\xa2\x5c\x17\x32\x2d\xaf" "\x77\xeb\x56\x25\xd3\x0f\xa5\x52\x25\xe8\x31\xd7\xc8\xe6\x5c\x6c\x8f" "\x4e\x50\x86\x30\xdc\x21\x62\xda\xae\x21\x29\x78\x7d\x3e\x1f\x6a\x54" "\xd7\x3f\x25\xd0\xfb\x11\xb8\xe8\x4c\x48\xa6\xa3\xf4\x30\x14\x67\x7b" "\x7d\x22\xdb\x7d\x9e\x9c\xfd\x0a\xd8\x5b\x8a\x41\x4d\x0a\x2e\x8e\x2c" "\x6c\x35\xb7\x2b\xb1\x6c\x04\x26\xae\x56\x7f\xc3\xb2\x12\x0a\xd4\xdf" "\x28\xd1\x81\xb5\xa5\x24\x01\x49\x66\xf6\x4f\x2b\x4f\xcd\xa1\x8e\x58" "\x48\x66\x8d\xa7\xf3\xd3\xd4\x1a\xc0\xec\x00\x31\xe1\x6d\xbc\xf8\x08" "\x46\x8c\xcf\xc3\x16\xc4\x9d\xb7\xf4\x8c\x2d\xa9\xb0\x1c\x28\xdf\x50" "\x29\xe1\xc5\x40\x5f\x8b\x11\x12\x8f\xb4\x33\x8e\x8f\x4a\x95\xef\x7e" "\xb9\x92\x11\x59\xc5\x09\x96\x23\xa2\x99\xc6\x08\xce\xc4\x09\x39\x1c" "\x0d\x7f\x29\x04\xa8\xf5\xf7\x6f\x3d\xe8\x90\x72\x3c\x5a\xe4\x5e\x5b" "\x73\x4e\x10\xda\xb8\xe2\x7e\x20\x8b\xb9\xfe\x44\xac\x1d\x60\xc2\x6e" "\xe0\x58\xb9\x0d\x7d\x72\x1d\xeb\xc6\x2d\x22\x47\x88\x92\x67\x54\xc8" "\xd1\xe5\x96\x53\xfa\x7d\x8b\x88\xbf\xac\xca\x06\x28\x1d\x11\x13\xf3" "\xa1\xaf\x82\xb5\x75\x56\x90\xbc\x56\xf3\x13\x43\x06\x3f\xce\x23\x1d" "\x3b\x8e\x32\xef\x74\x48\xa6\x72\x6b\x6d\xa5\x5c\x3d\x8f\x16\x73\xbf" "\x11\xa2\x79\x95\xb8\xfa\xa7\x2d\xd2\xe7\x5b\xe7\x77\x72\xa0\xc7\x31" "\x53\xb9\x92\x7f\x93\x85\x57\x3d\x84\x8c\x25\x1f\xd3\xd5\x14\x6e\x03" "\x54\xbf\xdd\xa0\x11\x74\x1e\xfd\x77\x20\x5b\xa9\x29\x9b\x74\xbf\x8b" "\x80\x7b\x19\x10\xf0\x5c\x8a\x17\xee\x7d\xa8\xb8\x90\x16\x40\xb0\x8e" "\x12\x85\x2c\x4e\xa6\x68\xcc\xb0\xc5\x56\x1b\xff\x36\x7c\xfa\xec\x1f" "\xed\x42\x83\xaf\x7a\x07\x0e\x8f\xda\x18\xe5\xc2\x65\x5f\x52\x27\x77" "\xf1\x59\x2f\x7a\x65\x6f\xc0\x59\x99\x21\x74\x02\xf2\x8f\x85\x71", 4096); *(uint16_t*)0x200000c0 = 0xa; *(uint16_t*)0x200000c2 = htobe16(0x4e20); *(uint32_t*)0x200000c4 = 2; *(uint8_t*)0x200000c8 = 0xfe; *(uint8_t*)0x200000c9 = 0x80; *(uint8_t*)0x200000ca = 0; *(uint8_t*)0x200000cb = 0; *(uint8_t*)0x200000cc = 0; *(uint8_t*)0x200000cd = 0; *(uint8_t*)0x200000ce = 0; *(uint8_t*)0x200000cf = 0; *(uint8_t*)0x200000d0 = 0; *(uint8_t*)0x200000d1 = 0; *(uint8_t*)0x200000d2 = 0; *(uint8_t*)0x200000d3 = 0; *(uint8_t*)0x200000d4 = 0; *(uint8_t*)0x200000d5 = 0; *(uint8_t*)0x200000d6 = 0; *(uint8_t*)0x200000d7 = 0xbb; *(uint32_t*)0x200000d8 = 0; syscall(__NR_sendto, -1, 0x200000c0, 0x1000, 0x800, 0x200000c0, 0x1c); break; case 33: *(uint32_t*)0x200010c0 = 0; *(uint16_t*)0x200010c4 = 0xa; *(uint16_t*)0x200010c6 = htobe16(0x4e22); *(uint32_t*)0x200010c8 = 9; *(uint8_t*)0x200010cc = -1; *(uint8_t*)0x200010cd = 1; *(uint8_t*)0x200010ce = 0; *(uint8_t*)0x200010cf = 0; *(uint8_t*)0x200010d0 = 0; *(uint8_t*)0x200010d1 = 0; *(uint8_t*)0x200010d2 = 0; *(uint8_t*)0x200010d3 = 0; *(uint8_t*)0x200010d4 = 0; *(uint8_t*)0x200010d5 = 0; *(uint8_t*)0x200010d6 = 0; *(uint8_t*)0x200010d7 = 0; *(uint8_t*)0x200010d8 = 0; *(uint8_t*)0x200010d9 = 0; *(uint8_t*)0x200010da = 0; *(uint8_t*)0x200010db = 1; *(uint32_t*)0x200010dc = 0x3f; *(uint64_t*)0x200010e4 = 0; *(uint64_t*)0x200010ec = 0; *(uint64_t*)0x200010f4 = 0; *(uint64_t*)0x200010fc = 0; *(uint64_t*)0x20001104 = 0; *(uint64_t*)0x2000110c = 0; *(uint64_t*)0x20001114 = 0; *(uint64_t*)0x2000111c = 0; *(uint64_t*)0x20001124 = 0; *(uint64_t*)0x2000112c = 0; *(uint64_t*)0x20001134 = 0; *(uint64_t*)0x2000113c = 0; *(uint32_t*)0x2000114c = 0; *(uint32_t*)0x20001150 = 0x80000001; *(uint32_t*)0x20001154 = 6; *(uint32_t*)0x20001158 = 0x1000; *(uint32_t*)0x2000115c = 2; *(uint32_t*)0x20001180 = 0xa0; if (syscall(__NR_getsockopt, -1, 0x84, 0xf, 0x200010c0, 0x20001180) != -1) r[8] = *(uint32_t*)0x200010c0; break; case 34: *(uint16_t*)0x200011c0 = 0xfff8; *(uint16_t*)0x200011c2 = 0; *(uint32_t*)0x200011c4 = 0; *(uint32_t*)0x200011c8 = 0; *(uint32_t*)0x200011cc = r[8]; *(uint32_t*)0x20001200 = 0x10; syscall(__NR_getsockopt, -1, 0x84, 0x22, 0x200011c0, 0x20001200); break; case 35: *(uint32_t*)0x20001600 = 0x20001100; *(uint32_t*)0x20001604 = 0x58; *(uint32_t*)0x20001608 = 0x20001500; *(uint32_t*)0x20001500 = 0x20001180; *(uint32_t*)0x20001504 = 0x44; *(uint32_t*)0x20001508 = 0x20001200; *(uint32_t*)0x2000150c = 0xab; *(uint32_t*)0x20001510 = 0x200012c0; *(uint32_t*)0x20001514 = 0xc5; *(uint32_t*)0x20001518 = 0x200013c0; *(uint32_t*)0x2000151c = 0x73; *(uint32_t*)0x20001520 = 0x20001440; *(uint32_t*)0x20001524 = 0x27; *(uint32_t*)0x20001528 = 0x20001480; *(uint32_t*)0x2000152c = 0x6b; *(uint32_t*)0x2000160c = 6; *(uint32_t*)0x20001610 = 0x20001540; *(uint32_t*)0x20001614 = 0x95; *(uint32_t*)0x20001618 = 3; syscall(__NR_recvmsg, -1, 0x20001600, 0x10000); break; case 36: syscall(__NR_io_setup, 0xb50e, 0x20001100); break; case 37: *(uint16_t*)0x200000c0 = 1; *(uint32_t*)0x20000100 = 0xffffff3c; syscall(__NR_getsockopt, -1, 0x112, 0xc, 0x200000c0, 0x20000100); break; case 38: if (syscall(__NR_clock_gettime, 0, 0x20001640) != -1) { r[9] = *(uint32_t*)0x20001640; r[10] = *(uint32_t*)0x20001644; } break; case 39: *(uint32_t*)0x200010c0 = -1; *(uint16_t*)0x200010c4 = 0x3090; *(uint16_t*)0x200010c6 = 0; *(uint32_t*)0x200010c8 = -1; *(uint16_t*)0x200010cc = 0x2000; *(uint16_t*)0x200010ce = 0; *(uint32_t*)0x200010d0 = -1; *(uint16_t*)0x200010d4 = 0xc2; *(uint16_t*)0x200010d6 = 0; *(uint32_t*)0x200010d8 = -1; *(uint16_t*)0x200010dc = 0x10; *(uint16_t*)0x200010de = 0; *(uint32_t*)0x20001680 = r[9]; *(uint32_t*)0x20001684 = r[10] + 10000000; *(uint64_t*)0x200016c0 = 7; syscall(__NR_ppoll, 0x200010c0, 4, 0x20001680, 0x200016c0, 8); break; case 40: *(uint32_t*)0x20000080 = 5; *(uint32_t*)0x20000084 = 6; *(uint32_t*)0x20000088 = 0x81; *(uint32_t*)0x2000008c = 0x401; *(uint32_t*)0x20000090 = 0x10; *(uint32_t*)0x20000094 = -1; *(uint32_t*)0x20000098 = 0xfffeffff; *(uint8_t*)0x2000009c = 0; *(uint8_t*)0x2000009d = 0; *(uint8_t*)0x2000009e = 0; *(uint8_t*)0x2000009f = 0; *(uint8_t*)0x200000a0 = 0; *(uint8_t*)0x200000a1 = 0; *(uint8_t*)0x200000a2 = 0; *(uint8_t*)0x200000a3 = 0; *(uint8_t*)0x200000a4 = 0; *(uint8_t*)0x200000a5 = 0; *(uint8_t*)0x200000a6 = 0; *(uint8_t*)0x200000a7 = 0; *(uint8_t*)0x200000a8 = 0; *(uint8_t*)0x200000a9 = 0; *(uint8_t*)0x200000aa = 0; *(uint8_t*)0x200000ab = 0; syscall(__NR_bpf, 0, 0x20000080, 0x2c); break; case 41: if (syscall(__NR_socketpair, 0x1e, 5, 0, 0x2000dff8) != -1) r[11] = *(uint32_t*)0x2000dff8; break; case 42: syscall(__NR_unshare, 0x20000400); break; case 43: *(uint32_t*)0x20000000 = 0xb4; *(uint32_t*)0x20000004 = 6; *(uint32_t*)0x20000008 = 0xfff; *(uint8_t*)0x2000000c = 0; *(uint8_t*)0x2000000d = 0; *(uint8_t*)0x2000000e = 0; *(uint8_t*)0x2000000f = 0; *(uint8_t*)0x20000010 = 0; *(uint8_t*)0x20000011 = 0; *(uint8_t*)0x20000012 = 0; *(uint8_t*)0x20000013 = 0; *(uint8_t*)0x20000014 = 0; *(uint8_t*)0x20000015 = 0; *(uint8_t*)0x20000016 = 0; *(uint8_t*)0x20000017 = 0; *(uint8_t*)0x20000018 = 0; *(uint8_t*)0x20000019 = 0; *(uint8_t*)0x2000001a = 0; *(uint8_t*)0x2000001b = 0; *(uint8_t*)0x2000001c = 0; *(uint8_t*)0x2000001d = 0; *(uint8_t*)0x2000001e = 0; *(uint8_t*)0x2000001f = 0; *(uint8_t*)0x20000020 = 0; *(uint8_t*)0x20000021 = 0; *(uint8_t*)0x20000022 = 0; *(uint8_t*)0x20000023 = 0; *(uint8_t*)0x20000024 = 0; *(uint8_t*)0x20000025 = 0; *(uint8_t*)0x20000026 = 0; *(uint8_t*)0x20000027 = 0; *(uint8_t*)0x20000028 = 0; *(uint8_t*)0x20000029 = 0; *(uint8_t*)0x2000002a = 0; *(uint8_t*)0x2000002b = 0; *(uint8_t*)0x2000002c = 0; *(uint8_t*)0x2000002d = 0; *(uint8_t*)0x2000002e = 0; *(uint8_t*)0x2000002f = 0; *(uint8_t*)0x20000030 = 0; *(uint8_t*)0x20000031 = 0; *(uint8_t*)0x20000032 = 0; *(uint8_t*)0x20000033 = 0; *(uint8_t*)0x20000034 = 0; *(uint8_t*)0x20000035 = 0; *(uint8_t*)0x20000036 = 0; *(uint8_t*)0x20000037 = 0; *(uint8_t*)0x20000038 = 0; *(uint8_t*)0x20000039 = 0; *(uint8_t*)0x2000003a = 0; *(uint8_t*)0x2000003b = 0; *(uint8_t*)0x2000003c = 0; *(uint8_t*)0x2000003d = 0; *(uint8_t*)0x2000003e = 0; *(uint8_t*)0x2000003f = 0; *(uint8_t*)0x20000040 = 0; *(uint8_t*)0x20000041 = 0; *(uint8_t*)0x20000042 = 0; *(uint8_t*)0x20000043 = 0; *(uint8_t*)0x20000044 = 0; *(uint8_t*)0x20000045 = 0; *(uint8_t*)0x20000046 = 0; *(uint8_t*)0x20000047 = 0; *(uint8_t*)0x20000048 = 0; *(uint8_t*)0x20000049 = 0; *(uint8_t*)0x2000004a = 0; *(uint8_t*)0x2000004b = 0; syscall(__NR_ioctl, r[11], 0xc04c5349, 0x20000000); break; case 44: syscall(__NR_mmap, 0x20000000, 0x709000, 2, 0x44031, -1, 0); break; case 45: syscall(__NR_mlock2, 0x202a0000, 0x4000, 1); break; case 46: *(uint32_t*)0x20000040 = 0; syscall(__NR_setsockopt, -1, 0x21, 0, 0x20000040, 4); break; case 47: memcpy((void*)0x2082f000, "./control", 10); syscall(__NR_mkdir, 0x2082f000, 0); break; case 48: syscall(__NR_mmap, 0x20011000, 0x3000, 1, 0x32, -1, 0); break; case 49: *(uint64_t*)0x20e4c000 = 0xaa; *(uint64_t*)0x20e4c008 = 0; *(uint64_t*)0x20e4c010 = 0; syscall(__NR_ioctl, -1, 0xc018aa3f, 0x20e4c000); break; case 50: *(uint32_t*)0x20043fe0 = 0x20011000; *(uint64_t*)0x20043fe8 = 0x3000; *(uint64_t*)0x20043ff0 = 1; *(uint64_t*)0x20043ff8 = 0; syscall(__NR_ioctl, -1, 0xc020aa00, 0x20043fe0); break; case 51: memcpy((void*)0x2028f000, "./control/file0", 16); r[12] = syscall(__NR_creat, 0x2028f000, 0); break; case 52: *(uint32_t*)0x20000000 = 0; *(uint16_t*)0x20000004 = 0; *(uint16_t*)0x20000006 = 9; *(uint32_t*)0x20000040 = 8; syscall(__NR_getsockopt, r[12], 0x84, 0x7c, 0x20000000, 0x20000040); break; case 53: memcpy((void*)0x20f86000, "./control/file0", 16); syscall(__NR_unlink, 0x20f86000); break; case 54: memcpy((void*)0x20b45ff0, "./control/file2", 16); syscall(__NR_readlink, 0x20b45ff0, 0x2056ffd2, 0x2e); break; case 55: syscall(__NR_close, -1); break; case 56: syscall(__NR_socket, 0xa, 1, 0); break; case 57: r[13] = syscall(__NR_socket, 2, 2, 0); break; case 58: *(uint16_t*)0x20bdb000 = 2; *(uint16_t*)0x20bdb002 = 0; *(uint8_t*)0x20bdb004 = 0xac; *(uint8_t*)0x20bdb005 = 0x14; *(uint8_t*)0x20bdb006 = 0; *(uint8_t*)0x20bdb007 = 0xaa; *(uint8_t*)0x20bdb008 = 0; *(uint8_t*)0x20bdb009 = 0; *(uint8_t*)0x20bdb00a = 0; *(uint8_t*)0x20bdb00b = 0; *(uint8_t*)0x20bdb00c = 0; *(uint8_t*)0x20bdb00d = 0; *(uint8_t*)0x20bdb00e = 0; *(uint8_t*)0x20bdb00f = 0; syscall(__NR_connect, r[13], 0x20bdb000, 0x10); break; case 59: *(uint32_t*)0x20849ffc = 0xfffffffe; syscall(__NR_setsockopt, r[13], 0, 0xa, 0x20849ffc, 4); break; case 60: syscall(__NR_io_setup, 0xbc, 0x20000000); break; case 61: syscall(__NR_socket, 2, 0x806, 0); break; case 62: syscall(__NR_socket, 0x26, 5, 0); break; case 63: syscall(__NR_mmap, 0x20000000, 0x2000, 0, 0x40032, -1, 0); break; case 64: syscall(__NR_pipe2, 0x20000080, 0x4000); break; case 65: *(uint32_t*)0x20807000 = 0; syscall(__NR_sendfile, -1, -1, 0x20807000, 0x3d); break; case 66: memcpy((void*)0x20000000, "/dev/rfkill", 12); syscall(__NR_openat, 0xffffff9c, 0x20000000, 0x10000, 0); break; case 67: memcpy((void*)0x205b9ff8, "./file0", 8); memcpy((void*)0x20edaff8, "./file0", 8); memcpy((void*)0x20d9fffa, "msdos", 6); syscall(__NR_mount, 0x205b9ff8, 0x20edaff8, 0x20d9fffa, 0, 0); break; case 68: syscall(__NR_setsockopt, -1, 0x29, 0x3f, 0x20000040, 0); break; case 69: memcpy((void*)0x20000040, "/selinux/policy", 16); r[14] = syscall(__NR_openat, 0xffffff9c, 0x20000040, 0, 0); break; case 70: syscall(__NR_ioctl, r[14], 0x5608); break; } } void test() { memset(r, -1, sizeof(r)); execute(71); } int main() { syscall(__NR_mmap, 0x20000000, 0x1000000, 3, 0x32, -1, 0); char* cwd = get_current_dir_name(); for (;;) { if (chdir(cwd)) fail("failed to chdir"); use_temporary_dir(); loop(); } }