Copy Link
Add to Bookmark
Report
Phrack Inc. Volume 07 Issue 48 File 04
==Phrack Magazine==
Volume Seven, Issue Forty-Eight, File 4 of 18
// // /\ // ====
// // //\\ // ====
==== // // \\/ ====
/\ // // \\ // /=== ====
//\\ // // // // \=\ ====
// \\/ \\ // // ===/ ====
PART II
------------------------------------------------------------------------------
+===================================+
| CONSTRUCTING AN FM BUG |
| -------------------- |
| |
| written by |
| + Obi-1 |
| * edjjs@cc.newcastle.edu.au|
| * * |
| |
| $ Written for Phrack |
| x$x if any other magazine |
| $ wishes to print this |
| x$x article they must let the |
| author know in advance |
+===================================+
INTRODUCTION
Before anything this article sole purpose is to teach everyone
out there about electronics. If you do build it use it at your own risk.
You will need a decent knowledge of electronics and how to solder some
components. So if you dont know how to build electronic kits and want a
bug you can buy one ready-made from me, just write to the e-mail address
above. Ok enough crap.. so you ask what is an FM bug, well an FM bug is
like a tiny microphone that can transmit crystal clear audio to a near
by Walkman/stereo etc. The range of the bug we are making is about 800
meters, and the battery life is about 100hrs on a normal alkaline
battery. This bug however is not to be moved while in use, so you cant
put it in your pocket and walk around. There are other bugs on the
market but this I found to be the most reliable and relatively easy to
build. The actual size of the PCB is only 2cm X 2cm! However the battery
is actually the biggest component. Some parts like the Surface Mount
resistors, air trimmer and electret microphone maybe hard to find. I
find mail-order catalogs are the best source of parts as they have a
bigger range than a store like Dick Smith. I did not actually design
this circuit, Talking Electronics did, but felt everyone out there might
like to know how to build one of these. The surface mount resistors can
be replaced with normal resistors but I recommend using the surface
mount resistors as they give more of an educational experience to this
project <puke> <puke> If you dont have a clue how to build a bug and
have no knowledge of electronics whatsoever e-mail me and you can
purchase one pre-built from me.
COMPONENT LIST
Resistors
1- 470 R surface mount
1- 10k surface mount
1- 47k surface mount
1- 68k surface mount
1- 1M surface mount
Capacitors
1- 10p disc ceramic
1- 39p disc ceramic
1- 1n disc ceramic
2- 22n disc ceramics
1- 100n monoblock (monolithic)
1- Air trimmer 2p-10p
Other
2- BC 547 transistors
1- 5 turn coil 0.5mm enameled wire
1- electret mic insert- high sensitivity
1- 9V battery snap
1- 15cm tinned copper wire
1- 30cm fine solder
1- 170cm antenna wire
NOTE: use 170cm of electrical wire for the antenna, this length will give
you maximum range, however since the antenna wire needs to be extended
when bugging the concealability might be a factor. You can shorten the
wire's length but this will shorten the range yet make it easier to
conceal. Weigh the factors and do whats right for you.
ASSEMBLY OF CIRCUIT
First familiarize yourself with the layout of the components.
Now the only polarized (parts that have to put around the right way) are
the two transistors, the battery and the microphone. All other parts can
be soldered either way around. I recommend using this order for assembly
as it is the most practical and easiest way to build the bug.
1. 5 surface mount resistors.
2. 6 capacitors.
3. 2 transistors.
4. air trimmer
5. 5-turn coil.
6. battery snap.
7. microphone.
8. antenna wire.
READING RESISTOR AND CAPACITOR VALUES
If you dont know how to read the value of a surface mount
resistor or disc ceramic capacitor read on.
Surface mount resistor: These have three numbers, with the first two
digits being multiplied by the third. The third digit represents how
many zeros after the first two. For example a surface mount resistor
with code 1-0-5 would mean that the first two digits (1-0) would be
multiplied by 5 zeros. To give the value 10 00000ohms or 1Mohm.
Capacitor: These are similar to the above but the base number is pF or
pico farads. eg a capacitor labeled 2-2-3 has the value of 22 000pF.
HOW IT WORKS
The FM bug circuit consists of two stages: an audio amplifier
and a RF oscillator stage.
1.THE AUDIO AMPLIFIER STAGE
The microphone detects audio in the form of air vibrations that
enter the hole at the end of the microphone and move the diaphragm. The
diaphragm is a thin piece of metalised plastic and is charged during
manufacture. Some of these vibrations pass down a lead which touches it
to and into a FET transistor. A FET transistor has a very high input
impedance and does not have a loading effect on the charges. The audio
then gets passed through a BC 547 transistor which amplifies the sound
around seventy times. The BC547 then passes it to the base of the
oscillator stage.
2.THE OSCILLATOR STAGE
The 47k resistor picks up the pulse from the transistor and then
turns the second or oscillator transistor ON, but the 47k resistor has a
value so that it will not turn the transistor on fully. So the feedback
pulse from the 10p capacitor turns it ON fully.
Normally a transistor is turned ON/OFF via the base, however it
can be also done by holding the base firm and differing the emitter
voltage. In the FM bug this is whats done, the 1p capacitor holds the
base firm and the 10p feedback capacitor differs the emitter voltage.
However for a capacitor to do this the emitter must have a DC voltage
that can be increased and decreased. The DC voltage is about 2V and the
base will be 0.6V higher than this so the base voltage is fixed at 2.6V
by the 1p capacitor. The voltage does not rise or fall when the
oscillator is operating only when the audio is injected into the base
via the 100n capacitor. This is how the circuit works and continues like
this at a rate of about 100 million times per second.
The oscillator is designed to operate at around 100mhz, however
this figure is dependent on a lot of factors such as the 6 turn coil,
the 10p capacitor and 470R and 47k resistors also and the figure of
operation is about 90mhz (my FM bug operated at 88.5mhz).
GETTING THE BUG READY FOR ACTION
Ok so you have built the bug now and are ready to use it. Well
first of all you will need some sort of FM radio. Alright put the bug
next to or near the radio's antenna. Turn the bug and the radio on.
Alright starting from the bottom end of the radio's FM scale. Slowly
progress your way through the FM band. Usually your bug will tend to be
around the 85-95mhz range. Once you hear a beep (because your bug is
close to the radio) or any other strange static noise stop. Alright you
might have been lucky and your bug is exactly tuned already, however in
most cases you will need to adjust your bug slightly. Using a small
screwdriver slowly turn the air trimmer, whilst doing this babble out
some words, stop turning until the echo of your voice through the radio
becomes crystal clear. Your bug is now tuned and you are ready to put it
to use.
You might have some problems with your bugs frequency being
exactly same as a radio stations. No problem, by compressing or
uncompressing the coil you can change your bugs frequency. Use the coil
method if your bug is in the middle of a few radio stations frequencies,
if you just need to move it up or down one or two mhz then use the air
trimmer.
PUTTING THE BUG TO USE
Many of you already have your ideas on how to use the bug.
Remember it might be illegal in your Country/State/city to use this bug
in the way you intend. Hey its up to you I dont mind, however I take no
responsibility if you get in trouble.
Anyway here are a few "friendly methods":
1. CHRISTMAS. Yes it will soon be that time of year again, and
this time also brings a great opportunity to discover some of those
family secrets or maybe even find out what lame presents those relatives
have brought you and save you from the disappointed face they will see
when you open it.
Okay put the bug either in the pot the tree is standing in or
fasten it to a branch relatively close to the bottom of the tree. We
place it at the bottom of the tree because the antenna needs to be
extended if we want really cool range. Okay put the bug in its position
and then unravel the wire all over the tree.
2. TV listening. Okay if you are out in the backyard whether it
because you want to, or there is some chore that needs to be done. You
can listen to a favorite TV show, or a basketball game or such. I know
your saying why not listen to the radio, well you now have a choice of
listening to a radio station or one of the 10000000 TV channels your
state offers you.
Set the bug up about 3-5m away from the TV, then adjust the TV
volume so that it is just right to hear on your radio.
3. Bug-a-friend. Okay you can bug your friend to see what he/she
is up to. Okay you will need to know where your friend goes and then
previously go there and set up the bug and your listening point. Make
sure that you set up a place where conversation happens, it is very
boring listening to insects and such.
Conceal the bug anywhere within a 3-5m radius of where your
friend talks and stuff. Now conceal yourself and then sit back and
listen.
Now there are a few of the more "legally friendly" methods,
there are thousands more not-so-friendly and even malicious
methods <Oooooooo> that I will leave up to your imagination.
CONCLUSION
I hope the information contained can help you successfully build a bug,
and then good luck using it. If you have trouble just e-mail me. If you
can not get hold of some of the components, you can order them through
me. Also if you want a bug, but dont have the electronic skill to do it,
you can buy pre-built bugs through me.. just e-mail me. may the force be
with you
Obi-1.
------------------------------------------------------------------------------
My short time as a hacker.
by Kwoody
I live in a small town in northern British Columbia where the city
owns the phone company. All of BC is serviced by BCTel, except here in
Prince Rupert. The phone company used, up until 1991, mechanical
switches, no lie! Tech dating back to the 50's sometime. I know this
because I know some of the workers of CityTel. (The name of the phone
company). Because of this they were not able to offer all the goodies
like Caller ID, Call Forward etc...and it was easy to hack then, not
the phone company, but all the other systems in this small town of
16000+ people.
I got into hacking sort of accidently. I have had a computer and modem
of one kind or other since about 1983. I moved here after high school
in 1986 and found a good paying job I have worked at for the last 8
years. One night night in 1990 I was sitting around with my roommate
having a few beers and decided to call a buddy of ours to come over
but I dialed the number wrong and got a computer tone. Cool I
thought... I knew the numbers of the 2 local BBS's and that wasnt one
of them.
I fired up the computer and called it again. I got the prompt:
Xenix 386 Login:.
I had some knowledge of other OS's and knew this was some kind of Unix
box. A friend of my roomie was going to university (UBC) and he
happened to phone that night. I chatted with him for a bit and told
him what I had found. He told me to try sysadm or root. I got in with
sysadm, no password!
I found that I had complete control of the system and it belonged to
the local school board. I bought a book on Unix and learned as much as
I could about the system and Unix in general. I guess being a rookie
(read lamer?) and not knowing shit about how to cover my tracks they
discovered the system had been hacked and shut down the dial-in. They
went back online a few weeks later and left sysadm wide open no
password again. I could not believe it! Even after being hacked they
still left their system open like that.
By now I was hooked and I wanted to see if there were any other
systems in town. I could program a little in Pascal and basic (lame)
and tried to write a dialer of some kind. No go...so instead I figured
out the script language of Q-modem and wrote a 40 line script that
worked. It dialed all numbers sequentially but I did not worry too
much about being caught since the switch they used was so ancient
because they didnt have caller ID or anything like that yet.
I did not know at this time of the hacker community and some of the
programs available that would do this already. And even if I did I
wouldnt have known where to call and get them. At any rate I had two
computers an XT and a 386 both with modems and two phone lines, one I
used as my normal voice line and one for data. I setup the dialer on
both and away I went. By the time I had finished scanning both the
prefixes, 624 and 627, I found about 30 computers. Of those I was able
to get into about 10. All of them used defaults and all except the one
below were Unix boxes.
Although I did find one number that connected at 1200 I think it
belonged to the phone company. After I was connected nothing would
happen. I tried for a while to get a prompt of some kind then suddenly
a line of text appeared that listed two phone numbers and some other
stuff that I cant remember. So I just left it alone for a while to see
what came up. It soon became clear that the numbers in one column were
always one of 4 numbers. RCMP, Fire Dept, Battered Womens Shelter and
a second RCMP detachment. It looked like it recorded all calls coming
into those 4 places.
One hack I did was on a system that dispensed fuel. It was called a
KardGuard 3000C. I knew of two places in town that had these systems.
One was where I worked and the other was our competitor. And since I
knew how it worked it was easy to get in. I saw their volume of fuel
dispensed and such and could have done really nasty things like erase
their transaction buffer or get free fuel from them. But I didnt since
I did not see the point in hurting them or their system even if they
were our competitor.
For those of you who might find such a system I'll give a brief run
down on it. The hardware is limited to 300 bps 7E1 and consists of a
few things.
You can tell the system as it announces it when you connect:
KardGuard 3000C Motor Fuel Dispensing System.
PASSWORD:
The system uses punch coded cards read by a card-reader. You have a 4
digit security code that you need to activate the pump to dispense
fuel. Everything is kept track of by a computer that reads the amount
of fuel pumped, date, card number and a few other things depending on
how the card is coded. Like odometer reading or car number.
Now to get into this system via dial-in all you have to know is the
Serial Number of the system. All of these type systems use the serial
number as the default password to access it via dial-up. And its easy
to get the serial number. If you know the location of the card-reader
go and look on the side of it. Generally the actual card reader is
housed in a metal box. On the side of the card reader itself near the
back is a small sticker and the serial number will be written on the
sticker. That was how I did it. I just went to their card reader and
took the serial number off it and got in.
Once in you can do any number of things. Shut off the pumps or
manually activate them without a card and get free fuel, see how much
of any product was dispensed. Products range from 0-15. 0 being
regular gas, 1 regular unleaded etc. It is fairly limited of what you
can do but you can do some nasty stuff to the company who owns it if
you know how. A note to this all commands must be UPPERCASE. And all
commands are one letter. Like E is for looking up the 4 digit code for
individual cards. I dont remember all of them as we upgraded to the
latest version of the KardGuard which supports up to 14.4k and is a
faster system.
After about 3 months of this sort of stuff I was at work one Saturday
and got a phone call from a Constable Burke of the RCMP Special
Investigation Unit.
He informed me that he knew about my hacking and would like to take a
look at my computers. I told him that I didnt know what he was talking
about, he just said we could do this the hard way and he could get a
warrant to search the place. He wanted to meet me at my place in 10
minutes. I said ok. I was shitting bricks by this time. I phoned my
roomie and told him to get all printouts and disks out of the house
and take them away...anywhere. I took off home and got there to find
my roomie gone with all printouts and disks. I fired up the computers
and formatted both HD's. Formatting a hard drive had never taken so
long before!!
I waited for like an hour...no sign of the cops. My roomie came back
and said where are the cops? I dont know I told him. I waited some
more still no sign of them. I got a call about 3 hours later from a
friend of my roomie and he asked if Constable Burke had showed up. I
asked how he knew about that and all he did was laugh his ass off! Now
I was thinking joke...bad joke...and it was. I managed to find out
that this "friend" had gotten someone to pose as a police officer and
call me to see my computers regarding hacking. Well the guy he got to
pose as a cop did a good job at fooling me. I guess I was just over
paranoid by this time. Plus I was really pissed as I lost a lot of
info that I had acquired over the previous months when I formatted my
hard drives.
I guess my roommate had been telling a few people about what I was
doing. I was more than a little pissed off at him as I had not told a
soul of what I was doing since I knew it was illegal as hell. I got my
disks back and burned the printouts and laid off the hacking for a few
weeks. I started up again and was a tad more careful. I didnt keep any
printouts and kept the info on disk to a minimum.
Then about a month later my roommate, who worked for our landlord,
came home one day and said that our landlord had been approached by
some RCMP officer regarding me and my computers and what I might be
doing with them. I said is this another joke? No he said, go talk to
him yourself. I did but he wouldnt tell me much except that something
was definitely going on regarding me, my phones and my computers. And
the RCMP were involved.
After asking around I found out that quite a few people knew what I
had been up too. All they knew is that I was some guy who had been
cracking systems in town. But word had spread and I still dont know
how the cops found out or how much they knew.
But after talking to my landlord I quit right there and then. I went
home formatted the drives again, all floppies and got rid of
everything. I had hacked my way through everything in town that I
could in about 6 months. Also by this time CityTel had upgraded their
switch to some of the latest tech and had Caller-ID installed along
with all the other goodies you can get these days. It was definitely
time to quit.
Not long after I started a BBS that I still run to this day. I figured
that was a way to kill the hacking urge and be legit. I dont live with
that roommate anymore. I'm married now and still think about it now
and again but have too much to lose if I do and get caught.
On another note about 3 months ago I was at work and dialed a wrong
number. As fate would have it I got a blast of modem tone in my ear.
My old hacker curiosity came alive and I made note of the number. We
have a small lan at work that has a modem attached and when I had a
free moment I dialed the number up. I got the banner:
city telephones. No unauthorized use.
xxxxxxx <----a bunch of numbers
username:
I hung up right there but it was interesting to see that I had found
CityTel's switch or something of that nature.
To this day I dont know if there were any other hackers in this small
city where I live. As far as I know I was the only one that did any of
this sort of thing. It was fun but near the end I could feel the noose
around my neck. And I quit while the quitting was good.
Today I help admin our small lan at work with 2 servers and 8
workstations and the Unix I learned hacking helped me when my boss
first started to get serious about computerizing the business. Since
then I have been able to help setup and maintain the systems we have
today.
I'll give the specs on our new KardGuard if anyone is interested as I
know they come from the States and there must be more than a few out
there.
kwoody
------------------------------------------------------------------------------
USING ALLTEL VMBs
By Leper Messiah
Ok. This is everything you need to know in hacking AllTel Mobile's
Voice Mail. The default password on all their boxes is 9999.
Here are the docs, word for word. Enjoy!
-----------------------------------------------------------------------------
Features
-=Basic=-
Accessing your mailbox
Changing your security code
Recording your name
Recording a personal greeting
Playing a message
Recovering deleted messages
Playback mode options
-=Enhanced=-
All of the Basic Features plus...
Setting up your greeting schedule
Replying to a message
Redirecting a message
Recording and sending a message
Creating a broadcast list
Personal greeting schedule
At a glance
VOICE MAIL SET UP Press
To change your security code 8 2 3
To record your name response 2 3 3
To record your personal greeting 2 2 3
To edit a greeting in your schedule 2 2 7
To activate your greeting schedule 2 2 8
To change your playback mode 8 8 3
SENDING AND RECEIVING MESSAGES
To play a message 1
To save and play the next message 2
To reply to a message 3
To redirect a message 7
To create and send a message 3
Accessing your Voice Mail
1. Access your Voice Mail.
From a cellular phone press
# 9 9 Send.
From a landline phone dial your
cellular phone number, which will
automatically transfer to your voice
mail and press # when greeting begins.
2. Enter your security code.
Creating/Changing your security code
1. Access your Voice Mail.
2. Press 8 for Personal Options.
3. Press 2 3 to change your security code.
* Note: Your security code can contain 1 to 7 digits.
Recording your name
1. Access your Voice Mail.
2. Press 2 for your Greeting Menu.
3. Press 3 3 to record your name.
4. Record your name, finish by pressing #.
Options
Press 3 1 to play your name.
Press 3 3 to erase and re-record your name.
Recording a personal greeting
1. Access your Voice Mail.
2. Press 2 for Greeting Menu.
3. Press 2 1 to play your greeting.
4. Press 2 3 to record your greeting,
record your greeting, finish by pressing #.
Playing a message
1. Access your Voice Mail.
2. Press 1 to play your messages.
3. Message will play.
Options
Press 1 to keep this message
as new and play the next.
Press 2 to save and play the
next message.
Press 3 to reply to a message.
Press 4 4 to replay a message.
Press 5 to erase a message.
Press 7 to redirect the message.
Press 8 8 3 from the main
menu to choose a playback mode.*
Continue to press 8 3 until the
desired playback mode is selected.
* Note: The system has three playback modes:
normal, automatic, and simplified.
Recovering deleted messages
To recover a message that has been deleted: **
Press * 1 to go to the main menu,
Press * 4 to recover all deleted messages.
** Note: Deleted messages can only be recovered
before you exit the mailbox.
Replying to a message
From the Play Menu:
1. Press 3 during or after a message.
2. Record your reply finish by pressing #.
3. Press 3 to continue recording a voice message.
Press 5 to erase a message.
Press 7 to select a special delivery option.
4. Press 9 to address the message.
If sent from a subscriber's mailbox,
the reply with be automatic. If not, enter
the mailbox number.
Redirecting a message
From the Play Menu:
1. Press 7 during or after a message.
2. Press 3 to continue recording a
voice message.
Press 5 to erase a voice comment.
Press 7 to select a special delivery
option.
Press 8 to play the original message.
3. Press 9 to address the redirected message.
Enter:
a. mailbox number
b. broadcast list number.
Recording and sending a message
1. Access your Voice Mail.
2. Press 3 to record a message.
3. Record your message finish by
pressing #.
Press 3 to continue recording a
voice message.
Press 4 4 to review the
recorded message.
Press 5 to erase a message.
Press 7 to select a special
delivery option.
Press 1 to mark a message urgent.
Press 2 to mark a message confidential.
Press 3 to select notification of non-delivery.
Press 4 for future delivery.
Press 5 to delete special delivery tags.
4. Press 9 to address a message.
Enter:
mailbox number
broadcast list
0 + last name - 0 + first name
Creating or editing a broadcast list
1. Access your Voice Mail.
2. Press 6 to access your broadcast list.
3. Press 3 to create or edit a broadcast list.
4. Enter a one- or two-digit broadcast
list number. If new list, select any one-
or two- digit number. If editing, enter
the one- or two- digit number assigned.
5. Enter all of the destinations.
Press # after each destination entry.
(destinations can be mailbox
number or broadcast list numbers.)
6. Press 7 3 to record a name for
your broadcast list.
7. Press # when finished.
Setting up your greeting schedule.
1. Press 2 from main menu.
2. Press 2 6 to select your active greeting.
3. Enter the greeting number you want active.
4. Press 2 7 to edit a greeting.
5. Enter the greeting number to be edited.
Press 1 to play the current greeting.
Press 3 to record a greeting.
Press 5 to erase the greeting.
Press 7 to change the time
interval for this greeting.
Press 8 to review the time interval
for greeting.
6. Press 2 8 to activate/deactivate
your greeting schedule.
Message waiting notification
1. Press 8 for Personal Options menu.
2. Press 6 for Notification Options.
3. Press 1 to play notification telephone number.
Options
Press 6 to enable/disable
message notification.
AT ANY TIME DURING A MESSAGE PRESS
To rewind by 6 seconds 4
To rewind to the beginning of a message 4 4
To fast forward by 6 seconds 6
To fast forward to the end 6 6
of the message
To replay the date and time stamp 8 8
To stop and function #
To return to the main menu * 1
-----------------------------------------------------------------------------
Good luck hacking.
-- Leper Messiah
-----------------------------------------------------------------------------
Hacking At Ease for the Macintosh.................. By: Ace
Introduction:
Some educational institutions and businesses use At Ease to
discourage the pirating of programs and access to sensitive files, and
generally screwing up any fun you would have! Wouldn't it be nice to
know how to be rid of it??
How to:
Well, this will tell you how to remove the password for At Ease
so you can gain access to the Finder, and also let you change the
password to one of your chosing, really screwing some one up.
First off, the computer you will need a copy of Microsoft Word
5.1 or 6.0 (Norton Utilities Disk Editor will also work, and I'm
trying my best to find other programs that will allow you to do this).
Launch Microsoft Word and go to the "File" menu, and select "Open".
Now change the "File Type" to "All Files". Navigate to the Preferences
folder and open At Ease Preferences. It should look like a giant mess.
Somewhere in there is the password. It doesn't really matter where.
Select all of the text with Command-A and press the delete key, and
save the now empty file. Restart the computer. Now you can select "Go
to finder" from At Ease's menu.
Other Programs:
You can also use the following program called DisEase. There is
also a HyperCard stack that will bypass At Ease. I have used them both,
although I feel that using the above method is better.
___
/ _ \
/ / \ \
/ /___\ \ce
/ _______ \
/ / \ \
(This file must be converted with BinHex 4.0)
:#d4TFd9KFf8ZFfPd!&0*9%46593K!3!!!#iE!!!!!"Dd8dP8)3!"!!!Z'h*-BA8
#r`!!!"Err`d!"d4TFd9KFf8!!kB8!0phS!!4QKS!!!#!!!!!!!$RQdl"G!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!rrrrrd&38%a&390&)3#SX5K#U,)ak!!!Ah8
!!!!!!!!YP3!!!!"j!`!!!!!!!!!!E$d1!&h(r2bZe8l@f@95I#BhbSpfRTQlBe[
GZRV*IQ9bSprES-Z&df[JCqmPT`0qRTYYSl9`F1ZHk'ffA-rG'BYZdmh@@Mc22B!
l$RR#(H@AF$pG#19#YJrZK,aL9`cbK5mm9V&0&mVGP(YHjbP3A8F[Z9m'0cbI,(Q
Jj1#41AcbN!$F3JD3!"')6q"h8PH-5Bba$`mcGJrH[PeSiT&&LDFRr84p'`Y1"`T
H-XZcQpSAV@Z[edU,Si45[DkYBqA5Q[!%i(X6Pji[IrK2h%jY*r0,JZVrURhm)I@
qG&NM4TfhhhBBFab8MT2Mj1"e831I@rZ*c4c'@MUhEVe8CEXkHc@(bj86S%Hrf3*
rjKa@cE)V9cXCUl&Nh[Lqp1D+fXC%G*kcE'qcNdVel4TMFPE#fE3J-Ijj6&9JDM'
ImQ&U!&1I5eGcj-m4HZ9cqB%2e6UCb[XU1cpPE`2c,BXHU'rTB!`-Kl3@PM0[%`X
i)kK8Cf`HZ$K$U#UFi95,-p6U2pELR&R)H$f%HJce@EFHAXM5KdU+@3ja*E6HQiR
Pam'bE9dMP!6$-HY3Vk%"imJ6M6Q%e9Y3&k!khCjU(YpEq9cfTV9lA'f@YL5hYA4
`E8Vb#j[(pjANpqSPqCA2qDhL6rG'#QXV1bYA-jC66+jTr#hV8+#B69rDYj!!pGj
49$[q#0ImNI6Q"EAMZphH&[3qZA!HIqqZI-jhSq$k@'TGbmDYpAI@lh#Y3%TP"1H
FHBb02l'kcfE[6cJ1&#J!Ef"qdYjQEZKSHQ"G"pN@H+`#hS%[8CAN3(e@q9cZPk(
TdbAPL)*ZG)p3PbC4IaV[ahSrC68Z,'IGm-6(hlH65H02eA!p2V1L[ReECpZ'qN9
YEG[D`1iVl(#UQ4hZI5Yr(P"k'Qk`EPPBlMMNQ'Mcq*-P1GDKG0hlDXGheJ9l[c%
jfpY+-aacC`0Mhih1'pqERf!jkaPl,RQHpIh`,CP9rN"N!r#kHqI#(`m"j5'ipI%
YM2hqQN4MpHDX&BR0UqYb9L8f-rC`AG`k4(Lp(rSI(T1HAEZRVJ+6F-$i!I6ZF([
$k-9)*HVhIVeZ$[!1Y$TpmmEr'AQimVQ-!B3!DRpG,["BR4qp64AcaTpUC*Q4bNl
RV*2#qaKr[q'FGXj8VXi-Pq4E,FjB&)N#$ImF'[kBkhCX`Fk"!@HB9fGj0E*Jjk2
h1ZFAl0bpfaRM9FBk"$IZXJkPYMY1lml#@UZapaR5)G@5'8Ph`2Zc5[,6l4bPqh"
q8DdcC+hK#,,@l!ceh&U5MdNC$Xm!F4MDIURh-kQY,&!bcaNk2$29l!`I"S2HAHL
FVh`Zkd[hlUR,KDrEJ$M@qpRm&LBjB`f$32KGcZFfMSZ8"2[fe(B@6Up(G90k3pd
F9j&jQGFA3QPdahSA@ifmrLDPZm!85B8N[DZqTG0XEGf+U+,%j1l)hj),Cf5*h(%
6MA!@0a(-"-i@hCq3!+6'i1BE9L5fA!Zfm',Qm4SS*hV1NCSpm-RmLcPDHpH1@Q,
L*RlUCllCFeTBS,#&j6r%SQTMhCElILI4Q,0jlGV%jTUkk"qICR,$XT+mG(Y*AUq
HfM,K&kiiCPbr6(ZJq&1pN6SG161AjA,2c#d[L'CY#5#Pj,TFfPfLcc2T)HRp5jL
kl+Hcqk"*"m[re-S1E)Z3!,8$#abc[T)j6AZ$-e55rb'H"V`DiGAj$e%Q$(f)dZ!
-ViBVJ0I)T$2D[-cT)dqcR!BQ[8(FZIY1TpXVjQ@HET`MNZ0`[TFC&iDdjXcT&$D
TN[c$-r(1J@0QHM23mh2TJeCMqP(+#1`(mpP59%[Br[3KGf13!+6T5)L(A$C2%XZ
D2BeCB(lfm#aJ202+
