41 	uint64_t msg = malloc(0x2000);  in send_msg()  local
43 	*(uint64_t*)(msg + 0x200) = 0;  in send_msg()
44 	*(uint32_t*)(msg + 0x208) = 0;  in send_msg()
45 	*(uint64_t*)(msg + 0x210) = msg;  in send_msg()
46 	*(uint64_t*)msg = 0;  in send_msg()
47 	*(uint64_t*)(msg + 8) = 0;  in send_msg()
48 	*(uint64_t*)(msg + 0x218) = 1;  in send_msg()
49 	*(uint64_t*)(msg + 0x220) = (msg + 0x40);  in send_msg()
50 	*(uint64_t*)(msg + 0x40) = 0xa8;  in send_msg()
51 	*(uint32_t*)(msg + 0x48) = 0x3a;  in send_msg()
52 	*(uint32_t*)(msg + 0x4c) = 0x10000;  in send_msg()
53 …memcpy((void*)(msg + 0x50), "\x7a\x3d\xc9\x5d\x24\x0e\xa5\xb4\xa9\xf2\xa5\x27\xc1\xf2\xbb\x18\x45\…  in send_msg()
54 	*(uint64_t*)(msg + 0xe8) = 0xf0;  in send_msg()
55 	*(uint32_t*)(msg + 0xf0) = 0xffff;  in send_msg()
56 	*(uint32_t*)(msg + 0xf4) = 0x80000001;  in send_msg()
57 …memcpy((void*)(msg + 0xf8), "\xfa\x84\xcc\x46\xe8\x4b\xfa\xf2\xfa\x5b\x17\x75\x79\x5b\x8a\x32\x2f\…  in send_msg()
58 	*(uint64_t*)(msg + 0x228) = 0x198;  in send_msg()
59 	*(uint32_t*)(msg + 0x230) = 0;  in send_msg()
60 	int err = sendmsg(res, msg + 0x200, 0x80);  in send_msg()