// https://syzkaller.appspot.com/bug?id=ff9b4c571593d3f58747aff3aabcbf7f6148011f // autogenerated by syzkaller (https://github.com/google/syzkaller) #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include static bool write_file(const char* file, const char* what, ...) { char buf[1024]; va_list args; va_start(args, what); vsnprintf(buf, sizeof(buf), what, args); va_end(args); buf[sizeof(buf) - 1] = 0; int len = strlen(buf); int fd = open(file, O_WRONLY | O_CLOEXEC); if (fd == -1) return false; if (write(fd, buf, len) != len) { int err = errno; close(fd); errno = err; return false; } close(fd); return true; } static int runcmdline(char* cmdline) { int ret = system(cmdline); if (ret) { } return ret; } static void setup_common() { if (mount(0, "/sys/fs/fuse/connections", "fusectl", 0, 0)) { } } static void setup_binderfs() { if (mkdir("/dev/binderfs", 0777)) { } if (mount("binder", "/dev/binderfs", "binder", 0, NULL)) { } if (symlink("/dev/binderfs", "./binderfs")) { } } static void loop(); static void sandbox_common() { prctl(PR_SET_PDEATHSIG, SIGKILL, 0, 0, 0); setsid(); struct rlimit rlim; rlim.rlim_cur = rlim.rlim_max = (200 << 20); setrlimit(RLIMIT_AS, &rlim); rlim.rlim_cur = rlim.rlim_max = 32 << 20; setrlimit(RLIMIT_MEMLOCK, &rlim); rlim.rlim_cur = rlim.rlim_max = 136 << 20; setrlimit(RLIMIT_FSIZE, &rlim); rlim.rlim_cur = rlim.rlim_max = 1 << 20; setrlimit(RLIMIT_STACK, &rlim); rlim.rlim_cur = rlim.rlim_max = 128 << 20; setrlimit(RLIMIT_CORE, &rlim); rlim.rlim_cur = rlim.rlim_max = 256; setrlimit(RLIMIT_NOFILE, &rlim); if (unshare(CLONE_NEWNS)) { } if (mount(NULL, "/", NULL, MS_REC | MS_PRIVATE, NULL)) { } if (unshare(CLONE_NEWIPC)) { } if (unshare(0x02000000)) { } if (unshare(CLONE_NEWUTS)) { } if (unshare(CLONE_SYSVSEM)) { } typedef struct { const char* name; const char* value; } sysctl_t; static const sysctl_t sysctls[] = { {"/proc/sys/kernel/shmmax", "16777216"}, {"/proc/sys/kernel/shmall", "536870912"}, {"/proc/sys/kernel/shmmni", "1024"}, {"/proc/sys/kernel/msgmax", "8192"}, {"/proc/sys/kernel/msgmni", "1024"}, {"/proc/sys/kernel/msgmnb", "1024"}, {"/proc/sys/kernel/sem", "1024 1048576 500 1024"}, }; unsigned i; for (i = 0; i < sizeof(sysctls) / sizeof(sysctls[0]); i++) write_file(sysctls[i].name, sysctls[i].value); } static int wait_for_loop(int pid) { if (pid < 0) exit(1); int status = 0; while (waitpid(-1, &status, __WALL) != pid) { } return WEXITSTATUS(status); } static void drop_caps(void) { struct __user_cap_header_struct cap_hdr = {}; struct __user_cap_data_struct cap_data[2] = {}; cap_hdr.version = _LINUX_CAPABILITY_VERSION_3; cap_hdr.pid = getpid(); if (syscall(SYS_capget, &cap_hdr, &cap_data)) exit(1); const int drop = (1 << CAP_SYS_PTRACE) | (1 << CAP_SYS_NICE); cap_data[0].effective &= ~drop; cap_data[0].permitted &= ~drop; cap_data[0].inheritable &= ~drop; if (syscall(SYS_capset, &cap_hdr, &cap_data)) exit(1); } static int do_sandbox_none(void) { if (unshare(CLONE_NEWPID)) { } int pid = fork(); if (pid != 0) return wait_for_loop(pid); setup_common(); sandbox_common(); drop_caps(); if (unshare(CLONE_NEWNET)) { } write_file("/proc/sys/net/ipv4/ping_group_range", "0 65535"); setup_binderfs(); loop(); exit(1); } #define SWAP_FILE "./swap-file" #define SWAP_FILE_SIZE (128 * 1000 * 1000) static void setup_swap() { swapoff(SWAP_FILE); unlink(SWAP_FILE); int fd = open(SWAP_FILE, O_CREAT | O_WRONLY | O_CLOEXEC, 0600); if (fd == -1) { exit(1); return; } fallocate(fd, FALLOC_FL_ZERO_RANGE, 0, SWAP_FILE_SIZE); close(fd); char cmdline[64]; sprintf(cmdline, "mkswap %s", SWAP_FILE); if (runcmdline(cmdline)) { exit(1); return; } if (swapon(SWAP_FILE, SWAP_FLAG_PREFER) == 1) { exit(1); return; } } void loop(void) { *(uint64_t*)0x20005cc0 = 0; *(uint32_t*)0x20005cc8 = 0; *(uint64_t*)0x20005cd0 = 0x200013c0; *(uint64_t*)0x200013c0 = 0x200003c0; memcpy( (void*)0x200003c0, "\x66\x20\x67\xe8\xa3\xec\xae\xd6\xeb\x59\xcc\xc6\xa1\x02\xeb\xdc\x8d\x44" "\xcc\xc2\xe6\x8b\x4b\x29\x1f\x9c\xdc\x89\x76\x78\x51\xc7\x95\x6c\xf9\xdc" "\xfc\xf9\xa2\xc6\x55\x1c\x82\xbc\x19\x5d\x6c\xfc\x6c\xbd\x3a\x4d\x81\x67" "\xbe\xbe\x2d\x58\xde\xcb\xb3\x90\x6a\x50\xad\x73\x59\x9b\xe2\x4f\x1d\x45" "\x92\x06\xad\xea\xfd\x9a\x2d\x55\x20\xab\x29\x9a\x39\xf8\x03\xb5\x5d\xcc" "\x17\x09\x70\x39\x8e\x31\xcf\xde\x1f\xb2\x4e\x2e\x13\xbd\xe8\xfb\xec\xcb" "\x70\x4f\x03\x41\x3a\x84\xea\x6f\xef\xd6\xca\x9c\x50\x52\x09\x9b\x56\x65" "\x5a\xc5\x44\x83\x14\xde\x3e\x13\x8a\xc3\x26\x63\x35\x7a\x31\xb5\x61\xda" "\x11\x97\x4c\xf5\xf6\x00\x3b\x0c\x6f\xf8\x19\x7e\x36\x2c\x68\x3d\x50\x8a" "\xfe\xef\x42\xd8\x6f\x0e\x8a\xa7\x54\x6f\xb4\xa0\x78\xcb\xb1\x8a\x74\x72" "\x60\x7e\x84\x81\x5d\xcb\x50\xa1\x36\x61\x83\x39\xcf\xb7\x66\x15\x4a\x85" "\x64\xbc\xcf\x09\x78\xc3\x60\x91\x93\x86\x48\x4a\xd9\x47\x5f\xd4\xc5\x7b" "\xcd\x7d\xa0\xd7\x80\x00\x77\x79\xfb\x42\x60\xe3\x69\x1b\x3a\x8e\xcd\x0d" "\x23\xd8\xf3\x85\x51\x77\xfa\x52\x91\x02\x11\xa7\x48\x62\xac\x8c\xdc\x59" "\x3c\x84\x29\x23\xdb\xf6\x80\x3d\x03\x44\xa0\xf4\xee\x17\x89\x69\xdc\xda" "\x2d\x08\x9e\x81\x3e\x75\x79\x48\x0e\x23\x84\xb4\x93\x8a\xab\xf6\x90\x01" "\x79\xbb\xa2\xc4\x9f\x67\x86\x28\xd1\x60\x56\xbd\x21\xe0\x4d\x42\x91\x16" "\x8d\xbe\xbd\xd2\x1c\x5c\x0f\xfa\xc7\x80\x3e\x1e\x1d\xe6\x79\xf6\x68\x38" "\x3f\x37\x0f\x17\x2f\xf2\xf3\xa3\x6d\xb0\x85\xce\xd8\xd7\x9a\x9a\xd4\x2d" "\x82\xb8\x3a\x08\x3c\xdc\xe8\x67\xee\x6a\xaa\x7b\x73\x1f\x0f\x8c\x3c\xe7" "\x69\x06\x18\x16\x68\xd9\xae\xd0\x1a\xdd\x5f\x42\xdc\xfe\xdb\x7c\xb4\x88" "\x7e\x02\x5b\xde\x7e\x23\xbe\x34\xd5\xe3\xee\x99\x3f\x8c\xdb\x8d\x7b\xda" "\xb1\x34\xf2\xfc\x6d\xd1\x77\x1b\x92\x3b\x80\x75\xc3\x35\x8a\x8c\x63\x5c" "\x90\xba\xa0\xa4\x49\x0b\x7d\x65\x3f\xef\x8b\x16\xe2\xc0\x13\xbc\x4a\xb3" "\xf6\x2e\x82\xad\x5c\x16\xea\x62\xe7\x22\x97\xb3\xcb\xce\x20\x5a\x06\x92" "\x59\xc2\x7e\xa6\x73\x7e\x03\x26\x38\xda\x18\x79\xa2\x29\x23\xe4\x45\x28" "\xc2\x16\x00\x52\xba\x6b\x2d\xc3\x2c\xe3\xff\x99\xa8\xb5\xaa\x01\x46\x2f" "\x31\xa3\x3c\x61\x81\x67\xe5\x85\x08\x91\x49\x33\xcc\x9c\x23\xb2\x10\x5c" "\x6f\x04\x8b\xe0\x2c\x92\xe4\xbb\x43\x7f\x00\x27\xaa\x0b\x96\x8b\x2f\xf0" "\x17\x3d\xdf\x9c\xf1\xa8\xd4\x06\x7b\x7e\xff\x6b\x0d\x32\x67\xad\xd4\x6c" "\x35\xcb\x32\xc9\xc9\xa4\x38\xb1\xc9\xe5\x31\x7d\x85\x68\x21\xed\x88\xd8" "\x0c\xbc\xd8\x49\xd9\xc3\x94\x69\x71\x2e\xde\xbd\x41\x5d\x11\xfd\x3a\xf6" "\x5d\xa2\xec\x67\x45\x43\x43\xeb\xd9\x4e\x98\xe6\xa2\x57\x68\xf1\x60\x45" "\xe6\xea\xe9\xb3\x56\x23\x5c\xbc\xa9\x4f\x97\xf2\x05\xeb\xee\x3f\xc0\x3d" "\x86\x82\x03\x6d\x12\x06\xce\xde\xde\xd3\x44\x7b\xae\x76\x3d\x59\xaa\x5a" "\xb6\x5c\x83\x46\x8f\x8e\x8e\xba\xa0\x43\x3c\x14\xba\x5c\x3c\x7f\xc5\x30" "\x99\x37\x45\x98\x60\xc8\xda\xeb\xe0\xf9\x81\x56\x4b\xad\x57\x6c\xe5\xba" "\x59\x2f\x6a\x1b\x85\x9f\x70\xc7\x6c\x5a\x6a\xb0\x80\x13\x7c\x71\x1f\x87" "\x26\x91\xb2\xb0\x65\xca\x3e\x82\x03\x80\x1b\x9c\xbb\xa2\x20\x53\xfa\xa1" "\xed\x19\x91\x16\xe0\xd0\xdc\x70\xd4\xd3\x5d\xd3\xee\x08\x02\xcf\x0f\x5b" "\xde\xf0\x02\x49\x98\x48\x43\xc3\xd1\x0c\xc2\x8f\x40\x73\x3e\xe6\xac\x37" "\xc2\x83\x3b\x4d\xda\x26\xb6\xf0\xe5\x5e\x79\x8e\xbd\x11\x30\xf4\xab\xa1" "\x01\x82\x3b\xa0\x9c\x55\xdf\xb7\x94\x4d\xc3\x58\x1b\x48\x23\x0f\x74\x93" "\xc0\x9b\x04\xc4\x73\x40\x81\xa5\x5e\x95\x45\xb8\xf1\x61\xa5\x2f\x8d\xf3" "\x57\x7f\x91\x4d\x9e\x62\xd5\xc1\x60\x3a\x1b\xc6\x04\x63\x27\xdc\x3c\xe0" "\x70\x34\xfd\xc8\x51\x7b\x14\xa2\xeb\x97\x86\x8e\x61\xff\xfa\x26\x3f\xa2" "\xee\x00\x52\x08\xfe\x39\x2c\x42\xdf\xcf\xf8\x3e\x3c\x02\x96\x34\xe3\x63" "\x75\x34\x49\xef\xa4\xfe\x0e\x8e\xa6\xef\x78\xb5\xa8\xd4\x6b\xcb\x7b\x43" "\xe8\xe1\x83\xe9\x2f\x8a\xa7\x44\x3a\xe5\x26\x86\x2a\xc5\xfb\xa4\x6d\x2c" "\xb4\x39\x86\x95\xa6\x88\x21\xa5\x90\x7a\xd4\x6f\xd5\xbe\x37\x51\x3b\xdd" "\xc1\x31\x83\x88\xbd\xda\x03\xb1\x6e\xdc\xfc\x32\x59\xca\xd2\x77\x2e\x58" "\xdb\xd5\x2b\x60\xb8\x83\xb6\x7e\xae\x53\xe1\x49\x32\xc1\x8e\x5a\xc4\x87" "\x5f\xd8\x5d\xc6\xdf\xf0\xea\x5e\x77\x0a\x61\x40\x88\xec\x68\xba\x1b\xb9" "\x4d\x07\xef\x15\xfb\x5c\x2b\xd8\xe9\x4e\x0f\x40\x68\x85\xa2\xd4\xb9\x88" "\x2d\xa8\x72\x08\xf7\xf1\x58\xbd\xce\xb8\xec\x89\x5c\xdb\xd6\x49\xe6\x81" "\xf3\xce\x8f\xb3\xd3\xf1\xe2\xd8\xd4\x1e\x51\x4c\xe6\x73\xc4\x32\x70\xac" "\xb8\x24\x52\x55\xbf\xbc\xc2\x9e\x5c\x40\x7c\x48\xbb\x09\x49\x5e\xb5\x7a" "\xff\x28\x07\x41\x72\xc7\xb6\x7f\x15\xf3\x73\xde\x00\xba\x87\x9d\xf5\x7f" "\x25\x5f\xf5\xa7\xbd\x9b\x78\x3f\x0e\xa2\xff\x64\x28\x9f\x7a\x70\x08\x19" "\xad\x90\x19\x8f\x59\xaa\xc7\x40\x8c\xf9\xa5\xa5\x62\xde\xdd\x04\xb6\xe2" "\x47\x69\xa4\x9d\x18\xfd\x61\xfa\x31\xbf\xa3\x32\xc7\xb7\x32\x9d\x60\x7c" "\x8d\x24\x28\xf6\x91\x9b\x3c\xcb\xd5\x50\xf5\xef\x2c\x67\x43\xc8\xe2\xc3" "\xc7\xc7\x1e\xb9\xb3\x4a\x16\x4f\x0a\xa4\x1a\xd5\xe0\x8f\xf3\x88\x71\x5d" "\x73\x4f\x4a\x63\x60\x82\x55\x3c\xbc\x0f\xf1\x0f\x51\x5b\x51\x5d\x8f\xc4" "\x48\xa5\xde\x7e\x1f\xb8\x12\x2c\xf0\x43\x93\x19\x53\xe0\x2b\xad\x07\x11" "\x14\xd0\x46\x33\x60\x61\x46\xfe\x38\x14\xaf\xa9\xd3\x59\xd5\x45\x31\x18" "\xbb\x71\x44\xb4\x24\xc3\x47\x5a\xdb\x1e\x6f\x0f\x98\xc8\x33\x1b\x74\xe4" "\x7d\x20\x44\x09\x28\xf5\xb9\xe5\xdb\xd8\x9d\x37\x48\xe8\xc3\x8b\x5a\x7a" "\xc1\xea\x97\x2b\xdb\x34\x91\xaa\xd3\x68\x32\x94\xa8\xc6\x9c\xec\xcb\x32" "\x62\x48\x42\xce\xeb\xaf\x1c\xb1\x4e\x95\x3c\x93\xe9\x85\xc0\xa1\x74\x36" "\x12\xc0\x6c\xd3\xc7\x11\x0a\x1f\x9e\x3a\x45\xb9\xd9\xaa\x7b\x50\x8f\x49" "\xd2\xe0\x73\x24\x7f\xbc\x05\x40\xcf\x3f\x0f\x7c\xc8\xa3\xda\x6d\xb9\xae" "\x28\xf4\xfc\x03\xa9\x22\xdd\x2e\x6a\xd6\xd2\x0f\x95\x61\xf8\x92\xd0\x68" "\x6d\xd2\xf0\xfa\x33\x52\x7b\xab\xa3\x7b\x0f\x1d\xfd\xde\x55\x2a\xe8\x13" "\xb9\x4b\xdc\x7e\x9c\xdc\x1f\x99\x1d\x05\x27\x39\x30\x67\x29\x9e\x2c\xb7" "\x2b\x6d\xd2\x2d\xc7\x1d\x2b\xd6\x0f\x92\xee\xdc\x60\xa5\xb4\x03\x57\xcf" "\xf2\x40\x34\x22\x72\xeb\x4f\xac\xe3\x5f\xda\x4a\xe3\xb5\x8a\x30\x2c\xb7" "\x08\x64\x68\x25\x5d\x64\x71\xa5\xab\xbc\x7e\x97\x98\x71\x54\x71\xdd\x91" "\xeb\x47\x1e\xd3\x8a\x66\x29\x64\xe6\x7c\x18\xf9\xf0\x62\x44\x4f\x24\xa3" "\xd8\xa3\x67\x33\x3d\x64\x0d\x80\xb8\x0d\x52\x30\xe5\x82\x1a\xa5\xe8\x29" "\xe6\x33\x54\xf3\x9f\x3e\x72\x9c\x63\xdc\x33\x1b\x78\x25\xde\x1c\x48\x7a" "\x44\x3f\xa7\x62\x61\xbc\x6a\xcc\x98\xb2\x26\x57\x62\x57\xf0\x1c\xb1\x62" "\xa6\x1c\x29\xb8\x06\x6a\x8f\x52\xba\xb4\x89\x49\x04\x52\x71\xce\x7d\x69" "\x14\x7c\x20\x52\x65\x6b\x9a\xb0\xf2\xc8\xfb\x0f\x45\xf3\xc5\x2b\x4f\x59" "\xc6\xce\xe4\xd1\x24\x3e\x00\x44\x7a\xef\x29\x7d\xed\x17\x68\x14\xe5\x79" "\x25\x2a\xb5\xc1\x13\x4e\x1d\xf9\xd2\x99\x79\x62\xc1\xa4\x92\x36\x71\x5b" "\x41\x79\xa7\x49\xea\xd4\x65\x07\xa8\x6d\xfa\xeb\xf8\x5c\x84\xb7\xb9\xd5" "\xca\xe5\x86\x11\x42\x0c\x43\x11\xa7\x80\x02\x23\x5e\xff\xb7\x07\x69\xf0" "\x83\x29\x25\x3b\x8a\xdc\x83\x8f\x2e\x51\xf5\x8a\xfc\x02\xec\x8d\x91\x29" "\x1b\xcb\xeb\x8e\x6a\x2e\xcb\x82\x4f\xe3\xcc\x8e\xb2\xdf\x5d\x83\xbd\xe8" "\x5a\xee\x55\x87\xad\x4f\x75\x83\x26\x74\x34\xc5\x0c\xed\x05\x67\xe6\x26" "\xca\x0d\x4e\x07\x34\xa7\x01\x72\xa6\xd6\x4a\xd9\xdf\x00\xa9\xd8\x5d\x48" "\xcc\xa4\xf7\x16\x06\x68\x8a\x85\x04\xec\x16\xb3\xd5\x2c\x27\xb2\x01\xae" "\x1b\xa4\xd2\x78\x40\xc3\x78\xec\x44\x06\x68\x9d\x5f\x60\x62\x94\xff\x5c" "\x4d\x86\x9d\x0a\x62\x0a\x66\x04\x1c\x3f\x1d\x19\x89\xdf\x55\x0d\x79\xab" "\x41\x24\xf5\xbc\x83\x49\xe2\xcb\xa6\xb5\x64\x46\x9f\xfa\xe3\x97\xde\x92" "\x66\x5f\xc9\x4e\xe4\xc1\x37\x41\x4c\x5d\x55\x0a\x0f\x99\xa6\xac\xbb\x51" "\x9e\x07\x9e\x63\x2c\x1a\xc8\x57\xc6\xe1\xaf\x4a\x78\xd2\xee\xe2\xd0\x90" "\x87\x8f\x96\x05\xbf\xb4\x6b\xb8\x4c\xc5\x5e\xf9\xd9\x0f\xdf\x8c\x26\x25" "\x8d\x95\x57\xff\xe3\x94\x7b\xf8\x98\xd5\x8a\xab\x07\xe5\xee\x32\xcc\x8c" "\xd7\x2c\xd3\x00\x49\x24\xd0\xac\x16\x50\x15\x47\x7e\xf7\x83\x05\xae\xbb" "\x2c\x2a\x40\x1d\x51\x45\x81\x33\xbd\x28\x93\x03\xe8\xbc\xd6\x90\x88\x5f" "\xeb\x4a\x7f\x9e\x4d\xb9\xa5\xeb\xd3\xdf\xfd\x72\xb3\x65\x6b\xa1\xcd\xa2" "\xb7\x86\xa2\xd1\xbe\x61\xcf\x73\x62\x44\x31\xa2\x88\x08\x4a\x69\xd6\xb3" "\x9e\x9c\x48\xba\x05\x30\x47\x43\xd8\x47\xd3\xde\x2d\x9e\x6e\x25\x04\xdd" "\x3f\xc2\x28\x2a\x2e\x65\x04\x76\xf3\x50\xf0\xe0\x23\x5c\xb9\x09\xf1\xae" "\x8a\xc4\x55\x35\xe4\x21\x17\xc9\x09\xfa\x05\x77\x3e\xb8\xab\xcf\xfa\xdd" "\x2b\xd8\xf4\x70\x20\x06\x34\x04\x46\xdf\xaf\xec\xff\xcf\xfe\xb2\xab\xc4" "\x8e\x20\x48\x39\xaa\xfa\xb1\x70\x2b\xa2\x8a\x70\xbe\x93\x0a\x31\x8d\x2a" "\xb1\x2b\x33\x5c\x18\x8c\xe6\xc3\xb0\x1a\x07\x73\x0f\x0f\x59\xbd\x02\xc7" "\xf9\xc8\x58\x25\x84\xcf\x06\x67\xff\x6d\xfb\xd3\x6c\x6d\xaa\x08\x20\x40" "\xfb\x50\x38\x12\x1b\x48\xe6\x7c\x32\x8c\xb3\x29\xef\x40\x51\x2e\x6d\x31" "\x12\xe5\xb5\x85\x83\xb7\x5c\x1c\x7c\x0d\xa7\xea\x85\x88\xed\xe0\x06\x2b" "\x47\xdd\x11\x3f\x9c\xe8\x35\xa5\x36\x86\x5e\x35\xef\x44\x2d\x2e\x02\x7e" "\xcb\x99\xc2\xf0\x72\x8a\x1b\x5c\xb9\x59\x14\xe1\x50\xce\xeb\xaf\x47\x50" "\xef\x37\x59\x70\xdf\xfa\x57\xac\x7c\xc1\xc8\xc8\xb3\xbc\x64\xa7\xb0\x89" "\x6f\x3d\x0d\xe7\xdf\xca\x66\x56\x98\xf3\x02\x3a\x92\xa8\x7f\x08\x0e\x3b" "\xfb\x22\x10\xde\x13\x7a\xad\x93\xac\x6b\x16\x22\x39\xc4\x41\x97\x37\x90" "\xdf\xce\xe7\x31\x75\xcc\x4e\xac\x78\x38\x87\x48\xbe\x56\xcd\x3d\xc9\x5e" "\xb7\xf4\xad\x71\x36\xc2\x1c\xc6\xd4\xda\x7a\x49\xa2\x15\x58\xd5\xe7\x59" "\xfa\x69\xe4\xe8\x30\x23\x16\x27\xc1\x88\x2d\xac\x25\xbb\xc5\xaa\x6e\xfb" "\x15\x34\xc0\x31\x45\x57\x58\x43\x21\xce\xd1\x73\xea\x88\xa0\x63\xf4\x35" "\xab\x7e\x6d\x5a\x2a\xea\xfa\x1c\x09\x20\x91\xd8\x08\xcb\xb7\xea\x5d\x68" "\xe0\x76\x47\xdd\x04\x14\xc7\x5c\xda\x0f\xf3\xe8\x8a\xe5\x5f\x14\x1b\xb8" "\x81\x03\xad\xd8\xa0\x67\x21\x24\x7a\xeb\x2b\x97\x41\xd2\x81\x5d\x17\x8d" "\x65\x04\x3a\xa0\x9f\xa3\xfe\x63\xcf\xaf\x3f\x5c\xb6\xc7\x78\x63\x83\xb1" "\x70\xab\xc5\xff\x3c\x4e\xc6\xf0\x75\x0d\x2e\x33\x3a\xcf\xce\xc1\xb9\x91" "\xf1\xe6\x1d\x57\xeb\x1d\x22\xe2\x17\xbf\xb0\x7c\x6a\xf4\x70\x22\x92\x50" "\xea\x6c\x30\x63\x1d\x2e\x58\x26\xc8\x8a\xb3\xaf\x31\x9f\x5a\xe4\x00\xb1" "\x77\xe5\x49\x72\x4e\x26\x36\x11\x85\xfe\xf3\x98\xeb\x7b\x40\x19\x1d\xcf" "\x70\x7e\x92\x3b\x95\xaf\x7a\xef\x93\xfe\x59\x37\x12\x67\xcf\x51\x20\x90" "\xc2\x78\xe1\x35\x1f\xbd\x31\x58\x9c\x55\x39\x68\x84\x89\xc9\x28\xad\x3e" "\xbd\x7a\xf4\x47\xe8\x6e\xd8\xec\x89\x8c\x20\xd3\x90\xa4\xb7\x91\xc4\x25" "\x2c\xb2\x88\x78\xa4\x71\xdd\x7c\xb1\x3d\xde\x45\xc4\x5f\x74\x92\x57\x17" "\x62\x9a\x0b\xcd\x44\xc3\xb8\xb4\xb9\xa0\xcb\x83\x95\xa6\x74\xe3\x32\xaa" "\x1a\x68\x8c\xb7\x92\x78\xeb\x18\xdf\xed\xb7\x49\xe7\x19\xf6\xa4\x59\x13" "\x63\x13\xe6\xe8\x14\xbe\xa4\xf8\xbc\xc4\xe4\xef\x71\x88\xf9\x8d\x5a\x5f" "\xc4\xc3\xa9\x0e\xc3\x9e\xfd\xb2\xf2\x44\x86\xe0\xd4\x2f\x74\x51\x85\xbd" "\x1a\xa5\xab\xb9\xbe\x1b\xbc\x31\xb2\x36\x82\xde\xec\x33\xaa\xb3\x10\x8e" "\x79\x1f\x2e\x74\x53\x9e\xb8\xc3\xc4\xdb\x2d\x6b\x9a\xb5\x5b\x96\x07\x66" "\x7f\x2e\x57\x6f\xfe\x3f\x17\xde\x5b\xaa\x32\xca\x8d\x6b\x34\xab\x38\x98" "\x6a\xb8\xb6\xb6\x8b\x75\xec\x3b\x1e\xc4\xa3\x20\xd2\xbc\x54\x82\x08\x78" "\xbc\x6a\x02\x1d\x88\xa8\xc8\xaa\xb1\x2c\x14\xa5\xe9\x62\xa7\x9d\x51\x89" "\xae\x79\x13\x9b\x87\x37\xd7\x2c\x3e\xb2\xe3\xca\x52\xac\x78\x8a\xc4\xde" "\xb4\x06\x18\x76\x53\x45\x45\xbb\x94\xe1\x19\xa6\x3f\xef\xe8\x23\x8e\x5b" "\x62\x03\x4c\xa2\x0b\x46\x65\x84\xef\xcb\x1d\x01\x30\x6c\x1c\xc7\xed\x52" "\x09\x7d\xad\x3f\x85\x88\x20\xa4\x46\x1f\x38\xa2\x80\x81\x46\x95\xc9\x66" "\x10\xe3\xe4\xf3\x00\x52\x7c\xd8\xb3\x05\x1a\x8c\x0a\xeb\x6c\x52\x94\x29" "\x1c\xdf\x81\xe5\x0b\x9d\x59\xf4\x40\xc8\x2b\xf8\x8e\xce\x7c\x1e\xcf\x54" "\x8c\xaf\xc4\xde\x5b\xd4\x96\xf7\x7f\x1d\x5b\x6a\x29\x3b\xc1\xa3\x8e\x54" "\xad\x98\x01\xb2\x5c\x8f\xf1\x25\x20\x6a\x21\xed\x28\xb2\x6c\xf8\xf7\x09" "\x1f\x07\xa6\x10\x7f\xfd\x0a\x4e\x83\xe6\x90\xf3\x54\xc4\xbe\x58\xba\x6e" "\x59\xa9\x0c\x3d\xfb\x30\x56\x81\xf5\xcb\xf0\xbc\xa3\x3e\xd4\x81\xa0\xaa" "\x13\xa2\x83\xef\x7f\x26\x02\x60\x30\x14\x06\x9a\x90\x7d\x48\xd1\x1c\xda" "\xd6\x26\xb5\x3b\xa8\x5c\x20\x78\x5a\x7e\x6e\x32\xd6\x43\x9f\x5a\xe7\xa0" "\xee\x60\xa9\xa0\xfd\x28\xe2\xe9\xc8\xb8\x41\x4f\xdf\xde\x49\xfa\xc5\x5f" "\x95\x32\xb4\x73\xd8\x47\x8e\x93\x41\xa4\x26\x7b\x2d\x83\x97\x19\x9a\x58" "\x97\xd0\xd5\x96\x79\xf6\x06\x12\x8e\x28\xbf\xcd\xe4\x95\xa8\x97\x3a\x48" "\x04\x73\xae\x29\x64\x3f\x32\xc9\x09\x58\x8a\x55\x40\x48\xce\x8d\x4d\x17" "\x2d\xc3\x41\x83\xb6\x57\xd3\x09\x0d\xbd\x1e\x17\x92\x89\x52\x05\xef\x25" "\x72\x54\x4c\xd7\x11\x7a\xd6\x45\x15\x33\x46\xa9\x5d\x0f\xe7\x4e\xc4\x08" "\xe5\x0f\x35\x21\x3c\x5d\xbb\xef\x7d\x91\xc7\xd9\x6f\x23\x0e\xb0\xe4\x64" "\xc3\x21\x8c\xd9\x6e\x97\xa3\x31\xf2\xd6\xbc\xb3\xb6\x92\x71\x54\x5d\xbb" "\x79\xca\x3b\xa1\xde\x74\x7e\xf7\x18\x9a\x0e\x5d\x98\x9c\x77\x21\x09\x11" "\xcd\x4a\x43\x1f\xae\x1d\x15\x6e\x3b\x65\x49\xa0\xad\x1e\xe2\x0a\x71\xe0" "\x61\xc0\xac\x4a\xed\x3a\x1b\xe0\x18\xbb\x4e\xce\xa9\xde\x67\x1d\xfa\x55" "\x66\xcf\xf6\xa8\x94\xc6\xe4\x0f\xa1\xc2\xdf\x47\x0c\xbc\xa5\xdd\x3c\x62" "\xca\x97\xeb\x0a\xe7\xeb\x83\xc0\x90\xcb\x13\x4d\xe3\x52\x56\xae\x0b\x19" "\x45\x59\x5f\xcc\x42\x4f\x73\x15\xcc\x77\x43\x62\xbf\x21\x03\x1d\x34\xdb" "\x49\x08\xf3\xb6\x13\x6c\x85\x90\x75\x17\x1d\xb4\x91\xd1\x46\xbc\x2b\xb4" "\x19\x8c\x99\xab\x24\x8d\x90\x6e\xb1\xdc\x76\x22\x18\x06\x13\x88\xec\x0d" "\x98\xc2\x11\x88\x77\x3b\x54\xac\x77\x03\xe4\xc7\x61\x41\x21\xd9\x3c\x55" "\x34\x56\x89\x49\x06\x57\x75\x66\x2a\xb1\xc5\x9e\xb7\x39\xed\x13\x0a\xfc" "\x36\xf3\x0c\xc9\x4e\xdb\x94\xfe\xf4\x8e\x60\x11\xbf\x09\x83\x97\xb8\xcd" "\xcc\x64\xf5\x88\x6d\x74\x4e\x44\xc2\x07\xb4\x45\x55\x88\xcf\x49\x40\xdd" "\x7a\xdb\x61\x90\x18\xef\xf7\xe3\x37\x2b\xc8\x1e\xac\x02\x13\x60\x2c\x6f" "\xf6\x8c\xb3\x97\x3c\x4a\xc6\x26\xbf\x63\x8d\xce\x1a\x76\x52\x83\xbe\x96" "\xe8\xbb\x90\x02\xd4\x6f\xa3\xc0\x44\x1b\xbc\xb6\xb5\x70\xba\xce\x09\xc4" "\x99\xa3\x76\x0d\xac\x54\x48\x1d\x64\x67\x1b\xa7\xf5\x71\x61\xe4\x3f\x82" "\x67\x6f\x96\xbd\x16\x60\x20\xde\x8a\x32\x36\x29\xb8\x52\x1d\x5a\x5d\x68" "\x92\x92\x84\xa7\xdf\xe5\xec\x6e\xbb\x62\x75\xe1\x22\x5e\xb1\x8d\xd2\x68" "\x6f\x77\x2d\x19\xd5\x11\x35\x9e\xb2\x50\x62\x35\xeb\xfb\x27\x8d\xa2\xb1" "\x7a\x96\x57\x0a\x60\x17\x03\x76\xb9\xff\xde\x60\x1f\x9f\xfc\xa7\x31\xb2" "\x82\xa1\x11\xc5\x76\xbb\x36\x6c\x8b\x34\xb8\x5b\xcc\xf1\xfa\xc0\xd4\x5f" "\xac\x26\x00\x6a\x72\x14\xa3\x3c\x1f\xf1\x88\x6d\x21\x3d\xbb\x38\xe1\xc5" "\xba\x36\x02\x9c\x73\x2a\x9e\x79\x52\x4e\xc6\x6b\x4b\xd0\xcc\x24\x44\x0e" "\xb9\x43\x8f\x8e\x8d\x02\x45\x1a\x79\x29\x2e\x18\xad\xf8\x69\xe5\x30\xa1" "\xff\x3f\xb6\x64\x6b\x90\xe4\x96\xd5\xbd\x37\x46\x8c\x9c\xc4\x6c\x74\x95" "\x6f\x2b\x74\x90\x71\x7a\xfb\x25\x1f\x33\x59\xdc\x2f\x4e\x71\x68\xaa\x80" "\xbf\x9a\xb6\x94\x1d\x37\xd8\x4d\x53\x98\x3e\x88\x66\x4a\x77\x0a\xfc\xa8" "\x90\xce\x71\xbc\x80\x87\x0c\x46\x73\x8f\xfc\xd1\x83\x5f\xee\x82\x98\x8d" "\x56\x32\x82\x85\xb5\x72\x65\x21\xe0\x6e\xbd\xfa\xab\x92\x42\xc9\x9f\xb6" "\xc2\xf1\x5f\xf2\x14\x1b\x57\x14\xb8\x72\x4d\x91\x32\xe9\x7a\xf7\xf4\x71" "\x26\xdc\xce\xa7\x61\x95\x25\x3f\xde\x9a\x22\x53\x8c\x8d\xfb\x42\x48\x72" "\x5f\x15\xc8\x7d\xa3\xdc\x66\x74\x6f\x08\x2c\x4e\x3a\x1b\x38\xed\x73\x59" "\xb8\x18\x58\x10\x23\x4b\x80\x4e\x08\xfb\x1f\xa0\xc6\x39\x03\xae\x38\x20" "\x24\x75\x9a\x61\x4e\xea\xcd\x8c\xa4\xa6\xf3\x10\x0c\xdc\x00\x27\x9d\x06" "\x02\x21\xa9\x93\x30\x66\x68\xf8\xb3\x7b\x97\xc3\x11\xab\xaa\x63\xbf\xab" "\xc5\x47\x20\xbe\x07\x5a\x65\x24\xd9\x19\x76\xfd\x14\x19\x1b\x78\x3b\xe8" "\xfa\xef\x3f\xc4\xe2\x4e\x39\x1c\xf3\x0b\x5a\x1a\x46\xef\x3d\x18\xe5\x4f" "\xff\xc5\xd5\x5b\xf8\xe1\xe4\x7f\xe7\x44\x56\x8f\xb0\x90\x03\x36\xda\xb3" "\x10\xc7\xcf\x49\x0e\xa2\xdb\x70\x55\x9b\xc9\x85\x42\x74\x72\x0c\xc4\xac" "\x34\xa3\xb6\xcc\xb7\xf9\xc6\x2a\xb1\xe7\xb3\x09\x98\x81\x4e\x7f\x52\xd8" "\xd9\xf9\x26\xe4\x42\x92\x44\x03\x4b\x42\xe2\x4a\xe7\x73\x69\xc8\xf9\x95" "\xf6\x3a\xef\x71\x77\x2d\xb7\x35\x3e\xeb\xd6\x3f\xa5\xd7\x4a\x78\xd2\xef" "\x46\x51\x55\x08\xd1\x56\x83\xe1\xc8\x2d\x1f\xaf\xe4\x31\x27\x0d\xa9\xf5" "\xda\x0d\xf3\x81\xe4\x48\x23\x6c\xab\x52\x34\xea\x6b\xf3\xed\xb8\x5b\x91" "\xa5\x33\xb5\xb7\x7f\xbf\x03\xd3\x24\xdb\xab\x71\x40\x1a\xf5\x28\x72\xe8" "\x6b\x43\xb5\xe9\xe4\x83\xec\xb6\x1d\xf5\x88\x1e\x77\x9d\x2f\xee\x1e\x14" "\x31\x40\x55\x97\x41\x91\x9b\x4f\xdf\x79\xd4\x9c\x77\x23\xda\xee\xb3\x74" "\x38\x3a\x80\x78\x7c\xe5\xde\x3e\xc1\xd2\xd2\xc7\x91\x07\x5c\x56\x3b\xd7" "\x1e\xdb\xe0\x68\x90\x56\x18\x03\x5a\x88\x5a\xad\x6b\x8c\xb3\x82\xea\xac" "\x7c\xe5\x23\x66\x88\xc4\x3a\x26\xd7\xc9\xdd\xf3\xfe\xff\x32\xa8\x69\xc1" "\xc4\xe0\x89\x4f\x79\x56\xe7\xbf\xad\x82\x7f\x36\x82\x09\x8f\x99\xc1\xfa" "\x5d\x28\x56\xb6\x51\xb5\xa5\x04\xad\xea\xa9\xc5\x73\xc9\x92\x73\x08\x12" "\x2a\x1b\xee\xb1\x16\x38\x91\xe4\xdc\x0c\x0c\x89\xf6\xd0\x25\x08\x9b\x63" "\x4e\xde\x2a\xc9\xc7\xad\xaa\x2e\x42\xd7\x18\x86\x4e\x4c\x27\x53\x39\xe8" "\xc7\xfb\x18\xc0\xd8\x6f\x27\x83\xeb\xc1\xea\x85\x46\x5f\x30\x99\xec\xc1" "\x94\xf6\x15\xf9\xeb\xae\x52\x64\xcf\x00\x3b\x2d\x07\x9c\x81\xea\x10\xdc" "\xf2\x98\x0e\x48\x88\xb6\xdd\xc2\xfd\x84\x5a\x82\xfa\x90\x83\x34\x65\xd8" "\x7b\x17\x0a\xbf\x7a\x84\x21\x7f\x4e\xed\xc6\xf9\xce\x1f\xef\x9a\x96\x93" "\x9d\x8d\x8c\xaf\xcb\x2b\xc7\x70\xe5\xe8\xd9\x20\xe8\xa3\x15\xe0\x84\x5f" "\x32\x56\xb6\xc4\x66\x0f\x93\xae\x0d\x74\x3c\xcf\x5c\x6b\x0b\xf6\xaf\x12" "\x5f\x4b\x35\xbe\xdb\xf3\x71\x4b\xcd\x64\xc1\x1a\x9d\x18\xed\xe8\x59\xaf" "\x75\x2a\x5a\xa4\xcf\x52\x69\xc4\xf0\x89\xd1\x77\x07\x2b\xcf\xfa\xa8\x90" "\x60\x18\x95\x18\xa9\x3d\x73\x28\x78\x21\x08\x61\x89\x94\xb8\xf1\xfa\x71" "\x71\x93\xeb\xd7\x4e\x2e\xfa\xc2\x40\x93\xfa\x4f\xf9\x81\x89\x39\x34\x14" "\x17\x0f\xeb\x5a\x7f\x46\xba\x15\x52\x36", 4096); *(uint64_t*)0x200013c8 = 0x1000; *(uint64_t*)0x200013d0 = 0; *(uint64_t*)0x200013d8 = 0; *(uint64_t*)0x20005cd8 = 2; *(uint64_t*)0x20005ce0 = 0; *(uint64_t*)0x20005ce8 = 0; *(uint32_t*)0x20005cf0 = 0x880; *(uint32_t*)0x20005cf8 = 0; *(uint64_t*)0x20005d00 = 0; *(uint32_t*)0x20005d08 = 0; *(uint64_t*)0x20005d10 = 0x20002480; *(uint64_t*)0x20002480 = 0x20001400; memcpy( (void*)0x20001400, "\x0b\x2e\xae\x9e\x0d\xa1\x15\x8f\xbd\xec\x88\x43\xfc\x26\xa9\xe4\x75\x86" "\x24\x12\xe7\x25\xdd\x87\x02\x6f\x14\x31\x9d\x8f\x7c\xb5\x4f\x3a\xf3\xdd" "\xf7\x79\xcb\xf5\x5b\xda\xdd\x65\xd8\x39\x46\xe0\xf9\xd8\x38\x6a\x4a\xc9" "\xda\x92\xd7\x40\x48\xd0\xb3\xd3\x45\xbd\xf8\x93\x8c\x13\x9a\xfb\x9d\x85" "\xeb\xa6\x94\x5c\xbd\x4e\x75\x40\xb8\x64\xad\x16\xef\x37\xc0\xb3\x1a\x0f" "\x88\x58\x72\xc8\x62\x7d\x99\x98\x0f\x4e\x82\xfc\x77\x07\x0a\x32\x09\x4c" "\xdc\x83\x24\x66\x48\x9d\x36\x0c\xfe\x81\xca\xbc\xc4\x9f\x53\x08\x6c\xf3" "\x21\xbe\x3f\xdd\x90\x3e\x57\x7a\x54\xb4\x84\x90\xd1\x9a\x7f\xab\x85\xfb" "\xac\xb3\x43\xcb\xfd\x0c\x6b\xca\x02\x14\x31\x60\xe0\xd3\xb2\xad\x94\x3e" "\x4b\x37\xb0\xfd\x45\x96\x6f\x96\x48\x8e\x49\xef\xea\xb3\x7b\x66\x93\xaf" "\x6b\x6e\xbd\x20\xcb\x35\x05\x74\x79\xf7\xe3\xe9\x03\x70\x4a\x9a\x60\x91" "\xd4\x4a\x57\x17\x25\x64\x49\x09\xd0\x60\xd9\x78\xa2\x26\x95\xe5\x5b\x5c" "\xb0\xcb\xc1\xf8\xf2\xa6\x14\x1b\x2d\xb6\x7d\xb3\x6e\x2a\x80\xd1\xc1\xeb" "\x37\xca\x64\x44\xe4\xb8\x5e\xf9\x7c\x2d\x6e\x75\xa5\xfe\x3e\x87\x5f\x36" "\x76\x34\x64\x9f\x7d\x45\xcc\x3a\xf5\x58\xc1\xbf\x81\xc2\x15\x55\xe2\x0c" "\x2d\x47\xc6\xf2\xed\x5c\x21\x8c\xd7\x98\x98\x4c\x85\x4a\x3e\x59\x4f\xff" "\x9b\xc6\x3b\xca\x17\x94\x10\x87\x4d\x75\x39\xa6\xa5\xa6\xa2\xa7\xd0\x3e" "\xec\x09\x15\x88\x5e\xa8\x01\x68\x64\xd3\x36\xfd\x41\xe1\x44\x47\xb7\x62" "\x34\x11\x76\x84\xc0\x1a\x18\x61\x57\x02\x1f\x6c\x10\x31\x7b\x54\x0e\xb2" "\xbb\x75\xf4\x13\x29\x80\x1e\xa7\xd4\xbb\xa0\xe9\xfd\x99\xd8\x84\x2d\xd6" "\xac\x05\xbd\xda\xbd\x42\xc8\x9e\xaa\xa0\x34\x90\x39\x92\xd9\x6a\x9f\x18" "\x7b\x92\x02\xb9\x45\x21\xea\xa2\x1f\x30\x9c\x82\xb6\x30\x94\x3f\xb7\x5d" "\xc7\xe6\x77\x42\x3d\x8d\xcb\x57\x37\x26\x99\x43\x4f\x1a\x24\x6f\x28\x0b" "\x5b\x51\x26\x73\x23\x28\xb4\xd6\x2c\x54\x6d\x18\xf4\xb5\xc0\x12\x2a\x68" "\x71\xfb\x4d\xdf\xe6\xbe\x72\x81\x66\xcc\x02\x54\x85\xf8\x02\x4a\xfe\xb1" "\x25\x6f\xa2\xdc\xb9\x8a\x85\x8d\x50\xa3\x8c\x66\xe0\x3d\x98\x79\x9a\xa4" "\x3f\x30\xe4\x3d\x0e\x48\xa1\xf7\xdc\x50\x34\xa0\x5b\x82\x09\x03\x3e\x2a" "\xfd\x04\x9a\x24\xf4\x39\x19\xfa\x08\x9d\xb0\xe5\xa7\x77\x24\xe0\xbe\x6b" "\xa8\x10\x1a\x31\x8d\xa4\xd7\xdf\x08\x58\x7b\x05\x67\xa2\x8a\xbd\x0e\x2a" "\xe2\xdf\x7c\x30\x4a\xb6\xd5\xe6\x64\x08\x77\xfe\x1f\x3d\x95\x07\x91\x4a" "\x89\xcb\xc2\xca\xfb\x38\x13\x9b\x7d\xfd\xc4\x26\x73\xb2\xff\x6a\x8b\x88" "\xbf\x73\x75\xf2\xdf\x29\x73\xca\x7a\x1b\x56\x87\x83\x64\x87\x03\x7d\x40" "\x75\x92\x20\xae\x2c\x2a\x1a\x69\x22\x13\x78\x0f\x73\x9a\x54\xaf\xe5\xa1" "\x4a\x11\x24\xc1\xeb\xd0\xd8\x52\x1c\x9b\x3e\x25\x71\x2a\x9a\xbf\xd0\x89" "\xf5\x24\x41\x78\x61\x7d\x57\x25\xa6\xc7\x8c\x49\x42\xc4\xfb\xe4\xbf\xb5" "\x0c\x30\x45\xc0\x37\x5b\x69\x3a\xf8\x18\xd8\x9e\x7e\x2c\x09\x04\x87\x35" "\x44\x7c\x7e\x53\xcc\x48\x9a\x3e\xfa\x23\x0c\x6a\xfa\x76\x14\x8d\x70\xdd" "\x10\x6b\x31\x0c\xa3\x6f\xd5\xc9\xa0\x65\x52\xd4\xab\x85\xe9\xe4\x77\xe1" "\xbe\x9d\x4b\x13\xb5\xd4\x8a\x13\x5f\x74\x89\x47\x63\xf5\x70\x66\x7e\x22" "\x90\xc3\x00\x80\x4a\xd0\xdc\x5d\xc5\x7c\xb4\x6f\x18\xde\xd7\xa9\x5f\x4a" "\xe7\x35\xbd\x23\xf0\x6d\x99\x7d\x2a\xd9\x95\xbc\x96\xae\x25\x1f\x1b\x29" "\xb7\xf2\x1f\x94\xe4\x68\xce\xe0\xe3\x20\xa3\x61\x4b\xe0\x53\x9e\x4d\x06" "\x0f\xaa\xf5\xff\x18\xcc\x85\xd4\x0c\xcb\xa7\x9c\xdc\xfb\x1d\x57\x75\x6a" "\x77\x2d\x02\xf1\x9e\x63\x21\x78\x57\x52\x46\x9c\x07\xe6\x73\x24\xc3\x55" "\xf3\x13\x9e\x5c\xd6\x5f\x19\x4d\x27\x1f\x81\xc5\x99\x4c\x48\x77\x55\xba" "\x6b\xdb\x54\x5a\x2b\x9c\x43\x9e\x5f\xa8\x80\xd9\x5a\x75\xf2\x34\xab\xf2" "\x11\xa0\xa4\xed\x29\xf3\xa6\x4d\x54\xf3\x9b\x3b\x07\x8e\x52\xe8\xa9\x6c" "\xbc\xdb\x3a\xf1\xbf\x8e\x23\xd2\x29\x59\xf1\x81\x4a\xee\x43\xd7\x39\xd1" "\xf5\xb1\xdb\x40\x69\xe5\x80\x6d\x93\xee\xa8\xff\xa8\x6c\x6c\x37\x1d\x88" "\x1b\xf1\x15\xcc\xbc\xda\xc4\xe7\xc7\x95\x7f\xf6\xc7\x27\x10\x7d\x8e\x12" "\x79\xd0\x3d\x59\xa5\x7e\x67\xdc\x01\x0c\xe1\xc8\x56\xc5\xa7\x94\xb4\x67" "\xad\x88\x9e\xa8\x50\xb4\x51\x0d\x2a\xde\x86\xb1\x85\x40\x7b\x71\xfa\xd4" "\xa8\x89\x3e\x67\x6d\x51\x79\xb4\xa1\x51\x1d\xaf\x18\x0d\x4a\x9f\x99\x13" "\x64\x95\x88\x92\x59\xeb\xfd\xb2\x6e\x62\x97\x8d\x4b\x36\x4c\x21\xd0\x2d" "\xa9\x46\xc0\x3b\x64\x35\x10\x83\x62\xb5\xc7\x65\x95\x30\x02\x1a\x98\x1c" "\xcb\x4a\xec\x07\x65\x5a\xa5\xa6\x9d\x2d\xbc\xe2\x36\x5d\xa3\x0d\xf0\x62" "\xad\xe6\x81\xef\x19\xb8\xd7\x34\x83\xf3\x4f\x0b\x2c\xfe\xb3\x72\x54\x77" "\xc6\x01\xdc\x3c\xfe\x62\x18\x0c\x82\x45\xe7\x37\x34\x18\x97\x2a\xda\x03" "\x15\xe7\xec\xdd\xf9\x04\x45\x24\x5b\x23\xc2\x56\x03\x6b\x0b\xaa\xc3\x2d" "\xae\x48\xe3\x44\xb6\x2b\xc3\xb7\x9d\xb2\xc7\xc2\xc4\xc1\xf5\x7e\x8a\x57" "\xc0\xf6\xb2\x47\x2b\x88\xfa\x86\x1e\x4c\xa1\x9d\xd3\x7e\xdd\xf5\x99\xe6" "\x6e\xc4\xec\x19\x3d\x54\xd2\xd0\x6b\xcb\x2e\x12\x5f\x44\x4b\x22\xbf\xe0" "\x8c\x80\x4c\xc4\x33\xb5\xf7\x26\x31\xad\x90\x37\x84\xd4\x60\xc6\x1e\x8d" "\x8d\x0f\xb7\x5a\xba\x53\x3e\x89\x22\x16\x74\x25\x39\x31\xca\x6a\x37\x68" "\x70\x31\x24\x98\xef\xda\xf2\x2f\x8d\xc4\x52\x53\x1e\x3f\x69\x3d\x1a\xef" "\xa7\x02\xdd\xf4\xeb\x94\xe1\x29\xe3\xee\xdf\x7e\x4c\x56\x5b\x76\x73\xd4" "\xbe\xcf\xd1\xcf\x9c\x16\xb7\xc3\x4f\xa5\xbd\x10\x80\xd1\xc2\xa9\x01\x67" "\x41\xd3\x27\xc4\x24\x7d\x8c\xdf\x7b\x13\x73\x71\xda\x13\xd4\x5a\x85\xac" "\x1d\xf0\x39\x0b\x5d\x15\xdc\x9b\xb0\xf8\x97\x2d\x18\xa3\xbd\x90\xf6\x83" "\x7c\x3a\x67\xa1\x5f\x99\xd9\xe2\x61\x1a\x87\xe9\xea\x0c\xe1\x13\x84\xcf" "\x63\x32\x5b\xc5\x6d\xf9\x71\x60\xd0\xb9\x34\x0e\x0b\xcd\x4d\x68\x69\x46" "\x7d\xc6\x2c\x4e\x4c\xd3\xc3\xc4\x3e\xc1\x19\xfa\xd4\x0d\xa9\x78\x12\x68" "\x46\xde\x8a\x25\x76\x66\x83\x62\x58\x88\x73\x00\x67\x77\xfa\x35\x99\xe1" "\xfa\xb6\x61\xdb\x64\xa0\x4d\x11\xe3\x1c\xce\xbb\x6e\xaa\x8b\xc1\x8f\xfc" "\x17\x5c\xaa\xd8\x22\x78\x00\x4d\xd9\xe8\xd7\xb8\xdc\x7e\xb4\xe3\x55\xda" "\xe6\x59\x37\xa3\x17\x55\xa9\x77\x68\x4e\x25\x6c\x52\xb1\x48\xc8\x7e\xf6" "\xc2\x1e\xba\x7a\x90\x94\xb6\x1a\x50\xef\x28\xe0\x35\xa6\x40\x61\x35\xea" "\x85\xe1\x58\xe4\xd3\x92\x61\x3b\x9c\x6b\x4a\xf5\x03\x84\x4b\x23\x30\x36" "\x26\x38\xdb\xb4\x2e\x39\x1f\x53\xa0\x87\x00\x77\xd1\xdf\x00\x8d\x8c\xf6" "\x07\x7a\x06\xcf\xd9\xa4\x71\x4a\x4f\xe4\x64\x38\xb6\x64\xf3\xc2\x2c\x93" "\x30\xc0\x3d\xfb\xf5\x78\x2f\xf3\x22\x34\x11\x8d\x5b\x9c\x5a\x86\x48\x1a" "\x05\x97\xa7\xe7\x28\xc2\x50\xe7\x04\xfb\x9a\x88\x77\xb2\xc1\x5b\x11\x2c" "\x8e\x82\xd4\xd4\xc2\xcf\xc4\xcc\xe9\xf9\x17\x99\x9c\x8e\x63\xf0\xdf\x90" "\x34\x4a\x93\xe4\x86\xb9\x01\x25\x3d\xec\x18\x3f\x0b\x11\xfd\x55\xfd\x63" "\x0f\x5e\x60\x7e\x46\x48\x6a\xb5\x5f\x81\x77\x15\x81\x35\x72\x88\xb4\x32" "\xc7\xd6\xdc\x8e\x11\xe2\x76\xf2\x3a\xed\xd1\xcb\x8e\xdc\x97\x4a\x35\xbb" "\xb9\xe2\xfa\x1f\x17\x4a\xfe\x64\xe1\x0e\x64\xd7\xd5\x7d\x90\x5c\xa0\x02" "\x64\x0f\x1b\xb5\x41\x22\xb3\xc1\x9c\xd0\x83\x28\xb6\x1c\x47\x28\xb2\x5e" "\x6a\xa9\x64\x5c\x6c\x28\x40\xf9\xd1\x50\x2c\x7c\x39\x99\x05\x5b\xb2\xf1" "\x1b\x35\xa3\xb5\x8a\x67\xba\x58\xd5\xa4\x5a\xca\x4b\x84\x9f\x5d\x6d\xcd" "\x9c\x2d\x0e\x6a\x4c\x87\xaf\x43\x53\x5c\xea\xbd\xc5\xeb\x6e\x2f\xee\x46" "\x2b\x96\x03\x44\x63\xa2\xb1\xc5\xac\x4d\x44\x2a\xf3\x3e\xc8\x21\x84\x39" "\x66\x7b\x0f\xe1\x05\x1b\x3a\xd7\xfd\x6c\xe5\x5f\x98\xf8\x3e\xe6\xc8\x02" "\x4e\xf3\xee\xc3\xea\xa3\x77\xf2\xfa\x14\xd1\x2b\xdf\xc0\x6e\x83\x27\x2c" "\x15\x86\x7d\x25\xc6\xa8\x6d\xad\x23\x4f\x3f\xe9\xca\xd2\xfd\xa3\x7d\x31" "\x16\xff\x63\x9b\x8b\x6c\x0e\x55\xbc\x7b\x15\xe2\x14\x9e\x0e\xa7\x60\x8e" "\x3c\x40\x41\x37\x44\x37\x1f\xad\x97\xb0\xad\x22\x89\x28\x98\x2f\x0d\x7c" "\xaf\x4f\xb5\xb1\x99\x48\xf9\xfb\x01\x8f\x37\x20\x61\x88\xcb\xc0\x27\x52" "\xca\xd2\xc0\xc2\x0f\xe6\x37\xa4\xf9\x6b\x62\x57\xdc\xbf\x41\xe8\x05\xe9" "\xe9\xde\x8c\xf3\x4d\x40\xfd\x92\x9f\xc5\x2c\xd2\x55\x35\xe5\x53\x04\x0f" "\x9f\x6c\xf5\x16\x7c\x9a\x9e\x91\xb3\x39\x9b\x3c\x55\x12\x9f\xb5\xa1\xbb" "\xc7\xc2\x9a\x35\xf6\x6e\x91\xf2\x5d\xd2\xbe\x67\xba\x81\xc7\x0f\x89\xed" "\x72\x7c\x9d\x14\x08\xb3\xe2\x59\xc5\x71\x52\x93\x53\x00\x63\x1e\xbe\xa7" "\xc2\x8c\x41\xcb\xc3\xec\x46\x57\x34\x22\x0d\x55\x1f\x8f\xaf\x95\x5f\x72" "\x54\x24\x51\xec\xef\xd7\xc3\x95\x34\x08\xc0\x3f\xea\xd8\x90\x77\xd2\xeb" "\x30\x31\x92\xda\xef\x27\x64\x21\x95\x58\xbb\x65\xc5\x30\x9c\x50\x10\xe4" "\x95\x72\xa9\x83\x1e\x77\x45\xcb\x19\xac\xfa\x46\x2f\x3f\xe1\x54\x19\x2c" "\xc2\xd2\x4b\x4a\x98\xdd\x9c\x73\xc6\xc6\x99\x8d\x69\xfc\xbc\x43\xd1\x60" "\x5f\xc9\x4f\x28\xdc\xc5\x7c\xc6\x21\x2b\xd6\x4f\xee\xb8\x84\x17\x63\x85" "\xd8\xd0\xa3\x7e\xd4\xa2\x91\x19\x5a\xb5\x75\xa1\x46\x01\x08\x85\x4d\x8e" "\x37\x34\x4b\x66\xef\x8c\x7c\xc0\x13\x4e\xb7\xf2\x65\x9b\xc3\x6c\x82\xe1" "\x39\xc1\xc9\xd8\xac\x8b\x2c\x48\xbb\x6b\xd0\xc8\xe7\xd3\x5b\x65\xdd\xc6" "\x68\x2c\xcf\x4f\xd7\xb5\x29\x6a\x28\xfa\x89\x8d\x86\x3e\x9b\x68\x57\xa4" "\x65\x99\x9c\x1a\xb7\x25\xfa\xc6\x4a\x2b\x67\x25\xfe\x93\x18\x19\xbb\x37" "\x61\x35\xdd\x0c\x12\x9e\x80\xa8\xdc\x58\x19\xe8\xdf\x32\x69\xfc\x1d\x0e" "\x16\x54\xf6\xa3\x68\x90\x9f\xf3\x4d\x60\xed\xc4\x65\x2a\xbf\x29\xe7\x61" "\x84\x66\x88\xb1\xbb\xb1\xcf\x93\xfd\xf4\xe2\x3d\x63\xf3\xb2\x4d\x66\x4e" "\xc8\x8a\x13\xaf\x69\xb6\x53\x13\xc4\xe0\xaf\xc2\xd4\x62\xf1\xb3\x7e\xa9" "\x66\x28\x5d\x21\x0d\xb8\xe1\x45\x21\xb9\xe0\xe9\x54\xd5\x2b\xfc\x1d\xc1" "\x77\xd6\x64\x8e\x12\x22\xb8\x7d\xb4\x5a\xdf\x69\xc3\x7a\x22\xe5\xf8\xa8" "\xc1\xd0\x50\x12\x3f\xf6\xb1\xc5\xa5\xf5\x7d\x35\x5a\x1f\x74\xe0\xe6\xdd" "\x72\xc4\xa6\x31\x42\x2d\xac\xd5\x93\x8d\xf4\xcc\x0b\x64\xf0\x93\x9c\x4e" "\x7d\x59\x26\x93\x22\x78\xc7\xd1\x77\xa1\xcf\x79\xb7\xb4\xc2\x0c\xb2\x47" "\xaa\x8c\xb9\x35\x6d\xaa\xf3\x27\x49\x1c\x23\x8f\xf9\x72\x7d\xfd\x22\xd1" "\x9e\x13\xc9\x2b\x2d\x8d\x3c\x9a\x8e\xff\x48\x48\xfc\xa1\x37\x4a\x46\x6c" "\x27\xff\x53\xe4\x81\x90\x91\xe2\xca\x45\xe2\x97\x88\x1d\x6d\x74\x7c\xc8" "\x88\xbd\xb9\x37\x2e\xaf\x38\x44\x84\x6b\x2e\x84\x6d\x1f\xbb\xd5\x97\x45" "\x08\x54\xb9\x62\x40\xa1\x7a\xb6\x75\x97\xed\x4f\x26\x9f\x13\x04\x63\x62" "\x10\xc5\x51\x89\xe9\xdc\x03\x82\xf8\xf8\x69\xc8\x5c\x7e\x25\x61\x2f\xa4" "\x86\xca\x8c\x1e\xb0\xf2\xee\x26\x3c\x8f\x4f\x3d\xe6\x56\x28\x20\x69\xae" "\x34\x3d\xbb\xad\x05\xa4\xc6\xf1\xb8\x37\x23\x5a\xdc\x9d\x14\x1a\xdb\x58" "\x72\xe1\x5d\x85\xf5\xbf\xd2\x1c\x39\x9a\x54\x24\x47\xad\x0f\x24\xb5\xc1" "\x34\x9d\xf3\xc1\xf5\x75\x06\x45\x76\x95\xfc\xca\xca\x99\xa1\x61\x55\x3e" "\xf3\x7c\x3c\x06\xed\x8a\xf4\x62\xee\xc6\x98\x26\xc9\x7f\x56\x49\xeb\xa7" "\x97\xbc\x53\x2a\x0f\x00\xcb\x67\x35\x57\x33\x56\x16\xa7\x2b\x5e\xaf\x19" "\x53\x89\x9b\x1f\xa3\x0e\x79\xfa\x78\x79\xd4\x2e\xe3\xf0\xb2\xf7\x34\x7c" "\x94\xc8\x36\x38\x35\xf9\xc5\x96\x2d\x10\xf3\x52\x34\xb7\x58\x4c\x30\xb4" "\x80\xe3\xa5\xb2\x7c\x34\xe9\x41\x07\x76\x67\xd6\x14\x23\x9d\x08\xa0\xb1" "\xe4\x75\xdd\xdf\x94\x7a\x74\x58\x82\x84\x9e\x1c\x07\x54\xc1\x8c\x4d\x6c" "\x24\x87\xf2\x33\x6b\x84\x91\xf2\xbe\xd8\xea\x9e\xe4\xdd\xba\xa6\x24\x56" "\xc1\x8c\x37\x41\xab\x4e\x2a\xb0\xcf\x73\x37\xe3\x72\xa4\x69\xd3\x68\x05" "\x52\x18\x3c\x4f\x83\x52\xc4\x97\xab\xf4\x88\x56\xcb\x8d\x4d\xbc\x48\x97" "\x9a\x14\x0c\x2a\x80\x90\xb2\x2f\x5a\xff\xcd\xd9\x1d\xc6\x20\xc9\x1d\xe8" "\xa7\xf5\x7b\x6a\x7b\xc7\x2a\x2f\xde\x0c\x07\x46\x86\xa1\xfc\xa8\xe5\x14" "\xed\xab\x64\x99\x18\x43\x10\x16\x8d\xb1\x93\xbf\x71\x89\xff\xb0\x2e\xd4" "\xac\x96\xf6\xef\xa8\x8b\x75\xec\x78\x21\x56\x95\xfe\x8b\x87\xac\xec\xeb" "\xcf\x05\xc3\x9a\xdb\xe6\x13\x7b\xfd\x6e\x84\x91\x3e\xba\xbd\xe4\xc7\xc6" "\x49\xb0\x87\x7e\xc9\x5a\xe7\xf3\x09\x1f\x5f\x31\xcc\x5e\xff\xa7\xa5\xb3" "\x00\xd6\xe7\xd0\xd4\x56\xef\xcd\xbc\x5e\x5f\x0b\xd5\xae\x7a\xc0\x23\xbe" "\xd9\x8b\x9b\xe5\x1c\x40\xee\x74\x2b\x8a\x90\x1c\xb9\xb8\xbc\x9e\x59\xe7" "\x10\x7e\xad\x50\x7e\x7d\x5c\x06\x02\x2b\x48\xde\xc8\x9c\xb8\xf6\x9f\x1b" "\xae\x87\x90\x58\xa9\xe6\xfb\x09\x5b\xb6\x49\xac\xb9\x5a\x7a\x92\xd8\x66" "\x05\x11\xf9\xa2\x9c\x85\x9b\xd0\x09\x15\x3e\x25\x37\xde\xac\x79\xb2\xb0" "\x2b\x58\x2f\x98\xd0\xbd\x49\x58\xf4\x97\x3d\x7b\x2c\x60\xed\x57\x66\x01" "\x83\xfe\x31\xca\x7c\x70\x69\xc5\xa4\x06\xd3\xa4\xb5\x5d\x63\x8b\x0f\xfd" "\xd3\xd1\x2c\x55\x19\x2c\x0e\xb6\xb2\x1a\x44\x6c\xc1\xb4\x3d\x98\x37\x8c" "\x4b\x30\xd7\xc9\xba\x0b\xc8\x3b\x07\x87\xa4\x5d\x3b\x32\xe2\x85\xc2\xba" "\x66\x3b\xbf\xe4\x30\x30\xb9\x7a\x02\x2f\x2c\x7d\xd0\x6c\xed\xe6\xf2\x4d" "\x57\x5a\x82\x35\xf5\xc3\xb2\x78\x68\x62\x79\x24\x78\x2f\x45\xda\x85\x7d" "\x38\x77\xf7\xb8\xf0\x47\x30\xa0\x61\x7e\x8b\x0a\x7a\x1c\x7d\x2a\xc1\x2d" "\x5f\x66\x19\x30\x02\x25\x73\x15\xab\x31\xc2\x0f\x67\x5e\xea\xb8\xed\xc7" "\x4e\x67\xa2\x45\x9c\xb0\xe9\x01\x85\x26\x80\x61\xd0\x95\x57\x90\x43\xa7" "\xc0\xcb\x48\x41\xa8\xf1\x46\x25\xd8\x0d\x55\x38\xc3\xe6\xfc\x58\x7c\xb0" "\x9a\x93\xda\x3c\x65\x37\x0d\xbb\xac\x17\xee\x26\x0c\x93\x49\x90\x5c\x80" "\x64\xe9\xaf\x92\xc3\xbe\x3f\xf9\xde\x03\x8e\x06\xe2\x02\xfe\x17\x3e\xb1" "\x5e\x2c\x04\x4a\x18\x01\x75\xc6\x2b\x6b\x2a\xb7\xed\x7c\x7c\xbb\x5e\xae" "\x6c\xa5\x61\x24\x1c\x8d\x23\x74\x7f\x9d\x6b\xb0\xf5\x3d\x29\xf6\x61\x68" "\x1c\xcc\xc9\xf3\xd8\x92\xc8\x66\x05\xf1\x1a\xf5\xbd\xd5\xe1\x8a\x09\xbb" "\x79\x7e\x17\x60\xb0\x62\xee\xe6\x64\x74\xb6\xa3\xb0\x91\x04\xc7\x80\x90" "\x66\xe0\xfb\xfb\x78\x05\xf8\x60\x60\x1b\xbd\xd8\x82\x67\x6d\xec\x95\x98" "\x84\xd5\x93\x01\xe1\x1f\xa7\x4e\xe3\x67\x03\xe2\xce\xc5\x4f\x67\x66\xb9" "\xcc\x21\xcd\x53\xa6\x3e\xa0\xce\x2f\x66\x44\xa8\x38\x88\xd3\x18\x12\x77" "\xff\x37\x13\xe9\xbf\x5d\x01\x38\x84\x7b\x06\x4f\x9b\x51\x05\xc3\xa0\x58" "\x6b\x83\x3f\x16\x32\x6c\xd4\xda\xa1\x6d\x1e\x8d\xb8\x3a\xb0\xb0\x71\xf1" "\x28\xaf\x2e\x08\xea\x2e\x9c\x62\xeb\x9a\x74\xca\x83\xdd\x23\xb7\x6b\x01" "\x7d\x86\xc5\x0b\x5b\xa1\x87\xce\xb2\xc1\xd1\xf3\xc9\x5d\x24\x73\x89\x6b" "\x48\xa0\xf6\xa8\x66\x70\x1f\xb9\x77\x09\xcb\xa3\x0e\x27\x57\x4b\xff\xd2" "\x58\x6d\xd6\x9e\xd7\x50\x88\x2f\x92\x42\xce\xbd\x22\x43\xe4\x28\x7f\x14" "\x9c\x8d\xc6\x28\x45\x6e\xfc\xd6\xc0\x0c\x6b\xda\xec\x9a\xbd\x03\x82\xf1" "\x1c\xd1\x6d\xdc\x0b\x06\x28\xc2\x4a\xc7\xa5\xca\xee\x5e\x0c\xa5\x9d\xd9" "\xfd\x51\x2d\x5c\x9a\x89\xdb\x57\xbb\x33\xaa\xf3\x32\x74\x68\x75\xfa\x45" "\x15\x46\xa2\x75\xc4\xc0\x56\xe9\xeb\x22\x1b\x24\x50\x6b\x87\xdd\x0d\xfd" "\x4c\x50\x35\xd8\x2b\x28\xff\xad\x41\x43\x26\x28\xaf\xf3\x80\x58\xba\xfe" "\xcb\xf8\x30\xa4\x08\xa8\x7d\x69\x1b\xab\x85\xbe\x5c\xc7\x22\x5d\xe2\x83" "\x45\xdc\x97\x68\x0b\x43\xda\x40\xa2\xb1\x56\xff\x36\x6b\x60\x13\xc0\x17" "\xd3\x91\xa2\xdf\x8c\xdc\xad\x9b\x79\x21\xe0\xbc\xcd\x08\xf4\xc8\x67\xec" "\xec\x01\x8a\xd5\x36\x0c\x79\xde\x1d\x4c\x48\xe2\x16\x6f\x01\x68\x21\xa3" "\xd6\x5b\xcf\xf4\xcf\x50\x64\xec\xbe\xee\x90\xeb\x7d\x89\x4e\xcd\x1b\x82" "\x33\x09\x1d\x0f\x89\x13\xbb\xe8\xca\x37\x65\xb1\x6a\xf1\x5f\xe5\x90\xca" "\xdc\x7f\xa8\xdb\xca\x73\x74\xac\xe2\xda\xfb\x23\x26\xbf\xfa\x5b\xa7\xdd" "\xc3\x33\x3c\x84\x0d\x69\x69\x96\xd4\x69\x53\x75\x7c\x38\x2e\x88\x41\x54" "\xa3\x43\xe5\x4b\xcf\x23\x26\x37\xdc\x0c\xa0\x69\x57\x22\xfd\x91\x5c\x4c" "\x0f\xb2\x4b\xc1\xd0\x50\xc3\x4f\x80\xcd\x09\x18\xc0\x06\x34\x19\xfb\xd4" "\x6f\xb0\xb4\xfd\x0b\x52\x32\xc0\x8a\x79\x01\x82\x39\xcb\x41\x06\xcb\xbf" "\x28\xf6\x06\xc7\x02\x2f\xec\x72\x65\x12\x7a\x37\x8e\xf3\x32\x90\xa4\xa8" "\x56\x86\xdb\x83\x78\xad\xbe\x6a\x1e\x33\xe8\xff\xda\x6b\xbe\x7b\xb6\x10" "\x66\x41\x6b\xee\x53\xf7\xae\x87\xa7\x52\x41\x68\xd3\xb6\xb8\x2b\xa8\xed" "\x14\x1a\xb8\xf9\x68\x24\xff\x37\xbb\x48\x3e\x9d\xc3\x8a\x12\x5f\x85\x44" "\x17\xfa\xf7\xa9\xfb\xbe\xab\xeb\xab\x7b\x80\x59\x5c\xe3\xea\x60\x11\x3a" "\x5f\x57\x49\x71\x48\xc1\x20\xf9\xc0\x56\xfc\x01\x60\xc2\xa5\x97\x90\x7d" "\xa0\xe3\x8b\x52\x2e\x0e\x90\x82\x1a\xd6\x92\xdb\x8a\xfd\x89\x96\xfc\xcc" "\x5b\x30\x52\xf2\xf3\xa4\xca\xf3\xe1\x5b\x69\x26\x08\xc1\x60\x2e\xd0\xb1" "\xca\x10\x8a\x3a\xd0\x86\x98\x7f\xe2\x69\xb4\x3e\x7f\xf7\xcb\x78\x85\xc7" "\xd3\x14\xe2\x94\x24\xdb\xe8\x0c\x7a\x28\xd5\x5f\xd0\xe9\x86\xfd\xf2\x41" "\x04\x37\x18\xc0\xe6\xac\xbe\x99\x38\xc4\x13\x48\x93\xc8\x44\xf4\x13\xa0" "\x99\x47\xac\xf3\x99\x81\x2d\x45\xf2\x3c\xaf\xe6\xe0\x53\xad\x8f\x21\xee" "\xe5\x42\x8d\x28\xbe\xec\x9b\x6a\x74\x2c\xfb\x7c\x65\x0b\xed\x97\x39\x30" "\xfd\x30\x26\xb1\x20\x69\x4e\x88\x8b\x73\xff\xf1\xbf\x32\xc7\xef\x0f\x1f" "\x48\x97\x37\x5a\x4a\x28\xc8\x8f\x2f\x55\x78\xf6\x7b\x7f\x08\xff\xd6\x9c" "\xa8\x52\x8e\xdb\xb7\xd8\xba\xcb\x8c\x10\xe6\xee\x7d\xc3\xd8\x85\x9c\x98" "\x00\xc4\x62\xcd\x90\xa6\x27\x86\xd4\x15\xb6\x1e\x06\x40\x6d\xb1\x0a\x96" "\xcc\x3e\x40\xf9\x84\x39\xac\x75\x3b\x92\xb0\x26\x66\xde\xf5\x99\xde\xfe" "\x9a\xa4\xc4\xd5\x26\x24\xd3\x54\xbe\xbc\x3a\x3e\x39\x5a\x6e\x31\x66\x1e" "\x65\xad\x06\x61\xc1\x9d\x74\xe9\x1d\xb7\x91\x48\x55\x7e\xab\x8a\x3f\x85" "\xe9\xec\x92\x1b\x8b\xf4\x64\x7b\x36\x88\x6e\xba\x9c\x11\x47\x02\x38\x6a" "\x58\xe6\x66\x8c\x06\xa7\x77\x7f\x79\x18\x5f\x28\xd4\xde\x2b\xbf\xd5\xb4" "\xbe\xfb\x7a\x9c\x74\x78\x1a\xa3\x98\x4b\x4b\x9c\x59\x35\x1e\x38\x66\x69" "\xd6\x4d\x1b\xe6\xbb\x0f\xf9\x2c\x4d\xba\xdd\xc4\xed\xfa\x1a\x16\x5f\xd7" "\xbc\x5f\x08\x76\xc5\x38\x94\x5a\x47\x49\x1f\x3a\x40\xa8\xf1\x73\xc8\x12" "\xda\xa0\xdd\x7e\x59\xf9\x7c\xb3\xb4\xb2\x62\xa0\xb0\xff\x4a\x1e\x9e\x7a" "\x00\x8c\x7f\xb6\x94\xf4\xd5\xb0\xf0\x2e\xae\x13\xe0\x85\x42\xb0\x47\x7c" "\xe0\x86\xdb\xa4\x31\x1d\x14\x3b\x76\xe9\x38\x8f\xae\x2f\x85\x83\x1b\x77" "\xaa\xf4\x19\xc7\x68\x8c\x63\x8b\x5b\xae\x6d\x1b\x3e\xdc\x71\x68\x0d\x92" "\x62\x84\xcb\x2a\x72\x33\x7e\x71\xe8\xc2\xea\xd7\x33\x3c\x2a\xb8\x04\x15" "\x68\x40\x33\x7c\xbc\xe1\x50\x34\x11\xe9\x53\xce\x64\x8a\x31\x63\x0e\xa7" "\xa8\xc3\xd0\xdd\xd1\x02\x37\xe8\xc9\x25\x17\x31\x62\xc5\xd1\x51\x02\x3d" "\x02\xce\xe6\x4c\x0c\x49\x11\x45\x40\xe0\x8e\x36\x67\x1f\xd7\x1b\xdc\x01" "\xeb\x11\xbf\x24\x1e\xc6\x57\x60\xef\x15", 4096); *(uint64_t*)0x20002488 = 0x1000; *(uint64_t*)0x20002490 = 0; *(uint64_t*)0x20002498 = 0; *(uint64_t*)0x20005d18 = 2; *(uint64_t*)0x20005d20 = 0; *(uint64_t*)0x20005d28 = 0; *(uint32_t*)0x20005d30 = 0x4000840; *(uint32_t*)0x20005d38 = 0; *(uint64_t*)0x20005d40 = 0; *(uint32_t*)0x20005d48 = 0; *(uint64_t*)0x20005d50 = 0; *(uint64_t*)0x20005d58 = 0; *(uint64_t*)0x20005d60 = 0; *(uint64_t*)0x20005d68 = 0; *(uint32_t*)0x20005d70 = 0x20000080; *(uint32_t*)0x20005d78 = 0; *(uint64_t*)0x20005d80 = 0; *(uint32_t*)0x20005d88 = 0; *(uint64_t*)0x20005d90 = 0; *(uint64_t*)0x20005d98 = 0; *(uint64_t*)0x20005da0 = 0; *(uint64_t*)0x20005da8 = 0x158; *(uint32_t*)0x20005db0 = 0; *(uint32_t*)0x20005db8 = 0; *(uint64_t*)0x20005dc0 = 0; *(uint32_t*)0x20005dc8 = 0; *(uint64_t*)0x20005dd0 = 0; *(uint64_t*)0x20005dd8 = 0; *(uint64_t*)0x20005de0 = 0; *(uint64_t*)0x20005de8 = 0; *(uint32_t*)0x20005df0 = 0; *(uint32_t*)0x20005df8 = 0; syscall(__NR_sendmmsg, /*fd=*/-1, /*mmsg=*/0x20005cc0ul, /*vlen=*/5ul, /*f=*/0x80ul); syscall(__NR_madvise, /*addr=*/0x20000000ul, /*len=*/0xc00304ul, /*advice=*/0x15ul); } int main(void) { syscall(__NR_mmap, /*addr=*/0x1ffff000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=*/0x32ul, /*fd=*/-1, /*offset=*/0ul); syscall(__NR_mmap, /*addr=*/0x20000000ul, /*len=*/0x1000000ul, /*prot=*/7ul, /*flags=*/0x32ul, /*fd=*/-1, /*offset=*/0ul); syscall(__NR_mmap, /*addr=*/0x21000000ul, /*len=*/0x1000ul, /*prot=*/0ul, /*flags=*/0x32ul, /*fd=*/-1, /*offset=*/0ul); setup_swap(); do_sandbox_none(); return 0; }