Re: general protection fault in skb_release_data
From: Andrey Konovalov
Date: Fri May 19 2017 - 08:57:40 EST
On Fri, May 19, 2017 at 12:18 PM, <idaifish@xxxxxxxxx> wrote:
> Hi,
>
> I've got the following bug report while fuzzing the
> kernel(master-f83246089ca) with syzkaller.
>
> program and config are attached.
Hi!
Thanks for the report!
Adding kernel maintainers.
I can confirm that we've hist this bug multiple times, but never been
able to reproduce it.
I was able to reproduce it on 2ea659a9ef488125eb46da6eb571de5eae5c43f6
(4.12-rc1).
Using the attached syzkaller program I was able to generate C
reproducer, attached. Sometimes I need to run it a few times to
trigger the bug.
@idaifish If you find more bugs please run ./scripts/get_maintainer.pl
to get the list of subsystem maintainers and add them to the
recipients. I've updated instructions of how to report kernel bugs
found with syzkaller in README.
Thanks!
>
> =======================================================
> kasan: GPF could be caused by NULL-ptr deref or user memory access
> general protection fault: 0000 [#1] SMP KASAN
> Dumping ftrace buffer:
> (ftrace buffer empty)
> Modules linked in:
> CPU: 2 PID: 21599 Comm: syz-executor3 Not tainted 4.11.0-rc8+ #1
> Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS
> Ubuntu-1.8.2-1ubuntu1 04/01/2014
> task: ffff88006c16dec0 task.stack: ffff880058bb8000
> RIP: 0010:__read_once_size include/linux/compiler.h:254 [inline]
> RIP: 0010:compound_head include/linux/page-flags.h:146 [inline]
> RIP: 0010:put_page include/linux/mm.h:796 [inline]
> RIP: 0010:__skb_frag_unref include/linux/skbuff.h:2613 [inline]
> RIP: 0010:skb_release_data+0x201/0x3b0 net/core/skbuff.c:593
> RSP: 0018:ffff880058bbf570 EFLAGS: 00010a02
> RAX: 11032b488bad1523 RBX: ffff88006c6e8ec8 RCX: ffffc9000190e000
> RDX: 1ffff1000d8dd1df RSI: ffffffff8293d7e3 RDI: 88195a445d68a919
> RBP: ffff880058bbf5a8 R08: 7bdf27567b31597f R09: 0000000000000000
> R10: 00000000000000d2 R11: 7dc9ab6dec891f24 R12: 0000000000000000
> R13: dffffc0000000000 R14: ffff88006a475940 R15: 88195a445d68a8f9
> FS: 00007fbbc6a34700(0000) GS:ffff88006e400000(0000) knlGS:0000000000000000
> CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
> CR2: 000000002004e000 CR3: 000000006b868000 CR4: 00000000000006e0
> Call Trace:
> skb_release_all+0x4a/0x60 net/core/skbuff.c:669
> __kfree_skb net/core/skbuff.c:683 [inline]
> kfree_skb+0x85/0x1b0 net/core/skbuff.c:704
> __ip6_append_data.isra.42+0x26ed/0x33b0 net/ipv6/ip6_output.c:1519
> ip6_append_data+0x1a8/0x2f0 net/ipv6/ip6_output.c:1633
> udpv6_sendmsg+0x7bd/0x2360 net/ipv6/udp.c:1264
> inet_sendmsg+0x123/0x3a0 net/ipv4/af_inet.c:762
> sock_sendmsg_nosec net/socket.c:633 [inline]
> sock_sendmsg+0xca/0x110 net/socket.c:643
> ___sys_sendmsg+0x79f/0x900 net/socket.c:1997
> __sys_sendmsg+0xd1/0x170 net/socket.c:2031
> SYSC_sendmsg net/socket.c:2042 [inline]
> SyS_sendmsg+0x2d/0x50 net/socket.c:2038
> entry_SYSCALL_64_fastpath+0x1a/0xa9
> RIP: 0033:0x44fb79
> RSP: 002b:00007fbbc6a33b58 EFLAGS: 00000212 ORIG_RAX: 000000000000002e
> RAX: ffffffffffffffda RBX: 0000000000718000 RCX: 000000000044fb79
> RDX: 0000000000000000 RSI: 000000002000afc8 RDI: 0000000000000005
> RBP: 00000000000003fb R08: 0000000000000000 R09: 0000000000000000
> R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000005
> R13: 0000000020001000 R14: 0000000000048000 R15: 0000000000000000
> Code: 48 83 c0 03 48 c1 e0 04 48 01 d8 48 89 c2 48 c1 ea 03 42 80 3c 2a 00
> 0f 85 92 01 00 00 4c 8b 38 49 8d 7f 20 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00
> 0f 85 6f 01 00 00 49 8b 47 20 a8 01 0f 84 3b ff
> RIP: __read_once_size include/linux/compiler.h:254 [inline] RSP:
> ffff880058bbf570
> RIP: compound_head include/linux/page-flags.h:146 [inline] RSP:
> ffff880058bbf570
> RIP: put_page include/linux/mm.h:796 [inline] RSP: ffff880058bbf570
> RIP: __skb_frag_unref include/linux/skbuff.h:2613 [inline] RSP:
> ffff880058bbf570
> RIP: skb_release_data+0x201/0x3b0 net/core/skbuff.c:593 RSP:
> ffff880058bbf570
> ---[ end trace 46c9f72a66cd8627 ]---
> Kernel panic - not syncing: Fatal exception
> Dumping ftrace buffer:
> (ftrace buffer empty)
> Kernel Offset: disabled
> Rebooting in 86400 seconds..
>
> --
> You received this message because you are subscribed to the Google Groups
> "syzkaller" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to syzkaller+unsubscribe@xxxxxxxxxxxxxxxxx
> For more options, visit https://groups.google.com/d/optout.
// autogenerated by syzkaller (http://github.com/google/syzkaller)
#ifndef __NR_setsockopt
#define __NR_setsockopt 54
#endif
#ifndef __NR_sendto
#define __NR_sendto 44
#endif
#ifndef __NR_sendmsg
#define __NR_sendmsg 46
#endif
#ifndef __NR_mmap
#define __NR_mmap 9
#endif
#ifndef __NR_socket
#define __NR_socket 41
#endif
#ifndef __NR_dup2
#define __NR_dup2 33
#endif
#define _GNU_SOURCE
#include <sys/ioctl.h>
#include <sys/mman.h>
#include <sys/mount.h>
#include <sys/prctl.h>
#include <sys/resource.h>
#include <sys/socket.h>
#include <sys/stat.h>
#include <sys/syscall.h>
#include <sys/time.h>
#include <sys/types.h>
#include <sys/wait.h>
#include <linux/capability.h>
#include <linux/kvm.h>
#include <linux/sched.h>
#include <arpa/inet.h>
#include <linux/if.h>
#include <linux/if_ether.h>
#include <linux/if_tun.h>
#include <linux/ip.h>
#include <linux/tcp.h>
#include <net/if_arp.h>
#include <assert.h>
#include <dirent.h>
#include <errno.h>
#include <fcntl.h>
#include <grp.h>
#include <pthread.h>
#include <setjmp.h>
#include <signal.h>
#include <stdarg.h>
#include <stdbool.h>
#include <stddef.h>
#include <stdint.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <unistd.h>
static uintptr_t execute_syscall(int nr, uintptr_t a0, uintptr_t a1,
uintptr_t a2, uintptr_t a3,
uintptr_t a4, uintptr_t a5,
uintptr_t a6, uintptr_t a7,
uintptr_t a8)
{
switch (nr) {
default:
return syscall(nr, a0, a1, a2, a3, a4, a5);
}
}
long r[65];
void* thr(void* arg)
{
switch ((long)arg) {
case 0:
r[0] =
execute_syscall(__NR_mmap, 0x20000000ul, 0x2f000ul, 0x3ul,
0x32ul, 0xfffffffffffffffful, 0x0ul, 0, 0, 0);
break;
case 1:
r[1] = execute_syscall(__NR_socket, 0xaul, 0x2ul, 0x0ul, 0, 0, 0, 0,
0, 0);
break;
case 2:
r[2] = execute_syscall(__NR_dup2, r[1], r[1], 0, 0, 0, 0, 0, 0, 0);
break;
case 3:
*(uint32_t*)0x20018000 = (uint32_t)0x800;
r[4] = execute_syscall(__NR_setsockopt, r[2], 0x29ul, 0x18ul,
0x20018000ul, 0x4ul, 0, 0, 0, 0);
break;
case 4:
*(uint16_t*)0x20020fe4 = (uint16_t)0xa;
*(uint16_t*)0x20020fe6 = (uint16_t)0x204e;
*(uint32_t*)0x20020fe8 = (uint32_t)0x0;
*(uint64_t*)0x20020fec = (uint64_t)0x0;
*(uint64_t*)0x20020ff4 = (uint64_t)0x100000000000000;
*(uint32_t*)0x20020ffc = (uint32_t)0x0;
r[11] = execute_syscall(__NR_sendto, r[2], 0x2001cfbaul, 0x0ul,
0x8000ul, 0x20020fe4ul, 0x1cul, 0, 0, 0);
break;
case 5:
*(uint64_t*)0x20001000 = (uint64_t)0x0;
*(uint32_t*)0x20001008 = (uint32_t)0x0;
*(uint64_t*)0x20001010 = (uint64_t)0x20006fb0;
*(uint64_t*)0x20001018 = (uint64_t)0x7;
*(uint64_t*)0x20001020 = (uint64_t)0x2001ec80;
*(uint64_t*)0x20001028 = (uint64_t)0x9;
*(uint32_t*)0x20001030 = (uint32_t)0x20000804;
*(uint64_t*)0x20006fb0 = (uint64_t)0x20029000;
*(uint64_t*)0x20006fb8 = (uint64_t)0x1000;
*(uint64_t*)0x20006fc0 = (uint64_t)0x2002b000;
*(uint64_t*)0x20006fc8 = (uint64_t)0x0;
*(uint64_t*)0x20006fd0 = (uint64_t)0x2002cf1f;
*(uint64_t*)0x20006fd8 = (uint64_t)0x0;
*(uint64_t*)0x20006fe0 = (uint64_t)0x2000e000;
*(uint64_t*)0x20006fe8 = (uint64_t)0x0;
*(uint64_t*)0x20006ff0 = (uint64_t)0x2002daac;
*(uint64_t*)0x20006ff8 = (uint64_t)0x0;
*(uint64_t*)0x20007000 = (uint64_t)0x2002af7a;
*(uint64_t*)0x20007008 = (uint64_t)0x0;
*(uint64_t*)0x20007010 = (uint64_t)0x20000000;
*(uint64_t*)0x20007018 = (uint64_t)0x1000;
memcpy(
(void*)0x20029000,
"\x85\xe7\x61\x55\x35\x85\xbe\xb2\xcf\x9a\xe0\xc6\xa0\xa1\x35"
"\x06\x5e\xe1\xca\x3d\x68\x31\x4e\xb0\xcf\xd3\xfc\x01\x2e\x4a"
"\xd8\xfa\x6a\xdc\x6d\xd7\xd3\xfd\xac\x30\x75\x1d\xcc\x67\x2a"
"\x6c\x41\x55\x51\xf6\xc5\x64\x03\x25\x2a\x08\x4d\x43\x2b\x54"
"\x97\xf6\x96\xf7\xbc\x05\xe6\xad\xb9\xa4\x6f\x12\xcc\x4d\x9f"
"\x9c\xdd\x5a\x4e\xb5\x8a\x98\x06\x23\x93\x65\x97\xc3\x4c\x12"
"\x4f\xa0\xaa\xc2\x29\x7d\x9d\x4c\xee\x17\xb9\x7c\x06\x43\xc7"
"\xd7\xec\xd3\x6a\x6f\xa5\x1e\x53\x0d\x48\xa9\x7a\xf4\x21\xf8"
"\x30\x5a\x41\x61\x39\xd3\xd3\x4e\x6e\x49\x30\x8f\x90\x94\x7c"
"\xee\xc9\x05\x48\x4b\x33\x83\xc7\x5a\x55\xdf\x6e\x8d\x76\x42"
"\x89\x87\x2f\xf1\x3b\x66\x66\x13\x67\xdb\x1d\xca\xb1\x89\x7c"
"\x0f\x5e\x82\xf2\xd2\x66\x1d\x9f\x2d\x28\x09\xbc\x6a\x3f\x68"
"\x70\x79\xd8\x69\xfc\x50\xc9\xab\x78\xed\x52\x15\x35\xe8\xfd"
"\xee\x5c\x66\x22\x26\x57\xba\x10\xbd\x0b\x13\x25\xf5\xdd\x84"
"\xcf\x05\xea\x33\x69\x54\x2c\x01\x89\xa3\x43\xf1\x31\xdf\x8d"
"\xfb\xa9\xf1\xae\xc3\xa5\x5a\x3c\x17\xfc\xdd\x5a\x48\x7a\x8d"
"\xbd\x9d\x8b\xab\xc3\x44\x36\x25\x6d\xd4\x1b\x58\x0b\x3e\x78"
"\xb9\x03\xd4\x2e\x94\x2f\x95\x01\xfa\x73\xda\x56\x6a\xdf\xb7"
"\xee\xa8\x23\xb5\x52\x68\xf5\xd0\x09\xa9\x0b\xfd\xaf\xea\x58"
"\xa2\xd2\xaf\xb6\xe2\xcf\xe9\x8e\x87\xa3\x72\x68\xd4\x9b\x4d"
"\x0d\x34\x68\x9c\x95\xff\x14\x3c\x01\x72\x30\xa4\x68\xec\xc3"
"\x78\x2e\x9d\x88\xf1\x39\x5c\x00\x02\xdc\x9e\x1e\xf7\x5b\xd4"
"\x2c\xbe\xda\xe0\x81\x4a\x5d\x3e\xb1\x0d\x93\x81\x42\x77\x71"
"\xfd\x3a\x56\x50\xea\x3c\x0a\x47\x10\xab\x6f\x4f\x81\x27\xcf"
"\xc5\x81\xae\x6d\x5f\xf8\x2a\xd8\x89\x45\xb8\x10\xdd\x11\xbb"
"\xc0\x16\xc1\x1e\xff\x87\x53\x1d\x84\xbb\x1a\x88\xec\x6a\xee"
"\x01\x64\x75\x2e\x39\xeb\xb8\xa8\x19\x02\xe4\x10\x7d\x4c\xde"
"\x43\xc6\x7f\x5d\x4d\x7a\x2f\x22\x08\x2e\xc1\x38\x3a\x28\xd7"
"\xd8\xf2\x1f\x05\xd2\xa7\x9d\x24\x0b\xc6\xc1\xd2\x23\xf6\xf8"
"\xfc\x52\x4c\xc3\xe5\x3e\x4c\x27\x02\x6d\xad\xcc\xab\x53\x2d"
"\x66\x91\xad\xa6\x14\xc3\xec\xfa\x7e\xea\xf9\x23\x47\x5f\xb1"
"\xa0\xe9\x6f\x3d\x56\x83\xea\xd4\x4c\xf6\x04\x9c\xa0\x26\x9d"
"\x14\x7f\x79\xef\x3d\xf0\xe5\x30\xf8\x9d\x7d\xac\xb0\xa8\xee"
"\x7f\xf2\xf3\xd5\xa2\x8c\x22\x0e\x3f\xb6\x5c\xb9\x2e\xf0\xcb"
"\x81\x83\xfd\x35\xd8\xe5\xdc\xf8\x1a\x3f\x0e\x4e\xd4\x75\xbf"
"\xf8\x41\x2a\x5f\x83\xa6\x5d\x7c\x0d\xf8\xce\xdc\xa8\x75\xe0"
"\x26\x87\x3a\x84\xba\xdc\x9f\x2d\xaa\x92\xb3\x88\xff\xb7\x57"
"\xfe\x8a\x8a\x9f\x1b\x82\x85\xf2\x4d\xc6\xe7\x83\x9c\x6e\x05"
"\xda\xcb\xdb\xc9\xa8\x2b\x31\x8f\x62\x44\x2e\x54\xa0\xfa\x3f"
"\x04\xeb\xf7\x67\xb5\xf2\x95\x06\xd3\x75\x8c\xc9\x79\xb6\x10"
"\xbf\x0d\x74\x26\x46\x41\xd1\x07\x31\xbe\x94\xe6\x92\x52\x33"
"\x12\x12\x51\xc4\xdb\xf8\x86\xf1\x9b\xeb\x12\x4e\x14\xa1\x9d"
"\x31\xf7\xa2\xc2\x82\xdc\xb7\x38\xf3\x95\xb5\xf6\x1c\x8c\x0e"
"\x89\x42\x30\xde\xe3\x29\x48\x6c\xc9\xa8\x6e\x7a\x81\x7e\x8b"
"\x11\x95\xf7\x4f\xa8\xa0\x82\xd1\xe2\x4e\xa0\xd5\x08\xcb\xbd"
"\x36\xf0\x4e\x55\x92\xcd\xfc\xe9\x57\x89\x71\xbe\xb9\x5a\x3f"
"\x5d\xbb\x3c\x70\xb6\x6b\x18\x21\x47\x48\xe6\x34\x44\x5e\x1e"
"\x11\x0e\xb2\x79\x58\x8f\x8a\xbc\x2a\x20\x91\x72\x12\xcc\x1f"
"\xb9\x9c\xd6\xe0\x86\xce\x9e\x45\x1e\x2d\x5c\xb8\xbd\xcc\x72"
"\xb5\xa8\xe1\x2f\x7a\x04\xba\x45\x4c\xf0\x1c\x97\x29\x88\x64"
"\xfa\x7c\x7c\x83\x0c\xef\x31\xc7\x77\x15\x21\x33\x03\xe4\xc0"
"\x18\x83\x0c\x4a\xa4\x7c\x52\xb1\xea\xa5\x01\x12\x1c\x79\x59"
"\x5b\x19\xd5\x3d\xed\x3c\x9d\x48\x5f\xb4\x61\x16\x90\xd7\xf9"
"\x4c\x63\x11\x0e\x77\x13\x5d\x72\x02\xc3\x9e\x33\x4f\x89\xed"
"\x65\x81\xf3\x4c\x7c\x17\x09\x8a\xe2\x89\x61\x14\xe6\xe0\x89"
"\x89\x5b\x9b\xef\xbb\x6a\x2c\x17\x2b\x77\xa0\x10\x6b\x41\xc0"
"\xb3\x6a\xe3\x35\x14\x55\x56\x65\xc8\xbd\x3a\x25\x88\x65\x7a"
"\x0d\xcf\x5b\x5d\xf6\x36\xdf\x6e\xf5\x69\x34\x67\xa5\x22\xca"
"\x74\x2a\xea\x16\x77\x54\xdd\x35\xe9\xf5\xbd\x84\x26\x89\xb7"
"\x9b\xfc\x3f\x10\xc1\x3b\x1c\x7d\xca\x35\xa7\x7e\xbb\xfb\xdd"
"\x9b\x44\x10\x9a\xcb\x3e\x0f\x90\x11\x20\xd4\x88\x94\xca\x33"
"\x1e\xfe\x3f\x2e\xaa\x1d\xa1\x5c\x57\xe5\xf4\xba\xe2\xcb\x7b"
"\x83\x5b\x2a\x30\x8c\x53\x23\xd4\x5f\x5c\xb1\x64\x99\xfd\x14"
"\xb9\xd8\x51\xb8\x33\xc5\xc6\x90\x07\x52\x39\x41\xc6\x7b\x05"
"\xca\x05\xae\xad\x3d\x63\x3f\x7b\xec\xc6\x8f\xa7\x40\x11\x0d"
"\xcd\xa3\xd7\x22\xeb\xc3\x34\x19\xa5\x4c\xda\x2a\xa7\xe4\x8f"
"\x97\x87\x39\x41\x88\x40\xcf\x87\x32\x13\x73\x58\x19\x15\x61"
"\xd6\xcf\x56\xc5\x26\x2d\x0e\xbd\xca\x3a\xa2\x99\x6a\x4c\xb9"
"\x32\xb7\x25\x33\xb6\xa5\x5a\xe5\xe2\x50\xcc\x4a\xbc\xbf\x57"
"\x0f\xab\x81\xea\xa7\x02\x43\xa1\xcf\x9f\x74\xcf\xe3\x4d\x39"
"\x1f\xe7\x06\x28\xc4\x28\x6b\x54\xcd\x4a\xee\x73\x78\x4e\x11"
"\x0f\xc1\xf2\x70\xaa\x70\xbf\x17\xfc\xcc\xaf\x59\x46\x89\x08"
"\x9c\x7f\xf1\x02\x21\x1a\xe9\x91\x96\x82\x79\x1f\x79\x46\x45"
"\xde\x7e\x07\x35\x0b\x43\xde\x3a\x5d\x20\xed\xcd\x03\xc3\x1f"
"\xab\xf7\x1c\x6d\x98\xd4\x01\x96\xd8\x54\x9b\xa0\xa2\x16\x1e"
"\xa2\xa5\x88\x5c\xa4\xd0\x1c\xee\x77\x0a\xce\x79\x0f\x91\xe3"
"\xb2\x1a\x99\x51\xd2\x5f\xf6\x9d\xdb\x17\xba\xa4\xd1\x5c\xb1"
"\xd1\x1b\x6a\x24\xfc\xf6\x67\xbf\xc6\xa7\x1c\xe6\xb8\x2c\x70"
"\x08\xc1\xc5\x1f\xe0\x7e\xa0\xa6\x0a\xeb\x59\xba\x4b\x05\x18"
"\xf7\x0e\x62\x73\x9f\x3a\x6e\xaf\x08\x98\xc3\x0d\xd8\x89\xc0"
"\xb5\x40\x08\x4c\xd5\xe1\x40\x4b\x60\x98\xfb\xa5\x9d\x83\x6b"
"\xca\xbc\xa8\xa0\x6b\xa3\xeb\x45\xd7\x17\x54\xe3\x4b\xc0\x33"
"\x61\x67\x18\x18\x19\x4f\x4a\x6f\x5a\xe2\x3e\x6f\xa3\x46\xdf"
"\x33\xa6\xc2\xc4\xbf\x64\x31\x75\x05\x65\xf7\x89\x75\x23\x96"
"\x71\x8d\xfd\x12\x08\xb8\xcd\x9a\xd5\xc6\xd7\xdb\xb4\xf5\x29"
"\xfb\x64\x01\xac\xd7\x21\x82\x5d\x1e\x5c\x13\x5d\x07\x9e\x83"
"\xc2\xd6\x2b\xf0\x70\x80\x72\x13\x60\x96\x56\x98\xbc\xe5\x6c"
"\x04\x07\x3d\x43\xef\xe0\x09\xb8\x10\xf5\x1a\x28\x2e\xfe\x8c"
"\x0e\x6d\xca\x91\xfa\xd2\x47\x7d\xc5\x41\x34\x54\x18\x8d\xb8"
"\x96\x7b\x6e\xc7\x7e\xbf\xe2\x60\x19\xa0\x47\x77\xd0\x69\x9e"
"\x93\x79\x25\x33\xa9\x79\x66\x1c\x96\x66\x14\xa3\x72\xab\xe6"
"\xf1\x5c\x67\x11\x82\xec\xf6\x23\xc7\xea\x85\x01\x9c\x40\x7e"
"\xed\x69\x20\xbd\x14\x96\xc6\xf4\xed\xd6\xd3\xc6\x90\x38\xe9"
"\x01\xcb\x80\xb9\x36\x5f\x56\xf1\x34\x2e\xfd\xef\x1d\x2b\xeb"
"\x12\x55\x82\xe6\x6a\x22\x3e\x38\xe1\xe9\xea\x58\x2e\xc3\x2e"
"\xb3\xe5\x13\xe6\x02\x4b\xad\x85\x51\x02\xaf\x81\x12\x49\xfd"
"\xe3\xa4\x11\x19\x2d\x07\xdf\x94\xe9\x84\xdc\x1e\x40\xb0\x20"
"\x14\xc3\x52\x1d\x96\xc7\xed\xad\x0a\xc9\x0d\xff\xcf\xa3\x7b"
"\xce\xf3\xf5\x1d\xe6\x2a\x17\x4a\x0b\x2a\x61\xd8\xec\xd8\xdb"
"\x87\x78\x28\x4f\xe2\x31\x57\x06\xa0\x2b\x55\x99\x53\x71\x60"
"\x16\xf5\xda\xdf\x22\x13\xf6\xb5\x94\x5b\x09\x26\x21\x4d\x00"
"\xb5\x67\xb3\xbc\x3b\x8c\xf7\xde\x62\x70\xa3\xb0\x82\x98\xe5"
"\xcd\x08\x8b\x2b\x6f\xc9\x8e\x8c\x13\xf8\xca\x62\x19\xfa\xb0"
"\x13\x52\xdb\x5f\xfd\xfe\xc0\x91\xfa\xd4\x15\x51\x21\xd9\xee"
"\x0f\xf1\xbd\x04\x9c\xa6\xf6\x3a\x86\x21\xc0\x9e\xfa\x96\x14"
"\xa9\xac\xfb\xab\x47\x4e\x50\xbd\x83\xe1\xdb\xfb\xb9\x4f\x41"
"\xd4\x4b\x67\x39\x15\xaf\x21\x91\x5a\x81\xbf\x4d\x82\x04\xdb"
"\x4b\xa1\x2b\xef\x94\x83\x29\x55\x8e\x39\x25\x3f\xce\x55\x35"
"\x9b\xa3\x40\x2d\xe4\x71\xed\xdb\x31\x8c\x4f\x4c\x0b\x6f\x89"
"\x54\xfc\xb3\x3b\x18\x26\x69\x91\x97\x77\x0e\x6e\xec\xc9\xa3"
"\x6c\xdf\xf3\xbd\x4c\x6d\xf6\x34\x7e\xcd\x1c\xb1\xff\x3e\x1a"
"\x5e\x82\xd7\x75\x43\xce\xca\x45\x21\x49\x62\xdf\x9e\xbc\x07"
"\x19\xf7\x9a\x6b\x9b\x0b\xee\x06\xa2\x30\x3a\x02\x03\xd4\xea"
"\xc5\x45\xa8\xd3\x5f\x5a\x2b\xe0\xc9\xb5\xbb\x5d\x46\x8d\xbc"
"\x6f\x69\xeb\xb1\xa7\xd5\x38\xd8\xff\xfc\x02\x82\x58\xdd\xb4"
"\x19\x04\xbb\xb5\x65\x69\x3c\x39\x6d\x75\x0a\xaf\x9a\x29\xee"
"\x46\xad\x4a\x47\x03\x86\x01\x99\x44\xb0\x9b\xde\x8a\x57\x76"
"\xc8\xf0\x95\x2b\x4a\x84\x00\xb4\x4d\xc1\x2b\x9c\x21\xbd\x58"
"\x19\x19\x7c\xfc\xad\x07\x4f\x2b\xd5\xbb\xd4\x75\xd9\xaa\xcd"
"\x2b\x39\x5a\x6f\xb2\xb9\xd4\x32\x9a\x59\x51\x02\xab\x11\x5f"
"\x8b\x31\xa8\xda\xe0\x14\xec\x25\x09\x96\xd9\xe8\xd9\x0a\xad"
"\x7a\x93\xab\xb9\xef\x5e\xcb\xc8\xbb\x68\x31\x65\x78\x01\x96"
"\xf9\xf1\x43\xf2\x3c\x7d\x37\xfd\x0d\x0e\x53\xa0\x71\x0b\x0d"
"\x55\x79\x52\x19\x50\x42\x8a\x7b\xf5\x13\x81\x43\x45\x0c\x70"
"\xbf\xb4\x39\x5d\xc1\x8a\xcf\x86\x3c\x1e\xa4\x63\x39\x8d\xe7"
"\x58\xca\xb3\x27\x55\x21\x18\x90\xe7\x2a\x02\x66\x5b\xa8\x9c"
"\xec\xb2\x48\xf9\xaa\xde\xb0\xa6\x47\x18\xcc\xa1\x0c\xc2\x60"
"\x6c\x06\xdf\xec\xb9\x98\xa7\x1c\x2e\xa7\xd4\x87\x57\x18\x27"
"\xfc\xbe\xbe\x94\x0e\xf2\x49\x5b\xdb\xc1\xc6\x78\xa0\x64\x2f"
"\xc5\x80\x4f\xb2\x9b\x65\x2d\xd9\x4a\x39\x0c\xa0\x08\x45\x3f"
"\xb8\x5d\x4e\x91\xc8\x04\x0a\x2e\x84\x13\x39\x4b\xaa\xa1\x1e"
"\x9a\x3a\xff\x68\xb8\x54\xba\x50\xb6\x92\xf2\x4b\xa1\xb1\x81"
"\x0d\x78\x42\x71\x06\x2b\x30\x94\x3e\x59\x96\x13\x93\xc8\x76"
"\x45\xb4\x88\xdf\x95\xf3\x9e\x67\x34\xbc\xf2\xa3\xd5\x60\xa0"
"\xce\x58\xeb\x36\xca\x75\x33\x15\xdb\x83\x7f\xae\xd3\xda\x17"
"\x6b\x41\x60\x20\x1f\x59\x5a\xfd\x6a\x14\x9a\x4f\x0d\xd8\x22"
"\x73\xc0\x08\x9b\x2b\xc5\xfa\x91\xab\x60\x44\x03\xc2\xb3\x09"
"\xc3\x2e\xa9\x49\x79\x0b\x8f\xc7\x7c\x27\x50\x31\x21\x3e\xaf"
"\xb5\xdb\x6c\x8a\x00\x4c\x56\xae\x07\xe1\x43\xf0\xc1\xf0\x33"
"\xe5\x34\x0f\x52\x7f\x84\x95\x76\xd7\xf3\x17\x9d\x9a\x88\x6c"
"\x18\x2c\xec\x92\x45\xb4\x52\x52\x72\x11\xdc\x30\x22\x49\x55"
"\x05\x66\x16\x7b\x9a\xa0\x1a\x05\xa9\x3e\x38\x31\xa0\x78\x21"
"\xa7\x7c\x14\x6f\x37\xd2\x42\x8e\x92\x5a\xb1\xac\xe7\x32\xf0"
"\x4d\x85\xb1\xbb\xe4\xae\xd7\x69\x73\xf4\xf0\xe5\x29\xc2\xf8"
"\x56\x7c\xb1\x3e\xd4\x22\xe7\xb9\xcf\x6e\xaa\xe3\xbe\xc2\xdc"
"\x93\xe4\x21\x0a\x00\x76\x00\x63\x45\xa3\xc7\x76\xf6\x25\x44"
"\xdb\xf9\x02\xf8\x78\x0d\xd6\xe2\x3d\xb1\x94\xf0\x70\xe7\x09"
"\xfb\xe5\xef\x12\x03\x53\x8e\xe7\x06\x59\xc8\xde\xbc\x35\xf5"
"\x97\x7e\x64\xf7\x2c\xa4\xc6\x64\xa8\x4a\x5c\x69\x85\x26\x26"
"\xdb\x2d\x6e\xe6\x46\x6e\xf1\x0c\x50\x6d\x8c\xcf\xb9\x5b\xdc"
"\x39\x29\x8f\x7c\x64\x0b\x14\x72\x0b\x24\x52\x8b\xc6\x8d\x48"
"\x11\x96\x93\xf7\xb4\xc7\xfa\xf4\x76\x76\xdd\x77\x8b\xbd\xe8"
"\xf6\xa9\x03\xae\xf7\xa8\x3d\xe4\x6d\xcd\x81\x77\x8e\x6d\xb4"
"\x75\x0a\x51\x6e\x45\x34\x0b\xe4\x9f\x03\xd1\xca\x6e\xc5\x30"
"\xd7\x8e\xdd\xd0\x06\x95\x57\x9a\x2f\xe5\x43\x52\x35\x7d\xdc"
"\xc1\xb0\x0b\x45\x86\x87\xfe\x93\x0f\x4b\x7d\xe2\x90\x8c\x6a"
"\x8f\xb4\xb9\x64\x75\x96\x79\x47\xfa\xa0\xf6\x0b\x68\x45\x89"
"\x05\xa1\xce\xc4\xbf\x67\xc9\x48\x74\x2a\xa2\x21\x78\x18\x52"
"\xe7\x4a\x97\xb5\x4e\xa9\xeb\x5f\xcd\xcf\x4e\x20\x19\x2c\x5c"
"\xf8\x05\x29\x7a\x40\xc1\x48\xc5\xd9\x74\x75\x5c\xf7\x0c\x64"
"\x3b\xd2\x73\xaa\x28\x26\xce\xc3\x03\xeb\x69\x73\x6f\x9e\xd2"
"\xf1\xc8\xc9\x36\x5f\xbb\x68\x5e\x41\x82\x23\x62\x53\xbb\xad"
"\xe4\x2b\x29\xbb\xf4\xb3\xd5\xcd\x14\x2a\xac\x0c\xeb\xe1\xe0"
"\xcc\xd1\x30\x33\x55\x2c\x17\x55\xef\x52\x7d\x95\xe5\x52\xf1"
"\xeb\x39\xc6\x1f\x3e\x0f\x68\x37\xc2\x0f\x40\xfe\x3b\x64\x77"
"\xad\x06\xad\x5e\x1f\x7c\xfa\x5c\x1e\x41\x0e\x5c\x7a\xe1\x6f"
"\xa4\x60\xf8\xfe\xda\x0d\x93\x18\x57\x0f\x5d\x53\x29\x0c\x0f"
"\xcc\x3e\xf3\x7d\x3a\x30\x47\xb3\x74\xd1\xf8\x0a\x06\x34\xeb"
"\xe7\x02\xb1\xc0\x81\xa7\xa3\x61\xc9\xd2\x06\x19\x16\x9b\xe6"
"\xa2\x4e\x0f\x89\x36\xf7\x27\x79\x48\x49\xa6\x12\xdb\x0a\x51"
"\xd5\xf6\xf5\x96\xb2\x48\xed\xaf\x05\x8c\x76\x36\xd2\x8b\xa6"
"\x13\x81\xee\xc0\xb4\xf3\x8d\xdf\x6f\x0a\x4d\x57\x57\x8b\x1a"
"\x25\x58\x22\x23\x2f\x8e\x52\x14\x0d\x99\x0b\x35\x11\x73\xe7"
"\x74\xd6\x72\xd5\x43\xd4\xbc\xcc\x3b\x86\x72\xa5\x3f\x1c\x4a"
"\xc4\x48\x5d\x32\x89\x1a\x05\x44\xee\x64\x7d\xc4\x16\x29\x21"
"\x44\xc8\x08\xb4\x74\xa8\xdb\x2b\xa8\x29\x68\x94\x83\xfc\x1f"
"\xe3\x2c\xec\x37\x57\x70\xd7\xc1\x69\xf3\xfa\xf9\x95\x49\xb1"
"\xc4\x8d\xa1\xfb\xc7\xdd\x84\x03\xef\xf2\x0f\x52\x7f\x05\x23"
"\x74\x33\xb4\x6c\xf3\xb1\x5a\xdd\x01\x3b\x4d\x04\x37\xbf\x22"
"\x77\x7f\x16\xe2\x89\xba\x69\x45\xf0\x78\xb1\xc0\x07\xb8\xd9"
"\x2a\xaf\xc4\x82\xc5\xb1\x28\x0d\xdf\xc1\x60\x59\xdf\xfe\x5f"
"\x5e\xf3\xbd\xfc\xf3\x79\x88\x5b\x93\x2e\xd1\x8a\xf2\x97\x9a"
"\x8e\x91\x29\x1c\xd9\x3e\x41\xe6\x8c\x7d\xa7\xf9\xe1\x82\x8c"
"\xce\xbe\x29\x5a\xee\xe0\x4f\x6c\x02\xab\x17\x02\xef\xe6\xc6"
"\xed\xd5\x5f\x8a\x89\xbb\xf6\x31\x89\x45\x56\x2b\x32\x45\x0c"
"\xf9\x7b\xba\xb0\xfd\xb5\x59\xcd\x14\x68\xbd\x75\x48\xf9\x6d"
"\x4c\xd7\xb3\x5d\xf8\xd7\x05\x5c\xa1\xa6\x59\x42\xdf\xdd\xfc"
"\x53\x4d\x7a\x92\xbf\xf7\x93\x31\xdd\x17\x8b\x4c\x9d\x35\xfa"
"\xe2\x64\x1a\xb4\xb3\x2b\x8c\x4a\xc7\x52\xa6\x31\x30\x3d\x9a"
"\x7a\xd6\x02\x7c\x06\x14\xe7\x90\x20\xfb\xc6\xb6\x79\x3f\x63"
"\xa7\xf9\xa7\xf4\x11\x7e\xff\x68\xb7\xe1\x90\x72\xa4\x1f\xa7"
"\x1c\x97\x39\xff\x9d\xff\x1e\x54\x6b\x4f\xc4\xef\x4e\x6d\x99"
"\xb5\x92\x27\x3b\xd4\x1b\x1b\x7f\xc4\x08\xf2\xe6\x0c\xbb\xa9"
"\x84\xf7\xa2\xbb\x57\x76\x69\xe9\xb2\x2d\x99\xee\x5e\x74\x79"
"\x22\x00\xf0\xad\x9b\xb2\x67\x2f\xfe\xb4\x92\x70\x89\x52\x93"
"\xc4\x2e\xf4\x17\xc3\x1e\xd8\x89\x8d\x90\x49\x76\x79\x0e\xe5"
"\x8f\x50\xa1\x56\xc4\x40\xd7\x82\x66\x13\x42\x76\xd2\xc6\x4c"
"\x31\x60\x19\x82\xe7\x5b\x6b\x8f\x5b\x37\x09\xb0\xdf\x7a\x08"
"\x7c\xe3\x7c\x4c\x27\xdd\xd4\xad\xfc\xc0\xc2\x2e\x6b\x4c\xb9"
"\xad\xce\xae\x7f\x0c\xea\x59\xec\x7f\xb2\xd6\xd4\xef\x19\x4f"
"\xcb\x0c\x0f\xea\x89\x36\x80\x14\x11\xb4\x90\xb4\xa3\x76\xbc"
"\xe5\x6e\xf5\x41\x2e\xc7\x2d\xe0\xa8\x18\xa2\x62\x67\x80\x60"
"\x30\x69\xe9\x50\x28\x1a\x37\x6e\xe6\x20\xec\x7e\xf8\x2b\xf8"
"\x46\x6f\xb9\x05\x67\x9c\x91\xc9\x87\x89\x00\x6a\x94\xd5\xca"
"\x37\x4b\xea\xe1\xbc\x06\x4f\xe4\x10\xcb\x7c\xdf\xb5\xc2\x7a"
"\xa2\xec\x3c\x52\x88\xde\x09\x6d\xfd\x41\x90\xfc\x94\x86\xa8"
"\xbb\x76\x08\x3e\xde\xfb\x23\x58\x8c\x84\x49\xa2\x60\x3a\x4a"
"\x88\x4c\xf8\xcd\x00\x0f\x8c\xd2\x53\xda\x0d\x5b\x2c\x0d\x69"
"\xee\x11\x5b\xb1\x00\xdc\xdf\xf9\x80\xb1\x29\x39\x89\x34\xd4"
"\x6e\xf2\xae\x36\xae\xd5\xe5\x3f\x4e\x2d\xde\xa1\x47\xeb\x69"
"\x96\xb7\x40\xc8\x6e\x31\x8d\xaa\x11\x11\x16\x77\x51\xe0\x95"
"\x12\x47\x1f\xbb\xca\x2e\x62\x6b\xf7\x57\xaa\x67\x20\x26\xce"
"\xce\x7f\xc7\x79\x57\x7b\xc8\xc0\x0b\x89\x52\x2e\x43\xe4\x84"
"\x97\xec\x9f\xf9\x3f\x68\xfe\x37\xf5\x4a\x5e\xd1\x64\x05\x42"
"\xb4\x94\x58\x34\x8f\xbd\xa0\x88\x89\x35\xb5\xef\x2e\x47\xbb"
"\xc1\x2b\xca\xf6\x77\x42\xa3\x2b\x24\x74\x44\xcf\xdf\xe5\xdb"
"\x88\xa4\x71\x10\x67\x79\x6b\x0b\x09\xc1\xe5\x54\x30\x99\xef"
"\xd5\x40\xb3\xa6\x64\xf7\x30\xd1\x77\xfa\xe8\x46\x8f\x5a\xd8"
"\xdf\x0b\x5f\x1e\x8b\x14\x0e\xfd\x6a\x35\x81\x04\x66\xea\x91"
"\xa4\xb1\x0a\xe9\xa6\xb5\x64\xa5\x46\x43\xc2\x32\xd2\x0b\xa7"
"\x58\xf8\x12\xf1\x70\xa2\x2a\x53\xca\xfc\xf0\xac\xd2\x15\x8b"
"\xd8\xed\x59\xa0\x4f\xb8\x65\xc5\x8f\x4e\xc6\x7b\x03\x89\xc5"
"\x28\x04\x9b\xc1\x3e\x81\x7c\x4b\x97\x78\x01\xe9\x0a\xbd\xc6"
"\x41\x3f\x21\x9b\xce\xbf\xde\x56\x9d\x32\xc8\xec\x21\xe0\x68"
"\x96\x32\xc0\xbd\x66\xee\x04\xcb\xd1\x83\xe2\x15\x3f\x40\xd3"
"\xe9\x7f\xa1\xb3\x7f\x3d\xda\xf9\x8a\x46\x83\x50\x90\x67\x29"
"\x41\x75\x27\x63\x59\x54\x1f\x4c\xb3\x93\x56\x79\x88\x2e\x95"
"\x2b\xda\x2d\xb1\xd1\x8b\x32\x01\x22\x60\xd2\x0e\x25\x71\xd3"
"\x24\x02\xf5\xe2\x54\x75\xc2\x50\x95\xa7\x5e\xc5\x3d\xa2\xc1"
"\x18\x33\x3b\x44\x78\x5c\x55\x45\x05\x65\xe8\xfe\x6c\x91\xf8"
"\x41\x22\x95\x85\xf8\x06\xdd\xff\x74\x70\xb4\x1d\x08\x52\x97"
"\xfb\xc6\x15\x0a\x90\xbf\xa1\x5c\x00\x38\x36\x92\x4a\x7c\x26"
"\xcf\x54\x06\xa4\xe3\xc6\xce\x45\x50\xc7\xc4\x5d\x50\xd1\x6f"
"\xf2\x50\xad\xa7\x38\x85\x9f\xfb\x3a\x46\xe7\x7c\xea\xad\xb9"
"\x92\x12\x74\x76\x02\xe6\x8a\x8a\x79\x5b\xb8\xa4\x74\x4c\x83"
"\x2e\x4e\x82\x45\xca\x06\x3a\x28\x25\x25\xe8\x3a\x19\xc0\xd0"
"\x1d\xea\x21\x55\x85\x6d\x04\x1b\x65\xaf\x54\x2e\x75\x59\x87"
"\xcc\xfe\xd3\x1b\x84\xd1\x36\xd8\x15\x7d\x27\x2e\x9e\x2e\xc2"
"\x2e\x43\xb1\x09\xd7\x8c\xfa\xec\x86\xa6\x9f\xf1\xd9\xc5\x5a"
"\xce\xd5\x4d\x07\x58\xa5\x59\xfc\x86\x13\x45\x9c\x38\x1f\x67"
"\x82\x3b\x9b\xfc\xf4\xb5\x11\x09\x8d\x8c\x35\x20\xaf\x82\xfe"
"\x1b\x72\x57\xf5\xe2\x97\x58\xb3\x2d\xd4\x98\xcb\xf9\xf5\xcc"
"\xca\xf8\x0b\xf8\x99\x41\x1e\x97\x57\xee\x1c\xfa\x9e\x19\x84"
"\x26\x60\xc0\x68\x78\xcd\xac\xc6\xad\x94\xff\xf1\xe2\x14\x1a"
"\x17\xf0\x2a\xac\x0a\xfd\x2d\x91\xa0\x09\x2d\x70\x99\xa5\x5e"
"\x98\xfa\x12\x0a\x90\xef\x2b\x74\x77\x6f\x53\xaa\x3e\xdb\x7c"
"\x23\xb2\x64\x21\x96\x7b\x8b\x10\xec\xcb\x8f\x74\xa2\x82\x1d"
"\xc9\x26\x0b\xba\x93\x76\x8e\x00\xa9\x4e\x12\x05\x74\x74\xd1"
"\xbf\x6b\x06\x9c\x4e\xa2\xee\xe6\x18\x38\xb1\x75\x4c\x94\x16"
"\x89\x03\xc0\x34\x50\x49\xde\xff\xb1\x4f\x93\xae\x0d\x1c\xd2"
"\x99\xaa\x04\x71\x9c\xf2\x0d\x79\x7d\x0e\x0d\xbe\xf9\x51\x07"
"\x62\xe2\x85\x69\xa1\x8e\x3c\x4a\xcc\xbf\xb6\x04\x74\x49\xe7"
"\xe2\x04\x63\xfa\x33\x9b\x45\xd1\x65\x51\x03\xd0\xd7\x81\x65"
"\x7f\xd6\xd5\x5c\x92\x66\xc9\x62\xf2\xd9\x22\x65\x8d\xe7\x72"
"\x0e\x0a\x2e\xee\x4f\x26\x98\x3a\x02\x5d\x50\xf4\x6c\xf4\xb7"
"\xff\x8f\x3c\xbb\x2c\x1b\xd7\x45\xfd\x00\xce\x8d\xbf\xcb\x59"
"\xc2\xa2\x06\xfe\x23\x96\xe4\x60\x30\x6c\xfd\xed\x20\x0a\xfc"
"\xe3\x86\x3f\x22\x06\xe7\xf6\x2d\xe6\x0d\xa2\xeb\x0a\x75\x6d"
"\xb0\x1a\x4f\xc9\xca\xf6\xd5\xd4\xc1\x70\x28\x19\xa1\x43\x1e"
"\x19\xb7\x80\x20\xd8\x41\x86\x87\x49\x63\x9d\xd3\x8a\xfc\x71"
"\x40\x38\x8f\xfc\xcb\x16\xa0\xf2\x39\x30\x89\xc8\x91\x47\x4d"
"\x68\x16\x74\xd2\x32\xd5\xf3\x51\xba\x05\x66\xfc\x4c\x64\xb7"
"\x72\x62\xe0\x92\xf4\xb3\x71\x33\x02\xc9\x53\xde\x8b\xa9\xbb"
"\x31\x1e\x60\x82\x04\xd0\xd1\xd1\x2f\x4c\x0f\x45\x2e\x32\x01"
"\xdc\x0e\x44\x0f\xd3\x44\x8a\x2d\xad\x4c\xce\x53\xba\x94\x40"
"\x74\x06\x00\xdf\x66\x4b\x8d\x7d\xf5\x30\xb3\x28\x8b\xed\xff"
"\xff\xbb\x54\x10\xfb\x6d\xc6\x90\x18\x16\x49\x71\x8d\xd0\xc1"
"\xff\x27\x6d\x02\x8c\xef\xca\x7b\x24\x0c\xb0\x83\xda\xc5\xb0"
"\x30\x7c\xa4\xa7\xd0\x75\x45\xc0\xf5\x02\x5c\xd1\x84\xcf\x0f"
"\x8f\xf9\x66\x28\x20\x28\x2b\xb9\xc1\x78\x8f\x44\x1b\x0c\x49"
"\x7a\xae\xcf\xe0\x71\xf4\xf3\x74\xbd\xda\x56\x5d\x58\xe1\xd0"
"\x4c\xf1\x19\x9d\xde\x28\xf4\x8d\x2d\xde\x6c\x83\x98\xc4\xc2"
"\x8e\x1f\xa9\xa1\x55\xab\x14\x1f\x7b\x9f\xde\xe5\x23\x1e\x3a"
"\xbc",
4096);
memcpy(
(void*)0x20000000,
"\xa3\x35\x1b\x23\x7b\x8a\x48\xf1\x8c\x8c\xe1\x00\xff\x67\x59"
"\xe9\xb6\x33\x75\x09\xd7\xec\x79\xaf\x33\x91\x39\x49\x21\x43"
"\x39\x7c\xa8\x5e\x0c\x5d\xbb\xf8\xca\xe6\x60\xc8\xb4\x41\xe2"
"\x77\xd2\xb1\x0e\xd2\x37\x4d\x59\xdb\xa1\xe5\xfb\xf4\x87\xb3"
"\x3e\x68\xdd\x27\xe1\x30\xc8\xda\xe8\xc0\xaa\xa8\x3d\xfa\x00"
"\x69\xdc\x32\x0f\xb2\xb6\x49\x29\x59\x02\x06\x17\x35\xd9\xdb"
"\xf8\x8f\x2b\x91\xa8\x66\x21\x12\x8d\xe0\xce\x1b\x19\xcc\x11"
"\x15\x2d\xa1\xd9\xa5\x1e\x67\x0a\x9f\xca\x92\xbb\x87\x0d\xbf"
"\xba\xf6\x7f\xce\x1d\x43\xff\xa3\x28\x0f\xee\x7f\x4d\x3c\x0c"
"\x6f\x91\xc0\x3e\x76\x40\x96\xa3\xdf\x99\x2c\x01\xdf\x73\xc2"
"\x9d\xae\x67\xb5\xa1\x7d\x93\x5f\x2d\x42\x2e\x50\xb7\x53\x4c"
"\x58\xdb\x1f\xcb\x7d\x13\x9d\x6f\x6b\x6e\xc4\xc7\xd8\xb9\x70"
"\x04\xe4\xd6\x2c\x71\xad\x96\x34\xcb\xdd\x8e\x68\x7e\x01\x52"
"\x0f\xc3\x41\x50\xf0\x38\xfe\x97\xba\x19\xb6\x80\xba\x13\x6e"
"\xa3\x54\x21\xb2\x2a\x4a\x62\xb5\xb0\xfb\x28\xeb\x3b\x2a\x90"
"\x2c\xdb\x0e\xa6\xa4\x80\x5d\x3a\x02\x5a\x70\x9d\x63\xbd\x74"
"\xa0\x59\xa1\x76\xbc\x4b\x64\xb5\xcc\xa8\xd0\x3a\x17\x8a\x43"
"\xc9\x0c\x97\x0e\xac\xf4\x8a\xcb\x57\x5d\xcb\x03\xe1\xaf\xf3"
"\x4c\x24\x4d\xd0\x7d\x97\xda\x49\xf0\x8b\xe2\x3d\x15\xed\x13"
"\x29\xe7\xac\x17\xf5\x31\xfb\x94\xfe\x5c\x31\xca\xe4\x6e\x2d"
"\x65\x26\xfb\x12\xf7\x13\x9c\x42\x4a\x36\x5a\x47\x79\x28\xa8"
"\xf1\x54\xe9\x2d\x09\x46\x37\x0f\x94\x8f\x73\xa4\x77\x17\x19"
"\xb7\x08\x93\xc8\xed\xd8\x87\x48\x2f\xf5\x43\xcc\x21\x18\x1e"
"\xb8\x0c\x32\x3e\x56\x5f\x48\x16\x7e\xe3\x8a\x1f\xfa\x83\xff"
"\x15\x4b\xc9\xe9\x41\x2f\xa0\xa0\xbd\xf5\xd2\xf9\x04\x80\x44"
"\x68\x0d\xa2\xe4\xc9\x5f\x5b\x17\x9a\xb3\x24\xe8\x0c\x4b\xc0"
"\x8c\xd7\x00\x90\x07\xb2\xa5\x52\xb3\xe7\x3e\x29\x4f\x09\xe9"
"\x9b\xd6\x38\x3a\x28\xf0\xd0\x0c\x59\xde\x15\x4b\x33\x35\xad"
"\xa5\xad\x89\xbb\x23\x41\xc9\x45\x39\xa0\x90\x06\xa2\x0d\x73"
"\x91\x14\x05\xbe\x30\x55\x99\xdf\xbc\xac\x3a\x76\x13\x17\x6b"
"\x86\x10\x86\x45\x3a\xe3\x92\x0a\xd9\x88\x66\x8d\x84\x7d\x14"
"\xd5\x88\x7d\x38\xca\xda\xb4\x27\x14\x96\x25\x23\x1c\xb1\x6f"
"\x26\xcd\x99\xd7\x04\xe5\x07\x5d\x8e\x72\xa4\xf5\xc5\xde\x6e"
"\x3d\xfc\x75\x7b\xd4\xfb\x8d\xee\xfe\x80\x3a\x09\x9b\xcc\x04"
"\x3b\x59\x09\xfc\xe7\x82\x1e\x0e\xce\xa1\x8a\xed\x13\x88\xdf"
"\xa3\x82\x90\x20\x40\x64\xfd\xc8\xe0\xe7\x0e\x6f\xf3\xf2\x91"
"\xb8\x88\x7b\x3c\xdf\xc0\x81\x94\x22\x20\x10\xbc\xf5\xf3\x17"
"\xca\xb4\xe8\xcb\xf6\x43\x60\x41\x79\xfb\xce\xf4\xac\x5b\xdb"
"\x89\xc0\xde\x5c\x82\x11\x43\x54\x4e\x26\x69\x52\x4e\x9b\xeb"
"\xff\x7e\xb5\x0c\xd3\x73\x7c\x04\x9e\xee\x6c\x9a\x73\xe3\x19"
"\x62\x67\xb1\x19\x67\x58\x76\x91\x0d\xa3\x6c\xab\x7f\x8c\xbe"
"\xad\xa4\xff\xb8\x0c\x99\x97\x40\x16\x7b\x8b\x88\xbb\x77\x98"
"\xa9\xb7\x91\x4f\x94\xeb\x2d\x7b\xac\x48\xff\xc9\x52\x8d\xf2"
"\xcf\x67\xa4\x31\xc2\xe4\xc7\x40\x31\x0d\x26\x6c\xea\x72\x41"
"\xe7\xed\xa6\x88\xcc\x87\x43\x45\x1a\x82\x7a\x95\x17\x06\x04"
"\x37\xc9\x94\x44\x14\x33\x3b\x92\xcc\x02\x1c\x0b\x95\x5f\x75"
"\x8d\x38\xb3\xbd\xe2\x63\x97\x1c\xd0\xf4\xd7\xe2\x07\xb1\x18"
"\x2f\xee\x42\xac\x2d\xd1\xcf\x46\x82\x3a\xb9\x61\xcb\xa1\x81"
"\xb2\xe2\xfd\x42\x97\x93\x05\xf5\xd9\x12\xd9\xf6\xcb\x66\x31"
"\xad\x8c\x03\x55\xd6\xba\x44\x39\x6b\x74\x66\x8b\xd6\xbc\xc6"
"\xfc\x4b\x9b\x27\xad\x0c\x99\xa2\x94\x6e\x12\x30\xf0\x38\x55"
"\xf3\x21\x9d\x8e\xb3\xc9\xc7\x2d\xd6\xad\xba\x7c\x94\xd7\x78"
"\x07\x3b\xc9\x02\x31\xc3\x6d\xec\x67\xf4\x3b\x40\x4e\x20\x22"
"\xdf\x65\x6d\x0b\x01\x92\x73\x50\x27\x3e\x18\xd1\x1f\x0c\x06"
"\xae\x0c\x47\x39\x42\x8f\xaa\x82\x14\xa3\x47\x4c\x6b\x73\x71"
"\xa6\xee\x40\xb5\xf0\x12\x5c\x23\x1f\x6e\xe8\x1e\x7b\x2b\x2e"
"\xaf\xb5\x4c\x26\x23\x9c\xd0\x23\x6a\xe4\xca\x0a\x71\xce\x07"
"\x1a\x43\xbb\x3a\x96\x3f\x50\x9d\x7f\x13\x13\x4a\xe2\xf7\x66"
"\xcb\x40\xe4\x65\x49\x61\x0d\xb4\x7d\xc4\x62\x8a\x3a\x47\xf5"
"\x70\x18\xa0\xeb\xba\xed\xcc\x35\x81\x44\x57\x0b\xad\x86\x1c"
"\xb9\xd3\xca\x74\x9b\xff\x7c\xfa\x12\x28\x8d\xa4\x5b\x9b\x0c"
"\x9d\xc4\x4c\x16\xe0\xcd\xd9\xb3\x39\xb0\x6e\x3a\x53\x5d\x7c"
"\x7e\x02\xb5\x8c\x64\xbd\xa1\x84\x90\xd7\x0e\x08\x5a\x01\xdd"
"\x46\xfb\x48\x04\xea\xac\x62\xcc\x3f\x6e\xd0\x23\x62\x65\x21"
"\x14\x42\xff\xad\x32\x37\xbc\xf8\xae\x60\x05\x12\x24\x77\x82"
"\xc4\xa7\xea\x29\xf2\xc2\xf0\x96\xdf\x72\x2b\x4c\x9a\x15\x79"
"\x65\x55\xa6\x9b\xee\x49\x02\x24\x6b\x06\x86\xe0\xc4\x7e\x48"
"\x7f\x4d\x6f\xd6\xdc\x0d\x3e\x71\x91\x7d\x74\x94\x65\x36\x98"
"\x30\x9a\xdc\x47\x7f\xd1\xd4\x53\xba\x23\x5d\xb7\xb0\xdc\x75"
"\x2a\xd8\xe6\xf9\xc3\xab\x01\x45\xdd\xcc\xeb\x07\x02\x54\x5b"
"\x50\x84\xb3\x7e\x4f\xe1\x6e\xb8\xd3\xf3\x32\xa2\xd7\xce\x4a"
"\x27\xa8\x89\x6c\xea\xea\x20\xd7\x1b\xf1\x88\xf2\x19\xcd\xf9"
"\x34\xa2\x2c\xd1\x29\xf9\xa8\x68\x5d\x44\x5a\x19\x88\x4e\xa9"
"\xfa\xe6\x16\x9c\xb4\x1e\x23\x2e\x0f\xd1\x9e\xf3\x69\x76\x0c"
"\x7a\xac\x68\xb8\x51\x19\x2b\x5e\xf5\xda\x20\x52\x67\xe8\x19"
"\x3f\x6f\x91\x08\x57\x44\x19\x39\xc2\xe1\xbd\xc0\x77\x10\x12"
"\xc3\xde\x74\x3a\x34\xd7\xf6\x02\xe9\x88\xf1\x5c\x84\xe3\x1f"
"\x5c\x67\x06\x2c\x0e\x94\x02\x84\xa2\xb5\x00\x77\x87\xb7\x4d"
"\x27\x82\xea\xad\x80\x25\x50\x24\xc0\x5b\x57\x94\x39\xd1\xf8"
"\xa9\xc1\x76\xef\x12\xe8\x01\xdf\x4b\x8e\xbf\x0c\x23\xea\x3e"
"\xf2\x4b\xe9\x19\x76\x98\xa5\xc7\x25\x53\x9d\xf8\x30\x84\x99"
"\x68\xa4\x4a\xf2\x7b\xd5\xc2\x98\x50\x61\x85\x4b\x08\x68\x63"
"\x78\xe1\xad\x9c\xfd\x76\x45\xdc\xee\x4d\x47\x43\x4c\x33\x8d"
"\xd0\xbf\x82\x8e\xf9\x78\x1b\xc1\x2a\x95\xc7\xa1\x57\xf2\x8c"
"\xcb\x22\x9f\xd1\x3f\x19\xdc\xd6\x36\xa8\xac\x38\x8d\xc9\x26"
"\xdf\x00\xc2\x14\x64\x75\xdb\x13\xd6\xd2\xb5\xa5\xb0\xb0\x26"
"\x32\x38\xb4\x3b\x30\x3c\xbd\x0c\x09\x88\x10\x9c\x86\xf4\xd3"
"\x80\xd0\x4c\x0c\xdf\x98\x11\xf3\x99\x44\xf1\x0a\x9e\xbb\x4e"
"\x85\x8f\x15\xb1\x4f\x55\x00\x02\xc3\x6c\xfa\x6b\x87\x37\x98"
"\xb1\xe0\x23\x1d\x74\xef\x9d\x97\x76\x23\x2c\xf1\xab\xcc\x2c"
"\x85\x41\x5f\xc0\x79\xe8\x98\x25\x44\x44\x8f\x0a\x51\xf4\xbb"
"\x1c\xbd\xbc\x2a\xd6\x4e\xf1\xa7\x40\xc0\xbc\xc3\x9a\x66\x21"
"\x40\x23\xc7\xf6\x40\x40\x31\x58\x54\xf4\x61\x27\x9d\x8d\x3e"
"\xce\xdd\x54\x80\xbe\xb1\x2b\x36\xa9\x87\x45\xc3\x74\x31\x10"
"\x9f\x4f\x2b\x95\xfe\x81\x41\xe3\xe3\x3e\x3b\x2c\x17\x9b\xde"
"\x98\x86\x66\xa9\xd3\x7a\x9e\xb4\x83\x42\x39\x92\xc8\x5c\x9a"
"\xa6\x26\x36\x45\xfd\x16\xdc\x2f\xdb\x9c\x4b\xe3\xf7\x27\xb8"
"\xa4\xb5\xc3\xb4\x32\x45\xf7\x2d\x2b\xbd\x1a\xe2\xce\x10\xa9"
"\xa3\xfe\x52\x3c\x2e\xe0\x80\x41\xd9\x8a\x2c\x6f\xb4\xaa\xac"
"\xad\x48\xfc\xf2\xdf\x91\xe8\xeb\xed\x63\x84\x0b\x4e\x51\x80"
"\x89\xac\xba\x84\x8e\x33\xb9\xb6\x4a\x0f\x51\x8a\x4d\xc4\x3d"
"\x5e\x5c\x1b\x74\x1b\x1d\x9b\x97\x3d\x67\xd8\x0a\x62\xa1\x54"
"\x90\xa2\xfb\x06\x76\xfc\x4d\xbe\x1b\x91\x62\x9b\x65\x4e\xbc"
"\x1d\xa1\x35\xe8\x5a\xc4\xf1\xab\x71\x23\x18\xc1\x7e\x18\x71"
"\xef\x1e\xf7\x55\x9b\x1a\x5d\x45\x7e\xbc\xb9\x3c\xc0\xcd\x95"
"\x35\x55\xd9\x93\xf4\xc3\x8f\xa4\x3f\xfc\x1d\x8c\x07\xe1\xa0"
"\x7d\x2d\x79\xd1\x29\x2a\x2a\xb4\xaa\xa6\x9d\xb1\xb5\xfc\x8f"
"\xf3\x3d\x1e\x92\xa4\xa1\x66\xf3\x3c\x0d\x6d\x52\x30\x6a\x62"
"\x3d\x49\xa1\x19\xa7\x95\x58\xa9\x83\x74\x6c\xc3\x15\x64\x5e"
"\x0b\x17\x19\xd3\x6d\x98\xa0\x01\x27\xd8\xa1\x04\x6b\xbe\x08"
"\x78\x33\x0c\x48\x26\x1c\x52\x90\xc4\xe4\xd6\xa4\xd6\xd0\xdf"
"\x71\x81\x70\x71\xb5\x23\xcb\xe5\x5a\xb5\xa2\x93\x71\x65\x9a"
"\x8f\x22\x98\x92\x68\xf8\x8f\x33\x23\x6e\xb4\x0c\x37\xe4\x94"
"\x75\xe0\x39\xb2\x0f\xb5\x53\xcd\x60\xb4\x50\x37\x61\x5d\xc0"
"\xd7\x2e\x38\x9a\x8f\xad\x52\x78\xc2\x45\xe8\x2c\xb5\x77\x42"
"\xed\x02\xd8\xf6\x1d\xac\xcd\x72\xb4\x88\x36\x82\x02\x33\x1b"
"\x90\xf2\x67\x63\x76\x62\x4f\xf2\xbe\xf4\x7c\x0e\x61\x23\x71"
"\x9e\x32\x9d\x09\xcc\xdf\x12\x3c\xf9\xef\x17\xfb\xf7\x86\x8f"
"\xf0\x06\x81\x00\x34\x72\xd2\xb6\xb5\xa3\x64\xca\x35\xa1\xaf"
"\x0d\x1f\x94\xf3\x96\xed\x6d\xc4\xde\x12\x87\x50\x4f\xda\xea"
"\xae\x2f\x14\x9c\xc5\xe6\x45\x68\x48\x37\xd8\x91\x2a\x07\x62"
"\x8b\xa1\x59\x15\xd1\xb9\x81\xc3\x69\x3c\x9e\xec\xf8\xda\x5a"
"\xcf\x7a\xf7\x3b\x27\x5f\xb9\x13\xfb\x0a\xe1\x7c\x33\xff\x18"
"\xae\x1b\xdd\x78\xa2\x0c\x20\xc5\x83\x11\x33\x39\x75\x38\x4d"
"\x31\x77\x68\x1e\x85\x6b\x5e\xf5\x4d\xc9\x86\xea\xc0\x7a\x87"
"\xec\xa5\x3c\x2c\xcb\xe7\xb8\x84\xa2\x29\x07\xa1\x82\x49\x66"
"\x07\x3c\x18\xe2\xf9\x51\x40\xd9\xce\x0d\xe5\xb4\xb0\x29\xd0"
"\x1f\xed\x6f\xa8\x9e\x0e\xa7\xee\x69\xec\x0d\x06\x70\xb2\xf7"
"\x05\x02\xf9\x83\xd1\xc7\x96\xac\xab\x68\x41\x14\x39\xd6\xa6"
"\x99\x3c\xda\xdc\x08\xa8\x09\x66\x03\xee\x03\xce\xa4\x3f\x2a"
"\xe8\x88\xc6\x80\xce\x65\xbe\xed\x3a\xee\xf3\x9c\x56\x4d\x31"
"\x7b\x28\x24\x7f\x31\x2d\x6d\x2b\x73\x10\xf8\x37\x02\x42\xdf"
"\xa1\x1e\x7d\x9a\xc9\x9f\xbb\xd0\xd1\x1a\x6f\x02\x85\x19\x84"
"\x0a\x6c\xa4\x15\xa0\x65\x35\xeb\x89\x22\xf3\x73\x3a\x62\xb9"
"\xab\xba\x60\x53\x66\x98\x74\x16\xb2\x7b\x87\xbd\x76\xbd\xf1"
"\x45\x61\xac\xca\x4a\x39\xe8\x65\x66\x78\xe5\xcc\x69\xb5\xaf"
"\x7b\xc9\xc9\x83\xce\xdd\x9a\xdb\x98\x09\xfb\xb3\xb9\x40\xf9"
"\x10\x3e\xfa\xf1\x17\xbc\xab\x3a\xa2\x30\x79\x11\x57\x7e\x7e"
"\x7b\x97\x04\x90\xfd\x25\x46\x68\xe5\x97\xa5\x77\x17\x58\xd3"
"\x03\x92\x8f\xfa\x56\x04\xc2\x7f\x02\x7e\xb5\x48\xcd\x86\xd8"
"\xe6\x3e\xde\xda\xc8\x48\xbc\xb0\x0c\x74\x98\x8a\x3e\x9a\x33"
"\x7d\x0f\x6a\x39\x68\xa2\xb6\x01\x69\x3c\x3a\x9e\x2e\xcf\xd0"
"\xb2\xa0\x26\x3c\xd9\x09\x73\x15\x0d\x5a\xfb\xc3\xc6\xd4\xa8"
"\xdb\x0c\xea\x88\x0b\x8a\xe8\xe9\x89\xed\x6c\xfd\xed\xf9\x4c"
"\xf4\x6c\x7f\xc9\xbb\x31\x54\xe9\x70\x37\x2f\x6a\x27\x43\xf9"
"\x2f\xe6\x8a\x5b\xad\x3c\x3e\xd4\x64\x81\x81\x5e\xb0\x9d\xab"
"\xaf\xaf\x14\x91\x0a\xdb\x23\x4f\xf5\x10\x7d\xd5\x92\x6b\xc9"
"\xe4\x7d\x44\x4b\xf2\xd6\x6b\xfc\xe6\x27\xf8\xa8\x90\x69\xc1"
"\xe1\x4d\x98\x3b\xb9\x31\xe3\x0c\xae\x60\x07\xe2\x84\x4c\x46"
"\xda\xc1\x9e\x3f\x3e\x89\xde\x3c\x45\x87\xff\xe1\xa8\x98\x38"
"\x29\x1a\x80\xa5\x89\x3b\xa2\x41\xd2\xc8\x18\xf7\x36\xc1\x92"
"\x4a\xfd\x5b\xae\x42\x74\xf5\x11\xe6\xa5\x5c\x3e\x45\xbe\x58"
"\x94\x17\x5b\x3f\x2c\xc5\xee\xf6\xbb\x0c\xa8\x1a\x73\x16\xf0"
"\x99\x2b\xa6\x51\x99\x91\x5f\xbf\x19\x22\x18\x75\x2e\x39\x9a"
"\xca\x6a\xff\xb3\x2b\x27\x44\xa5\x0c\xd3\x76\x28\xb6\x4e\x2c"
"\x7b\x85\xe1\x3c\xf4\x72\x33\x05\xbf\x83\x31\xc0\xdc\x46\x84"
"\x0b\x07\xb4\xfe\x9a\x38\xac\x8e\x17\xad\xcc\x5b\xf9\xf4\x69"
"\xd6\x4d\x4f\x11\xf3\xb3\x6b\xf4\x37\x60\x89\xcf\x5d\xc8\x84"
"\xc7\x76\xf0\xe2\x35\x65\x6a\xb9\x4e\x3d\xb1\x40\xe6\x6a\x40"
"\xf4\x3e\x97\x47\x44\x0b\xe8\x76\xc1\x4b\xf5\xff\x29\xa7\x63"
"\x0d\xe1\x57\x03\xf0\x00\x27\x87\x39\x88\xb2\xd3\x40\x40\x2b"
"\x0e\x0b\x80\x6d\x36\xf2\xea\x96\x2c\x42\xff\x5b\xa7\xee\xc0"
"\x56\x35\xea\xe1\x65\x59\x23\x8a\xab\x4b\x25\x97\x96\xe8\x7e"
"\x23\x4d\xda\xab\x1a\x89\x73\x5c\x57\x1b\x4d\x06\x8e\xa2\x23"
"\x33\xaf\xdf\xe8\x25\x4d\xdf\x3b\x52\x8c\x6e\x7a\x7b\xdb\xca"
"\xe0\x35\x4f\xce\x3e\xbe\xd3\xde\x7c\xa8\x28\xb1\x0f\xb1\x2c"
"\x33\x93\xc8\x82\xcf\xe2\xa2\xc0\x6e\xfc\xee\xa8\xb1\x47\xbb"
"\x53\x59\x2b\x8e\x72\xc8\x0f\x5d\x76\x4d\xe4\xe4\x96\xa7\xcf"
"\x11\x84\x46\x30\x8a\x33\x9d\x8e\x3e\x9b\xc4\xa4\x90\xaf\xa3"
"\xe2\x2a\xd3\x5e\x37\x31\x54\xdb\xb0\xcf\xee\xee\x4e\x65\xa5"
"\x49\xac\x5c\x63\xbc\x9b\x6a\x15\x4e\xb5\x77\x8a\x71\x67\x08"
"\xae\x05\xe4\x36\x82\xf3\x83\x15\xb9\x84\x3f\x4a\x4f\x86\xa1"
"\xa1\x49\x92\x02\x6c\x41\x92\xcc\x45\xc1\x3f\xd5\x72\x32\xf8"
"\x88\x69\x9b\x7e\x0b\xfb\xc0\xfe\xde\xd8\x1a\x5f\xe9\x66\xab"
"\x66\x69\x77\x7f\x41\x17\xb7\x45\xf3\x0c\xe1\x7d\x46\x40\x71"
"\xac\x70\xf1\x93\xc3\x0c\x02\x39\x14\x18\xbf\x81\x99\x71\x35"
"\xc4\x40\x6a\x94\xdf\xa6\x91\xb1\x2e\x33\x3d\x1d\x1b\x4b\x1b"
"\x7e\x74\x3c\xa8\xf8\xd7\x41\x55\x4a\xe3\x67\xd9\x08\xa0\x39"
"\xcc\xd7\xdc\x1e\x38\xd5\x81\x6c\x97\x2c\x17\x37\xad\xf8\x3c"
"\x25\xd7\xd0\x85\x23\xd8\x40\x3a\x84\x7a\x90\x82\x46\xc2\xda"
"\xa9\x6c\x76\x9f\x03\x71\xb9\x4c\x97\x02\x65\x74\x94\xe1\x48"
"\xa2\x5c\x16\xad\x8c\x75\xde\x97\x99\xdd\x95\xc0\xbe\x04\x07"
"\xf7\xde\x5d\xd2\xdd\xae\xb8\xd8\xed\x05\x78\x2c\x95\xe1\x90"
"\x89\x36\xc6\xa3\xfb\x24\x76\x19\xcb\xbd\x66\x87\x32\x10\x9b"
"\x98\x9f\x99\x30\x80\xc1\xcf\xc4\x4e\x21\x8a\x29\x2e\x43\x91"
"\x22\x7e\xea\xbd\x81\x6f\x87\xa2\xaf\x9a\xb8\x24\x8a\x23\xb8"
"\xfa\x28\x51\x70\x35\xe4\xdc\x39\xe3\xb2\x20\x48\x77\xe8\xf3"
"\x85\xbf\x21\xb7\xbd\x3f\x27\x1b\xaf\x98\x27\xa2\xa6\x5a\xeb"
"\x34\x8d\x9d\xf1\x3d\xc6\x24\x9d\xe8\x03\x50\x07\xe6\x5a\x96"
"\x20\xc7\x0f\x90\x8a\x30\x7d\x5c\xb5\x21\x54\xf7\x0d\x1e\x87"
"\x95\x0d\xa0\x82\xf2\x2a\x3a\x96\x5c\x12\x72\xcf\xfd\xe2\x16"
"\x45\xfa\x11\x7f\x9f\x5d\x10\x55\xf8\x1c\xad\x20\x4c\x10\x70"
"\xcf\x0c\x08\xa4\xaf\x35\xd8\xd6\x2e\x13\x85\x20\xd2\xd0\x74"
"\x01\x4d\x1a\xc7\xe4\x07\x84\x5c\x38\xa9\x8a\xae\xa9\x1f\x41"
"\xb3\x93\x4d\x3a\x6f\xa3\x2e\xaa\x10\x91\x64\x59\x5b\x81\xc3"
"\x27\x1f\x91\xa7\x2a\x8b\xd4\x73\x5d\x23\x91\x3e\x55\x9b\xde"
"\xc7\x24\x6b\x8c\xb3\x23\xa2\x44\xdc\x36\x6b\x32\x64\xc3\xc5"
"\xc4\xa6\x09\x81\xd1\xc5\xef\xf9\x26\x8f\x4b\x78\x2d\xfc\x77"
"\x7d\x22\x63\x79\xca\x3e\x23\xca\xe8\xa9\x2e\xcd\x67\xcf\x2e"
"\xe3\x1f\xf9\xe3\x43\x81\xee\x80\xb3\x76\xdf\xdd\xe9\x7e\x36"
"\x7f\x4f\xfc\xf6\x08\x04\x35\xeb\x90\x10\xdb\xdd\x05\x9f\xb3"
"\xce\x6a\x42\x5c\x76\x07\xcf\x09\x2f\xf7\x87\x02\xaf\x51\x1d"
"\x5e\x53\x9b\xf3\x46\x87\xf0\xd7\xf7\xba\xa5\xb4\x7b\xae\xb4"
"\xd9\x8f\xb6\xba\x15\xd3\x3b\xa5\xbc\x62\x4d\xc9\x23\x2c\x80"
"\xe2\x3e\x06\x00\xb6\xf4\x93\x68\x93\xbb\x22\x08\xff\xff\x84"
"\xca\x74\x62\xff\x3b\xfd\x82\x9d\x74\x77\xea\xed\x57\xfa\x81"
"\x22\x02\x13\xe6\x9c\x4e\x1e\x71\x59\xed\x20\xb8\xe5\xf3\xc8"
"\x55\x57\x85\xc8\x79\x56\x4c\xdd\x8a\xa9\xeb\x28\xe9\x64\x54"
"\x83\x6b\x6c\x79\xa3\x47\x52\x04\xaf\x81\xc7\xe6\x45\x0f\x5e"
"\x3b\x7e\xdb\xe9\x8a\xc1\x23\x81\x87\xe4\xb4\x30\x4d\x01\xfc"
"\xfd\xdf\x5e\xbe\x5a\x6e\x49\xf8\xe2\x34\x3a\xeb\xae\xef\x35"
"\x21\x85\xeb\x8c\xbf\x82\xcf\x92\x0d\x68\x93\xba\x9c\x0d\xc3"
"\x63\xa3\x81\xfe\xe3\xd3\xdb\x10\xec\xc0\xac\x7d\xd3\xf6\x26"
"\xa0\x42\x02\xfd\x92\xc3\x9f\xb2\xf4\x70\xf2\x68\x1e\x52\x3d"
"\x34\x73\xf9\x26\x0d\xd2\x38\x19\x8c\x19\xc3\x1e\x4d\x22\x77"
"\x58\xd0\xa7\x42\xec\x49\xf3\x7d\x36\xe0\x8d\xe9\x9c\x4e\xb1"
"\x42\x15\x37\xff\xbc\xd5\xae\x8e\x7f\x8d\x5e\xc7\x50\xc0\x7f"
"\x96\x03\x6b\x00\x3b\x45\xfe\xc2\xf5\x2a\x28\xab\x4e\x21\x33"
"\x34\x61\x9e\x59\x58\x9d\x30\xd4\xdc\x12\x09\xc8\xe5\x5c\x49"
"\x9d\xcb\xcb\x06\x17\x3b\x99\x9c\xde\xa0\x8f\x52\xd0\xc8\x3c"
"\x33\xcb\xae\xe1\x99\x5d\xcd\xf0\xf4\x66\x77\xfa\x2b\x5e\x01"
"\x13\xb0\x19\x4d\x23\x98\x02\xb8\x30\x52\x52\x49\xd7\x2c\x61"
"\xbc\x0a\x16\xa2\xfc\x0a\x08\xae\xd2\xf1\x3b\x71\x6a\xdb\xe0"
"\xec\x04\xfd\xf6\x0a\x44\x90\xc4\x33\x48\x40\x70\x9b\x61\x07"
"\x23\xb8\xe8\xaa\x34\x24\x81\x34\xed\xb7\xa1\xda\xaf\xef\x7c"
"\x34\x15\x52\x7e\x85\xc9\x59\x9c\xd5\x36\x9b\x0c\x18\x72\xca"
"\x98\xfe\x0d\xa7\xf6\x8f\x32\x9e\x70\xa4\x74\xe4\x65\xa3\x20"
"\x29\xc1\x7e\x84\xf5\xc3\xdd\x10\x81\x45\x39\x45\x24\xdb\x4c"
"\xfd\x9a\x23\xa0\x86\xb8\xa9\x8f\xfb\xe7\xe9\x1f\xfb\x5e\x88"
"\x97\xf2\x86\x28\x6c\x46\x23\xdf\x49\xdf\x23\x97\x99\x10\x17"
"\x51\x2e\x18\x5b\xb0\xa0\x85\x78\xe0\x7c\x93\xde\xeb\xe7\x14"
"\x2f\x09\x98\x6f\x40\xe5\x13\xd7\xbe\xb1\x32\x93\xce\x02\xbe"
"\x17\x6e\xea\x54\xbf\x09\x97\xdd\xdf\x41\xbe\x3b\x4f\x9b\xf5"
"\x7c\x36\xfd\x79\xa3\x77\xb7\xee\x97\x0d\x44\x1a\xe8\x11\x46"
"\xd4\xf7\x3b\xf0\xbf\x56\x41\x70\x69\xfb\xc8\xee\x31\x8d\x72"
"\x61\x52\xe3\xf0\x5e\xec\xc3\x63\x64\x90\x69\x20\xb6\xfd\x1f"
"\xac\x44\xc4\x72\xb7\x39\x37\x1f\xc2\x9c\x60\x8f\x35\xac\x0d"
"\xc2\x92\xb4\xcf\x30\x8f\xcb\xdc\xe2\xa2\x1d\xb0\x65\x7e\x4c"
"\xf6\x58\x87\xac\xf9\xaa\x58\x17\x80\x31\x69\xbe\xa5\x9a\xc5"
"\x13\x08\x2f\xe1\x18\xe9\x7b\x07\xb7\xfb\x9b\x73\xd3\x40\xc9"
"\x8b\xa3\x41\x9a\xf3\x94\xd9\x7c\x59\x04\xa5\xda\xf6\x70\x5c"
"\xfa\xeb\xbb\xca\x09\x9c\xa9\xd9\xae\xd2\x21\xaa\x4f\x0f\x7a"
"\xca\x58\x8f\x25\x67\x39\xc7\x93\x77\x1d\x28\x34\x3f\x92\xb2"
"\xa6\xa9\x21\xe8\x90\x00\x33\x5f\x58\x10\x56\xea\x0a\xd7\xb1"
"\xd5\xd5\x18\x62\x22\x39\x28\xd8\xce\x38\x9e\x27\x98\x07\x4d"
"\xf9\x5e\x42\x31\xc0\x7d\x09\xbf\x38\x3f\x10\xbc\x42\xbb\xe2"
"\x99\x53\x36\xeb\xf2\x1e\x21\xa9\xbb\xbc\x75\x98\x36\x07\x90"
"\x54\x4c\xa9\x4f\xd7\x7a\xf1\xc1\x9e\xa8\xa7\xc3\x36\x6f\x75"
"\x23\xba\x02\x79\x18\x7d\xaf\x34\x0b\xf2\xf2\x84\xc4\xe6\xe3"
"\x9a\x68\xdb\x16\x4f\xa8\xcd\x7b\x63\xef\xc1\x49\x73\x56\x15"
"\x56\xe7\x72\x48\xbc\xec\x51\xbc\xe9\xf6\x9b\x39\xb0\x08\x34"
"\x31\xd0\x2f\x67\xe4\xec\xae\xc4\xfd\xa2\x7b\x56\x8f\x14\xad"
"\xf5\x7a\xd9\x8f\x93\x49\xb4\x22\xf9\xc3\x6e\x4c\xce\xa4\xff"
"\x1e\x4d\x1e\xde\x26\xda\x16\xff\x2f\xc6\x60\xf6\x53\x09\xd3"
"\xaa\x6e\x12\x15\x63\x17\xaf\xeb\xac\x31\x46\xd0\x6e\x99\xa9"
"\xc2\xc6\xd0\xe0\xdf\xd7\x46\x89\x5f\x72\x1f\xcf\xec\x11\x2e"
"\x9b\x5f\xd9\xe0\xf4\xd6\x5d\x3b\xc0\x8f\x17\x3c\x06\x17\x4d"
"\x24\x28\x24\xdb\x59\xf0\x60\xae\xed\xe7\x07\xf3\x40\x99\x36"
"\xc9\x6b\xf2\x37\xf1\x62\xcd\x27\xf5\x77\xd6\xb1\xa1\xd5\xaf"
"\xd2\x82\x65\xc2\xd0\x18\x14\xa6\x68\x75\xdf\xc5\x0e\xba\x46"
"\x2e\xaf\x09\x1d\x29\x57\x61\x9b\x05\x76\x74\x11\x7a\xf5\x24"
"\x33\xf9\x29\xa0\xd5\x80\xe9\xa4\xb1\x4d\xad\x7c\xa8\x59\xa3"
"\x3a\x29\x03\x1e\xac\x44\xc3\xdf\x43\x3e\x7b\xcb\x42\xa6\xd5"
"\x6b\xf9\x88\x6a\xc9\x1d\x12\xad\x81\x06\xb5\x42\x83\xa0\x81"
"\x76\x04\x22\x09\xee\x98\xf3\x15\xd6\x09\x53\xf0\xe1\xf6\xcc"
"\x23\xbe\x32\x2f\xfb\x98\xcb\x0b\x8f\x43\x40\x24\x72\x01\x60"
"\x0b\xa6\x11\x2f\xd2\x75\x44\xb1\x7b\xbd\xdb\x02\x81\x24\x22"
"\x34\x8b\x57\x7e\xce\x7e\x36\x78\x69\x4b\x00\x59\xb2\x9e\x59"
"\xf4\x9b\x4e\x9b\x0b\x4e\x94\xba\x87\x75\x5c\x6f\xaf\x45\xc8"
"\xac\xef\x1d\x51\xcb\x8e\xf0\x7c\xdf\x35\xed\x69\xe8\x9e\x35"
"\xd9\xf3\xd0\x8d\x13\xea\xa6\xe5\x78\xcd\x7d\xaa\x63\xf4\xc5"
"\xaf\x20\x92\xfd\x38\x05\xf2\x56\xe3\xae\x6e\x70\xab\x74\xce"
"\x12\xbb\x06\x3e\x3c\x15\xd3\x7b\x86\x9a\x40\x6c\x3a\xde\xad"
"\x4d",
4096);
*(uint64_t*)0x2001ec80 = (uint64_t)0x10;
*(uint32_t*)0x2001ec88 = (uint32_t)0x0;
*(uint32_t*)0x2001ec8c = (uint32_t)0x4;
*(uint64_t*)0x2001ec90 = (uint64_t)0x10;
*(uint32_t*)0x2001ec98 = (uint32_t)0x10f;
*(uint32_t*)0x2001ec9c = (uint32_t)0x0;
*(uint64_t*)0x2001eca0 = (uint64_t)0x10;
*(uint32_t*)0x2001eca8 = (uint32_t)0x3a;
*(uint32_t*)0x2001ecac = (uint32_t)0x2;
*(uint64_t*)0x2001ecb0 = (uint64_t)0x10;
*(uint32_t*)0x2001ecb8 = (uint32_t)0x11f;
*(uint32_t*)0x2001ecbc = (uint32_t)0x9;
*(uint64_t*)0x2001ecc0 = (uint64_t)0x10;
*(uint32_t*)0x2001ecc8 = (uint32_t)0x109;
*(uint32_t*)0x2001eccc = (uint32_t)0x7ca57514;
*(uint64_t*)0x2001ecd0 = (uint64_t)0x10;
*(uint32_t*)0x2001ecd8 = (uint32_t)0x0;
*(uint32_t*)0x2001ecdc = (uint32_t)0x2;
*(uint64_t*)0x2001ece0 = (uint64_t)0x10;
*(uint32_t*)0x2001ece8 = (uint32_t)0x118;
*(uint32_t*)0x2001ecec = (uint32_t)0x7;
*(uint64_t*)0x2001ecf0 = (uint64_t)0x10;
*(uint32_t*)0x2001ecf8 = (uint32_t)0x100000000;
*(uint32_t*)0x2001ecfc = (uint32_t)0x8;
*(uint64_t*)0x2001ed00 = (uint64_t)0x10;
*(uint32_t*)0x2001ed08 = (uint32_t)0x10f;
*(uint32_t*)0x2001ed0c = (uint32_t)0x0;
r[62] = execute_syscall(__NR_sendmsg, r[2], 0x20001000ul, 0x48000ul,
0, 0, 0, 0, 0, 0);
break;
case 6:
*(uint32_t*)0x20024000 = (uint32_t)0x3ff;
r[64] = execute_syscall(__NR_setsockopt, r[1], 0x11ul, 0x65ul,
0x20024000ul, 0x4ul, 0, 0, 0, 0);
break;
}
return 0;
}
void loop()
{
long i;
pthread_t th[14];
memset(r, -1, sizeof(r));
srand(getpid());
for (i = 0; i < 7; i++) {
pthread_create(&th[i], 0, thr, (void*)i);
usleep(10000);
}
for (i = 0; i < 7; i++) {
pthread_create(&th[7 + i], 0, thr, (void*)i);
if (rand() % 2)
usleep(rand() % 10000);
}
usleep(100000);
}
int main()
{
loop();
return 0;
}
Attachment:
.config
Description: Binary data