From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on gnuweeb.org X-Spam-Level: X-Spam-Status: No, score=-1.2 required=5.0 tests=ALL_TRUSTED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.6 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=gnuweeb.org; s=default; t=1682120526; bh=ViNsOWMQ3YXosQzUXcHoPwgSJQZTZ0UbJwIAeMDbW2s=; h=References:In-Reply-To:From:Date:Subject:To:Cc; b=fhKeH688zmOb3JCRiCILZ+lOhkauaqF27SsgFOS+0ZSIxqz9zRB4phBW31PfGYBlM TLJrnhU8/+Y6tOfOr/J136AoC62ppPub4vKIUZx6C6z+IoHb4wu3WMlX8RcOZlWJTz QP+gwA0DO5wp2Eaip7cFx3MldKHsU0oNUULId+83nekGy6ci6TLsgUg9f9M5NWC2f4 +7IsD0X897AnnVJZ0GAmU5Pb/Zk4h5Hsy1ulCWIqKZ/ZlpxnT0J2itdAefDihnf34x 7IrtKAhO/HyWaxhXnJx/ZAN6nbOT+F/8nTaRLOcgxpicJaFn8iYwpYzYzuiSQu519l t9Z6IeZfiBknw== Received: from mail-lj1-f174.google.com (mail-lj1-f174.google.com [209.85.208.174]) by gnuweeb.org (Postfix) with ESMTPSA id 547C4245698 for ; Sat, 22 Apr 2023 06:42:06 +0700 (WIB) Received: by mail-lj1-f174.google.com with SMTP id 38308e7fff4ca-2a8c30ac7e3so20314201fa.1 for ; Fri, 21 Apr 2023 16:42:06 -0700 (PDT) X-Gm-Message-State: AAQBX9cZQI7xQQbmPUBDDqJLfE6bzGVIAdS6moSF+715CkMOQbvb0Lzr 69nzSS7SKNZ2zZr7RIERAMnCbRSuutbsXSUd+CA= X-Google-Smtp-Source: AKy350YkqbCrfeHIWHFr9yKCQsCdW3tLmqzYVJK80unoNsSIZ1LpjG9cO2PlBeTJmD8P87rx/PcXWS5TRbuEBGmxME4= X-Received: by 2002:a2e:869a:0:b0:2a8:c1a8:7760 with SMTP id l26-20020a2e869a000000b002a8c1a87760mr1106832lji.30.1682120524160; Fri, 21 Apr 2023 16:42:04 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: Alviro Iskandar Setiawan Date: Sat, 22 Apr 2023 06:41:52 +0700 X-Gmail-Original-Message-ID: Message-ID: Subject: Re: CF ticketing system is still vulnerable To: Ammar Faizi Cc: Michael William Jonathan , "GNU/Weeb Mailing List" Content-Type: multipart/mixed; boundary="0000000000005019dd05f9e13442" List-Id: --0000000000005019dd05f9e13442 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Sat, Apr 22, 2023 at 6:21=E2=80=AFAM Ammar Faizi wrote: > On Fri, Apr 21, 2023 at 7:45=E2=80=AFAM Ammar Faizi wrote: > > On Fri, Apr 21, 2023 at 7:42=E2=80=AFAM Alviro Iskandar Setiawan wrote: > > > POC and sample attached. > > > > > > gcc -Wall -Wextra -O2 -ggdb3 gwcfd2.c -o gwcfd2 -lcurl -ljson-c -lpth= read; > > > ./gwcfd2; > > > > I'll address this ASAP. > > I sent your POC and sample to the KiosTix people yesterday. At first, > they didn't acknowledge the leak because they thought you leaked the > old tickets. Didn't they read the dump.txt file I sent? It looks new to me... Or maybe I am the one who ate their sweet honeypot this time? > Looking at their response, they will need a few days to mull things > over before they fix the vuln. Plus, they will probably have > difficulty grasping what your crazy multithreaded POC is actually > doing. So let's give them more time; they're web developers, not > super-savants. Imagine what will happen if someone else outside GNU/Weeb finds the vuln and posts it publicly. Hope they don't blame us in case that happens. -- Viro --0000000000005019dd05f9e13442 Content-Type: text/plain; charset="US-ASCII"; name="endpoints.txt.gpg.asc" Content-Disposition: attachment; filename="endpoints.txt.gpg.asc" Content-Transfer-Encoding: base64 Content-ID: X-Attachment-Id: f_lgr6znwa0 LS0tLS1CRUdJTiBQR1AgTUVTU0FHRS0tLS0tCgpoUUVNQS9QZzhJS1ArYkJPQVFmL2ZzZElkZytm a2tPaDRIVmZLRWJFVkpsUC94STdFbmJPaDZTM1FZUXVpYWJICjVBVWF3cFcvV2ZNbHVuODRBL0dp RU44SExGT3ErbmFIcFFpSEdEZTNlTFpvQWNTaVI0RFlCU29FWG44aVRuU2IKemM0Q1VDWGZsS1Nz YllSbXgycXUyMHVoY3NMYXNOdmlEd3ByKzFibXAwclcydHQxdHg3cWtmdWdKdnUvZS9PaApNQTZG VkY0MGRjLzZoWjhRMW9Ma2FublorUDR3ZW0wbjlJMjBnUkd3VEg0cEFVNE9jODRSd2JkTVBGUGhm WFloCi91Z1lVSi85QS9GdVZsa2ZoN29pMzhzSU40Nnk5em1JM1Fxc0VwQmhudnUyYXIwSVk1c1da Ukh3MWFKVTgyQ00KS28vSnlidjg4SVdnTnp4MW5aMm9XMU9NUG1XQndvb0NsMVhYbnVwdUo5THRB VEZMTjN4bGErdnN2Z3ZXb2M4aAovYllXTE42M3dkN0gzekQvc09xcWszejZ2eXRrM1hOSll0TDBV aU1vbDZtOWFsWEFSb1puUFNCT2RHNWFMSDVWCk9lZklCcXo3YVJCa0xKOFBoeElUdUxzSWVrcyto OC9nNVJvbmFhWEtzRUNVczN0S09ZQU1HRkJSVFk1OTVQazAKQlZlUTJWS3hhbGw4VVNkNHIzbkFL czV3WXhudTFWQjJlcVRWUHB6U0xQTU95OGxTQyt2Nm5oYUhoSzYyYlV4QQoxQzRjQ3h1NjhIZURo RTg2aElYdGwwdkJGTUZtZk83YVZZQW9TNExLVWk4SUNYTlBvajhaNy9yOWJYaUpsNWwzCm9taGhG ellYYkZSRG0wUmk4NFBuTlRjUC8zd1FjWUpGTmczZ0hUUzlGTGxiRUdZQ3dHQnJkbXkwdkNaY2wz N3MKKzc2V0o4SHdReHc1RW8vYmt4Y1lXRzJFWFpxUHZ2TEVqbEI1SUkwcWlkclIyOWJtcmltY2c2 OFVpZFFNWFhoVQo3eVVkb3RmRnVKWFcwdGtZN3l1MHplWE8yUEdFOEpKUnBjVWxsSTJSamxxM1lE THNvekJpQjN0SXlvNGR6NDdqCjQwNVgrVVJIM3Z0WlRUZHZTRFFOYnQvOE9sUTl6MFppTDlmQzJo VWxDY2swYjJZbldsbVlIN3JhOTZLdVNLM3cKZm11MUFIQTNZMU9MRGpvRlpNZWJjczg1a3FGQ2Mz SHFldm5GNC96RjJqaG1OcXEra0pqc2ZsNytHai8xSEhQbgpuMG5FUEh0YUNPay8vbU5TMGxBMjU3 LzhEK05iV2VJV0N6NVpWYytzSXNwc0VKYnY0M0cwdGZtT3cyeDJNQ1JMCmtWMWp2QWUxOTNTS0Zo L3ZSbTN3dVRvbzZxcjVWYVVDSHdKN3Z6dG1JQ1BYT0xBYjVnUy9PYkFUVlRSWTcrNDUKNW54UkJ0 R09EbWFZanpIUkd6N09KZ1cvNzd0S3A5R3ZvQlpGM2QvKzhHN0VaQUNhcUpUZ20wQWJUQ2xYSEY1 VwpQVjE0VGVMdUg4ZzdWU2s1dm9MOVdtSFRtUGdFbFN5TFBMUzdrTlR3UjQvSlJpaXgyNTQwV01V N1FXa1FFMFRtCkdYbG01MVlnTm1LUldBQlNkdkI5S2ZyUmlzVWg3YXNPRzlPWEN5d3VxQnFvZG5S TktEZHYxcVpzTllMbmk4dlMKYU01WmtPandzYk5YVGM4MW5nNkM0bUNMQnJ4ZWdEWlVLczVwZVdR Wmw5a3cwOW5EQjE1SDRhdHhHaDluZFF1UAo0YVZFcmEvdUJsTzJVTE1lbHAwYTZRWmdtWUZnTzFp Qm8zNlRmNlhmQ05zYXVicXVGdys3LzJMMWxCOHBYRDdSCjVtbVJ0dE5naFBjekJxTy81a1RvOHp3 RVlFNi9JQ0FoQzk1dTlOVUFiTnEwY2xjUzlVVzdSekladTAxSlJnV3EKNlA5QURiRzZzMW9rNG90 ZEJFRGJVSEV4cGljaTRia005MUJGd3JLRFJRek1nVkdVYjYrNXVqbXpoandrOFRTTgpUWUJFWURv Mmx0QkVPVFQrT29hSEVhT0gzR3lFOVJTTi9UeHdpbFNrMzNxZU14WWpiNk1reFUwdytkOGcweTN5 CmhWUHM0aFBRZFl2LytzaTVlRWsvYk1IbFlLUFdaVVc4ZGxERDg3UHVTVXpIQllHZjdtZGlremx5 M0JsejE5RU4KN21qZTBvYTZKbmlRbFRadGVXTzJhcU1PaVgvVGZFOWtaQ0NrTUhlTlZQdVExeXho dVNYMkwyUko1ZnBxVTNyQgowdkcwUi9uME9LMEY4S0U5Ui9wS1VsZlBtbExVd2FMNDNlT0lMSkNi RDVpbDVoSEJuTzRhWE5ncFZZaXBUUVl3CmNTVEx5UndtbFFXdTBDMkdobStIbXdReU11eVRtZXRh dDF6RmRCZVFjaHROMDhybHpjVUg3bTJkMVRGZUZlVkIKSFZmSm5UY1Fub0lsNjlDRmVJSFNNMERa YlNWRFFUZlVCbFg4Njgra25WcFV3THJCMGxrcTE0T0hITW1MSmVsRwpkOERvVDVZdk1Ed0FXWTcr UERiUmhQaDRuZ2VRUUFGeHBEWXJSSjlxcWgrcytzNWVyVi9IR3U4aXpmRExRcWFrCk1RQkFxeERY MjNZUTFrNVh1MWFrQ25LWnRZTEVoVVR0SHptQUVHUCtJK0t3K0RKekl0aUMwV1o2R2dqYUsvR0oK ZGlGTTZ5c0VyeThCUlhSZW1zVVB1aDU2blZLNUwrVzZ5a0xPdVZwTWxpcGZMRVNoSmtrQXFIV1Zx RFY3a0R4RgpjRFNlbTR1N0ZJWUoyYVZudFMyR1FDdVlLQU0reDFEb2wxVWs5aVlSSnZoaWdJclBi NEVxRnh1SFhsZ1dhaHA3CkZvaEhzZ3ZINGJXTnM0emZ6YjhXU3Y5OHhiT28ySi9qVnY0Sjg5QXRC U3RuMmFVV1o2SHpPK0V5WW0xRU5NMDYKbzM4SEtNdVBhRnc1TnNVMk1TVktoMjNRNi9HQ0F4ZGdx QklJWXVVcnBYVTk0ZGhQUEpIeWtTVUZ1YkZlSEhQOQplTkVZdndzVFpNVW1RUmM2RHJtWEtkbG0z V2U4OXVvdnFXVHBBNHJ6WE9kTWxGcW5KTzFOVGZ5THl1cm5ZMXloCjVBRE1DZlljdVQzenJIcTAy ZVg2RDBBQXJSZS9qVDhnbmNQb2Jza2JZcHRQNUM2UlExZ0RWVjZHdHpweFRBd0oKZXppOXFnSUhW eXZyYXZNY21VQkIvaTZLQmxuSjJWSUsrekZ0WWh1SDIvNnhZUzJSd2kveC9hMjgzTkFodmtrLwoz NzZ3R3Btc01qT0NLbngxMk95MTYxNlBMcENhaFdWNUlKNlhPY3MxcmduR210VHI4VVZPTW94Q2Za MmI2TERuCmxFZXFXYmZCSkFmVDE3VFpvZ3ZSekt6aUdtU0paektTWmlxSjRQandNVjV2WWZuOWdu OWozOWRsbGd2VlNqSGYKTUc5Q1M1RFFuV0dFaHZCTDZVcW9ib1E3S3UyMmc3MTZuVmdpdWkrMldl Qy9ocmF4MXZHdXBHZlg0RkRDalc1cwpTTTJUYVBndkxWeTBOb1ZFOXAyTmxXM1JFWGtmOHFwU0dr eHpSMCtxeUNNS0ZPeDZ5eC9ua240MnNSSE05czNEClZtSGErZVJRREVZWXh3U1krMXBtZkNFTjM3 ai81MlR1ZFlWZkVPN0xUYVRZdFp5bDVYL05UMVdVcHErYS9jL1IKR3JjUkJ3NHhZV3c1SnBuMDdP Y0NqVURxai9iN3AwcmRwd2tSU3NLWFlLWWdzeTBVdXhjK29ucFdSSmxmQzlicQpsaHY2T1IxUWJW MExpMUQvU1hlZksxSURUdDhoUGgwZy9Dc0JydURiYlgySmcyaHBPVW4wcXBmR0tGTEI1VzM0CjZi bzloazEzeVhxSHRuZStoVG5xYlBKQVZOMnFSN05ycHFIc0ZDU2FCaGtydzNwMnZvVWpSTHU2QXQ1 RUlDTmEKNU5uU1VyRmRtdkpBVU9YUHFvT0c0aExhWTArNUk2U0M5T3NnUUcrbWpVVGFmTjBQaVdt c2F0TnpCbiszZUtnRApqTVI0Zk5ocU5sZ3ZLdHZ1VHc0dGU3SlU3SVd0TUxkMDhkTUxaOTdKSjBZ OUR4Vmpha1U2U0RabGhaVTdBSEhoCm1nczIyZlF4KzRJb2QzRWNIUVJybFhpVSt0czVrUWM4VndM VkZKcWZPcEVwWjlDK3d2TktuQzYxR25KakQvUzgKSU9UMmw5VVlpQ2ZydnptQStVS2tFVnVhb1hL VzlRWnlmUDFaNlQrRmx5eENTWHZRNFZKNk1RRjQvLzNhdkZnMQo0TWhWOStLMlE1VHllRU0yUGpZ N3AzS2NYZlhKdVJFOTFqWG9ySG1iZ1FuelhZdmVZRGRFZ1NjWEtVY25VOTRlClJaMFpPeFNFZ0cx bGM5TC9WeCs2MTV6NVcvbERaSGVtVGFxcmcxN3BHRXBiL3lKVjVEdEJPanA2a0poVi9xYmYKNFBp QXB4bnFRTW9tR0V2NEJnRElzeTl6YTRZRTRYRTdXN2x1QlVocnpsd1lLbnNqckphZ2ZJZlVIUW82 YXhwOQo2T3hMRkhRcmFWYVB5RmlWRXpUZ1Y1MkQvdmhNSVpRM1VkdUhtZ2huYnF0V09DWTR5QWhr OVJ3LzREOVpCNm9OCnVKb2Y1S043bHVoVTVra2VvMXpHTW4yZU04dlpTUmdBR1dMVHFDYkNxZE5W YWdIMVdQQ2JETXM2ZW1UTExQc0kKUDhqb1JoYm9jcEd1UTFjMkMzQzdTd0syZ2toY1l3WFo3T1J2 OGpuMVlnRHZMcTduUEt5QUJiK0ROOEh2SG8zWgorNStJRjlrMi9qTkFkT1RVRHB0ZzlYZ0FFcmVa aEFKUW9qWWc5QTBiQ2tJTDNpL0d0Q2lqMjZmVisvWmRYdkorCjAvKzNidWRSRUpVRzRIdEVQOGlF YkhaSTNiSyt2S3dWemRMUVQ0a1hlVmNza0QwZXJZM041TXdHbzZsUEplVEwKVEo0ZGR3OUFhdTZq R2wwc3Q4a1RISk0rZ25OSGxZVUU3djNESTNnNUY3ajRLeFVWLzB6MUFpcEhFUTQxQ25WTgpCRllx d2gydjBtSVJjT2RQUWQ2TjRZM3RQYURlYTRydkoxZ0dpbG90RVorcEtrQzVNQUVRSkFOSk1FNS9R TWdSCko0d2ZiWVdzQmsxRExJYi80U0IrS2F3TmxVdUswZXhzRnZZZm8xTEw5UFVyeUJRRXlVdDdD WUVIZnFqUVFlTksKblh4UkRvZWJxOTV5TldmVHRGWGM1NFhmanAxRTNLL2NlQ2graVhFQVpibk5x d1djOTBtUXNST0J1ZGNWWUZxNgo2ZFF4ekFEMmxBdzduTVptcTh1bWY1MkUyYlZkb0pENGpXdkp4 VG9rTElIOHRjbUcxZ1pwSXBZYUNvZS9CZkVJCmdpNkpKcG95UTAyMzRhRVdmTmQwN0lOMUF3ZGxx NGtnUXI2OVBqRXM0ZElsVzdqNlJ4aGh3QWcwblQ4VzVtakkKUnNaSE1jc1FqUDhpcjJ6SUhLVnhh NmtIQU9kM1FZVkNxeFlLUVI1cW1xK3M4Sm8rUDNRL25pMG8zcitxSlVvKwo1MWs1dmsrTTdpeG9T cmorTUdjZmM5NVpza09EMWlzSXdUUEJnMWltbDZNVk8renpWN2puS09xR092Z0pSSk9ICjByK0tv SE1XWjZySXVxVWlMcmFTbU5lWWZqOTgxNG5lMmpMUGpSelhIZXV2WURjRDZVVkJBUWV5TlowR1g2 eTkKWjZlaUVrUGF4UktMVXg3OVc5Q2FNcmNNYjBhNkFQZ3YvSWhoOXlKVjhZRDUvdy8vOHhuaHdi cFNuNU1tU2VUTApoQlJUakw1Z21XbDBabEtSdmplbXhoVUxKczdxYnErd0N1UjVpZzlWZERpd1Zw dlArdldOYmJqYlA4cGU5elhVCkkxSGMvSHBUamhQK0lKOUY5SWZIaFJjUUppQnJuR0tMSktCWW9m NDVpNzRYRXdIR0JvTDlGTGwyUXc2VmY1STEKVFB0bXZZd2l0eW9xK0JsK3Q3VG5IS2toOHpLZDhZ MGNSdXBYM0gzdjA3aER0dkMvd2Y5K1pZNTRhbGhOYndzUQpJaXE4WlBuWmtkaTVRYlFsVmh5dU1U dE9jR2FjamlRRHA2bUV2UFcrSXk4UGdmSi8rMmp4U2FxeDJJMHJQc0Q2Cjh6aXYxbmN1RnFWWG13 Wk8zT1FhVm9nbFRXc3NRNlhRQmljZy9vVVZFbTdiaEsySzVCU2FhYVRSSVhYV1lIL3EKRXl4T2Jp TkJrNG96OGl0b0phTDBFL0dCaGZiWG1aNnowWmkxNG9GM0hjdmFQcVoydWU2UTRjeit2T3B5eXls YgprN29IU21kVk8vQlo1YThlOGFqeUtRaEc1eVBFU3FxZTROcGY2U0t6ZEtiaDdtOGJhOGZPOU5w VDhUTkNJWW1RCnZoanVHRHQ4a2c2QkhEM1V3TTE4RStZWnZvZDlFQ212RjluajhncUluM3l3QnhS S08vTXpzSmRBaXZWR2V4dTcKditCOFhzSlBhcmRSdUxVVUhETmd6a1JhVHpZV2lka0lnY0NlVFdu Q09sb0owSVR1VkdaK0NoRHhzbDh3elpFVApxWmhkc1ZsaHpyWFl3NzVRMU9odi9tSUtqcG1teFlj SU8wM3ZTUFJEWWxkc1dod2RwdEdZNHJVb3J2b3grWGVVCk02TmlxS0R3dlQ1bjZVME5YU0MvdVNW eWdpSlE1bTNDN1d0UEdIcDJiNFdnZnZEYUtnWFpWQnRubTNmZTY5eXQKQWJ1TUdLN2NSNTVNZTc1 bVRLQUJYUjJmd0F0dWRDeXJidVJWdDlKb0U3RVBMNGtxMVkyRm9tdm1FVnhqQjR4VApieG52OGU4 SU5DWTVxbTJDWmNGRzBZckR5cUFBZ2o0THI5a2FNL3BvQmQ3dXBkUk4ybW9KVGRKNjczVXdFejZu Ck9Zd3FRRjRoaHNmTm1ocWVoamNKeDJVdm9tbklJekY1VDlrVVlYVFYyVWVQV3RjV04wRUJXUmpw emNxR2JBNVkKOG9pVmF4MEJ0VzVpWmQzR1c5WEgwYUlnMkhic2FjY1JrUm9YS203QjhjRjFBbjdj OFBLNFJEcUJtQk9HQ2R0ZApmT1I2bWt3aTZFRmZUcDQ2N252YjF0c01hWjM0NXpLZ2RxK0dyVEdP MUtqVmxTbnprWm5IYncvOUhDSGlTd0pWCjE3dGRXcGpsUjM3bkEycVc4Tm5hZG9RWklTWUVyK2NR QXl2L3R6V01oNTlVYmQ5MU12Mm5MS3A0UWN5L1M0UEQKMzQwRml0RlZoRGNjSWtkYXhzMjFQS1Vm d1dQNFdPTmxXVlRBOUVyR3RZVVRoZnkrbldJKzFQQnN2Z1cxOHVvTwowZjlKTk5iejVWbk80bjMx MnZXUVBIMjlINmluRWF2VzhxRVlzcHpodVllc3lsQzU3Vy80eGRGYzhqWEdDTzI3CkYxckF4RWlU V3RrY090QlFNZjhueHYxdEgrbEVTNEdjRnAvd25JbU50VkRBaDJLSUZ3MVkycC94ZjcyWGw3eDIK RVFxQlJKR3NpV0pHTFJ1UWJoZ1JVYTJleHJjMW4zMCsvUFE0bTBKNDZRMS9XeEZKS1hPWHUxa2xx bndZOWZZZwpjblNNNWViUExSWUFaTS9xa1RNU2VyWnF5ZDlkSnA5MEFGblVXYjV2Ry9mYkVJRENr d2tBb1RCM2Ixc0hvNWhHCkZjbmtXWUxWbnB3NUxuOFUyWnBPM3AyVUtNVTB4TXc2NjdEeGx6d0FE ZEI0QmoxN1VwaDFnbnA1TXJBbkZQeEsKek10Qy9wQU9YcmczWDROdnRSY3FqS3grSlZnU2htOUNS dFVlVDUvbHkwK0poT1ZVODFocnlBMmxsME0rZlpIagpTN2s0RWlKcHk4dzBMbmtweDV2amZwc2JP VVlxbzlDU01SUDgzOHRpYjRKTlVhSnVDOTBzbVVuQ3pXR1ZtYStmCnBlODNSNWtSQmt1S04wc0Vz cytxMHc3aEZBVFdtSHVmRGI3MGtIb3YxOWpuelNiK1Zzd3BXZ0NZYXdmRkE2cHYKcmJ6dStUTTY5 YlBYTlByWElKT0EzL0g3bE9sQXBXK21xWVRwVU1aTStpc2hUMGFEMUJUNDd3ZnFnVEU1VXlWRgph TlFVNlJuWW1OaWYwWDZwYWZBQzUvUHpvaGNER0xqMm1mUm1XNUloeHlkWVVpcjdlOHBHb2FqZnRm NlVnNzhqCkFtajBNQ3NuanBwVDh3bEhyYlFJQXdOOUlXOVdlZjY5QTF0YVNuSkIyZzV4UTFJUGRq Qzcwc0QyOElUaW12ZjkKQXVYSGt6RTllbFRGeUI2VkUzSjFXeEhiaVBuTFhjZUxHUnV1WXFWc2xv SjRxa2xvelU0dEpZT2Z0UkJVUHkvNApvTndMaU9sbU01L0kxOTZHbU5FWlRwbmhRZTlBMUNNc1RH cXEyMmovdVQvbzFVMGF1VkhDUndkenRDUHJqSm5sClZNVlhRcTRGdDViUGlpbzJQZ1gzTVlpWm9E VUtLWTl4MkdCZXNDTFg3TEtGaGNWY2M2ODlpOGxaVWpOOTBGa1UKWW8yQTVOUW0vRzJleVBLRlpz ZkxTVlBtQWpYN2svL1lCK2tsclJqSWJzVkhOY25mU1huTVlXb0VaRVhkY3kxbwprMzNYaWRzSE1z cW8zclEzc3NxaE15SzNPbjR5QUh3a3B3ZzhJem55Nnh6eGdrMUlCYms5eWZQcDVtWCt4S05XCmth NXZ3UzFOWmk4MWRHM1ovT293bHJBWkpneExaOVNocVdlRVlHUVZsb0txVWNFZ1RPbVFRdi92NEp1 Mm9GVEcKbm91MGpvZGhBTElqU1VueDRBbkk3L2EydXU1Tlk5WmJ1TkdQRmRYaXFtQU5XNEthVkFo SFhrMTRmclE0NHhVOApxRnJBWFZNemZ6T0tzWmlGUFhHNWFZajgrMExHZWNqZ3VvWE9LUVpiV2Zu NGREc3JLMFl3bFAxNWNyaDAyckdwCitkRW9keHdjb0xybENkUEIycHVtNkRhTTRZckROTHpGaFNG Szdtek9HNkZKRGFpc2IrdW9uTy92RDZoclVBVzgKdW9BYzdsbzdkaTRaRkgxVXkzYnZUeVQwd05K MEpZdW9LMitsSHVTS1lXb01BWjg0bzlFRlEzcVJ0SXhLTzFnbQoyNVVmNmJBNm1KMmoyWGJhalBo aDB6U3dNYjEzTFFlS2dHVjhTV2xEZ0pqQi9zYzhVQ241R0E5Nm9kWWtENTFrCjV6UmdwZUlnNGpz RHY2R09mTGhHMUtRK0hnQ3dxTmYrZEE1ck1pTVhJSlkxY1Y1S1o0dVZ0NkF2QlYrODRMS3cKQit6 TmhqVEZSSGxoZHRCMmxoKzFTNXZFN0VxeFo2T2J3TEFlTEVqZVVkWGlvZUo0RGphajdMNG5zQUQ0 bUhIVwpnSmdpQVpObHRzckszM0llYVdJWjFPTFNINFFxbW1KNGlqS1N5L1pPU28xeUNUUytvekx4 RDVlbkNYa3UxUW1wCjVzeGc0UTJBcFFURUZBa0Y4SDQvNElMZno4SFR4OGF5UVcxNnFuekdMMDd0 RElMNkNXWFRrV1k0bHNWYkJKWjAKMXkwWGY0cnFTV2xackVSMi80ZFQ3VUpTMDM1aGlIbEU5R2g0 Z25ydndvdDM5YTd2all2d0E1ME4raDFGZk9ZZQo1U2MyT055eVo1b3BMRjh3c3V4T0VoSVNSbXh4 aGp6MWpraURxTjh5VThHazlHSVo0cFQxUnpxU0RmSXN5QnNvCk85SFJrb3dxQ0R4Z1g4TDl1VWk3 eW1nbFJDVmRKTDBGL3gweUovQlhjSzNZYnhkTVNSVFljK0NaZkxHWGhOaTkKcm4xWUNIRVlQRzRl MFRaR082NUpJSld4bkVOeFdyNDhwWjlqR29FUVNPb3lHc2JUMVNuWXEwV3FDNEI4aVFnaApaTUhJ R0haTzM5SVJEM0xWZ2dZSDY3SzRLQ1Q4VE1aRXh3a05TVXd6UERKVDRYQVNXRGw5L3lFS2ZkK0xY NUNMCkRuem1sNjB4cDdUK1RtSkdVRGhqTGFYelV6cXBmaExwdjR4Y3AvRU8zUFZjbjg3YmVmc0My VVFzOC9YMy9ic2QKNisvQmlqNWlSaEZoZVhzSlZCeVhtbWZMTDlNQ3R4MkE4NEV1VUpyT3E3WjdX M3Z1VCtTL2xhMHpkMzZlMEordgpRTHp4QVhBb2hIRThOaUhUV083bFFSalFacUpkY0RxUWk4YTlB UWt6dkFaR0pYcEpVVkdZWktvUVNuUVVIMkZsCml3SnFHSEJXanlqNWc0dnhZM3R5WFZ5d1dFay9s M0ZhNzh4cXFUcHFwcHpVZzAveS9UMEZXS2p5T0hlVmh3UWIKRFQ4ZXdHMlZsNy9lTGMyakhqVGlZ SlUwaWVYNmduOGczM3RPcURpcVprQ2gyb0doNnVZSVRHN3dGeUszbDZkTwpUMEVnUWxaMU1TWHpk MEErZDVsZVRJN0E3SE96ZitHbE5KODJBdks1MUNxUHRsc3FnakFJK2NxZDhZdUpraHdCCnhTUDRt STJwOGU5S3hpdXVqZm5VTlRqWUFBYVZ0a0VuWmtySjh6YUt5bFVzeDZwbytkWTNmU2tHLzNVYVl3 Vk4KalR4b08wNkNIbUg1ZlNEVmZDZzR2ZzdqaFNBMGxwcVlWNGJwUDEycVRiSjNaKzNqSkZBRXpY UEtSY3dHVC9PWgpxUGFvMURUbCt5a2NOczFFRXVnVWNJREVUWEdqMFpxYlpwVzdjVURHa0VuVVY1 S3NoVUUwRzRUbVphRGlqcUVjCnZuVUd5MWp3djhHVk1FL2xIaXJ2WW1zWGhROEpWcUp0cTB0TWls aGtSOXVuM2FpVVpkWmlrcnI4NkJFNGVUclcKUjVmRVExU2N3b2lpRmwvd2lmUDR5T3BjYkxpeU1a bXF6SDNBNWtxc3R6cjN3OHd3bkVWMUJNSHU3ME5WT2R1TApsMkxtamEzOUFwOU1WNHluRHRBYktt T1pFMzQwQS9NUzkyRERvbFJ6UStPbFZQRndqc2RIeUorZFpxZlNBYWVhCmVQZlpETHd3VyswYit2 ZFpmTFYraGlLVmdERitjWVpJWVdzR2granBRRFFSZ0IxUTI3OHR0aXc3cmlaY1MyNjgKR3ZHMFFn SHd3SmphZURsNk01ZXhUL3dNOHFsRHdxV3JZSTM3YjhEVklXcUE3TTJmNTN3T3hiK3ByeEY2WnJ2 cgpIS2NPQTJybkJSWmppT29EV2hTQnZTNDNaRWRJSHFadzVIYm9IU3BkeGpINEdLRFlGN2lIQXBS SmdLZm9LODFnCnVTK05yOWV5dkdJc2JxZFhJTDJvSGJ6WDEreGxNd3VvV1VSbDFlNUtta2tmRk10 eTZwcDNwY01LdG91Z3dOMUoKczRST1FJMG04bGRJeDlHbEJiOE9vZEZDYzZxY2tHZmdQczhMNCtn ejAyNDdtbU5iWUhkeDFRWmNQOUpUQmpwbgozWFVpS0NvdGRZN3pvOHhZdTdIYTMzcmI0dTdhY0Vu cHFuQmZVM05rVmQ1QnBIakxjOW1OZHhVTEUyakFjdEN1CnRKdzBUMjdDOVpCMEhOOWRvdzFwSnQ5 MW1IYkFaWENDMWc2UHpuN2p0UXREUEowZmY0OVU1T051QmRSV1V4b1cKTVJNcXlOYjNHMURvTEpx NDhlR092YVVkUVpjZnhwWlpleVlaUG9TWHBTZ25MempXSHcwRE0xRkxwZFhDam5aUApBZGJUTnpW QmVveEtYRXlKY3NMM2Z4dzZ2Wm80Qnp4RHcyZi8zekQyeEFyVlZDZ2g2dWxkdlVJQlBpdDVFY2dq ClZHRmozdGlxc3o0NlVyMFRvazZLUUdyUG5sQ2psVUs0WHJpNkdzUmtpWkxZbDBLM0w0MEdMSDl2 SCtDTnVFb3UKTDE0dWY0ZllFak9SQkxFWWJSQ0R2M2Iydnk2cVkwVFFNNmZuMlNzSytKQXl4bVgw YTdtYnUwa05PQjhFVEtTbwpoTi9nMU9rUXZGbk93TVN6Qk1MTncrQjZxRzJmQ09kS1hpV1NDZ3pI M2hIOTFpekpuc3RTU0h5dWI0SHErRCsyCmRuRzczSDAyemFlcFJoT3lJTkFJV25MSXJ1Skw1Q25i U09oSWRSYS93Mlo3MVpoZzZSMGVBSnNGK2V0dEtucDAKbFAvSE92SG1oWnFWRlZCeVJxemd1bHla bUpwNjIvNGw1QnE5TThvKzhYdktxWEo3SGN1K3ZsSEttU20xUy9BSQpxTkpFcEZFVi9vVVJ5djYy R0Zub0xST2FjTkNlWHdaYUhWb2NMMTUvTENOMkN6ME43MUs4NSt4TXhwbm8zM0tMCmppTVBFVVBs TkxWY3k5VXlaRGZPMlRva2t2NXQzYmFDaU1tenNVK2dLeFY4R2N0b3VZemo0OWJNbGJDRWNRTC8K cVRRNTVVVnBGVEtpMll4UFoxRkkyQi85K1lXQXJGeEp1RFEvbUpxL0FGektmUzJYQitjbDVpZVdP VjFpVHFkUgo0WkxjVVJBdEpqTHFLMlJoVXNtcFBHc2lqM2RoZ1prcGlLM1BYRVJYOGNMRGxObjVs VlZNWlk4TW41K2x4N2hCClZJQUd1K0dhMlRMZEpvYlFkcStPQzV4NWdlY1RXdlhTajFYbjZPR2RZ VEp1Umh4azhtRE0zTVhRbjgwTGQ1RzcKNmpwZ2pDNUFaWlN3S1YyZlBWQjUvNC82anc5a1RXc2Nv bGpHRWw1SnIrVklaQ2thWWdENnNxVnI5RDE5d0dYbgpRRDFzbkdWaEVUajI3TndkM204MjhZUDJp cGVLYkhWKzE3QXlIQ1phcW5nTkVNOGE2OFBIS0JUL3ZMd2pZV0FsCmMxZi9FWGpWbW50cVNxdVls cUNubkdCTWRHdUJjcVliTjRCT3JmeTNaSittNkFxSXZVbVJmRkFEZkR6L2gxYkkKTFdUdXo5UzE3 YVlPUVN6QWhtQisyTWErOG8wU253Z21UR0x0L1RHeHBMZzJMcEdUbGw1bkNJQ1ZSQ0JwRU5kdAph cEVGYjNJUm9YS2tiaUc1ZWxvZXM2MHIvYkM0OUxhZzJ5RUgyc09zMm93QkVEUEIzN24wRmpFTWRZ MWVMaldGCmNqcVdvdFh2NnpYcUp1NU5KaE5FTWxRWE8zRU8rWEZLTkFpM0JzUW5wV1hSRXlEcjY1 aW5FMDBsTWNNTHpmU3kKWTdIWjUrWWprQnZ5cFRlVVprYWExQTJYKzBNL01PamcvbGNNMDB4QnU5 WE9GRUZpQjZ6RnFtbk5WMTdnYU15SwpqTEsrS2hRWU1mTHRnOU9KWndGSUYvUmRBcGVaWHMxbGlF emhZKzVHdnZLM1R1aXlZZEZwNFM2T1VsVGFQa2s0ClZDQTVOcHNVRmdTTjNKY1hJdlQrVnlXMlZI Q0piRUluclpqbVBjWndUV1NNNWR2WUowVlgwbWVNb0hxbWxEVEoKOHlOblBwU1plZTlrMVpFR3hv dmZPS1o1V1JFbFZKZ1RDN1RUaUVyakF1MGhvTVo2eURGaXdtYWhRTURGWDYrbwo1cldVb3BvV0xy Q2hZSFVjRDkwK3ZlVDlOT0RDZ21QTVJyeHc5VS9vUXEvalNKcWJ1dng2NGZtSS9kT0h5SFk1Cmdj VEJmRVRVTTkxRENVSDE0aVlydVFWYmF3aTg5aFp1Ty9MVTFoTUhLdkZLbUd4QjdOcVdOTUZNMmlC MTBDN0wKWW1mSnIwTnV5N0dhcStJaGtOYS83cHJlU2dvWTVLMTVvTzBTYm5uaWxVWHhaSWJ6bjZn S214c0VhZjZIUmRBYgpGZWl5Rk8za2NLRWN0QlpxZTVwU2kwOHhQeFl6UURQN3RoMWdJQzB5dEFH cGl4cmRYcnJNNU9zd2p1REJHRHNCCndXalBjajQ0WFZONlRWOUo0QjBGMEtvOGRDc05iQmRpclZ6 RDBxMHZoeHU0ZlNxRkIrb095Y1kwZmRMcnJyUjkKMW1nSkhLYldaZ3FUWkUwRlllQUV1QkZpU242 SjdNTmVoS1g1Wm5md0hQNTZOZVdaTUZFTHlGR3JWdUg1bkJvTwptR0dLV0FvSXJWR0NTQ3lIQVdX ZmRweVhqTUR5WmxNTE5HTk9JNldmSTV5OGxsak0zNE0zYy9PRTBPYlJZUW1jClZndGt2MjlJZStH a2hVYVlWZmNIQk1hVmhsUzFYZUpISUpMVVpXRU1mcE5SWjdrcjVFa3FkV2xsU3V5akRuTy8KMHJi em83SSt1ZVlzU3lpNVNaV0ZKN2tvT0cwb0tYR2JOWUtzOUY0eXhtWVV3SG13Z2c5bGhpMjlINGg1 Vkx1QgpvaGZTemd0RVh4TWtzVml5TWM1WXB3djh3V3VRcCtwZ1FHRkNHMWR4K2dWY212cllPdG0x dlJ0WDQ0dy9rWDNxCkUwTzdUaTBWeGdadlNNeVk1V2dENUg5ZXpRU3poYlRWOGRlb3JvQ0cyOFBS MVdNcU52UGlEZkt6OUVpWURnK0EKRWxLcFhkSm5TVWRCRFFQQ3FsbWV0bERpaXlPN1hFbUdnSmlx UkRCVWlsdURnb0c0YUQvR0RRMWNRcUp4V0g3RAprV0M2c2Y0Q2NONW9jL0pRckF1YVcva1JTSDEz SnNkTjZVWGFaQ3RyLzlvYzZyVjdzemI1VmlxbVlvRktGMzgvCkYwaDBraFFwZkordklxUXBYRVdo b2xQNGVhYWl0VURxaThlRGpLNm0wcTBVMHNNRUVFaGxvU2x5NXo4OUZvd0MKamtjdWNOOHpCc1Y2 RDVxTkd5OXdOb0ZkMWZmZXJ3bkpkM05sc1pXb014b0FvUjNUZlRVeHlvckFvcUVubjd2QQpPZkVH QTdrODQyYkN6eEsrT2lWbG5QVUlZbVFIaFJ4a05JdHJublZKODB4Mkt6VW9ZaThmUmpzdGJ3ODcx VHk2CnFFajcyMVo1ZTRJQUxRV1d4RkpWSkJSNEFFNlN2cFdlekJ6MytLR1FpbzJraXdZVWJPVkQz TTZ0WXZjSTVpNVYKcnB6cE56TmVEOHQxM0FFZk8zUmhrQ1RBY3ZyWFVrNllhK21EMVd4Smx4NFE3 ZEJ0bFo0NWxUdFgvSGl5TG43Zgo3QVQzVHhwdVRqaGVXT0duTklYZlVwZ1VQWXpIMFl2L3dSVE42 VG1TSlpJTXN6OGpFMDlJU3V4Mlp1MW9GYVo1CmVwUzlHTmxxcFZUcENQeVBCRGhGeGhHTHhVZC81 T1ZnaXdPalRhMkdFQ0xvYyszNU5LOFlnbGt1NlBzMTlacisKNEorWE9XNU82OGloRXY5aWQ3MlMx ZExDQVBGZDlHb2MyckhJU2dzVWJtamY1NndOSzBMMmRURHFGRkJyV0dLaQpDNkM2NnovbGJoM1d3 MWZCbkZkY1pLbG1zelVCRjlwWG1zaHJUSFhpRUJncXcwanlqek9RSWJMTXVUd3V4dmFQCkRvTDNI V0hZSUVGMzVwVTJYcGwxNXYyOG9iYkY5b1lxQmVKZnRlTEJ0N3pJZWxpMkRJVmtIa1orQ3BqRDBt cFAKV3Q3VGRVVUR3N0JSOXQrNXpkQzJicTBFblFHTDVhNE5uUEtEM2hUd002WUhOUUNlRUE9PQo9 RUVvcwotLS0tLUVORCBQR1AgTUVTU0FHRS0tLS0tCg== --0000000000005019dd05f9e13442--