From 57f4f99a0bea2857f400ce559024b2e36dd805cf Mon Sep 17 00:00:00 2001 From: Mario Fetka Date: Thu, 30 Mar 2017 14:48:05 +0200 Subject: [PATCH] Imported Upstream version 0.62 --- .CHANGES.swp | Bin 0 -> 12288 bytes CHANGES | 55 ++ Makefile | 9 + README | 22 + getopt.c | 756 ++++++++++++++++++++++++ getopt.h | 129 +++++ index.html | 241 ++++++++ match.c | 195 +++++++ match.h | 9 + rinetd.8 | 190 ++++++ rinetd.c | 1565 ++++++++++++++++++++++++++++++++++++++++++++++++++ rinetd.dsp | 97 ++++ rinetd.dsw | 29 + rinetd.exe | Bin 0 -> 290893 bytes rinetd.ncb | Bin 0 -> 74752 bytes rinetd.opt | Bin 0 -> 48640 bytes rinetd.plg | 32 ++ 17 files changed, 3329 insertions(+) create mode 100644 .CHANGES.swp create mode 100644 CHANGES create mode 100644 Makefile create mode 100644 README create mode 100755 getopt.c create mode 100755 getopt.h create mode 100644 index.html create mode 100644 match.c create mode 100644 match.h create mode 100644 rinetd.8 create mode 100755 rinetd.c create mode 100755 rinetd.dsp create mode 100755 rinetd.dsw create mode 100755 rinetd.exe create mode 100755 rinetd.ncb create mode 100755 rinetd.opt create mode 100755 rinetd.plg diff --git a/.CHANGES.swp b/.CHANGES.swp new file mode 100644 index 0000000000000000000000000000000000000000..93350d9dad54b9e796f1394ef3d6545302c3a3d9 GIT binary patch literal 12288 zcmeI2J#QUF6ow~=2ne5o1}Y99K_cC|i4)?&MNotwu|z&ZNT?8+-93AE9i@dpsRXZG5;p-7d6FgJQ-dvJ=jUw+>FT%A`R-c+h|W8|)rD|h{@_7#=u@4D~iYU9b^tCQYXj`hjcFP^`A z;f-r|y)R$P1TukpLg4zD(;KH=dhrE%=IQJA;$=?8utb{N5lL=%3nLs9x31kA9Kqin0WCEE$CXfka0{004T`Tq7LrQ)2 zFapB=|I6P1etS}>U!gCc0KEnsgMNGh`=9|j2NCo<^ylMBeG7dAy$8Jv{qdMmUqhcj zA4Bg$8_-{m!X9)BYM}+R2_1!gItH8206FL!^c?go^!p=9eFNQsK846&ypE~l#sR~gH&HIiI_~s_?_hoQ zkaeR?H{u4kRJB~~5N-!4asylZ&Q?jZy^!nh1}IjO3)q}uZI;Lta?qH?=qK;Qi9+E3 z_TKq|&L?jXt=mfpsM#*bj~)D3U6aj#Vs=eEPAUD@ag*rpMkaMN>S_Wu~D>z3F zLuaZfJQJv0-P&{S{IXD$*P%Tqfx)|l*F6DZ=~?f{I{XMJ86ag*n@D0%IJr-C2Y#r{ z*y>0DMcCCODIuIvaWi(^@~}FkAjyt>iMlQ5ZJ6IhAyi-+Bz-Uk%GL1`GkiOAx`OS* zYD(2X1g;?gXDTMEdo+l#A+oN?t%G{?08|)1I42fiV z@VqOt1pX!S&f+`xa2w5)Yj<|+nZw~&*J$lD{Qxx}*MKOFN2e6V&e)}&P}mrwsE1U7 zQY3|%8U`q<9gb)r8>eVjGef-7RmDR*ej=6COrbBiF&0fhgNCOVm8ml@978Y&b}d9n zy;eck0|BDn!`tWuy_rV34D<>oh@;Y;GaA^pdO$Y^_+!x6NP@(ZIzdS45=?Z{q-jo5 zD`G0ioB{jk=U~t~D5;d>+2oubtratOJZzE|>b5V_Qzf>ZF_t9bwT@bHL`$Fvf(GG$ zh{EX(laDcUPz1tgGQEPP)2PM#>Bi844>t7cPc@8hc@CxECjSCsYGKf!Uu$r}?8Q*P Z<3f8pOm068F`=C|7*g1po>bCF{{X_C)6W0^ literal 0 HcmV?d00001 diff --git a/CHANGES b/CHANGES new file mode 100644 index 0000000..c4f5a0c --- /dev/null +++ b/CHANGES @@ -0,0 +1,55 @@ +Version 0.1: original version. + +Version 0.2: fixed bug when several reads are necessary +on one end or the other before a write flushes them. +Fixed bug which threw away data not yet sent to the +other side on close, when running under Linux. Fixed +associated bugs that probably affected other operating +systems as well. Fixed bug causing long, perhaps +indefinite pauses when a possible connection to a +server socket went away before the accept() call, +resulting in a blocking call. + +Version 0.3: fixed additional bugs relating to +the code previously used only by non-Linux OSes. +This should fix problems such as connections not +going away when they should or connections being +mysteriously closed. Most of that code is now used by +Linux also, so it is likely that rinetd is much closer +to bug-free on non-Linux platforms. Of course, I don't +actually have any to play with it on. + +Version 0.4: added support for kill -1 (SIGHUP) +and specification of service names instead of +port numbers. Removed calls to realloc(), replacing +them with code that should fail gracefully without +crashing the program or breaking existing connections +when another application is hogging memory. + +Version 0.5: added logging in both tab-delimited +and web-server-style formats. No longer exits if +an individual configuration file line generates +an error. Added allow and deny rules. Added +-c command line option to specify a configuration file. + +Version 0.51: fixed failure to check for an open +log file before writing log entries. + +Version 0.52: documentation added regarding the +ability to bind to all IP addresses, if desired, +using the special address 0.0.0.0. + +Version 0.6: ported to Win32. Various compatibility +fixes were made and some minor oversights without +functional consequences were corrected. + +Version 0.61: fixed a bug in 0.6 which completely +broke rinetd under Linux. Oops. + +Version 0.62: fixed a potential buffer overrun; +prior versions failed to reallocate one of the +arrays correctly when reallocating memory to +accommodate more connections. Thanks to +Sam Hocevar. + + diff --git a/Makefile b/Makefile new file mode 100644 index 0000000..d598b18 --- /dev/null +++ b/Makefile @@ -0,0 +1,9 @@ +CFLAGS=-DLINUX -g + +rinetd: rinetd.o match.o + gcc rinetd.o match.o -o rinetd + +install: rinetd + install -m 700 rinetd /usr/sbin + install -m 644 rinetd.8 /usr/man/man8 + diff --git a/README b/README new file mode 100644 index 0000000..73a896b --- /dev/null +++ b/README @@ -0,0 +1,22 @@ +rinetd version 0.62, by Thomas Boutell. Released under +the terms of the GNU General Public License, version 2 or later. + +This program is used to efficiently redirect connections +from one IP address/port combination to another. It is +useful when operating virtual servers, firewalls +and the like. + +A binary for 32-bit Windows (95, 98, NT) is included (see the +file rinetd.exe). Windows 3.1 is not supported. + +To build under Unix, check the Makefile for platform- +specific details and then type make. To install, type +"make install" as root. + +To build under Windows, use the provided project +files with Microsoft Visual C++. Windows 3.1 is not supported. + +For documentation run "make install", then type +"man rinetd" for details. Or, read index.html in +your browser. + diff --git a/getopt.c b/getopt.c new file mode 100755 index 0000000..9b7eebc --- /dev/null +++ b/getopt.c @@ -0,0 +1,756 @@ +/* THIS IS HERE FOR WIN32's BENEFIT ONLY. */ + +/* Getopt for GNU. + NOTE: getopt is now part of the C library, so if you don't know what + "Keep this file name-space clean" means, talk to roland@gnu.ai.mit.edu + before changing it! + + Copyright (C) 1987, 88, 89, 90, 91, 92, 1993 + Free Software Foundation, Inc. + + This program is free software; you can redistribute it and/or modify it + under the terms of the GNU General Public License as published by the + Free Software Foundation; either version 2, or (at your option) any + later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program; if not, write to the Free Software + Foundation, 675 Mass Ave, Cambridge, MA 02139, USA. */ + +#ifdef HAVE_CONFIG_H +#include "config.h" +#endif + +#ifndef __STDC__ +# ifndef const +# define const +# endif +#endif + +/* This tells Alpha OSF/1 not to define a getopt prototype in . */ +#ifndef _NO_PROTO +#define _NO_PROTO +#endif + +#include + +/* Comment out all this code if we are using the GNU C Library, and are not + actually compiling the library itself. This code is part of the GNU C + Library, but also included in many other GNU distributions. Compiling + and linking in this code is a waste when using the GNU C library + (especially if it is a shared library). Rather than having every GNU + program understand `configure --with-gnu-libc' and omit the object files, + it is simpler to just do this in the source for each such file. */ + +#if defined (_LIBC) || !defined (__GNU_LIBRARY__) + + +/* This needs to come after some library #include + to get __GNU_LIBRARY__ defined. */ +#ifdef __GNU_LIBRARY__ +/* Don't include stdlib.h for non-GNU C libraries because some of them + contain conflicting prototypes for getopt. */ +#include +#endif /* GNU C library. */ + +/* If GETOPT_COMPAT is defined, `+' as well as `--' can introduce a + long-named option. Because this is not POSIX.2 compliant, it is + being phased out. */ +/* #define GETOPT_COMPAT */ + +/* This version of `getopt' appears to the caller like standard Unix `getopt' + but it behaves differently for the user, since it allows the user + to intersperse the options with the other arguments. + + As `getopt' works, it permutes the elements of ARGV so that, + when it is done, all the options precede everything else. Thus + all application programs are extended to handle flexible argument order. + + Setting the environment variable POSIXLY_CORRECT disables permutation. + Then the behavior is completely standard. + + GNU application programs can use a third alternative mode in which + they can distinguish the relative order of options and other arguments. */ + +#include "getopt.h" + +/* For communication from `getopt' to the caller. + When `getopt' finds an option that takes an argument, + the argument value is returned here. + Also, when `ordering' is RETURN_IN_ORDER, + each non-option ARGV-element is returned here. */ + +char *optarg = 0; + +/* Index in ARGV of the next element to be scanned. + This is used for communication to and from the caller + and for communication between successive calls to `getopt'. + + On entry to `getopt', zero means this is the first call; initialize. + + When `getopt' returns EOF, this is the index of the first of the + non-option elements that the caller should itself scan. + + Otherwise, `optind' communicates from one call to the next + how much of ARGV has been scanned so far. */ + +/* XXX 1003.2 says this must be 1 before any call. */ +int optind = 0; + +/* The next char to be scanned in the option-element + in which the last option character we returned was found. + This allows us to pick up the scan where we left off. + + If this is zero, or a null string, it means resume the scan + by advancing to the next ARGV-element. */ + +static char *nextchar; + +/* Callers store zero here to inhibit the error message + for unrecognized options. */ + +int opterr = 1; + +/* Set to an option character which was unrecognized. + This must be initialized on some systems to avoid linking in the + system's own getopt implementation. */ + +#define BAD_OPTION '\0' +int optopt = BAD_OPTION; + +/* Describe how to deal with options that follow non-option ARGV-elements. + + If the caller did not specify anything, + the default is REQUIRE_ORDER if the environment variable + POSIXLY_CORRECT is defined, PERMUTE otherwise. + + REQUIRE_ORDER means don't recognize them as options; + stop option processing when the first non-option is seen. + This is what Unix does. + This mode of operation is selected by either setting the environment + variable POSIXLY_CORRECT, or using `+' as the first character + of the list of option characters. + + PERMUTE is the default. We permute the contents of ARGV as we scan, + so that eventually all the non-options are at the end. This allows options + to be given in any order, even with programs that were not written to + expect this. + + RETURN_IN_ORDER is an option available to programs that were written + to expect options and other ARGV-elements in any order and that care about + the ordering of the two. We describe each non-option ARGV-element + as if it were the argument of an option with character code 1. + Using `-' as the first character of the list of option characters + selects this mode of operation. + + The special argument `--' forces an end of option-scanning regardless + of the value of `ordering'. In the case of RETURN_IN_ORDER, only + `--' can cause `getopt' to return EOF with `optind' != ARGC. */ + +static enum +{ + REQUIRE_ORDER, PERMUTE, RETURN_IN_ORDER +} ordering; + +#ifdef __GNU_LIBRARY__ +/* We want to avoid inclusion of string.h with non-GNU libraries + because there are many ways it can cause trouble. + On some systems, it contains special magic macros that don't work + in GCC. */ +#include +#define my_index strchr +#define my_strlen strlen +#else + +/* Avoid depending on library functions or files + whose names are inconsistent. */ + +#if __STDC__ || defined(PROTO) +extern char *getenv(const char *name); +extern int strcmp (const char *s1, const char *s2); +extern int strncmp(const char *s1, const char *s2, int n); + +static int my_strlen(const char *s); +static char *my_index (const char *str, int chr); +#else +extern char *getenv (); +#endif + +static int +my_strlen (str) + const char *str; +{ + int n = 0; + while (*str++) + n++; + return n; +} + +static char * +my_index (str, chr) + const char *str; + int chr; +{ + while (*str) + { + if (*str == chr) + return (char *) str; + str++; + } + return 0; +} + +#endif /* GNU C library. */ + +/* Handle permutation of arguments. */ + +/* Describe the part of ARGV that contains non-options that have + been skipped. `first_nonopt' is the index in ARGV of the first of them; + `last_nonopt' is the index after the last of them. */ + +static int first_nonopt; +static int last_nonopt; + +/* Exchange two adjacent subsequences of ARGV. + One subsequence is elements [first_nonopt,last_nonopt) + which contains all the non-options that have been skipped so far. + The other is elements [last_nonopt,optind), which contains all + the options processed since those non-options were skipped. + + `first_nonopt' and `last_nonopt' are relocated so that they describe + the new indices of the non-options in ARGV after they are moved. + + To perform the swap, we first reverse the order of all elements. So + all options now come before all non options, but they are in the + wrong order. So we put back the options and non options in original + order by reversing them again. For example: + original input: a b c -x -y + reverse all: -y -x c b a + reverse options: -x -y c b a + reverse non options: -x -y a b c +*/ + +#if __STDC__ || defined(PROTO) +static void exchange (char **argv); +#endif + +static void +exchange (argv) + char **argv; +{ + char *temp, **first, **last; + + /* Reverse all the elements [first_nonopt, optind) */ + first = &argv[first_nonopt]; + last = &argv[optind-1]; + while (first < last) { + temp = *first; *first = *last; *last = temp; first++; last--; + } + /* Put back the options in order */ + first = &argv[first_nonopt]; + first_nonopt += (optind - last_nonopt); + last = &argv[first_nonopt - 1]; + while (first < last) { + temp = *first; *first = *last; *last = temp; first++; last--; + } + + /* Put back the non options in order */ + first = &argv[first_nonopt]; + last_nonopt = optind; + last = &argv[last_nonopt-1]; + while (first < last) { + temp = *first; *first = *last; *last = temp; first++; last--; + } +} + +/* Scan elements of ARGV (whose length is ARGC) for option characters + given in OPTSTRING. + + If an element of ARGV starts with '-', and is not exactly "-" or "--", + then it is an option element. The characters of this element + (aside from the initial '-') are option characters. If `getopt' + is called repeatedly, it returns successively each of the option characters + from each of the option elements. + + If `getopt' finds another option character, it returns that character, + updating `optind' and `nextchar' so that the next call to `getopt' can + resume the scan with the following option character or ARGV-element. + + If there are no more option characters, `getopt' returns `EOF'. + Then `optind' is the index in ARGV of the first ARGV-element + that is not an option. (The ARGV-elements have been permuted + so that those that are not options now come last.) + + OPTSTRING is a string containing the legitimate option characters. + If an option character is seen that is not listed in OPTSTRING, + return BAD_OPTION after printing an error message. If you set `opterr' to + zero, the error message is suppressed but we still return BAD_OPTION. + + If a char in OPTSTRING is followed by a colon, that means it wants an arg, + so the following text in the same ARGV-element, or the text of the following + ARGV-element, is returned in `optarg'. Two colons mean an option that + wants an optional arg; if there is text in the current ARGV-element, + it is returned in `optarg', otherwise `optarg' is set to zero. + + If OPTSTRING starts with `-' or `+', it requests different methods of + handling the non-option ARGV-elements. + See the comments about RETURN_IN_ORDER and REQUIRE_ORDER, above. + + Long-named options begin with `--' instead of `-'. + Their names may be abbreviated as long as the abbreviation is unique + or is an exact match for some defined option. If they have an + argument, it follows the option name in the same ARGV-element, separated + from the option name by a `=', or else the in next ARGV-element. + When `getopt' finds a long-named option, it returns 0 if that option's + `flag' field is nonzero, the value of the option's `val' field + if the `flag' field is zero. + + The elements of ARGV aren't really const, because we permute them. + But we pretend they're const in the prototype to be compatible + with other systems. + + LONGOPTS is a vector of `struct option' terminated by an + element containing a name which is zero. + + LONGIND returns the index in LONGOPT of the long-named option found. + It is only valid when a long-named option has been found by the most + recent call. + + If LONG_ONLY is nonzero, '-' as well as '--' can introduce + long-named options. */ + +int +_getopt_internal (argc, argv, optstring, longopts, longind, long_only) + int argc; + char *const *argv; + const char *optstring; + const struct option *longopts; + int *longind; + int long_only; +{ + int option_index; + + optarg = 0; + + /* Initialize the internal data when the first call is made. + Start processing options with ARGV-element 1 (since ARGV-element 0 + is the program name); the sequence of previously skipped + non-option ARGV-elements is empty. */ + + if (optind == 0) + { + first_nonopt = last_nonopt = optind = 1; + + nextchar = NULL; + + /* Determine how to handle the ordering of options and nonoptions. */ + + if (optstring[0] == '-') + { + ordering = RETURN_IN_ORDER; + ++optstring; + } + else if (optstring[0] == '+') + { + ordering = REQUIRE_ORDER; + ++optstring; + } + else if (getenv ("POSIXLY_CORRECT") != NULL) + ordering = REQUIRE_ORDER; + else + ordering = PERMUTE; + } + + if (nextchar == NULL || *nextchar == '\0') + { + if (ordering == PERMUTE) + { + /* If we have just processed some options following some non-options, + exchange them so that the options come first. */ + + if (first_nonopt != last_nonopt && last_nonopt != optind) + exchange ((char **) argv); + else if (last_nonopt != optind) + first_nonopt = optind; + + /* Now skip any additional non-options + and extend the range of non-options previously skipped. */ + + while (optind < argc + && (argv[optind][0] != '-' || argv[optind][1] == '\0') +#ifdef GETOPT_COMPAT + && (longopts == NULL + || argv[optind][0] != '+' || argv[optind][1] == '\0') +#endif /* GETOPT_COMPAT */ + ) + optind++; + last_nonopt = optind; + } + + /* Special ARGV-element `--' means premature end of options. + Skip it like a null option, + then exchange with previous non-options as if it were an option, + then skip everything else like a non-option. */ + + if (optind != argc && !strcmp (argv[optind], "--")) + { + optind++; + + if (first_nonopt != last_nonopt && last_nonopt != optind) + exchange ((char **) argv); + else if (first_nonopt == last_nonopt) + first_nonopt = optind; + last_nonopt = argc; + + optind = argc; + } + + /* If we have done all the ARGV-elements, stop the scan + and back over any non-options that we skipped and permuted. */ + + if (optind == argc) + { + /* Set the next-arg-index to point at the non-options + that we previously skipped, so the caller will digest them. */ + if (first_nonopt != last_nonopt) + optind = first_nonopt; + return EOF; + } + + /* If we have come to a non-option and did not permute it, + either stop the scan or describe it to the caller and pass it by. */ + + if ((argv[optind][0] != '-' || argv[optind][1] == '\0') +#ifdef GETOPT_COMPAT + && (longopts == NULL + || argv[optind][0] != '+' || argv[optind][1] == '\0') +#endif /* GETOPT_COMPAT */ + ) + { + if (ordering == REQUIRE_ORDER) + return EOF; + optarg = argv[optind++]; + return 1; + } + + /* We have found another option-ARGV-element. + Start decoding its characters. */ + + nextchar = (argv[optind] + 1 + + (longopts != NULL && argv[optind][1] == '-')); + } + + if (longopts != NULL + && ((argv[optind][0] == '-' + && (argv[optind][1] == '-' || long_only)) +#ifdef GETOPT_COMPAT + || argv[optind][0] == '+' +#endif /* GETOPT_COMPAT */ + )) + { + const struct option *p; + char *s = nextchar; + int exact = 0; + int ambig = 0; + const struct option *pfound = NULL; + int indfound = 0; + + while (*s && *s != '=') + s++; + + /* Test all options for either exact match or abbreviated matches. */ + for (p = longopts, option_index = 0; p->name; + p++, option_index++) + if (!strncmp (p->name, nextchar, s - nextchar)) + { + if (s - nextchar == my_strlen (p->name)) + { + /* Exact match found. */ + pfound = p; + indfound = option_index; + exact = 1; + break; + } + else if (pfound == NULL) + { + /* First nonexact match found. */ + pfound = p; + indfound = option_index; + } + else + /* Second nonexact match found. */ + ambig = 1; + } + + if (ambig && !exact) + { + if (opterr) + fprintf (stderr, "%s: option `%s' is ambiguous\n", + argv[0], argv[optind]); + nextchar += my_strlen (nextchar); + optind++; + return BAD_OPTION; + } + + if (pfound != NULL) + { + option_index = indfound; + optind++; + if (*s) + { + /* Don't test has_arg with >, because some C compilers don't + allow it to be used on enums. */ + if (pfound->has_arg) + optarg = s + 1; + else + { + if (opterr) + { + if (argv[optind - 1][1] == '-') + /* --option */ + fprintf (stderr, + "%s: option `--%s' doesn't allow an argument\n", + argv[0], pfound->name); + else + /* +option or -option */ + fprintf (stderr, + "%s: option `%c%s' doesn't allow an argument\n", + argv[0], argv[optind - 1][0], pfound->name); + } + nextchar += my_strlen (nextchar); + return BAD_OPTION; + } + } + else if (pfound->has_arg == 1) + { + if (optind < argc) + optarg = argv[optind++]; + else + { + if (opterr) + fprintf (stderr, "%s: option `%s' requires an argument\n", + argv[0], argv[optind - 1]); + nextchar += my_strlen (nextchar); + return optstring[0] == ':' ? ':' : BAD_OPTION; + } + } + nextchar += my_strlen (nextchar); + if (longind != NULL) + *longind = option_index; + if (pfound->flag) + { + *(pfound->flag) = pfound->val; + return 0; + } + return pfound->val; + } + /* Can't find it as a long option. If this is not getopt_long_only, + or the option starts with '--' or is not a valid short + option, then it's an error. + Otherwise interpret it as a short option. */ + if (!long_only || argv[optind][1] == '-' +#ifdef GETOPT_COMPAT + || argv[optind][0] == '+' +#endif /* GETOPT_COMPAT */ + || my_index (optstring, *nextchar) == NULL) + { + if (opterr) + { + if (argv[optind][1] == '-') + /* --option */ + fprintf (stderr, "%s: unrecognized option `--%s'\n", + argv[0], nextchar); + else + /* +option or -option */ + fprintf (stderr, "%s: unrecognized option `%c%s'\n", + argv[0], argv[optind][0], nextchar); + } + nextchar = (char *) ""; + optind++; + return BAD_OPTION; + } + } + + /* Look at and handle the next option-character. */ + + { + char c = *nextchar++; + char *temp = my_index (optstring, c); + + /* Increment `optind' when we start to process its last character. */ + if (*nextchar == '\0') + ++optind; + + if (temp == NULL || c == ':') + { + if (opterr) + { +#if 0 + if (c < 040 || c >= 0177) + fprintf (stderr, "%s: unrecognized option, character code 0%o\n", + argv[0], c); + else + fprintf (stderr, "%s: unrecognized option `-%c'\n", argv[0], c); +#else + /* 1003.2 specifies the format of this message. */ + fprintf (stderr, "%s: illegal option -- %c\n", argv[0], c); +#endif + } + optopt = c; + return BAD_OPTION; + } + if (temp[1] == ':') + { + if (temp[2] == ':') + { + /* This is an option that accepts an argument optionally. */ + if (*nextchar != '\0') + { + optarg = nextchar; + optind++; + } + else + optarg = 0; + nextchar = NULL; + } + else + { + /* This is an option that requires an argument. */ + if (*nextchar != '\0') + { + optarg = nextchar; + /* If we end this ARGV-element by taking the rest as an arg, + we must advance to the next element now. */ + optind++; + } + else if (optind == argc) + { + if (opterr) + { +#if 0 + fprintf (stderr, "%s: option `-%c' requires an argument\n", + argv[0], c); +#else + /* 1003.2 specifies the format of this message. */ + fprintf (stderr, "%s: option requires an argument -- %c\n", + argv[0], c); +#endif + } + optopt = c; + if (optstring[0] == ':') + c = ':'; + else + c = BAD_OPTION; + } + else + /* We already incremented `optind' once; + increment it again when taking next ARGV-elt as argument. */ + optarg = argv[optind++]; + nextchar = NULL; + } + } + return c; + } +} + +int +getopt (argc, argv, optstring) + int argc; + char *const *argv; + const char *optstring; +{ + return _getopt_internal (argc, argv, optstring, + (const struct option *) 0, + (int *) 0, + 0); +} + +int +getopt_long (argc, argv, options, long_options, opt_index) + int argc; + char *const *argv; + const char *options; + const struct option *long_options; + int *opt_index; +{ + return _getopt_internal (argc, argv, options, long_options, opt_index, 0); +} + +#endif /* _LIBC or not __GNU_LIBRARY__. */ + +#ifdef TEST + +/* Compile with -DTEST to make an executable for use in testing + the above definition of `getopt'. */ + +int +main (argc, argv) + int argc; + char **argv; +{ + int c; + int digit_optind = 0; + + while (1) + { + int this_option_optind = optind ? optind : 1; + + c = getopt (argc, argv, "abc:d:0123456789"); + if (c == EOF) + break; + + switch (c) + { + case '0': + case '1': + case '2': + case '3': + case '4': + case '5': + case '6': + case '7': + case '8': + case '9': + if (digit_optind != 0 && digit_optind != this_option_optind) + printf ("digits occur in two different argv-elements.\n"); + digit_optind = this_option_optind; + printf ("option %c\n", c); + break; + + case 'a': + printf ("option a\n"); + break; + + case 'b': + printf ("option b\n"); + break; + + case 'c': + printf ("option c with value `%s'\n", optarg); + break; + + case BAD_OPTION: + break; + + default: + printf ("?? getopt returned character code 0%o ??\n", c); + } + } + + if (optind < argc) + { + printf ("non-option ARGV-elements: "); + while (optind < argc) + printf ("%s ", argv[optind++]); + printf ("\n"); + } + + exit (0); +} + +#endif /* TEST */ diff --git a/getopt.h b/getopt.h new file mode 100755 index 0000000..c22d37f --- /dev/null +++ b/getopt.h @@ -0,0 +1,129 @@ +/* THIS IS HERE FOR WIN32's BENEFIT ONLY. */ + +/* Declarations for getopt. + Copyright (C) 1989, 1990, 1991, 1992, 1993 Free Software Foundation, Inc. + + This program is free software; you can redistribute it and/or modify it + under the terms of the GNU General Public License as published by the + Free Software Foundation; either version 2, or (at your option) any + later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program; if not, write to the Free Software + Foundation, 675 Mass Ave, Cambridge, MA 02139, USA. */ + +#ifndef _GETOPT_H +#define _GETOPT_H 1 + +#ifdef __cplusplus +extern "C" { +#endif + +/* For communication from `getopt' to the caller. + When `getopt' finds an option that takes an argument, + the argument value is returned here. + Also, when `ordering' is RETURN_IN_ORDER, + each non-option ARGV-element is returned here. */ + +extern char *optarg; + +/* Index in ARGV of the next element to be scanned. + This is used for communication to and from the caller + and for communication between successive calls to `getopt'. + + On entry to `getopt', zero means this is the first call; initialize. + + When `getopt' returns EOF, this is the index of the first of the + non-option elements that the caller should itself scan. + + Otherwise, `optind' communicates from one call to the next + how much of ARGV has been scanned so far. */ + +extern int optind; + +/* Callers store zero here to inhibit the error message `getopt' prints + for unrecognized options. */ + +extern int opterr; + +/* Set to an option character which was unrecognized. */ + +extern int optopt; + +/* Describe the long-named options requested by the application. + The LONG_OPTIONS argument to getopt_long or getopt_long_only is a vector + of `struct option' terminated by an element containing a name which is + zero. + + The field `has_arg' is: + no_argument (or 0) if the option does not take an argument, + required_argument (or 1) if the option requires an argument, + optional_argument (or 2) if the option takes an optional argument. + + If the field `flag' is not NULL, it points to a variable that is set + to the value given in the field `val' when the option is found, but + left unchanged if the option is not found. + + To have a long-named option do something other than set an `int' to + a compiled-in constant, such as set a value from `optarg', set the + option's `flag' field to zero and its `val' field to a nonzero + value (the equivalent single-letter option character, if there is + one). For long options that have a zero `flag' field, `getopt' + returns the contents of the `val' field. */ + +struct option +{ +#if __STDC__ + const char *name; +#else + char *name; +#endif + /* has_arg can't be an enum because some compilers complain about + type mismatches in all the code that assumes it is an int. */ + int has_arg; + int *flag; + int val; +}; + +/* Names for the values of the `has_arg' field of `struct option'. */ + +#define no_argument 0 +#define required_argument 1 +#define optional_argument 2 + +#if __STDC__ || defined(PROTO) +#if defined(__GNU_LIBRARY__) +/* Many other libraries have conflicting prototypes for getopt, with + differences in the consts, in stdlib.h. To avoid compilation + errors, only prototype getopt for the GNU C library. */ +extern int getopt (int argc, char *const *argv, const char *shortopts); +#endif /* not __GNU_LIBRARY__ */ +extern int getopt_long (int argc, char *const *argv, const char *shortopts, + const struct option *longopts, int *longind); +extern int getopt_long_only (int argc, char *const *argv, + const char *shortopts, + const struct option *longopts, int *longind); + +/* Internal only. Users should not call this directly. */ +extern int _getopt_internal (int argc, char *const *argv, + const char *shortopts, + const struct option *longopts, int *longind, + int long_only); +#else /* not __STDC__ */ +extern int getopt (); +extern int getopt_long (); +extern int getopt_long_only (); + +extern int _getopt_internal (); +#endif /* not __STDC__ */ + +#ifdef __cplusplus +} +#endif + +#endif /* _GETOPT_H */ diff --git a/index.html b/index.html new file mode 100644 index 0000000..5a58675 --- /dev/null +++ b/index.html @@ -0,0 +1,241 @@ + + +RINETD(8) + + + + + + +
RINETD(8) +Unix System Manager's Manual +RINETD(8) +
+

+NAME +

+rinetd -- internet ``redirection server'' +

+SYNOPSIS +

+/usr/sbin/rinetd +

+VERSION +

+Version 0.62, 04/13/2003. Version 0.62 corrects a potential +buffer overflow when reallocating memory to accommodate more +connections. Upgrading is strongly recommended. +

+WHERE TO GET +

+For Linux: +By +anonymous FTP from ftp.boutell.com in the subdirectory +boutell/rinetd as the file rinetd.tar.gz. +

+For Windows 95/98/NT: +By +anonymous FTP from ftp.boutell.com in the subdirectory +boutell/rinetd as the file rinetd.zip. +

+DESCRIPTION +

+Redirects TCP connections from one IP address and port to another. rinetd +is a single-process server which handles any number of connections to +the address/port pairs specified in the file /etc/rinetd.conf. +Since rinetd runs as a single process using nonblocking I/O, it is +able to redirect a large number of connections without a severe +impact on the machine. This makes it practical to run TCP services +on machines inside an IP masquerading firewall. rinetd does not +redirect FTP, because FTP requires more than one socket. +

+rinetd is typically launched at boot time, using the following syntax: +

+/usr/sbin/rinetd +

+The configuration file is found in the file +/etc/rinetd.conf, unless +another file is specified using the -c command line option. +

+FORWARDING RULES +

+Most entries in the configuration file are forwarding rules. The +format of a forwarding rule is as follows: +

+bindaddress bindport connectaddress connectport
+
+For example: +
+206.125.69.81 80 10.1.1.2 80
+
+Would redirect all connections to port 80 of the "real" IP address +206.125.69.81, which could be a virtual interface, through +rinetd to port 80 of the address 10.1.1.2, which would typically +be a machine on the inside of a firewall which has no +direct routing to the outside world. +

+Although responding on individual interfaces rather than on all +interfaces is one of rinetd's primary features, sometimes it is +preferable to respond on all IP addresses that belong to the server. +In this situation, the special IP address 0.0.0.0 +can be used. For example: +

+0.0.0.0 23 10.1.1.2 23
+
+Would redirect all connections to port 23, for all IP addresses +assigned to the server. This is the default behavior for most +other programs. +

+Service names can be specified instead of port numbers. On most systems, +service names are defined in the file /etc/services. +

+Both IP addresses and hostnames are accepted for +bindaddress and connectaddress. +

+ALLOW AND DENY RULES +

+Configuration files can also contain allow and deny rules. +

+Allow rules which appear before the first forwarding rule are +applied globally: if at least one global allow rule exists, +and the address of a new connection does not +satisfy at least one of the global allow rules, that connection +is immediately rejected, regardless of any other rules. +

+Allow rules which appear after a specific forwarding rule apply +to that forwarding rule only. If at least one allow rule +exists for a particular forwarding rule, and the address of a new +connection does not satisfy at least one of the allow rules +for that forwarding rule, that connection is immediately +rejected, regardless of any other rules. +

+Deny rules which appear before the first forwarding rule are +applied globally: if the address of a new connection satisfies +any of the global allow rules, that connection +is immediately rejected, regardless of any other rules. +

+Deny rules which appear after a specific forwarding rule apply +to that forwarding rule only. If the address of a new +connection satisfies any of the deny rules for that forwarding rule, +that connection is immediately rejected, regardless of any other rules. +

+The format of an allow rule is as follows: +

+allow pattern
+
+Patterns can contain the following characters: 0, 1, 2, 3, 4, 5, +6, 7, 8, 9, . (period), ?, and *. The ? wildcard matches any one +character. The * wildcard matches any number of characters, including +zero. +

+For example: +

+

+allow 206.125.69.*
+
+This allow rule matches all IP addresses in the 206.125.69 class C domain. +

+Host names are NOT permitted in allow and deny rules. The performance +cost of looking up IP addresses to find their corresponding names +is prohibitive. Since rinetd is a single process server, all other +connections would be forced to pause during the address lookup. +

+LOGGING +

+rinetd is able to produce a log file in either of two formats: +tab-delimited and web server-style "common log format." +

+By default, rinetd does not produce a log file. To activate logging, add +the following line to the configuration file: +

+logfile log-file-location
+
+Example: +
+logfile /var/log/rinetd.log
+
+By default, rinetd logs in a simple tab-delimited format containing +the following information: +

+Date and time
+Client address
+ +Listening host +
+Listening port +
+Forwarded-to host +
+Forwarded-to port +
+Bytes received from client +
+Bytes sent to client +
+Result message +

+To activate web server-style "common log format" logging, +add the following line to the configuration file: +

+logcommon
+
+

+COMMAND LINE OPTIONS +

+The -c command line option is used to specify an alternate +configuration file. +

+The -h command line option produces a short help message. +

+The -v command line option displays the version number. +

+REINITIALIZING RINETD +

+The kill -1 signal (SIGHUP) can be used to cause rinetd +to reload its configuration file without interrupting existing +connections. Under Linux(tm) the process id +is saved in the file /var/run/rinetd.pid +to facilitate the kill -HUP. An alternate +file name can be provided by using the pidlogfile +configuration file option. +

+BUGS +

+The server redirected to is not able to identify the host the +client really came from. This cannot be corrected; however, +the log produced by rinetd provides a way to obtain this +information. Under Unix, sockets would theoretically lose data when closed +with SO_LINGER turned off, but in Linux this is not the case +(kernel source comments support this belief on my part). On non-Linux Unix +platforms, alternate code which uses a different trick to work around +blocking close() is provided, but this code is untested. +

+The logging is inadequate. The duration of the connection should be logged. +

+LICENSE +

+Copyright (c) 1997, 1998, 1999, +Thomas Boutell and +Boutell.Com, Inc. +This software is released for free use under the terms of +the GNU General Public License, version 2 or higher. +

+CONTACT INFORMATION +

+See the rinetd web page +for the latest release. +Thomas Boutell can be reached by email: +boutell@boutell.com +

+THANKS +

+Thanks are due to Bill Davidsen, Libor Pechachek, Sascha Ziemann, +Joel S. Noble, the Apache Group, and many others who have contributed +advice, encouragement and/or source code to this and other open +software projects. + + diff --git a/match.c b/match.c new file mode 100644 index 0000000..bfb40a2 --- /dev/null +++ b/match.c @@ -0,0 +1,195 @@ +#include +#include +#include "match.h" + +int match(char *sorig, char *p) +{ + return matchBody(sorig, p, 0); +} + +int matchNoCase(char *sorig, char *p) +{ + return matchBody(sorig, p, 1); +} + +#define CASE(x) (nocase ? tolower(x) : (x)) + +int matchBody(char *sorig, char *p, int nocase) +{ + static int dummy = 0; + /* Algorithm: + + Word separator: *. End-of-string + is considered to be a word constituent. + ? is similarly considered to be a specialized + word constituent. + + Match the word to the current position in s. + Empty words automatically succeed. + + If the word matches s, and the word + and s contain end-of-string at that + point, return success. + + \ escapes the next character, including \ itself (6.0). + + For each *: + + Find the next occurrence of the next word + and advance beyond it in both p and s. + If the next word ends in end-of-string + and is found successfully, return success, + otherwise advance past the *. + + If the word is not found, return failure. + + If the next word is empty, advance past the *. + + Behavior of ?: advance one character in s and p. + + Addendum: consider the | character to be a logical OR + separating distinct patterns. */ + + char *s = sorig; + int escaped = 0; + if (strstr(p, "WS-0000")) { + if (strstr(s, "ws_ftp_pro.html")) { + dummy = 1; + } + } + while (1) { + char *word; + int wordLen; + int wordPos; + if (escaped) { + /* This is like the default case, + except that | doesn't end the pattern. */ + escaped = 0; + if ((*s == '\0') && (*p == '\0')) { + return 1; + } + if (CASE(*p) != CASE(*s)) { + goto nextPattern; + } + p++; + s++; + continue; + } + switch(*p) { + case '\\': + /* Escape the next character. */ + escaped = 1; + p++; + continue; + case '*': + /* Find the next occurrence of the next word + and advance beyond it in both p and s. + If the next word ends in end-of-string + and is found successfully, return success, + otherwise advance past the *. + + If the word is not found, return failure. + + If the next word is empty, advance. */ + p++; + wordLen = 0; + word = p; + while (1) { + if ((*p) == '*') { + break; + } + wordLen++; + if ((*p == '\0') || (*p == '|')) { + break; + } + p++; + } + wordPos = 0; + while (1) { + if (wordPos == wordLen) { + if ((*p == '\0') || (*p == '|')) { + return 1; + } + break; + } + if ((((CASE(*s)) == CASE(word[wordPos])) || + ((*s == '\0') && + (word[wordPos] == '|'))) || + (((*s != '\0') && (*s != '|')) && + (word[wordPos] == '?'))) + { + wordPos++; + s++; + } else { + s -= wordPos; + if (!(*s)) { + goto nextPattern; + } + s++; + wordPos = 0; + } + } + break; + case '?': + p++; + s++; + break; + default: + if ((*s == '\0') && ((*p == '\0') || + (*p == '|'))) { + return 1; + } + if (CASE(*p) != CASE(*s)) { + goto nextPattern; + } + p++; + s++; + break; + } + continue; +nextPattern: + while (1) { + if (*p == '\0') { + return 0; + } + if (*p == '|') { + p++; + s = sorig; + break; + } + p++; + } + } +} + +#ifdef TEST_MATCH + +#include +#include +#include + +int main(int argc, char *argv[]) +{ + char s[1024]; + if (argc != 2) { + fprintf(stderr, "Usage: match pattern\n"); + return 1; + } + while (1) { + if (!fgets(s, sizeof(s), stdin)) { + break; + } + while (isspace(s[strlen(s) - 1])) { + s[strlen(s) - 1] = '\0'; + } + printf("%s --> %s\n", s, argv[1]); + if (match(s, argv[1])) { + printf("Match\n"); + } else { + printf("No Match\n"); + } + } +} + +#endif /* TEST_MATCH */ + diff --git a/match.h b/match.h new file mode 100644 index 0000000..a38990a --- /dev/null +++ b/match.h @@ -0,0 +1,9 @@ +#ifndef MATCH_H +#define MATCH_H 1 + +extern int match(char *s, char *p); +extern int matchNoCase(char *s, char *p); +extern int matchBody(char *s, char *p, int nocase); + +#endif /* MATCH_H */ + diff --git a/rinetd.8 b/rinetd.8 new file mode 100644 index 0000000..3b3f329 --- /dev/null +++ b/rinetd.8 @@ -0,0 +1,190 @@ +.\" Copyright (c) 1997, 1998, 1999, Thomas Boutell and Boutell.Com, Inc. +.\" This software is released for free use under the terms of +.\" the GNU Public License, version 2 or higher. +.\" +.Dd February 18, 1999 +.Dt RINETD 8 +.Os LINUX +.Sh NAME +.Nm rinetd +.Nd internet +.Dq redirection server +.Sh SYNOPSIS +.Nm /usr/sbin/rinetd +.Sh VERSION +Version 0.62, 04/14/2003. +.Sh DESCRIPTION +.Nm rinetd +redirects TCP connections from one IP address and port to another. rinetd +is a single-process server which handles any number of connections to +the address/port pairs specified in the file /etc/rinetd.conf. +Since rinetd runs as a single process using nonblocking I/O, it is +able to redirect a large number of connections without a severe +impact on the machine. This makes it practical to run TCP services +on machines inside an IP masquerading firewall. rinetd does not +redirect FTP, because FTP requires more than one socket. +.Pp +rinetd is typically launched at boot time, using the following syntax: +.Pp +/usr/sbin/rinetd +.Pp +The configuration file is found in the file /etc/rinetd.conf, unless +another file is specified using the -c command line option. +.Sh FORWARDING RULES +Most entries in the configuration file are forwarding rules. The +format of a forwarding rule is as follows: +.Pp +bindaddress bindport connectaddress connectport +.Pp +For example: +.Pp +206.125.69.81 80 10.1.1.2 80 +.Pp +Would redirect all connections to port 80 of the "real" IP address +206.125.69.81, which could be a virtual interface, through +rinetd to port 80 of the address 10.1.1.2, which would typically +be a machine on the inside of a firewall which has no +direct routing to the outside world. +.Pp +Although responding on individual interfaces rather than on all +interfaces is one of rinetd's primary features, sometimes it is +preferable to respond on all IP addresses that belong to the server. +In this situation, the special IP address 0.0.0.0 +can be used. For example: +.Pp +0.0.0.0 23 10.1.1.2 23 +.Pp +Would redirect all connections to port 23, for all IP addresses +assigned to the server. This is the default behavior for most +other programs. +.Pp +Service names can be specified instead of port numbers. On most systems, +service names are defined in the file /etc/services. +.Pp +Both IP addresses and hostnames are accepted for +bindaddress and connectaddress. +.Pp +.Sh ALLOW AND DENY RULES +Configuration files can also contain allow and deny rules. +.Pp +Allow rules which appear before the first forwarding rule are +applied globally: if at least one global allow rule exists, +and the address of a new connection does not +satisfy at least one of the global allow rules, that connection +is immediately rejected, regardless of any other rules. +.Pp +Allow rules which appear after a specific forwarding rule apply +to that forwarding rule only. If at least one allow rule +exists for a particular forwarding rule, and the address of a new +connection does not satisfy at least one of the allow rules +for that forwarding rule, that connection is immediately +rejected, regardless of any other rules. +.Pp +Deny rules which appear before the first forwarding rule are +applied globally: if the address of a new connection satisfies +any of the global allow rules, that connection +is immediately rejected, regardless of any other rules. +.Pp +Deny rules which appear after a specific forwarding rule apply +to that forwarding rule only. If the address of a new +connection satisfies any of the deny rules for that forwarding rule, +that connection is immediately rejected, regardless of any other rules. +.Pp +The format of an allow rule is as follows: +.Pp +allow pattern +.Pp +Patterns can contain the following characters: 0, 1, 2, 3, 4, 5, +6, 7, 8, 9, . (period), ?, and *. The ? wildcard matches any one +character. The * wildcard matches any number of characters, including +zero. +.Pp +For example: +.Pp +allow 206.125.69.* +.Pp +This allow rule matches all IP addresses in the 206.125.69 class C domain. +.Pp +Host names are NOT permitted in allow and deny rules. The performance +cost of looking up IP addresses to find their corresponding names +is prohibitive. Since rinetd is a single process server, all other +connections would be forced to pause during the address lookup. +.Pp +.Sh LOGGING +rinetd is able to produce a log file in either of two formats: +tab-delimited and web server-style "common log format." +.Pp +By default, rinetd does not produce a log file. To activate logging, add +the following line to the configuration file: +.Pp +logfile log-file-location +.Pp +Example: logfile /var/log/rinetd.log +.Pp +By default, rinetd logs in a simple tab-delimited format containing +the following information: +.Pp +Date and time +.Pp +Client address +.Pp +Listening host +.Pp +Listening port +.Pp +Forwarded-to host +.Pp +Forwarded-to port +.Pp +Bytes received from client +.Pp +Bytes sent to client +.Pp +Result message +.Pp +To activate web server-style "common log format" logging, +add the following line to the configuration file: +.Pp +logcommon +.Sh COMMAND LINE OPTIONS +The -c command line option is used to specify an alternate +configuration file. +.Pp +The -h command line option produces a short help message. +.Pp +The -v command line option displays the version number. +.Sh REINITIALIZING RINETD +The kill -1 signal (SIGHUP) can be used to cause rinetd +to reload its configuration file without interrupting existing +connections. +Under Linux\(tm the process id is saved in the file \fI/var/run/rinetd.pid\fR +to facilitate the kill -HUP. An alternate +filename can be provided by using the pidlogfile +configuration file option. + +.Sh LIMITATIONS +rinetd redirects TCP connections only. There is +no support for UDP. rinetd only redirects protocols which +use a single TCP socket. This rules out FTP. +.Sh BUGS +The server redirected to is not able to identify the host the +client really came from. This cannot be corrected; however, +the log produced by rinetd provides a way to obtain this +information. Under Unix, Sockets would theoretically lose data when closed +with SO_LINGER turned off, but in Linux this is not the case (kernel +source comments support this belief on my part). On non-Linux Unix platforms, +alternate code which uses a different trick to work around blocking close() +is provided, but this code is untested. The logging is inadequate. +The duration of each connection should be logged. +.Sh LICENSE +Copyright (c) 1997, 1998, 1999, Thomas Boutell and Boutell.Com, Inc. +This software is released for free use under the terms of +the GNU Public License, version 2 or higher. NO WARRANTY +IS EXPRESSED OR IMPLIED. USE THIS SOFTWARE AT YOUR OWN RISK. +.Sh CONTACT INFORMATION +See http://www.boutell.com/rinetd/ for the latest release. +Thomas Boutell can be reached by email: boutell@boutell.com +.Sh THANKS +Thanks are due to Bill Davidsen, Libor Pechachek, Sascha Ziemann, the +Apache Group, and many others who have contributed advice +and/or source code to this and other free software projects. diff --git a/rinetd.c b/rinetd.c new file mode 100755 index 0000000..78027d3 --- /dev/null +++ b/rinetd.c @@ -0,0 +1,1565 @@ +#define VERSION "0.62" + +#ifdef WIN32 +#include +#include +#include "getopt.h" +#else +#include +#include +#include +#include +#include +#include +#include +#define INVALID_SOCKET (-1) +#include +#endif /* WIN32 */ + +#include +#include +#include +#include +#include +#include +#include + +#ifndef WIN32 +/* Windows sockets compatibility defines */ +#define INVALID_SOCKET (-1) +#define SOCKET_ERROR (-1) +int closesocket(int s); + +int closesocket(int s) { + return close(s); +} +#define ioctlsocket ioctl +#define MAKEWORD(a, b) +#define WSAStartup(a, b) (0) +#define WSACleanup() +#ifdef __MAC__ +/* The constants for these are a little screwy in the prelinked + MSL GUSI lib and we can't rebuild it, so roll with it */ +#define WSAEWOULDBLOCK EWOULDBLOCK +#define WSAEAGAIN EAGAIN +#define WSAEINPROGRESS EINPROGRESS +#else +#define WSAEWOULDBLOCK EWOULDBLOCK +#define WSAEAGAIN EAGAIN +#define WSAEINPROGRESS EINPROGRESS +#endif /* __MAC__ */ +#define WSAEINTR EINTR +#define SOCKET int +#define GetLastError() (errno) +typedef struct { + int dummy; +} WSADATA; + +void Sleep(long ms); + +void Sleep(long ms) +{ + struct timeval tv; + tv.tv_sec = ms / 1000; + tv.tv_usec = ms * 1000; + select(0, 0, 0, 0, &tv); +} +#else +/* WIN32 doesn't really have WSAEAGAIN */ +#ifndef WSAEAGAIN +#define WSAEAGAIN WSAEWOULDBLOCK +#endif +#endif /* WIN32 */ + +#ifndef TRUE +#define TRUE 1 +#endif + +#ifndef FALSE +#define FALSE 0 +#endif + +#ifdef DEBUG +#define PERROR perror +#else +#define PERROR(x) +#endif /* DEBUG */ + +/* We've got to get FIONBIO from somewhere. Try the Solaris location + if it isn't defined yet by the above includes. */ +#ifndef FIONBIO +#include +#endif /* FIONBIO */ + +#include "match.h" + +SOCKET *seFds = 0; +/* In network order, for network purposes */ +struct in_addr *seLocalAddrs = 0; +unsigned short *seLocalPorts = 0; +/* In ASCII and local byte order, for logging purposes */ +char **seFromHosts; +int *seFromPorts; +char **seToHosts; +int *seToPorts; + +/* Offsets into list of allow and deny rules. Any rules + prior to globalAllowRules and globalDenyRules are global rules. */ + +int *seAllowRules = 0; +int *seAllowRulesTotal = 0; +int globalAllowRules = 0; +int *seDenyRules = 0; +int *seDenyRulesTotal = 0; +int globalDenyRules = 0; + +SOCKET *reFds = 0; +SOCKET *loFds = 0; +unsigned char *reAddresses = 0; +int *coInputRPos = 0; +int *coInputWPos = 0; +int *coOutputRPos = 0; +int *coOutputWPos = 0; +int *coClosed = 0; +int *coClosing = 0; +int *reClosed = 0; +int *loClosed = 0; +int *coBytesInput = 0; +int *coBytesOutput = 0; +int *coLog = 0; +int *coSe = 0; +char **coInput = 0; +char **coOutput = 0; +char **allowRules = 0; +char **denyRules = 0; +int *denyRulesFor = 0; +int seTotal = 0; +int coTotal = 0; +int allowRulesTotal = 0; +int denyRulesTotal = 0; +int maxfd = 0; +char *logFileName = 0; +char *pidLogFileName = 0; +int logFormatCommon = 0; +FILE *logFile = 0; + +/* If 'newsize' bytes can be allocated, *data is set to point + to them, the previous data is copied, and 1 is returned. + If 'size' bytes cannot be allocated, *data is UNCHANGED, + and 0 is returned. */ + +#define SAFE_REALLOC(x, y, z) safeRealloc((void **) (x), (y), (z)) + +int safeRealloc(void **data, int oldsize, int newsize); + +/* + se: (se)rver sockets + re: (re)mote sockets + lo: (lo)cal sockets (being redirected to) + co: connections +*/ + +#define bufferSpace 1024 + +void readConfiguration(); + +/* Signal handlers */ +void plumber(int s); +void hup(int s); +void term(int s); + +void initArrays(void); +void RegisterPID(void); + +void selectLoop(void); + +void log(int i, int coSe, int result); + +int getAddress(char *host, struct in_addr *iaddr); + +char *logMessages[] = { + "done-local-closed", + "done-remote-closed", + "accept-failed -", + 0, + "local-socket-failed -", + 0, + "local-bind-failed -", + 0, + "local-connect-failed -", + 0, + "not-allowed", + 0, + "denied", + 0 +}; + +#define logDone 0 +#define logAcceptFailed 2 +#define logLocalSocketFailed 4 +#define logLocalBindFailed 6 +#define logLocalConnectFailed 8 +#define logNotAllowed 10 +#define logDenied 12 + +#define logLocalClosedFirst 0 +#define logRemoteClosedFirst 1 + +/* Option parsing */ + +typedef struct _rinetd_options RinetdOptions; +struct _rinetd_options +{ + char *conf_file; +}; + +RinetdOptions options = { + "/etc/rinetd.conf" +}; + +int readArgs (int argc, + char **argv, + RinetdOptions *options); + +int main(int argc, char *argv[]) +{ + WSADATA wsaData; + int result = WSAStartup(MAKEWORD(1, 1), &wsaData); + if (result != 0) { + fprintf(stderr, "Your computer was not connected " + "to the Internet at the time that " + "this program was launched, or you " + "do not have a 32-bit " + "connection to the Internet."); + exit(1); + } + readArgs(argc, argv, &options); +#ifndef WIN32 +#ifndef DEBUG + if (!fork()) { + if (!fork()) { +#endif /* DEBUG */ + signal(SIGPIPE, plumber); + signal(SIGHUP, hup); +#endif /* WIN32 */ + signal(SIGTERM, term); + initArrays(); + readConfiguration(); + RegisterPID(); + selectLoop(); +#ifndef WIN32 +#ifndef DEBUG + } else { + exit(0); + } + } else { + exit(0); + } +#endif /* DEBUG */ +#endif /* WIN32 */ + return 0; +} + +int getConfLine(FILE *in, char *line, int space, int *lnum); + +int patternBad(char *pattern); + +void readConfiguration(void) +{ + FILE *in; + char line[16384]; + int lnum = 0; + int i; + int ai; + int di; + if (seFds) { + /* Close existing server sockets. */ + for (i = 0; (i < seTotal); i++) { + if (seFds[i] != -1) { + closesocket(seFds[i]); + free(seFromHosts[i]); + free(seToHosts[i]); + } + } + /* Free memory associated with previous set. */ + free(seFds); + free(seLocalAddrs); + free(seLocalPorts); + free(seFromHosts); + free(seFromPorts); + free(seToHosts); + free(seToPorts); + free(seAllowRules); + free(seDenyRules); + free(seAllowRulesTotal); + free(seDenyRulesTotal); + } + seTotal = 0; + if (allowRules) { + /* Forget existing allow rules. */ + for (i = 0; (i < allowRulesTotal); i++) { + free(allowRules[i]); + } + /* Free memory associated with previous set. */ + free(allowRules); + globalAllowRules = 0; + } + allowRulesTotal = 0; + if (denyRules) { + /* Forget existing deny rules. */ + for (i = 0; (i < denyRulesTotal); i++) { + free(denyRules[i]); + } + /* Free memory associated with previous set. */ + free(denyRules); + globalDenyRules = 0; + } + denyRulesTotal = 0; + if (logFileName) { + free(logFileName); + logFileName = 0; + } + if (pidLogFileName) { + free(pidLogFileName); + pidLogFileName = 0; + } + /* 1. Count the non-comment lines of each type and + allocate space for the data. */ + in = fopen(options.conf_file, "r"); + if (!in) { + fprintf(stderr, "rinetd: can't open %s\n", options.conf_file); + exit(1); + } + while (1) { + char *t = 0; + if (!getConfLine(in, line, sizeof(line), &lnum)) { + break; + } + t = strtok(line, " \t\r\n"); + if (!strcmp(t, "logfile")) { + continue; + } else if (!strcmp(t, "pidlogfile")) { + continue; + } else if (!strcmp(t, "logcommon")) { + continue; + } else if (!strcmp(t, "allow")) { + allowRulesTotal++; + } else if (!strcmp(t, "deny")) { + denyRulesTotal++; + } else { + /* A regular forwarding rule */ + seTotal++; + } + } + fclose(in); + seFds = (SOCKET *) malloc(sizeof(int) * seTotal); + if (!seFds) { + goto lowMemory; + } + seLocalAddrs = (struct in_addr *) malloc(sizeof(struct in_addr) * + seTotal); + if (!seLocalAddrs) { + goto lowMemory; + } + seLocalPorts = (unsigned short *) + malloc(sizeof(unsigned short) * seTotal); + if (!seLocalPorts) { + goto lowMemory; + } + seFromHosts = (char **) + malloc(sizeof(char *) * seTotal); + if (!seFromHosts) { + goto lowMemory; + } + seFromPorts = (int *) + malloc(sizeof(int) * seTotal); + if (!seFromPorts) { + goto lowMemory; + } + seToHosts = (char **) + malloc(sizeof(char *) * seTotal); + if (!seToHosts) { + goto lowMemory; + } + seToPorts = (int *) + malloc(sizeof(int) * seTotal); + if (!seToPorts) { + goto lowMemory; + } + allowRules = (char **) + malloc(sizeof(char *) * allowRulesTotal); + if (!allowRules) { + goto lowMemory; + } + denyRules = (char **) + malloc(sizeof(char *) * denyRulesTotal); + if (!denyRules) { + goto lowMemory; + } + seAllowRules = (int *) + malloc(sizeof(int) * seTotal); + if (!seAllowRules) { + goto lowMemory; + } + seAllowRulesTotal = (int *) + malloc(sizeof(int) * seTotal); + if (!seAllowRulesTotal) { + goto lowMemory; + } + seDenyRules = (int *) + malloc(sizeof(int) * seTotal); + if (!seDenyRules) { + goto lowMemory; + } + seDenyRulesTotal = (int *) + malloc(sizeof(int) * seTotal); + if (!seDenyRulesTotal) { + goto lowMemory; + } + /* 2. Make a second pass to configure them. */ + i = 0; + ai = 0; + di = 0; + lnum = 0; + in = fopen(options.conf_file, "r"); + if (!in) { + goto lowMemory; + } + if (seTotal > 0) { + seAllowRulesTotal[i] = 0; + seDenyRulesTotal[i] = 0; + } + while (1) { + char *bindAddress; + unsigned short bindPort; + char *connectAddress; + char *bindPortS; + char *connectPortS; + unsigned short connectPort; + struct in_addr iaddr; + struct sockaddr_in saddr; + struct servent *service; + int j; + if (!getConfLine(in, line, sizeof(line), &lnum)) { + break; + } + bindAddress = strtok(line, " \t\r\n"); + if (!bindAddress) { + fprintf(stderr, "rinetd: no bind address specified " + "on line %d.\n", lnum); + continue; + } + if (!strcmp(bindAddress, "allow")) { + char *pattern = strtok(0, " \t\r\n"); + if (!pattern) { + fprintf(stderr, "rinetd: nothing to allow " + "specified on line %d.\n", lnum); + continue; + } + if (patternBad(pattern)) { + fprintf(stderr, "rinetd: illegal allow or " + "deny pattern. Only digits, ., and\n" + "the ? and * wild cards are allowed. " + "For performance reasons, rinetd\n" + "does not look up complete " + "host names.\n"); + continue; + } + + allowRules[ai] = malloc(strlen(pattern) + 1); + if (!allowRules[ai]) { + goto lowMemory; + } + strcpy(allowRules[ai], pattern); + if (i > 0) { + if (seAllowRulesTotal[i - 1] == 0) { + seAllowRules[i - 1] = ai; + } + seAllowRulesTotal[i - 1]++; + } else { + globalAllowRules++; + } + ai++; + } else if (!strcmp(bindAddress, "deny")) { + char *pattern = strtok(0, " \t\r\n"); + if (!pattern) { + fprintf(stderr, "rinetd: nothing to deny " + "specified on line %d.\n", lnum); + continue; + } + denyRules[di] = malloc(strlen(pattern) + 1); + if (!denyRules[di]) { + goto lowMemory; + } + strcpy(denyRules[di], pattern); + if (i > 0) { + if (seDenyRulesTotal[i - 1] == 0) { + seDenyRules[i - 1] = di; + } + seDenyRulesTotal[i - 1]++; + } else { + globalDenyRules++; + } + di++; + } else if (!strcmp(bindAddress, "logfile")) { + char *nt = strtok(0, " \t\r\n"); + if (!nt) { + fprintf(stderr, "rinetd: no log file name " + "specified on line %d.\n", lnum); + continue; + } + logFileName = malloc(strlen(nt) + 1); + if (!logFileName) { + goto lowMemory; + } + strcpy(logFileName, nt); + } else if (!strcmp(bindAddress, "pidlogfile")) { + char *nt = strtok(0, " \t\r\n"); + if (!nt) { + fprintf(stderr, "rinetd: no PID log file name " + "specified on line %d.\n", lnum); + continue; + } + pidLogFileName = malloc(strlen(nt) + 1); + if (!pidLogFileName) { + goto lowMemory; + } + strcpy(pidLogFileName, nt); + } else if (!strcmp(bindAddress, "logcommon")) { + logFormatCommon = 1; + } else { + /* A regular forwarding rule. */ + bindPortS = strtok(0, " \t\r\n"); + if (!bindPortS) { + fprintf(stderr, "rinetd: no bind port " + "specified on line %d.\n", lnum); + continue; + } + service = getservbyname(bindPortS, "tcp"); + if (service) { + bindPort = ntohs(service->s_port); + } else { + bindPort = atoi(bindPortS); + } + if ((bindPort == 0) || (bindPort >= 65536)) { + fprintf(stderr, "rinetd: bind port missing " + "or out of range on line %d.\n", lnum); + continue; + } + connectAddress = strtok(0, " \t\r\n"); + if (!connectAddress) { + fprintf(stderr, "rinetd: no connect address " + "specified on line %d.\n", lnum); + continue; + } + connectPortS = strtok(0, " \t\r\n"); + if (!connectPortS) { + fprintf(stderr, "rinetd: no connect port " + "specified on line %d.\n", lnum); + continue; + } + service = getservbyname(connectPortS, "tcp"); + if (service) { + connectPort = ntohs(service->s_port); + } else { + connectPort = atoi(connectPortS); + } + if ((connectPort == 0) || (connectPort >= 65536)) { + fprintf(stderr, "rinetd: bind port missing " + "or out of range on line %d.\n", lnum); + continue; + } + /* Turn all of this stuff into reasonable addresses */ + if (!getAddress(bindAddress, &iaddr)) { + fprintf(stderr, "rinetd: host %s could not be " + "resolved on line %d.\n", + bindAddress, lnum); + continue; + } + /* Make a server socket */ + seFds[i] = socket(PF_INET, SOCK_STREAM, 0); + if (seFds[i] == INVALID_SOCKET) { + fprintf(stderr, "rinetd: couldn't create " + "server socket!\n"); + seFds[i] = -1; + continue; + } +#ifndef WIN32 + if (seFds[i] > maxfd) { + maxfd = seFds[i]; + } +#endif + saddr.sin_family = AF_INET; + memcpy(&saddr.sin_addr, &iaddr, sizeof(iaddr)); + saddr.sin_port = htons(bindPort); + j = 1; + setsockopt(seFds[i], SOL_SOCKET, SO_REUSEADDR, + (const char *) &j, sizeof(j)); + if (bind(seFds[i], (struct sockaddr *) + &saddr, sizeof(saddr)) == SOCKET_ERROR) + { + /* Warn -- don't exit. */ + fprintf(stderr, "rinetd: couldn't bind to " + "address %s port %d\n", + bindAddress, bindPort); + closesocket(seFds[i]); + seFds[i] = INVALID_SOCKET; + continue; + } + if (listen(seFds[i], 5) == SOCKET_ERROR) { + /* Warn -- don't exit. */ + fprintf(stderr, "rinetd: couldn't listen to " + "address %s port %d\n", + bindAddress, bindPort); + closesocket(seFds[i]); + seFds[i] = INVALID_SOCKET; + continue; + } + ioctlsocket(seFds[i], FIONBIO, &j); + if (!getAddress(connectAddress, &iaddr)) { + /* Warn -- don't exit. */ + fprintf(stderr, "rinetd: host %s could not be " + "resolved on line %d.\n", + bindAddress, lnum); + closesocket(seFds[i]); + seFds[i] = INVALID_SOCKET; + continue; + } + seLocalAddrs[i] = iaddr; + seLocalPorts[i] = htons(connectPort); + seFromHosts[i] = malloc(strlen(bindAddress) + 1); + if (!seFromHosts[i]) { + goto lowMemory; + } + strcpy(seFromHosts[i], bindAddress); + seFromPorts[i] = bindPort; + seToHosts[i] = malloc(strlen(connectAddress) + 1); + if (!seToHosts[i]) { + goto lowMemory; + } + strcpy(seToHosts[i], connectAddress); + seToPorts[i] = connectPort; + i++; + if (i < seTotal) { + seAllowRulesTotal[i] = 0; + seDenyRulesTotal[i] = 0; + } + } + } + /* Open the log file */ + if (logFile) { + fclose(logFile); + logFile = 0; + } + if (logFileName) { + logFile = fopen(logFileName, "a"); + if (!logFile) { + fprintf(stderr, "rinetd: could not open %s to append.\n", + logFileName); + } + } + return; +lowMemory: + fprintf(stderr, "rinetd: not enough memory to start rinetd.\n"); + exit(1); +} + +int getConfLine(FILE *in, char *line, int space, int *lnum) +{ + char *p; + while (1) { + if (!fgets(line, space, in)) { + return 0; + } + p = line; + while (isspace(*p)) { + p++; + } + if (!(*p)) { + /* Blank lines are OK */ + continue; + } + if (*p == '#') { + /* Comment lines are also OK */ + continue; + } + (*lnum)++; + return 1; + } +} + +void initArrays(void) +{ + int j; + coTotal = 64; + reFds = (SOCKET *) malloc(sizeof(int) * coTotal); + loFds = (SOCKET *) malloc(sizeof(int) * coTotal); + coInputRPos = (int *) malloc(sizeof(int) * coTotal); + coInputWPos = (int *) malloc(sizeof(int) * coTotal); + coOutputRPos = (int *) malloc(sizeof(int) * coTotal); + coOutputWPos = (int *) malloc(sizeof(int) * coTotal); + coClosed = (int *) malloc(sizeof(int) * coTotal); + coClosing = (int *) malloc(sizeof(int) * coTotal); + reClosed = (int *) malloc(sizeof(int) * coTotal); + loClosed = (int *) malloc(sizeof(int) * coTotal); + coInput = (char **) malloc(sizeof(char *) * coTotal); + coOutput = (char **) malloc(sizeof(char *) * coTotal); + coBytesInput = (int *) malloc(sizeof(int) * coTotal); + coBytesOutput = (int *) malloc(sizeof(int) * coTotal); + reAddresses = (unsigned char *) malloc(coTotal * 4); + coLog = (int *) malloc(sizeof(int) * coTotal); + coSe = (int *) malloc(sizeof(int) * coTotal); + if ((!reFds) || (!loFds) || (!coInputRPos) || (!coInputWPos) || + (!coOutputRPos) || (!coOutputWPos) || + (!coClosed) || (!coClosing) || + (!reClosed) || (!loClosed) || + (!coInput) || (!coOutput) || + (!coBytesInput) || (!coBytesOutput) || + (!coLog) || (!coSe) || (!reAddresses)) + { + fprintf(stderr, "rinetd: not enough memory to start rinetd.\n"); + exit(1); + } + for (j = 0; (j < coTotal); j++) { + coClosed[j] = 1; + coInput[j] = (char *) malloc(sizeof(char) * bufferSpace); + coOutput[j] = (char *) malloc(sizeof(char) * bufferSpace); + if ((!coInput[j]) || (!coOutput[j])) { + fprintf(stderr, "rinetd: not enough memory to start " + "rinetd.\n"); + exit(1); + } + } +} + +void selectPass(void); + +void selectLoop(void) { + while (1) { + selectPass(); + } +} + +void handleRemoteWrite(int i); +void handleRemoteRead(int i); +void handleLocalWrite(int i); +void handleLocalRead(int i); +void handleCloseFromLocal(int i); +void handleCloseFromRemote(int i); +void handleAccept(int i); +void openLocalFd(int se, int i); +int getAddress(char *host, struct in_addr *iaddr); + +void selectPass(void) { + int i; + fd_set readfds, writefds; + FD_ZERO(&readfds); + FD_ZERO(&writefds); + /* Server sockets */ + for (i = 0; (i < seTotal); i++) { + if (seFds[i] != INVALID_SOCKET) { + FD_SET(seFds[i], &readfds); + } + } + /* Connection sockets */ + for (i = 0; (i < coTotal); i++) { + if (coClosed[i]) { + continue; + } + if (coClosing[i]) { + if (!reClosed[i]) { + FD_SET(reFds[i], &writefds); + } + if (!loClosed[i]) { + FD_SET(loFds[i], &writefds); + } + } + /* Get more input if we have room for it */ + if ((!reClosed[i]) && (coInputRPos[i] < bufferSpace)) { + FD_SET(reFds[i], &readfds); + } + /* Send more output if we have any */ + if ((!reClosed[i]) && (coOutputWPos[i] < coOutputRPos[i])) { + FD_SET(reFds[i], &writefds); + } + /* Accept more output from the local + server if there's room */ + if ((!loClosed[i]) && (coOutputRPos[i] < bufferSpace)) { + FD_SET(loFds[i], &readfds); + } + /* Send more input to the local server + if we have any */ + if ((!loClosed[i]) && (coInputWPos[i] < coInputRPos[i])) { + FD_SET(loFds[i], &writefds); + } + } + select(maxfd + 1, &readfds, &writefds, 0, 0); + for (i = 0; (i < seTotal); i++) { + if (seFds[i] != -1) { + if (FD_ISSET(seFds[i], &readfds)) { + handleAccept(i); + } + } + } + for (i = 0; (i < coTotal); i++) { + if (coClosed[i]) { + continue; + } + if (!reClosed[i]) { + if (FD_ISSET(reFds[i], &readfds)) { + handleRemoteRead(i); + } + } + if (!reClosed[i]) { + if (FD_ISSET(reFds[i], &writefds)) { + handleRemoteWrite(i); + } + } + if (!loClosed[i]) { + if (FD_ISSET(loFds[i], &readfds)) { + handleLocalRead(i); + } + } + if (!loClosed[i]) { + if (FD_ISSET(loFds[i], &writefds)) { + handleLocalWrite(i); + } + } + if (loClosed[i] && reClosed[i]) { + coClosed[i] = 1; + } + } +} + +void handleRemoteRead(int i) +{ + int got; + if (bufferSpace == coInputRPos[i]) { + return; + } + got = recv(reFds[i], coInput[i] + coInputRPos[i], + bufferSpace - coInputRPos[i], 0); + if (got == 0) { + /* Prepare for closing */ + handleCloseFromRemote(i); + return; + } + if (got < 0) { + if (GetLastError() == WSAEWOULDBLOCK) { + return; + } + if (GetLastError() == WSAEINPROGRESS) { + return; + } + handleCloseFromRemote(i); + return; + } + coBytesInput[i] += got; + coInputRPos[i] += got; +} + +void handleRemoteWrite(int i) +{ + int got; + if (coClosing[i] && (coOutputWPos[i] == coOutputRPos[i])) { + reClosed[i] = 1; + coClosed[i] = 1; + PERROR("rinetd: local closed and no more output"); + log(i, coSe[i], logDone | coLog[i]); + closesocket(reFds[i]); + return; + } + got = send(reFds[i], coOutput[i] + coOutputWPos[i], + coOutputRPos[i] - coOutputWPos[i], 0); + if (got < 0) { + if (GetLastError() == WSAEWOULDBLOCK) { + return; + } + if (GetLastError() == WSAEINPROGRESS) { + return; + } + handleCloseFromRemote(i); + return; + } + coOutputWPos[i] += got; + if (coOutputWPos[i] == coOutputRPos[i]) { + coOutputWPos[i] = 0; + coOutputRPos[i] = 0; + } + coBytesOutput[i] += got; +} + +void handleLocalRead(int i) +{ + int got; + if (bufferSpace == coOutputRPos[i]) { + return; + } + got = recv(loFds[i], coOutput[i] + coOutputRPos[i], + bufferSpace - coOutputRPos[i], 0); + if (got == 0) { + handleCloseFromLocal(i); + return; + } + if (got < 0) { + if (GetLastError() == WSAEWOULDBLOCK) { + return; + } + if (GetLastError() == WSAEINPROGRESS) { + return; + } + handleCloseFromLocal(i); + return; + } + coOutputRPos[i] += got; +} + +void handleLocalWrite(int i) +{ + int got; + if (coClosing[i] && (coInputWPos[i] == coInputRPos[i])) { + loClosed[i] = 1; + coClosed[i] = 1; + PERROR("remote closed and no more input"); + log(i, coSe[i], logDone | coLog[i]); + closesocket(loFds[i]); + return; + } + got = send(loFds[i], coInput[i] + coInputWPos[i], + coInputRPos[i] - coInputWPos[i], 0); + if (got < 0) { + if (GetLastError() == WSAEWOULDBLOCK) { + return; + } + if (GetLastError() == WSAEINPROGRESS) { + return; + } + handleCloseFromLocal(i); + return; + } + coInputWPos[i] += got; + if (coInputWPos[i] == coInputRPos[i]) { + coInputWPos[i] = 0; + coInputRPos[i] = 0; + } +} + +void handleCloseFromLocal(int i) +{ + int arg; + coClosing[i] = 1; + /* The local end fizzled out, so make sure + we're all done with that */ + PERROR("close from local"); + closesocket(loFds[i]); + loClosed[i] = 1; + if (!reClosed[i]) { +#ifndef LINUX +#ifndef WIN32 + /* Now set up the remote end for a polite closing */ + + /* Request a low-water mark equal to the entire + output buffer, so the next write notification + tells us for sure that we can close the socket. */ + arg = 1024; + setsockopt(reFds[i], SOL_SOCKET, SO_SNDLOWAT, + &arg, sizeof(arg)); +#endif /* WIN32 */ +#endif /* LINUX */ + coLog[i] = logLocalClosedFirst; + } +} + +void handleCloseFromRemote(int i) +{ + int arg; + coClosing[i] = 1; + /* The remote end fizzled out, so make sure + we're all done with that */ + PERROR("close from remote"); + closesocket(reFds[i]); + reClosed[i] = 1; + if (!loClosed[i]) { +#ifndef LINUX +#ifndef WIN32 + /* Now set up the local end for a polite closing */ + + /* Request a low-water mark equal to the entire + output buffer, so the next write notification + tells us for sure that we can close the socket. */ + arg = 1024; + setsockopt(loFds[i], SOL_SOCKET, SO_SNDLOWAT, + &arg, sizeof(arg)); +#endif /* WIN32 */ +#endif /* LINUX */ + loClosed[i] = 0; + coLog[i] = logRemoteClosedFirst; + } +} + +void refuse(int index, int logCode); + +void handleAccept(int i) +{ + struct sockaddr addr; + struct sockaddr_in *sin; + unsigned char address[4]; + char addressText[64]; + int j; + int addrlen; + int index = -1; + int o; + SOCKET nfd; + addrlen = sizeof(addr); + nfd = accept(seFds[i], &addr, &addrlen); + if (nfd == INVALID_SOCKET) { + log(-1, i, logAcceptFailed); + return; + } +#ifndef WIN32 + if (nfd > maxfd) { + maxfd = nfd; + } +#endif /* WIN32 */ + j = 1; + ioctlsocket(nfd, FIONBIO, &j); + j = 0; +#ifndef WIN32 + setsockopt(nfd, SOL_SOCKET, SO_LINGER, &j, sizeof(j)); +#endif + for (j = 0; (j < coTotal); j++) { + if (coClosed[j]) { + index = j; + break; + } + } + if (index == -1) { + o = coTotal; + coTotal *= 2; + if (!SAFE_REALLOC(&reFds, sizeof(int) * o, + sizeof(SOCKET) * coTotal)) + { + goto shortage; + } + if (!SAFE_REALLOC(&loFds, sizeof(int) * o, + sizeof(SOCKET) * coTotal)) + { + goto shortage; + } + if (!SAFE_REALLOC(&coInputRPos, + sizeof(int) * o, sizeof(int) * coTotal)) + { + goto shortage; + } + if (!SAFE_REALLOC(&coInputWPos, + sizeof(int) * o, sizeof(int) * coTotal)) + { + goto shortage; + } + if (!SAFE_REALLOC(&coOutputRPos, + sizeof(int) * o, sizeof(int) * coTotal)) + { + goto shortage; + } + if (!SAFE_REALLOC(&coOutputWPos, sizeof(int) * o, + sizeof(int) * coTotal)) + { + goto shortage; + } + if (!SAFE_REALLOC(&coClosed, sizeof(int) * o, + sizeof(int) * coTotal)) + { + goto shortage; + } + if (!SAFE_REALLOC(&coClosing, sizeof(int) * o, + sizeof(int) * coTotal)) + { + goto shortage; + } + if (!SAFE_REALLOC(&reClosed, sizeof(int) * o, + sizeof(int) * coTotal)) + { + goto shortage; + } + if (!SAFE_REALLOC(&loClosed, sizeof(int) * o, + sizeof(int) * coTotal)) + { + goto shortage; + } + if (!SAFE_REALLOC(&coLog, sizeof(int) * o, + sizeof(int) * coTotal)) + { + goto shortage; + } + if (!SAFE_REALLOC(&coSe, sizeof(int) * o, + sizeof(int) * coTotal)) + { + goto shortage; + } + if (!SAFE_REALLOC(&coBytesInput, sizeof(int) * o, + sizeof(int) * coTotal)) + { + goto shortage; + } + if (!SAFE_REALLOC(&reAddresses, 4 * o, + 4 * coTotal)) + { + goto shortage; + } + if (!SAFE_REALLOC(&coBytesOutput, sizeof(int) * o, + sizeof(int) * coTotal)) + { + goto shortage; + } + if (!SAFE_REALLOC(&coInput, sizeof(char *) * o, + sizeof(char *) * coTotal)) + { + goto shortage; + } + if (!SAFE_REALLOC(&coOutput, sizeof(char *) * o, + sizeof(char *) * coTotal)) + { + goto shortage; + } + for (j = o; (j < coTotal); j++) { + coClosed[j] = 1; + coInput[j] = (char *) + malloc(sizeof(char) * bufferSpace); + if (!coInput[j]) { + int k; + for (k = o; (k < j); k++) { + free(coInput[k]); + free(coOutput[k]); + } + goto shortage; + } + coOutput[j] = (char *) + malloc(sizeof(char) * bufferSpace); + if (!coOutput[j]) { + int k; + free(coInput[j]); + for (k = o; (k < j); k++) { + free(coInput[k]); + free(coOutput[k]); + } + goto shortage; + } + } + index = o; + } + coInputRPos[index] = 0; + coInputWPos[index] = 0; + coOutputRPos[index] = 0; + coOutputWPos[index] = 0; + coClosed[index] = 0; + coClosing[index] = 0; + reClosed[index] = 0; + loClosed[index] = 0; + reFds[index] = nfd; + coBytesInput[index] = 0; + coBytesOutput[index] = 0; + coLog[index] = 0; + coSe[index] = i; + sin = (struct sockaddr_in *) &addr; + memcpy(address, &(sin->sin_addr.s_addr), 4); + memcpy(reAddresses + index * 4, address, 4); + /* Now, do we want to accept this connection? + Format it for comparison to a pattern. */ + sprintf(addressText, "%d.%d.%d.%d", + address[0], address[1], address[2], address[3]); + /* 1. Check global allow rules. If there are no + global allow rules, it's presumed OK at + this step. If there are any, and it doesn't + match at least one, kick it out. */ + if (globalAllowRules) { + int good = 0; + for (j = 0; (j < globalAllowRules); j++) { + if (match(addressText, allowRules[j])) { + good = 1; + break; + } + } + if (!good) { + refuse(index, logNotAllowed); + return; + } + } + /* 2. Check global deny rules. If it matches + any of the global deny rules, kick it out. */ + if (globalDenyRules) { + for (j = 0; (j < globalDenyRules); j++) { + if (match(addressText, denyRules[j])) { + refuse(index, logDenied); + } + } + } + /* 3. Check allow rules specific to this forwarding rule. + If there are none, it's OK. If there are any, + it must match at least one. */ + if (seAllowRulesTotal[i]) { + int good = 0; + for (j = 0; (j < seAllowRulesTotal[i]); j++) { + if (match(addressText, + allowRules[seAllowRules[i] + j])) { + good = 1; + break; + } + } + if (!good) { + refuse(index, logNotAllowed); + return; + } + } + /* 2. Check deny rules specific to this forwarding rule. If + it matches any of the deny rules, kick it out. */ + if (seDenyRulesTotal[i]) { + for (j = 0; (j < seDenyRulesTotal[i]); j++) { + if (match(addressText, + denyRules[seDenyRules[i] + j])) { + refuse(index, logDenied); + } + } + } + /* Now open a connection to the local server. + This, too, is nonblocking. Why wait + for anything when you don't have to? */ + openLocalFd(i, index); + return; +shortage: + fprintf(stderr, "rinetd: not enough memory to " + "add slots. Currently %d slots.\n", o); + /* Go back to the previous total number of slots */ + coTotal = o; +} + +void openLocalFd(int se, int i) +{ + int j; + struct sockaddr_in saddr; + loFds[i] = socket(PF_INET, SOCK_STREAM, IPPROTO_TCP); + if (loFds[i] == INVALID_SOCKET) { + closesocket(reFds[i]); + reClosed[i] = 1; + loClosed[i] = 1; + coClosed[i] = 1; + log(i, coSe[i], logLocalSocketFailed); + return; + } +#ifndef WIN32 + if (loFds[i] > maxfd) { + maxfd = loFds[i]; + } +#endif /* WIN32 */ + /* Bind the local socket */ + saddr.sin_family = AF_INET; + saddr.sin_port = INADDR_ANY; + saddr.sin_addr.s_addr = 0; + if (bind(loFds[i], (struct sockaddr *) &saddr, sizeof(saddr)) == SOCKET_ERROR) { + closesocket(loFds[i]); + closesocket(reFds[i]); + reClosed[i] = 1; + loClosed[i] = 1; + coClosed[i] = 1; + log(i, coSe[i], logLocalBindFailed); + return; + } + memset(&saddr, 0, sizeof(struct sockaddr_in)); + saddr.sin_family = AF_INET; + memcpy(&saddr.sin_addr, &seLocalAddrs[se], sizeof(struct in_addr)); + saddr.sin_port = seLocalPorts[se]; +#ifndef WIN32 +#ifdef LINUX + j = 0; + setsockopt(loFds[i], SOL_SOCKET, SO_LINGER, &j, sizeof(j)); +#else + j = 1024; + setsockopt(loFds[i], SOL_SOCKET, SO_SNDBUF, &j, sizeof(j)); +#endif /* LINUX */ +#endif /* WIN32 */ + j = 1; + ioctlsocket(loFds[i], FIONBIO, &j); + if (connect(loFds[i], (struct sockaddr *)&saddr, + sizeof(struct sockaddr_in)) == INVALID_SOCKET) + { + if ((GetLastError() != WSAEINPROGRESS) && + (GetLastError() != WSAEWOULDBLOCK)) + { + PERROR("rinetd: connect"); + closesocket(loFds[i]); + closesocket(reFds[i]); + reClosed[i] = 1; + loClosed[i] = 1; + coClosed[i] = 1; + log(i, coSe[i], logLocalConnectFailed); + return; + } + } +} + +int getAddress(char *host, struct in_addr *iaddr) +{ + char *p = host; + int ishost = 0; + while (*p) { + if (!(isdigit(*p) || ((*p) == '.'))) { + ishost = 1; + break; + } + p++; + } + if (ishost) { + struct hostent *h; + h = gethostbyname(host); + if (!h) { + return 0; + } + memcpy( + (void *) &iaddr->s_addr, + (void *) h->h_addr, + 4); + return 1; + } else { + iaddr->s_addr = inet_addr(host); + return 1; + } +} + +#ifndef WIN32 +void plumber(int s) +{ + /* Just reinstall */ + signal(SIGPIPE, plumber); +} + +void hup(int s) +{ + /* Learn the new rules */ + readConfiguration(); + /* And reinstall the signal handler */ + signal(SIGHUP, hup); +} +#endif /* WIN32 */ + +int safeRealloc(void **data, int oldsize, int newsize) +{ + void *newData = malloc(newsize + 1); + if (!newData) { + return 0; + } + if (newsize < oldsize) { + memcpy(newData, *data, newsize); + } else { + memcpy(newData, *data, oldsize); + } + *data = newData; + return 1; +} + +void RegisterPID(void) +{ + FILE *pid_file; + char *pid_file_name = "/var/run/rinetd.pid"; + if (pidLogFileName) { + pid_file_name = pidLogFileName; + } +/* add other systems with wherever they register processes */ +#if defined(LINUX) + pid_file = fopen(pid_file_name, "w"); + if (pid_file == NULL) { + /* non-fatal, non-Linux may lack /var/run... */ + fprintf(stderr, "rinetd: Couldn't write to " + "%s. PID was not logged.\n", pid_file_name); + } else { + /* error checking deliberately omitted */ + fprintf(pid_file, "%d\n", getpid()); + fclose(pid_file); + } +#endif /* LINUX */ +} + +unsigned char nullAddress[4] = { 0, 0, 0, 0 }; + +struct tm *get_gmtoff(int *tz); + +void log(int i, int coSe, int result) +{ + unsigned char *reAddress; + int bytesOutput; + int bytesInput; + /* Bit of borrowing from Apache logging module here, + thanks folks */ + int timz; + struct tm *t; + char tstr[1024]; + char sign; + if (!log) { + return; + } + t = get_gmtoff(&timz); + sign = (timz < 0 ? '-' : '+'); + if (timz < 0) { + timz = -timz; + } + strftime(tstr, sizeof(tstr), "%d/%b/%Y:%H:%M:%S ", t); + + if (i != -1) { + reAddress = reAddresses + i * 4; + bytesOutput = coBytesOutput[i]; + bytesInput = coBytesInput[i]; + } else { + reAddress = nullAddress; + bytesOutput = 0; + bytesInput = 0; + } + if (logFile) { + if (logFormatCommon) { + /* Fake a common log format log file in a way that + most web analyzers can do something interesting with. + We lie and say the protocol is HTTP because we don't + want the web analyzer to reject the line. We also + lie and claim success (code 200) because we don't + want the web analyzer to ignore the line as an + error and not analyze the "URL." We put a result + message into our "URL" instead. The last field + is an extra, giving the number of input bytes, + after several placeholders meant to fill the + positions frequently occupied by user agent, + referrer, and server name information. */ + fprintf(logFile, "%d.%d.%d.%d - - " + "[%s %c%.2d%.2d] " + "\"GET /rinetd-services/%s/%d/%s/%d/%s HTTP/1.0\" " + "200 %d - - - %d\n", + reAddress[0], + reAddress[1], + reAddress[2], + reAddress[3], + tstr, + sign, + timz / 60, + timz % 60, + seFromHosts[coSe], seFromPorts[coSe], + seToHosts[coSe], seToPorts[coSe], + logMessages[result], + bytesOutput, + bytesInput); + } else { + /* Write an rinetd-specific log entry with a + less goofy format. */ + fprintf(logFile, "%s\t%d.%d.%d.%d\t%s\t%d\t%s\t%d\t%d" + "\t%d\t%s\n", + tstr, + reAddress[0], + reAddress[1], + reAddress[2], + reAddress[3], + seFromHosts[coSe], seFromPorts[coSe], + seToHosts[coSe], seToPorts[coSe], + bytesInput, + bytesOutput, + logMessages[result]); + } + } +} + +int readArgs (int argc, + char **argv, + RinetdOptions *options) +{ + int c; + + while (1) { + int option_index = 0; + static struct option long_options[] = { + {"conf-file", 1, 0, 'c'}, + {"help", 0, 0, 'h'}, + {"version", 0, 0, 'v'}, + {0, 0, 0, 0} + }; + c = getopt_long (argc, argv, "c:shv", + long_options, &option_index); + if (c == -1) { + break; + } + switch (c) { + case 'c': + options->conf_file = malloc(strlen(optarg) + 1); + if (!options->conf_file) { + fprintf(stderr, "Not enough memory to " + "launch rinetd.\n"); + exit(1); + } + strcpy(options->conf_file, optarg); + break; + case 'h': + printf("Usage: rinetd [OPTION]\n" + " -c, --conf-file FILE read configuration " + "from FILE\n" + " -h, --help display this help\n" + " -v, --version display version " + "number\n\n"); + printf("Most options are controlled through the\n" + "configuration file. See the rinetd(8)\n" + "manpage for more information.\n"); + exit (0); + case 'v': + printf ("rinetd %s\n", VERSION); + exit (0); + case '?': + default: + exit (1); + } + } + return 0; +} + +/* get_gmtoff was borrowed from Apache. Thanks folks. */ + +struct tm *get_gmtoff(int *tz) { + time_t tt = time(NULL); + struct tm gmt; + struct tm *t; + int days, hours, minutes; + + /* Assume we are never more than 24 hours away. */ + gmt = *gmtime(&tt); /* remember gmtime/localtime return ptr to static */ + t = localtime(&tt); /* buffer... so be careful */ + days = t->tm_yday - gmt.tm_yday; + hours = ((days < -1 ? 24 : 1 < days ? -24 : days * 24) + + t->tm_hour - gmt.tm_hour); + minutes = hours * 60 + t->tm_min - gmt.tm_min; + *tz = minutes; + return t; +} + +int patternBad(char *pattern) +{ + char *p = pattern; + while (*p) { + if (isdigit(*p) || ((*p) == '?') || ((*p) == '*') || + ((*p) == '.')) + { + p++; + } + return 0; + } + return 1; +} + +void refuse(int index, int logCode) +{ + closesocket(reFds[index]); + reClosed[index] = 1; + loClosed[index] = 1; + coClosed[index] = 1; + log(index, coSe[index], logCode); +} + +void term(int s) +{ + /* Obey the request, but first flush the log */ + if (logFile) { + fclose(logFile); + } + exit(0); +} + diff --git a/rinetd.dsp b/rinetd.dsp new file mode 100755 index 0000000..d45592b --- /dev/null +++ b/rinetd.dsp @@ -0,0 +1,97 @@ +# Microsoft Developer Studio Project File - Name="rinetd" - Package Owner=<4> +# Microsoft Developer Studio Generated Build File, Format Version 5.00 +# ** DO NOT EDIT ** + +# TARGTYPE "Win32 (x86) Console Application" 0x0103 + +CFG=rinetd - Win32 Debug +!MESSAGE This is not a valid makefile. To build this project using NMAKE, +!MESSAGE use the Export Makefile command and run +!MESSAGE +!MESSAGE NMAKE /f "rinetd.mak". +!MESSAGE +!MESSAGE You can specify a configuration when running NMAKE +!MESSAGE by defining the macro CFG on the command line. For example: +!MESSAGE +!MESSAGE NMAKE /f "rinetd.mak" CFG="rinetd - Win32 Debug" +!MESSAGE +!MESSAGE Possible choices for configuration are: +!MESSAGE +!MESSAGE "rinetd - Win32 Release" (based on "Win32 (x86) Console Application") +!MESSAGE "rinetd - Win32 Debug" (based on "Win32 (x86) Console Application") +!MESSAGE + +# Begin Project +# PROP Scc_ProjName "" +# PROP Scc_LocalPath "" +CPP=cl.exe +RSC=rc.exe + +!IF "$(CFG)" == "rinetd - Win32 Release" + +# PROP BASE Use_MFC 0 +# PROP BASE Use_Debug_Libraries 0 +# PROP BASE Output_Dir "Release" +# PROP BASE Intermediate_Dir "Release" +# PROP BASE Target_Dir "" +# PROP Use_MFC 0 +# PROP Use_Debug_Libraries 0 +# PROP Output_Dir "Release" +# PROP Intermediate_Dir "Release" +# PROP Ignore_Export_Lib 0 +# PROP Target_Dir "" +# ADD BASE CPP /nologo /W3 /GX /O2 /D "WIN32" /D "NDEBUG" /D "_CONSOLE" /D "_MBCS" /YX /FD /c +# ADD CPP /nologo /W3 /GX /O2 /D "WIN32" /D "NDEBUG" /D "_CONSOLE" /D "_MBCS" /YX /FD /c +# ADD BASE RSC /l 0x409 /d "NDEBUG" +# ADD RSC /l 0x409 /d "NDEBUG" +BSC32=bscmake.exe +# ADD BASE BSC32 /nologo +# ADD BSC32 /nologo +LINK32=link.exe +# ADD BASE LINK32 kernel32.lib user32.lib gdi32.lib winspool.lib comdlg32.lib advapi32.lib shell32.lib ole32.lib oleaut32.lib uuid.lib odbc32.lib odbccp32.lib /nologo /subsystem:console /machine:I386 +# ADD LINK32 kernel32.lib user32.lib gdi32.lib winspool.lib comdlg32.lib advapi32.lib shell32.lib ole32.lib oleaut32.lib uuid.lib odbc32.lib odbccp32.lib wsock32.lib /nologo /subsystem:console /machine:I386 + +!ELSEIF "$(CFG)" == "rinetd - Win32 Debug" + +# PROP BASE Use_MFC 0 +# PROP BASE Use_Debug_Libraries 1 +# PROP BASE Output_Dir "Debug" +# PROP BASE Intermediate_Dir "Debug" +# PROP BASE Target_Dir "" +# PROP Use_MFC 0 +# PROP Use_Debug_Libraries 1 +# PROP Output_Dir "Debug" +# PROP Intermediate_Dir "Debug" +# PROP Ignore_Export_Lib 0 +# PROP Target_Dir "" +# ADD BASE CPP /nologo /W3 /Gm /GX /Zi /Od /D "WIN32" /D "_DEBUG" /D "_CONSOLE" /D "_MBCS" /YX /FD /c +# ADD CPP /nologo /W3 /Gm /GX /Zi /Od /D "WIN32" /D "_DEBUG" /D "_CONSOLE" /D "_MBCS" /YX /FD /c +# ADD BASE RSC /l 0x409 /d "_DEBUG" +# ADD RSC /l 0x409 /d "_DEBUG" +BSC32=bscmake.exe +# ADD BASE BSC32 /nologo +# ADD BSC32 /nologo +LINK32=link.exe +# ADD BASE LINK32 kernel32.lib user32.lib gdi32.lib winspool.lib comdlg32.lib advapi32.lib shell32.lib ole32.lib oleaut32.lib uuid.lib odbc32.lib odbccp32.lib /nologo /subsystem:console /debug /machine:I386 /pdbtype:sept +# ADD LINK32 kernel32.lib user32.lib gdi32.lib winspool.lib comdlg32.lib advapi32.lib shell32.lib ole32.lib oleaut32.lib uuid.lib odbc32.lib odbccp32.lib wsock32.lib /nologo /subsystem:console /debug /machine:I386 /pdbtype:sept + +!ENDIF + +# Begin Target + +# Name "rinetd - Win32 Release" +# Name "rinetd - Win32 Debug" +# Begin Source File + +SOURCE=.\getopt.c +# End Source File +# Begin Source File + +SOURCE=.\match.c +# End Source File +# Begin Source File + +SOURCE=.\rinetd.c +# End Source File +# End Target +# End Project diff --git a/rinetd.dsw b/rinetd.dsw new file mode 100755 index 0000000..61dc1d1 --- /dev/null +++ b/rinetd.dsw @@ -0,0 +1,29 @@ +Microsoft Developer Studio Workspace File, Format Version 5.00 +# WARNING: DO NOT EDIT OR DELETE THIS WORKSPACE FILE! + +############################################################################### + +Project: "rinetd"=.\rinetd.dsp - Package Owner=<4> + +Package=<5> +{{{ +}}} + +Package=<4> +{{{ +}}} + +############################################################################### + +Global: + +Package=<5> +{{{ +}}} + +Package=<3> +{{{ +}}} + +############################################################################### + diff --git a/rinetd.exe b/rinetd.exe new file mode 100755 index 0000000000000000000000000000000000000000..fd580dc103f8b9a5c6768b0e354ed19aebff2c35 GIT binary patch literal 290893 zcmeFa2YeLe_y0SD1OfyS=^$lkN(&vNMM7Cbq^uO_B_x3aLlTk=MT!eakR?Qd0-}P_ zL{wBnq$wDRhNfTx6jW5yjSGs37%`fA&gabRov!+{4b0Aa&U~Kp^k@2H z;OHEqv|$*5G#3>a#%@~j6p7!z|8ddgO7-_vGIo@Er@`)01Kw#cEG|CPmYk9_B_(Q_ zEjlVOG0AD06l+UKOSHu&+WHJ0YMYi66Wgj{#qy0!*ABa33@BB`SbOyGJB_A+#&}B1 z1*5D{p;SO;V?2q<(;Q$JAKpUCFq)HT=F~Bhozq>4W?o`SCNftzUxr~5EeGH*G?@!o z$uW#JWd#49{B7loo#mtm1IN-2Cy4Xv%LFk^Hp7_MDkjPqMLdi%nM^a~*_cGLnj#G& zx7DQ7R5rPMKMchu7wh81A@WRlH-c%7DXxoTU8*yRqdB~ie%8^visl5G)f5nH^nxzc znUc_iN;{Ggc^fSQII;eTb^f*grTrh`lXtA_Ciin`r)hD_CiNd#}3mYjcj{? zBQ7vG(ugzY$8&PDVH`b_1ATB-wa%o-eBU`|{oLh|hC6J11}!pko%PZW7Zi2mjpWPW zSwex*4~IECZUM;Bb8R>3CRw_uV!BA@t;PLywRBwwjvmUMVIVzW_YKXm2e&=f_F9&a zWkf8e_B*qBL^dr_2S)_a!dWx_A<7@=BOc||E)gquafjDQ{-+vKD|pV1LQ2yMN~MLd ztrXb~lg&HOeU0)pfU+~Sg7?mx{oJ%AP_SpCKM*IB0tI`Pi7oS*vx;X9I|#|4@F5&N zxaidDMKrn3X2*KQj6ZrX(2(-1I+QlY<%Ur)_d^Z~J&_dDGvUvoBF_@~Nk3fZxs5DE zZHhW_l@xVEofK6x4ELe*!!}PT#Cmn8Cyc^N9dV4M)+bZF6rJ*{q-fjb`s$Cj1z6i= z(>8xuT5W;KipsRe9_;FDqy>2^(0Y-*(CcOU@Iv<~Z>gN4huqgFt{l>_D9~HaeT_JD ze^|HSA!+5Zh6j_ZlKUDt@t&h_ZF9X;X$V7YZoSP#E$3i%AdfKQGq}`2_wa)CA(TCz zHQP~04ojVK+pi)$1>NjdQv$uWaXbZCVea9yxgcx!)vWUF;4J%9PFPsFy&y2%eznkh z>ThDms@8^LZ+5Cw5T~NJP(_M({#$WwDTvz@o;qAe+DHcN~C*XF*Vc|pO{ zn0ZQ%;AU-vX7VVM7sM+(j^qV#YY^ggC}a@vlw}Wdbq-IvB`+w9ECFOGvWI#5ahs$K zEz-hd150^B>l_|L_E(`nr1x+PX6{@Xc`Er;-VpaSS;HU}fry;9tmh?l;Lyx!6bbd~ z^azfyRA?smO!SRzNT{Q*AsD$p!ORh~TL1~Rt0B3ouK(Lz! z{`?Jeq)9$G#7(78_hvInp{KVrjeSxlMp^}NG>RNaxfb)|uEs4+vbmcpIiHX7vZ^6M zYoHBjdo+DsRl`{?t1j#v)}lJbg=BST-`90#cv{dN4%#!TPC%*S?z-GMSRb0fht@YI zl4>wCb9jlHDE;Biis|#}7-?nm+mVFw&hBV9&$D0QSo7?cWZ{v;MPATIPR-F7f@MTn zus6Vc4eh{w)%z8d1?_OEy6pw#K?}y{blU#}=P#qcTvmr^w{SJ98b{Ualmk&Zu)`SQ zsX4^o9`5t0+=rTdfXb(x$`H@h0#v^{x67fl8WhfL_hi`%-S&%=Xf7FVbMLL`^E^gc zCB4yGmNJ8mWiJS$U1feO)p$<&yi102a{9b0M%qNGL#iFa+4|-}9KyXJY)IUD+>H5H zDm^#S;fcN%iKUcD9z3J1l$8qN%t=MJ&CTzRvgI^|W_(9!$g*E_+Y4p0lxAqg`zTpY z`m8|1c?%gMH*#Caf7L8ANn2>fLR#19bDt`058+*6KqQYww`WmdgjvZAsj8E^!-3>_ zd!Y_!aA0N0zUUai@-d*8k7W3;`LjIbSFSJlK#CmtytnPFn3KWySpnT#v9N!*PWaH za)8+;tvXy)JWTq$nue1OUTWgt1=$HUoV4c2>J`kt{X^Wrl!t_g> z%Xz2Hgk%?8?=~74(Q>4?={S6#6?tZEXy!Vk(tXV;iw8<}lXkn+gHR+ViWN!jAgS{^ zrOripv!BrY0alS-Di+>_@U}d(=a6cuP0yfqY>pR8!WIwzst6LwQRsgASLBRx^WZOL z@l)SK%zPMHMw)&4yo-jjoNL}!U7e-95x)9vV1`CkDpGv@-uBBtWQ7GAt5V~jLjQ?M zh{uz< zZ`De%6t^sv;@&r;*lK@o+rR2c`%YRIURz1~8{HZF=?mRI{3|+QH?m`o(AkM~uE!@f z2LIzCr^ZEdu)|Xm-O}bhNC9~N8hfdd|@u4@#!$xJ8t8G$$sN@Uc|&E z#>d7ObkQgr2b{zSNzqXW;n7KniLuen@X1l}33ON&Zki{>C&t`pOHGQtKUOKDqN8Jz z)p|@)Vr+Oy?6f3jYbL+hI-aZFweMJ6x$Kn3wb{1PCs4i8ho}#`|YELQVc1{u6#j|&LxtPV-syn z=v>5Bu3~wr$tjbmQjO&J7z=4hg*+`O(LgKUW-;5~<8RAPVv>!k-WC-TLuUu6w$$X< z==jOhbZk^Y2~=&iCNZr_I79J=cgDphPT|6o6PthOzzT1jB1mAWIZmN1Im*fP-pV#O zF=4hXCVoo1Gqt6yRZBX1i7C(Rq6d?$xou{ALJXBfN(`OYq);{Uxm9dTD_dXklpLEf zIVojYRAMw;HI0o*O-dvm5^s4v8AIzxNJ_fjmX?gBm=NoXwZ$c+I&Fzj(_&Lg%C_&6 z&q_bFS}XrZ`M=D5jz7GO>d40RhFJe?1*q_jyZih*AJX%(-{k(M!lV9^lTw_26}K}w z`KFUyE4)AOwD{CiZV6QKNomwHC)-k@5~su#Z%6KH=J;fVr}k%d`hRMI#mBc2!v9?s zeD!956&}^yB$X18MlH#@#vYrRlrZDQK42D~jIUOBgyXIlO-+oNPikz+3>wg6=xk6z z$1xLdQ+O04_ad_+QksyVCNU*CxhZ@?e5#WMgTL?)Wq2!ES;w+ic;wq0OW+}y#+4Gg zz0Zdgo=Yq?F)3|IoNXHI2~uWrc)H$Atw|)*i)dWk9T!PMS(2U3QZg^S$u~!6^oyv; zhmD~b(KNi~WqM3A9V39d1udn`bIatrNt+`!^8{@@2TboCR^*JPLH6cNbS^x^bGkPV zuzazwxL~4-Mqw6|>T8a`Hwcm~!39b#os1VDIr)?66oiiN==_0WcX$rURyNdu;T6BZ z2E#hPfg^QzmiY}180Py89IL}K&2NZ=VXWWK7*6l;8`{9o)o*ADLo>gj0}M6AkcR@5 zl6TPt!x`l-b*s!*(1y7I-j+8N8;3x#9qXe?#hYgytMX=t=Ox*e7u1sd)07v)4tYwC z$Y3fd&egP`#5g$w;=HfKIC-sdrN^y4P6|&M1U!lYEb{Kr{1*o*3d_K45 zLkp2v#x z2>xaL?7z^L^67afNsr)P*57UExofJze2+HMaOck5=t6$^m-V$QJy(*_ulMP>Bbxo2 z^!aorrC3>-`JL|5H-?^n+5euu(D(G|d0b16;9u6e|3ZI@PtOBmdIbNne$-#+zvyA* zmxsyp2>xY#GuHb@#=OjnW)IEFyx=3>PK?^W8XBIld|E?8+5AsJ&=w=O=^FFf72g?g zp7H{zha1#gc@Jpq;W#noh8!9z8jzEmzZxMn(MD7pjSyw?uT_w?Uwn)R^d(Hjhm;(NhG&hn&7HZ4vXj1#e~q-J zDxOQl;yE6Hc=Br$QRex2BkhejjKkC94qvvMHjbiY1D(J}%z&TKP=UU#g8nJn+_~9~ zQbRli<{F(}XRYMQ%nm`5%&Nvs+#Ogx3sr0tJz9VFFuu-O&ninZO*ad%dwNJBNZ*HJ znE7LhRV7^r3*u^~>wf8UA>MY=M(ziEQ4oo62i&yX3|ti84d(0jylX9jHor`H+Es9w z6(3s{(`lpG9zrwkDqcT@*0#T?pJK(_LIUK^{KKjrRnDs{Zz$&+a}DLpUBy?Fp>)A*Laa_(j%b9J~SI##IQO@-xg1;_j?lpf|&O9EVoY{8?fZ4sz(&AeoX$NifUMJmB$~em^Pe%Y)wUkCn~Rmv6|!DQnwb=OLk39*Vk19`2!g zJ~!oIs^txNh_Ti-ZbBaTm+p<{Z>40aJh0i}xn0Eh)%|(U$0e&JS{zG+<^^q`Fx2Rc z{BP-gjjEDTR+R3{Q`7>|_wlch)fJ5j?~b1zCtYcd|S46S8{iNx4{V>{imv?UU2@vCK%jU8U+$u~a?L zSqk}^-(=kL4ZRI4U+&Bg$w&G={wMr=ZvNyz*UfUI zY(AU?QsR9Lk~^xy^LP`Eg^s`JFfQhA8>E!=-<01c?fxOb&(YnU9JAq?_p+<;xlmR% z_YrqUfHWlTV-C+&@#b&om9whZNIaREIq6W1d^qXwEJCSM7BI%U%rzVjpq{Nh!lyp@?WcHAvJgcXDiPd}4?d3y-IdMbsAL2QlrsJrg>NPBb93$H1oFAn zO$o$l7ay>c$q%9ga{J4|P(wzB>rzmAD@R&`nYT zGmYU9Td7ve%N>jkPmrV_F9=(>>zkKE>^u%V$=!gDAsn7d?aaovk(H*WwEEPfMG&{O zSeL0LaxWd%({NU7)AhFSM1@Y*Jf1P#(!C4oS+$%TZ-93eIp%v`)_pKfODldphoRdY zBWOQK_e$tA3diNL1f8-bf2JK$%08f!GMwlJ$(X4 z$pV{CFsx)jQ5#eRozaghS@4-pFt%jDKA&J>$$~XLK}^YlIX=Oxk_DrEg1IFNy7&Zf zB@1f$1PLVzer;`)L!Xibr+tFtk_E5%1Wp!2aI2sz*H55FaSNc8Y^-o?(~1i#T(gFA zCSBVBB&J7jO&QME^a!pI!#OrRf=k|T4yEfw0J>MrC22T&rblpz8P3k>5nM9#tV?^+S!>04{=5yUCm!F&iJ-9J#XPV*W*OXjzMG(lq};c@d)dW zg9GyT@1*C1d=aw@JB1SS^KiJzPZu*HdPcS|zfBQ8h->!sV2nAz9y)z6yuVn_+Ag>> zEWj{^(p4S0fgg+$py(X+%m41HzI=aPtYcnw3?E%qR@;NXai~UGEbP{`5p#y zH~3Bo@OGAU-w2bv@*+i=HI9mHEk~GDm%U{LhII?9K+o!x%PB&5?{4iUt!w%|PHT^u zZA*4HurRw0w?ZSUBHY!f<*q}wFE|X3mHA_+P$->TK8*=Ws`r?nVtE{C)k)d>UbF>c ztJNmB;d0f4W;{ggLKO^#3f_?UJf(%6lPsZJxTH%gmk()!E|>0qUoPy2%Y~OEl?&Xd za)CRuTsVv_7nKDJX2`*TsAM*R3)~C)dhyBMkc|(12_WrB&`48>&Kdn#QUjL>({eAAn`sCfHu1{{j|IPaR zhy4Dh^{MlFV}0`2yA;=xuJUtW+1TYcvN1+G)~}(AMbfjXI1>ypcgs1{=B<5@d0gz< zJzD!9XII+Un_g5G!Crvxb=QJNIvu8`*h6XePa22kEM0Y_6HZE!cTGwAf_24*b+s>; zPg{!Z3no&+v70VA9cba4j^&Lx${W%VN!}nTYj&=Ul-Hoa9x!Y8dyKn!}owJ3?qE!OU>dMG9U>=2WJ95yt znzeQd70%H^cu&HHcekwlvpLN3u^K(kU4sgl_Wkte;qYMJK*^FlEN~xhQ76EC)}c4f zqK#SOf_+CQX0OYtTA|b_s*PYP9$#&|(U2VZZi-h!Go!~FGs~a=^ZA|&J;PmS%bnFtJ^Dy3)pb&<{G z2ul?HMcp5vXnl1*FT!&kZ9yuyZ2oB~JgVb7F`|yk0KFyP)czi0Gim*NRzeSyemZ^DN!Yu&(0&o3_IqX}4_l zzi%nJ66@nH``?XqU}op0{^uKSy4P2AkS6aGasQL?&>Ls=y`Bwp-y1^p(poHL-;1>B zWPlm4^$mRw2~l-|^?z3;f8C#CAMfu^=%jMYc4L3y;rzeYpSn~op+ETwby;2MPj{5m zpO8q^;*g1w`qPbLsb5&UKl!4aMbYa1v=nt~^(Q&6^2`*Y*`H*5HTzQzH8<{0E^g(j zJtJaOcUV_-cav7-&R-?P`V+gbdXB$8vDma0>mxN)pX1hGR%G$f%vTJz)IsU1FeO+1 zMDm2=587S&x^%KX3F@6(CHTwuyHiM9!Cijqjq!6#H#a`t5r!UU%%oBc=z+#e6*VV% z(4QWzw*H$B#^3aOYzfa-(lesA)Py8wYAajsw3HNjhm@X@ZerQW^EiWN*%wnBdG-}_ zs$Z06U(F*P-=eUuc4XVH=skE%E4$^9UAl?mwl7Vex3nm&CIy%pKt<-5TI2}}Wd~vT zuh4O0o_!7H0RGlEJsl&6bHX8$JGi_xRFL?a0ud%Kzd0WW3wd>*?A=jO=0*T!A z73TZVYrMxvmp*SrQE28^y7nNKXze+^OSP3Z=5R>5Ld{Fxr4`Cpj(;VNtJ3qQdP0V- zE~CzX|8yaP^CYyIl5P zq?31oo^LB~Wyu|OJ zwph52=uq+>>yLY<=OjH><1d%B|0bN1!#!3kTyd?Q3Y^8yE7EX+)uQ zJudk74stO$yr$F)t~sx{@tU&=%<07rVLT#QoMm6!&Aw)CptrAiKWVWQ4J$F$|5yXQ zu_y9v<@96g2eP%uzS#RJjZ66t(E%%uPxPKRAK`f(mF;ph+@CTIkIUS?Y_SC?n~Ruy zc3(Q;#S_wC+hMz(#O!*eTiw)BXW6pZc}<=Hbh|K=W4 z`U!8E8|3YQc2}TUyNlCGr;PB_Kz7r()f>5 zDxu-$e@x2sh|Y+Agc&jVCz~kV-Z#aYq2uM}md#O3L| z{uTly>9G>ZBTQ19f0UA?BI;nKm+J6<&hGiAqz2mnnO8 zPU&(Q+bQ2GsGZSC9o_Qe!uB>rozT7X97o&$YD@li4^k>aL0fQ~WW9sRPvTB3gD03y z&=H|L!8AO?H)@#>J@jW4V7WUGqd{~)Vnl$&B%-ALm!XO*9?mO7pq zM%RleYaS2EI!v-}mRE4Gp{EXInFfOkcr@%|k)tIW>ut0tbXV1|$?oA_(gkL-$oW%M z=0W_;#c=}thn`sChrs@#Y|n}Y&s&9N9;2%8aJ+PlkIzm+Gj_8jPb_@ZFEnE_s!KN} zUq#&tXMa`xf1s=Umzo-VEx?!IV&&h+y!e6lZmnlVs0`_elstO@rJX;WVLo%xsn|0r zJ^kZvT2*LTIcXd&;G*_@`{@wIodUzz3vG~k^iz^8KKHtsKJO}B7p2Ew`k2*wl|EFE zh1dQa9)ACXT82E-(#YF@#sw-x@(^Qr$QmBv4v_7oDIVW_a5|eKWf3C(h zyu=hl(G8?Lg>|!s%&SB3%CkAa_(BEUEqFwNcx&@9CY2hGL)Nw#vW+eL*(iyc;%z-6 zDy21jvCw(}oZd{Pev50>^lhwy%HtwwhqH-VBz?AFJum4~Bz#iby2+&0O-6NX(ywci zfnA#nwcYgkX^wT)OsCJbaQZif-j}3L54CC+!}B;>!@KOmY-Y6K{8DCobZlztCiI`2 zo4>Yx!-hFpw{6v?p{-q;Hhcojp6DY*^vY$E)N(3{a#*!~V`vkx|2(@N4NJSPQfBDk zr84=GspW8;@JY63E*6=sh;JBJar0ws zJj|*NWjzR|OpcpX*5iCx_A7h3Q=E_g`Wrd9LQfx45$tgxcfKZho?qOiS24iZDR&IhTT1Q(75t8TX=L!`goTw zDYm|M53t*8`~p6`s80!`ucxI%;gf2UQ+C|(Fe<7D7F;5&`cj1D1Sqe z={5aUwxO~74GQ|G0KRI`v~#oa^pSyNDi0fdZ-BnaN*^MKPsFDOIG^+abemS4+8Uz9 z*BWR{mNAf?ODdCpFLgTVm)NIZ*r0DkUZGYQw`3yqDC;93-q-mdeVcVnxQO1Bs7V32 zbr-~iW~}4RS`hbOmGpuhp&8#`E!tTv|2$|$XvWI~`R~#X_Ei+m`e3yD4{$Mz1}HqT z`;N8dKFIw&jDFJTJ21`Y&@*l;CC7hwSw)oOh#vFYFDp1sDGFQICE+`~r(lG*Cpy3&nq@FHHUmbW%%k z(ay}j-%A*AAAc2+oM(#@DMk50r)Rol%bu4@8{RJ5LzgRzpP!)+d|2eU+uH87zmY}% z9d)wo=iTo$JK!F;o7YDMXQdr+r)^E2x4UR=3;HefV6Cj-yWOWs<(4{?UG*(;W@HCe zX<^^$t&o#7d~5o_n(njBPI=3NJH$z6@;U8{>z+QMy;4`(TUVhuy=s zVduJys$}>Z@?n|9W5!P?eqEc6O>n%y_f&foJ0^LNt|?(RM0+SoJ{`C8a8|{#Ie#0B z)>}CPy+M3VR7gcv(aYzFvK#k(n=<_peUFBA2fn?H?}+$*9F~(G-=<pITWQFoV1y$_(IOucpI9GnW+;dJCi5SSDRbKIj1F9$2u*k{ZZlg z4;{HXU5}OC?OAReBG9uL^!`vmT)<@BLM?Bm+CpDJYBOD4Y%<>;|2ly8Rr3mHSG|Z* zWR4)HOe3udrIsIvu7FC+-y>SO$WG_|REHsWnmW|j==nk9i@bhfaw|WHpoJAYRmME(jxm6tQyXW zSk83@dCQU?c?LYhdlEh`kxPTe)E{|Chg99{SJIlA0r`x<)p;(pbNY^|6w3xm13edc zh}0AwxtH>h-2WiwVD7iMe8|)W3LDCYK9G8;)F~9>5mT1iN^3u%LyUXOi!ug{O<~RTH%W)az zKPve!>myUj0Ou&=pPK{s^&89JDU#7x!8Nbj#?Mr@+!^xBw$b^fw(*{+$nBCxZKJZU zZJeRD5yyA~@K2j&#xij@C_{* z>WZ2KJ`zbsHAPLTnoFCx>|ieYnajrJvX8k8GnZ}5WlM9}-CPEn%g*L9(p-j^%bMo0 zj=5}#rHmo#yHmHMousoaD2qN344`vwcQtIIuLP!jWnF)%I&}Tj`zZjumQ<&0ZhAxk zt1A+Vs7DSu+3c^uHy*CBWVAfAUniexz}wUZin>W}c3j%bn)(X><9gxm;>4 zt5G@<_+ z2j%7eulZkS*k{E%9Vtn4=`xiHq;9FZVx0q`Ql0jcl%y0Y*MOn1&f$r1^eIHTY+;|p zU+1I?4t?Vj=;Mi`zulNHVM?rXT2y=@eQQ3|=tk?w6DGta&WKN;YevQ(T2GC2PKZiQ zp5UCF9Lr@s!_q7Jkv*6;-q-Ps1hKS>H(ASsZjP)CtxxqFV$!eFquC-XEY2TxABS2$+WF$z~q!z zimgKcNhrmv?;J2?8h-$kIU*oF72kyrY43+fvqhV~rF-_A=zTn(vy$kMmZ-Kj&l ztQ#5f1y&B<*x(Na(r5M!6sLS|knFedRY3m0D{(V}%8oy9IB7P2(9&ql>wGQTT<>7S zIq9RAMn{7$WKG~N4;r0~_@roOg3n(ULq06XadtBjok?-2Mub6s7l3M{mysHqAW<2; zi8(!eY3bz9bZw2p^fP>}Xb>QSIp1R+GRQuleY;jM2`KNXWdENwPfMKYo&G;m0&=|fUe2*>jOIcdj{-DPyVNk1KS>=KM@u=wjrR}EdpGOP>$|7phLPtQcMa~{`i zr`hDtNPoQL$j09vav3Xb3i~JQEn%-r7ndn*;M>5R!CkHm+k+ZeFcb&q}ZDo#`f>589F{EFf{upNHBQT&JEYE?L{!O*k-4*~a59Hn?RcqlYEil0^drs5A2 zd%?pHwqjL|cM3Qh90wi%rjrMnV!%_uixjT|C&T_4cslq5I0bwW`~bKRJO^B@8prz} zxC__?9uJm2K3nlhFt>EWcpfZ$>Y(ED#H=`)OXn`t*?()68+R+72yP3zQ}GgTd)U`0 z-UIFc`$@$fa7WnxP+XlJ`E}usU>Zia;=bSs(2rL<8$1#A<%+k0W#93Z;xE9HpueuT zdQFZu8unI-9pD()r-G%f7b@NamU`c(_ySnk!0(D{)Z)0LJ%lSB2)-Y2O;Y>-I05$M zinoKO!G2WnSKvh0e^bnc4X_$UWjem0aVd~jTY+W6Q{axU?@)YN@%KtUlis><84=L0 zR(uF7K5NxsO)qFVg2lc9d>8DymA!gh)(?Qa3t054!1szCJOq4EX?oV ze(tKznhDUPD1HtsnkXAX(4zK?9VIvktVEJ3;XwA(SLP2+jqhKC-@0EqN8*2rfe7P z2^M{qW^CubS4PL8iWh=K^Er4kG(pW-FWgD-c(CZ-1@mov!}tOG68P2@99E{K;MZV( z3A_`04!jHev*Hli-CAMCfZu>-A$ULdF!)Vyq0&dw?%8D=hCM^^Hn61UcG_*bjHA#D zQtVRv99Z?a7Cu8I@D;^!c^95ml3uGWRaioF|H^bdf`L(kuWb&1(H+m)F= z8cWxf!Lp%QH@4S;{Vv7H;M%aSQoJ90E9{pP-`d?D*E`_G&|Fn~TLf#wJ{T-%u;0n{ z=FlgD#a^oi+grijMR5#RG~FXv(+QffiXQ@tW?E0y+zHK6#XG^Gxvv*%`arWl@h-4v zegpS|rbchp3rB)Q^JE{k4~OQ6V#CgMnYMz*Li4fWTl)Gn4}&K`^Qz*nl&0lfte*_c z0L3%G5?8%`teFPQJ&M!8qB#UkhUSXmrg!_(vjIEW#AJ_J7s&7X?f58|*gJq>;gnj?w} zmFDijtmi8UhA~C)BCz;*&cT{Z(40{mcCSCKlVJX;vtj(I*fzwk`C=&ZerQS$^E3aw zQI|wztQy696`H+@^T8rIKbkfCFd^N09pmS=V9_iDmk#E&=M{gdG^ZwT*v8QOrZ{{e z+hsZt#oS&rirY@|YwE`^_lKsp;uNs>Nt(i%sn9&C_#jv`o#I$C9h%XK-C)st4Nilm zd_3!gyMjgY{#3SSKyzJj`2B2`X=DO3zv@i)1r=`ui>6u<2!62Q)t_Znn^$o;n%KgQ2-c zaVA*&bjxJTebC&mcr#cu8y2x{s z6L=OhClnVc&Fn1JFM?)^;xEDCXVy~IEQ4k(SnPj-SHa#W+aK=&@EX{kRrZe_X3ZAZ ze^6Y0nLq5f<;=OzWGLPVmUtIG!kVMd>`?3li-w;+a2fAFvp_L#-5?TU5A5_q(|h0* zU=MgDm@lupjK{z=!B2u)f!BiX0zUB!JA#4681OEvECBBYuTh$V;61Q=l)d~D>~k;dEx|xz5cqYhBrE%) z;5T63sqAOL`(VGW>~*Qx(J>6{kzk-P3H&BjGL-!}a4zicD*F%M1F(m!VV?)Vw}B6V zBf*Ekqrq>17lGdfZvf|k_kw{&ZR!%#@37KN@o>dS;CG=}0hX}8fIq}aCF)KtL%5yd zf#8pzNd-&TXTcw1C0Fq$ivLtxi@K=G5Pb*54zT#l1b>Q^wTgEt{#fzPiYu;T{}Q$- zSbUBHe}R>miq|OSjn){oo9qi|J@Z^CBb0^@7cox@!Ck;lD&D6w^~j0K=mAY<#bdxQ z8=Jv&vPIKz#n+Xl1r0+k<1T1=fq}+P;6Yfaw}~~v!@z@Ke+Vr4*)%-SH9f362^M=R z8lLE!3oApwVt*Js1uJ`${U>l7?A2%pbJ07EJoN$tjoILMtgKb`1RC00Mk?$}6tjV{ zjA=XB7ZNq^Xc!e}$a5K^V7GzCfIEQ4g8PHVf#bpB!Hd9>-!{;|^5knEhcD-Y1~kQEHG_Zmhl^dkQZ+!ZUOX$W>1_kcTsMe`7NI96U% z{2_P*>;W`PyNr<%fPSqsv?V*I;rp7E3^z0)`3QWy6t7)YTK{HKpHdr*XXg5IDG@x0b_;s*o-lyFIUEhZ0lHyxv_uvwVaS41k zH05dc;4*~UgGE$@b`Nwd0-BbJ9pL+5cY{TLfOa7+W0J(HxZxguylcSxN8{-^4aL7J z&FHLIUXfnamp?OL1mrAqg4GudSnxl$;1B;(d`&cs< znsJJkfkjhsKWi31bBE#tuxMTYXF~Iq;_sB^u3YxB5}FvrOTpr&#sSu>fu_CUQHp1R zMc?ZX>$gEaQL!5=nqjotqifF4q$qw8ESg*2X3a5ZA{8ftMU$4tnh&5^tN0{XH0~p; zIS0)Pir-cI6Ik^7kFx%2=+7%IbBygWod;irrrdG13-DB(EOsf$p?PT1K_66Y*O~bk66 znm-h`JL^wF)sLBnLeoicwBm=r;&bXJtRDmYQpI}|e+m};d*@gm3;mCZ>z?8>tGN3 zk~QnWJ;3}V7(Mq5=8u@rbHw0H;LpI%fE#_qVK;+gz|VqLfVY4Tf}aByfaShb^@|)< zI1;?O4969%_!00P*k4n85xf`nps(4Fa9hRfYXkq#G>q&EX&E#8Hsb|oU^adPX9V(E z;5Y0?xB*x+sbDuWS&Cm&n%HkS>?6?3RlHX5F0lB#+r#?Dp}$}8YQ?XEMPE6e^-n_| z4i@`C@D|uFD!%1A){DIZSoDv9Uxa>_;x84K_HtO6x?N)43;j67OBBBd7JZG&tj~qM z4Or~U!G~dgQSpb0e+0h;P007`N4N#}ZP@LKqru|;4e)VjK2-dx(oFn;eV&45zT#)W z-@yL)kE{_c|C66vfF-Up@ORL!P`n@f1MGEw=CHzcu!Mc#D%<~n=7iz`uxMr!u%>6f^e% zI+@GJg5IV0HSki{Pl5TVS9*Q`EMcpc<*<*#-dXWvuxPS_S@R4uFDw2OESm1+So1tI z(TZ1sMdK*XnpdHjuXq<&G*c_E<_&0a6dwSKrg;c!4nosk@eIX}fkj`VBJ1;@@2Gf! z;`xf70!!H6z$Xy4ZYB03JOC`3m%#5qb42m?O4B!#!=8p_vf|}n@pBsd2{cy~*QJlD zxeT#KC>{@%upfdiAnf;wtK7n2Wr_k{gytc|yA@whT&}V|Y}qQzR}i)VSbV-*6`C@< zc3kmKio>e;{Vb`@90vVn#qTKgg2jLLnyjw_{TRiWiZ_Er@2SQ5rqGwI?dP_Nhk!-D z7tEhvrRTR5*T0p+%5(+X37U%Zs5;$?2X|CF3@rM9x~%B|O%ugK!J;_^wnKAS@vZgz z@jeQ^2b#T#FDcE^`m7%c&9jQ%0ZUwSZLAps%~OhxE558atbsobqrejoc9!A|ijOJ& zS#i~d>_@_O0!w-hfhWV~7mCX_^2a+DoB++^%HFdvYn-r8RJ;T%{=WpzhNg5A)(f`= zi)IV>L1>OB{#kM5+c>Of+JPl(3OF5Mmnq(*__X3{U{7g5@gcC}rBhq>BhQ14P@JxKv*Kflzf)X+Uc#~b zv{8JY;@OJVf+Y>T+jH2@P*#%_uTZ>G@yB2ZyPyMy{RUw-D?Y9Gy5jouii=Bv8in8= z5Vn3NwhIqboUC{SSOWhDzKXEb=7g=V$lqe@dHg7r0_>7aO`;&jE&g2jIkxDLWLy_5Y2j|Ge7 zSP!;`OF9)diS(y43EUQ%6^ailP34}f?+8sN#j#+C>sN4hXzKT3z3>pQXtslULi4`j zKa^%*Zw||!hNo)?iZ?4huJ}i=`0v?=!`_Xsaf+W%{HEfs6_>O7!?ps8&$(cJ1IsWr zDL$h#i|*pEQP4cA_ye%`8F)8qQlXiycpX?YC&2Q&*(Jp_`g2&Z-=TP<;u(rpD&D2| z6UBv!>)+$|-$U_4#S0W~RGh2$GsUF`_qq6&EUQGRW`0pW+0?OBKHemb}au%waQ-mlcZlDgG2J`ow!#zY6+gir)Z> zrqvME$a8lC6sIX(2^Rei;C1jBHk88(M}S4+25*FBi{cNIrqq2Lb`LZ*#r+lE4;G*6 zN3#AT^tp<^Q(R#bYh-!^d>Z;!mA%Yp)_ekc1I7Ko5_a$y)_e_3lHw=9qRAP{nk&$3 zQ+ysQnmOZG^D8t@D$WCo=C<*yDTKzZI2kOO=Y@lL?U1tHK7qrQfxU;~Xt0DG9L<`h z(4;BetoU89==V-xy*xvBLGdkdetQ?N=vRRU!~g4wFDXrWJck_#%{s7zy<;ldqhKEf z7JESg+vmaFV49zYD|UfJe-WGxePAN%h1-Bdvk|-)nzt2SRa`5H!@8kq2bQqMr?Y(% z?3WeSPVw9C1dIN2C)@cOmGoR_nx9)K9s(BqGvGteA653cGdOG>>^;GvKLnO%6hBv7 zW+v;!-WV+U72prxXNTeoN;7m8hdm2Ts^X`?;-}?o)_exdAjNaRqN(rzYc4_)u6PVs zG%LX#XtpUnqcnZyu%FA&L@Rz6EPlM;pP;EUm-WICVA0F~UxQ|a;(bapbsmTP1Da)u z-&Fh!SbUCfvA#w*UVBjScE#txq9470^>v}2qxf0H$H4WV`3+nj+;ky_m1iSIgB!rU z4BQZW7~BZ_HMlXjOge{c0=@%$8#oSpJNOB3Q}A(cGw>ha=HONt?B{5C&JF*02fDur zo}f4rd>r<5ir-fJ75D@+r83!%aC61|!Tbkt=>CUdx8lvB z0e&C$xr(b6K{Hly7Fhhm zKEj%X&@5KG6D*p_kFtip-azNSipPRQW2|6J4m5QY+rgqa0hV_>|1giTfa z1X#j0U&R`EkK-Q2GZjAp7JZAySpNci4puy0@h0$V(DYl)df}O1dDo-X<7^l11AY_w zWU$0F_6gP;hkd@{t%^^A--jmYN!AOm1&g0PYuGNwnbC?L28*WdTGo6CKOGd0P@Du7 z{Z(*2^kGkNSm8UsqInqnJv7fMKA|+9KFwjTLvvkmqji3JPq6qLvYzd7oSCF}wc?#% z(O=uZ`l{HUR@><3NW~MuqF=X(H4UMEQ}K6-%Rj>!nHq0qZU?1Pr(zw zeP7_P6TvZx(-m(}d|2@}ipy?gKQe6t$HC_b#aF@cus3~?_43Y+<0U`ORs1w~0rYt< zvqt!5#nrd@u*B7O2WvJ%Gg@*2wX8y5b#R(ae6GHD4e-s}&yti)Qf~toaU_XBEE>7R}iGtSNwIuHr3V(X`8D zO&J{T4N*KFESiI0c|Yia;_?SLtW1NzmEb2q**)N@uva+9df~2M37Y|ycZJp~KBhGH z9OAHYY&=Era>d&fpHzGqEO9M4%zos!_gTd!6@L#F{qDC|-yZ2duQ=pww##%Hd?z&5 z6*tfGYd!+oq4`;Hog=Ifdv~z-d>Y&z`u&PMipw4K``-Z`0{zE|%N=8l*xP``{~7RT z=zmdM?>OtlekXVgG$X+hb}v}oT{@?@>JHQ_F9{cPFZlc(sI0f7Znnx7x2j2nvr;3B$XP=#6Z>e}JxC`tLDBc9_ z3i~0&--Else#-~!Q#cab9rlTevlMgLS?4b=lAX_Ax^53J0zYIwbkIRlZSXp9Tkv{t zU+@O-Snx)0Hh2^GO)wo4(DVzKcK9^4_=x?}PM)S%@D}jXVA^TZbPoJHxW;MLzW^Qt z-U`kH(@v76&0yLY(v$~&8T=i18@S>b_VWt3HF!JtUhu2n8Q>k@C&90Q_knkUKL>M6 zhSBpZ`=o)KrcsLLg4s&n$o!Z!G*HoWpW?Y-wvy%()=rlqIvc+)?9(+kmB#a{O7Fb`Nq##BhSFw zz;UogfaAeq!Th)R3}Yr(o`>i44g5pX3bHSx<%tyf06jD?8#BIO{}W_|el7hfva^0+ zhtkFm(1_&3m#lvVD;~v_zGAyfUhvCUDSMIa!r@@i901b`1T=l6IP7b`pJ%}PpgE%W zn$qNa!}`O}Y*Ty=46~8;Eo0S1}kNMW4-X5 z;8@sagC~P`fF*3D>#U!Ol@5wy!J>H+oQRdL6<7bA!^+ehoP?E$VETXoO^d+O!B2x} zK%?m`a4Psa@GIa-h3r!}0=ymeXvHhQufqPO;$Of!V6XiL`w{LBehqg1vD!&0*}0tr z>?mU#hvpbG1z;I}s{YA-WSnUOmhof&_+9AZ!6(6s!So^sP0xbg1LuKdocR_EvvH+} z{eOy;N=AT>?*NOYQz^E4urf^XJg{h5mS)X$tlX`5I#@KeAl8JS|3)Z|1&hW5t_)28 zz0&3~gl`AehkY7-NSDrKz^lM5!RLe7E*w;jS*A7>n0rApSn+JIXf{=3%}8htDZUIA zP47yq83)aH#Tj7Hd;*>X%`b{?4fUsIM;LPoG#@Db11x@4Rc6gXXkJtNIao9os2TRi+#WTUQ zQ>AIS;+`;y=K&W2C7@E%qsEj1PIm4u)@0cqG3|i|4dWYxtp>@!+U%zm z_;qkSaMZ1Am;J&8aC6wl)nR)ZF#lNo{~$ZZ+qOk1V`yF0$TSP=#>(T$z8Aa%_A|y8aU_ zeah4w`~vLbl|3E2752^G7s1ECFM)pmzYMO}oPBNscLIz5DlOQ)7xtEl`znqCi@sY+ z)*ps`l;Q=7*MmhrC!F=~LjSnp1B$-@i+)2Z)}Mj?O~v0R4rBK&7f&H@Lns@l^UBRMn)tT*epdX}ow&Ewj zqHo@X^^KsvTXCx56=2af>dN}&(DzcDpg3FcOJE86d^Zj&-<5q!@fV8!1dD!Vch+}9 zTr0q0zYdOsy>0|+WV#>R2lj^*?^Bwxce0-U;5Gd{48_C2;-`8K*4ztCJH?|E&jgFU zb0q6WLqAOM9L0}=MV|{E1O2z)vEZT-(2r8QQ1J$^=(pKfFYkoDtN2&NHTwF~T(uwb6Y$?o@fgK(z~X;Sf7ZVW{Tjtb z6nnv+;pJdeh*mmO$V|44D^E(KdAUwu;?=ev;IrypI3ZNacKu@WV#5x z41I-r*)ANRcrsY@XTd)~Uv3ENh3$%Gfkl4_{44Zzhq7LHl;Wje(H{d}hyFLk?T2w# zvB!W#zaA{_W1dtTJe>7n?+h0GEMdGewMFq)imTBlDrgLZCITD)jt7gM*T7|9e@}6N z;_4&Vk4%nH%r@u~6hEr?6|m^9jA4CO=tIW(xxM0h!J^*}j)eYW#YKwijPs{w^mt}@ zS9GT0rxou9JK*y)_+IcOu*4fWf&C1Dy&ZTccm#MD_(8DfZBeYB410IQ(TW#<RDy}+({fNCYSoE)emqGuL;=nl8 zi@iBm^eezCpx>qV8>Ml?b69yVHC6Eju=puIl{HVnPdml2ikE>!AAUdU z53>C&_;0OvlH#Rc(FeL%e;oQ2ipMEl1Qz{SuzW+lNO9W*>__aQ!J_{Z{1N<@UC0{Y z?uz5UqW6N&L0>JM^}_uX&j5@5ZSY0tFDtH}!C}ST4=nl@!THdiR$M-l^i+=86)|bMwYMT|GQ(V@~8kv@W%R;|HalYbe zOZ@s+a2WJU74KL4tnKQE}{Fi0wJGkWcnWv|{5+(1yW$VQ6QTJ{akEF* zzt|mMdFRfh_;tmX!IR)8_)!ik+)D91;Am*3DSkrnesByl7Zg`o!9HVQZ?8C7@e;6n zuYRlIj}`v`o&rDhSF%sx0g98sanL-b_^9Ha!12)3TE%{Z?@{aoPle`5#qTJ-2EJd? z^BDUP9;$dgSe~zbM)4WN#%c~L-{Ehjc%0(J;6%jrvf?ikbI-D_>z039uJ?vL6JSgr zc1gE04uR!<;swQJp73kRt!18z5VtEH1Qthio?=Y~R_;_h6)c*QV7Wg3qvEQ_5i2zn-vJhl2mAt7f;X~WxE)wDyTEe&{ETAW zYL#uNO;Wa56^ehmayZ#(%!H#9@U7r1Q(vuJfbk{lBViAuy0N~=SqBWWF#|jfE31|L z2XGYZ<3k$d$070&>RCgOS4JcN}v#cRQ$iF$!GIapb$_yBkn?ESa0MtC0h zG1#|&SA)L-1C1Upvi>Qo#DK+q04z294Os5yHhf9ydQGJO;{jrq$c@8bxzF{vvUh%& zHFD2uoZ>971b%lLYi`3zzT!%+u>E$}yMdd6Q^DcjtBMKcP1dZ#${UJ3V9^}UWzF+gxum$}0k+HZGFZmF6UrWQkTts@S^$>k5Y{U`4$g<> zvf|o@IP7<@cU2q<_DaO`Yqf_3Wasv9A3gu_F*G8{e2e`^J#JEb0xX)Dd8~=Y%43Ri z!J-L1%9=E+v{f7f7ERk@teJ+ga7cE$H9P6dm8BX|JxhZJ8{9D1I8 z%Je3981$bjF83*G#NGld`g7p1(EqNu$!Dw=`(0qs-~Tz=r3VA216f%Q)4 zZ~em0cEwY`qF)V8gMN?Vi;ByB$$n(&44wh~D8(6yw}MYIaf(+dejP0SZC|rqo@MH-c)H?MV9~ewhV^dvAEbD;;wQnP zZ~rapbD$rpc)sFwV9^J7SichbhKdI&P6CVmJ@6CI|ERc5KKl{-onX=L1k3aJA1f~V z9qYy35-j>n;LY%#r}!7ewY?lxrXiP^_d%bgc%$MYU^BoK)_(|nBgOYBo&gs9PVgD% z&ngc3k^P9h8Cdiy!RMjht@s z`+pBi5B$<}RdK^#SR?kkz^pI~7nmOYrRjOapDV6#&F{Ytm>%q?!pR5)`KzPhKT5v8 zt@M?sU(=iN4WkCXi{$(JlkYz%-!O3S`^(Aq-%Gx~@z=4=zbY_0$@ljp-@ik?|C+%3 zvE=(NC*S{veE&BB^NFuuo%;Qq$@hhP|CGS|&gA<~C*MCK-!P8w`}@iFr@xYQYWk6U z|BS$VKKcIllJ6gr@4qfEe>?g9rmtc>n%Tjf+mZgg`1kKrz9RE($iFG@ze!+zP`Br<-eJ1?d>-nDy{-=Lysr0R%_{!3!O5e)t z(i`&qTjcw*_(q(Yd|%`H)1|jcrH{W=V%gt`)UU=je+Q+*l6zJTN~fjYAgN66$qAbu zkb0V>fA9;x@C$!jzFVdL2j2wy34`T7Ka2nF@&mt5<3Im)od2xguwU9jyG`U1hn;}K zL4w0!31pDp0nW(iNF_d>Lq9#eYo02_Q>n%8^U_g(c~BaK?}w$!@cp=S9ln2C>HF-P zIMdVoQ-bG3=_i2O-^KS2m4>CS4e%Gq_qg=2kUmN1_N4UnA^lxaU494fsX8YQfI&Z` zFH7GOzE`Dj_-p!9E-et-D>zS6%R zzW<%l9}D0AZs|V?-@m8yC&KsdwbOpA^AFjH8Gira(w_&+CqMa>=-*JFUz2a8_-EyN zjG3-fdRx9HfxkZ?(E2|=i+@-Tf22RZzZ>wM24-LS#9R1_ZT(2;YvhaH|7qzP!uOAs zR6{fU$7}@f`!AUHl;3|zWKHY&ugnw4^q&;^KNH-3SnwpwPw;>2_p|udc|_d!{k?+Q z&y;>T;P&5!ejVVQwNC@>FNK2Quc3`em<1_ACt2Gb0|xAorQ2$6u!Ui zlW&R4@%!heZhW)SqP~Rx`1?=r-e&9zh$Cu;_cjG7D zKbCxd%~wR2*OTvu$@jmJeE)Fr{o~0uXLfH3W^(v0Lnu7GpM1YazJECR{@>BxPX+2I zO-Kih$ua)p_b>b^qseFgY0|_;LZm}VlQv+SKEE2|g+`_8Y@ z?~nibQtA6a6Wnnp=|76^PnW($@^~&)5zOVP2Ct?k7>t zx0il%>9>C2Eh+sIRtNw2S^Veo;HT~TXQkcOOP~7uTS#F&ZzTF{r}R%sD%0zwPlWG( zxuiQhOmCEGN&08Q_x;ja;rpo6#rHo%TW_I${=ViL_W z`t@!2{xse_ya_nB6Iy*PneVy@t$Lt}{#fUy?0bxVe-QOlP$$3t3w%$K?_UkF`bW{< z?=^b-$I18qkbE=yhYcqE{+E7ZEc=Dz`&sh+Wh|JFCg z??0Y=zxz!w{m;nvcYT$k5yV42JsQlmBcn zp8J+gU9rSB-c^_G{%-mHX3UcM^S=KFlHQT@zb@aO%fWp7pNnn1W#2#apOs28`~DBH zrto(E7O4A2kPf>&SI?i4^p}FbPs+FA^4q_e@IN4b{66{qe>DUD>v;YNq?1Qq|5j}4 z>!9rZrojJT4*vg=^gELNwcjH6$oIF%cU`_K^8J>4-#P|Mof`eOqx^=QUyZ zbNJr}c;B1;5&3>B`F~!%l~z9^-@i@L|Bifrw|tjA&9eWheE%l-9?16{`M!|veffSW z-|xt`e3pKXe1D((@t5$;zVoK!f8t+Yow|NxrsMfK(mz#t`Z1?l)Y<>PUkmo-h5{3PWiRZF6E!Stu55=Km1kR4Zpq8=;?4N z@D+uxytcQsSFY^tm1c|ilTUeV)%RE1?R+(TGM|h?xmr@rQNX{zq8gC!wsM8HKS1FO zwmY$4IcYV1?rp`^lP~ME)Rn_#H&z-eVpkG+X6jl!T`X?`CF)wd{@UK_)ynQpeUJZ( zt}9fowR;MFkL=jl-mY!~Qb`*)R^Bp$ZpV|mtDEs`dhy274^ziL6vKzB19*%lm#AYk{o-Um23M&E(81bkrRNj~O9a!A zh)$2E&m^fVaOFG5Sk=F9ySPa?wwzq8F>DsgK}bGRM*T^->TAkrD~CUw(I1Y+(*?Tr z94bjr-i}>+HXO{REB3c0i8c1)JJ7?*Yo)<-adCV3W*=EVbycklu5Xra;;)KfIT%4> zQU)B&!NqVjF^C2B=~MiZ*u`B0K7B>XU3c)7ZJ^YVJK0w+Mn z@$~Xiu&Wz0%CD6;uSwdjrB%U%g~9ETGw21Ae~?=mkoQ{oj!|Qqsnhv*JiHkKyZ&c(NRm~hzBRnLSxzq~DK!&K zA>{}P^aheba@s(W^xw3AMAb+?@#ByL2x2xsd z*)jq2Su-iZJ2Sw630t{E?$e@N6Y zDG!%Veo1hXx&Gi`yL*61qwEtRG|a=}v;B7aL{o#7>SU6srBDW=nKLDn*hw~@>Q?eg zu_~%tq(QUoKkjp;!XMPPD31y{5s(TOc~G+7!GEERPm)|(u9{s+kXK6uy7%y;-RN77 z40*KJNs|rvvS5z}sBAkCCt99tpbUfsfn7l$;9MrsnqTT1pLt`3HKv%8B$YD-V3FF1 z*jB6y6<{qbkN}`y;6;U)qZj~?e$qa>Z`?4{D@J(Cgq?(i6~nyZm`m{#z)%N3sq>(H zY^<*s?iC?9_yIbeB>7dx7wMg5ELSDffo2uxiX2F}6u|HWKq*kF3glI2&SM%emnplG zB$~ujfi zVIhdedBg_|unaU#CruU6M;V9?%P_n5j&+pi)~G=qMr>uca>m36OHvJ84ps~?)Q5^N z#F|G|l?V@#Av{T{BaGCuhn-&ED69ikp;1XpmjU3l#ANS-XpUxRv?9X+%#q=1NOh8Y z8NZSbT$@Qd)*BSW08G+lJZphY?7WU=B+GbK{-QqXx{hYaMP;67JwcJuS?oARHmS$t zlO)+Yg5)ICq)CAxWlHL*^{R?aC@a{BKrD`KHi2w*I;INl8X%>Urp_9uQ81?A06aqKj?WdWrEzxOp?3s*KyyyQgcdR1p^VAeRA#CqgI(H! z#?gKz8OEO-^hqQNRoFzB09n6wyk9$@h$xx_#yZ9CTj`yC!FBkOoVu z;ThIFBAd;S5hT{cM?6c>({QsIV=5rh)e11I&=w=jgeOU=Ap!M)Dc3=jyaY`Wg|uR@ z2(28J(qr>;+M3W91^~J(%yV!`zk+9yh1?3xdEB8%={Wg&svCN&9KeH)Xk&IU_A#3t zd&%090@_n5&$SHeEt_Dsk|Nq+%EelSb(yMID3p}ZUUSA;&oMc}q*gjVYMdM_$+C6AdR%K~&bh+YPQePaguoy}p_ki!Y*I~+vhA)+HDq*be?Y?4QQA`fi~cXn!uY*pDw z8K-@IyAJqrU%OHVanY6gllf#h9d#$e zvEt^wVas@^&MHf*A@#teH3mZ45AbZiX|>0@1#`pzBTQ|c5$ zh{^$k3^>$D&_Scw8XUD62d%F4hpeeJMw33gpJ$1gCP`jdFtgd4yItmA^v*Qc~5QC2lgQRjrz(lD|S8VTbuirWy zG|mr>`;h|oM3z1*1#)#u^Y=_X&<0fBdh-fm0&>p<1Z5(sCyg!;c4pm^5&Ti18tPU& zOj^)JM0E|sM)W;V^$-=pI$K?`+WX(tYNq5Rdu#RgDPU39Ri{9@+83XnjBadTU?ju4 zh%w0>$>aG`4F8+SxB!Hk9)ww!*y^_J3a*K4g0_;w1m_;-(D#7FF0hWY@)r0lDviaQ zGA5Hr3w@5W@)kJ%WlWho+CrG}mP{^+e<009U`|ugS($UK+flw{DCQ|crSxSeGno;b zU~PmkWmn#!;qe}@v>t>SkTYHLvQ$t}GVqcXRAOlGemT=+9c!hFSmW#~(2sQ40BhQ? ztlk|jg`sq!^HrHn*;TzUnsq17rmN{AVfxIF(?{L zZkRz)7-o=7s%rLdQWZZpu{Q-t3@G;@-LzskdXfl1ln33`gX7+D`)qK0cG&KoHv0JX zeu!RN?+1{9eafhXjm3?qrk~0PJJ7boLPF~3O0t8cj)*Xy9xP4DWgcaZ zm$3D-#98iy6r;*=H>4;r4jJUr8$M&lND1sJv)A=|7)X;R_tj!Wqu{b2hQz}pQKw-f zwvxoUn3G66h=~={4kTOSX+WTY!O5gml2n&QS{E+@RJANKeQTT~)ue&eC`sDY>W49@ zwx!iyT!*@9HLZS{B<)J|K(-l?-QLm$GJGj-SGA2*EWN!WZJ=~7mfqQtR`yEHbCU;G zFj#}bFKY5&c|PaRqpR}>w{GAj&4RhM09a|zdem%nsEVMUn%q+A3k$glU)8r-FGiE= z8z|N$A{U$j+I`Q-bWg=Bl!?PZc%+SKaE^O$gdGKGL@9h3wDIyT+HauMn;J!%lTnBTB zs0N8(fs>?X>m^(`P@*)zynMff`KsT#@2k@?eHpiPr8E5(tNO{}Id~NGt%%3b^vP38 z1S><2pwZzO_}uMq95Ue?)zm$BfYau*r*M6%aYW}vrx3zz&>Hxn5=MXd;5-Yga!s#% zz@C=ndtop0gz=*Yd+{=ew_~k6L*F@ohUw@l>YVhDXFM7L&ph@ zY6Z=;Mlrc}8;>1#A1vHbh+}dKLlOfO`w(Di9`9@wF6?2`p^SZt(xB5let;-8NNBI+ zbK*8FsmfMoIemt(xhJV@XXb>N8LrHfwE^D91Gfk0fazLyB1y-OPdm_& z?K81|2PdruEw|>m_cHOGHs*`@%d5rh>dmb?o_0K*%x|Wb(~+wBa?H58#`Lh5YkDQ5 zAHd#wqKVZzd!>MD5e|m54@Pd}1bCZ32mNlN`8I9X)AoVHq>#ZT3%lGJd0!=bTd0g8 zDjO^tMdNeljT4GU`w(f}2gmO5Deu}a&P&K~N`RBevx)jF%R87$RX}W}=`V+)cM%eB zs`I(xPdTaYwJtAV98aH3+Vj~<83#b?4lJ8GMnULU0dh(?cvV%BfMr66&G0T!yHE@| zLZqbmSNiR@Tee$PR`0P`1|-uU%f4Q}fdHYt=#yQD5C&0y@$SS-0lJ7}5H%OqFWd9> zwPmnxpvYhK`0|snj$LKqT2;zEdVvKg)G4gaLS^RBdtjQvf*si|Ll3C0H-~bz2DfJ5(lq{~ z($YW%>!8;@?*?6U4`juzOizvzok;*XIDq3pY17y-q7`7ah{8rDDs^b8fEi+9W!ez} zROn^ZPD!)|wT2^N0ALCMD)d$ACBgSC1!T)q?{Z9pSiSkciqQE-QWqSpIDIHxFg z{}nBkh-j(R?VMyZ07iN+q4V4fS;kQ;1;|k`uR~wGQp435A%2ccK&Fl=!QoLMxN|nx zMZ`*+ zRy0kHd;R04(~6FX)%MOWPQkQZTu+x`&GvEdMH!D3A-A@Ik_lU572qQ(2BYa!)}b8; zI(Uhb57SW-2aBFeg8#L$Eq)lwY&;uIXG5OZvpEt+Gr&h3tQoFX)y)_9p3PKuUy-`3 z!s(Zc^MrgxW0y>Z2%9{f!$!8z!C2u{9qwxzoS4#dmFw&hSgXqQD+>8wNV8r35bR@P zfPldaPJQcEp$vA~4vF^Nn9;MZvY#bQP>_?(|~HGtmz}Qpn92kM*Vu(xyPLF$r>Z} z&&l9?7Y9gD$BbOA>gncD%_Sv{Us1#vO$UvMRKm4E^Q6)9(F?bXsRxlU(+xIPRa8?1 znP0tG)fA;wEo4X4y{&2KjJ%^sW-ILKUoxoc`du)V?^zk_EMQAwI$FJ1-qNJ*gaP0q z?25zKM6zMrgR2$3QWz?5i~HEfciL#`lNg;+vNkzuoVErSD=tlt=n3j4mPQx*O9cYU zam_qfTn(plkj4IP%%;QDn>GLQ;bb;@d%k!+*J9hA&P6D3etP^djjKx$2$E#@1tb+nvL=hLg(D{NtLJ>Hw#=;owVp@Zji_~I2X zI+)nVC46036l_p&qOc4OT$wGfWg|K^(=8*Bk00^N6#=-`+{Uoc0Y=claT|*3Jn?>4 z=&Qr_G{dp5=GJM;r-7Y2^h<~<_#tC9HUOwu-G#_$_WB0BKKQZC&8KA8gv?6D7UzYQ=zX81HIL33h9UeJwr|0 zKfnzu-*I9(JrLY5?hMCcjOYN5fmh$_POfo914cQt|GR1ivkW&$_e}rq<1pd7F+#!F zYC0g7YZ^keNG?}(gO%l8%T#yqLZpM5jj-Mhapw0HeZek{+jX}4?K#}b30b<~+iLe8 z4wrLu^PR;U%Acox)o)_o&MT;$(r>)^Oi zz(1OV)k<@CJsiPhBuo)CC}X-i;f&U zRO_fzKrbL&B~H^#CNx8ZEn#_R+j{0|5J)6FTZ5t(R9H+0r}apj2Na}Ew}r9kCI>y9 zt9qCeT=w3F%J6y=F?W7eP@y5V2H^TDI6MVZsf=BxO=<%%u0ZgYRBIFtLFI=s(D+e^ zrFGwRCPQ*n;$8*qDzqL{sD$#$Kxes}T=#{Y5>s1CN0eeI+)9wl6;~wPyIPUB+0Bg^ zwCjlwLM!DW!-CKma?}r%+UW#7<*@7(%+hg@YyyYL7@eRwrTQX2Pf=lnQBUfGh7D04 z?c#S0-CBq8Q69okXJjA9z3$gIsx7{qITbA1&9ysn}+>N57A9;+?lYnqqwc+by zSb|^$-yBfYV_&Nw_O&9xuL9mg$QSU%FzzRcsVb4L#E16 zvK5o?O^`Oyt6RQwlrj+N(>9!N`;8vX9VBZcUHnuLs0sP0@8fjUdJKz55l#=_iU7{N z1QA8W_!b?ZG1F!ZS7h2XhL|npX_r;eW80~_<*mTn3Ru$$Gj4Xmm}uI{8}s>mr!&m@)zN$P6o!wg2Z z;E2K;v}U$Sd>v>>x!usDc8cC+t%JtKt3l1zP_+~PY?zituF(ETyZN?>0bR=&c$h84 z`yUNh&XX}Iomu+}8u!zD;Khc9tRtons&r82JEAxls525#p*o*Rp?pUU8hwk!tl})c zEIlOfs(mR+J4A+vK!+rH1~Fr=uOq75PC!4!xtr^XG^Oa#m8~q{a{QH$&OAM+CZfP~ z`3YRB8Ns5zdR0H1P3L-6rApVdSQ1r+BpUu{t_?(l9>uy0Jts6uB19#Z?Zlh`Cns27tWJ1+l@J~-NSnT7nVC_yrdA|s z0DE2x08Ez-YVh{1hfDQCSLywZqEPl-R9k=Vm0m$1rMI6QC#eu~vzed*`UM5c!G(3A)JM^D|hq_tF zjSbb&tgVOD#Wl97l|;-ls=_TdSw4$ycGK3yR8kjcHJpp*_Cg_j954tj#|Xk}&iW_q z`)P1zl|F6kLZlklh_H^CDl838)M!kfVUz;&FUdJMEYXAcq!eHlS41}wa3LDey5D++ zZB*=@+ltY8FR7UULgB%rfOdOOlyf`y#+3-RA(9j~C7*41SYEcAoin0yV6Bh_Ip^cgaa|II zE@rhg{+aOmtjm+gonjC(*Q(q>Fg-!f6SfpFEkAg4kU4T#l|WAHv`%no9WG6rjsi7> zTui<|B(H3&$fOJW>U&Ino=Fye29swNgCulQDPr>I`Zm-I2?8gWy09q*%tPq5B|fvp zkf;Jh$g9h6021jYPm*yBH)xotOr)5x;t|Eg#pi>xsTstqNsQn&uZ0yDy_*y;d5{7z zXxl`AsnT-d0WnEn)@-=C$z|*I7qc&?FK(|_X;GDjn0Jfo5Y?|@5+SvYp^&1-rKS<^ zo|6>OICy5DKQ}{M_@;GjYc#xN$fbmqp)v860qqq^Xku zxf%r&{jUO3@CD28)b>#012I+QDx?;6C{e`yYACR{#GRQc>g8G#Ld{G&U}rb9bI-8J z-!Kg|9={uu6t&SdNQtbyQclUL+OE0H0&R=kf^|)7K)wzQTbNYNuDHe9o*ovj z)?@*?bvhh9oz6{&fQ+b7ow3`OW;jMI3#tK8&d`{8CRk5ih4HLoqqD%>r;}xW(R+Dy zv6%JKU4NbVL)`)pG_Q^mu36icZ8gFj$;WG3~KY z$W3o_-N{%0<#S|+swb(Oj$DTf4vt|JVb9&yrQ0+R>kpt`ZilmUH81ppDodB*N+;*_ zT78PB-@#Kw#g1q(pf7N^t*DbVi`Zn{mg6~CSY-Iln|oH6wodc2_37~Qi{%NHIg{lB zghj)474hYW;H-^}#|_ysdn@nK^FG>DO+TJvErM;=FHXj^T6{FAOen}XjN(Edl?@|o z`%)GiB4}QV&FA!#v@cT(Y(CeFv|V#*9K&Xr1P2S)W%IcSJ~o=4%&#z`ctbX)b5|^% zr;1dFXdY&4&%VT2zpIp*v@|)>LsW&J?*)npjG$zVV4JH;m50<-41k%=Yd{q1su&|^ zY{zILPz_TffZRY1M*_{nFh-N4PA@YtG)ISX81XnyMP=T6I>Cx3PAq0)1SGU75DnLm zvh{=6Y?B7q#oPB!3Gx0_88(7j$OZo4KR>XIOx<$@yQz zOM~_~h1>Ne19S*zD+ldfb~@SNbh1;M6t4bYQO?XjfVishFu__bjA_ge7_dlM&f>~Z zPt6lptE>Kcsg&)M9HtpztD_fr&$^cV-X?7>Sw|u`t5|Ed~RZkg9Jc z17Gb)7evDlGPI6UCR*d{a+r3*ybzPY;@O-&BQ;{o12GxEszf5W4qs!A>u8H|gYXfQ zpIjw|q(}p4#^hjE1HK9!BRxaSJe_k^T$ z)kj(glaW5USj$o2V$PBRB;8gc1Zjzr0F|ipAUV6fAtEY7$l^i+)np7*Bx8j&qAS_b zRg#cCT8S`8t7e-JdL{k=P1OaSz)lzoVq$}ig1Jl%t4ry=$Rm@pYd7XW!)TG!2o`ssQvb?!@ zdOMep8mlje#x)4GoLpY;R*QgLP1O&|uAXDv4cBeVQU!#p$%|{1SF2J*$j4JV%D#># z4`r!JD2vVEIUrZaA%aD~Z9L%uLN)JgE4L~awBd4t9!MwwI*O+GX=%BJWfk~=*i0QP zTYI@x7qStpC$Zq=-Fs0jBu!d3puuD)NdSs=BM;TkAZ1x#Dh3(E`%emb4f%?A+s|2#sC5_SAKgTC3gR^UV53 zeNSPzzMicPsF)3RlI}*^fKahO%K-%I#>rf^{{o0vKEdi;uY?*$m6U_zDj|rft3sn+ zRaP=(t+7S<%@`b!Pl?u1eis9}jPiV;+CD7eEPs5u?z#6UzCv;GpG?D6duSWZ_ar;93J24;XJ`TB_Qc9`M!;MNLZqOO^GXU=1 zLWGJ_Jr1YT z`w(aHMT)cQCtMQ*;#4c%&vaOcFoM@7&xZZQ;dHsW(Oj1m6*(`Nqmaj4#^MpgtI!z& z?g(pu7kRCD&~%~@kQ3}m6+q}*v0h1Lwo#*Yt&$YNrV5|4i|A#{u(_Lrb7pLY_H(5* z*paGQq?{@AZVQn($#rTqJzKh^qR;c8x3%J#Risy>)_3=1Z0hO>@&v9auljU=Cu7aW zZ$|H`W$ArSu+lCwo`~{C^t{V?AQMtp#okkbTTc;%#+a)0?m{QNr{CIwd0b*_b~4*) zyvVJ!lOu;#8611$lK4$LdJAH306(cgx6Yb!zsK|kvK>2Z3)R2uoCzmlk>6%iF zyS?5=r`kqXmy>WZ6rPDdynUQ}#Em^F(MdZ>LOCj0FYK{OgIrb$&3&uK_q5Al_Hs3$ z0D(H)$>q8Q?H%5Pj&L0iLxwhtR!TwxFE=(365WA<>r<8Nu~cf<(Olky@xJD<5s|=5yeVJpwvZc5Qfe1nGlk41 zc2O8uZ0bH7!DJUKrcRwo?@X3hn8-T^GN;)H+Az{>{&Gf;M6stzRBl+v*h)4S3gLW? zzeA{Sn zl7&+dv13X%ZlZV(T_UdFbnv6I;l zRuHu;4zS}@I?=(%#Cy)N_NK{$Vy>};3x4teB$A2T)W0FycDxNSY$NHHgmwJV|;KG0y1spL$-+Pk#LzCY3%cB0XOg< zSa`yuM&IWUqvGriSy2H95byUXr0<$#JEc zID5-GK?aksClS=ti>Ok@(4|fiKBIa$JE6G-&P!x$U;F6?Ac;txTRCXRhp3Qn08+{s zpYYu20k4=jJiebO?YP993+&|p6VGg{o-SrF>QonA4k+$nLgxT&)y4B29c(U6Ux;f+ zaO1%~i!8H)_wj&VDkQelGMC2bx)D}F?)NT_hO1ud zD1uh1Fqbaj*4ytSi5RkbP)Nz4Fkt|Y*&AIP^7{J(7#DHDjtM}@%pt8c@lf+93bO%!*6Bj9)Bjz?Z<0`l>~lh7S7n11_c zwN!iq9bQX>JqDMDxOYJ0xC5Esrd{!ayhJi9GSUG9a=8jecm>@0Tcn@1?EtR`4GxBF zP*M3D(^B(s`%*QIT*{kBk&l42Rt-^8sBGSQQw-?r4QF|!i1nz)yD@mSUdfflGHlC< z-dq?7xFiO7GN(}D#P(W0N`NlHA}iESD5I+d6rcI_u)+RLkSjN61Q$3DXvAp@WxoLPa*9&J{EMQ=HE%gJWd=*5Ir z-g1*elpDPQzF%I*D1$e{Z9ANDChzd(%cK-RGc;!R+ z4tIPtR$US*cOFjX)k+VFWjdPRxT={GZ-UclP7h}>CY}d=H^#$j9{*sawL3f|`DBj0 za!ruy)%0HS1S9K&SrkMqgSwa%De92?$^K$-!zgQB@h;))@<;g&Zf{=5XXVa;oDGsc zs&@{iEAGR|Up2YUz02Ft2eER)!bgj2AAo?ZZZ}@7n4usvq|%Ypz}?uPA5>(m}()Y=>=_B&7kusQSnIreF0Sa(o#ioXFnhDQYnr zwz&m@L*4NKkZ$Wf&Y)wICr`DgPZc_A^lsRIparB#Nz(oDH#qr&(S(?MlaZ+&35-?~ z#vHUY_f+87p5pP9U=a{T#$jelB)E0mT3B98Zyg;+xeH9-$|a1vUAlXN|*T?xpB+_kc*r8~o$rwLxN-iDIqdK>Ly z3-FYO{Do}=z2L6O3Vr>u?}a_wTGR!MuT`0>PRJlu2QPIKBH({%zih$8Dv~G_N^Tb^ zXL$ho6>x5dgr{jJj8Rtk%x!_d^5`Efm9Y+dL;`EI-S;Yt2cJ>yXjQ6*4bb4fNUs?AB^HxwkEMvw9oyVp0Aoo^3h4SF>&w3}+c(=X2?! zm5YEdD%V4&qPa>(_fOjU4Y^wwZ?^lA3auV7qQujE3P-xa z>!aY-w(DHt%0ih;XEUq3e{hU9E3K5U6mt*^nj=2&aWWWiG6WV>jWxX82JZM|Vjx;n zx9PUAgpj#HN|cWFkNbE7+AERgjdGPJjMX9o5w+-ygAc4YkM_Igy`xYG2VK4rf><5W zbreM}F>B$2-E6i`+T9+WfNX_|(Aj)N5zcBerrWj?YJ;6{bkOu#xXqNW<)Ephx%WgA z>~If0;K>DhyRkfanlDcXt3lX|g6Ng>hFdj9*u8u^V1Rz+YaoQxU`)01A*c$f?WlEj zgbOqqav;}uEJs6fluZD&K8>PBU^V(C7%`gu=nxMyI7YH*k*kOhR)dH%YCzw#1`d&9 z_&Y-l=xx4Fgs>V!f>8tdrZr$Wee`zgaj2kBUIC!xHQ0Rnj>VdzB1-&e`|Ox^dmBCI z!p|dNKvs{*D?`c!55_Ma;a<|y<1?HD_KFHc)}gE>lUfUf25OYrhX~2y%`ivpcHp;! zLg%QPLRyU`x%7)GZVcfgku+cZ)!TRMH59Z+KAs{3%<-1@PjW30!fG%+GDKKf;NvDa zv66t{f?8DgtR~|p!-Taa^7Hr%H_M;J5i4(%-imb{S3MZUEQY%9tVyV+P>2EHby%lyCq$@&-R|B` z>L`?BKv*3bami`J^==u?Bh=B0Dh7V9B0(mI*J5JKXL6PPEK@qdLMHS^JTE!o1H$Vt z0rn?#i4#S*--xP;58oCHDS~({CbWEu)-j>NeTc{nr>le|<}d+-)uHcapnY4R^NVU1 zLj>{^t3hA$Y*rwz3CyMXE;B|@WiHGl=;5`} zSt|?d9OJqyt;FS$>3DvFw=bv_Q0DuT*wLR&F1d9>(?%DYHw&HzlfQLQivXji0Yn{4 z7mJ&lg&iVrcQ&m!RBpX;-t$dMSf3$74J@#M7L^i_ASW3ZAJV*q15c@@#hoZ--J>D~ zoLSH0)g9IiI(_tAb2*@aE{rkDy4epoPHjXgS?36&oeMxt8iq4j?>x^fuW~TG%Dh1X z-4k2aI48DOombXHuIW*RaD^J)P~^*~#tquRf-y}n$p{U)?vtEM86Phef&{V>=A@GW z@(u$Ck212!P_vH~W?89_=OkbrI>*PXt#7o=R&{wGICgH7>z$NPQPbccpogM(gWw&! zZD<)TM$G7>C7c|L4pJE;2%l5~9#+`9FX1$qYMuSe(K4Y$CkL~fX>z)d=yAN&lxx^@ zm!*;RE7^h<680PiCliVqbv;X?R!}P~IO~FlQ>Fr%b;5T*mG0iImUnp;ZFYCGT&z~F z-{292)!o_j;_j2t=ym>!Q_)YJS1WfbZ`|8{qk8v^H{$<$)^t9a-Hs=BaevQfF@NJJ zJdQ_=t}G3~!3rW%*h_k@@iasE4iLDl*k*+$LS`|SX!jed(R3PQJyto#mx81zmNS_a3Js6pg`nRt)Zb)fU5Z#pn=rW>TX*t;e8+T!hKYSqq_(zN1*=rxrGgArjpm%<1GdfzvNUZKv(-_Ovd?tom-GnbY@heBPJjXc611D-Um4>}09P(KpeZX{A<2S*(j53gI|)<||4o3~HK26Tu1SjTmi;O_AcnJ`4RjfU?HyS3dk_Xb>#^DaB_~7GRBmBYH z1!DXbGvEL}x}3~_f{W%wuER25&2^Yhd9-%QS(oW#P zVY_+WE5byS$^`zwy9)T@dz*%B7Ty>-Zy%)pW? zI)Pgjx8)s3Urf{U1N7I5;3OH)ASjOvRUGQurus-=?imG7ak@JugKSDz>0^=}2rd(h z#uKHz(axIsK(DaFna?(U)67r8Q6V=~kq2wzgClzcF3r>Wanl?);J8gLK5aOHK|f) z!759Kr+vrD&ovTNfTuY!Gomj*T$*9L!(_Q!EO{x(&FyM%L%j?D_F;?lVx`py6|)DD zdUtVsqqY<+tGg?Ck5v<1Ut+fh@p7-1-`IMi{5sxdEpP2scJ8`aHF+_*z5!)FMPmwa zE7&Rx;aF6U)A=nDa6hu#O1*U_m)S!^-{>i}r9;jc?ju3?^o!BtS_)NSR&z1KYhIJ_ z`5fll7_Wrk^4mwvmRx>^ps8N+G6Im1p-h}`|80P>iHn4(swGyv144j)Rr2zZ|AJi` zc2%{P9H4bvD}t+O0If`}Vvf^c@>HHzr#Z<6f`JoJNVjPf4-p8~kYbt#6Zv3+Nv~5V zS0mClksF{uQ@ptCEVu|$71rHHJp8~ZjzC)8bUZNpk5uGL2`VzIinmov7#$+|)3wd` zIq$_^&vJ7yRE54`&w#^?HR@Ya(uQPE@R6Ym7Jw6ZjVeNjE+#~Y2hCJE^zE(eLk_5g zY~O~F#{i0Tv(0#ac_Wv#MYIVez=%@ z4;HgqM0w*X%;8MKT%1}KyfT-#4k+~WDJBaw4SC4}P8MN0_m~;(OIv6fg;q=qDJSPg z(n|eWA2ukNNv#Ym6&v&w#1zhmIU$DON$0&_Wq81sD#KKb$%7^%CCGCc1C=`dp5>ps z-yhzNyNP9{(sQ|w^Jjh;xSHF0mz^O<&*d$pg?J%6-_x6kfk6(LP= z(IQy!c9gx#<9SSwNI{7-u~n(UF;?*M>^7d(*_HluZ&qvA;XX59*TB8qH|@Dbtaw|v z9twEhUR}Mcg!b=Y{k{jQJcR9`T2M=49v>~{h$K;1B-(iv_9&B#ldo75^KOB#HiT`$ zwM%_3VFJ@|-6dXQhktK>dZVJrRE&uF9vagg<26O5@yZf5l_sKd^}U2R3d)1bd#yzV zQg*0Y&u)^^nCSo)`f3+oqF;8a+g^zxD59(@RFDGG?@1>nyH-+DQuDDSJw3JPdJ|wM zCs8Yb9B4#F-}6iu4N@V#AYH&IkXjc#;}IftI3fTEJ0EHRt3?EC;c8->JiWb$wq!WT z8}rjhkudyYc8Z$~|K}sGoBQa%1){{m84_GBUJvvXD^VOHFfy5{#Y!AxA{{chVln}H zolfyVl}sqwEJi9Q0-QcT$nEIe$<5lHFGpH30x3sTz1mHj7)xB>wnhmPg^;~Q z4x0?D+t-s(Ag*0#8FPY;v1?>ix=g8=Wbw*E;7ebTNretSF^kY8@h4{U)FS}{0mcSQ zJOvV|q6N@Cm&aN;Nn@cr})@aB@mSMkMp)*oS4F-p+2O*RyGShCsz> z9S&L-7P%i;m*EL9(aD~d3~j7VMJ)%oUZ2UGQYQ3Fs6+n>JB}XOs9VeDDuDSIokAf3 zl0tk~TZbJtpzv_fC8oloUYOX@G?}uxv(-3Flv#_)IZc$Ai;0*Q!%-ZWx1gJS z+<;%0AMw7eC&=uZoqupQE|5nI{P7&4)B%+bqYF&oNve)%A(M1ZDP*PyJsYBzk}R`4 z^dTKmNnrX2slgd3z~Op=!~=%#9PxnRUzaz=Xo?36wke+f(bvteXNI@0EE1b$rqY={ z2V7I}ly(*RfuKNNVL$b_TTj*QJzaZNM!Pq=W}s*LG6qNkD?9Nrejc8-VJlg!Z&EZ5 zAgR_j6*jxpHsvrx2q7|gC?**a051GGPykgdU!qx zW6Q3_&aA!pj+HvZ1#=001W$BBG%i0AEELWcXud*Y0bqTMSZEz&Nr^tWEL){;{yY#=UXF%hN0qS~057`nyzN=Q=)x-F`$8d}_|E*iWVr1omO3d#y%vWv=Au=qZ~ zVjW%B2nx254BS!``DGamZa=_2(K@xbk&5@M3RH?~3EZ(RI+G(&MfR0CLIt;2Md)Nz zG{jA_o2jY;ki3$s{a0IP#8Uu6|ySa8BSY$aiFE8}u@ElOAqbqD)e$0aO> z93jCu&{5fVmO%(M) zV|1EO7$LDYT8C){hE1t?c#b`f!#1DJWFbo9PMzy?b?BH0kr=dyAqhTXDuLCzA-oCc z+EdsZ(;G7p39bDcKM!sp>*M%2H@IbX3=7al8JkW|(*Q0_4eL$#rQrPM8Z7t)&7X)8 z1$nU7Wbq5jau)ofj)8d;VNj&6v$-z;*XcgjjVXoa(vyeOcVO2$b!>@z1)SQ(FrspMsslO%>zkCw$P`z7>!sZwUN3#;) z`KDfY(}_p~0fU*B+iPGbHUa>03qKWApB_x7x!vY-O7J_WbYQNPX(-NPDj$fsGh;Sw zUgg^q8PGs)HiMagqha3cJr&=^S8f5o!0(Ulky}>iBa8v#I1Rbp_%G}8wz3Gub`3lX z#V`E|ae4POMFq4#_|2;TO=cLyE;7Rs`5wyLBJuK>muuOAI}mskiHFf7k+N9yedG_< z_O7Sl9o%&8$w;ah+lY*<~~{ zM52i{bjpZjBdCmv$sszMX<*=H<{`$xMw}E3w8KFFQq0UbIXeMmw)Oufn#G+C-qlsAHR#1j8{4BLy3F*dE*38#QKdqT@}HNwy?6Yh%eW zpS_ZT6+Ywwk%!`R76no(XW|~4c=vPRtL=NgGF$pVu0NQ} zM=t%M`G@G!gbNktALa@&5Ek?+7>EIqXCUov8p{~5c@CQWBS&*YZ|VMDjwQxtQ}tyF zHw6b}BT&KNEon7Q2Z&(mOI6(7fqM&kUpH88Uqu5)w3R34m6;k$w&;Nba@h{eErAwV z6{S606xot$6mv0pY+ovPvDT5)E^+V4v1JU**+J`(_(%pPSWTZW+@7O~TTmD-b3{II z9S$%0e2hzjaoa>p#9k!xPA1PLGlWbb#4ul*HEP}&RvQ}a;S5gm2oL*(Hlg#aO^w51 zw@-&R2*~ngHC?WVh<7V;caj&05ZNrigqMh{-mGLYfwn@muO(*7uujl1q+MIf%^;2D ziIAy#sux-`Pa3^|IOK5B7|pt9k56EbD!7tE;>B<`$Vi^;NE0g{R&j;av{@lMZN-xi zM-OS6%WRn};2{Mx%PDaOu&CI8D^ZcS)fbPr<9-Qssb}bgu^Dw)t-I2r5JKf8Wul6O zH#Qk(yHUd;OoD#-J)9_8Ls0vnF|HIR(UY5?Tu;J%pq8b;=lkuNl6x!|XdkHGJp2`P zh4-6U2H{Z96vZ9SC>ZZJ3hnUqAUq14@471(#>2`;0fLt&o+v zmP2?&yl3(LayY-8W#YZe){F#H6)Of33>(^;G}S{3u6F_v?d2-B*OigRXxD1sDCANN z_6&eqoqFv$bp}Cg6*K6xAL7nz_?Y_VuKu_$1vLbPh6gP$Qy|t?Fp(hdI^HF{f%)~4 zo;FWre3T`hOfM&$$#UfT?h;dlY!?i*{*WpUE+&OEE>Uep6$ft!k!Gwl1yI*Rphu1|=@@{2+IwWc0(LA45qpsy1 zS)!--iUqi>dJ0wz0?>3O#x@Mb5?jaVZhfK{G4Gz6HUx(`g%)c?JZ|{Zo(W??G$ro? zvs%y1R*TcZqUS<(TCYECzgH^my3&>RR|uMV{PC5bE}CKAOwLRW+C4b7d$>g^o%>|V z49tQS>REslC%{xmnAw%TJ=-0ah>YUP;+gm?*BCs{GM$aH!L6<$IB{|Zw*FOJ1}`Z?vG_EjYV|0W zjc3DYCc~vtOJJs?Vc@00l%>Vib3rcIC6TgriY*lN4H+rAmT7Yok2fVdo$!9_&xU z)p0y|gJ+oX#s*{Gl8&JznQDUxrUJQFio7u{yM@bJ<2$)r9~azaRNX{4L`?)1Yc;-k zg_mA2fZVx{8$ml6Ns#;ID|PHS`EBO3?nHV=7atQ+m;m*?DQ>)# z1=@J>!r6%F5uw$|Mj$Ft7paO2cg=9JO>W_~6sk#VhhXrck|Z)Nx6GSnb6jGIwgXLc=*=HbM;dX1T5 z8!d*4?4}c^xbu=w-I(L*lK1Y%t(QEU>rB10hvR@H2JJ&QNzV1OIMc*ZtnQ3#MCv$V zX#3^i^u=V1>oOHvj4lpA9s-CF5;_K8`DSfHi42yA6HmA8Ho&V>eDy`%BbeA&x-P)w zH}nt%9IeYf?*dsWeeZ$ha&Ji#3Ac_^tO=I`^SM^`NZ^SXG+W*N@!>IE{qqAyvPV)b zo){1SuC4?T(%8f2&B^j+ddaoUBxK?z*ZON&sn!aIum zu^OC{Jw<~jjkEhy6}sC};oG3(3TA%eN`bk;a+rG-ppE5W@EZ*i^=FGx)b znRHa>JQn^}=nVFj(jW|mEq8dt43~Lj!g4D-A}Qzw$8ZI1#n8u2zui%9ToN$}=MS#Q zvi{O%suiFQh6S`Su;9`HY<%w;Og&dnRjJeHG##oCfEg;qvJqo$dk6A< z(Vrz1@~)_L-<1Ie*A+fc`n)^ z$+yCj%pdIuWgL-wGM@5;WMiKftXHrEEPFPy%;lv@reS;WQHsunw|uG0NF4 z7b7PMxCWfTBBDGBRMBLeqAx~kod@#-8h!Ur0fqNtH;QS3j&N5sBXAb4>joGT0Xy8K zz}E9zeWF+Zg4G>p(7nHp&1z_M>pUf*x_okRvp=)b9=4od+I_snqF0ERIm5*6Bv_ zq`yQAV>s%F0ved+!j)j8Xxs1xW*AsX_#BLlcHROnB1hm&u%Zp2HRukHe54CVX|Lyi zb}p_)Q-1`OvI?hjbm>+Kk3s(UCnf=WEQ!yI)PTudKzCbJb>x2F@hccFs>GjniXOdl8J zn$rL+&X%}uT}J}yvo_9`AkwD^EZb*Gb<=q-Lit5pp$}`Jd(`H zfn?3&)}zPoD7oY;Ot~_ePF}qHBBGLsy=ZC3wK6}cc}4Z0R-~y=QIV>8P%G9| z4{95g)q~oD+AH*xqEx7`9@Ji`u^!Z3sj|>&vCfi=O-c(S0$;Nyyj7t;s0n8?S%`O` z&PDHGO=NQP9t-3&X4g-LX_keUBdghq#sEAYu&cB(yeM|Pz!MBQ5%Nd|k1j*2vZeb& z+*;*o3YvHqcNb_e$%#r0d39VukmLm&$SfT=a1xqUU6UM}C++AFM2tR@A{paO1_vW= zl*E|fP1(KU`)BZ{cg^PFsUTS4m#gy?PcA@F0oGhvm#d~HV!{;zTH;@`)rc^2t3w)+ zX`=|hhK)W#OOyb~8xnh1(o+{}H8xvtuK>Y!usL`@!Jhu(x=2Vinl_ppHPgdViLW8E zR$UqJj0~xlZ@}gPZX<}oaY_UYgJ7_Z+#&HQUh*>xqW<8uB z9IS%T@OXxsTyO)){6;QM5hSCvKB8=hB!mpL*GEGUjck@0j-w$ZBb%c}J8Q!eBNLq7 z+@ImrgixoNC`tB1#tVdOGgL-Hxi19Q)*uJAmNHm+u`jpmV(|o`T9&SmSO!MmTuPy-y0j!AFNe4U zp(j^{c@Y&@w7_?0K6g9BeHMtC)`BXrtPVori7Kq9?e==cZ2|>V8696eh6RV)k0iKD zvlwhB-Rt+;*J--0-=%hJ7<(VKRWd>#I1zq8HFOJVWJ;)yKyjqKF0-g7R=V0FX1 zc9xj(MGs++`|K;ss;lLqIbjCYEc6G;9KD>bu4h9D&j?JuXK^keb2<6KErzW{n{y{Y z^xF99xOocu|LG!_^7m}hkU2au7q3&GyIq?+os6f$bh5(T@d2Bgr}k=>2^kAs9+H9>cuhHLA+~M#bgKZu4}0LAg19{G>CUyLGiY~IEZNrDPiLvHV$*7Dv$G{ z828m%Gx=fc@iYbFxLkFHafoLJa=8YMZ5+vP6x!hMalSs3%Qdh=%IC&%c^hQ+thK?s z4FXG6elTyV4N29K8_YXuLsD@R59S@UBo!btn0I^`W`j{eIxyU9Le_1BwLF`Nd9YE8 zCj$9k_VQ-u@dO;~s)OVG9rj4#1`FJ>PrWmjGvDXWA0Cy@4Dwu0bn&PYu61n(R z&j&84Sb?>dK4(G{=w{-`#`0{udTNhBLU|zz#vsQV>9|@yMJ#NC=8E`;{lOD^Y?6p@VZm+K1Pha41EA9(3HuQyA z@24*&Aw1Mal5;N?N6WRJo@dJlo}v>8BM`)>b!z@`z6i6bPt(~>I6IFfx_1Egg`kv> zkNd3BB)Hs(sWvy+t|~B69~A(wA9})gdKFrE9;Q;CTw#(V;(mbs`exR|jO-UgaV-cE zVTm;F4#!gq+l15@QyI*;ylKpzcsLPFZk_ojz2}q3^;(ur{nCwqk90?$q9G>q7NzJ~ zwvAz!2u?--Dj7qk>@}LLT(6d++5SSqIr!cKyTq^tbXM?JJAr-W5JhK^fi-bVrtK`t zL?R|H!2nYpwGtM{Yc_&&%rcKjnXfks*9Az6_ibe;r?yD_w1SvvnWwM;sxE|hUO(2yG zco6pS##~>^atVHKr&v60=e~qVB;*BdGzd?#sQ%u2nWmY)dXxdAxS&&`ETmsI(3Q6j z#4xp`(u>}5Bq|h>gxxUkGEGw7&I`tqN-{+T1d+=FIM0lh`#3F&^@$cj)$m^XyfHmr zF*IIUkVfq~qy_eFuBK_a&hkvh0wT$vX~phbtf%V)FQeJ$Y|L`e<(?P^MmE=l7t@~e zOFb4R?fde4ov}-|uqv~Q-pxzXFTr0jyRZcrEqwOYW~+-MISs`5NZlqt99|QzSn<<9 z1Q1cTqSkXwVe|PS!%udha0<26i=Z+_2x|vxCHp=W{F@;}i@KH;Fts zXr_w1#RPv@eKx|=*H3UZGaL;uml-lLPK+P}EZ{zjK$6kQy`R!PghQ1PYH_>O5CgHr z;6hH`F)Go+aEu~T{8x!%)cmQQlW~mFp9)FzywovD!%wpqlsm_PHZTuDji<>ZXkQMf ziU_APGBUcPaVv_~O=ak4FlG|SdsHfowsDmKH>--TJ>h!S`mb8Db9iWnV8NV5^#=Pz#XDQ8(Q zr4Zh|Y^O6BUmN>!rcA_FDZ-6O(bGUYp-2wQXG$L7QA)4?C}9skV%wqn*n}HPS?r8o zPh4Y)yBaq5Bq~ZIF{bw#zW*32gGq!*ac=@p8h(zbM0t!-TQSUCBl00z&bWC9*N5Ds zG^DwPDgq6hh8s`kDTA^;akmODD-36uiAWaJaQz@1hl5(UUOn87EFw&|5b`=hEHZ9* zuRA9mZfixCzV5=8vEgcljc6ioT)V25-?1oM7H3rcYx&L{yYbE-3jlq{^HnvOMb;{E znle8Xa|i2d4>o=Yemhq2IQ>b2A6Wx zw!ugjJR_<&a&HC!^|Qq_o*~K`l}Jv!<8;QttORa^U$Zw=V<}tYl~VRb-h-15aRgY? z+70gYNSC>*qZk64EIlKh94rOP^Xb!$1&l$GjF!MnX^GZ36>w#n%mn&|svzZj#P(52 z$cVlVjo{iY6I5B=IypJ+^gOIhu7)eHM>njr1s|_L=|LyB(!*@dwQRRD?MgCI7l2Ua zw2H-fV74S(cbSTE06z8c!C~u6`_LppymtjsJGbE(hOW~ab5A}?r9nJ4JXGP*Zc~`{ z9!*-$oe%WTQJ`Bf%Q?Vv5Go`DGNd0hPtFfoP4FRE8PsX86?39Fn_ep_$&yx)S*uDB z)1wQZH0o5uiou*Uc9)eEKu7RACC*`jKLJOp*jeNiZv=E!@#-Y>y3;so2bmK`S$XT? zaCkMHy$t>`n@I4g)pB|nN3~5R7Y{wGM0QAJHo3sLXoisCoR5&lXB4a{p^%+_NX6(! z3;Tph=j@8SLT&SKm*TT(Elsa0wtCN6Kb60_}+y z!AN|Rxa&~^mf>>ZM!RkVbdfQC9yALB5`3-1(-bfqXP2QSS^nyp@u_Cqw8oD?-_2GN}~yVopgDObBI%VFpR_`%nWzF;vI*yxBBYE3_My+ z-<`mz97@Q`7c+U{0+;)TWcWQ;5g>8$Z6p_Ggglsh%%h0sGW9Kt*=5+uRmAub2FrA& zxG?+$`s(~%mdW!Y&*Dl8C~Al!(R2|!t4obrhXJi(ba=aXdG z(G|v(VhHK*CYa2*NhNZgg({7390pd6t|5}P=P1LS~H?5!Q)FdMb?H&Ov4jS^!lTI5R$&u4v|~Itv8unVteoqDoLkz zc*e1>1W&>qat?8YL5K{fz*mq+=??FyQWXWa1G|C(rlcTLn9|{8$L&WDUu0xVS334J zEX<3ft`rP-Q7OpNOLu&Ky{bM8q-TOxY3)|AmWF#n8p89SOCE@)WYbHX3@pdk_b~zA zM4U$A^YL9wYHlqpp$R(5I zXbTEu!m6f1XEav}vumslqBRnn<;ZXw00)2}TWSO#SsXLj61u8DUg3fV=@}2Z*#Jmh zU+M;D4f3P~TkK+*rG06;;Xw|DC(eu69&Tk17EVQ!TDK&|*&MEa9uREvIWtDYK*;W!rqjJRkW-%$`s7Wdru|s}9 z1jCqgNu(!%acySD4I!F@4&BFDw)O!I-JIy^r(*YH~xxt&pn1s1|19JZD?I1UGH zyBPncjH(h#iaK9=YzvKkY*R-81W@_Qd#tP*T7C%tHDe zs_<=Dh@$RQ3I_!_?JWJ%qV{;*6FHaW`Q*q4Pqc%C3LGP7``lM7m<7PB-Tb%{|3Tqa z>=ZXsTtA(TRvA%K&+p`gg@95lA(b3ToPJ)eCF{N{r2S^{Lai#yRNmdF!2_<=ZC5!! z+IhSV;xiM1V7&LbZI5mntWQmTE`&5#t1f`p3cG^pjD#Gt@VXzFoXCAq#jE~(+=5@Q zl`YH+wP?>^?kYoh^%5Dnp6^Vh^H!NkNC4u}hW6X7#+fJ+!OLp&f$KGH1azX(Q5z~u zYjToiYf2$}?6C?JG~(Y48Uc<`m}4JA$a1>E6!qFRtI1bRUvT5!^o3)hWbs1_75ZwO z&_vX-U2XHsfzp|P)+fYb_*v%)eYw05qQ{R!aZn&`Fp%5ki zTE5F#I73k(q|*QX!7(4{3r8p_a)zRu7po#V8exsIfS{N;kKA4i&i%6%S%6hSB?R$f^D`YL(_*TsuVN}fn2fC z6>s>31xx4TejL>FDC1C9exG#npdLbNY0zN>+JvFI(PLB*&zbat!=1dygcEA)U>Z(n z=Rrp)n8hxQGH~kb%ZD8@Vu|e(haFn9U@q*C{wxTE4wC%nTOY+X0BwjQ@OG9dH;Qc# zW=FA(zsxAMv6mmkc4A2pEEsyZQS8T+49B#HA6HT=vpLDy$^=8?tg81~k-@f<%;wr) zsfGY(fztudX`ehk=r+umRpn(@xFsSd`k;=rLL z07GmjPjz#ZX=V74^z~ z#?^4>Cz7PP%)qjK!XotLWWJx#-1mO?6$Vw0!X}cLo<<1gC|0bhG6XjEl~#xKl+Ni7 z+*7l3iaF}c6SYU|r8VV}2U}O^=;mr=J>R()BCZ9}0QXz(9P2$~6bGA}GF4?EY<{Yu zGBE^!%YB@!F;vXX%ao7V?&eJkYwaFKU!`YP*qe4{9mZytw3^iBtLm%N?9UoSVl%c> zmMXG54Du>|+7GrKz2>2O^*zUN>GB$fV1|o9!rYTuRZnWmUSQ#ZPZae7XAPfOT9ZPhO z3e|XPj1TK|80Rq^mSV?L32g#F;5hg^#8n{D`VtW5CaNo-9r&Qsqi6Ah%~+eL7lzCG zqn-~XYWZ|xMn|18L0D=oPYj4n`%8g|P%ct*aViA~pQT`g_5rwFXF4W$eZDY`9>XYs z!3SwH1nXAy4>Ie2bS_oCGXwXt3TW`C?hR8{Yn6`AXt-*KqxfI-7>xN}N%qh)6D3$g+_E-D|-A+%L5OU>bw(YRj|&$ z2GV-e<0umfDjSEsO3K!3y>`(+6C!SfKrR}%2-3Pua1|01=;JcJ13UA_Yf$J<$k~Os z^B4!0@uY>Ca31L!*!!pyP@JNr1z2oHV5FUotLwy&_qXPuZiH{2gj|4owjUrz^~I6 zf#4g?MGAiOd2MM$&7NCIUWGH}o&VCnW*0S?wR*V8~oy0#IL-bz869!Be< z&dpK;x1}E7!H!25A!c%U5G%I+ld22gd=idfthV#TD^KJsj}c6qkwtR%bp2R^h+M7~ z?J_St(T*55H^DhmgO9OlKE?y=8unZ3MRy~ge zgY0Sh;`4an#?3kP!zUfKTC}t7f~>mlFw>I3_(%(mNP!L=$X4ho&nwhUW?`Jd(IKhL zW>ucKCG%<|ukw=ac^!tkD>rvqWg9XeS8l;|RgJDIczkdaR}aaBv-nlJUKl!< zB8o5seTHZb!!cW%BH$h>R;#0Itx*GWMg-@S6i}51JURP_)R~B=Zz?Y$x!v`QjP&>4 z)=I2VXO_FA(9jx$4}{>8suC9Rk-^ETb6O|WMZ68h2LOW>L+=Es^?Rle8U!U-pxGsU zpfUdZ?dnE@PqFfb0&zd0Gh@9{L7>L4NvZ(W?)=yQX)LMH7b03u$^@iwxaYW!*%7xv z95-#1U8AGpgKbK`Uw3=zYctb5b+wu4nQ_UfQG`Rp>ifdl6LC9wTTRY~#<#~|O04_P z%+r_mp}D(n{Y0-FQ_T79=BI37!yiwahzI$NeB7{W@(HPK!}% zG7*cKpLf&@T{m+^`Mn9uV%~Wwf`x#84ILkYFBXvJG|+ZHS7N;sAgC(UV2^+4pS(9M z+@tSk)pGM=v7TkAw5tPxhIaO0g`8hlsV+fSzQZh^AGfVHNh^Br&1Pnr(rK z$yMEb&(J)-d>h7gPXT%@`zvq>7ZpBDT@_Vq3UNLOphX%{Su zNH;L76)-~GdMVV6Xau5o5f^Cy(s5W%0dL6Q*03fwJMq7D(f!vMca`+Rv$hr%h99vN z7Dh_bN?EUXWgu~0=l5}tbAe3+NvgPckE8y!7+!*1_>ovtYJE`hRv-mmQ?lImKPwm`7i_wUz5@Gib1+)UpqU|lc9 ze*1oX_F&#b-*f{S(K>?0GuD@rvEH||b7R|+vC740iS$C)W>&Shhe0(y(wRnK(odh8 z_@dYA8pU+9shB=8+gB3s(v3ey7 zm?M^Jyqqp_SEPGh;HqgUboWb3N&>eCumQ9T;Wlz^0BIIr2Z)l>>1;O5*>3woT_(W_ zU2wx#Pyb}Fg*U6(Kw=j8dwZ{-a+UQS!K2)vpA;SSqL?l6G@E2?2k`%AoU=~&4V zwzIpgJ%Xmr*Y^i2fAHNLpYlJhkuSUWY&2ZoGlSc5KAN52HCMX@rCO%>*7tOdv=qDl z27P^=@KJ`iBdNN63b($8K5Z6S=-B$cOo-qi2kU#iEIZP5EH&mXU*Hdq#Tv=!ZVpyR z(ZBu$^VI+>_MidqApl%mt&wYgxmpt;O?6y9rB8Toe|^uqBgJ<_67#!fyf2FwpSQk$ zy_}4GEee!~0rV^qI#B%)JSB9n%&6=ebYKZi{~yP{W*HrLGnfVKsTP=znx*VI%lANi z%CNy)R7~!|(+Ne0Io(no^CdYs1&LQKGpX~Ye0ksD&EY~WJ$iD7A!|sc@h`co;yAuj zF6{!lKlV^ark7YI^}1|&A*2n9WGS6iM5$6yDW4`cZSo0EG-W53&r}|IlRjq|OM=YhGeE;}%%tF3L+sFw4w7Lu;G(?4TjV%dyLrm( zLTSxn8M4a?NL%$-J+NT~_vyWExaX-4@@L^AHst9)|d2t}bA zI)lnkV?k+EtJ&xBo8AQU_0$R+1nN0Qa)XfrfF3y)o zXk)n3EB)_`%j9i(qblAVN5BdhL@%=yB0$rKi`(?0fY4+u4`JUBDyDqelqNc1Z3Mkkbp5s`Tnl)QK<(q0w#!%NqXRo zfFRS>@GasBx&471BgQlh7$&9ugl7*PBImleNL4@m35MIjz3DK(h2-pS>#| z=nxlnJFX1rJmsOC@~3m|CkxvWsK+PMGL}I-zL{pR6zcKK6bd%%?85qn=g`EF*Tu1u z$x4DZxI`U82F&pMdY~xh%sd)Mpy43Iq3Cw!0Y+UUQKmYPB;w-$7w7Su&l30WO_RYi z<7~#BcOS(_VLbEbJeY^v)atV(fkEKgM^~Uq+XF`lGr^$R?dobW%VKlbqx-d0nj9%C zaNjlxRx%)woN;nFWj-JYNTfF}iXU-IXr-RyJZxNlpFm}Pa|sRiPp|&x5ehrax467i z?MtkN-5f-Xv@y~5xV!}02ie}$ph>s%eZz&E=RW zY0`rRT&sDhiEA}VPeLXOmF+xH_HAr}vNd2(~y)REgJ< z0I*nJJ$^K=Mv@z4)7svKJqKk}!kp(<@VMwP>r@4W$H7|L>LL!M1**{+AHy-Y71#1# zCl6TEb8(JGZ-7+=fz=tCGv)*|!uhi|gwfV#1+Ut~nlS)>{H6q`x8l#>aQv2VE zwH5cMk_e$VGS6{S$U=V$hjo=gr>yD^;i%=54lGqQ-Lb!Q-kj>LH9}wVP~c)SSZGZ~ zI-AyH1w1;xvEf+z7>V3eHDNaBkx*pa1O5eXHme#vN~;WLs8gyMy2!qwYG6%&Mb%Uq z<#tu78haWEy|t^Fq)f8nq-rX4V%wEM)%az|HdT`ZqL{{&N-3vsrBLeAH`67DZK@{e zlZL8^>&fk^CKAT9sTy-*fL_o-C7ziwL0KKwOp|OqJRp!B@YQiKruWN*`hIu)`%nQcSZ3K&>&>dbfa8;u-h0Qf$CxaT;g&tfX`VB{m zm&2<89)t}Gn>P_wyT0d@1qc1TyZ_`l#WS03egd!EBi>6nK62X_WRb1cY}>SGoSg2U z6DY-vV4+2MRBA(Gg<;%eiR~#bBH$tvc9L3RqzjQDT>mf*S-_JFA;n(e9j-NGr7^AR&@wY~RwytqMU*jDf|VcdYKu<}8Mam$?A3FlDcOq%jXac1JP z=fyc>4o90Nb3l(9S4H13zrn%asDE{Md3=FuD{iB|guGz{nO7vXCFS{0+LzQ~NsTj8 zg$&EEc4A^(Ciwe+|@x3-KzOWfZjd5_V z9)%60q0OSKiJ?5zSYsCJy8;pUs&O4{G9OQ8MTvaX~}}Z&C`2iD*iYtp67ON%+1r$=pNdosFo%j<3}3;Y7;Pm z40a%?c&gxQkm0#uw1Fua*1=NC;wCmn!68BmG5Nd?&F;FLob#?$ z?HTYL-Nfm3W^M0)&-f0wAC1@mvgg26c=fnoj_?T&JD^)t9Cyv?{TY67XNMg#KX8eY z!^DD>?(7Jf8K7Ii!$#+g96Y2{y|A>y#PxQ1M2?;Hf6mW323l=(QRijnUnd#ZVfxzk zohKQ}qWsTx!Zyd|X*SYjU4=LJZ4i9sJ}lecdr$%j=txYt<;_(QK?yuQ{S-&1USzjI z_P1(M=~Eykx~_h;gTzcv7r%B0d~(qW9ib>YfNso%Fj5$%g1bHcnhSq;F8J{rmU9@y z|7@pvjX42x42Lt#IZ=sy+ng}LN3G_ZfWe}uib90LSd9l{cNim8N_hf_g`Lqkw)zpc zHYXBvtmwSXS6?6czr=Qf(K~n%69^A1-ew0c?ZVlM<(^}wpAnfR<>|$CMLt;^L&5c3 zjDqdi+{PMjMmHL6={8M9%U?QLDSlA8g6VbnLCNbe*fg)^76pn zp2Ef#{dHa}M!&>yD45|+?ZxOr@zHE~fHn*nKxW@;*RmL0zI~lcN$#_Fc$vBvRd(ar zBJqIr7Pxt#TLio5rlP=Lu+`w)6d)Xj*gv~IEng1UeF3Jg;88?=@;v?g_SatykeeQ2 zohOM!CoPSZ4fRD;GRpYU`yOxBzF0P0dko4YPkPS>iloYl3$?j z60;kTO6<5qKSB7}$u0wxG~onWqMxSHE@M+$9vmQXx)u(X__t{T%xJG>vLA{3Ssy6W z3SCj}G7Q4xhG6J>FrZ`Q@cQz-N9OG^1_HN1v-i@&@i1Q8nqNkF$aUa2(kD(ihC>vA zd-@0s3UuL&M2Je(lcOAyk(rJVc+vz2vNA%#(FSNj8wqLhDCb>(BP8S>3zDtEsyyVN?D1W^RvXT zLs9LZpM-Q5AP9-_>ZISt=dk!j~}u zMTKA)Dp0OY4nFiRFHR25`gMoguHpo`oqsvxD5kK;%&_?Xp+oLsHmaUW`>IE7yc{f% zgkXVV`v`dB0~PL-!(&cu(q{4=iM=RxaNK+aFmytSAW;=~Z@y9|6ff`24H1-$ocY&h zhl7-}WS8l^R=wAF{Q2hGA_ZiF@9pbTwN=MgnwM7(kIV4{Pt~o~qxo8%QE4-Z30;%= z@&-@OjglAHGj^Aq``BZy1BR;}G3kXw-<&@F>Y@@GQw|oSz)=?Vsqy zH!Zuk4`FEWoX9Hy!S+gFVeEz|qywE@p51t*)^1{fMSoj4Kx#4}k98LplInQIiN-FE zD-2Kig}uwHLNthrQZ}&U3*KcCC9m+7xqnK6)5$9arPN8gOpc@qG?S6%?&#p+qles&Mh<3>j9c+g`hI+iN%ZKX-X)OCo>;4N|2VhX)r|wx!&apOfnyy_w#H z2+f7=|Jizd`0n5`KuKXK%&nvI!{f6z=TYEj+6|?$EWAg%^bo0iLD|E7UO%?y+)1UE z-=Zvtoc85{N^klFSjY=EnqxcSW&}|7E(bBEWdJiSr>K zeXxYgqgSKYr_m0yJB^Jh#5Vw(1TVS8Ghz|6afa;Rys5&m??5TFoJ|Lm>xh@!=2@eJ zZ;6753Qi7IK(m(9Fv^@3i2Xqm=Wmt5$P%VWDZk{Vj5uv0&=h^Nf&`TqdoF|oT=-?8 zJ0}QzJ2mH$LvWWQ{&PQMqa$q1w-mrZ3hru({vw6k%M={Wt5wu7?x=_soHo1UaIu36 zfDjgLbcByUvzDr^VrpR5Teek!xWv4yb~Xh5)8lISr`f}JH2c$d`LJ63pY_ATZ1tzv z^y8mCjmQ6ofA4Xb=&9TJQ|CWl?fhr=PyhL!)qhbmosVaaH2+?8Fb?)?UN=u-!HQZR+6%kc%4qqhqEaIeLxz;u^RQ zgga|d-XsW>fT6E^jXKeh1O=c#(bxqXz0S`_9gxUxJ5;bU@iiDrvN97p<4^io1!pgo zIB!`DHoFH+=j$+gmx6lyZQ zx9fKF1Hm1jU?gitsM5S8%4iSjFE0QUR1mX<5RSvu6}1mmL?Z`dnBavPe{9BKwg)+oZ237NhqEpjTs~(&kBL)ZC9~o%k2W{xpUR(cD#2p_X@_4k4 z`0jAnl+9R2E`w-}v?%&90Ot!MmQ2k85;U=QL7`-?E#3hNmh9>6;c^b{NUkTkId5)$ zc$q93{_a>iu(4k^hk51hn!D4<{84m)tp`UJKJVW>&3XSfZB3!mJQ!jOhFdr>4i5l1 zj@U1E)1+d%a~h?-uU+}u<2ujqC=*14{Ut>T<4QoBee-*D*N6pvtMuln4-eg!nU4hD z?H2t0RzVn%kb4h`6*EViT(p$C*m3V65)+Ulemxi(G}N7m9d{)wkXTm<&|)~}NGs5G zvRohB;^MBm>XJ7MSQTvk~W zD+MzBgk^8FwyZ}NHnWtQ9U71eoJXu+kS=g1$H=%>P;Wr0Dr9Bv?&m4q+I?~{qG{@A zPH+7B?{sELfj+>P5XehXZ&Nr}Sc=*v$2LJZ-+W(Y;N;u+>BYfiA87?ob4qg4hD(Tt z>sg9-BQ7E)J~Dg~i(7@Bc)Ff2ddSIZ^8!f^?~jkR6SSSG@he|Wv+q=eHa85qlc0Ty z1h^Ft+~x{`v}oQ<_~tab&AdU)VHvGlj4(XXsxfv0f)t5akN}A|p+%~T54^2e&>Ounj@&8GOI4>4MfS541X(zD5@B|(?AKwf&P4fTyr@yblTl{fu~hhcw1cD zfURLdJClmHZ%LCsRUa8LYXiQYtX7EO3ufA|Dc|;ms>8(!`6PY&vgP*s4Q!CT^nvI!$#-DH>*QaWa3fDw&Oxa+R#J2CGaF( z4Q!kSzUmMy(tugdGn5_3`M>RM670+@tH%a-^OFDy@Z96FLHq~T_dp4*SmJBQHg}OY z3lHN&s#oGbO9P>~H;8gB>u+aG67jLLX8! z#9}~o9D~)K@s@*;=jO0E9`o`5!o56%HFJbJ)=WSKRHw9oXafIrGELc~VZ~c@ZV*&L zjZ9Gcz0RuK*f&{(jMijQ1>Z75@z7_N)qkwa`oVQYH^=SO-rzIbgH-1%fkB$UxPLq=X zk`@U^l9Qnsc1}cB^ct$r5BSeVbY7jy zJU;U5B%-UZPIPyp^6gHOV-N;%9K=k;A?C^bNeWg(PjI1Vbk93l@rX#0U9#Tl)+^=T zreE6xuvs{+PXLqj#so-$UODD`2Dq@7Gr*h#jTztz%!V0YPaC(-0Hb&N3~*PQCgGL2 zK{ySQWs;N6riNXbH9BTost!`#`1-_?bb*^w2fgs;ihF419p8*Jg$M({U=B z8BI>H@Y^{R6T$8PgZ#YGTg@jAN9FgJQ64Pfpc$u9Q!%IL!=~+lGZI?n+-@sqpH(%l zdTrdgO{;FTtlbtKI-60qrRi<+=_&Kt#Z*F8kHVWB%f`q1#o^s#{Hw0V?I7n>wsPDr zuIJ-gp--xtCmQU@$%XaCHJHVXdI7K7p~R-scntg37iDJ+?+@l=vH3!$zD);MHM~IB z1hEJjkkBJ&jFiu3+Ez&0GnAX26lSLeG53 zl>`#DlSdtq;sP$XlAs~|)*$$8mKOTpT*0O8^Ap4xt!k}pqResDR9INd zspcPSh9Cp4JN`Jme2(BHQn)r{nEC9OBNB1^Yxdbzn*FT|Lld#^&2RI{=*dO1JQR0w z%RA&@6Eqfe222@U&^nAEJ@5xN&0!y6>nDEOx*FQ+A?8r~OP^md32)Qgz)FX#?jD{F z{UDNGO^YnnpjefJg4+Tr0?-P36%>wsYZj73C|!=v7@;^T0rEZkKF@&hG+~9glPol( z-3Z(O6hh(`2q97gzi5XJSNS$C5XRgNM~er&TjzA9OSI%P?|nv|BDgjpu@wn`DFRX0 z>~3p&(Gv6NUT7_C_a;g5(0t7C4Z2zud7E2{!hW6RTKBXCQ6{*)e3<#~nCD&ILml6jzQ1f!kA z#BW%Ku{4_#77hxTPk4daoO@Q{=jZhI7#UR9>t;wx8QBpPh+KO1rTXVtgMATG= zVN*Yb?6gcxNb6*0$+weT(0_BXCqjit`?WJn6N}qxrK)RsWZcmDetp%ywD(H!M2bE4 z$NCU?IC|hHyqhfD;|_}0QdT7IkZliH$0emIs2-}+gnWOi-oDM}6t9MkXk{R61(FQ? z)c>IDLO_6Sb)28JO|@D_u9AKpO$`AZ&BW9-J`%nO8|E zbeWnmVQIsl&tIAW=yDkEj^Dn6Uv0pIMZU4<$m9PVaX^$r&!KSzgI^v@v)zNFWiO6N zs6aZyzPV%-Bw>sKxd3PYvlz?w$Ks(wrZrjif(G8b9yQ`s{KtlVb073zS z+H_%h*4H35{pv_a(1!K&-NW)PSBueDx$N`R3{QmMkUlRkl&6E~dN%oa$xM@icU5uA z8{E3xs7t^U93*wX;aGu?5gpz?lMvpc!@`@R>=3cE`JFomKVi%91y|@s#~trh>-$Fx zP&b7+K;-Hy2N>*u;pzj_?jjptg7BS4$1nA9fPlpSu>r>;o`3EiWx0DSVDGizi@o>m`y(jP2wnTdN1LHdM;`B+E88RJ`D;se%gfTCw#DuC{FvnL48 z(Vav0Wh#wvq8lu&c9jNG|7tODXF!@rkjneX;GtgVL!@O^RPs^c$+HQ9zdlcHs_-9E zYgI`-(g&1DLokx?aKHvDEz>9t4UN(@5SNARL?pkWXs<3F; z6IkN@dDJc2W>Q?WO%G9tF73q5{*(nple)T2)A5!?Wpfzh3$=$1aWMS2sujP45U@Me zRRm614r|fMac0wCq02-V6ugRu^P5dzp~jiI+2#o=V4l=#gs$T;#R^Z$v?}v|MAID*y*=7sw6jK;1EIzvyeLZ@-xs2oS%quk|aOvfBO)<>^T~z_31=-=9%0}Qs zi51iCI<)}Ag6TIju_O|-AV-=cS}R-afo~;8Wuq13;O8Gnj>P;}W^u9w8L7w-0C6JI zNhdNLf|4BP*Jnq#voN^)5aI!E&89<_R(ed|TyYcL#|s*foIZr3D9ZN(PL;f7nT-;Z zi^b*5)!XIhwroB`CNIm|_tRqZU)8OS_|drU;b9ChqIp%e?!N!BFmK-X@MLz;z|qM` znjU^8P&R_6I;MCJN(TqPBAv1oY%m$;*_UQC_(7)TjB<#u6?lwe>j7a)u7;HBDnt8G z+P}C;-&s0B*vM5*=ReBTG!tW~x4R%2R})06@;oo^UNs}NUVT1FxZ%=a5T*pk`flJna;}SZZXDsaD5*|mH z$Nl%|e4vAS3fR5nyVI|ZnLb4wdf1GkPtlgGo2PdV@RD;Q5R=h#5^~hkI(GDeadxj_ z15ofT-K!wN8qEc-D=^S*ph;~WZdtZUs8r6n9?Kqs1gl3%<@ty_Vmb(8qV_qY*U^7Bgy=5oxZ`ksgX1 zW$!+UU_CD^Tts139;-Pn|N4}$ix4fK!2#VVj`HXy)=9fWTq}*!mJUnfcB@prCf!-^^{qVe@)V-z zQ6lJKlnA;6A)?d?Q4z+B!YcZMdK=NTw9m_!eP6_}1FsLmi53%@Hy+@d*Z>vsgbWKV zdW3IM$Jf~|kBacXXW$L9Nv-`5<|5saRX&Au17x~Rw1yVd|v z8hHB9UDXj`KE_)gjY9>qQx*ZigFu@q1kZWb0khx;i45|H^ezu=d=;^DNj3{;ml)f@ z-mB@{0+h4co=pkKymjYox^_!_h_^*D;7J zFA}67cyUM#kanpdAnzyCAwy_*M#A%ErW ziBg}^PgRVQ&*tT)F>bK?Q*B@dA3Lm)O>Xbg=72O%uoY=iU~5cI2`qs2mO>!Xa2y~e zFsyDDZh~64L=85MExLfMQ71Ug1C75Eb$C?LpbjJ}&HIcz!S6Vm=mPJ8JP9BKBAreM zv>;D{jR^)=k_T@D;3pEcXOkyWkFof12U|5_9OK0W87h3= z5N?ttK+H@!!)=u#XapO(J_9+X$cr zrqM-J9t2B1OF^~(#*mr4Bf`RDY8gpVfHtE-xmZ;Jr;cd&1G~u|xNWdSWMcsP;I|QX zx|PR6M0xBl5aa`;lf|h7K#-;KQxO!HwZH}u0K1hR!ADzRwc~OeT4;j^>Qw#{!e*zc z-c$tLcAz!UR0}|?bPTvPPYglpp89Am$Y6rF2`Xs8_)}|>@RiFpT5~#dAT>a)SssfM z^Wa%Kgv|U&(U6OO$6~;n0Q5v?0@0UXEfKV~AM(~LO&)iUnr$0^V%^6k-CHDhzHCNw zVTLhwp;)g1AjBc<{BdL=(aBc7fDOiT|NiVrwC1xFa%i0##!Dx-%$qD2#K%>iIa|!I z!Dj?UVou^UWLJNNDN!Q1}Z%k%4t z`k-h`tENdVY69J_*YrNkGTl>VE)j$#XkJtO*^4#xUhOh1>Y7aA2Z;N7b)#QNA*uj# z>ldg;-Rt8RZR#?rY3hObw(#HwDE*ac&UCvG3TUuFy)j}XsbN zl?Z?Z;qd&Ze*xYkkm%Ogg6Y)&@c}Wa#9Ki=k^Y<0L8B2LG8(BvcpGLl36nZRl1RH| z3BkaE(*%l!IMGZ1m9wq|8?$FPe;N?ch)Xf(G8`|a^VC-p*CN1iQBW39$7%NmLib7QsB`-dIBh=%d^uy@JE?^0*?95sr> ze7}^1k3N_ElA}Ql$B#=S=^B5zy=OG4h$st|s&#Sh%FQ6=sXU9Wqmm;F`$Fe4lnU`7~mF zDx7S3N-TEeTQ<8z(I^CA=&xPij;{uF_2vHK0}n;5SNG>aY_2aa`)7wAFtuYrbPYty zS1EVu<)ME<g2ykJeK_!;<4p6;%aCrQ!vB{inl*ZZ@I+weTYUCj_Qo28G5% z2`#S~{E)3*FLWKiH(#IK%*UB9%zU^j-d_#h;AP4qz6Ke`7_VsauXd0%4UbRF5en#O zLBean+a+*=A#j$rucTm6WNH^j^3&PGi*O8VhCk*SRbf$hk_t`z-aH}q!p-A&-KgwZ zqz+Iu;A+^K*WH4250^^F^l(-hSh*6h5}Xe@vguANhmvmZQt8;0ScAva-1V15I#&0H z2`hsK8utRCJr94WiYm;z_N?~)R)Y^PpI$LdZh zJt@mPEOBx8aE~LTDlpIaI$J<)K2L2~uC1)a*w!2yDXJl2X=s*mWk9JG27}7UL;Z-a zTp0d#A-WjQeSp2wUpYqPpoqEh*No8_ByR=rm)EdPhydbx zMIbQy-}M8~!=vLX<}53?NEgN*8)9>chxy$y!-Jm%0TMfFh#4=rHgX8Ek6R&VAp?TG z6dNQh^mI1yyY2)A9cY2Vb3_!7 zT@Q0Bnn}jz(Gqhmea@HQY?$ILk2EO&Je`!0(f|lEC8j+g@o>-E{s7td^{)HD;2m8F zY{eyoo;Xn#=P>4Gg#)8m%Xy;XM%D&zRExeWIcL4rWgn}{AvO)(qxYusMbtB|7JmTO zuhsMZH=09 zU|b>Frrd#xb+0BB zbPWd84Fua^bpD7|?D!Es2>k53y5-~(_H>v1w^s+J#BJM-?~tDp%>F!@Jx+$$Ldi(q z=3WRf=AS1+70mM$Op9)mAWKb%stI)zEY_a6Fctz76 zi9A?H-WZd%;VS zW4fG+2y+E)D6WZSLilN zvH$Hvk_?$k07QkNIl1^6pzH$xntfn3TFLLCB=5lAhWr%4uaKX`-%Ebg`6~Gdv61{L zv}C0FTWwSgnbtA^VrmEUH9*-AJW39I#9dHX0YMKxxi1CE*j~!Q@!2q*8rFUV5YA)^l_ARDUnCT( zR;i+@_oi?e)&MzSIN%2suBe*yj;B3&i__~oq`I?~P2&l=1Vv*HFtTa!*LJn4L|R2#4&{X8#$5gB zeZ9jWr;kvj5U{kCEH~%xySizeym!(7l7lkoC@NBnT(j?809X@Ztxjkq9PyUcA><=hn%!8 zzF#P_2YX^`bMo*hrEOxWRF_6%tHG{1IUZqJe2sPx>JVI;9B~rgkjx~4nPeht&i5^d z8EchHi?XQADW*g97z<{ui2SCukManMImcFoAOsbgn$P_U*nHFff0 zDSZ?}wQA-NuHd;(9GSmAgy%SLHVyO-!*k7}@8dab!M{JxeInbg0Zf%4T!};!`-mMp;AnD6;~|`UsrK_{i}tJzP$R`E(i+?I0JLJ(j`wUzT8*+?a9p<=tfE_ zxm9ik%iovWnRcm>JLu@^upd8*pw!8*Tzvu7x%11v+A8D<7VEI2cV@3EV~xpkdasw1 zv4?vEAExpuM2>GFusoI8v9wWoZeNe#XSBu2MYl&A;-l7&ohUSztoA#>RT ze;%1*gWoN4s`STXjst9$Ih9!8?GKeX_Va8q$HrP^&efQ1T5;niD0B}3RE?ha} z5L)hhaQsGD5&4Z~Naw}f4dyK$Aw_F&y5U;aYyn8ySwan%;J^%b&4H;Y)txSq5w45LobJAsqN`_Vx`XcOZD1*Wb zy|_B^RY4b%_IlqxLt)6B#_=c=fUgO6jAq3VyoCtyyAipNP+xHu>xUgP36$TF2)Glj@qpnb{8fW)bd>eN~Ww)P6~a0D|w0#!Rk7gAwl#_*cGZa0AKg% z;gb#~q;c4#j`2aOe{uN7aG3h+4|3S2sP1`z!@RzgISU~I0pP2wUG#EDayX{2?s)C~ zfkn2O!g;E=GrA7U!)YK_-1>M4xp3sds%7)g>dZDkG zeDY5^f>4s6P!U`&|0O}ygP#yB?sNX;5+qye>k=f8=ae8T4&`ei ztU0vND7F|z9MWJ=nhu1^O-*Y>*;6nYY=dZ6W&0y9cfD+RQyehNLI(-+OW~unG9Rer zNXq*@rezO@vsh_FT~cKx6!bQaUoN0$fF?x5O1PdUl5kn?&JJ%#b`wz&2~rc z-7g;Is~93&0KorpGMkL5ZZg_^xmt}XhZLRHHWS*taDIAVy83LHV$RNw23(_ zv@j|B7Vh8}tHGORpKA9rOg6ss_5S4eif2xPe}kQbp*Lbj5)jF=YtgH)sH9z3!&-?J zG=-)V0hnIC3sMVKTf&druU;DtLxDr zz8%OKG2Q}eJ2AiysOUFmNZAt)ERqP)2KbAy+=?m~Bra{#pnNDEmMCzVU>FZV2QHnS z9Maw$js-uD;iTB5QV>z_X#lG?eYE8tk4AcJk=jmb(J}^mQI=?ifEl(%7zjEiKk@$n ziDnG}_!)T6J*Gri{&01l-CISN6l_dxwv_1_8kowKT2Oud51+%OMubtJQw>YXlVNP~rS%I#BhmBmSgG^I4=N4J z2hM9TK5Fo0^(sakf_Qfg{S-*Ky@g2I&&XT7*0Y!34~Su7HlF20V4V$|MHZ#5*=$^O z4@jM_K6ZTO+Q7r{c0b#&OOxV+tA#xKAaZ3HuPz&ckh(YLAz24*Wq{^wI z0Y6UPVb;5R8)L^GQzQ!5Z!EPh#1pfo%FX!_nM)<7;4ZeFwh%Tj&}h0^8UXg}u~CSN zVtzYH^5xstlwvqJIoywzewzVqM4CGv-!3P9I*2dGIJf`twJqj5(22A-@CAnp%aJI8 zPuP5ObyvF>1(FAHePi>_Y{1R_GWl(REJe?58Q$NozN|2P(C{fP*>cS9=Bhy~VVA}4Kv)F_blj{|iugAT6o5`VHW!n7K3R?iT}DEQTO<|b-NC`mr#q0GNa-=iFBF?KToK;qIILhG;~U=dutzch0IA829s8s-2X zTzI5^0B8C~6{LSIxrE|2N316(q2}2}=8>brJjCfh0fI^o@WhkNWhNm?T|5~|60z;pYY7HYs#T0bTtPh>ND1bHV1)X+ zpAX)9>^8cgx!4d{LYT-hq(bcjduyL&Fv}6rFB2YmjryRqjbm493>#o89!IV!*2?*{ z?*#A-BW-U6K!yzuiPcVw7InZ2$H!rOs2)R(c0pc;sT%TO`K4|EfvFr-$pkyD6Eo06 zOSzBBPwb%DVcb8BK2LCJSSe^7*>#aX!3_kM1F%P>b#IWDTrBK~MB`i}u_}foO`{y$HasI%8nucox*q65 zq>LMK)-~I)vmOD~=qE=!3OJAUde2Bd42`k@`r*8@Nk2ctY|@X1TI5@}X)5~d+WAa_ ze!E!rWz%QlmirjP^108u`Vuy$Ulh9{_dER}gNt4b(B+SwOqai7Y_ya3@qlC1+j~ax z{V?&f=@{6X82KuLQ5cnqQuEKh`VYPWCm|!4DYg>M7azctG;$H6lYX`L;u&f5!$d5n zk&6l+uH!1gL;#W`8+(+xAo1Nf(THFM66-StSpFBkYs$pHg{4)}~ zIlnwTh~0!s32-zDt1LlYl_3rfe=r}CJSKw09#3O_m6ntn-Er3VD1r@A?%G$(AzM+k%TO~9GyyRX zA1G)~yh@XJo9X|FA2%A<7qsnl{DHAl&av%| zyT@dTx~cXQlx z`{a&lDR!ttm`Lv*aHAo!JmE9s=QE@L&Au{14PSlfs4}~_*{xu znJD4_A+X#88!HKFY_G$H+ya(HL)M>L4bV{_@DH?1+XzhKw1vPse#fCCa2Tv@1pZx< zwHUC|FJ>vPE9V4u8)Dn;nn3pG3~&NV{kAj~9s$Azfx~JWh>i3Wz+L@}W?9{It#5Za zZmtvEz{Q5nt1p3+4ZT(#qSZ~J#SjV;tr}=Z7C_5^hhXXA$IIPk9C+OxtqnYdA6ElU zEDfFmseIs3PH%|_L#K$boRDV{4;y#_jn&6o7|p))+y!+h0q7Gg{0?}-0rIembdrA; z$HQ!qTnr4J_OUWp)qN0kCxf3+-8|*D9MUn>P1;7nn$(Gk!uIU^grrFxhHVP~Ct0w% zimq8%2$MyJ*D69m8E>#)k)D&!$PrfA^n3%%J(rW&dX&EQ-0uZ}3gmD6WK zX6eS^5Hci=mU7Hvmcdj?j!NRBmx_I%3@?;kAR|_|&vE||ej{Wq&2VGFLAi{RH^h85 zj#+Z2#BKs~?w{6RZ7ab?QjuE@hRf^gH*es@3`9a6nf#rIEb#aw46&5iDoPrz89&h7-%8kikH5 zLmP#{aA;DwFohiNfEbwS}BsIKpIHM zFGEx%d-S_h<4nad4d|^f86aRrk$?<;1((c35j>4&Pd0#(bY#Hmv}pm#7+ETMupUR+ z<8&-;YaxzLrt?X)pxaRksKU?DfQRCghca&EFjXWLl{wb`6lg<-jU`+gmu|ph?Tis1 zGq>~IByPN=0C8gxbM;lKwKMz$iCt?z|l4!UyX$q#dI8x^104|9y* zjl&$0T(%#~CiJ~$PrGAsm?+phqrb^ePSda`#@w-D2&W01IkzOe1!RaPpS9HH)_aO+ zNS_m)XG?D&gk&VLB<&F;VHy5&30;Riw@Q$)Iq!GQ)iNDemI5lMCAgTBop`JHr3Ew;PaXxl>{twJ8WVyo?uIatrFoBkf zKo{KK%0K#U!D4{CHYXl*QB@t>OQ-8qeSIzJ7aK|-MNeuaxfEP)35palu*b|e_;os2 zFO?jh1EGHv0~uefC)E+V=KT1h-6PL~0$mw|MQH;-w>%b6AFt?@;x7}k#C&P9PDCtG z3StQj@o8WHNs=U>Za@F_o z{UXnU6Ng*Lv)WO z>(R8@8YJ1xzvD2XM&H`_T*e@bG0;*S1RV@69NL}a(C*kHH*KWzDxpW{w+?f;a_VhbIb-G!z=<=>-7%x$JGS#2}z_;-^ejBk)cYh`J0)JGUIgWhjR z1bY5DO`=A)t~+#2n`UF(a>3Zt9iuAM9o@}s6LI+Z{QRVUaOM*dUSI4>Z?n68E*|Zp zi^|4tOMwEO(RbX+?;3n?J9(W|vwdW>s=;eiZ6DVa5;OLXVpwEzZ}zRj^142%;244` z+ecM^M-XBsMIm-rv3*cw&EOT?yRE#sJ}XA0C`ByZF|5jJZ|7F3ZUc*Gz>dNJ+h$n3 zLhvgE2&!uP(CT%AVf4)MgrW?I=rCkZf=VB56|CI?8D88@ioj##EuNu_M~hW;Oo6Nc z;QHPZqNJt|H`v@rwef_ct zOFVrjAT18}>CZW&CsM=5tW7$&;8c6U^O>(7*X!`^5(m%v6SU5FfMrCLoI6=_p77`C zGVjO4k1fPU|w3nk*CwqZwJ45 zGzo{t4Xuy7{BEl!;p-IHGizn_m&?hgpC*W6iO}jj*dMkT@T2GOj+@kBt404@{FSR?6(U%l*nTR3kenm``w z0LUYYp%l$vaUq();zBfo#f4}Fiwn`*bru(*87yuQ&0us>Jp{L#q8a=yM03xXU5KW$ zxfD&ZnBr21<}15nP>QA;vVbf^ldcU`FGQ2JhrZTjbNhu~L&ew&;oN><&h9qpM39># zIulRlqlA#Q-|8>9d?G9jhA?Crnjw?VFkTqGYNAEe>2j9}Lv`+@eFbE#lFtMesuOTq z|M%g`bbgziMt68D!VuYC;_h0d;y>h{oK1huzu9EO4U$rA8J{%U;_55R8pgHSV0^OW zWii)00SLiku4Q06SWy!Ii=j+@%hoI&I3R!y2Pw!N9k#ewvf)9%G-`P4Y&17dY1sH? zL%DfM!{)(>i5$FlK?{Dg3*R_^$v>LN!N$lw`b`#Iys5~B7NET-iSZqB_p!RV?W++C z?eq6BE+IbHB0JmwU@+~!;aUvOc2AGb<7l^|xOT<`vOxb-F1V_RRi(XVlbl_sD-xNoA5(w{xnJB(HAg+}+<#(Grj%-y^9Z?DXJ| z*7I&eE_cm8T`P3`(`Dqc1V&&c3u3Z0LNC1aq*Ic^S|1V6+)V+^?3SW(_){h-3};^9 zMe<*HV@$-vonlD}t~F=M$%F*bV@|?=3|&O$eWEU8qS8ohH|GZC zhNMd$yAgz7BuLqaZ$1czQV^sp4!Y7W?ajD9|L}PDwtv>YJU$#=99*8d-wKig+R$w} zn$13rn5HNWIxt@_hDJ3TOn8S`AA{Kh<@>;H@(>FiquNvi4%H&1+=J?@C9WA^|tQkC{+lY1P@+leISHi}IXsQ7>vsBO}7ZrjRZ zB+7Ag0=e=fvPPg5m|&)-pkNq1pp85&;Jz?-89z)vSwS4Pal3Q|L)ia%;=rNq%Wx}k zSlmh+7HlAnn?YUrp*5|6Y@Ij>CS-@MT@z(O*NKzBLvk25?8HG5{ttz)!<>SBg*Bs9 zaIlmh(PT^jQwBJ5P7#2n2aMra)5dQGF58fT-%XHUH$A&PqQvedbZ{HcF`%n{|EFR= zx@?W(rw!w&aJSJI?pZ5_J6*NH9nBd#njpaqI$jNT0vk7)(7_D4Je?W-E?2I57zYe< zcO&|iZ>`P{OJrkODpd0TFO?_NWm4&5)f2ByGaqemiZQ>^L^E7 zQGz#c54}Q{=(ppJ^}%f}8WP`td(7jwMc%c`;?!{!?g=PZh!EPqJzwSq$i+gJR54d{ zll&`_KT%#wdrbePw3%SxP5H7DCw<6)xmbby2EcHxc9V0p>(14$)Crc!t!fLv)d#%Z zQOH#i8%d1F+b=V-aNsv5W+1T*(FW;#vD0#yy1=@SIM!`L>G>DtP8wFZR1Nw zI7IM0UAXQNHrAP1bHQ?k5j)FYU-l2mHIk0S&EuNCpDx$(ULxWmbQTX?U*qbAFDc9~ zmTTO+4@Wx~$J@~wSQ930Qg_o;>Mo&eXf5EuG6oHYJmVg8xuWP&^(F%V58vS_ka>E) z9#(5%2V||;Fc^R=G10|p>fWm+OmK*?#28A4cLv3wUsYA)!8ulkgRd&z;+ zC3Jll3Ea6s@EFD=B8e`YA9hySqn~N>%>N#9zi3?C!2wsGoao&K<^1WTOWwpPaDESb zYkQO){U%>Cioa!#0-x(*QY8t>4dSv(ABuYo*tc=070UV8OP9I{<@}(;L})|72M+N@$$OQ ze{|o!f|*&W}fITJEP4<CeM3pPx|@7#*u&2k?Tt_+UZ`nJ>*S|G8}d5&!BAUbCmu-V{oyJF zwFOs8JWRuq_7qES#uxQ=s(NksthRNL~<|<9tv~)tG?DS7}r&hwe}@`RGq{qNd5$Rv{dMz0AXRaCUs!vIa8D z5?9wYOufJL8W^ux8&QqccRwrrcgmo^-MQ1-2-_H$QH_31Ne+f+wA}<4GD}~ik(X6W zW;fLdsYRWT+8Ssqi}YDO3x%I$S$qx(#{x(Xt5GV%IS78>4odiCo!XG-ay9e{>1x7-aPf^b6E5JJ3s z`gP+u5%qzoV`>81OU)1OZ*c$lN#D8ZXXfKzl0AK!Z;gd%*}si1qGpLmMu%3=U~h_{ zRi#XKwAKm^dqi#Ga1I>$L-DoGPmRio&a`ORzf&Wmf)SW95*vgIg@7cF#^n^Y*|V_C z4Fj|eB8U@_D5Y$`zf#(Xis#&T&at$d^V?m-?m#TCfO|lL@XZ?YZes>Ba<3X!6E0Ys zV*Pp+>z4-AtP=cX*q_@pLgE@vF4nAk#Q<*Hgtm;Sctz2c$c%$U4?fUfAjA5qfwn;g z|57Mm&q4vyP+KZRU|^4dfj-#t_a`4(j17ed{_i$68Y43r(-SQHrVu`oYZG8dQ;O#6 zSv23*>V!Bku&=8>!(E zxAS%X^&h52eR*mO(dA<2h06sIG3~Y)G$bQ=v{fmSjGP+LLAbSdGPkz6$khHo{E%b& z`3N{kf_eVLe}Nn-ncq#JmSiiEtq1} zQrzgq2N6t6?(R*1!NTP3-eHw&wD}mU@o;xD5VjEK3N(Zn7Ufr5n6=?jM9uvC*5QUo zg#&zt-fXSNwc#efU~Y1Nt4ix|Q=Q;$<^Wgo)lpq=_v;Su+He^i`7OiEyKx2tclk0( zHQW}!;BInI@32ZX+-99{Q14_8>e_IFyI*%u*M|G8+^sMQ28087CpnNC_!wOxOX^N? zAgfC2a8u*KT{@8IsXMplGb}QHhdyKJBE(PU?<7QVZ~`{6t&Mn?0`zS*L_e<@0;Kw} zL6Hw6z8F3+MLfFa(D8)O#6axnBEvYlqm9Moa9r-T!4U{(y_jw{jVIk>7NGT0G!&PXcX(;pbNKmK!yUEF?SJF}jIy9Z z@<0jdqz)G2rPIl7y{6loJ9IONShk&sRC3WnjGqsY$SB(OO-v0i;?#C180v!=D7=;M z$!yaQwQJIOX|SEX5$l6+B$MaMie_TCj0wwc??$=vojGs38&3}q06_>QS5!{|^`2_5 zF>*RJ5+)AgS7CP|5UXPvD)6mAMI6>nio+6oHo$s?pa{dT@`2Vbz5BSr@zC+qwaoU{ zo^~KA1SOOEK~+maZ0anCNGHU9*`3~K)@7-q@TOW>(36{eqrHVSm0%J5v;#2RDyZVy zy_4AXccE#0RY;Nl0TT3M*pvDaFowqsRs%YS!T2OXRDqJwo(oo&)6-gM!US2kF}FSm z&Gw2=yJ*tM(Pi#Z;nfP|3T7v5tOaii0jCusNE}PJaEC~J~g=+x=)-Tep*-(4P z-DLf4fb(74E_Z0^Ts5ro4ON^(tRf6__*ECJ-4y)8s~8&j1~{kTZWaE+8iv7!Do!z0 z5e9M;H8F5G>tP)+3^u?yNq5s8M>PzC_A0T#VU-Gld@JO9;Qodp*Gu7?YOoD5$eL1- zsZNGPTcsc#Q<7P;jp1fBA&~mz*6qZC9KU@q)unnis;N2^WNgrga=xBg3ItC5T7m z{Jf8W&p&ow;APd}!QlWepAO&k4~~#yeDH5ffyUzuJS96{@maN@9(==@I}WyWdv7#m z0^Z@+o_Eya*7Wo4W^dEu78kZD{#xi(*~OY&P=wVJY_I|Wm6Gl##X|D$4mCVDI=C1h z@3CD1F+4%f)$WVY%?OX8E{CI=8zi&GO)=C2fy*p{dg2)^?g7cq!~4V#bkanoqrmx5;;+Zs9BZ;Hf0%P#LLR>HbGd2--nA|*JX#yfP#t) z8pp)Kd+dqEJvwgqepqb=XrfR(fCtn(-GYsPZ!Jpi4ss!wqqcr63!Tt(OLnDF%7CL-I|m>Bl#jV=HE*Bor?m<11Bcr zhs0)b233JvXR~;lFA}MDW|%;#Mv$a27!gJ5BPA2-=*0#Q*D$s&I&4OpLK{-e^ybiZ zHO@#3LU9CXM1jZo^nV^F!%rB}A__2i9)wl+cpru`7gM4^PHq5kUfVM2u)~vsvx8y( z?E2I-H(0&G)N3+wHk#vUa8%=(S?R{kPA|xcRL(DyUAJmexXEwF{^(?=m$@Fdi^dMr z6fdrjtL;6z5u7ius`oGa|-s z*(k(+exoK;R*T*0nN-z}$!E&mracSBxFepEPRk1E#13@J#7JskZeFll^JeJCd}K%ADDQaK}*lC;wq#Ngb3v$qLQ>G#`ibF@nS}$Wj$hDu@avi z);@%#;`*zQJL*$pCSnhI>BSlWVLc@R7!2Nsv2y7dkG3wVuiS7FZAg_d6q1U-wJSd9 zUZ^?V7G8CCGftuF{ndKJbPt9)xrsL%N3)W&D5PjEC--;^tX9OOmu2J6t0C9GHG<5c z$f8AL^I|7hO4^HIBv6WL_}X|~RDt)_MJs@7c=IEY27pXM&$SpGiL0I#ACnmyF8hX% z#tJ9y$sWRzfAgtrIH;$w4oCAZZRM`#0^3~6$z2H~8HbvNQvkR+F^8o?KCjukT#RA$ z9uF@s4u|g!&W=v#RO@Zi=B1g%RIV&?GgC!G3Y2|r100y#j3+>b{k_Jre0=scL#Zp2 zgxMC}M826#hHIkQHQSlRTN*`F#k<*qb6N0RAPWor(Ci4B2WGgxo=Py^VK#PYTvwCv z#XdjL@bSkqa-6(j^^GY;NDyOqeSLg1%sb`eYIb`4$o&KAK$hzrN&|Ob4OSiJt*S@v z1yLJvO`MM3lqBK?(Ag$ppd1+}1{w{wF`XCIzjb2k3!hs$wH*L$BTimgSo&->y?r*5 zdO!L_yF$p!3s5Tmt+X7vh~md1pv1QdbrJPo6Fj?eyk_=fMmvq(w>e?k4oljx+4l!_Is zQ=dk|EvE@K!i44YxC-X0RkIQxoR}?{6vXhapkuLcqkEbPg&bt0$Y@Is{f^^B{?y7%y zeaUwI`dG(geRo8y{c)5>}#Ws)7f-AWg@_A_{TShuAQ#GD6N845EYt49N#Y> zw-5IEjotoMX@t^=Ejboqi;m?C8Q3H|E1;SvA2*ndTtRaU(xJ1qd!;(%s#AAEl z2m)NLv4zt*2V2|ZoL?&G2Zv0^j~?zv%H4={6reUF`&dBRXf8&p)zib$u4)mUQxsN6 zd@rhaEOk&_)s>}$YFI_iD7f0H&KFri-LK0a*TPVlK?(|4ZCdHTIZD$w$2qFvxRgy zi;L4iEI!@y2oFzQU{ZCloPNet>rb%Wq_ROVDDs2H^<6FvF+-#^H)G;D#%@d)O2Qr2 zCaFFvV*%K@EZBjktDyDAFXxxXf7URQCS^hs4HV=QX?U6`_3O(xGPVtPiNID= zmmi*VW(qH~DUz(MSCjvdKIK_wq4Qv%fpYmmUT<2muY*twlcy?LI!h>@=Sn|PE$XcZ zU=r04;GErz0T0pHvr~~NM@T&>8ax<0yzCDy@%ZAwNur)kRar$A1Al;wv3NbZfe5o~ zLDwje!o!Q)MsPYqxWJ8`OovRZ!-9ZavAcgt+oAl-v>2EXZ)d@`(Y9Z1-xG zED-(YDu^CTtY5~JprEKMwa~+iHC_~D(!7uoXbQ0aK$N66=a)Yp;LiP<>od8|Ihz0l z;nZKq7H5VVfOtYw&v)0MAzOlmEU0aUt;K|5C#l}x;I-|M(1j)}{*vw69i%;6jMn43 z!RX^`k~SNmB8pOR$30i5pE4{3{mEHu0&K;3T0vYG{Kdh4$*79bF(_<-p{V zR_SUF%%H}67(dLeCUDHn^}d|cq}UR+xy`S3&6U~}v1#R!d}!a04dqz_b1KvSC3Fcd zbg%lC&@5P3aHjF*;LxX&?AzU5F$08QCCfB);YSsckoEnRS->fxtB^1DTbKX=_S~pW z7Azz|fSif+?m%RlKtcdkJQMa3;%IU^!aG$h6UEbd3wdY)Oh?a#xr2I{e~0qcAc)b~ zC5|z4TD~`cK_JBrTOPm{y1LnHTJB3aLyX|#``<<9e6B#zeGhRPR1k5wLlM>J*li`2 zfw^K~*q#Y7;LU+@dX2|HO#R3;m+y!Mmj`E8IAB1y1{XJ*kG5^_Jvj}Pw3u-j``%4? zy$eIv*Dado9MtQRbLQ%NTT_5a9Eh3Z<~)8tc3f|Y7?;<)5v4sd3SIBez!eQ>;fA_= zcKc(#nz~!)>?*T6c^fnBI-kE&OwT2{ecpywcazy{wBUH&9G~>hFNSYU4&Gi-W?sf{ z=t#M^lqxLCsbnEia)iEUD`(7T|B9jC6bk@YzuXNjLbl%IDEr$u0_7O zpZ3_l$-bG%k;f9#;Gn@Z(-SYM3_%Dx04H-77q77(AK;lBjZ5|wQN*cStw_T8(v2#C z;8k>tddT_ll0LFkBjYmxtYH}oFa11^&^Wg^9~{5=aE$mg_OERN2n#V??eW35Z=#MY zOXy^16t)V`Pvs;$8pbr2h+?K!ZL5>OvYIHi(mGp~Ee%&okK?wkgR4%Oq^#;x>#N zmxtK`>iMGp8Gdf^Fk8IA-aCDCDVQxZNx0bCK^-f&Q9fH7O%aB$epuqw3K|bAvJiy1 zT^p4Z=$7~0@qD$$v^QiBd=?XKwm3dInexzz>kZoQ%ibTNHqQwIb$M?xa zlQZHq&3myC^HyvmG}ve>9uoauAL<1)wu6a_^cm$O)4KKa=5cN}XQ^_{d9v`VV>VSx zH!qZ3*uL0Aymf6&ZD`AN|)M`*;5Ev}J@Vr?M4j`677=%rK3qBR$KdC~s>y(l;( zz4+yCPcQbmfnF|Q=Anlv0IxeGET>n1_@d_?dV_WO%JjU9YwYbpf$jVU7h(z5)YfLH zR}-z9r-Su+IsFL7spcp^)(a*afc$&_km2T-?y@2auNUPQMXtaP~XG0$L_O7O%aM1O*gn5B) z7<}bm?kaAC+~sTF`zO;ibQ2sH(~%jUNsg0a)K+(!`I)JV-7{N~Khp)g zl~4-%3_KfkYbCVIa73cbJ_gHzH%mJHqkxZtcmZo{zj!f6>bk646BDjt_QpwD4$$Ah zs*1~pHvB~_IOJ-q!pz2j9OnQzwsp~3E>Xn0<5Kd1GnV_A^x(sV++KU!4Z$0;fd|rG zpd?-CT;M??rR!iS15+cK#Xf>mZ5zCIDXC&OnoZI!J24b%QhG3Nc~6+erpg3vbkfcZRf(QGCJbVsnv^Rho<&A+?fVHrfUnKX}@&D#vFC>o_~? zH<`qpbf>q0N!ahi2jY;;1k zjm0RX~0I5;}`uk+W65g2aEbpfXlXu5YXTHl!tgj`53{MW-rM*Nukn1nGt zzNin1@EIZygv~HMzFDjl3>T@yUxDGSZws7chHy13WyIoYQ-LK{k8i|M*5)ht@q{I{ zYSFtFOQ*haoyy)|*|ovZ>&MZ;G?ZDz1@@{&PZG4Z;Or?Wy1zw3tgImlTC^KzLmF;^ zaXNZ5y#b$Wgm!9j1~%|?it?l}$1~BiiKi3EqT0|ksaVG|V4RZnN*CoqwA=t~lMX1cd6o%`mAjwKZNF13h!;dfJji=&6}BVWf# z>~aOTpeuYG_mWt_72txQc8_iu@UxjA>8sfph|*;|72Y+*TX*!v<>tr5!%DVR`fO*~ zGSFyVBsW3<5SrPE?z&K3_pxKEPNh11ohg z^V3w!Zh-Oq#X6h|nBw}YQWq_GV7`fQ6gpEbi#p?2)W$e|Z(|(4w=zxzw#&#Fr_cWz z80RyKD}?kdXJ1ZoW1P=B_xFHtns*I2JCH*=k#MSS+g zq-)Mbq9)HsRhBO6GdL zp3aKzJa+BuH`R&1-<+Gq{(5tZ8sXNJY9w#j-(7CgNB;0~rgR`zl1`p$Q+6R=ne3)g zS2}dA!3Z?4Oz9*zS2}WYCCTo%(&1_IH_9%j{twVPHQCMeP9eLQ=4q2%7H^PU6}8K* zifj=nWEZ(l+GLmD|B~J6A(0l@b-k-RLlnwF??UQKvR&``?H~ioW!K>>Y!}6{9M5sf zf=`=;4bD&pM0?Q^Y1)koOXyym1XAtTqrZh%Q61TW2@5XkL3mmaFzjpDn2pk~(qje^ z4Ax}>F06Ffm8sNcAl;qyQBcmzW~+@t0@yMNes7K1TzUi9qD1B2BX z*nm@#BXAUOu#TgZSOXOg+VO6ob!w!z}aY>XABTt)kgbQ@a&I_)_H63#~5wF+n8rcz)e~NZwZ!<)>~0h zCxgRiFOMw(Fq>*j?38bNIBO)JU_c2jnPSFmE=i~c9<%{C8~FO4*g!}i)&}aFVE&vE zH)jT41k7d!wOKiBD3jB+Jw~WSwM`3>8J{3 zBmn2z%itR!OTHyg=NmvvzJ=+55W8=nO{Vecw5gPyo1}?0ENP<+zi*(8idt#oVgYkj zG7YqAvw^FSmQbFLRaBIy{IXyON-Lo8%90l2L45kt*m zLYA_cKwVauDyz^jUDq*u+wk}KK^fXGk6F|{k6H4^Wwqpogm^PQSiFfJD*FmQRBo1X zsXIU-BLIAU@HIx`M`M0OTg-yS^#h<=!_#w|%bYVLJzJ2N|14Mf*@9Gu z7k0{qh8Fo;<3&4!i;Lw#b5Nu}s`YNIxx6rSSq(oI7(Tz4<45xOf?2lc#9>};j+pN- z*7^(xC*P|eA3^K*IV?_Fy*U!_;{4KXxFySZoB6DB^fK}l&>HPF)1?tPR>N69-kbwC z?cfA)-U{@j71n7-*aA1F+%{9A<+x>}%eqb@b;7Y)fm;G_x^2G*!U?p%Enve@P1qV^ zV@2QQi5BhkV)eEKy}m$^spRg0Zb_X^OGAW6A9W@ zUq7q}yY;fhbjGt~{@y_?Mx3vT&Ow7Zt%cL(v7`C7Q(8Uoy1M|YYFMC$_$apiJXUgu zPU`?hxS?u)b}KyY)mzZk%1>iI529^Wep$zp)x$trlKX4x3&KiOB0^#IJ&zTvj|-JG zFw~#jqC;f~4+T8F8I~B)L={p0PVxPLRzQ7I7tRq}5znt-F-O004w^G|xHguKUs7Z< zztA=8Rmm)NSJLl+?H!6AN{4SXYz#eL52r%*f<*M_^J>Kc&BYg__LijhfdYpQ`nK{x z-ju}4X7B&D#4R6+-lbsMC%goC*q0{0>C`tYSltI9%ZSSuWIM!PS{&q zx7M#vH+|1$0ll(B^op*f^;h={Ku_u8dcs|(o0&+fn-bm&MOxjI7+>tItX=)RHCIJL zZ_U-yz+1D5T70F(C;hxt=0WcKH=Lh*6mGICf{(2KOtZ&_l$p@!CkNc6XlhO8=mHPq_Gmh(Y1G#|0Z zZCOIM#q6jR-Re4!`2END;bIs>{Wx11tIf48{b1N1 zU(+!2D74Lq#oAdV$tYY}h4Sj+6LM_IW37TVHAdiY+-{yUoGrlE~qBRmS)0R=9aGEVC>1?y~IUe`3r0YrHfUF%R` z`1UhY%!UP@S4G#fRP;lBE>uNuBA;!~V1?tJbik{a>5xkj0c?vF%?jh2#kKoR9OIkJI9d+8 zB`ti}U_53R_ff5K}CtFC&3#Mv$UL(2T&d)TzI)?kY*;gaisDV-!2-nnMBUY z%fBBrt21UOT8f%Mo{Yr;h80Eyr3Crb3q{zU+f2e3kY9Xe`dRb`QCt|+mZtfqW*^5sB`(I)d1PUf?Kx@DFVd9fVNo65Zo z@z2c=dWIf7iJYj)*;`pxOq{4o9pNc@*<+s(8~m|)=92s8W(_?T>+trqUJ8m(>-tHuqsQ^*PPWuL`lO*c=!0;cyj#XE3YiiFi&33xU@(q#zF#q z;<4z|8~bycMR+V;z)^Kt@?d*`l=AJ*Vy4nl@d!!gtcwwwc!6dUIdMLiqZ_383@ltQ z?3iP*8CZq$D|H((7a%>i*+eE&{icp4*3V@)l;@7YFftfuw%lTy>6>@i=FyV8oP}xya;9H_91_7+Tmf zLl^m-UC95%Z_?0hEx&}XGB?v@yb^*MW86E0=OA#c#Ae!EL%>PN%r9r=zdD3Lx7*-&AnhEphdn3drcrPr;DkASqShZqQpM)N>i z>~t3K(He*-$82keaqJBNnr@$i$rvXdPO4;pg(||69>QHOFE$knbpXem;czT&oWQIo z4k()$$<1_=HJp~h7oL($PGPWX^_m?Bg6~Z=?OM9nY%Jom4ap?evYYEm>0!#7Hf6&rbS@boOj5icW+|L!^3@T|bLd$UAS)3n4IPGn4+9osybU10KqRz(j%j!H1 z6Vq~q_if5;ip|kjHt;YUvXU;9^_Jd%qhHdcirw>U72J>7J<37|RU_!}De6T8O3&&O zIw>TdRmoPgAgE{%T(MeG7LO!FLCD;XQ5uB2Q5>k+e2VI-YH=RNB7v?ei|dUhs+QOQ z3XLBoRSQ5}N?}O#2v{}byn^Ic>K&8}nc?CsXQS%UEfj+P3ZYTC8l}X@|SrP^;G^^O} z2%p-Iz-WyVi(B(BTb+kk$X4^CathhFJULx!&)~QpN7n=CxMki(t<}*TZ?*21$K@0Q z)twb;; z0nXd*E7nyz?9HrB;~iPL2}}S_xh{qM4D-WomOV)B5xW~^3+1S00uOdS3Yn~@L9b*_ z5C(I?&Cu+h87g*sEgP&?8Ukw zlh9iD#ObDo1yHO+VL~3$hud!8X?;hAd7czAF7p>o^?aLRJKz-aeM*iAkNzHkUY$W zCuvH$zlUq6@DH{|;%?N5LsFi63ZI|U>O#jFU9$w*f> zHq-hRPT7!yg!Oc@jzC}@kUfz8rp>-ZS{-&TT=iIB=qN+dYSvN{)!Bz~fGj<#_z+oe zhpjB@y>z9$DFi7XQ8t}EwSeIO4W)X1E#doasn8lMg_n9HMT&;$^-f-OqZc8~KxEfoHNM}3`t;ZnYU(^^Zkz%hz7 ze2&yTBt}EK);{zcd8Gn~2vm}cmsJ@w+Jr7x0jL4tI zD41+%v(c>WmxA68RrXhgpBNh+Rl;aRDt^=ube8X*pxIc0s0vJiqd@ub9~y!JZ1=Nd ztm62RMyTb=56*BUFm^ku|Q zl&YPfQeiaiVlCX-8FCOW4X>lR6*fX%;z8lU>sHd%aQIaXV|u0Ovc$tlmQ#r@Fr%oM z^<10`#e8U_lp|C@DCY=sJQEK`3RhwpQXLx2k-s^9s9HLVmUT5i3NIdNLtd=5Qxt6-M&*{-PoO)|;5w)eQWdxW87htVTu9evA zb`Hpyy9bs#t!{UJ4?Dtjbr^;Q+K;$;H8i^felUI=fjl^Ww^ysxsaO|%iwxK};E=H# z%IqxTpho2|P6qO*f=bhYRapmC6Mt>9Wp!1C$v8IH`GM$>A$f(%*ba3qrb- z{zd)a2h|>>422$C`$p@*c_CQX(LVP?eICeehI)BXW0k#qWoaV$2lkR70tTdw))E#J zEszSmu_8mp6UwAR&~%x*ok?v{Yo$wwq+;GdIc_qMuHYbW$D}Q1x*~@WXj`bKMM~(J zXs(6S72Q048zpQ+Z8p>1dV6IjuR0uJ?!l>u__ zV&E50=`7&pbe|I>j>`GsfFxCoQ;Lx8)MJ1oW%;=piujx$V1x({*r;*J09o)a*)|&e z^T?v?bI$U%NGPNK=`vO-@z`&ITKG~PEV@N7`am0Wd2kjVr}+fxb<7Anlev(^P6!n` zFOuz%vltoPL;D~Z$Gx)cxX*E8ylRJQDN@X>-v(L_t=8-=S2>{6fSoKfM&$aeLIWK`N2&5X<7!w&V=v1cSJ51Z#gjNr4z z4L&LQwS+g=ds3<=>PJQ56!qs$9-oo9IR=E!9+#_f$z5RhcT7p6C3jIR&CM%m3 zSbBC^#Y~irxvM8i^Lm9|XvSTYOE0)9fVivC(zGd7EloRxuqoxVQv`eIO*;iD2TM3v zQGn2uOgkkiPn4dT{iaYyM@rKwcC?JEqjN`|ReGg#0tb1Xn1cLgj$qG%nInfrM=`YI zQ$Iq6?a|ED`7}jTYv$w$43p&!ORX_fmP;ACV!$jnb5o}lj$_=*=c7uRp2qlD9!{S; zF^6M+DCW?1aG(DR@Vn8{JK=i-UyFXX7~yTHq#8;0;{Cd7AN zGsnBV&gL?E3pB~-!MYR87GAgE#s>Rqc=2Qe8@kOL$Jh!dT~T{kg@->-cXL8!1(1Vb z4BFHt-e*9P4CG`{^uro_b*Z^u0wS<@F7N{1l)QJ$n#V9|BZms#NBzM&v?#*a?4S^gzF@^gnyrS$}kU! z6*^NTK;H$nuR4nU8Rp={Q7B{Qjz@#%ycu5Vc8$o~_0wV)(by%&^kw0h_;!-~xFwUn z!UOj=;?5mU{FG{I6ks{ae;p*X{A#_2R-EtmO|P9h&hJW+UvZN4kChB{&%};La>Ri)*z!zGbRoI=39M z((9<@Pu8ls^PzE70qYKpFa4p65?Mxg5y(Q5bJupx16t z9!DdUS>tCwx#s1h*b{sm+BQ$;c}BrgLIb0z%*U(*ckUQ^8ukNE_A?)Q93(#2x#Mx< z4z8H{nU76^CLRus;?I2Sdw8Heh9k0<*NQHd(8u1CJm-BZqrk_I%y>}a`d|_JXOY=k zUiVbqBMm<>0&dZQEXiNNjy-j{O^IR;o9djf0gL8 zn%TMPa~R1Bm@k!h|ibG!;2>s&-oxT`gRd+|| zy$HQM5c;PP`cQ;E6ro><(6oWNS0@(`|AUt-^t`S-5-n4+0TXL z-i&m=G7$Qsk?tcAI$NX={Z@p2Z6NeVBJ@&(UW(A)jnJ6gWG(w+?&~FTc{#c~@M1(#Oq2Gzn-x~=1@d$k~LZ6J#??vc02SWcSvOGt^ z5T5mV)m;(#nF#%ZfzUsR&>xS`ISvZ)GkzgL|8OAmyAk@H2z^h4eknq~GY~o_Re@e( z`y%vx5&GL1x|_%SCzO?r^i~#Ms^cd2TVn_q_t_|ArMI@Z@e(K*mTR#;F)e^u{6(Xt zemrgtJBh^Gj!v~zuj~Vl=)PmOYlAd%3G4QGu=(y3em`UYtLgrgyzVQE)P|FwFH(2*4k$9@`Sa<%@3n`~ z{pPm1|BTl?TjiBmQR_@r%6t-*d)gizC6ztC=*64lG%hvO_Vd9t@C^N&&Gne-uYd5cRj^)zw9VGcQED^{!Dj{y2Xb5^m>r`<=Vri zAVl+=EqBW!(u3diIph=iMnL^|FV6G!5wl51rz7{3OS>k<0<=HU;e`>_bU7oju$9$Nn02>sST=#vq8GeU1h z=vN~2+XJC9)*a|Ic0NKsAEDog&_5ao{c41MGeW-^q2EBo3BB&)fzW3o^sNYeD?+~+ z>3(-0^cN%aixK+82>o7!es3W3CnNN=2pxf0v$KvE$1g?bkNkWw=J_CP-ByHtHA24{ zp-)ETzH1=#cOvvV5&E47{ZY7F=ykgXLVq(t{~$vDAVU8j(tXcB=;tH!HzV{nBlLv` zeeXc%mm>6cBJ_76^a~MsX(03q5&HEA{d$CcCPJ?cg#KQHem6qD8=;pXuX}PJ^eYki z`w{y45jx+Qgg!qr5c*pY`iBwvhY|WG5&G;v=ocgOw<7enBJ^g2zAzB_8xi_@5&C-( z`n3rC#evYTMd-I8^ji`7`w@C=AoSNF^tU5)zNdFS=6ac}2)#KFdOJdYBSL>8LLZ6H zdjp}r9-+S*p}!lUzY(FoIuLp-LcbKDUy9IoN9Y#@LcboN-;U64N9Z3#=&ucg{&s}^ zQH1_cgnlnVzdR87sm%{gVj&lL&nX z)!(%MZVvnAK){Yr#>B|@Kwbbo6g^j9PFYZ3aj2z@p}e`g@{wFv!kgnl_f-xHy~ zI}rN&5&EYQ`lk_kH7fV_2SUFQp?@5qe;lFjj?ixngnlMMe=S0PEkb`Zv%HI#ox_J$=lYjbtywrPP}6n_>mTfj5G^^b-@0u3KMe+AV*GkG)&t&~XLzDa2d(Szu#(iq#9MWy;;m$sP z_dfQqTKNOiy?W+;d3Lq(%xCLS(3kx zKNej956(hpV;`lOcmjFSZkxvpti0$cOm!8hF1j45oVWCkNY%@Kg+KS4M=9kG@Q41) zJ4jyX)a$s?k&NYs?+PBnKb9%^lH@<*kF7#setMnd^>(t`=O@LA?RuvptDTubQ~fXe zvD&1R$KYhv_CgL);UkAGV`!QR+v6>?dW%i=gG#|gasa8S0c8r5C&7^A@DwQ4LPBz< zzWnlJdE8duDEbO`n8iQE3V)^iA}I9U4C_0fyc$^bSC}dp%BA`(P>7t#`PZP#1aiI) zioHiutUI7s8>N&_L1_k9yCC*LKzSS#8>MKfzXZyifM<+69vzzphz&1gl=a1}l^WJj zdkQX+r;v(2WWrg4E12}{z>uT-9C-qZbwD}hQfPjD5tO%mez+d{C_bimGvN6<;28ls z#c8U4h)aDBVpwm2!WNRxmFJ&r{(jP}sgg zoYQLxl$&mSi}K8hoXMQzp9kfNOQAd*xle+Ul~)%OTOXx7j9l7yUMZJA2}|%dKsoQx zxvfwGEU)^yjGN@U;CU1RvONC|C>QaBQeoBg`ucMFT+;KYSeLP@fxNxWc<|9}vfz0r z`QJd!UN4!c@SoVnrIMY7$Z1%-`Ut6Pbn&GGd)|>KKNOj>>K}v0R$fsSa*stMtlgQ# zeiD?n*PT3H1;s|Wn(6>3`mSWiN&W^XM07dqweSU3y`wWA<2eSNyP~P(=Q&X99ji)S z0p*tWF>H(}U+X-Ap;e~ECV0*ROY@BOkp4VwYxz{p-vG}9l4yRwoO}nAefX>8h24jw zzj(x3KE-yF-25PHk$w%S&LCAL=O2OchR-1$C2xar3=Arnl-~u#)_%hiSY9t@&ozhN z2Tx`V)WPE$?akg6QY%)vy3VhilakLNCI1(s+LQ6f*Y+DNeP=f$DU;++!1HRxv(myz z<>)=VoK)nZzwi`F{_>Bal?b%>^PpS`JmKr0oCzospj`G?lye*ui_WR0&x1nCt6t>! z1yDW+Y`8_90R7vb%mg|7d!SHA)~8$p<$92xe+tUoK=Qu;W4M!<8`O9o)_mq9u2DKaKOi*&)KlF#gxgDhXccAPIc>WNS*S#EK{WnnF2~zF+ zF{BE3eiD=`0nc9m#bO1_Q<98=(#GFRi*GPh;F-rjVJoVw1j}Lr1H@fH4!;GS$;^M& zdKmdlRxbu}n&7$STUib_daX71&sLzt*TA#pQ=#{imhEv*!9{WqJof#LVjTs=R*Wm<6ezZ$RVk~W z*lKX-1*_t}|Q&<34bZ zx8BCcx;BhXS9UivLW(W@!mSW(N5vvt7M_CGcW=bWDg_reD`cCU-)bR2)=D?9YdFSwDYo#+ZroR~NP`I^I}7aXy@hZ67CV?8c4|1Q zdt+5PBqWt>-jN=gz1!4rczjfzazKH7YB;5=Z}2$P=Fu8TX>p}~s;*s*+qQ9Ub54}AOUE(od7r|lVX6jD$~u{?AA@*?e^(k=Y(zO!rl5zedFAz&1StT^I#LB#-FS}0yd9YTJOG$Z~W6m z*o|K$Kr!z3(^`Roi_0&uvaMrlQsjNPb#k+Z(d((X7VN1RPOTz^iMaPCcA*!I*B5^Q z8~JrNm#`UAufCq*sAL{-$!DFqEBQJFVh5?0x;zJGQb@4uuhkdZfyy#o&ui?0QijTt0_q!+6SxoZXU2M7 zjD=Xh2{<^8ZG)oRaCEUbh4J56DI8i>V3gN+myQ^nHt;SQbm<(6NWjoK!K&C9D`!qk z>BeMf3SDaX0><98QvDDXklZ6Tve_3)!UZdy5f5POiKlk@QV!Fx7}zVqYBqoKw2mFj(x1cXtOFJE$f8|jbnmPM&C)c;R<|yVE?pPpVD4nuYqXYo&77s70`Jf_NWF%^ z=XHx+8l3IEx?0cOtrZnl(2;hH-+{RUf(-fLV?)0axiYKlOEO0_4t3 zxe5(Jt~vA03wc?aMz@#F^ceRmH7MARBTiT0ePf(^%+L|)9(rjtk(VBnLyjR|RwhTM z{?0-Lr)O1mdCIj^qH3Y0sj*y`#fxTC+(}05yTtMfMQvvVF+B z(ImS#5^iljW?Z6BTn{R_g)PnD^(P`zp(l>c8VGvPoYNd28qVF4`#)!kb?YbxT zEK;dhaV0~=X2jKB*HSIFo;ug7ceMjGy~A2+1rStZw%?gD);KPj#wA8K!Vr=B||T=fT$?afas7h0*Z=)VNnSpQ8Eaq z+E1w97O~qiO3l6o6j}jtn0|Y{-^4my072bZ8y@=ji>snuJ^wis_Im|s{e$0 zZr33LMhzc5e9#!vwtm}s^~{J-!v~M*Kh)&*AJhNp{-Xz)bI)ne;HU~GbZSpTDWdXJ zgX-erNniB}s$#2)NC7=>e38(~A0xAKOfJ#6mpb}6Cs0363 zDgl*%NN@K1XKbl0hNGCKqa6OPzjW72@ri#x=%olUL~LsPzk66R01jim4He> zC7=>e38(~A0xAKOfJ#6mpb}6Cs0363Dgl*%NN@K1XKblfdf5}x}XY?@yU;p z7<6Jhkc>y3!zh289*^*&Tt1l0Dq0oc3mKz40{9nULuNItj=p*f|Iw3ql3vEAfcjaS zqO$l@hVHfaXj+a>73fxr%TpzMI*M}f{|T&rz{;Pm!Fqkh=jj<3P#2YeN}v!D*!xfe z?~*ZZHc77<|MJtn(a$OYmB5iG0i^Wev|dp@ubS8%`(3Yq&$Fi8o`-E^e#7gc5>N>o zaT3VJkN+6(^9N}f^K^>%Kk!lD-i&MGAM^WiR4&2|EG~~sfLxwqaV79|#@}J(`YAkB z7+138Wx(|rdlrWjMmW+ZP#;ARKGBw!g?_;GMZaKugz;xsx&HvV1motmeg)_bjJI>S z7wa>O+uQPrR52>wgQpvRe;xj~M~ls;seh(C=s@Q}9;}%>fIr4Lz?CW6OpW9d(5Fz7 z@Reyt7oj{w)zKg0j*y&(b9&O2x5ANoIOpdrzL2tk%hJ6TH>VcBrMk9$C+ZAbji!W=e9hyj*C5a8 zf@!Wl*Z1f|S`1-9{-%T957-E%XYuDzE&4ugPy18*(Y}sgGclYNdUOWuMPrutIaD9@ z&!kiB@ie4H!1ZXD-T$;;B-)=Xm}dL4vA_D%)|Out+z@!wP%u5>KZ5c`)W??J6g+_P z#)4^e; zd(mH4T4v>S0kuMTH)?9}c{o>(y3>B!emD&WzC^I0up8vxn}*rz-JSZNyboPqaToOM z(WTVS;%?~6qrP+!&WEqpNSXkA8Hqh$9<2fHM@?=0&Nx<&uB2^{57*z9+K2PIipE-b z&hh8q_y-6!qf@I;K8UWf{m-D8Xg`>?1M~0ukNERwh+s1#T!`bpj=J0Zb;Y@R^jmrb znClP1pGU(4n>SK#q5lzdft62VYJ&2SG|%FexV9dRqJ|bXqVs@9(`dW@Su_XuMygRJ zzTb1g3E2Nwdcy8+0M5muae~dC=wh7TczWL6AB)44s6Rn4Jrq2I>whPWv+est@}DHw zY)O5LrswSlM7Ad63>(}1VZM2kPW9ry;+2f?+qh z2K_yXCwdiHi#oh^#QHdnCl}YhKep*Be_s&hHd2Q_^EwOHZYkEx&rha^p2PYI*7aC( zQ8)9u6z-EOtg_`gyz+7SX!A>M-?H+NE$>@oA;(b;$5c7(xCGyTx-3^d_PQwNZMyyL z6Uc}An1rpImwe`TFW3JhZOeUeeK{81cEmj^$0PlZN1OX>JKmpQZY%3c*ymez|MHpJ zPez@Gu`a@ziDf_OTeHj~!KXQ3;e72{gttr%EoF8p!L-OJ~MJ zCWmq&oNaO4DC;-j2^yEz!SkG#h_4SM(;R$~mx!;AAhVQ~Mz}S|G=3t~!Rv@kS?U3d zpQ(Aqe-^*uatU7SF99x};F;iK><^Io9lcIyUy)kc_DlSwD6f>@PF`n}AC=&5=^xnZ z(FuOm{{!kDli)|d=kUa(<7|Jg(5t9lna1LL%j5Xw(EJEDijLo>z4R?`RTBIqeFO;ar^q)WA}>r6T4(pS++TtIn^G?> z$NkU;T#TTj42|lOxgK1Hz?ZMEcrdsXw6}!6E%lk1wxBUwZpe(oyPTjC^|t-b0)HoP zF2S9>E;zqdG$HEGH}fNTUr1HBeingG{U_RI#~9c1WqJj;H7!DYG|YOEo&;`3Z&>_0 z`WNb8{`1P82g`Md#G7nOiY;K-3cb}F|2y-siPb1`}Ui+%2MJR6t~91B|ymy3O{ zI&3?P8{i+?+p6JR$T){F>WjTi?15r06nmi9>pWY(3R-b{;TKtWH!~J{U{$<(8H+uz zGTzmU#U3d3NwEhWhj%fTNA^G>BlbkG2OdwyN9CLB`H4O8LyN_JDfYs}v>5fBz3|Mi z74%DIFMN$&L#axW_euF=@|B3za2G}0h{wMaw8|fzCV-ox0DA+34{wMaw z(KH6Qa${Fj z(pG;f>;Xow`8rh**Xwk#H=2o&J+Q7|`UZb&FSPbY^Ln@i_3I0!Henm!hKc=gP-JgA zH?cnsiR{UZ#NKE&22aBt(^xRQ=f8*JX)5+cGdEZRdrmXKw8`Iu@)n7`akIY}_yWP^ z*qcsES~zB;i# zJ{H*n2M8ZFo9Qc*4@&HhchW@Q!HNAbJIu!ZuSx8U&!oP@^}J3nZSl9@{Dvj`^(|VD z_QMl<z!L+QYXfAD!4A@1nbb$0YW~qr%Fle}iCXAM;UuQ(}J{ihX(bjfwqn z4EVQ)-;CHFuY)aJ)@NI(4^zdc$e`jKE{2#gl$3Iap*f!fM?@H{A8-fkE z-jfBJJ>eHD&20ahXzTZ-%Yo-6_Q!s> zci0{%_Qxy1jy=d&?2ot61mH&#d*eF)ZOCVVU}&>TQNA#-H@@z_j`Br<&369`$ZN6K z8_ieYcaYCg!RToL+Aqf&qIw=1Q4PEgSWn`r7t|<0MmTfxzCGC@ZJS_Wkdt@f&`|NrLy4ew{i|9?nT!}W6fe+ul)9_*uw@vgwD zl=k5-o&UcZ?nZsb|GR`;fD6z6cLsmX!~Z|@Kg9kV|6dmT7x;qX{~!1tpxp8QUH&d$ z$N$#`+fd)}|KY*iz>fd#^mn4Zv!`}hy_xI3f}tqSpZ}j6o(}mq{=Y2J9}b@XcMIpDzvATo|HSpqpZ|9XJ7NEh|NkZReIEY5 z+usfO(h?^f9yAcyd3}kXXuqt{vUH&=HJ4@55+d!pDx^) zbs^>du?&>|7f5-vFiisa`Tx7)UC)cy_lu98`xoCo_s5@k%YJ_@ zj{j5tU&)UDQ~#g( z{|b)(Q~#g(|MHLjQ~zJyG0QS8S+-(VJQV)CqWTBb|L4Xlvz<46)%d?sOvVqxp&u&# zFXL?vcKna<`-uO8?+d?|@js$p2>%y-AwT|q492?Pr%`O$K!`I z{!j7|Y5dH{J)O>Dcbmd<^Rh6mH!utLTaT_EP+zN|H0?g{;&DJijx0J`M>gi z<^Rh6*TM;$f<39I`M;F^EB{yiUy6yX9(ti9ApCzFy#@d5|Ihzh*!cfnTl`OxC_j+P z|MdpF0r?$#{@=ew@-KA$Uz_hY$^UEOe88IjSMvXU?0<~-lO+Ea^1eQX>vMXN5BOiH z(Y~Evit~qE zEct)Uy}>e+cMwc*zOhb{{}*|iIe%Ce!KP`DgZkZ){J%Yd;lMe9Db6R>Bgy}JN>~f> z=qVU^LpVQhuZ;Y^y#<>UQ9j~68To)O&BzDbSMvXwoNzw+?6qOw@UtBWCPxeUEU$sEC}C0|94CNU*mgIaQu@5+kC)D{x8}Y?8NoIFUbeIH$;Xj z%pYdwBQtfv^MI!cw)ub`&d3KmGb11HBN_RCXJzCAo}G~ocuqz>;JF$3fahi81D>Ce z5BSlHe83Ab@&PZ*$OpVg^8cFmqI`IZ1>1bUOC3M=P=PBcOmdx*DOn_{4Y(PAR8RuW&@e%3c6=d!*jSVUkJ=IFZ zEP)cq|Ec81|C}G?gH`@tQuF_Q>VFD8lRy7IkmC6&^5_3kF`rpF|IZ0?P~Y+Y_oDe7 z3eW#{2QTE||FM4J`2Wh_Meqg3|6~2Y@&A`2{^j_8%r_nXA06C__KyF@`hnyB_XjIb z?)ZPKUpW3B>kE$mHw${8zT^KrgOR|F|Ht}+PEX z|5*QX{QsrYzw+?^Py9~`PPrIr5&k$tuB{J&?|6a2>U{~h7qfs4ZbUpk`sf32_{ zSv0@p!Snxk zehbI{&kmbI9?Ji}MX(Y4=q8i@2W2WK|A#GHVrq(On{I2@xj{5HP@zchueef)EDq|L4d5!!nhW|119| zjsN)-lkF0C>cap3O6&POPMtA-80XUuDU5JWe8;#q^^Wji84rN{|15m~`otmD2TXQk z5B6wJ%ztb=sM81Dq&Fe2WITXrL9KyPR24bFSk63uqDN(@A~2?I!%TZkBb)>KQDw?D zZ%5a|jR&}uZbNxFs*e4kin$YW_j**G4xlmj_Z$3ql>c~uo4_SJI+~uxtbpA9X1WFV z7`oTuF?2m}7EQDGdc-DsIFij4kE8LxRj7}}BM|HCVSdD1i$@~X*`s4g^nqJ2|DQ+I z5LX`WZ#>-!d>oCicogPB_Ap=Kc#B6PHo}81{2hzO(m3E6lx5HN4$NKb(FydmEx(N> z0G~)dSUiDl2R@1F+WHgeF5r_T-k(16KSO+jiw9aot5EL71B6k$h4TlX(DN{V;$jF3 z@-@@_m1ytA1M~^|fbTecU|0ABu+s;wp&@AJ#sgeOLxJ6RfR6%LkkiHk#PLcl9%yy& zGU5kZJWw1jAG6wj5At>K zKsVA&D0kxlhGG6lkKA~GzTpb=@AQFqe1{tka1XesM{Yd8-H2`Xkd3dOy+0}jR%P1^WAuWSRZuyz-y@h$K(6~d;C2(A2%Lg10wL##{+y7#m_i> z!1sLIZ*DxmB+R|-ksA+iT38$XJAGgQBFH`b#xAh;|8U}bylyOLVHy&UR4Mu-%JiuVgweFD{4={wT1$N^Bu7&T#!yKWP;o$lCbt&eC_b^If zp~dm|UN;`#O1cW=ZalzcbUCma4{$l|9S>tv*4p-0QGZ}J9-u$&1&`c#fZHJ}kKA~G z?fwUlkBbLdju9yy?rF>aX=^lpxQhq+yWb4*a`8ZA%N(6YA6SIGJ;HbZJoChE&D$Dy zKggEj$$9>7UP| zxa|J<^{f5>ohtyhs4n?PAf4}Xm2`g3xHg_E%>Q}5FJ5H6FCOp9OM1S4#@}J(`sKk* zd8uUESD*?J_AKUn|Gdb2U(D}$NzeDsI6dD#T)yOYmh5hj6b-1hk8m;&|xu$1fn zIKM-!|F?@(0JNkN%JT3)KHneyH{T@@2AqT>tk}|38#=0@eRj|3AVgyPl3pKqa6OPzk66 xR01jim4He>C7=>e38(~A0xAKOfJ#6mpb}6Cs0363Dgl*%N9 z+M$lqs-=F_sozd#%8a$zR;$zLw6u1{PAyeOtCiNzQWRRN9ox~VApM{H$UBKK0cWf> zo|`#u?{Dut_uf5w@9ujid+$E^#K|w;{liJGX#K*uny$TnY?M~W_U9o^5`>Bo*y zJl;|qyCnP{S>PzzYT&%-kbFo1gwFX$NCGknG8$3@q4PWj+Y-o05Oe|UWXM>^DUdSA zI0)q%kL?7=M93t_sgTb>CPO|CnF67F_1I2@oDP`=nGTr&nF*N%IRkPgg!0bDwgNH- zayFzAG8ZxrG9OX}p?nLlT?knOSqxbMSqfPO`2yrz2<2OW?Mg^Bqy|z8Sp}(soCi4{ zLitE8K)eCc2w4MJ3t0!b5Yhx`hETo@*lvWhKsG@(LoR|`4A}ztB82jNT0)cN;Lq0# z9J!6HtM#CT#~;ekW8z~OF@)OQtG3==aPiOc==kHTEvVhqc4(f~shL_*Q)o#u+F?Re zoN17)p^XUoDD_=x#~@jIlY(|qXGN$+?T*%k`W0d)9!j+lc{FzDx_G?x7gIG+{j0Q; zmd3G?6+TKRLH#sdscs6#Q${&uit5k9`J=WMx@lYasj{{uTf$hhnUnH5DLqEjt!5hS zre~<`w69V|SK4nkl1@q)6?2VQmECnwIAabqiO$MtFi#h@WObbRE2))JvCjkR*@70+ zPqtHw=*lw@x$@i;VkEyp#s7)o#1!=GsEwwZHd`&_ajg+3L902wqt-!qo4Iw#Bh1Qd=9c)oHq71XNMOk3QxiO|q?(p{Ct z>gA~F_77B1SnWDpo;nu^bU0K=-p;}MQAu;q^^B+=1ib>P!S%OmaMi*lm2}+Hl&H1| zsBPO2Dx+G`m*J{{fj1uwqybV4t*g8Cql_yc&*QLO#FmUeO^E{yFuI^@f@Ns{A{%w+ zEbZTn2<2U|_zF5+{6MIwb&@+;>{On%Z-kb84_7xD-tko~{5mqZ_re5Kgrz}wVVpiU z2Ln6DT__>EN=EzUU!hIS;)?-VfuAc^(xoTt;IU4BjopC;otF>OD9!6z$GR%2BfnQ8 zx-HQ8mmn7S>{!5DU8EnPALUwmaL^9;9mW~(QN~{a=daG?zYRQ%@jAM+U2!5XNCh*IQuLn<}ALCK`o&j%R{AX~A@vGoV8NUVYW?axvq+iRp1bj2&nc({w zSArj5TnGL=;|B0EjCX@4H00WQANU-`4}+I8-Ur^mct5z6@d2>K_)TyZW4*CR{|4hp z;CmPw;603Ig70Ts0e*;a8~9DeyTHZd1c~f_9k`tFcfqq69{^j7$FC{U?_@j;{C&oA zz&~N!2>t`(7Vt}qw}bz|xC8ue#y2QMTCWYqp2ftN6T5WI}> zE8sNa17M5sKfyhW-v(dKxT?8G{~6;;zy}#`1HaB#f!|=<4Gw-wMD4vATuQ$!BEA)T zI^#RQGZ^myS2F%3xSsK&;0qW(3Esr`Iq+7-#p{do8yS~?Z)RK#{w?Dc@Jo!hfnR6b z3O>x(2OnYF4c6A@j&~QhnDK7#1je_4r!n3Gu4Mcmcp2lp;PV;(4!oZ6AHmxg(+`6v zP(=KHFhcHkq4@ve&Otx_D2V?L14jIRfeFO_m-E_iHwwHY6tXm4#Q!J$zo0khS@Hh` zh7kW>Xa@Nd3w-)4ApSq`|B3&P#%1XL7XP34|HS{78xP|D8(#ju1Rf1&Y*d>R#67M5I(*^TwuR?L2;Iu&L@bFWjFXRyz5OeTu!rtM&P3v=B){B48<6fACF?SK=q{|O)ea#lah|BdE;kE*dS1DR&; z7A#w}w&`5{SrSePH$jOXUhNdgmJ(Gs7}wE-~gBovw4KO8T?BGm4{< zw?i!|HxcfdlMJirheMVaX~lC6`C)|dv9)TavYbv#QeNjesZ7$3D*n)fsK~yDHtGzjGH6x+KZ`Z<+s%hahGCH!TYh&#{*I-!ze${*xl}zh(Y+?uH>TvA`#30rCHe z|5yCKGy=u{OI8s7ulRq(|C_rW3^)Jp=0~FkKO;9>h0&6>=g%{O1+hj)j<{eANG$dQ zZy9;*$_C0?-fw4mfSj2Fs>qLB$sSaellKkGU?dcDc9iw zdPbFE?*%bLw8BJLb8~eQ9!M+FYSx=>oAT>@)iGdAEWe&oSl6-)3s|X6Wv7&#?4fnJ zOss5Tb7NSfKiSFDswvh!Lk%2%4%1)@K0I)QIqu_W&KBtWE}eQ6)_+8g==;E=tp7+iEO-gCvi_s2{}}cK`4kI$oE8xOpZNd8|3@QC{C{Kx z@&AecPyBzm>%nmK|6y_c(1C|TB_~^Nphqgj|0n)GdXf!6=6}olZ<+rs?|+f^zsUPv zz!jR{y*{miT_Xhf8zfW|DX8(=zF0AvB2=LfcXE!|0n)G8qc3C z|KGCcc;)@i^8ROe|8s8q5BK*!*J91VRxP8o;ZI=|#uE)=Kf?NltErM`{l!|WGMPmE z9jM*L>W|(DHlPgaPbQ#K0HNp8jz>Ls{dH9T@#G&W57iroq4Itl>2ck(J<;+<2WwE# z6Q3VCV|oG-u}Ia5Q8Yo?b*zdSs)SS$*gGcPTkR@yN1TF5joERvrf>Q^oyurTd#06c zvpbaSlO739*xu5W$)xf;V`JK}Oh4_|aUv#y?;TTb8|%zAWvp^t$Bk3QBW2VY$7oa? zj@uLOos7Mw)LWKnGcBXu_IwwMI;CsilUG$Sa)-ifBB zjM}u<>3C_Leht#ct#n0|!9?YJFi%~~uoY1+M6 zu0xixC`)>0I;D)(9^)eAI&m4_%w?#zRkxY+jV9$~tX{+IMuzcW3H4E9gF1LqzlA&{ zVV<=+mAl@G#G0f->4(|$8D}g%0x=3 zw{gC3_AU$hl2K=(qTXCdujA$Mjp?N8c+Pg;s5$Gb5B31+z4?&B7Ml4#H;&AUBlF`( zm8Lz0d_M?!@>6ICb_A1GX;C*GXh_QXkFx%wtpDhQ%fia~k4ALEl=UB@3*}~6|B>G^ zBrX>C_39bO~ zN6p#rk;L#n*dD-RWpC1>WeD*$BuyJVr*|pH8JEwmTC`xn;zhL;Rf|_uSInJTQ&&-4 zSGAy`vU26h%F3#mx${=d`?99ZhB7S`Nkx(yhQblZAxJg$kvsv{%^k5HN&J6!+#e1& z@&Aec4`bvFjElfWku9prSeDV8bd|EpqY)+V|K=}xmiK?7v(Vy=^8Rn$E&48JDewPA z2SHd$x8-aQ4L-#Gm$QY$!~&nF1;qa+{y*{m(GV2>A6Y@>f6M%Dng5-;9t^kn-~R=E C>hV_q literal 0 HcmV?d00001 diff --git a/rinetd.plg b/rinetd.plg new file mode 100755 index 0000000..0f064d8 --- /dev/null +++ b/rinetd.plg @@ -0,0 +1,32 @@ +--------------------Configuration: rinetd - Win32 Debug-------------------- +Begining build with project "g:\rinetd\rinetd.dsp", at root. +Active configuration is Win32 (x86) Console Application (based on Win32 (x86) Console Application) + +Project's tools are: + "32-bit C/C++ Compiler for 80x86" with flags "/nologo /MLd /W3 /Gm /GX /Zi /Od /D "WIN32" /D "_DEBUG" /D "_CONSOLE" /D "_MBCS" /Fp"Debug/rinetd.pch" /YX /Fo"Debug/" /Fd"Debug/" /FD /c " + "Win32 Resource Compiler" with flags "/l 0x409 /d "_DEBUG" " + "Browser Database Maker" with flags "/nologo /o"Debug/rinetd.bsc" " + "COFF Linker for 80x86" with flags "kernel32.lib user32.lib gdi32.lib winspool.lib comdlg32.lib advapi32.lib shell32.lib ole32.lib oleaut32.lib uuid.lib odbc32.lib odbccp32.lib wsock32.lib /nologo /subsystem:console /incremental:yes /pdb:"Debug/rinetd.pdb" /debug /machine:I386 /out:"Debug/rinetd.exe" /pdbtype:sept " + "Custom Build" with flags "" + "" with flags "" + +Creating temp file "c:\windows\TEMP\RSP10D4.TMP" with contents +Creating command line "cl.exe @c:\windows\TEMP\RSP10D4.TMP" +Creating temp file "c:\windows\TEMP\RSP10D5.TMP" with contents +Creating command line "link.exe @c:\windows\TEMP\RSP10D5.TMP" +Compiling... +rinetd.c +G:\rinetd\rinetd.c(965) : warning C4101: 'arg' : unreferenced local variable +G:\rinetd\rinetd.c(992) : warning C4101: 'arg' : unreferenced local variable +G:\rinetd\rinetd.c(1367) : warning C4101: 'pid_file' : unreferenced local variable +Linking... +LINK : LNK6004: Debug/rinetd.exe not found or not built by the last incremental link; performing full link + + + +rinetd.exe - 0 error(s), 3 warning(s)