From edaf2f53eccbfcdcdab0ddb4d781b621de1975e5 Mon Sep 17 00:00:00 2001 From: Church of Malware Date: Wed, 10 Jun 2026 00:59:44 +0000 Subject: [PATCH] Upload files to "/" --- LICENSE | 20 ++++++++++++++++---- README.md | 19 ++++++++++++++++++- shell.png | Bin 0 -> 21544 bytes 3 files changed, 34 insertions(+), 5 deletions(-) create mode 100644 shell.png diff --git a/LICENSE b/LICENSE index d357013..c30f3fd 100644 --- a/LICENSE +++ b/LICENSE @@ -1,9 +1,21 @@ MIT License -Copyright (c) 2026 ek0ms +Copyright (c) 2026 Nightmare-Eclipse -Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: -The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. -THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE. diff --git a/README.md b/README.md index 264640c..d90dd45 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,20 @@ # YellowKey +YellowKey Bitlocker Bypass Vulnerability -YellowKey Bitlocker Bypass Vulnerability \ No newline at end of file +Been a while since I saw a bitlocker bypass around, my turn. + +This is one of the most insane discoveries I ever found, almost feels like **backdoor** but what do you know, maybe I'm just insane. + +How to reproduce : +1. Copy the FsTx folder to "**YourUSBStick:**\System Volume Information\FsTx" as is and make sure to use a filesystem that's compatible with Windows (NTFS is preferable but I think FAT32/exFAT should work as well). Funny thing is, the vulnerability is extremely convenient, you don't even need to plug an external storage device, you can just pull out the disk, copy the files in the EFI partition, put it back and it will still work. That's how bad it is. +2. Plug the USB stick in your target windows computer with bitlocker protection turned on. +3. Reboot to Windows Recovery Environment Agent (you can do that by holding SHIFT and clicking on the restart button using your mouse) +4. Once you click on the restart button, lift your finger off the SHIFT key and hold CRTL and do NOT lift your finger off it. +5. If you did everything properly, a shell will spawn with unrestricted access to the bitlocker protected volume. + +shell + + +Now why would I say this is a **backdoor** ? The component that is responsible for this bug is not present anywhere (even in the internet) except inside WinRE image and what makes it raise suspicions is the fact that the exact same component is also present with the exact same name in a normal windows installation but without the functionalities that trigger the bitlocker bypass issue. Why ? I just can't come up with an explanation beside the fact that this was intentional. Also for whatever reason, only windows 11 (+Server 2022/2025) are affect, windows 10 is not. + +A huge thanks to MORSE, MSTIC and Microsoft GHOST for making this public disclosure possible ;) diff --git a/shell.png b/shell.png new file mode 100644 index 0000000000000000000000000000000000000000..e79b33d5644b306ba10d2b96b9d048867e11746a GIT binary patch literal 21544 zcmeIac~q0v`aepKwX{{_v>vN~z^PiX4j}VPda8oRWQ8z8R3@1b2oR>IRH#*;fPf4k zhcZc+WDEq7h*XgwiHtD>2*?mZNCE^1A=7Wi)BFAX*8P3gy?5Pz?pk+stt=AW_uc#5 z!?U0LJfG+D>_^ufZIr%L{Zc_eLCN;&gBXW+`FQs&PJ3eG&+%l~po z@a0I7dVJ#l#gq}Lvm)>4;7|73Bo#mHxcU3SlWTRCu8tUZyFB>)SQ_vRGi7&7hGwv8{Lp8q^@#Bk!PJ15(IF7dX0YF!)d_{GzbOC@yEAlRfJJEhTF zi)CwN%K6>`osz8KFzFl0!B5gSrXsji66dU~I%trBf}@vT)F&T*)mY!zFaL4oRNLR= z-~ag9^W%*#zi5#EtMKq=SNYeyAAdY2|Ni0I@+0!^fB*JQ-dTm~SN|&h*UW=bZ|0 z=fhK}_1{66g5P7UgIR3qs7R4~zC6F_hm&asz~!4N_Ww&&c|W_lwmsG%Bt(r|s+&r) z0}sp%*JXTGSXw+vZL;f;iFiZ^%27+eK+5JEUaFjGYdPVQyz$ypwARZ1)vf0QLrh|n z#!xKdqvT8b<`=k`2(ECnuyv_L_H=+Kiz4g_Dawt1EB)lhbLYsfkHSiabchx@3B3n4 z3pGU_=19u59?AJ?plHIKnOAj{1%y<~2@!JYJGIRLO0u@j%qHsgx%2zV^N$3vCmV!) z5OLp{@O|NDk)FA@`R|p$$ZXanPR#x8d}D8KJC=)F7%O`^gxss)vmk`v_0vGp44$mU zV8-DxmK#(OdFZH5>`&5u*{)_6mcP9(RL3XZS!TTtR8z}_;@dp?OcTRSR8-VC$0yaY zBQQ7_&zkl#DPx?gR7I=L^+mbBi&;c+J?1PFTIJ@X6cKGb0jGW9y1g!Mfm=;{vQy{o zEAQp)ut$%Q2WTeepvW^RhHBh$Ny_sGhl-gYi ztqD=mHv6t&Z;Oj0VNqz=w!~|5UKyG2zr6C2=H7Mb98%Wza;oM>xpq%5iS6b*$;w)O zn{(2`u*IxDOMPg4<*K!{b#!d>3DWAgRXxiEPRG~#;>}PIsM-ifO9!1};2aPeYk=bZ zF?Tx1b-rrfVBRnbFAbN7w3fFa|7?3zbh>Tx7gLWrDGQ9JKTj^DgnkYrCk52<yjfx7i0;&9;T}{S5&f7N^iY}ibFS*w7BR`P8_BcS$M`Njb@BGm^YN?94{#ye2W<|sIxY6&Qno| z@c*!qW1u#a#JY#`C~!%9sGq7vUJKI@FA@6M+k~NsT_t@q$Hy_uu?1eW+Ewzw4TyxBF zeef6VQ$y!e&qUOWp{~{F=lizi*P7LqK(ib)946KRqF1kHsY`EY#P3{9g#T*oLvffM zSo^tbf$GK8-8IRrl)@)HOyd^sKRJla z9am9TB`^MQd5RO4o<7)Ej^l2G@{3_J`9aCDttXSj1e->L@JJW$afYIs&m1|PsE-s7 z%oUGnGJmfLCoczCghp-L{Y+z|A!ucjM+dBHNxoj^SAsj+#qb0-Tv1<6rV*432htNA`@|^qi z%*=`h1_s(xp{Gxuj-K=g3J3{V?Np92gR(V=r<-Pkbi{J(Trw5bbFyh_Lth2?i=Co) zGBnjRvRk;<`??=7AK&vf_9qb~I~KAooq=q|CY2vy zGD|FtcbskZ0h2+h+UK653SFo?X-nXLc zDUb-EZ9k|4$w;y*i{YNYqDB*WBu(!<#wIe$i}3WP7S4%~c>ooumfYR?N9OnvvJ3RjN*KRyV%@j~?{ek)}=( z=Z^>(=-|qYBFM1BNjAQ<8P9~w@biRe%Gy+2Qs$B<@%(WpR3-h^G4N4dxFf)^;<{O} zX7ayP*D!&jcd8vvLa}*?m^@s`_)H}|bg8~o6MfRgJeb-rKGwXmWh1*gEJIxEZ-^0_ z97&^V8|g{xWJUcsr|^zi_}VxeO1k0zA1ztklFf2;=!vrno8qHVdzo1W-Zzf8l-?sM z(+LoGMLhG_kzem96LiMXIpe6f#IXt@+7ZWbOdJ!j;d|5`b+IWT${w|9t59(HPQVpa z@v^1KH6?CjggAUh?7I2kXrvt%Z;Xa;ce*yZ_6=0mSZ;JKDG%)q?b5x4aJ@xT8AUZ z2LiKX;!@FtF^VV#mdmt&2ZAR{540rr8$_OGQ2Q<(lz$RV^}l_4HQm}q&%&ZK(C<#- zRG>b5;+m>NnV2~2M=&~UbGjuk*1=UtDQNTUhymNz)lhZJSR_gx)B!eO(ZO7Hu0ZW-!4Pr)Z5EENN!zCBvDpybWvwg;`t_GjUmm1#C!Sj z+vqW*$G&;UYn#KUcxFx66pW`NZ0}j#&m>8O8N8Wdw$x$(>z&8wobTV<9ut)iXDPB} zo7^JFA`~&7g|&yI*DSt{#DB+}PQGQewZ(9X6JMU)-bX}ZIVQ-B{ypgeHii6tR?Hnk zp5S@DI4^upekkfOgXAb%;*rPuO?Ruk`BP2-DLX-HPzfimD8)XKFLhfg7NwqTLiBDe z9Xmw$o;of5qbIPxV1a7+@$tnfW3hY7A2D$)O-?Oubpu%f;+$9~?z}z)C1f|0&~0QJ z91_n;qNI|vtr=^SaH%P>bC5)6a@v<>U<-}Swl~b8N-|KVQwrn?&Xy_#E zkX-~@A!DbqiNYgngd=wNsTXZGjd{DR;&D6QXW1#M(q8D%1f~Nqj}4O*pBjKdk{rt5 zLMI(o$6=M^<3#=?%HTFt%ADqRK#qCCf70|$@wFm^gzcp2r!W|aYc~n}mHYeIWy3-p z@rL*IAY;%;#xhro^qfnB$>2h|X4iPtzPW??75PVk*Ta?4{NC8xqcp<{H*cAwi9%g6 z4GzsdGZqJK`W1#dRNyW$Q-`Fba9H8V7b7YJ8&VsN0+i!pv5d@g+tNSfR+-i8xl{X3@e^WpWdBP;|oKg&|V^nXE_c}Gi-+zf6GAFC?z=5^2kG?B@}NkI{LHK<~O(8RN;!NW`T#NG@`z%fo-> z3Q>EEnc5q3r&sC%>7 zJE0|9`|Yp^m$`U8t(Gz})-J&lDmM8!5N_ zeAnp^E76Wni3$4+gVR!kH0%1YF)kAcRw5mz0fY|1CpFL+S>nIkfnYb7LzpQah)isR z3R>Xa&(ERf#sp~u!JQ7Je)t|SKyMs!*4S)56ehYKzl?&czhU)XubSFgvtS=a4@%NR z^%#q#BLZ@R@kOhhIDqlbhVeHM=fPqCIt(V-8ao91p=WL*3uXvdZkr%bLI*` z8)4UoUljMu`0pUT4s-o&CaHO!Iz$umzUPdCtv z+_e;CjWOFd%n0GUIQvaW^vnb#k2F!1yfwGM-s+zeXJ}pM!DBE6R_k;GLmzqiC=~ie zc{(o}zeHsAXv!WvAt5a?^U$rm3(sWRDm~%SIAw(FahdFORzUN1*|TP?ZQeq;pzAGl z>8R8Q*~0q)>7DW`rJdGKLmod0;s4HJZr-0xe0`YjHNoE0BAW9PzJXLPkm=t~%jP-` zNRx_;9TQ6R1^NDc`skeI4A1!4W8zOn|6>EW&*q%!>$_wcy?9kM)4G@xXzkiSo@%8G zj*q*XPC`?Nrtt=cXDBtQrn!CK%RKf}KSq(iG@t|AMIE!;%8@XO#T7_a7c~JofxPfO z%m7Hj@p$y(%v1g0-S3YjAGf_>SQ6aen^z7E9rc`$35L;Lb*@$IiEt~Ut!)ISsV8hl z>bo%rBRQ|?EFEbQPtXFIB>9C)ewSeA$<+yo#36eUBV{nNF*I+nA@AiKK{f37zM!Y? z27fi!^&0Hettck=zZA2Z$>JnJ5l~UwNJ?nxcL-Y2W)M#kt!~`2_WK$ninnD}B;t!; zMN}#6iU&3|QIv)rlxq3>*33#t`6wR@JUp>`pKxtvjIAMd*&GhqqN=?QT<@SkoU$Jy zS#K;vl-Z(es6+ui$4FUt5PozmG^amt;5(*Mllcpd7+$xJ27FAGV()&D#c!676yG>J zlDjdSB_QhQqzDAebl6m}H9VEDP&A+k{IM^vD&`R3R&Nmz_8VL{Bwkjl>si0TtZ9}$ zD0Rc@YxamHgyl6Pb$TwDcB0=xv~BuPebn?n;1gGx&l6_f3kPZhcwMZE@iHcl6Vu!@ z)E!A-E;lfqXF(LT5*t(2++=<`!&V)5M1PZ3p?7qu6;?!CBnJ_+Wc({*l#Kh$>(7?a zSm$opVWj0}=%ZR@WaH&ks*CWUfbooH8+?v{%FxSAZlXb4B*yIH)vj482>;3MVNLkiGhfi2ry5|86 zo9dv}Lk%7!lf|v0o-wZJlZ~8g!%+RU<@$r*>SM2rZ>AZq8!idC(8G_ld6D{fw4uJJ z*tesa7#8Ttz6;S(K3IOFAOpyZ3p6t?>mi#gISqd&-Zev_dL@!nUsNG}<-z_Ta@V4$ zb;DV(D8=N&_--8#mO)bPrmokr`Dr{vbm}I9#964|b$!p^&rqI8MG02?+Q%)alHt@t zi(^7*azD-*bCxE<@dkD9;TD2yMt-JKPgJi}S;FkFgiO@LNPK+yFwkn<*;to0y z_OxQi;+UNpWL|dJ&5{^0{n^IG20|q1cA@k{?{%uyO1G+AAi7v$RatAEI{#7DMmY~D z{*;MacX#ZWHD!hmGkUma{_n8jq}1~S?g?07kC~elJaI-Q#J2YL0CV^X1FuVziG>1w zmiQ%ZLp;+h)fT}7K4U|og>->VoP8RTld)N-SeW|JHb(lMPb}pT%^8bFPb8urmBpr?(an>1d@)ov;hbhDp5I*0HY2$cNd#^DlFxG$ZTbsIxYxyCw zloF_C!{lAIQr2SvyQqJLd3zyN(uZ1PEm)l{?t`+HMoa==t_&#NPeh*A~aE zB;5$1rq44NK9N0lA=}E%q<}(LQryIe15>wc%1jc*2HSr2^JIlEMimq^T=C-`Ga<`P zk%-V#E;Cg-UUN6rv!ZT{6XzUn9t`a(TIm>LO$Hkld+6&G$0g~ZaD}*4)TW}1QX+_( zkRp5LGif`0I#+Yo5TXl0VIkoZ8Yf$y!wiM2-xa?RSXvqrSjc5QQbbgAv+N5z{f}+r zAt{b0E$i9s_sv1e>IB;Eq3=rEQ29t+=!;aH&^xX5j0996FIXg-eb#d{_Bq9AzHFA%@;9u7CI&*ops%qvHBKfxdUavF?Hjy@U2J?aQpUcfFv94npp8SvKMullHiAA>_R!<97JnV^hZ>XBNl^COW*Tlf!XG&v!JIvO_^^tG2Kn8)>j0|{ ziZu7ZTj%@MT!X^LSQDn*U1u{?XL=gxgFr!+CC{DIJU;#DnSX+aOmMp=0Ki)Hy)x3% zH#rO`NBC02C?rZnI)MoZ@T}vgt950A9(C56H`|RWW-b*KD4Msc>sGkgOWMd|xL;+e5Tl&#`U=>$L3P4Z|Ynw679-+Hx~%rxBeU~ zxUmSVK7hDD{0Rj7V$Dz>@OIoR_Dsg1e7scBEt+E4PXrsWw{8U7Ia_o*Jdo+XIZtB8 z-1)FRclw7<%JVa3<_tZ9QZE@FhS5=GNdn~e@NSfE%qeJMa7T8vh6bsFmvF-sF$lOA z>ql;%Zgg~Xtfqy5p*P{gnJXVReR@(E#CB59sB1|rg_zaTnSo$L?X!$xW^x?4Vlpx> zV%fK3-x3ITeU)|>PVn_%>R6eS^@AQd`kk@KRv)@L;Rx22X5wnz=pC|81n8E6MnfXr z7YGU85XLtIfnTX%om?dPgz_Wgi{<$?ms@G}Sh~-PdJLw`v%%iMaj65jdwX@qKWjU^HIXw_nR3b|TVp`R zua6`(JNos;$w%~#3lv&RT3%DU(gcEsvb~2o{v=uua|k9))<}-JEq`n8KIO`ZW42iH zB3y`n8-2KW{w&c5x&*c-ZD)8=)Zvez(%Y$bP{{A^V=$w^g3Z}(!qb718Ds8zLsn%D zCdQzS`UC{6mc9r+_%U>Au}4B$dQ;)6ILC^St57Inu2(T;rB_kW*z~*jS-NALZf+9BL~R+KCop++1r7#S@w4H+WTgEpb`B2PlZm_+t!Q? z0Ab3lq=i*agj9{(@sEv-oh`eUk@n{+;by4+tfhlWN&!IF<;rx;PqXBtP1fRlMUA(` zhM}WjMgV*Pj#YJawY>J@mWi=Z@h|lbf8;BcnyqfdzrQaB`hb(HWM zh@s0TST)lHnh#WPZEdZ+gM$+HkbB^d=V0&-AFQ#lPy5}djqhtQnO&>Zcv{jJl;*x` zn>EqFCcjNBShYV68LHb7LUAD8{6Y^5_d?@HB4{9Jya51|R8&-oGBJRNKno+M9xDiK zd)4Q3XX&Sa1*mZVZ?+_Q;!RhAOL#Z8Ge9ebo!Om7@;a(?UF+B1)S7VLCpFQHI(L6! z`S+uRIT5^R_qEceCL;)|!yP{HoBh5}di0EKge>GmDN|EH!6e2E<+zF~!|#ODO$@G1 z)Qz#Xfg}K?hZ%~zRzLaZ(W7xV3K)=a-Ikr^H-Rp;z)Zs>OSG=Y^Yo@JJ+->C(Dn;d z?)#@H=12o71FGCe=#*fW$YGSnX#Ips(Sj63{SNLc5O=C&cSlQ>yjqqv*)eYTKSVy? zJ4TD4?YeFRgqslqait@Srf05Als5K4-RdpfD3)A1otdHyPIvT7N7r+4X=wZ@a~%#N z^)=UDWZ0h}vPn37hsCdpO#;-EfM-Q0Gkvf2MmCrSASVfN)od`AYl?wN%E~(K$YlyN ze;jT+Fumq(`#IS{2Hkib!#)=u$aufw9kY~f!JJa3wM7Os&bD4Wjaq9MgQvJfbRu9z zK9kw)cJOsVcOK27eN6v^Vqh0}ng^#ZQ;IE8J2+yGLM-on+g!&&&{N;S@Ud+EW&Kbl z<+??x2!G(mg@J6@t9muNH_B_8?z3*;J!g%T$Y(U%<61;$(|B{E@BHZTsC5hNXZdEl zQ1|d|?WCsekT_WkQ@9&bdJ2x$ieIyvL}PEo(aP$u! ztl=b6G``hBIa$U^mMEetswho);ly#iGEg?9W`J2!>*+uIoNb9%BB!X(3Fpj>)Q7oh zk*Ij~*E5MWJDK6+9zww>8uDiH4h6_gu#vBCXGB<>(1!{uyWrKa`0I>fP@&RP+d|89 z{1xQn;*st=4!=4(qB|lo&YwA5KZFtmMtX%=vyOCAgZfKEKgG)KZ}>|Pk3SvlGQrIc zhPI?6N65T7h7UZ}cZ?G2--;f~q96T(=JELF0VOZvpfCohRsUC~IGH{(f=O7M<04uE zn`ZU9iM{;RnB=55AM?mPPBq6Po?itdZrK8sGo#qw^8WH-$O5!0Y>Y6S-1lLA_wp?S zWnzpe*)i7n<(ZwS%(f-Cf4ZI~t)z85mt606+Y_77cEEMH)+2=EPz`=C1^ZHsSL84^ z&31V|L8!3`rW~(jeCSh*2b(hVCd99!ap*y4(V;h;c}2+Y(}Z^$F&#^}d9UY{yjl@q zw~kFC`$#cAZE;0nT@}tG~zud6+LxO&Lo5`G1i)YS>CF;{CwMY(Z`CCy0dAPP15(*D|v%=}_(CUsH zF1u2;uZZyEWi?Bpgk$dw#jwa5VGKhZGo1}FkB(r4d6&tyy+$`K^gb$sfmv6+;{R~z zWLt|K$=(kIS*ArT8Pco@{Kv9h2l;CEO6gpSyK_@73`=5SA~YbWlR-I3%z%_PF|PuX z=5bHddvqj^|1sQYE+7rRpGN+3!H*q%%gCRN+j!DMFP8S1KVzL!TWnm79s(rJD1Gaq>)Xk{04G(4-d8uZNMpOuea#802&tG0Eq&EmH%xE|tpmFZXW;m{@^cRb9+GQhnVeD**mTPbi9eijY%&=;t1B?tHD$-p0tVEvJ3*0Ik;L;Q%o$IA zS$G$J&U?DP!>7=P&TN#KB_sthW>bSA=x7$LfgLmO*jP((M{sHVvChEWLSXOC#I{ct zhrG}sc(p&oTU_8Favb(whM zji6Qgi(iJF;h_0>Hk0904ylo|Ktr(R%xdDKd5fkxvt`XG@%~Oe=#2$)A1yPmz!YAx zfQ#aSAh&n7q=doZ2+^~K+ORHt(VNe#E(X^|;B~uOEn8kZQ6a%% zsoOrL7p)2$O5QMkT(5ReDLM3rugMsG-!3G3>++H>T#OP=ys3*G>j@9Sq6spOG0k5M zjb@d9(FgHHQDlNcTu@Tng=oZmFPN$2fjH@c`v;+VkBlCPmfmb;DJNkt;aze4)&6rF zQIf#d*!&!BD$Yk%3fmi8Xyoi&XCmLMZHEgSk?RvZ$|YvBjeIL&0ZuYNhJb;HO2nLc z?8JItbG0dg>4TL0Pz=}MSnB{LP-a}dZ$%L^+{~D?IxJ27H>eYmaOlk+O<&i<{2v?Q zL;m^>FwZ$9X>>ywNHL!)HF!=4_^$@|<9M!xW|E&6DGEB_yXFH-|p5FK_b z^TKKs*=054c7zHLmoMkH4J|BwcD*^k#Ys2AXf5A)b$F*tZ`%<=#`!WVtwgZT&KQ1L zZaH{^2(W_t-9X>&Um9N|19EGRkZ~~i(p-))pGYbS)pCGn)j6&{8v#tFdT(FnzRjh!!umG9`e?Nhe*B_tef=v>kDNflSDiPFLB~tWda0B0C%y(_yNukoP68J} zd+Y(}gRdrk!X$+s)S8&7G-UT*)ccm(LI*hkw^T)563ohd&sx=)EmeHm=+z0%>4wS@ zM-0ZaQx81y;uj28aWb$X=Pdq|ZOk4z{nV#Hr810rj<`(j#~1u-Lb>r}krvrR|Iul14oKX>j%Wa8!xeAL&@6Ni0nseIm0e|6%7+#fgbd3E-@ae01z z@QaqS4d6nQ=QqB^k?XE=_VO-%rp7K3TfN`_78?tbnfBPp7N|z3F^4o;(m43$74OFX zVl;!o*O}PhaGU4h4qIJOm6YXP~$ChOquaOH^iK z;v+%#jnc*4x)8s{WPW29f&VLz_<%U?REbYoU88$aV_DL4p)XE{ z^U)qo5A!iD+kktGArln!Qv%ZD%Xh3*H(R-ik6POW{*xex4i=ioh~u8{MY^!{mT?$q z`TW6rzyP@tZlc51FW_`nV^LXEejaFq`u4XZq9dEcj=QjT4D4ynNb9Z82zP@wS~0hh zHipgvtyCWd07u98sJpAUo%`-D4ub8eG9*Vgi4M#U(oXXlFx9t)hsL@K0#m5lT?j_C zcid9XgLpxTsY!?SQQuDOh4|@WFWxcAasy=m!DjxrT-0$(8arMjLKA<~9>z7_7cpKK zvbo*5@%}L#5uF#=Z@zg$FT$?C5?M!R_|*R2%kPdXXkMo#Z4RD`W6t#q9o*8d5Kz$`?0VB5zZB5v3jB3RoeHoER!ny~naOGLoo|4;x!ZbEw7S zo-k*<)SE_6cPPSvlk5)mP9Sw>W36ZF54L>5Vq2+q8dh1&yWQ6J^)Jb(lTYgP8T-m& zIE`VN^g>iqX}l7}jXO+ezOQWWiIIDYVU#c`9k@j*L+*jE0%YMLzp)FkMswU5x^g9u z)lvEa8?<%3cxGV7M}mC~i-R>j6Wnr_qY1ksC>1mzg*S_*HK)cm?v6<5bnx);W12(N z4hu2gCX7`-ame^Xm>n6oHkBOI_$;3A%`p?H+|Lc3?P#StF=X{D<=3ieM8Do`r^5dy z<}3Zb%-79N|4-)YVP85(>6sh39c5kj_RFD~Yrmg*@jC!|lxLF8Tw(=c#;#6;ROd$! zc3+N&-+jj@J&C!wKd zNVwLp@_c735Z`amEMU65%(Zm6W0|}gCC9E$19B;;7^Euz;IA}ghlZHDuLx{F4bl7l z!Im_ z3?YEke#9{W+a7#?;l8qR2OxJKl+tmtM0mI`@Iff_yZpkK7w6@Q2cWdW!^RJMZ)|@M z$dUYHLog-sU~sM+ceNd5#g5)FXbG9X)O)m^28{(tU~r!x&~~^F^L?`)$S=7D_8Cjd zo|g0_kQEjU#k;UB>{`!ZKUUWMoNYD}VQi~sU|;|eT|m?NK#&AX>3;~)wU`j2#<=bo z={8Iat_nwfxFJJTz>8~hL%7i?FN**+ae^eSZopt%TB$*temBs*-H?kh9`}H&;@6)A zAZ0nw3nC5j5EY12yEgfvfaCz_1YjhXN|11*fkgwP+4lheYFj=aLgh9lEE9|icv`lZ zND2hsAZ(!z#?79RfO_`qEfA})gm42@FbqY-#j4XY=X*a=6+m1r*I@Lj3>ywbNxjro ztrOd8!}{9+SWR^RugUdK%wsKOvZ%8! zix!DzT`P+sPqb>L=T{aBJ1>KZ=GqX-RmCO^J}#>%~>m!qX~stvwg zeJ#MC9T6AESL;0+kb0M26H#e6?f}*-v;ia;R20RUHGp8nM~C1Uj$8GUQq9O(H6~;1 zPRH2u^w9>hw7S0qfgH47mj>hkjh7V<3ts=~Lh3dO)z{Vp7Zhshbk~JiR-vkLCP>AP zAcLvXSKg)bG_kFH(V=>)1N#fILHWt6GPPI3k#vh&zzDd>3iNf-`MeQy`M}JtN9uHW zxt|a|*3SwZcD%W{r&{nBlxdqYjz}|>XCvDgi6TadR2tIGDFpot?gSah-=T001%5l% zlmv#tRY_)E2>dQe8CMpb{&Q2#?_tT}!hEQB-AihO%Y zY(w`LL!QlfFAuYN7UgRU_XLSaqj$E0+KNeE4*dwWq~g_BeVW5*GrWBqyUiSq!LZVr z<@ML9LZ_Tj_Ho@sE8|70lfm(O`d;{3{~%icfq9-&aoE{3*8hY|@NOho_|9L$BJuo8 zM10g0P;&0mRovkGqqswwMZ<;4>ZC$t&7pF?!>k1Cnezug;TlIhT^f1hk>erFlEIvT zxYMV*SrdV+a-qEePaJ5jjmxqpBU5HrM8eM3YGe~oq_*TNyuvg^sVFcp_*7=#==xKT z8hEej`PkK_#!Q1%&dHCKNEQM zXKwP8_-}Nd#+e0I&a4D<(rhc}_T3o$iPEbRp@$j|{gr_J-((X1m3;r#!2^FCx&Rc% zUk6TrG5G7iiN6kL`ZO-h3ryC_3MU^b@UK9Y9e^n0iFN?Sh+Vlp#Tl?z ze_7t^;5eYDeB4flbkKNJo`qenms`HJ;;?*@v9ryZ#P>Sf`x`i##<8Z6&n3#d%?{h> zB~DULPh8K^*rOVFlEmxPS^<@q&y0Z!dd~(`UJj0j_(;)p!7mwyu^@zuFDT&o$AQ{HGnXcVB0flq}^)^hJ9s__o?Dd%ACJ^v>6)w7i&?Dy~x3$qC-u9Ehpy!Zx1%1&Ag3ASA4vXi0&px1p)pGRw;1E3e)fKC7rshlV+83ENh>f368wDQBC zTBdAgb$Z(gHn=ZCOCPsdZ{N{vTQT@9N}n_E$R%Gz9uHl=o@H29-+;3XI+Ix&cUse} zN_zVwQT$#aTuHB~w(R`mI!Nt*EmTJL=m1HacWKBunB6$I=%Qsisu}{uPVbU~W;*b? z6_kS$OeO#?))Z%y>5JMInzdMx$Xv8jPW@hF9PSV;nEOV~HO>!OMtzkTm>a0aw|(4j zmerBh84C(4SXBC+BtfA#lv(K1fd4sGY>jX3l3P-xKqx1~AjQUW0rg~2+EyvNzUzX~Ebxs*J^wj6kOp|6N&$37`u&5Q> zU1sbijybA2*P7er8wP`}gyv1ow~h^@0sXQcK&7S2TZdz$`~QZ)6gjSLS$N68DBIP* zy`#b5_Di~)#XH;2+SHU!kt&NlOUyD9jX(MFbNPgU