diff --git a/api/client/client.go b/api/client/client.go index d4b7906a0e97c..83b1b5a313a67 100644 --- a/api/client/client.go +++ b/api/client/client.go @@ -723,17 +723,6 @@ func (c *Client) GetBotUsers(ctx context.Context) ([]types.User, error) { return users, nil } -// GenerateInitialRenewableUserCerts exchanges a bot token for a set of -// renewable user certificates. -func (c *Client) GenerateInitialRenewableUserCerts(ctx context.Context, req *proto.RenewableCertsRequest) (*proto.Certs, error) { - certs, err := c.grpc.GenerateInitialRenewableUserCerts(ctx, req, c.callOpts...) - if err != nil { - return nil, trail.FromGRPC(err) - } - - return certs, nil -} - // GetAccessRequests retrieves a list of all access requests matching the provided filter. func (c *Client) GetAccessRequests(ctx context.Context, filter types.AccessRequestFilter) ([]types.AccessRequest, error) { rsp, err := c.grpc.GetAccessRequests(ctx, &filter, c.callOpts...) diff --git a/api/client/proto/authservice.pb.go b/api/client/proto/authservice.pb.go index 0b10e4a640e27..a9e325c852541 100644 --- a/api/client/proto/authservice.pb.go +++ b/api/client/proto/authservice.pb.go @@ -10263,586 +10263,585 @@ func init() { func init() { proto.RegisterFile("authservice.proto", fileDescriptor_ce8bd90b12161215) } var fileDescriptor_ce8bd90b12161215 = []byte{ - // 9257 bytes of a gzipped FileDescriptorProto + // 9234 bytes of a gzipped FileDescriptorProto 0x1f, 0x8b, 0x08, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0xff, 0xc4, 0x7d, 0x4b, 0x6c, 0x1c, 0xc9, - 0x92, 0x98, 0xba, 0xf9, 0xeb, 0x0e, 0x7e, 0xd4, 0x4c, 0x92, 0x62, 0xab, 0x45, 0xb1, 0xa5, 0xd2, - 0x8c, 0x9e, 0x66, 0x76, 0x96, 0xd2, 0x90, 0xf3, 0xff, 0x6e, 0x77, 0x93, 0x22, 0x39, 0xa2, 0x28, - 0x4e, 0x35, 0x49, 0x8d, 0xdf, 0x9b, 0x75, 0x4f, 0xb1, 0x3b, 0x45, 0x16, 0xd8, 0xec, 0xea, 0x57, - 0x55, 0x2d, 0x8d, 0x6c, 0x18, 0xf0, 0x6f, 0x6d, 0xc3, 0x1f, 0xe0, 0x1d, 0xec, 0x83, 0x0d, 0x18, - 0x5e, 0xac, 0x4f, 0xb6, 0x01, 0x1f, 0x0c, 0x1f, 0x7c, 0xb1, 0x0f, 0x7b, 0xf1, 0xd8, 0x80, 0x61, - 0x5f, 0x0c, 0x03, 0x6b, 0xa0, 0x77, 0xfd, 0x8e, 0x3c, 0x19, 0x30, 0x6c, 0xc0, 0xef, 0x64, 0xe4, - 0xb7, 0x32, 0xab, 0x2a, 0xbb, 0x49, 0x49, 0xde, 0xbd, 0x48, 0xac, 0xc8, 0x8c, 0xc8, 0xc8, 0xc8, - 0xc8, 0xc8, 0xc8, 0xc8, 0xcc, 0x68, 0x98, 0x75, 0x7a, 0xe1, 0x49, 0x80, 0xfd, 0xe7, 0x6e, 0x13, - 0xaf, 0x74, 0x7d, 0x2f, 0xf4, 0xd0, 0x18, 0xfd, 0xaf, 0x34, 0x7f, 0xec, 0x1d, 0x7b, 0xf4, 0xcf, - 0xfb, 0xe4, 0x2f, 0x56, 0x58, 0xba, 0x71, 0xec, 0x79, 0xc7, 0x6d, 0x7c, 0x9f, 0x7e, 0x1d, 0xf5, - 0x9e, 0xdd, 0xc7, 0x67, 0xdd, 0xf0, 0x25, 0x2f, 0x2c, 0xc7, 0x0b, 0x43, 0xf7, 0x0c, 0x07, 0xa1, - 0x73, 0xd6, 0xe5, 0x15, 0x26, 0x9b, 0xd8, 0x0f, 0x03, 0xfe, 0xf1, 0xf1, 0xb1, 0x1b, 0x9e, 0xf4, - 0x8e, 0x56, 0x9a, 0xde, 0xd9, 0xfd, 0x63, 0xdf, 0x79, 0xee, 0x86, 0x4e, 0xe8, 0x7a, 0x1d, 0xa7, - 0x7d, 0x3f, 0xc4, 0x6d, 0xdc, 0xf5, 0xfc, 0xf0, 0xbe, 0xd3, 0x75, 0xef, 0x87, 0x2f, 0xbb, 0x38, - 0x60, 0xff, 0x72, 0xc4, 0xda, 0x65, 0x10, 0x5f, 0xe0, 0x23, 0xd2, 0xc5, 0x8e, 0xfc, 0xe3, 0x95, - 0x88, 0xf8, 0x4e, 0xb7, 0x8b, 0xfd, 0xe8, 0x0f, 0x4e, 0xe4, 0xeb, 0xcb, 0x10, 0xc1, 0xcf, 0x71, - 0x27, 0x14, 0xff, 0x31, 0x02, 0xd6, 0xbf, 0x98, 0x87, 0xb1, 0x0d, 0x02, 0x40, 0x9f, 0xc0, 0xe8, - 0xfe, 0xcb, 0x2e, 0x2e, 0x66, 0x6e, 0x65, 0xee, 0xcd, 0xac, 0x16, 0x58, 0xf9, 0xca, 0x93, 0x2e, - 0xf6, 0x29, 0xc9, 0x2a, 0x3a, 0xef, 0x97, 0x67, 0x08, 0xa1, 0xf7, 0xbc, 0x33, 0x37, 0xa4, 0x52, - 0xb7, 0x29, 0x06, 0x7a, 0x0a, 0x33, 0x36, 0x0e, 0xbc, 0x9e, 0xdf, 0xc4, 0x5b, 0xd8, 0x69, 0x61, - 0xbf, 0x98, 0xbd, 0x95, 0xb9, 0x37, 0xb9, 0xba, 0xb0, 0xc2, 0x84, 0xa6, 0x17, 0x56, 0xaf, 0x9d, - 0xf7, 0xcb, 0xc8, 0xe7, 0xb0, 0x88, 0xd8, 0xd6, 0x15, 0x3b, 0x46, 0x06, 0x7d, 0x0f, 0xd3, 0x35, - 0xec, 0x87, 0x95, 0x5e, 0x78, 0xe2, 0xf9, 0x6e, 0xf8, 0xb2, 0x38, 0x42, 0xe9, 0x5e, 0xe3, 0x74, - 0xb5, 0xb2, 0xc3, 0xd5, 0xea, 0xd2, 0x79, 0xbf, 0x5c, 0x24, 0x03, 0xdc, 0x70, 0x04, 0x54, 0x23, - 0xaf, 0x13, 0x43, 0xdf, 0xc1, 0x54, 0x9d, 0x88, 0xab, 0xb9, 0xef, 0x9d, 0xe2, 0x4e, 0x50, 0x1c, - 0xd5, 0x98, 0x56, 0x8b, 0x0e, 0x57, 0xab, 0x37, 0xce, 0xfb, 0xe5, 0xc5, 0x80, 0xc2, 0x1a, 0x21, - 0x05, 0x6a, 0xa4, 0x35, 0x4a, 0xe8, 0x07, 0x98, 0xd9, 0xf3, 0xbd, 0xe7, 0x6e, 0xe0, 0x7a, 0x1d, - 0x0a, 0x2a, 0x8e, 0x51, 0xda, 0x8b, 0x9c, 0xb6, 0x5e, 0x78, 0xb8, 0x5a, 0xbd, 0x79, 0xde, 0x2f, - 0x5f, 0xef, 0x0a, 0x28, 0x6b, 0x40, 0x97, 0x8c, 0x8e, 0x82, 0xf6, 0x61, 0xb2, 0xd6, 0xee, 0x05, - 0x21, 0xf6, 0x77, 0x9d, 0x33, 0x5c, 0x1c, 0xa7, 0xe4, 0xe7, 0x85, 0x5c, 0xa2, 0x92, 0xc3, 0xd5, - 0x6a, 0xe9, 0xbc, 0x5f, 0xbe, 0xd6, 0x64, 0xa0, 0x46, 0xc7, 0x39, 0xd3, 0x45, 0xae, 0x92, 0x41, - 0x1f, 0xc3, 0xe8, 0x41, 0x80, 0xfd, 0x62, 0x8e, 0x92, 0x9b, 0xe6, 0xe4, 0x08, 0xe8, 0x70, 0x95, - 0x8d, 0x7f, 0x2f, 0xc0, 0xbe, 0x86, 0x4f, 0x11, 0x08, 0xa2, 0xed, 0xb5, 0x71, 0x31, 0xaf, 0x21, - 0x12, 0xd0, 0xe1, 0x87, 0x0c, 0xd1, 0xf7, 0xda, 0x7a, 0xc3, 0x14, 0x01, 0x6d, 0x43, 0x9e, 0xb4, - 0x1c, 0x74, 0x9d, 0x26, 0x2e, 0x02, 0xc5, 0x2e, 0x70, 0x6c, 0x09, 0xaf, 0x2e, 0x9e, 0xf7, 0xcb, - 0x73, 0x1d, 0xf1, 0xa9, 0x51, 0x89, 0xb0, 0xd1, 0xd7, 0x30, 0x5e, 0xc7, 0xfe, 0x73, 0xec, 0x17, - 0x27, 0x29, 0x9d, 0xab, 0x62, 0x20, 0x29, 0xf0, 0x70, 0xb5, 0x3a, 0x7f, 0xde, 0x2f, 0x17, 0x02, - 0xfa, 0xa5, 0xd1, 0xe0, 0x68, 0x44, 0xdb, 0x6c, 0xfc, 0x1c, 0xfb, 0x01, 0xde, 0xef, 0x75, 0x3a, - 0xb8, 0x5d, 0x9c, 0xd2, 0xb4, 0x4d, 0x2b, 0x13, 0xda, 0xe6, 0x33, 0x60, 0x23, 0xa4, 0x50, 0x5d, - 0xdb, 0x34, 0x04, 0x74, 0x02, 0x05, 0xf6, 0x57, 0xcd, 0xeb, 0x74, 0x70, 0x93, 0x4c, 0xa9, 0xe2, - 0x34, 0x6d, 0xe0, 0x3a, 0x6f, 0x20, 0x5e, 0x7c, 0xb8, 0x5a, 0x2d, 0x9f, 0xf7, 0xcb, 0x37, 0x18, - 0xed, 0x46, 0x53, 0x16, 0x68, 0xcd, 0x24, 0xa8, 0x92, 0x7e, 0x54, 0x9a, 0x4d, 0x1c, 0x04, 0x36, - 0xfe, 0x65, 0x0f, 0x07, 0x61, 0x71, 0x46, 0xeb, 0x87, 0x56, 0x76, 0xb8, 0xc6, 0xfa, 0xe1, 0x50, - 0x60, 0xc3, 0x67, 0x50, 0xbd, 0x1f, 0x1a, 0x02, 0xda, 0x03, 0xa8, 0x74, 0xbb, 0x75, 0x1c, 0x10, - 0x65, 0x2c, 0x5e, 0xa5, 0xa4, 0xe7, 0x38, 0xe9, 0xa7, 0xf8, 0x88, 0x17, 0x1c, 0xae, 0x56, 0xaf, - 0x9f, 0xf7, 0xcb, 0x0b, 0x4e, 0xb7, 0xdb, 0x08, 0x18, 0x48, 0x23, 0xaa, 0xd0, 0x60, 0x72, 0x3f, - 0xf3, 0x42, 0xcc, 0x55, 0xb1, 0x58, 0x88, 0xc9, 0x5d, 0x29, 0x13, 0xfc, 0xfa, 0x14, 0xd8, 0xe0, - 0x6a, 0x1d, 0x97, 0xbb, 0x82, 0x40, 0xe6, 0xe2, 0xba, 0x13, 0x3a, 0x47, 0x4e, 0x80, 0xb9, 0x7a, - 0xcc, 0x6a, 0x73, 0x51, 0x2f, 0x3c, 0x5c, 0x63, 0x73, 0xb1, 0xc5, 0xa1, 0x8d, 0x14, 0x7d, 0x89, - 0xd1, 0x23, 0x12, 0x89, 0x3a, 0x5e, 0x44, 0x43, 0x24, 0xf2, 0x02, 0x1f, 0xa5, 0x4b, 0x24, 0xaa, - 0x8a, 0xb6, 0x20, 0xf7, 0x14, 0x1f, 0x31, 0xcb, 0x31, 0x47, 0xe9, 0xcd, 0x46, 0xf4, 0x98, 0xcd, - 0x58, 0x63, 0xb3, 0x82, 0x50, 0x4b, 0x5a, 0x0b, 0x89, 0x8d, 0x7e, 0x2f, 0x03, 0x8b, 0x62, 0x86, - 0xe3, 0xf0, 0x85, 0xe7, 0x9f, 0xba, 0x9d, 0xe3, 0x9a, 0xd7, 0x79, 0xe6, 0x1e, 0x17, 0xe7, 0x29, - 0xe5, 0x5b, 0x31, 0xa3, 0x11, 0xab, 0x75, 0xb8, 0x5a, 0xfd, 0xd9, 0x79, 0xbf, 0x7c, 0x47, 0x1a, - 0x10, 0x59, 0x4e, 0x14, 0xf2, 0x99, 0x7b, 0xac, 0x35, 0x6c, 0x6a, 0x0b, 0xfd, 0x95, 0x0c, 0x5c, - 0xe3, 0xbd, 0xb3, 0x71, 0xd3, 0xf3, 0x5b, 0x11, 0x1b, 0x0b, 0x94, 0x8d, 0xb2, 0x9c, 0xad, 0x69, - 0x95, 0x0e, 0x57, 0xab, 0x77, 0xcf, 0xfb, 0x65, 0x8b, 0x0b, 0xae, 0xe1, 0x8b, 0xe2, 0x34, 0x26, - 0x0c, 0x0d, 0x11, 0x4d, 0x20, 0xc6, 0x7f, 0xcf, 0xc7, 0xcf, 0xb0, 0x8f, 0x3b, 0x4d, 0x5c, 0xbc, - 0xa6, 0x69, 0x82, 0x5e, 0x28, 0xac, 0x32, 0x59, 0x4a, 0x1a, 0x5d, 0x09, 0xd6, 0x35, 0x41, 0x47, - 0x41, 0xbf, 0x04, 0xc4, 0x05, 0x50, 0xe9, 0xb5, 0xdc, 0x90, 0x77, 0x70, 0x91, 0xb6, 0x72, 0x43, - 0x97, 0xb3, 0x52, 0xe1, 0x70, 0xb5, 0x6a, 0x9d, 0xf7, 0xcb, 0xcb, 0x42, 0xc4, 0x0e, 0x29, 0x4a, - 0xeb, 0x58, 0x0a, 0x71, 0x62, 0x79, 0x77, 0xbc, 0xe6, 0x69, 0xb1, 0xa8, 0x59, 0x5e, 0x02, 0x12, - 0x26, 0xbb, 0xed, 0x35, 0x4f, 0x75, 0xcb, 0x4b, 0x4a, 0x51, 0x08, 0x73, 0x7c, 0x94, 0x6c, 0x1c, - 0x84, 0xbe, 0x4b, 0x6d, 0x47, 0x50, 0xbc, 0x4e, 0xe9, 0x2c, 0x09, 0x1b, 0x9c, 0xac, 0x71, 0xf8, - 0x01, 0xe3, 0x96, 0x2b, 0x42, 0xc3, 0x57, 0xca, 0xb4, 0x66, 0xd2, 0xc8, 0xa3, 0xbf, 0x04, 0x0b, - 0x4f, 0xdd, 0x4e, 0xcb, 0x7b, 0x11, 0xac, 0xe3, 0xe0, 0x34, 0xf4, 0xba, 0x75, 0xe6, 0xf9, 0x15, - 0x4b, 0xb4, 0xdd, 0x65, 0xa1, 0xe6, 0x69, 0x75, 0x0e, 0xd7, 0xaa, 0x6f, 0x9f, 0xf7, 0xcb, 0xb7, - 0x5f, 0xb0, 0xc2, 0x46, 0x8b, 0x95, 0x36, 0xb8, 0xf3, 0xa8, 0x35, 0x9e, 0xde, 0x0a, 0x51, 0x01, - 0xbd, 0xa0, 0x78, 0x43, 0x53, 0x01, 0xbd, 0x50, 0x18, 0x83, 0x58, 0x83, 0xba, 0x0a, 0xe8, 0x28, - 0x68, 0x13, 0x72, 0xc2, 0x3c, 0x14, 0x97, 0xb4, 0xa9, 0x2b, 0xc0, 0x87, 0x6b, 0xcc, 0x03, 0x12, - 0x26, 0x46, 0x9f, 0xb9, 0xa2, 0x16, 0xda, 0x81, 0x3c, 0xb5, 0x91, 0xd4, 0x64, 0xdd, 0xa4, 0x94, - 0x90, 0x50, 0x54, 0x01, 0x3f, 0x5c, 0xab, 0x16, 0xcf, 0xfb, 0xe5, 0x79, 0x66, 0x65, 0x13, 0x86, - 0x2a, 0x22, 0x80, 0xd6, 0x60, 0xa4, 0xd2, 0xed, 0x16, 0x97, 0x29, 0x9d, 0xa9, 0x88, 0xce, 0xe1, - 0x5a, 0x75, 0xf6, 0xbc, 0x5f, 0x9e, 0x76, 0xba, 0x7a, 0xb7, 0x48, 0xed, 0x2a, 0x40, 0x4e, 0x38, - 0x64, 0xdf, 0x8c, 0xe6, 0x26, 0x0a, 0x39, 0x6b, 0x0b, 0xc6, 0x9e, 0x3a, 0x61, 0xf3, 0x04, 0x7d, - 0x0d, 0x63, 0x8f, 0xdc, 0x4e, 0x2b, 0x28, 0x66, 0x6e, 0x8d, 0xd0, 0x35, 0x9b, 0x79, 0x8b, 0xb4, - 0x90, 0x14, 0x54, 0x17, 0x7f, 0xea, 0x97, 0xaf, 0x9c, 0xf7, 0xcb, 0x57, 0x4f, 0x49, 0x35, 0xc5, - 0x65, 0x64, 0x78, 0xd6, 0xbf, 0xce, 0x42, 0x5e, 0xd6, 0x46, 0x4b, 0x30, 0x4a, 0xfe, 0xa7, 0xbe, - 0x67, 0xbe, 0x9a, 0x3b, 0xef, 0x97, 0x47, 0x09, 0x9e, 0x4d, 0xa1, 0x68, 0x15, 0x26, 0x77, 0x3c, - 0xa7, 0x55, 0xc7, 0x4d, 0x1f, 0x87, 0x01, 0x75, 0x2e, 0x73, 0xd5, 0xc2, 0x79, 0xbf, 0x3c, 0xd5, - 0xf6, 0x9c, 0x56, 0x23, 0x60, 0x70, 0x5b, 0xad, 0x44, 0x28, 0x52, 0xcf, 0x68, 0x24, 0xa2, 0x48, - 0x3c, 0x08, 0x9b, 0x42, 0xd1, 0x37, 0x30, 0xfe, 0xd0, 0x6d, 0x93, 0xb5, 0x66, 0x94, 0xf2, 0xbf, - 0x14, 0xe7, 0x7f, 0x85, 0x15, 0x6f, 0x74, 0x42, 0xff, 0x25, 0x73, 0x1c, 0x9e, 0x51, 0x80, 0xd2, - 0x11, 0x4e, 0x01, 0x3d, 0x80, 0x89, 0x7a, 0xef, 0x88, 0xb2, 0x3f, 0x46, 0x1b, 0xa3, 0xa3, 0x1b, - 0xf4, 0x8e, 0x1a, 0xa4, 0x0b, 0x0a, 0x82, 0xa8, 0x56, 0xfa, 0x14, 0x26, 0x15, 0xf2, 0xa8, 0x00, - 0x23, 0xa7, 0xf8, 0x25, 0xeb, 0xbb, 0x4d, 0xfe, 0x44, 0xf3, 0x30, 0xf6, 0xdc, 0x69, 0xf7, 0x30, - 0xed, 0x6a, 0xde, 0x66, 0x1f, 0x9f, 0x65, 0x3f, 0xc9, 0x58, 0xff, 0x79, 0x14, 0x0a, 0x5b, 0x5e, - 0x10, 0x12, 0x4f, 0x56, 0x2e, 0xc9, 0x77, 0x60, 0x9c, 0xc0, 0xb6, 0xd7, 0xb9, 0xfc, 0x26, 0xcf, - 0xfb, 0xe5, 0x89, 0x13, 0x2f, 0x08, 0x1b, 0x6e, 0xcb, 0xe6, 0x45, 0xe8, 0x1d, 0xc8, 0xed, 0x7a, - 0x2d, 0x4c, 0x85, 0x42, 0xc9, 0x56, 0xa7, 0xcf, 0xfb, 0xe5, 0x7c, 0xc7, 0x6b, 0x61, 0xea, 0x15, - 0xda, 0xb2, 0x18, 0x1d, 0x72, 0x6f, 0x8e, 0xc9, 0xae, 0x4a, 0x64, 0x47, 0xdc, 0xb7, 0xdf, 0xf4, - 0xcb, 0x1f, 0x5d, 0x62, 0xbb, 0xb1, 0x52, 0x7f, 0x19, 0x84, 0xf8, 0x8c, 0x50, 0xe2, 0xce, 0xde, - 0x53, 0x98, 0xaf, 0xb4, 0x5a, 0x2e, 0xc3, 0xd8, 0xf3, 0xdd, 0x4e, 0xd3, 0xed, 0x3a, 0xed, 0x80, - 0x8e, 0x41, 0xbe, 0x7a, 0xe7, 0xbc, 0x5f, 0x2e, 0x3b, 0xb2, 0xbc, 0xd1, 0x95, 0x15, 0x14, 0x19, - 0xa6, 0x12, 0x40, 0x6b, 0x90, 0x5b, 0xdf, 0xad, 0x53, 0x57, 0xb0, 0x38, 0x46, 0x89, 0xd1, 0xc5, - 0xb1, 0xd5, 0x09, 0x68, 0xd7, 0x54, 0x02, 0xb2, 0x22, 0xfa, 0x08, 0xa6, 0xf6, 0x7a, 0x47, 0x6d, - 0xb7, 0xb9, 0xbf, 0x53, 0x7f, 0x84, 0x5f, 0x52, 0x1f, 0x7a, 0x8a, 0x99, 0xcc, 0x2e, 0x85, 0x37, - 0xc2, 0x76, 0xd0, 0x38, 0xc5, 0x2f, 0x6d, 0xad, 0x5e, 0x84, 0x57, 0xaf, 0x6f, 0x11, 0xbc, 0x89, - 0x04, 0x5e, 0x10, 0x9c, 0xa8, 0x78, 0xac, 0x1e, 0xba, 0x0f, 0xc0, 0x3c, 0x93, 0x4a, 0xab, 0xc5, - 0x5c, 0xec, 0x7c, 0xf5, 0xea, 0x79, 0xbf, 0x3c, 0xc9, 0x7d, 0x19, 0xa7, 0xd5, 0xf2, 0x6d, 0xa5, - 0x0a, 0xaa, 0x41, 0xce, 0xf6, 0x98, 0x80, 0xb9, 0x63, 0x7d, 0x55, 0x3a, 0xd6, 0x0c, 0xcc, 0xb7, - 0x52, 0xfc, 0x4b, 0xed, 0xa5, 0xa8, 0x81, 0xca, 0x30, 0xb1, 0xeb, 0xd5, 0x9c, 0xe6, 0x09, 0x73, - 0xaf, 0x73, 0xd5, 0xb1, 0xf3, 0x7e, 0x39, 0xf3, 0xdb, 0xb6, 0x80, 0x5a, 0xbf, 0x9a, 0x80, 0x02, - 0xf1, 0xe1, 0x35, 0x8d, 0x7a, 0x0f, 0xf2, 0x8c, 0xf7, 0x47, 0x5c, 0x31, 0xa7, 0xaa, 0x33, 0xe7, - 0xfd, 0x32, 0xf0, 0x0e, 0x92, 0xce, 0x45, 0x15, 0xd0, 0x3d, 0xc8, 0x11, 0x0a, 0x9d, 0x48, 0xb5, - 0xa6, 0xce, 0xfb, 0xe5, 0x5c, 0x8f, 0xc3, 0x6c, 0x59, 0x8a, 0xea, 0x30, 0xb1, 0xf1, 0x63, 0xd7, - 0xf5, 0x71, 0xc0, 0xb7, 0x72, 0xa5, 0x15, 0xb6, 0x63, 0x5f, 0x11, 0x3b, 0xf6, 0x95, 0x7d, 0xb1, - 0x63, 0xaf, 0xde, 0xe4, 0x26, 0x64, 0x16, 0x33, 0x94, 0xa8, 0x7f, 0xbf, 0xfa, 0xe3, 0x72, 0xc6, - 0x16, 0x94, 0xd0, 0x7b, 0x30, 0xfe, 0xd0, 0xf3, 0xcf, 0x9c, 0x90, 0xee, 0xe0, 0xf2, 0x7c, 0xba, - 0x52, 0x88, 0x36, 0x5d, 0x29, 0x04, 0x3d, 0x84, 0x19, 0xdb, 0xeb, 0x85, 0x78, 0xdf, 0x13, 0xee, - 0x26, 0x9b, 0xb5, 0xcb, 0xe7, 0xfd, 0x72, 0xc9, 0x27, 0x25, 0x8d, 0xd0, 0x4b, 0x3a, 0x96, 0x76, - 0x0c, 0x0b, 0x6d, 0xc0, 0x8c, 0xe6, 0x18, 0x07, 0xc5, 0x71, 0xaa, 0x79, 0xcc, 0x69, 0xd0, 0xdc, - 0x69, 0x55, 0xff, 0x62, 0x48, 0x68, 0x17, 0x66, 0x1f, 0xf5, 0x8e, 0xb0, 0xdf, 0xc1, 0x21, 0x0e, - 0x04, 0x47, 0x13, 0x94, 0xa3, 0x5b, 0xe7, 0xfd, 0xf2, 0xd2, 0xa9, 0x2c, 0x4c, 0xe1, 0x29, 0x89, - 0x8a, 0x30, 0x5c, 0xe5, 0x8c, 0xca, 0x65, 0x28, 0xc7, 0xdd, 0x69, 0x66, 0xe2, 0x62, 0xa5, 0xd5, - 0x3b, 0x5c, 0xca, 0x37, 0x64, 0xdf, 0x93, 0x0b, 0x93, 0x1d, 0xa7, 0x49, 0x66, 0x9c, 0xb4, 0x26, - 0x79, 0xca, 0x2d, 0xdb, 0xa4, 0x09, 0x6b, 0xa2, 0xea, 0xa2, 0xb4, 0x2b, 0x3b, 0x30, 0x76, 0x10, - 0x38, 0xc7, 0x4c, 0x13, 0x67, 0x56, 0x6f, 0x73, 0x8e, 0xe2, 0xda, 0x47, 0xf7, 0xf5, 0xb4, 0x62, - 0x75, 0x8e, 0xac, 0x20, 0x3d, 0xf2, 0xa7, 0xba, 0x82, 0xd0, 0x32, 0xf4, 0x2d, 0x00, 0xe7, 0x8a, - 0xac, 0x6c, 0x93, 0x7c, 0xad, 0xd5, 0x3a, 0x49, 0x16, 0xb1, 0x65, 0xde, 0xbf, 0x6b, 0xb2, 0x7f, - 0xda, 0x5a, 0x67, 0x2b, 0x44, 0xd0, 0xd7, 0x30, 0x45, 0xcd, 0x95, 0x18, 0xd1, 0x29, 0x3a, 0xa2, - 0x74, 0xeb, 0x4f, 0x0c, 0x60, 0xda, 0x78, 0x6a, 0x08, 0xd6, 0x3a, 0xe4, 0x25, 0xf3, 0x68, 0x02, - 0x46, 0x2a, 0xed, 0x76, 0xe1, 0x0a, 0xf9, 0xa3, 0x5e, 0xdf, 0x2a, 0x64, 0xd0, 0x0c, 0x40, 0x34, - 0x62, 0x85, 0x2c, 0x9a, 0x8a, 0x9c, 0x85, 0xc2, 0x08, 0xad, 0xdf, 0xed, 0x16, 0x46, 0xad, 0xff, - 0x96, 0x49, 0x0c, 0x22, 0x59, 0x03, 0xb9, 0x13, 0x43, 0x65, 0xce, 0x0c, 0x3d, 0x5d, 0x03, 0xb9, - 0xfb, 0xc3, 0x8c, 0xb8, 0x5a, 0x89, 0xcc, 0xcb, 0x3d, 0x22, 0x8e, 0xa6, 0xd7, 0x56, 0xe7, 0x65, - 0x97, 0xc3, 0x6c, 0x59, 0x8a, 0x56, 0x95, 0x19, 0x3c, 0x12, 0x2d, 0x62, 0x62, 0x06, 0xab, 0xa3, - 0x29, 0xe7, 0xf2, 0xaa, 0xe2, 0xe9, 0x8c, 0x46, 0x38, 0x29, 0xda, 0x23, 0xeb, 0x59, 0xff, 0x37, - 0xa3, 0x0e, 0x9a, 0x5c, 0xa4, 0x33, 0xa9, 0x8b, 0xf4, 0x7b, 0x90, 0xe7, 0x9e, 0xfc, 0xf6, 0x3a, - 0xe7, 0x9f, 0x1a, 0x21, 0xb1, 0x09, 0x70, 0x5b, 0x76, 0x54, 0x81, 0x98, 0x57, 0x66, 0x91, 0xa8, - 0x79, 0x1d, 0x89, 0xcc, 0x2b, 0xb7, 0x59, 0xcc, 0xbc, 0x46, 0x55, 0x88, 0x44, 0xd5, 0x10, 0xca, - 0x68, 0x24, 0x51, 0x35, 0x58, 0xa2, 0x07, 0x48, 0x3e, 0x03, 0xa8, 0x3c, 0xad, 0x93, 0x21, 0xaf, - 0xd8, 0xbb, 0xdc, 0x70, 0xd0, 0xf8, 0x8a, 0xf3, 0x22, 0x68, 0x50, 0x15, 0x71, 0x7c, 0xd5, 0x0e, - 0x2b, 0xb5, 0xad, 0x36, 0xcc, 0x6c, 0xe2, 0x90, 0x88, 0x4f, 0x58, 0xd9, 0xc1, 0xdd, 0xff, 0x02, - 0x26, 0x9f, 0xba, 0xe1, 0x89, 0xee, 0xf5, 0xd0, 0xc6, 0x5e, 0xb8, 0xe1, 0x89, 0xf0, 0x7a, 0x94, - 0xc6, 0xd4, 0xea, 0xd6, 0x06, 0x5c, 0xe5, 0xad, 0x49, 0xa3, 0xbe, 0xaa, 0x13, 0xcc, 0x44, 0x6e, - 0x94, 0x4a, 0x50, 0x27, 0x83, 0xe3, 0x56, 0x0e, 0xd5, 0x13, 0x76, 0x8f, 0xb9, 0x80, 0xa6, 0xf0, - 0x02, 0x9d, 0xc2, 0x31, 0x7b, 0x18, 0xb7, 0x82, 0xd6, 0x01, 0x4c, 0xef, 0xb5, 0x7b, 0xc7, 0x6e, - 0x87, 0x68, 0x4a, 0x1d, 0xff, 0x12, 0xad, 0x03, 0x44, 0x00, 0xde, 0x82, 0xd8, 0x53, 0x47, 0x05, - 0x87, 0x6b, 0x7c, 0x88, 0x29, 0x84, 0x1a, 0x2e, 0x5b, 0xc1, 0xb3, 0xfe, 0xf6, 0x08, 0x20, 0xde, - 0x46, 0x3d, 0x74, 0x42, 0x5c, 0xc7, 0x21, 0xb1, 0x91, 0xd7, 0x20, 0x2b, 0x7d, 0xa5, 0xf1, 0xf3, - 0x7e, 0x39, 0xeb, 0xb6, 0xec, 0xec, 0xf6, 0x3a, 0xfa, 0x00, 0xc6, 0x68, 0x35, 0x2a, 0xeb, 0x19, - 0xd9, 0x9e, 0x4a, 0xa1, 0x9a, 0x3f, 0xef, 0x97, 0xc7, 0x02, 0xf2, 0xa7, 0xcd, 0x2a, 0xa3, 0x0f, - 0x21, 0xbf, 0x8e, 0xdb, 0xf8, 0xd8, 0x09, 0x3d, 0xa1, 0x77, 0xcc, 0xfb, 0x10, 0x40, 0x65, 0x88, - 0xa2, 0x9a, 0x64, 0xd5, 0xb2, 0xb1, 0x13, 0x78, 0x1d, 0x75, 0xd5, 0xf2, 0x29, 0x44, 0x5d, 0xb5, - 0x58, 0x1d, 0xf4, 0x0f, 0x32, 0x30, 0x59, 0xe9, 0x74, 0xf8, 0xaa, 0x1e, 0xf0, 0x78, 0xe2, 0xc2, - 0x8a, 0x0c, 0x07, 0xef, 0x38, 0x47, 0xb8, 0x7d, 0x48, 0xfc, 0xc4, 0xa0, 0xfa, 0x3d, 0x31, 0x79, - 0x7f, 0xd4, 0x2f, 0x7f, 0xfe, 0x2a, 0x11, 0xe6, 0x95, 0x7d, 0xdf, 0x71, 0xc3, 0x80, 0x06, 0x6f, - 0xa2, 0x06, 0x55, 0x35, 0x53, 0xf8, 0x40, 0xef, 0xc0, 0x18, 0xd1, 0x6f, 0xb1, 0xf8, 0xd1, 0xc1, - 0x26, 0xf3, 0x40, 0xf3, 0xf8, 0x69, 0x0d, 0xeb, 0x0e, 0xe4, 0xb9, 0x24, 0xb7, 0xd7, 0x4d, 0x43, - 0x60, 0xad, 0xc3, 0x4d, 0xea, 0xba, 0x60, 0xa2, 0xb9, 0x34, 0x84, 0xc1, 0x35, 0x31, 0xf2, 0x75, - 0x27, 0x28, 0x58, 0x62, 0xd3, 0x01, 0xa1, 0x21, 0x10, 0x5b, 0x94, 0x58, 0x35, 0x58, 0xda, 0xc4, - 0xa1, 0x8d, 0x03, 0x1c, 0xee, 0x39, 0x41, 0xf0, 0xc2, 0xf3, 0x5b, 0xb4, 0xe8, 0x52, 0x44, 0xfe, - 0x7a, 0x06, 0xca, 0x35, 0x1f, 0x93, 0x91, 0x36, 0x12, 0x1a, 0x3c, 0x83, 0x97, 0x78, 0x44, 0x3d, - 0x1b, 0x95, 0x12, 0x59, 0xf3, 0xa8, 0xf9, 0xdb, 0x30, 0xb2, 0xbf, 0xbf, 0x43, 0x35, 0x66, 0x84, - 0x0a, 0x6e, 0x24, 0x0c, 0xdb, 0xbf, 0xe9, 0x97, 0x73, 0xeb, 0x3d, 0x16, 0x71, 0xb7, 0x49, 0xb9, - 0xf5, 0x0c, 0x16, 0x6c, 0xdc, 0xc1, 0x2f, 0x9c, 0xa3, 0x36, 0xd6, 0x7c, 0xb4, 0x32, 0x8c, 0xb1, - 0x08, 0x51, 0xa2, 0x0b, 0x0c, 0xae, 0x3b, 0x71, 0xd9, 0x21, 0x4e, 0x9c, 0xf5, 0xfb, 0x19, 0x28, - 0xb0, 0xee, 0x56, 0xbd, 0xf0, 0x62, 0xfd, 0xe3, 0x3d, 0xc8, 0x0e, 0xee, 0x01, 0xba, 0x1b, 0x49, - 0x7b, 0x24, 0x5a, 0x85, 0x28, 0xab, 0xc4, 0x86, 0x8b, 0x42, 0xd2, 0x21, 0xa6, 0x4b, 0x6c, 0x3f, - 0x40, 0x3b, 0x44, 0x75, 0x49, 0x68, 0xd0, 0x1f, 0x66, 0x60, 0x56, 0x61, 0x31, 0xe8, 0x7a, 0x9d, - 0x00, 0x93, 0x8d, 0x0d, 0x51, 0x16, 0x85, 0x4f, 0xba, 0xb1, 0x21, 0x6b, 0x57, 0x23, 0x72, 0x3f, - 0x29, 0xc3, 0xef, 0x10, 0x8f, 0xba, 0x9d, 0xd8, 0x03, 0x51, 0xc3, 0xcd, 0xaa, 0x8a, 0xe2, 0x0b, - 0x33, 0x7d, 0x1f, 0x72, 0xf4, 0x4f, 0x22, 0x88, 0x51, 0xb3, 0x20, 0x64, 0x25, 0xeb, 0x01, 0x14, - 0x88, 0x11, 0xb8, 0xb8, 0x98, 0xad, 0x79, 0x40, 0x9b, 0x38, 0xac, 0x7a, 0x9a, 0x35, 0xb7, 0xa6, - 0x61, 0x72, 0xcf, 0xed, 0x1c, 0x8b, 0xcf, 0xbf, 0x93, 0x85, 0x29, 0xf6, 0xcd, 0xc5, 0x12, 0x5b, - 0xde, 0x32, 0x17, 0x59, 0xde, 0x3e, 0x81, 0x69, 0x1e, 0x58, 0xc0, 0x3e, 0x0d, 0x66, 0x32, 0x21, - 0xd1, 0xbd, 0x0d, 0x8b, 0x2f, 0x34, 0x9e, 0xb3, 0x12, 0x5b, 0xaf, 0x88, 0x76, 0x60, 0x86, 0x01, - 0x1e, 0x62, 0x27, 0xec, 0x45, 0xfe, 0xfd, 0x55, 0xee, 0x90, 0x09, 0x30, 0xb3, 0x10, 0x9c, 0xd6, - 0x33, 0x0e, 0xb4, 0x63, 0xb8, 0xe8, 0x6b, 0xb8, 0xba, 0xe7, 0x7b, 0x3f, 0xbe, 0x54, 0x16, 0x74, - 0x66, 0x24, 0x17, 0xc8, 0x76, 0xa0, 0x4b, 0x8a, 0x1a, 0xea, 0xb2, 0x1e, 0xaf, 0x6d, 0xfd, 0xc1, - 0x08, 0xe4, 0x24, 0xb5, 0x15, 0xd5, 0xeb, 0xe2, 0xcb, 0x1e, 0x9d, 0x08, 0x91, 0x6f, 0x6d, 0x2b, - 0x35, 0xd0, 0x75, 0x16, 0x2b, 0x61, 0x0b, 0xee, 0x04, 0x19, 0x4d, 0xa7, 0xdb, 0xa5, 0x11, 0x11, - 0x62, 0xb6, 0xd6, 0xab, 0xb4, 0x6b, 0x39, 0x66, 0xb6, 0x5a, 0x47, 0x76, 0x76, 0xbd, 0x4a, 0x06, - 0xf0, 0xc9, 0xf6, 0x7a, 0x8d, 0x72, 0x99, 0x63, 0x03, 0xe8, 0xb9, 0xad, 0xa6, 0x4d, 0xa1, 0xa4, - 0xb4, 0x5e, 0x79, 0xbc, 0x43, 0x8d, 0x36, 0x2f, 0x0d, 0x9c, 0xb3, 0xb6, 0x4d, 0xa1, 0xe8, 0x73, - 0xb1, 0xa0, 0xd6, 0xbc, 0x4e, 0xe8, 0x7b, 0xed, 0x80, 0xee, 0x44, 0x73, 0xda, 0xc2, 0xd9, 0xe4, - 0x45, 0x76, 0xac, 0x2a, 0x7a, 0x0a, 0x8b, 0x95, 0xd6, 0x73, 0xa7, 0xd3, 0xc4, 0x2d, 0x56, 0xf2, - 0xd4, 0xf3, 0x4f, 0x9f, 0xb5, 0xbd, 0x17, 0x01, 0xdd, 0x44, 0xe4, 0xf8, 0x76, 0x84, 0x57, 0x69, - 0x70, 0x72, 0x2f, 0x44, 0x25, 0xdb, 0x84, 0x4d, 0x26, 0x63, 0xad, 0xed, 0xf5, 0x5a, 0x74, 0xf7, - 0x90, 0x63, 0x93, 0xb1, 0x49, 0x00, 0x36, 0x83, 0x13, 0x29, 0x6d, 0xd5, 0x1f, 0x53, 0xe7, 0x9f, - 0x4b, 0xe9, 0x24, 0x38, 0xb3, 0x09, 0x0c, 0xbd, 0x0d, 0x13, 0x22, 0xbc, 0xc6, 0xf6, 0x9c, 0x34, - 0x20, 0xc1, 0xa3, 0x67, 0xb6, 0x28, 0xb3, 0xde, 0x87, 0x59, 0x36, 0x13, 0x2e, 0xec, 0x13, 0x59, - 0x7b, 0x00, 0x75, 0x7c, 0xe6, 0x74, 0x4f, 0x3c, 0x32, 0xb0, 0x55, 0xf5, 0x8b, 0x3b, 0x09, 0x48, - 0xc6, 0x91, 0x79, 0xc1, 0xe1, 0x9a, 0xf0, 0x1a, 0x45, 0x4d, 0x5b, 0xc1, 0xb2, 0xfe, 0x53, 0x16, - 0x10, 0x8d, 0xa7, 0xd6, 0x43, 0x1f, 0x3b, 0x67, 0x82, 0x8d, 0x4f, 0x61, 0x8a, 0x59, 0x1a, 0x06, - 0xa6, 0xec, 0x10, 0x0f, 0x84, 0x69, 0xb3, 0x5a, 0xb4, 0x75, 0xc5, 0xd6, 0xaa, 0x12, 0x54, 0x1b, - 0x07, 0xbd, 0x33, 0x81, 0x9a, 0xd5, 0x50, 0xd5, 0x22, 0x82, 0xaa, 0x7e, 0xa3, 0xaf, 0x61, 0xa6, - 0xe6, 0x9d, 0x75, 0x89, 0x4c, 0x38, 0xf2, 0x08, 0x5f, 0xe7, 0x79, 0xbb, 0x5a, 0xe1, 0xd6, 0x15, - 0x3b, 0x56, 0x1d, 0xed, 0xc2, 0xdc, 0xc3, 0x76, 0x2f, 0x38, 0xa9, 0x74, 0x5a, 0xb5, 0xb6, 0x17, - 0x08, 0x2a, 0xa3, 0x7c, 0xaf, 0xcd, 0xe7, 0x62, 0xb2, 0xc6, 0xd6, 0x15, 0x3b, 0x0d, 0x11, 0xbd, - 0xcd, 0x0f, 0x87, 0xb9, 0xbf, 0x31, 0xbd, 0xc2, 0xcf, 0x8e, 0x9f, 0x74, 0xf0, 0x93, 0x67, 0x5b, - 0x57, 0x6c, 0x56, 0x5a, 0xcd, 0xc3, 0x84, 0xb0, 0x43, 0xf7, 0x61, 0x56, 0x11, 0x27, 0xf1, 0x90, - 0x7a, 0x01, 0x2a, 0x41, 0xee, 0xa0, 0xdb, 0xf6, 0x9c, 0x96, 0x58, 0x70, 0x6d, 0xf9, 0x6d, 0xbd, - 0xa7, 0x4b, 0x1a, 0x2d, 0xa9, 0x5e, 0x3f, 0xab, 0x1c, 0x01, 0xac, 0x2d, 0x5d, 0xb8, 0x83, 0x6b, - 0x6b, 0xed, 0x66, 0x63, 0xed, 0x16, 0xe2, 0xb2, 0xb6, 0x16, 0x52, 0x85, 0x67, 0x3d, 0xa2, 0xce, - 0x44, 0xa5, 0xdb, 0x6d, 0xbb, 0x4d, 0x6a, 0xcc, 0x99, 0xb1, 0x92, 0xeb, 0xf0, 0x6f, 0xa9, 0x47, - 0x98, 0xca, 0x02, 0x24, 0x0f, 0x2c, 0x95, 0x43, 0x4a, 0xeb, 0xe7, 0x70, 0xd3, 0x40, 0x8c, 0x9b, - 0xed, 0x4f, 0x61, 0x82, 0x83, 0x62, 0x0a, 0xad, 0x06, 0x7d, 0xe9, 0x7c, 0x0a, 0x38, 0xa6, 0xa8, - 0x6f, 0x7d, 0x07, 0xcb, 0x07, 0xdd, 0x00, 0xfb, 0x49, 0xf2, 0x82, 0xd5, 0x8f, 0xe4, 0x11, 0x69, - 0xc6, 0x18, 0x50, 0x86, 0xf3, 0x7e, 0x79, 0x9c, 0xd1, 0x16, 0x27, 0xa3, 0xd6, 0xaf, 0x32, 0xb0, - 0xcc, 0xa6, 0xaa, 0x91, 0xf4, 0x65, 0xa4, 0xa0, 0x04, 0x2c, 0xb3, 0xe6, 0x80, 0xe5, 0xc0, 0x08, - 0xae, 0xf5, 0x2d, 0x58, 0x9c, 0xa3, 0x76, 0xfb, 0x0d, 0x8d, 0xcd, 0x5f, 0xcd, 0xc0, 0x3c, 0x1b, - 0x9c, 0xd7, 0xa0, 0x82, 0xbe, 0x84, 0x99, 0xfa, 0xa9, 0xdb, 0x3d, 0x74, 0xda, 0x6e, 0x8b, 0xc5, - 0xee, 0xd8, 0x42, 0xb2, 0x40, 0x17, 0xbe, 0x53, 0xb7, 0xdb, 0x78, 0x1e, 0x15, 0x65, 0xec, 0x58, - 0x65, 0xeb, 0x09, 0x2c, 0xc4, 0x78, 0xe0, 0x8a, 0xf1, 0x51, 0x5c, 0x31, 0x12, 0xe7, 0xdb, 0xe9, - 0x5a, 0xf1, 0x18, 0xae, 0x49, 0xad, 0xd0, 0x87, 0x6c, 0x2d, 0xa6, 0x0d, 0x09, 0x82, 0x69, 0xaa, - 0xd0, 0x84, 0x6b, 0x52, 0x13, 0x5e, 0x43, 0x03, 0xc4, 0xe0, 0x66, 0x53, 0x07, 0x77, 0x1b, 0x4a, - 0xea, 0xe0, 0xbe, 0xce, 0xa0, 0xfe, 0xc7, 0x0c, 0x2c, 0x6e, 0xe2, 0x0e, 0xf6, 0x1d, 0xca, 0xb2, - 0xe6, 0xbd, 0xab, 0x71, 0xcb, 0xcc, 0xc0, 0xb8, 0xa5, 0x74, 0x4d, 0xb3, 0xe9, 0xae, 0x29, 0x59, - 0x0d, 0x0f, 0xec, 0x6d, 0xae, 0xab, 0x74, 0x35, 0xec, 0xf9, 0xae, 0x4d, 0x60, 0x68, 0x3b, 0x8a, - 0x79, 0x8e, 0x0e, 0x8d, 0x79, 0xce, 0xf1, 0x68, 0xd5, 0x04, 0x8f, 0x79, 0x6a, 0x91, 0x4e, 0xeb, - 0x73, 0x28, 0x26, 0xfb, 0xc2, 0xf5, 0x63, 0xd8, 0x76, 0xc0, 0x5a, 0x8f, 0xb4, 0x9b, 0x1f, 0x8f, - 0xca, 0x58, 0x6f, 0xcc, 0x84, 0x0e, 0x08, 0xb3, 0x58, 0xf5, 0x48, 0x3f, 0x39, 0x15, 0xde, 0xfe, - 0x67, 0x44, 0x3f, 0xd9, 0x11, 0x78, 0xc6, 0x7c, 0x04, 0xce, 0x75, 0x94, 0xa1, 0x0a, 0x04, 0xeb, - 0x29, 0x5c, 0xd3, 0x88, 0x46, 0x5a, 0xff, 0x25, 0xe4, 0x04, 0x2c, 0x16, 0x05, 0xd0, 0xc8, 0xd2, - 0x71, 0x0b, 0x04, 0xb2, 0x44, 0xb1, 0xfe, 0x24, 0x03, 0x8b, 0x6c, 0x75, 0x49, 0xf6, 0xfb, 0xe2, - 0xa3, 0xff, 0xa7, 0x12, 0x5a, 0x7a, 0x90, 0x12, 0x5a, 0xa2, 0x28, 0x6a, 0x68, 0x49, 0x0d, 0x28, - 0x7d, 0x33, 0x9a, 0xcb, 0x16, 0x46, 0xac, 0x43, 0x28, 0x26, 0x7b, 0xf8, 0x06, 0xc6, 0x64, 0x13, - 0x16, 0x95, 0x89, 0xfe, 0xda, 0x1a, 0x13, 0xb5, 0xf8, 0x06, 0x35, 0x26, 0xaa, 0xf8, 0xc6, 0x34, - 0x66, 0x1b, 0xe6, 0x18, 0x61, 0x7d, 0x76, 0xad, 0xaa, 0xb3, 0x2b, 0xf5, 0x3a, 0x46, 0x72, 0xc2, - 0x3d, 0xa6, 0x13, 0x4e, 0x54, 0x89, 0x38, 0xfc, 0x10, 0xc6, 0xf9, 0x8d, 0x33, 0xc6, 0x5f, 0x0a, - 0x31, 0x6a, 0x79, 0xd9, 0x35, 0x33, 0x9b, 0x57, 0xb6, 0x8a, 0xb4, 0xcb, 0x64, 0x9f, 0xc2, 0x63, - 0xbc, 0x72, 0x2b, 0xf8, 0x2d, 0x31, 0x71, 0xb1, 0x92, 0xd7, 0x5c, 0x35, 0x9e, 0x40, 0x91, 0xad, - 0x1a, 0x0a, 0xd5, 0xd7, 0x5a, 0x37, 0x3e, 0x81, 0x22, 0x53, 0xa7, 0x14, 0x82, 0x83, 0x17, 0x83, - 0x65, 0x58, 0x92, 0x8b, 0x41, 0x5a, 0xef, 0xff, 0x66, 0x06, 0xae, 0x6f, 0xe2, 0x50, 0xbf, 0x94, - 0xf3, 0x67, 0xb2, 0x76, 0x7f, 0x0f, 0xa5, 0x34, 0x46, 0xf8, 0x50, 0x7c, 0x15, 0x1f, 0x0a, 0xe3, - 0x0d, 0xa4, 0xf4, 0x21, 0xf9, 0x39, 0xdc, 0x60, 0x43, 0xa2, 0xd7, 0x17, 0x1d, 0xfd, 0x3c, 0x36, - 0x2a, 0x46, 0xea, 0x69, 0xa3, 0xf3, 0xf7, 0x32, 0x70, 0x83, 0x09, 0x39, 0x9d, 0xf8, 0x9f, 0xb6, - 0x77, 0xb7, 0x0b, 0x65, 0x39, 0xe6, 0x6f, 0x60, 0x60, 0xad, 0x26, 0x20, 0x41, 0xa6, 0x56, 0xb7, - 0x05, 0x89, 0xeb, 0x30, 0x52, 0xab, 0xdb, 0xfc, 0x7c, 0x93, 0x2e, 0xda, 0xcd, 0xc0, 0xb7, 0x09, - 0x2c, 0x6e, 0xc1, 0xb3, 0x17, 0xb0, 0xe0, 0xd6, 0x2f, 0x60, 0x4e, 0x6b, 0x84, 0x8f, 0xfb, 0x12, - 0x8c, 0xd6, 0xb0, 0x1f, 0xf2, 0x66, 0x68, 0x4f, 0x9b, 0xd8, 0x0f, 0x6d, 0x0a, 0x45, 0x77, 0x61, - 0xa2, 0x56, 0xa1, 0x71, 0x3d, 0xea, 0x5b, 0x4c, 0x31, 0xc3, 0xd4, 0x74, 0x1a, 0xf4, 0xa2, 0xb2, - 0x2d, 0x0a, 0xad, 0x7f, 0x97, 0x51, 0xa8, 0x13, 0xf4, 0xe1, 0x7d, 0x78, 0x9f, 0x6c, 0x8f, 0x89, - 0xcc, 0x94, 0x2e, 0xcc, 0x92, 0x65, 0x8b, 0x87, 0x5f, 0xd8, 0xca, 0x67, 0x2b, 0x95, 0x2e, 0x18, - 0x93, 0x14, 0x87, 0x51, 0x0c, 0x49, 0xc4, 0xeb, 0xe4, 0x61, 0x14, 0x27, 0x1d, 0xd8, 0x6a, 0x25, - 0xeb, 0x7b, 0x98, 0xd7, 0xf9, 0x7f, 0xa3, 0xe2, 0x79, 0x8b, 0x1e, 0xae, 0x28, 0x67, 0x71, 0x08, - 0xa9, 0x81, 0x04, 0xae, 0x56, 0x1f, 0x43, 0x81, 0xd7, 0x8a, 0xa6, 0xe5, 0x1d, 0xe1, 0xda, 0xb1, - 0x49, 0xa9, 0xdf, 0x5d, 0x15, 0x91, 0xc7, 0x9f, 0x89, 0x50, 0xc5, 0xb0, 0x16, 0xfe, 0x4d, 0x06, - 0x8a, 0x8f, 0x1f, 0x56, 0x2a, 0xbd, 0xf0, 0x04, 0x77, 0x42, 0xb2, 0x29, 0xc1, 0xb5, 0x13, 0xa7, - 0xdd, 0xc6, 0x9d, 0x63, 0x2a, 0xdd, 0x83, 0xd5, 0x87, 0x72, 0x55, 0xe2, 0xa7, 0x9f, 0xab, 0x0f, - 0x65, 0x0d, 0x9b, 0x94, 0xa3, 0x7b, 0x30, 0xba, 0xff, 0x64, 0x7f, 0x8f, 0x07, 0x0e, 0xe6, 0x79, - 0x3d, 0x02, 0x8a, 0x2a, 0xd2, 0x1a, 0xe8, 0x11, 0xcc, 0x3e, 0xe5, 0x97, 0xca, 0x65, 0x11, 0x0f, - 0x19, 0xdc, 0x5c, 0x91, 0xd7, 0xcd, 0x6b, 0x3e, 0x6e, 0x11, 0x66, 0x9c, 0x76, 0x25, 0x20, 0xf6, - 0x83, 0x0c, 0x63, 0x12, 0xcf, 0xfa, 0xb7, 0x19, 0x58, 0x8c, 0xb1, 0x2e, 0x85, 0x74, 0x57, 0x70, - 0xce, 0x76, 0x8d, 0x92, 0x73, 0x51, 0x61, 0xeb, 0x0a, 0x63, 0xfd, 0x1d, 0x8d, 0xf5, 0x39, 0x85, - 0x75, 0xa5, 0x26, 0xe3, 0xbd, 0x46, 0xef, 0x38, 0x52, 0x1e, 0x38, 0xcb, 0x6f, 0x0f, 0x66, 0x39, - 0x22, 0x20, 0x11, 0xf9, 0x0d, 0x25, 0x0a, 0xb7, 0xfe, 0x02, 0x4c, 0xa9, 0xb2, 0x44, 0x4b, 0x90, - 0x7f, 0x84, 0x5f, 0x6e, 0x39, 0x9d, 0x56, 0x5b, 0x8c, 0x51, 0x04, 0x20, 0xa5, 0x91, 0xc8, 0x58, - 0x6c, 0x20, 0x02, 0xa0, 0x79, 0x18, 0xab, 0x74, 0xbb, 0x22, 0xf6, 0x6b, 0xb3, 0x0f, 0x54, 0x84, - 0x09, 0x11, 0x18, 0xa5, 0x2e, 0x9d, 0x2d, 0x3e, 0x2d, 0x17, 0x26, 0x15, 0x69, 0x0c, 0x69, 0x7a, - 0x19, 0xa0, 0xd6, 0x76, 0x71, 0x87, 0x1a, 0x72, 0xde, 0xb6, 0x02, 0xa1, 0x31, 0x0d, 0xf7, 0xb8, - 0x43, 0xa3, 0x97, 0x9c, 0x81, 0x08, 0x60, 0x5d, 0x85, 0x69, 0x4d, 0x15, 0x2c, 0x0b, 0xa6, 0x54, - 0x01, 0x13, 0xb5, 0xac, 0x79, 0x2d, 0xa9, 0x96, 0xe4, 0x6f, 0xeb, 0x0f, 0x33, 0x30, 0xff, 0xf8, - 0x61, 0xc5, 0xc6, 0xc7, 0x2e, 0x31, 0x57, 0x51, 0x47, 0xef, 0xab, 0x03, 0x7b, 0x43, 0x1d, 0xd8, - 0x58, 0x4d, 0x31, 0xc2, 0xab, 0xda, 0x08, 0x2f, 0x69, 0x23, 0x9c, 0x44, 0x61, 0x43, 0xfd, 0x59, - 0x62, 0xa8, 0x97, 0xd2, 0x86, 0x9a, 0xba, 0xb1, 0xae, 0xd7, 0xd1, 0x46, 0x58, 0x09, 0x2d, 0xfd, - 0x94, 0x81, 0x39, 0xa5, 0x13, 0xb2, 0xc3, 0x2b, 0x6a, 0x1f, 0x4a, 0xc9, 0x3e, 0xc4, 0x95, 0xf4, - 0x7d, 0xad, 0x0b, 0x37, 0x52, 0xba, 0x90, 0x50, 0xd6, 0x6a, 0xa2, 0x07, 0x6f, 0x0d, 0xea, 0xc1, - 0x50, 0x5d, 0x6d, 0xc1, 0x7c, 0x9a, 0x90, 0x75, 0xad, 0xcc, 0x18, 0xb5, 0x32, 0x6b, 0xd0, 0xca, - 0x11, 0x5d, 0x2b, 0x1d, 0x98, 0x4b, 0x11, 0x03, 0x7a, 0x17, 0x0a, 0x0c, 0xc6, 0x4c, 0x3a, 0x3f, - 0x61, 0x25, 0x98, 0x09, 0xf8, 0x30, 0x5d, 0xb5, 0xfe, 0x6b, 0x06, 0x16, 0x52, 0x07, 0x1f, 0x5d, - 0x23, 0xfe, 0x48, 0xd3, 0xc7, 0x21, 0xa7, 0xcd, 0xbf, 0x08, 0x7c, 0x3b, 0x08, 0x7a, 0xfc, 0x91, - 0x48, 0xde, 0xe6, 0x5f, 0xe8, 0x2d, 0x98, 0xde, 0xc3, 0xbe, 0xeb, 0xb5, 0xea, 0xb8, 0xe9, 0x75, - 0x5a, 0xec, 0x00, 0x61, 0xda, 0xd6, 0x81, 0x44, 0x40, 0x95, 0xf6, 0xb1, 0xe7, 0xbb, 0xe1, 0xc9, - 0x19, 0x9f, 0x84, 0x11, 0x80, 0xd0, 0x5e, 0x77, 0x8f, 0xdd, 0x90, 0x9d, 0x8f, 0x4e, 0xdb, 0xfc, - 0x8b, 0x88, 0xa8, 0xd2, 0x6c, 0x7a, 0xbd, 0x4e, 0x48, 0x63, 0xeb, 0x79, 0x5b, 0x7c, 0x12, 0x8c, - 0x6f, 0x6d, 0x3a, 0x5d, 0xe8, 0x35, 0x2e, 0x9b, 0x7f, 0x59, 0xef, 0xc2, 0x7c, 0x9a, 0x42, 0xa4, - 0x4e, 0xae, 0xbf, 0x9c, 0x85, 0xb9, 0x4a, 0xab, 0xf5, 0xf8, 0x61, 0x65, 0x1d, 0xab, 0x6e, 0xed, - 0x07, 0x30, 0xba, 0xdd, 0x71, 0x43, 0xae, 0x98, 0xcb, 0x5c, 0xcf, 0x52, 0x6a, 0x92, 0x5a, 0x44, - 0xd5, 0xc8, 0xff, 0xc8, 0x86, 0xb9, 0x8d, 0x1f, 0xdd, 0x20, 0x74, 0x3b, 0xc7, 0x54, 0xd9, 0x59, - 0xc3, 0x5c, 0x59, 0x05, 0x11, 0x83, 0x9d, 0xde, 0xba, 0x62, 0xa7, 0x21, 0xa3, 0x7d, 0xb8, 0xb6, - 0x8b, 0x5f, 0xa4, 0xcc, 0x1d, 0x79, 0x0b, 0x4b, 0x92, 0x4d, 0x99, 0x02, 0x06, 0x5c, 0x75, 0x6a, - 0xfe, 0x8d, 0x2c, 0xbd, 0xda, 0xa7, 0x74, 0x8c, 0xb7, 0x7c, 0x00, 0xf3, 0x0a, 0x43, 0xba, 0x6e, - 0x4f, 0xae, 0x96, 0xd3, 0xbb, 0xa3, 0x5a, 0x90, 0x54, 0x74, 0xf4, 0x14, 0x16, 0x75, 0xa6, 0x74, - 0x5b, 0x1e, 0xcd, 0xea, 0xb4, 0x2a, 0x5b, 0x57, 0x6c, 0x13, 0x36, 0x5a, 0x85, 0x91, 0x4a, 0xf3, - 0x94, 0x8b, 0x25, 0x7d, 0xc8, 0x58, 0xcf, 0x2a, 0xcd, 0x53, 0x7a, 0x4d, 0xb6, 0x79, 0xaa, 0x4d, - 0xec, 0xff, 0x93, 0x81, 0x45, 0xc3, 0x08, 0xa3, 0x3a, 0xc0, 0x0e, 0x3e, 0x76, 0x9a, 0x2f, 0xe5, - 0xa1, 0xf0, 0xcc, 0xea, 0xfd, 0xc1, 0x5a, 0xb1, 0xc2, 0x10, 0x18, 0x9c, 0xa0, 0x55, 0xb3, 0xc4, - 0x63, 0x8b, 0xc8, 0x90, 0x09, 0xca, 0x4a, 0x15, 0x57, 0x44, 0x81, 0x10, 0x27, 0x30, 0xc2, 0xa6, - 0xfd, 0x9a, 0x91, 0xb7, 0xa4, 0xa2, 0x02, 0x5b, 0xa9, 0x64, 0xad, 0x41, 0x21, 0xde, 0x2c, 0xca, - 0x31, 0x9b, 0xc9, 0x2e, 0x33, 0x1d, 0xac, 0x3e, 0x2c, 0x64, 0xd0, 0x54, 0x64, 0x13, 0x0b, 0x59, - 0xab, 0x16, 0xef, 0xb7, 0x14, 0x13, 0xba, 0x07, 0xe3, 0x0c, 0xc8, 0x47, 0x5d, 0x3c, 0xf0, 0x89, - 0x2a, 0xf3, 0x72, 0xeb, 0xf7, 0x33, 0x22, 0xba, 0x98, 0x98, 0x4c, 0x1f, 0x6b, 0x93, 0xe9, 0xb6, - 0xec, 0x41, 0x5a, 0x65, 0x6d, 0x3e, 0x55, 0x61, 0xf2, 0x55, 0xe6, 0x91, 0x8a, 0xa4, 0x6a, 0xfa, - 0x3f, 0xcd, 0x88, 0xb8, 0x48, 0x52, 0xd9, 0x37, 0x60, 0xea, 0xd5, 0x94, 0x5c, 0x43, 0x43, 0x1f, - 0x32, 0x1d, 0xcc, 0x0e, 0xee, 0xe9, 0x40, 0x35, 0xfc, 0x42, 0x04, 0x50, 0x53, 0x15, 0x71, 0x88, - 0xce, 0x58, 0x4b, 0x29, 0xd8, 0xb2, 0x39, 0xab, 0x97, 0x28, 0xad, 0xbf, 0xec, 0x34, 0xc5, 0x38, - 0xdd, 0x8d, 0x5f, 0xad, 0x30, 0x9e, 0x9b, 0xab, 0x3c, 0x64, 0xa3, 0x98, 0x5a, 0x0b, 0x47, 0xb7, - 0xd9, 0x54, 0xa6, 0xce, 0x63, 0x33, 0xeb, 0x55, 0x1a, 0xad, 0xc1, 0xf4, 0x2e, 0x7e, 0x91, 0x68, - 0x97, 0x9e, 0x91, 0x76, 0xf0, 0x8b, 0x86, 0xd2, 0xb6, 0x72, 0x7f, 0x45, 0xc7, 0x41, 0x47, 0x30, - 0x23, 0xac, 0xc7, 0x45, 0x8d, 0x28, 0xbb, 0x5c, 0x4a, 0x5a, 0x38, 0x7b, 0xe6, 0x34, 0x7c, 0x0e, - 0x55, 0x6f, 0x85, 0xea, 0x14, 0xad, 0x3d, 0x28, 0x26, 0xfb, 0xca, 0xb5, 0xec, 0x83, 0x61, 0xd3, - 0x89, 0xed, 0xf0, 0x5b, 0xfa, 0xd4, 0xda, 0xa2, 0xc1, 0x28, 0x59, 0x47, 0x6e, 0xa3, 0x1f, 0xc4, - 0x45, 0x47, 0x2f, 0xf1, 0x09, 0xd1, 0xa9, 0xb7, 0xd7, 0xa3, 0xcb, 0x35, 0x0b, 0x31, 0x4a, 0xd2, - 0xaf, 0x98, 0xe0, 0x20, 0xf9, 0x2a, 0x20, 0x3e, 0xd1, 0x45, 0x05, 0xeb, 0x1f, 0x66, 0xe0, 0xfa, - 0x41, 0x80, 0xfd, 0xba, 0xdb, 0x39, 0x6e, 0xe3, 0x83, 0x40, 0xbf, 0xda, 0xf2, 0xdb, 0xda, 0x64, - 0x5f, 0x34, 0xdc, 0x13, 0xfd, 0xff, 0x35, 0xc5, 0xff, 0x49, 0x06, 0x4a, 0x69, 0xbc, 0xbd, 0xd9, - 0x59, 0xbe, 0xc2, 0xf7, 0xbd, 0x8c, 0xdb, 0x22, 0x47, 0x97, 0x6d, 0x8a, 0xce, 0x92, 0x4e, 0x92, - 0xff, 0xb5, 0xe9, 0xfd, 0x2f, 0x33, 0x30, 0xbf, 0x1d, 0x50, 0xf6, 0x7f, 0xd9, 0x73, 0x7d, 0xdc, - 0x12, 0x82, 0x5b, 0x49, 0xbb, 0x4d, 0x4c, 0xc7, 0x75, 0xeb, 0x4a, 0xda, 0x6d, 0xe1, 0x0f, 0x94, - 0x3b, 0x9c, 0xd9, 0x41, 0xd7, 0x84, 0xb5, 0xa7, 0x29, 0x77, 0x61, 0x74, 0x97, 0x38, 0x41, 0x23, - 0x5c, 0xff, 0x18, 0x06, 0x01, 0xed, 0x78, 0xc7, 0x2e, 0xf1, 0xdf, 0x69, 0x79, 0x35, 0x07, 0xe3, - 0xfb, 0x8e, 0x7f, 0x8c, 0x43, 0xeb, 0xe7, 0x50, 0xe2, 0x07, 0xc2, 0x2c, 0xce, 0x4a, 0x8f, 0x8d, - 0x83, 0x28, 0xfe, 0x37, 0xe8, 0x10, 0x77, 0x19, 0xa0, 0x1e, 0x3a, 0x7e, 0xb8, 0xdd, 0x69, 0xe1, - 0x1f, 0x29, 0x97, 0x63, 0xb6, 0x02, 0xb1, 0x3e, 0x84, 0xbc, 0x6c, 0x9a, 0xee, 0xc9, 0x15, 0xff, - 0x8c, 0xfc, 0x4d, 0xdc, 0x66, 0x5a, 0x28, 0xdc, 0x66, 0xfa, 0x61, 0xad, 0xc1, 0x42, 0x4c, 0x84, - 0x7c, 0x7c, 0x4b, 0x44, 0xd0, 0x0c, 0xc6, 0x2e, 0x8b, 0xd8, 0xf2, 0xdb, 0xaa, 0xc1, 0x6c, 0x62, - 0x84, 0x10, 0xa2, 0xd7, 0x7b, 0x59, 0x00, 0x83, 0x18, 0xe3, 0x7a, 0x7d, 0x8b, 0xc0, 0xf6, 0x77, - 0xea, 0xec, 0xd6, 0x15, 0x81, 0xed, 0xef, 0xd4, 0xab, 0xe3, 0x6c, 0xc4, 0xad, 0x7f, 0x9e, 0xa5, - 0x61, 0x88, 0x84, 0x0c, 0x62, 0xe1, 0x2c, 0x35, 0xa4, 0x56, 0x85, 0x3c, 0xed, 0xf1, 0xba, 0xb8, - 0x9d, 0x38, 0xf8, 0x14, 0x29, 0xf7, 0x53, 0xbf, 0x7c, 0x85, 0x1e, 0x1d, 0x45, 0x68, 0xe8, 0x2b, - 0x98, 0xd8, 0xe8, 0xb4, 0x28, 0x85, 0x91, 0x4b, 0x50, 0x10, 0x48, 0x64, 0x1c, 0x28, 0xcb, 0xc4, - 0x1f, 0xe0, 0x31, 0x1f, 0x5b, 0x81, 0x50, 0x31, 0xbb, 0x67, 0x2e, 0xbb, 0x2b, 0x30, 0x66, 0xb3, - 0x0f, 0x22, 0x4d, 0xca, 0x82, 0x78, 0x61, 0x91, 0xb7, 0xe5, 0x37, 0xb2, 0x60, 0xec, 0x89, 0xdf, - 0xe2, 0xf7, 0xdd, 0x67, 0x56, 0xa7, 0xc4, 0x93, 0x73, 0x02, 0xb3, 0x59, 0x91, 0xf5, 0xbf, 0xe8, - 0xf9, 0x5d, 0x98, 0xaa, 0x37, 0x9a, 0x54, 0x32, 0xaf, 0x2d, 0x95, 0xec, 0xab, 0x48, 0x45, 0xf6, - 0x7a, 0xc4, 0xd4, 0xeb, 0x51, 0x53, 0xaf, 0xc7, 0xcc, 0xbd, 0xde, 0x84, 0x71, 0xd6, 0x55, 0x74, - 0x07, 0xc6, 0xb6, 0x43, 0x7c, 0x16, 0x85, 0xa7, 0xd4, 0x1b, 0x18, 0x36, 0x2b, 0x23, 0xfb, 0x9b, - 0x1d, 0x27, 0x08, 0xc5, 0x3d, 0xbf, 0xbc, 0x2d, 0x3e, 0xad, 0x3f, 0xca, 0x40, 0x61, 0xc7, 0x0d, - 0x42, 0x32, 0x11, 0x2e, 0xa8, 0x6b, 0xb2, 0x47, 0x59, 0x53, 0x8f, 0x46, 0x62, 0x3d, 0xfa, 0x1c, - 0xc6, 0xe9, 0xf5, 0xd3, 0x80, 0xbf, 0xa6, 0xba, 0xc3, 0xbb, 0x14, 0x6f, 0x98, 0x5d, 0x52, 0x0d, - 0xe8, 0xab, 0x27, 0x9b, 0xa3, 0x94, 0x3e, 0x85, 0x49, 0x05, 0x7c, 0xa9, 0xc7, 0x50, 0xdf, 0xc1, - 0xac, 0xd2, 0x84, 0xbc, 0x0e, 0x38, 0xe4, 0xc4, 0x43, 0x46, 0xd4, 0x89, 0xd8, 0x76, 0xf1, 0x8f, - 0xaa, 0xd8, 0xf8, 0xa7, 0xf5, 0x03, 0xbd, 0x3d, 0xbd, 0xe3, 0x35, 0x4f, 0x95, 0x78, 0xf3, 0x04, - 0x33, 0x66, 0xf1, 0x63, 0x1b, 0x52, 0x8b, 0x95, 0xd8, 0xa2, 0x06, 0xba, 0x05, 0x93, 0xdb, 0x9d, - 0x87, 0x9e, 0xdf, 0xc4, 0x4f, 0x3a, 0x6d, 0x46, 0x3d, 0x67, 0xab, 0x20, 0x1e, 0x8a, 0xe4, 0x2d, - 0x44, 0xa1, 0x48, 0x0a, 0x88, 0x85, 0x22, 0xd9, 0x63, 0x4e, 0x9b, 0x95, 0xf1, 0x48, 0x27, 0xf9, - 0x7b, 0x50, 0x1c, 0x52, 0x06, 0x2c, 0x87, 0x55, 0x3c, 0x82, 0xeb, 0x36, 0xee, 0xb6, 0x1d, 0xe2, - 0xe3, 0x9d, 0x79, 0xac, 0xbe, 0xec, 0xf3, 0xad, 0x94, 0x3b, 0x84, 0xfa, 0xa9, 0xa5, 0x64, 0x39, - 0x3b, 0x80, 0xe5, 0x33, 0xb8, 0xbd, 0x89, 0xc3, 0xd4, 0x17, 0x99, 0x51, 0xe7, 0xb7, 0x20, 0xc7, - 0x5f, 0x32, 0x88, 0xfe, 0x0f, 0x7b, 0x0c, 0xca, 0x8f, 0xf0, 0x38, 0x1d, 0xf9, 0x97, 0x55, 0x15, - 0x57, 0x43, 0x52, 0x11, 0x2f, 0x76, 0xd1, 0xac, 0x41, 0x8f, 0x72, 0x74, 0x02, 0x11, 0xaf, 0x15, - 0xc8, 0x09, 0x58, 0xec, 0x2c, 0x27, 0xf1, 0x80, 0x94, 0x32, 0xd9, 0x12, 0x04, 0x24, 0x9a, 0xf5, - 0x09, 0x14, 0x13, 0x0d, 0x5c, 0x8c, 0xb5, 0xcf, 0xc5, 0x51, 0xcd, 0xab, 0x20, 0x7b, 0x70, 0x5d, - 0x47, 0x53, 0xcf, 0x12, 0x0a, 0xca, 0x59, 0x02, 0x3b, 0x42, 0x20, 0x0a, 0x60, 0xef, 0x6c, 0x74, - 0x5a, 0x5d, 0xcf, 0xed, 0x84, 0x7c, 0x96, 0xa8, 0x20, 0xb4, 0xac, 0x9e, 0x18, 0x4c, 0x25, 0xaf, - 0x2f, 0x3f, 0x80, 0x52, 0x5a, 0x83, 0x4a, 0x38, 0x45, 0x06, 0xff, 0x99, 0xa3, 0x63, 0x9d, 0xc0, - 0xbc, 0x96, 0xa7, 0x23, 0x4a, 0x3c, 0x10, 0xe5, 0x27, 0xc9, 0x57, 0xbf, 0xf8, 0x4d, 0xbf, 0xfc, - 0xc9, 0x65, 0x5e, 0x23, 0x0a, 0x9a, 0xfb, 0xf2, 0x06, 0xb6, 0xb5, 0x08, 0x23, 0x35, 0x7b, 0x87, - 0x76, 0xdb, 0xde, 0x91, 0xdd, 0xb6, 0x77, 0xac, 0xdf, 0x64, 0xa0, 0x5c, 0x3b, 0x71, 0x3a, 0xc7, - 0x74, 0x91, 0x57, 0xfc, 0x39, 0xe5, 0x10, 0xfc, 0xa2, 0x7b, 0x8e, 0x55, 0x98, 0xdc, 0xc5, 0x2f, - 0xc4, 0xed, 0x71, 0x7e, 0x0f, 0x9b, 0x9e, 0x95, 0x90, 0xfd, 0x40, 0x97, 0xc3, 0x6d, 0xb5, 0x12, - 0xfa, 0x8b, 0xaf, 0x1e, 0xaf, 0x61, 0xaf, 0xf5, 0xa3, 0xad, 0x06, 0x2b, 0x4d, 0xdb, 0x73, 0x18, - 0x9a, 0xb0, 0xfe, 0x55, 0x06, 0x6e, 0x99, 0x3b, 0xcf, 0x07, 0x6e, 0x5d, 0xcb, 0x79, 0x30, 0xe0, - 0xf8, 0x9e, 0xee, 0xe9, 0x94, 0x9c, 0x07, 0xf1, 0x3c, 0x07, 0x36, 0x6e, 0x7a, 0xcf, 0xb1, 0xff, - 0x32, 0x76, 0xda, 0x21, 0xc0, 0x35, 0x62, 0xdb, 0x45, 0xc6, 0x18, 0x06, 0xd2, 0x9e, 0x39, 0x72, - 0x98, 0xf5, 0x1f, 0x32, 0x70, 0x83, 0xae, 0x47, 0x3c, 0xb0, 0x27, 0x0a, 0x2e, 0x7f, 0xd9, 0xe3, - 0x43, 0x98, 0x52, 0x1b, 0xe7, 0x03, 0x46, 0x1f, 0x49, 0x0b, 0x0e, 0x1a, 0x4d, 0xaf, 0x85, 0x6d, - 0xad, 0x1a, 0xda, 0x86, 0x49, 0xfe, 0xad, 0x04, 0x5a, 0x16, 0x94, 0x0c, 0x2a, 0x54, 0x1f, 0xd8, - 0xab, 0x36, 0x3a, 0xfa, 0x9c, 0x58, 0x83, 0xbe, 0x08, 0x50, 0x71, 0xad, 0x5f, 0x67, 0x61, 0xe9, - 0x10, 0xfb, 0xee, 0xb3, 0x97, 0x86, 0xce, 0x3c, 0x81, 0x79, 0x01, 0xa2, 0x7d, 0xd6, 0xf5, 0x90, - 0x3d, 0x57, 0x13, 0xac, 0x06, 0xa4, 0x42, 0x43, 0xaa, 0x65, 0x2a, 0xe2, 0x25, 0x1e, 0x70, 0x7e, - 0x00, 0x39, 0xa9, 0xca, 0x23, 0x54, 0x32, 0x74, 0x6c, 0x84, 0x1a, 0xeb, 0x6f, 0xd9, 0xa5, 0x3e, - 0xff, 0x35, 0xf3, 0xd1, 0x12, 0xbf, 0x13, 0x35, 0x64, 0xb7, 0xc6, 0xb4, 0x9a, 0x68, 0xb4, 0xa3, - 0x94, 0xa6, 0x68, 0xf5, 0xd6, 0x15, 0xdb, 0xd4, 0x52, 0x75, 0x12, 0xf2, 0x15, 0x7a, 0xe4, 0x45, - 0x3c, 0xf9, 0xff, 0x9d, 0x85, 0x65, 0x71, 0xff, 0xd3, 0x20, 0xe6, 0xef, 0x60, 0x51, 0x80, 0x2a, - 0xdd, 0xae, 0xef, 0x3d, 0xc7, 0x2d, 0x5d, 0xd2, 0xec, 0xc9, 0xa8, 0x90, 0xb4, 0xc3, 0xeb, 0x44, - 0xc2, 0x36, 0xa1, 0xbf, 0x99, 0x38, 0xc4, 0x57, 0xba, 0x61, 0x61, 0xa3, 0x41, 0xdf, 0x87, 0xa9, - 0x86, 0x45, 0x4f, 0xf6, 0xa3, 0x1a, 0x99, 0x56, 0x22, 0x8e, 0x31, 0xfa, 0xba, 0x71, 0x8c, 0xad, - 0x2b, 0xf1, 0x48, 0x46, 0x75, 0x06, 0xa6, 0x76, 0xf1, 0x8b, 0x48, 0xee, 0xbf, 0x97, 0x81, 0x69, - 0x6d, 0x72, 0xa3, 0x77, 0x60, 0x8c, 0xfe, 0x41, 0x57, 0x52, 0xfe, 0x84, 0x88, 0x4c, 0x30, 0xed, - 0x09, 0x11, 0xab, 0xba, 0x0d, 0x13, 0xec, 0xae, 0x53, 0xeb, 0x02, 0xce, 0xba, 0xbc, 0x4a, 0xd7, - 0x64, 0x28, 0xcc, 0x6f, 0xe7, 0xf8, 0xd6, 0x23, 0xb8, 0xcd, 0xaf, 0x4d, 0xe9, 0x83, 0x5f, 0x53, - 0x1d, 0xe5, 0x0b, 0xda, 0x78, 0xcb, 0x81, 0xe5, 0x4d, 0x1c, 0x37, 0x3d, 0xda, 0x55, 0xc3, 0xaf, - 0xe1, 0xaa, 0x06, 0x97, 0x14, 0xe9, 0x8b, 0x06, 0xa9, 0x43, 0x92, 0x74, 0xbc, 0xb6, 0x75, 0x2b, - 0xad, 0x09, 0x95, 0x59, 0x0b, 0xc3, 0x55, 0xba, 0x25, 0x95, 0xa7, 0x51, 0xc1, 0x25, 0xac, 0xde, - 0x3d, 0x65, 0x5e, 0x33, 0x8b, 0xc7, 0x9e, 0x8a, 0x8a, 0xe5, 0x49, 0x96, 0x5a, 0xff, 0x33, 0x03, - 0x16, 0x97, 0x5c, 0x5a, 0x9c, 0x43, 0x74, 0xf8, 0x28, 0xc1, 0x0d, 0x5f, 0x25, 0xae, 0xa9, 0xd1, - 0x9c, 0xa8, 0x94, 0xa9, 0x16, 0x7d, 0xb4, 0xd3, 0x8c, 0xa0, 0x9a, 0x6a, 0x25, 0xba, 0xf7, 0x0b, - 0x83, 0x1d, 0x64, 0xb3, 0x89, 0xe6, 0x0a, 0x31, 0xd8, 0x41, 0x8d, 0x6e, 0x2a, 0x11, 0x35, 0x20, - 0xf4, 0xf7, 0x33, 0x70, 0x83, 0x75, 0x79, 0xcf, 0x77, 0x9f, 0xbb, 0x6d, 0x7c, 0x8c, 0xb5, 0xc1, - 0xed, 0xa5, 0x1f, 0xd9, 0x64, 0x2e, 0x64, 0xd9, 0x68, 0xda, 0x03, 0xcc, 0xd1, 0x4d, 0xf1, 0xc1, - 0x34, 0xfa, 0xd6, 0xdf, 0xcd, 0xc0, 0xb2, 0x78, 0xa0, 0x16, 0x3b, 0xc7, 0xb8, 0xac, 0x93, 0x52, - 0xd5, 0x4e, 0x09, 0xb2, 0x86, 0x53, 0x02, 0x2d, 0x40, 0x1b, 0xc6, 0x8f, 0x0d, 0xfe, 0x20, 0x0b, - 0xb3, 0x7b, 0xce, 0xb1, 0xdb, 0x21, 0xf3, 0x4b, 0xe4, 0x0d, 0x41, 0x95, 0x44, 0xfa, 0xa5, 0xc1, - 0xd7, 0x93, 0x52, 0xf2, 0x2b, 0xad, 0xaa, 0x99, 0x50, 0xb2, 0xa6, 0x8b, 0xeb, 0x7a, 0xbe, 0x93, - 0x4f, 0xb5, 0x10, 0x55, 0xe2, 0x86, 0x1a, 0x7d, 0xd1, 0xd4, 0xf1, 0x5a, 0xb1, 0x94, 0x64, 0x34, - 0x5c, 0xf4, 0x04, 0x26, 0x95, 0x6b, 0x66, 0xdc, 0x28, 0x26, 0x28, 0x50, 0x43, 0x7b, 0xda, 0x3b, - 0xc2, 0xa9, 0xe9, 0x67, 0x54, 0x0a, 0x55, 0x80, 0x9c, 0xc8, 0x76, 0x67, 0xfd, 0xe3, 0x51, 0x98, - 0x27, 0x7b, 0x56, 0x21, 0x9f, 0x20, 0x32, 0x10, 0x53, 0x02, 0xa6, 0x78, 0xb9, 0x7c, 0x2d, 0x67, - 0xf0, 0x46, 0x2c, 0xf9, 0x9e, 0x86, 0x80, 0x3e, 0x54, 0x37, 0xf5, 0x59, 0xe5, 0x49, 0x7e, 0x32, - 0x6f, 0x9a, 0xba, 0xdb, 0x7f, 0x47, 0x8b, 0x5f, 0x30, 0xeb, 0xdb, 0x26, 0x00, 0xd5, 0xfa, 0xb2, - 0x10, 0xc0, 0x5a, 0x3c, 0xa8, 0xc1, 0x1a, 0x60, 0x33, 0xeb, 0x14, 0x6b, 0x8e, 0x99, 0x8c, 0x0d, - 0x1c, 0xc8, 0xd8, 0xc0, 0x18, 0xdd, 0x28, 0xfd, 0x4c, 0x89, 0x0d, 0xc4, 0x85, 0xa0, 0xc6, 0x07, - 0xd8, 0x7b, 0xd8, 0x36, 0x05, 0xa8, 0xef, 0x61, 0x59, 0x15, 0xb4, 0x0f, 0x73, 0x7b, 0x3e, 0x6e, - 0xd1, 0xa9, 0xb4, 0xf1, 0x63, 0xd7, 0xe7, 0x8e, 0x28, 0x8d, 0x30, 0xb1, 0xfc, 0x44, 0x5d, 0x51, - 0xdc, 0xc0, 0xb2, 0x5c, 0x9d, 0x51, 0x29, 0xe8, 0x68, 0x03, 0x66, 0xea, 0xd8, 0xf1, 0x9b, 0x27, - 0x8f, 0xf0, 0x4b, 0x62, 0xec, 0x82, 0xe2, 0x44, 0x94, 0xd3, 0x21, 0xa0, 0x25, 0xa4, 0xa3, 0xb4, - 0x48, 0x8d, 0xde, 0xeb, 0x48, 0xaf, 0x13, 0xd2, 0xf8, 0x47, 0x19, 0x58, 0x88, 0x89, 0x86, 0x7b, - 0xdc, 0x4f, 0x20, 0x2f, 0x81, 0x7c, 0xd3, 0x29, 0x82, 0xc6, 0x89, 0x59, 0xc7, 0x06, 0x46, 0xe8, - 0x8d, 0xca, 0x6a, 0x44, 0x03, 0x3d, 0x88, 0x45, 0x3f, 0x98, 0x27, 0xd7, 0xc1, 0x3f, 0xc6, 0x07, - 0x53, 0x46, 0x45, 0xfe, 0x78, 0x5c, 0xd8, 0x41, 0xee, 0xc0, 0xef, 0xfb, 0x4e, 0xf3, 0x34, 0xba, - 0x25, 0xf8, 0x61, 0xf2, 0x4a, 0xde, 0x45, 0x54, 0xf0, 0xae, 0xf6, 0x4c, 0xd6, 0x9c, 0x66, 0x32, - 0x7a, 0x31, 0x3d, 0x72, 0x81, 0x17, 0xd3, 0xf7, 0x61, 0x62, 0xbb, 0xf3, 0xdc, 0x25, 0xbe, 0x02, - 0xbb, 0x9f, 0x46, 0x57, 0x5a, 0x97, 0x81, 0xd4, 0xde, 0xf1, 0x5a, 0xe8, 0x53, 0xc8, 0x6d, 0x79, - 0x41, 0x48, 0x17, 0xcb, 0xb1, 0xc8, 0x1f, 0x0b, 0x69, 0x48, 0xa7, 0x71, 0xc2, 0x8b, 0x54, 0x25, - 0x17, 0xd5, 0xd1, 0x47, 0x30, 0x51, 0x69, 0xb5, 0x88, 0x16, 0x71, 0x0d, 0xa4, 0x39, 0xea, 0x38, - 0xa6, 0xc3, 0x4a, 0xd4, 0x26, 0x79, 0x65, 0xf4, 0x85, 0x1e, 0x5f, 0x99, 0x88, 0xf2, 0x09, 0xa4, - 0xe7, 0x6b, 0xd4, 0x63, 0x2f, 0xef, 0x88, 0xb8, 0x36, 0xcb, 0x25, 0xc3, 0xa6, 0x2e, 0x01, 0x68, - 0x53, 0x97, 0x86, 0xc5, 0xb7, 0x21, 0xbf, 0xdd, 0x71, 0x43, 0x97, 0xbe, 0x51, 0xcf, 0x6b, 0x26, - 0x74, 0xcf, 0xf1, 0x43, 0xb7, 0xe9, 0x76, 0x9d, 0x4e, 0xc8, 0x46, 0xcb, 0x15, 0x15, 0xd5, 0xd1, - 0x92, 0xd8, 0x6a, 0x0a, 0x17, 0x78, 0x63, 0x29, 0x5c, 0x52, 0xb3, 0xa0, 0x4c, 0xbe, 0x7a, 0x16, - 0x94, 0x35, 0x36, 0x96, 0x34, 0x99, 0xe5, 0x54, 0xa4, 0x88, 0xf4, 0x12, 0xaa, 0x9e, 0xc2, 0xd2, - 0x96, 0x15, 0xd1, 0x2d, 0xfa, 0x26, 0x7d, 0x3a, 0xba, 0xea, 0xa9, 0x9d, 0x7f, 0x65, 0xb7, 0xd7, - 0x51, 0x03, 0xa6, 0x48, 0xed, 0x3d, 0xaf, 0xed, 0x36, 0x5d, 0x1c, 0x14, 0x67, 0xb4, 0x38, 0x95, - 0x3e, 0x29, 0x68, 0xa5, 0x97, 0x75, 0x1c, 0x32, 0x23, 0x4e, 0x9b, 0xee, 0x72, 0x44, 0xd5, 0x88, - 0xab, 0x04, 0x2d, 0x9b, 0x46, 0x85, 0xd2, 0x67, 0xd7, 0x47, 0xc9, 0x5b, 0xf7, 0x34, 0xf9, 0x57, - 0x74, 0xeb, 0x5e, 0x1d, 0xb0, 0xe8, 0xfe, 0xfd, 0x01, 0xdc, 0xb0, 0xf1, 0x99, 0xf7, 0x1c, 0xbf, - 0x59, 0xb2, 0xbf, 0x80, 0xeb, 0x3a, 0xc1, 0x83, 0x6e, 0x8b, 0xbe, 0xe2, 0x63, 0x51, 0xf5, 0xd4, - 0x4c, 0x0a, 0x1c, 0x81, 0x65, 0x52, 0x60, 0x2f, 0x81, 0xc9, 0x9f, 0xaa, 0xbe, 0xd2, 0x32, 0xcb, - 0x83, 0x25, 0x9d, 0x78, 0xa5, 0xd5, 0x52, 0x14, 0x95, 0xac, 0xd1, 0xca, 0x67, 0xcc, 0x29, 0x50, - 0x35, 0x9a, 0xa6, 0x5c, 0xec, 0x46, 0x00, 0x75, 0x2e, 0x29, 0xf5, 0x2c, 0x0c, 0xe5, 0xb8, 0x78, - 0x88, 0xc8, 0xd4, 0x36, 0xab, 0x30, 0xad, 0x7c, 0x4a, 0x37, 0x93, 0x4e, 0x75, 0xa5, 0x05, 0x5d, - 0x60, 0x3a, 0x8a, 0xf5, 0xcf, 0x46, 0xe0, 0x06, 0x97, 0xd3, 0x9b, 0x1c, 0x0c, 0xf4, 0x03, 0x4c, - 0x2a, 0xe2, 0xe7, 0xf2, 0xb8, 0x25, 0xce, 0x14, 0x4d, 0xc3, 0xc4, 0x4c, 0x4d, 0x8f, 0x02, 0x1a, - 0xb1, 0x91, 0x20, 0x4e, 0x8c, 0x3a, 0xa2, 0x6d, 0x98, 0xd1, 0xc7, 0x80, 0xbb, 0x56, 0x77, 0x52, - 0x1b, 0xd1, 0xab, 0x8a, 0x47, 0xc8, 0xad, 0x46, 0xea, 0x48, 0xd0, 0x44, 0x8a, 0xfa, 0xf8, 0xfe, - 0x08, 0xb3, 0x89, 0x01, 0xe0, 0x9e, 0xd8, 0xdd, 0xd4, 0x06, 0x13, 0xb5, 0x99, 0xdd, 0xf0, 0x29, - 0xd8, 0xd8, 0x6c, 0xb2, 0x91, 0x6a, 0x0e, 0xc6, 0x59, 0xb7, 0xc9, 0xbc, 0xd9, 0xf3, 0x71, 0x80, - 0x3b, 0x4d, 0xac, 0x1e, 0xdc, 0xbe, 0xee, 0xbc, 0xf9, 0xf7, 0x19, 0x28, 0xa6, 0xd1, 0xad, 0xe3, - 0x4e, 0x0b, 0xed, 0x41, 0x21, 0xde, 0x10, 0xf7, 0x97, 0x2d, 0xb1, 0xd6, 0x9b, 0x59, 0xda, 0xba, - 0x62, 0x27, 0xb0, 0x89, 0x65, 0x55, 0x60, 0x97, 0x3c, 0x21, 0x4f, 0xa2, 0x2a, 0xdb, 0xa2, 0x77, - 0xdf, 0x85, 0xbc, 0xcc, 0x0e, 0x8d, 0x72, 0x30, 0xba, 0xbd, 0xbb, 0xbd, 0xcf, 0x2e, 0x08, 0xed, - 0x1d, 0xec, 0x17, 0x32, 0x08, 0x60, 0x7c, 0x7d, 0x63, 0x67, 0x63, 0x7f, 0xa3, 0x90, 0x7d, 0xb7, - 0xa3, 0x6e, 0x30, 0xd0, 0x0d, 0x58, 0x5c, 0xdf, 0x38, 0xdc, 0xae, 0x6d, 0x34, 0xf6, 0xff, 0xdc, - 0xde, 0x46, 0xe3, 0x60, 0xb7, 0xbe, 0xb7, 0x51, 0xdb, 0x7e, 0xb8, 0xbd, 0xb1, 0x5e, 0xb8, 0x82, - 0xe6, 0xa1, 0xa0, 0x16, 0xd2, 0x6b, 0x47, 0x19, 0x34, 0x07, 0x57, 0x35, 0x94, 0xd5, 0x87, 0x85, - 0x2c, 0x2a, 0xc2, 0xbc, 0x0a, 0x7c, 0xba, 0x51, 0xad, 0x1c, 0xec, 0x6f, 0xed, 0x16, 0x46, 0xde, - 0xbd, 0xcb, 0x0f, 0xd9, 0xd0, 0x0c, 0xc0, 0xfa, 0x46, 0xbd, 0xb6, 0xb1, 0xbb, 0xbe, 0xbd, 0xbb, - 0x59, 0xb8, 0x82, 0xa6, 0x21, 0x5f, 0x91, 0x9f, 0x99, 0xd5, 0xff, 0xfe, 0x03, 0x4c, 0x92, 0xce, - 0x8b, 0x04, 0x91, 0x0d, 0x58, 0x7c, 0xec, 0xb8, 0x9d, 0xd0, 0x71, 0x3b, 0x7c, 0xc8, 0x84, 0xc0, - 0x51, 0x79, 0xc0, 0x08, 0x90, 0xc1, 0x2b, 0x0d, 0xbb, 0x02, 0x70, 0x2f, 0xf3, 0x20, 0x83, 0xea, - 0x30, 0x9f, 0xe6, 0x42, 0x21, 0x4b, 0x7f, 0x5a, 0x9e, 0x66, 0x1d, 0x4a, 0x8b, 0xa9, 0x0b, 0xcd, - 0xe1, 0xfb, 0xe8, 0x31, 0xcc, 0x26, 0x96, 0x0d, 0xc9, 0xaf, 0x69, 0x41, 0x19, 0x44, 0xae, 0x48, - 0x63, 0x0d, 0xa1, 0x1b, 0x5f, 0x34, 0x02, 0x74, 0x2d, 0xb1, 0xda, 0x6f, 0x10, 0x0d, 0x37, 0x12, - 0x7b, 0x90, 0x41, 0x36, 0xd9, 0xa6, 0x27, 0x17, 0x20, 0xd9, 0xe5, 0x01, 0xab, 0x53, 0xc9, 0xd0, - 0x1c, 0xa1, 0x99, 0x66, 0x47, 0x25, 0xcd, 0x01, 0x46, 0xd6, 0x48, 0xf3, 0x0b, 0xe2, 0xfd, 0x77, - 0x5a, 0x8f, 0x30, 0xee, 0x56, 0xda, 0xee, 0x73, 0x1c, 0x20, 0x71, 0x81, 0x45, 0x82, 0x4c, 0xb8, - 0xf7, 0x32, 0xe8, 0xb7, 0x60, 0x92, 0x66, 0x8f, 0xe4, 0xe7, 0xb6, 0x53, 0x6a, 0x46, 0xc9, 0x92, - 0xf8, 0xa2, 0x85, 0x0f, 0x32, 0xe8, 0x4b, 0x98, 0xd8, 0xc4, 0xf4, 0xe0, 0x12, 0xdd, 0x8e, 0x25, - 0x49, 0xdf, 0xee, 0x48, 0xcf, 0x58, 0x30, 0x1c, 0xdf, 0x7c, 0xa2, 0x1a, 0xe4, 0x38, 0x7a, 0x80, - 0xac, 0x18, 0x7e, 0x90, 0x42, 0x60, 0x2e, 0x46, 0x80, 0xec, 0x30, 0x50, 0x0d, 0xf2, 0xf2, 0xf4, - 0x14, 0x2d, 0x1a, 0x8e, 0x6c, 0x4b, 0xc5, 0x64, 0x01, 0x0f, 0x3f, 0x8c, 0xfc, 0xad, 0x6c, 0x06, - 0xdd, 0x07, 0x60, 0x8f, 0x92, 0x68, 0x5f, 0xe2, 0x8c, 0x96, 0x12, 0x02, 0x44, 0x9b, 0xc4, 0x10, - 0xb4, 0x71, 0x88, 0x2f, 0xda, 0x79, 0xd3, 0x68, 0xed, 0xc0, 0x8c, 0x7c, 0x22, 0x74, 0x71, 0x49, - 0x98, 0xa8, 0x7d, 0x46, 0x66, 0x10, 0x7b, 0x59, 0x2b, 0xaf, 0x19, 0x21, 0xd3, 0xc5, 0x23, 0x39, - 0x9c, 0xac, 0x9a, 0x82, 0x2b, 0x53, 0x73, 0x4a, 0xdc, 0x78, 0xb2, 0xce, 0x18, 0x2e, 0x86, 0x92, - 0xda, 0xae, 0x7e, 0xe5, 0x08, 0xdd, 0x52, 0x18, 0x48, 0xbd, 0x29, 0x55, 0xba, 0x3d, 0xa0, 0x06, - 0x1b, 0x27, 0x6a, 0x75, 0xbe, 0x81, 0x69, 0xed, 0xb2, 0x0b, 0x12, 0xf7, 0x63, 0xd3, 0x6e, 0x11, - 0x95, 0x96, 0xd2, 0x0b, 0xf9, 0x46, 0xf4, 0x21, 0x35, 0x36, 0xb1, 0xac, 0x60, 0xa5, 0xb4, 0xec, - 0x5f, 0x2c, 0xc9, 0x69, 0x49, 0x64, 0xaf, 0x88, 0xa1, 0x6c, 0xc0, 0x9c, 0x8c, 0xc0, 0x2a, 0xf9, - 0xc5, 0x0d, 0x79, 0xc4, 0x8c, 0x23, 0xf7, 0x35, 0xcc, 0x71, 0x3d, 0xd0, 0xc8, 0x14, 0xa4, 0x71, - 0xe1, 0x29, 0xa7, 0x8c, 0x04, 0xbe, 0x81, 0x85, 0x7a, 0xac, 0x3f, 0xcc, 0xe5, 0xb9, 0xae, 0x93, - 0x50, 0x32, 0x88, 0x19, 0x69, 0x3d, 0x02, 0x54, 0xef, 0x1d, 0x9d, 0xb9, 0x92, 0xdc, 0x73, 0x17, - 0xbf, 0x40, 0x37, 0x63, 0x5d, 0x22, 0x40, 0x5a, 0x8d, 0x5a, 0xa7, 0x92, 0xa1, 0xc7, 0x68, 0x9f, - 0x3d, 0xb5, 0x66, 0x09, 0x5f, 0x9c, 0xae, 0x73, 0xe4, 0xb6, 0xdd, 0xd0, 0xc5, 0x44, 0x2d, 0x54, - 0x04, 0xb5, 0x48, 0x8c, 0xe0, 0x75, 0x63, 0x0d, 0xf4, 0x15, 0x4c, 0x6f, 0xe2, 0x30, 0x4a, 0x92, - 0x86, 0x16, 0x13, 0x69, 0xd5, 0xf8, 0xb8, 0x89, 0xb3, 0x38, 0x3d, 0x33, 0xdb, 0x36, 0x14, 0x98, - 0x71, 0x55, 0x48, 0xdc, 0x4c, 0x90, 0xe0, 0x55, 0x1c, 0xdf, 0x39, 0x0b, 0x8c, 0xd2, 0xba, 0x0f, - 0xa3, 0x7b, 0x6e, 0xe7, 0x18, 0x89, 0x07, 0x45, 0x4a, 0x3e, 0xa3, 0xd2, 0x9c, 0x06, 0xe3, 0xaa, - 0x77, 0x04, 0x65, 0x96, 0x1d, 0x2c, 0x99, 0x91, 0x4b, 0xe4, 0xfd, 0x7d, 0x4b, 0xde, 0x5f, 0x1b, - 0x90, 0x45, 0x4c, 0xca, 0x27, 0x5e, 0x7e, 0xb8, 0x86, 0xf6, 0xa8, 0xd4, 0x93, 0x0d, 0xa0, 0x3b, - 0xd1, 0x7a, 0x6a, 0x4c, 0x08, 0x56, 0x42, 0x71, 0xc2, 0x87, 0x6b, 0x48, 0xbe, 0xd0, 0x4e, 0x21, - 0x7a, 0x57, 0x5b, 0xf6, 0x2f, 0x47, 0xf7, 0x2b, 0xc8, 0xcb, 0x6c, 0x58, 0xd2, 0xde, 0xc4, 0x53, - 0x78, 0x49, 0x03, 0x9e, 0x4c, 0x9c, 0xf5, 0x05, 0x4b, 0x5c, 0xa7, 0xe3, 0xc7, 0x73, 0x53, 0x19, - 0x07, 0xef, 0x53, 0x98, 0x54, 0xb2, 0x52, 0xc9, 0xc9, 0x92, 0xcc, 0x54, 0x55, 0xd2, 0x7f, 0x47, - 0xe2, 0x41, 0x06, 0x3d, 0x81, 0xdb, 0xc2, 0xe8, 0xb1, 0xb8, 0x42, 0x5b, 0x66, 0x38, 0x8b, 0x8c, - 0xef, 0x92, 0x9c, 0x7d, 0x29, 0xc9, 0xcf, 0x62, 0x56, 0xf4, 0x3e, 0x5d, 0x4e, 0xe9, 0x26, 0x7e, - 0x21, 0xe2, 0x43, 0x49, 0x2b, 0x14, 0xe3, 0x01, 0xad, 0xd1, 0x05, 0x94, 0x71, 0x7e, 0x4d, 0xc7, - 0x30, 0xb3, 0xbd, 0x06, 0xc0, 0x84, 0x48, 0x1b, 0xd2, 0x8b, 0x8d, 0x62, 0x5a, 0x23, 0x0b, 0x64, - 0xeb, 0x92, 0x48, 0x5f, 0x89, 0x45, 0x92, 0x22, 0x15, 0xb5, 0xa1, 0x51, 0x7b, 0x65, 0xc2, 0xdf, - 0x86, 0x42, 0xa5, 0x49, 0xcd, 0xb6, 0xcc, 0x74, 0x84, 0x96, 0xa5, 0x49, 0xd0, 0x0b, 0x04, 0xad, - 0x85, 0x78, 0xe2, 0xa4, 0x1d, 0xec, 0xd0, 0x6b, 0x39, 0x8b, 0x72, 0xf1, 0x8e, 0x15, 0xa5, 0x63, - 0x18, 0x99, 0xda, 0x80, 0xf9, 0x9a, 0xd3, 0x69, 0xe2, 0xf6, 0xeb, 0x91, 0xf9, 0x8c, 0xda, 0x2f, - 0x25, 0x0b, 0xd4, 0xb5, 0x38, 0x3e, 0x37, 0x5f, 0xb3, 0x72, 0xa3, 0x28, 0xab, 0x56, 0xe0, 0x2a, - 0x13, 0x62, 0x24, 0x16, 0x13, 0xb6, 0xa9, 0xf9, 0x8f, 0x61, 0x66, 0x83, 0xd8, 0xf7, 0x5e, 0xcb, - 0x65, 0x37, 0x38, 0x91, 0x7e, 0x25, 0xcf, 0x88, 0xb8, 0x25, 0x72, 0xd7, 0x29, 0xe9, 0x91, 0xe4, - 0xac, 0x49, 0x66, 0xa0, 0x2a, 0xcd, 0x0b, 0xb2, 0x6a, 0x26, 0x25, 0xba, 0x98, 0x1f, 0x8b, 0x14, - 0x1c, 0xb1, 0xa4, 0x37, 0xaa, 0x85, 0x32, 0xa6, 0xc4, 0x29, 0xbd, 0x35, 0xb8, 0x92, 0xea, 0xdc, - 0xd9, 0xb0, 0x68, 0x48, 0x28, 0x84, 0xde, 0x96, 0x7e, 0xf6, 0xa0, 0x84, 0x43, 0x29, 0xfe, 0xdf, - 0x77, 0x4a, 0x5a, 0x09, 0x03, 0xcd, 0xc1, 0x99, 0x86, 0x8c, 0x02, 0xfe, 0x41, 0xdc, 0x8b, 0x4a, - 0xcd, 0x08, 0x84, 0xde, 0xd1, 0xa9, 0x0f, 0xc8, 0x1a, 0x64, 0x6c, 0xe1, 0x09, 0x55, 0xbd, 0x28, - 0x21, 0x8d, 0xf4, 0xa2, 0xd2, 0xb2, 0x06, 0x49, 0x2f, 0x2a, 0x35, 0x9d, 0x0f, 0x13, 0xf0, 0x26, - 0x5c, 0x8d, 0xe5, 0xe6, 0x41, 0x37, 0xe3, 0x82, 0x1d, 0x22, 0x50, 0x46, 0xe8, 0xb1, 0x50, 0xec, - 0x24, 0xa1, 0xf4, 0x6c, 0x3d, 0xa6, 0x3e, 0x32, 0x72, 0x07, 0xd2, 0xa7, 0x52, 0xf3, 0xef, 0xa0, - 0xdb, 0x29, 0x22, 0xbc, 0x98, 0xe8, 0x18, 0xd9, 0x3a, 0x14, 0xe2, 0xe9, 0x6b, 0xd0, 0xb2, 0x94, - 0x52, 0x6a, 0x8e, 0x9e, 0x52, 0xd9, 0x58, 0xce, 0x57, 0xb1, 0x6f, 0xa2, 0x41, 0x61, 0x87, 0x38, - 0xf1, 0x41, 0x51, 0x53, 0x97, 0x24, 0x06, 0x45, 0xcf, 0x48, 0xb2, 0x49, 0xef, 0x56, 0x2a, 0x79, - 0x68, 0x8c, 0xdb, 0xdd, 0x9b, 0x69, 0x74, 0xa2, 0xc3, 0x9a, 0xba, 0xc8, 0xa5, 0xa9, 0xf0, 0xb5, - 0xac, 0x2d, 0xc4, 0x49, 0xd6, 0xca, 0xc6, 0x72, 0xd9, 0xd3, 0x42, 0x3c, 0x23, 0x8b, 0x24, 0x6a, - 0x48, 0xd5, 0x62, 0x54, 0xe5, 0x87, 0x30, 0xaf, 0x8f, 0xe2, 0x90, 0xfe, 0x9a, 0x9d, 0xe7, 0x69, - 0x2d, 0x0f, 0x0b, 0x12, 0x3f, 0x73, 0x12, 0x4b, 0xf9, 0x92, 0x90, 0x7e, 0x4a, 0x3e, 0x18, 0x26, - 0x7d, 0x25, 0xa7, 0xcb, 0x45, 0xa4, 0x9f, 0x96, 0x02, 0x46, 0x0a, 0x4a, 0xe1, 0x4b, 0x2c, 0x7f, - 0xf1, 0x82, 0xcb, 0x08, 0xea, 0x22, 0xac, 0x99, 0xe8, 0xac, 0x53, 0x77, 0x49, 0xfe, 0x2e, 0xcf, - 0x75, 0x4d, 0x4c, 0x9a, 0xc6, 0x97, 0xb4, 0xce, 0xe9, 0xca, 0x5e, 0x83, 0x29, 0x35, 0xa5, 0x8c, - 0x91, 0x8b, 0x1b, 0x49, 0x1a, 0x81, 0xb2, 0x81, 0x9b, 0x91, 0x52, 0x60, 0xdc, 0x2c, 0xc5, 0x85, - 0xa3, 0x31, 0x64, 0xee, 0x12, 0x52, 0x45, 0x33, 0x84, 0x25, 0xb3, 0x5b, 0x30, 0xc7, 0x1c, 0x24, - 0xfd, 0x67, 0x9b, 0x0c, 0xbf, 0xfe, 0x64, 0x24, 0x73, 0x40, 0x6f, 0x6c, 0xab, 0xf9, 0x61, 0x90, - 0xa2, 0x25, 0x29, 0x79, 0x63, 0x4a, 0xcb, 0xa6, 0x62, 0xd5, 0x42, 0x7f, 0x0b, 0xb3, 0x89, 0x3c, - 0x38, 0x32, 0xb2, 0x66, 0xca, 0x90, 0x33, 0xd8, 0x0a, 0x6e, 0x91, 0x0e, 0xc7, 0x10, 0x0f, 0x57, - 0x87, 0x13, 0x4d, 0xae, 0xa5, 0x3b, 0xe2, 0x92, 0x77, 0x1a, 0x73, 0xa6, 0x6c, 0x3b, 0x46, 0x09, - 0xee, 0xc3, 0x42, 0x6a, 0x9e, 0x1d, 0xe9, 0x56, 0x0c, 0xca, 0xc2, 0x63, 0xa4, 0xfa, 0xe7, 0x69, - 0xf2, 0xda, 0x58, 0x0e, 0x17, 0x19, 0xd8, 0x30, 0xe6, 0xed, 0x91, 0x81, 0x0d, 0x73, 0x42, 0x1d, - 0x26, 0xcd, 0x1d, 0x98, 0x4f, 0xcb, 0x8a, 0xa3, 0x04, 0x02, 0x8d, 0x29, 0x73, 0x52, 0x24, 0x6a, - 0x8b, 0xd9, 0x6e, 0xa0, 0x36, 0x20, 0x47, 0x8e, 0x51, 0x02, 0x3f, 0x17, 0x99, 0x8f, 0x92, 0xb9, - 0x6c, 0xe4, 0xf6, 0x6f, 0x48, 0xb2, 0x9b, 0x01, 0x4e, 0xe5, 0xd5, 0xba, 0x7b, 0xdc, 0x51, 0xd2, - 0xce, 0x48, 0x97, 0x32, 0x99, 0xef, 0x46, 0x5a, 0x96, 0xb4, 0x2c, 0x35, 0x4f, 0x60, 0x5e, 0x2c, - 0xb1, 0x6a, 0x9a, 0x16, 0x94, 0xc0, 0x89, 0xee, 0x8b, 0x4b, 0x2b, 0x93, 0x9a, 0xd7, 0x85, 0xed, - 0xc9, 0xe8, 0xef, 0xbe, 0x28, 0x7b, 0x32, 0x25, 0x7f, 0x4a, 0x49, 0x4f, 0xb5, 0x82, 0x3e, 0xa7, - 0x7b, 0x32, 0x96, 0x4e, 0xcf, 0x1c, 0x65, 0xd6, 0x28, 0x45, 0x36, 0x6d, 0x4d, 0xc4, 0x21, 0x69, - 0x83, 0x3a, 0xe5, 0xe1, 0xdb, 0x2c, 0x8a, 0xa4, 0x6f, 0xb3, 0x54, 0x46, 0xcd, 0xd1, 0x9e, 0x29, - 0xf5, 0x95, 0xa6, 0x94, 0x55, 0xca, 0x63, 0x6e, 0x29, 0xab, 0xb4, 0x47, 0xd2, 0xd4, 0xab, 0xdf, - 0x17, 0x2e, 0x5c, 0x44, 0xef, 0xe6, 0xc0, 0x57, 0xce, 0xa5, 0xe5, 0xc1, 0x4f, 0x83, 0xf9, 0x71, - 0x43, 0x21, 0xfe, 0x90, 0x14, 0xa5, 0x3d, 0x6b, 0x57, 0x5e, 0xd3, 0x4a, 0x47, 0xc4, 0xf8, 0x02, - 0x75, 0x4f, 0xb8, 0x87, 0x3a, 0x5d, 0xc3, 0x53, 0x65, 0x95, 0xf4, 0x60, 0x37, 0x22, 0x7a, 0x53, - 0xaa, 0x3a, 0x71, 0x89, 0x37, 0xab, 0xaa, 0x1b, 0x91, 0xf2, 0x0c, 0xd5, 0x15, 0x97, 0x54, 0xd2, - 0x93, 0xf0, 0xbc, 0xa3, 0xbb, 0x59, 0x03, 0xee, 0x30, 0x0e, 0x3d, 0xd0, 0x41, 0xbf, 0x2b, 0xb2, - 0x0b, 0x26, 0x13, 0x09, 0xbc, 0x1d, 0x0b, 0xec, 0xa4, 0x5f, 0xd0, 0x2b, 0x0d, 0xca, 0x53, 0x80, - 0x1e, 0xd3, 0x37, 0x42, 0x4f, 0xb6, 0xd7, 0x6b, 0xfc, 0xd7, 0x1d, 0x3d, 0x3f, 0x11, 0x31, 0x57, - 0x7e, 0xac, 0x21, 0x12, 0x32, 0xab, 0xa2, 0x21, 0x1e, 0xae, 0xa1, 0x3a, 0x0d, 0xdc, 0x6a, 0xd0, - 0x94, 0xa0, 0x79, 0x0a, 0xc1, 0x52, 0x3a, 0x41, 0x7a, 0x8a, 0xb0, 0x21, 0x56, 0x33, 0x9d, 0x4d, - 0x03, 0x0f, 0x83, 0xbc, 0x00, 0xa6, 0x36, 0xe9, 0x64, 0x04, 0x77, 0xc3, 0xf4, 0x88, 0x49, 0xac, - 0x5e, 0x79, 0xbc, 0xf3, 0x4a, 0x12, 0xd3, 0x10, 0x0f, 0x57, 0xb9, 0xc4, 0x34, 0xe8, 0xe5, 0x24, - 0x16, 0x23, 0xa8, 0x4b, 0x4c, 0x67, 0xd3, 0xc0, 0xc3, 0x70, 0x89, 0xa5, 0x93, 0xb9, 0xa8, 0xc4, - 0xbe, 0xa5, 0xeb, 0xf3, 0x26, 0x7d, 0x48, 0x73, 0x29, 0x99, 0x15, 0x85, 0x07, 0xab, 0xa3, 0x1e, - 0xae, 0xa1, 0xa7, 0x34, 0x85, 0x62, 0x0c, 0x7e, 0x31, 0xb9, 0x2d, 0x99, 0x88, 0x52, 0xc9, 0x6d, - 0xc3, 0x02, 0x93, 0x5c, 0x9c, 0x5d, 0x23, 0x2f, 0xc6, 0x6e, 0x6f, 0x0a, 0x67, 0x27, 0x4e, 0xea, - 0xb2, 0xf2, 0x5b, 0xa7, 0x2a, 0xb2, 0xef, 0x13, 0xff, 0xb4, 0x95, 0x74, 0x5e, 0x75, 0x22, 0x22, - 0xd4, 0xae, 0x57, 0x3f, 0x5c, 0x45, 0xdb, 0x74, 0x14, 0x74, 0xf0, 0x20, 0xef, 0x3e, 0x9d, 0x0c, - 0x15, 0xd2, 0x96, 0x70, 0x88, 0x62, 0x3c, 0x99, 0xda, 0x36, 0x33, 0x25, 0xb7, 0x3e, 0x17, 0xec, - 0x9d, 0x49, 0x44, 0x6c, 0x61, 0x67, 0x3b, 0x8d, 0x61, 0x92, 0x89, 0xff, 0x32, 0x32, 0xfa, 0x1d, - 0xc8, 0x0b, 0xe4, 0xe1, 0x02, 0x89, 0x63, 0x53, 0x81, 0x7c, 0x05, 0x93, 0x5c, 0x20, 0x94, 0x03, - 0x53, 0x4b, 0x46, 0xf6, 0xbf, 0x84, 0x49, 0x2e, 0x86, 0x81, 0x3d, 0x30, 0x9f, 0x53, 0x2e, 0x6c, - 0xe2, 0x30, 0xe5, 0x97, 0x3b, 0x87, 0x75, 0x26, 0xed, 0x87, 0x42, 0xd1, 0x21, 0x7d, 0x97, 0x68, - 0xfa, 0x95, 0x55, 0x13, 0xc9, 0xa1, 0xbf, 0xf1, 0x4a, 0xe8, 0xd6, 0xcd, 0x74, 0x87, 0xe2, 0x1b, - 0x7b, 0xbf, 0x0b, 0x4b, 0xf4, 0x50, 0xe3, 0xb2, 0x1c, 0x9b, 0x37, 0x29, 0xd7, 0xa3, 0xfb, 0x0c, - 0xf1, 0x1f, 0x78, 0x35, 0x11, 0x1b, 0xf6, 0xdb, 0xb2, 0x84, 0x6a, 0xdd, 0x48, 0x75, 0x18, 0xf6, - 0x80, 0xc5, 0xe8, 0x06, 0xed, 0xfb, 0x25, 0xb9, 0x1d, 0x6c, 0x69, 0x62, 0xbf, 0x38, 0x3b, 0xec, - 0x3a, 0x46, 0xfc, 0x37, 0x6d, 0x09, 0x95, 0x7a, 0x82, 0x8a, 0xa9, 0xf6, 0xa0, 0xc5, 0x87, 0x76, - 0xed, 0x82, 0xdc, 0x98, 0x0f, 0x47, 0xf2, 0x32, 0x11, 0x02, 0x52, 0x7c, 0x7b, 0xed, 0x99, 0x7f, - 0x69, 0x5a, 0xbd, 0x3c, 0x11, 0xa0, 0x0a, 0x5b, 0xe3, 0xd5, 0x84, 0x00, 0x4a, 0x14, 0x31, 0x35, - 0x53, 0x40, 0x9c, 0x04, 0xdb, 0x9b, 0xd0, 0x9f, 0xc1, 0x55, 0xf6, 0x26, 0xca, 0x53, 0xe9, 0x92, - 0xfe, 0x90, 0x99, 0x9b, 0x30, 0xfa, 0x9a, 0x59, 0x3d, 0x2f, 0x52, 0x1f, 0x4b, 0xab, 0x7b, 0x13, - 0xfd, 0x59, 0xb7, 0xdc, 0x9b, 0xd0, 0x06, 0x75, 0xca, 0xc3, 0xf7, 0x26, 0x14, 0x49, 0xdf, 0x9b, - 0xa8, 0x8c, 0x9a, 0x27, 0x1e, 0x4a, 0xbe, 0xeb, 0x96, 0xfb, 0x6e, 0xe3, 0x93, 0xef, 0x01, 0x47, - 0x4a, 0x73, 0x29, 0x19, 0x3c, 0xa4, 0xcf, 0x6f, 0xce, 0xee, 0x51, 0xd2, 0xcf, 0x47, 0x1e, 0x64, - 0xd0, 0x2e, 0x4d, 0x64, 0x9c, 0xf6, 0xeb, 0xc0, 0x26, 0xfd, 0x19, 0xf8, 0x73, 0xc4, 0x84, 0x5e, - 0x3d, 0x9d, 0xde, 0x40, 0xbc, 0x01, 0xdb, 0xba, 0xeb, 0xfc, 0x8a, 0xca, 0x25, 0x58, 0x34, 0xab, - 0xf8, 0x04, 0x8b, 0x11, 0x9b, 0x51, 0x0b, 0xea, 0xcf, 0xf1, 0xd2, 0x25, 0x6b, 0x05, 0xc6, 0x19, - 0x92, 0x71, 0xb5, 0xd1, 0x7e, 0xc2, 0x17, 0xbd, 0x2f, 0x4e, 0x82, 0x09, 0x8a, 0x56, 0x64, 0xe4, - 0xeb, 0x7d, 0xc8, 0xb3, 0xb0, 0xdb, 0xc5, 0x51, 0x3e, 0x17, 0xe7, 0xc5, 0x83, 0x18, 0x33, 0x5f, - 0xd3, 0x98, 0x56, 0x03, 0xce, 0x97, 0x17, 0xe4, 0x97, 0x34, 0xf4, 0x29, 0x42, 0x0d, 0x66, 0xfc, - 0x85, 0xc4, 0xcf, 0x2d, 0x53, 0x91, 0x7e, 0x42, 0xe3, 0xaf, 0x32, 0x85, 0x8d, 0x89, 0xfd, 0xe4, - 0x8f, 0x35, 0xa3, 0xcf, 0x61, 0x86, 0x09, 0x57, 0x22, 0x27, 0x2b, 0x0d, 0x90, 0xd9, 0x0c, 0x13, - 0xf3, 0xab, 0x20, 0xff, 0x8e, 0x08, 0xd4, 0x0e, 0x65, 0xfb, 0x22, 0x21, 0xda, 0xe1, 0xa2, 0x33, - 0x51, 0xf9, 0x5d, 0xba, 0xe8, 0xa6, 0xe7, 0x6f, 0x30, 0x12, 0xbb, 0xa7, 0x84, 0xa0, 0x07, 0x67, - 0x7e, 0x78, 0x22, 0x12, 0x5b, 0xa7, 0xff, 0x66, 0xf7, 0x90, 0x34, 0x10, 0x29, 0x51, 0xbc, 0x1f, - 0xd2, 0x33, 0x24, 0x08, 0x82, 0xfa, 0x49, 0xe0, 0xa0, 0x24, 0x11, 0x03, 0x76, 0x4d, 0x51, 0x7e, - 0xea, 0x4b, 0xca, 0xc5, 0x7c, 0xb8, 0x88, 0x92, 0x19, 0x27, 0x8c, 0x54, 0x6e, 0x9b, 0xa4, 0x1b, - 0x89, 0x95, 0x5d, 0x0a, 0x8d, 0xfd, 0x3c, 0x79, 0xd9, 0x84, 0x17, 0x77, 0xc4, 0xe3, 0x89, 0x2c, - 0xd0, 0xa6, 0xb8, 0xb8, 0x1a, 0xa3, 0x68, 0x42, 0x18, 0xb0, 0xf5, 0xe2, 0x57, 0x37, 0xdf, 0x08, - 0xa1, 0xa4, 0xde, 0x5c, 0x9e, 0x90, 0x8c, 0xfa, 0xc6, 0x08, 0x59, 0x03, 0x14, 0x65, 0x78, 0x44, - 0xab, 0x68, 0xd0, 0x90, 0xcb, 0xab, 0x86, 0x13, 0x5d, 0x12, 0x4c, 0xe6, 0xd2, 0x90, 0x6b, 0xba, - 0x31, 0xaf, 0x87, 0x54, 0x96, 0x01, 0x89, 0x38, 0x6a, 0xd1, 0x2f, 0x8b, 0x68, 0xc9, 0x37, 0x6a, - 0xf6, 0x8e, 0x8c, 0xc5, 0xa5, 0x65, 0xe5, 0x28, 0x81, 0x28, 0xb4, 0x77, 0xd0, 0x29, 0x14, 0x4d, - 0x89, 0x23, 0xa2, 0x8b, 0x4e, 0x83, 0xd3, 0x6a, 0x94, 0x7e, 0x36, 0xb4, 0x1e, 0xe7, 0x78, 0x17, - 0xe6, 0xd3, 0x12, 0x3e, 0xc8, 0x41, 0x1b, 0x90, 0x0d, 0x22, 0xf5, 0x36, 0xd5, 0x1e, 0x2c, 0xa4, - 0x26, 0x5d, 0x90, 0xc7, 0x1f, 0x83, 0x52, 0x32, 0xa4, 0x52, 0xfc, 0x0e, 0x16, 0x0d, 0x19, 0x06, - 0xa2, 0xe8, 0xe0, 0xc0, 0x0c, 0x04, 0x46, 0x85, 0xf8, 0x1e, 0x4a, 0xe6, 0xc7, 0xeb, 0xe8, 0x9e, - 0x1e, 0xe1, 0x34, 0x3f, 0x19, 0x2f, 0xa5, 0x66, 0xdb, 0x40, 0xfb, 0x34, 0xe3, 0x56, 0xda, 0x6b, - 0x76, 0xc9, 0xf7, 0xe0, 0xd7, 0xee, 0x86, 0x5b, 0x70, 0x8b, 0x86, 0x07, 0xec, 0x03, 0xa8, 0x5e, - 0x80, 0xdb, 0x5d, 0x61, 0x97, 0xf4, 0xb7, 0xd9, 0xb1, 0x0b, 0xf5, 0xa9, 0x0f, 0xb7, 0x53, 0xf9, - 0xfc, 0x06, 0xa6, 0xb5, 0x07, 0x98, 0x52, 0xfd, 0xd3, 0x5e, 0xac, 0xca, 0x50, 0x74, 0xea, 0x9b, - 0xcd, 0x6a, 0xe1, 0xa7, 0xff, 0xb1, 0x9c, 0xf9, 0xe9, 0xd7, 0xcb, 0x99, 0xff, 0xf2, 0xeb, 0xe5, - 0xcc, 0x9f, 0xfc, 0x7a, 0x39, 0x73, 0x34, 0x4e, 0xab, 0xaf, 0xfd, 0xbf, 0x00, 0x00, 0x00, 0xff, - 0xff, 0xdc, 0xa2, 0x67, 0x7d, 0xf6, 0x8c, 0x00, 0x00, + 0x92, 0x98, 0xba, 0xf9, 0xeb, 0x0e, 0x7e, 0xd4, 0x4c, 0x92, 0x62, 0xab, 0x45, 0xb1, 0x35, 0xa5, + 0x19, 0x3d, 0xcd, 0xec, 0x2c, 0xa5, 0x21, 0xe7, 0xaf, 0xf9, 0x6c, 0x77, 0x93, 0x22, 0x39, 0xa2, + 0x28, 0x4e, 0x35, 0x49, 0x8d, 0xdf, 0x9b, 0x75, 0x4f, 0xb1, 0x3b, 0x45, 0x16, 0xd8, 0xec, 0xea, + 0x57, 0x55, 0x2d, 0x8d, 0x6c, 0x18, 0xf0, 0x6f, 0x6d, 0x63, 0x6d, 0x03, 0xef, 0x60, 0x1f, 0x6c, + 0xc0, 0xf0, 0x62, 0x7d, 0xb2, 0x0d, 0xf8, 0x60, 0xf8, 0xe0, 0x8b, 0x7d, 0xd8, 0x8b, 0xc7, 0x06, + 0x0c, 0xfb, 0x62, 0x18, 0xd8, 0x43, 0xef, 0xfa, 0x1d, 0x79, 0x32, 0x60, 0xd8, 0x80, 0xdf, 0xc9, + 0xc8, 0x6f, 0x65, 0x56, 0x55, 0x76, 0x93, 0x92, 0xbc, 0x7b, 0x91, 0x58, 0x91, 0x19, 0x91, 0x91, + 0x91, 0x91, 0x91, 0x91, 0x91, 0x99, 0xd1, 0x30, 0xeb, 0xf4, 0xc2, 0x93, 0x00, 0xfb, 0xcf, 0xdd, + 0x26, 0x5e, 0xe9, 0xfa, 0x5e, 0xe8, 0xa1, 0x31, 0xfa, 0x5f, 0x69, 0xfe, 0xd8, 0x3b, 0xf6, 0xe8, + 0x9f, 0xf7, 0xc8, 0x5f, 0xac, 0xb0, 0x74, 0xe3, 0xd8, 0xf3, 0x8e, 0xdb, 0xf8, 0x1e, 0xfd, 0x3a, + 0xea, 0x3d, 0xbb, 0x87, 0xcf, 0xba, 0xe1, 0x4b, 0x5e, 0x58, 0x8e, 0x17, 0x86, 0xee, 0x19, 0x0e, + 0x42, 0xe7, 0xac, 0xcb, 0x2b, 0x4c, 0x36, 0xb1, 0x1f, 0x06, 0xfc, 0xe3, 0x93, 0x63, 0x37, 0x3c, + 0xe9, 0x1d, 0xad, 0x34, 0xbd, 0xb3, 0x7b, 0xc7, 0xbe, 0xf3, 0xdc, 0x0d, 0x9d, 0xd0, 0xf5, 0x3a, + 0x4e, 0xfb, 0x5e, 0x88, 0xdb, 0xb8, 0xeb, 0xf9, 0xe1, 0x3d, 0xa7, 0xeb, 0xde, 0x0b, 0x5f, 0x76, + 0x71, 0xc0, 0xfe, 0xe5, 0x88, 0xb5, 0xcb, 0x20, 0xbe, 0xc0, 0x47, 0xa4, 0x8b, 0x1d, 0xf9, 0xc7, + 0x2b, 0x11, 0xf1, 0x9d, 0x6e, 0x17, 0xfb, 0xd1, 0x1f, 0x9c, 0xc8, 0xd7, 0x97, 0x21, 0x82, 0x9f, + 0xe3, 0x4e, 0x28, 0xfe, 0x63, 0x04, 0xac, 0x7f, 0x39, 0x0f, 0x63, 0x1b, 0x04, 0x80, 0x3e, 0x85, + 0xd1, 0xfd, 0x97, 0x5d, 0x5c, 0xcc, 0xdc, 0xca, 0xdc, 0x9d, 0x59, 0x2d, 0xb0, 0xf2, 0x95, 0x27, + 0x5d, 0xec, 0x53, 0x92, 0x55, 0x74, 0xde, 0x2f, 0xcf, 0x10, 0x42, 0xef, 0x7b, 0x67, 0x6e, 0x48, + 0xa5, 0x6e, 0x53, 0x0c, 0xf4, 0x14, 0x66, 0x6c, 0x1c, 0x78, 0x3d, 0xbf, 0x89, 0xb7, 0xb0, 0xd3, + 0xc2, 0x7e, 0x31, 0x7b, 0x2b, 0x73, 0x77, 0x72, 0x75, 0x61, 0x85, 0x09, 0x4d, 0x2f, 0xac, 0x5e, + 0x3b, 0xef, 0x97, 0x91, 0xcf, 0x61, 0x11, 0xb1, 0xad, 0x2b, 0x76, 0x8c, 0x0c, 0xfa, 0x1e, 0xa6, + 0x6b, 0xd8, 0x0f, 0x2b, 0xbd, 0xf0, 0xc4, 0xf3, 0xdd, 0xf0, 0x65, 0x71, 0x84, 0xd2, 0xbd, 0xc6, + 0xe9, 0x6a, 0x65, 0x87, 0xab, 0xd5, 0xa5, 0xf3, 0x7e, 0xb9, 0x48, 0x06, 0xb8, 0xe1, 0x08, 0xa8, + 0x46, 0x5e, 0x27, 0x86, 0xbe, 0x83, 0xa9, 0x3a, 0x11, 0x57, 0x73, 0xdf, 0x3b, 0xc5, 0x9d, 0xa0, + 0x38, 0xaa, 0x31, 0xad, 0x16, 0x1d, 0xae, 0x56, 0x6f, 0x9c, 0xf7, 0xcb, 0x8b, 0x01, 0x85, 0x35, + 0x42, 0x0a, 0xd4, 0x48, 0x6b, 0x94, 0xd0, 0x0f, 0x30, 0xb3, 0xe7, 0x7b, 0xcf, 0xdd, 0xc0, 0xf5, + 0x3a, 0x14, 0x54, 0x1c, 0xa3, 0xb4, 0x17, 0x39, 0x6d, 0xbd, 0xf0, 0x70, 0xb5, 0x7a, 0xf3, 0xbc, + 0x5f, 0xbe, 0xde, 0x15, 0x50, 0xd6, 0x80, 0x2e, 0x19, 0x1d, 0x05, 0xed, 0xc3, 0x64, 0xad, 0xdd, + 0x0b, 0x42, 0xec, 0xef, 0x3a, 0x67, 0xb8, 0x38, 0x4e, 0xc9, 0xcf, 0x0b, 0xb9, 0x44, 0x25, 0x87, + 0xab, 0xd5, 0xd2, 0x79, 0xbf, 0x7c, 0xad, 0xc9, 0x40, 0x8d, 0x8e, 0x73, 0xa6, 0x8b, 0x5c, 0x25, + 0x83, 0x3e, 0x81, 0xd1, 0x83, 0x00, 0xfb, 0xc5, 0x1c, 0x25, 0x37, 0xcd, 0xc9, 0x11, 0xd0, 0xe1, + 0x2a, 0x1b, 0xff, 0x5e, 0x80, 0x7d, 0x0d, 0x9f, 0x22, 0x10, 0x44, 0xdb, 0x6b, 0xe3, 0x62, 0x5e, + 0x43, 0x24, 0xa0, 0xc3, 0x8f, 0x18, 0xa2, 0xef, 0xb5, 0xf5, 0x86, 0x29, 0x02, 0xda, 0x86, 0x3c, + 0x69, 0x39, 0xe8, 0x3a, 0x4d, 0x5c, 0x04, 0x8a, 0x5d, 0xe0, 0xd8, 0x12, 0x5e, 0x5d, 0x3c, 0xef, + 0x97, 0xe7, 0x3a, 0xe2, 0x53, 0xa3, 0x12, 0x61, 0xa3, 0xaf, 0x61, 0xbc, 0x8e, 0xfd, 0xe7, 0xd8, + 0x2f, 0x4e, 0x52, 0x3a, 0x57, 0xc5, 0x40, 0x52, 0xe0, 0xe1, 0x6a, 0x75, 0xfe, 0xbc, 0x5f, 0x2e, + 0x04, 0xf4, 0x4b, 0xa3, 0xc1, 0xd1, 0x88, 0xb6, 0xd9, 0xf8, 0x39, 0xf6, 0x03, 0xbc, 0xdf, 0xeb, + 0x74, 0x70, 0xbb, 0x38, 0xa5, 0x69, 0x9b, 0x56, 0x26, 0xb4, 0xcd, 0x67, 0xc0, 0x46, 0x48, 0xa1, + 0xba, 0xb6, 0x69, 0x08, 0xe8, 0x04, 0x0a, 0xec, 0xaf, 0x9a, 0xd7, 0xe9, 0xe0, 0x26, 0x99, 0x52, + 0xc5, 0x69, 0xda, 0xc0, 0x75, 0xde, 0x40, 0xbc, 0xf8, 0x70, 0xb5, 0x5a, 0x3e, 0xef, 0x97, 0x6f, + 0x30, 0xda, 0x8d, 0xa6, 0x2c, 0xd0, 0x9a, 0x49, 0x50, 0x25, 0xfd, 0xa8, 0x34, 0x9b, 0x38, 0x08, + 0x6c, 0xfc, 0xcb, 0x1e, 0x0e, 0xc2, 0xe2, 0x8c, 0xd6, 0x0f, 0xad, 0xec, 0x70, 0x8d, 0xf5, 0xc3, + 0xa1, 0xc0, 0x86, 0xcf, 0xa0, 0x7a, 0x3f, 0x34, 0x04, 0xb4, 0x07, 0x50, 0xe9, 0x76, 0xeb, 0x38, + 0x20, 0xca, 0x58, 0xbc, 0x4a, 0x49, 0xcf, 0x71, 0xd2, 0x4f, 0xf1, 0x11, 0x2f, 0x38, 0x5c, 0xad, + 0x5e, 0x3f, 0xef, 0x97, 0x17, 0x9c, 0x6e, 0xb7, 0x11, 0x30, 0x90, 0x46, 0x54, 0xa1, 0xc1, 0xe4, + 0x7e, 0xe6, 0x85, 0x98, 0xab, 0x62, 0xb1, 0x10, 0x93, 0xbb, 0x52, 0x26, 0xf8, 0xf5, 0x29, 0xb0, + 0xc1, 0xd5, 0x3a, 0x2e, 0x77, 0x05, 0x81, 0xcc, 0xc5, 0x75, 0x27, 0x74, 0x8e, 0x9c, 0x00, 0x73, + 0xf5, 0x98, 0xd5, 0xe6, 0xa2, 0x5e, 0x78, 0xb8, 0xc6, 0xe6, 0x62, 0x8b, 0x43, 0x1b, 0x29, 0xfa, + 0x12, 0xa3, 0x47, 0x24, 0x12, 0x75, 0xbc, 0x88, 0x86, 0x48, 0xe4, 0x05, 0x3e, 0x4a, 0x97, 0x48, + 0x54, 0x15, 0x6d, 0x41, 0xee, 0x29, 0x3e, 0x62, 0x96, 0x63, 0x8e, 0xd2, 0x9b, 0x8d, 0xe8, 0x31, + 0x9b, 0xb1, 0xc6, 0x66, 0x05, 0xa1, 0x96, 0xb4, 0x16, 0x12, 0x1b, 0xfd, 0x5e, 0x06, 0x16, 0xc5, + 0x0c, 0xc7, 0xe1, 0x0b, 0xcf, 0x3f, 0x75, 0x3b, 0xc7, 0x35, 0xaf, 0xf3, 0xcc, 0x3d, 0x2e, 0xce, + 0x53, 0xca, 0xb7, 0x62, 0x46, 0x23, 0x56, 0xeb, 0x70, 0xb5, 0xfa, 0xb3, 0xf3, 0x7e, 0xf9, 0xb6, + 0x34, 0x20, 0xb2, 0x9c, 0x28, 0xe4, 0x33, 0xf7, 0x58, 0x6b, 0xd8, 0xd4, 0x16, 0xfa, 0x6b, 0x19, + 0xb8, 0xc6, 0x7b, 0x67, 0xe3, 0xa6, 0xe7, 0xb7, 0x22, 0x36, 0x16, 0x28, 0x1b, 0x65, 0x39, 0x5b, + 0xd3, 0x2a, 0x1d, 0xae, 0x56, 0xef, 0x9c, 0xf7, 0xcb, 0x16, 0x17, 0x5c, 0xc3, 0x17, 0xc5, 0x69, + 0x4c, 0x18, 0x1a, 0x22, 0x9a, 0x40, 0x8c, 0xff, 0x9e, 0x8f, 0x9f, 0x61, 0x1f, 0x77, 0x9a, 0xb8, + 0x78, 0x4d, 0xd3, 0x04, 0xbd, 0x50, 0x58, 0x65, 0xb2, 0x94, 0x34, 0xba, 0x12, 0xac, 0x6b, 0x82, + 0x8e, 0x82, 0x7e, 0x09, 0x88, 0x0b, 0xa0, 0xd2, 0x6b, 0xb9, 0x21, 0xef, 0xe0, 0x22, 0x6d, 0xe5, + 0x86, 0x2e, 0x67, 0xa5, 0xc2, 0xe1, 0x6a, 0xd5, 0x3a, 0xef, 0x97, 0x97, 0x85, 0x88, 0x1d, 0x52, + 0x94, 0xd6, 0xb1, 0x14, 0xe2, 0xc4, 0xf2, 0xee, 0x78, 0xcd, 0xd3, 0x62, 0x51, 0xb3, 0xbc, 0x04, + 0x24, 0x4c, 0x76, 0xdb, 0x6b, 0x9e, 0xea, 0x96, 0x97, 0x94, 0xa2, 0x10, 0xe6, 0xf8, 0x28, 0xd9, + 0x38, 0x08, 0x7d, 0x97, 0xda, 0x8e, 0xa0, 0x78, 0x9d, 0xd2, 0x59, 0x12, 0x36, 0x38, 0x59, 0xe3, + 0xf0, 0x43, 0xc6, 0x2d, 0x57, 0x84, 0x86, 0xaf, 0x94, 0x69, 0xcd, 0xa4, 0x91, 0x47, 0x7f, 0x05, + 0x16, 0x9e, 0xba, 0x9d, 0x96, 0xf7, 0x22, 0x58, 0xc7, 0xc1, 0x69, 0xe8, 0x75, 0xeb, 0xcc, 0xf3, + 0x2b, 0x96, 0x68, 0xbb, 0xcb, 0x42, 0xcd, 0xd3, 0xea, 0x1c, 0xae, 0x55, 0xdf, 0x39, 0xef, 0x97, + 0xdf, 0x7a, 0xc1, 0x0a, 0x1b, 0x2d, 0x56, 0xda, 0xe0, 0xce, 0xa3, 0xd6, 0x78, 0x7a, 0x2b, 0x44, + 0x05, 0xf4, 0x82, 0xe2, 0x0d, 0x4d, 0x05, 0xf4, 0x42, 0x61, 0x0c, 0x62, 0x0d, 0xea, 0x2a, 0xa0, + 0xa3, 0xa0, 0x4d, 0xc8, 0x09, 0xf3, 0x50, 0x5c, 0xd2, 0xa6, 0xae, 0x00, 0x1f, 0xae, 0x31, 0x0f, + 0x48, 0x98, 0x18, 0x7d, 0xe6, 0x8a, 0x5a, 0x68, 0x07, 0xf2, 0xd4, 0x46, 0x52, 0x93, 0x75, 0x93, + 0x52, 0x42, 0x42, 0x51, 0x05, 0xfc, 0x70, 0xad, 0x5a, 0x3c, 0xef, 0x97, 0xe7, 0x99, 0x95, 0x4d, + 0x18, 0xaa, 0x88, 0x00, 0x5a, 0x83, 0x91, 0x4a, 0xb7, 0x5b, 0x5c, 0xa6, 0x74, 0xa6, 0x22, 0x3a, + 0x87, 0x6b, 0xd5, 0xd9, 0xf3, 0x7e, 0x79, 0xda, 0xe9, 0xea, 0xdd, 0x22, 0xb5, 0xab, 0x00, 0x39, + 0xe1, 0x90, 0x7d, 0x33, 0x9a, 0x9b, 0x28, 0xe4, 0xac, 0x2d, 0x18, 0x7b, 0xea, 0x84, 0xcd, 0x13, + 0xf4, 0x35, 0x8c, 0x3d, 0x72, 0x3b, 0xad, 0xa0, 0x98, 0xb9, 0x35, 0x42, 0xd7, 0x6c, 0xe6, 0x2d, + 0xd2, 0x42, 0x52, 0x50, 0x5d, 0xfc, 0xa9, 0x5f, 0xbe, 0x72, 0xde, 0x2f, 0x5f, 0x3d, 0x25, 0xd5, + 0x14, 0x97, 0x91, 0xe1, 0x59, 0xff, 0x26, 0x0b, 0x79, 0x59, 0x1b, 0x2d, 0xc1, 0x28, 0xf9, 0x9f, + 0xfa, 0x9e, 0xf9, 0x6a, 0xee, 0xbc, 0x5f, 0x1e, 0x25, 0x78, 0x36, 0x85, 0xa2, 0x55, 0x98, 0xdc, + 0xf1, 0x9c, 0x56, 0x1d, 0x37, 0x7d, 0x1c, 0x06, 0xd4, 0xb9, 0xcc, 0x55, 0x0b, 0xe7, 0xfd, 0xf2, + 0x54, 0xdb, 0x73, 0x5a, 0x8d, 0x80, 0xc1, 0x6d, 0xb5, 0x12, 0xa1, 0x48, 0x3d, 0xa3, 0x91, 0x88, + 0x22, 0xf1, 0x20, 0x6c, 0x0a, 0x45, 0xdf, 0xc0, 0xf8, 0x43, 0xb7, 0x4d, 0xd6, 0x9a, 0x51, 0xca, + 0xff, 0x52, 0x9c, 0xff, 0x15, 0x56, 0xbc, 0xd1, 0x09, 0xfd, 0x97, 0xcc, 0x71, 0x78, 0x46, 0x01, + 0x4a, 0x47, 0x38, 0x05, 0x74, 0x1f, 0x26, 0xea, 0xbd, 0x23, 0xca, 0xfe, 0x18, 0x6d, 0x8c, 0x8e, + 0x6e, 0xd0, 0x3b, 0x6a, 0x90, 0x2e, 0x28, 0x08, 0xa2, 0x5a, 0xe9, 0x33, 0x98, 0x54, 0xc8, 0xa3, + 0x02, 0x8c, 0x9c, 0xe2, 0x97, 0xac, 0xef, 0x36, 0xf9, 0x13, 0xcd, 0xc3, 0xd8, 0x73, 0xa7, 0xdd, + 0xc3, 0xb4, 0xab, 0x79, 0x9b, 0x7d, 0x7c, 0x9e, 0xfd, 0x34, 0x63, 0xfd, 0x97, 0x51, 0x28, 0x6c, + 0x79, 0x41, 0x48, 0x3c, 0x59, 0xb9, 0x24, 0xdf, 0x86, 0x71, 0x02, 0xdb, 0x5e, 0xe7, 0xf2, 0x9b, + 0x3c, 0xef, 0x97, 0x27, 0x4e, 0xbc, 0x20, 0x6c, 0xb8, 0x2d, 0x9b, 0x17, 0xa1, 0x77, 0x21, 0xb7, + 0xeb, 0xb5, 0x30, 0x15, 0x0a, 0x25, 0x5b, 0x9d, 0x3e, 0xef, 0x97, 0xf3, 0x1d, 0xaf, 0x85, 0xa9, + 0x57, 0x68, 0xcb, 0x62, 0x74, 0xc8, 0xbd, 0x39, 0x26, 0xbb, 0x2a, 0x91, 0x1d, 0x71, 0xdf, 0x7e, + 0xd3, 0x2f, 0x7f, 0x7c, 0x89, 0xed, 0xc6, 0x4a, 0xfd, 0x65, 0x10, 0xe2, 0x33, 0x42, 0x89, 0x3b, + 0x7b, 0x4f, 0x61, 0xbe, 0xd2, 0x6a, 0xb9, 0x0c, 0x63, 0xcf, 0x77, 0x3b, 0x4d, 0xb7, 0xeb, 0xb4, + 0x03, 0x3a, 0x06, 0xf9, 0xea, 0xed, 0xf3, 0x7e, 0xb9, 0xec, 0xc8, 0xf2, 0x46, 0x57, 0x56, 0x50, + 0x64, 0x98, 0x4a, 0x00, 0xad, 0x41, 0x6e, 0x7d, 0xb7, 0x4e, 0x5d, 0xc1, 0xe2, 0x18, 0x25, 0x46, + 0x17, 0xc7, 0x56, 0x27, 0xa0, 0x5d, 0x53, 0x09, 0xc8, 0x8a, 0xe8, 0x63, 0x98, 0xda, 0xeb, 0x1d, + 0xb5, 0xdd, 0xe6, 0xfe, 0x4e, 0xfd, 0x11, 0x7e, 0x49, 0x7d, 0xe8, 0x29, 0x66, 0x32, 0xbb, 0x14, + 0xde, 0x08, 0xdb, 0x41, 0xe3, 0x14, 0xbf, 0xb4, 0xb5, 0x7a, 0x11, 0x5e, 0xbd, 0xbe, 0x45, 0xf0, + 0x26, 0x12, 0x78, 0x41, 0x70, 0xa2, 0xe2, 0xb1, 0x7a, 0xe8, 0x1e, 0x00, 0xf3, 0x4c, 0x2a, 0xad, + 0x16, 0x73, 0xb1, 0xf3, 0xd5, 0xab, 0xe7, 0xfd, 0xf2, 0x24, 0xf7, 0x65, 0x9c, 0x56, 0xcb, 0xb7, + 0x95, 0x2a, 0xa8, 0x06, 0x39, 0xdb, 0x63, 0x02, 0xe6, 0x8e, 0xf5, 0x55, 0xe9, 0x58, 0x33, 0x30, + 0xdf, 0x4a, 0xf1, 0x2f, 0xb5, 0x97, 0xa2, 0x06, 0x2a, 0xc3, 0xc4, 0xae, 0x57, 0x73, 0x9a, 0x27, + 0xcc, 0xbd, 0xce, 0x55, 0xc7, 0xce, 0xfb, 0xe5, 0xcc, 0x6f, 0xdb, 0x02, 0x6a, 0xfd, 0x6a, 0x02, + 0x0a, 0xc4, 0x87, 0xd7, 0x34, 0xea, 0x7d, 0xc8, 0x33, 0xde, 0x1f, 0x71, 0xc5, 0x9c, 0xaa, 0xce, + 0x9c, 0xf7, 0xcb, 0xc0, 0x3b, 0x48, 0x3a, 0x17, 0x55, 0x40, 0x77, 0x21, 0x47, 0x28, 0x74, 0x22, + 0xd5, 0x9a, 0x3a, 0xef, 0x97, 0x73, 0x3d, 0x0e, 0xb3, 0x65, 0x29, 0xaa, 0xc3, 0xc4, 0xc6, 0x8f, + 0x5d, 0xd7, 0xc7, 0x01, 0xdf, 0xca, 0x95, 0x56, 0xd8, 0x8e, 0x7d, 0x45, 0xec, 0xd8, 0x57, 0xf6, + 0xc5, 0x8e, 0xbd, 0x7a, 0x93, 0x9b, 0x90, 0x59, 0xcc, 0x50, 0xa2, 0xfe, 0xfd, 0xea, 0x4f, 0xca, + 0x19, 0x5b, 0x50, 0x42, 0xef, 0xc3, 0xf8, 0x43, 0xcf, 0x3f, 0x73, 0x42, 0xba, 0x83, 0xcb, 0xf3, + 0xe9, 0x4a, 0x21, 0xda, 0x74, 0xa5, 0x10, 0xf4, 0x10, 0x66, 0x6c, 0xaf, 0x17, 0xe2, 0x7d, 0x4f, + 0xb8, 0x9b, 0x6c, 0xd6, 0x2e, 0x9f, 0xf7, 0xcb, 0x25, 0x9f, 0x94, 0x34, 0x42, 0x2f, 0xe9, 0x58, + 0xda, 0x31, 0x2c, 0xb4, 0x01, 0x33, 0x9a, 0x63, 0x1c, 0x14, 0xc7, 0xa9, 0xe6, 0x31, 0xa7, 0x41, + 0x73, 0xa7, 0x55, 0xfd, 0x8b, 0x21, 0xa1, 0x5d, 0x98, 0x7d, 0xd4, 0x3b, 0xc2, 0x7e, 0x07, 0x87, + 0x38, 0x10, 0x1c, 0x4d, 0x50, 0x8e, 0x6e, 0x9d, 0xf7, 0xcb, 0x4b, 0xa7, 0xb2, 0x30, 0x85, 0xa7, + 0x24, 0x2a, 0xc2, 0x70, 0x95, 0x33, 0x2a, 0x97, 0xa1, 0x1c, 0x77, 0xa7, 0x99, 0x89, 0x8b, 0x95, + 0x56, 0x6f, 0x73, 0x29, 0xdf, 0x90, 0x7d, 0x4f, 0x2e, 0x4c, 0x76, 0x9c, 0x26, 0x99, 0x71, 0xd2, + 0x9a, 0xe4, 0x29, 0xb7, 0x6c, 0x93, 0x26, 0xac, 0x89, 0xaa, 0x8b, 0xd2, 0xae, 0xec, 0xc0, 0xd8, + 0x41, 0xe0, 0x1c, 0x33, 0x4d, 0x9c, 0x59, 0x7d, 0x8b, 0x73, 0x14, 0xd7, 0x3e, 0xba, 0xaf, 0xa7, + 0x15, 0xab, 0x73, 0x64, 0x05, 0xe9, 0x91, 0x3f, 0xd5, 0x15, 0x84, 0x96, 0xa1, 0x6f, 0x01, 0x38, + 0x57, 0x64, 0x65, 0x9b, 0xe4, 0x6b, 0xad, 0xd6, 0x49, 0xb2, 0x88, 0x2d, 0xf3, 0xfe, 0x5d, 0x93, + 0xfd, 0xd3, 0xd6, 0x3a, 0x5b, 0x21, 0x82, 0xbe, 0x86, 0x29, 0x6a, 0xae, 0xc4, 0x88, 0x4e, 0xd1, + 0x11, 0xa5, 0x5b, 0x7f, 0x62, 0x00, 0xd3, 0xc6, 0x53, 0x43, 0xb0, 0xd6, 0x21, 0x2f, 0x99, 0x47, + 0x13, 0x30, 0x52, 0x69, 0xb7, 0x0b, 0x57, 0xc8, 0x1f, 0xf5, 0xfa, 0x56, 0x21, 0x83, 0x66, 0x00, + 0xa2, 0x11, 0x2b, 0x64, 0xd1, 0x54, 0xe4, 0x2c, 0x14, 0x46, 0x68, 0xfd, 0x6e, 0xb7, 0x30, 0x6a, + 0xfd, 0xf7, 0x4c, 0x62, 0x10, 0xc9, 0x1a, 0xc8, 0x9d, 0x18, 0x2a, 0x73, 0x66, 0xe8, 0xe9, 0x1a, + 0xc8, 0xdd, 0x1f, 0x66, 0xc4, 0xd5, 0x4a, 0x64, 0x5e, 0xee, 0x11, 0x71, 0x34, 0xbd, 0xb6, 0x3a, + 0x2f, 0xbb, 0x1c, 0x66, 0xcb, 0x52, 0xb4, 0xaa, 0xcc, 0xe0, 0x91, 0x68, 0x11, 0x13, 0x33, 0x58, + 0x1d, 0x4d, 0x39, 0x97, 0x57, 0x15, 0x4f, 0x67, 0x34, 0xc2, 0x49, 0xd1, 0x1e, 0x59, 0xcf, 0xfa, + 0xbf, 0x19, 0x75, 0xd0, 0xe4, 0x22, 0x9d, 0x49, 0x5d, 0xa4, 0xdf, 0x87, 0x3c, 0xf7, 0xe4, 0xb7, + 0xd7, 0x39, 0xff, 0xd4, 0x08, 0x89, 0x4d, 0x80, 0xdb, 0xb2, 0xa3, 0x0a, 0xc4, 0xbc, 0x32, 0x8b, + 0x44, 0xcd, 0xeb, 0x48, 0x64, 0x5e, 0xb9, 0xcd, 0x62, 0xe6, 0x35, 0xaa, 0x42, 0x24, 0xaa, 0x86, + 0x50, 0x46, 0x23, 0x89, 0xaa, 0xc1, 0x12, 0x3d, 0x40, 0xf2, 0x39, 0x40, 0xe5, 0x69, 0x9d, 0x0c, + 0x79, 0xc5, 0xde, 0xe5, 0x86, 0x83, 0xc6, 0x57, 0x9c, 0x17, 0x41, 0x83, 0xaa, 0x88, 0xe3, 0xab, + 0x76, 0x58, 0xa9, 0x6d, 0xb5, 0x61, 0x66, 0x13, 0x87, 0x44, 0x7c, 0xc2, 0xca, 0x0e, 0xee, 0xfe, + 0x17, 0x30, 0xf9, 0xd4, 0x0d, 0x4f, 0x74, 0xaf, 0x87, 0x36, 0xf6, 0xc2, 0x0d, 0x4f, 0x84, 0xd7, + 0xa3, 0x34, 0xa6, 0x56, 0xb7, 0x36, 0xe0, 0x2a, 0x6f, 0x4d, 0x1a, 0xf5, 0x55, 0x9d, 0x60, 0x26, + 0x72, 0xa3, 0x54, 0x82, 0x3a, 0x19, 0x1c, 0xb7, 0x72, 0xa8, 0x9e, 0xb0, 0x7b, 0xcc, 0x05, 0x34, + 0x85, 0x17, 0xe8, 0x14, 0x8e, 0xd9, 0xc3, 0xb8, 0x15, 0xb4, 0x0e, 0x60, 0x7a, 0xaf, 0xdd, 0x3b, + 0x76, 0x3b, 0x44, 0x53, 0xea, 0xf8, 0x97, 0x68, 0x1d, 0x20, 0x02, 0xf0, 0x16, 0xc4, 0x9e, 0x3a, + 0x2a, 0x38, 0x5c, 0xe3, 0x43, 0x4c, 0x21, 0xd4, 0x70, 0xd9, 0x0a, 0x9e, 0xf5, 0xfb, 0x23, 0x80, + 0x78, 0x1b, 0xf5, 0xd0, 0x09, 0x71, 0x1d, 0x87, 0xc4, 0x46, 0x5e, 0x83, 0xac, 0xf4, 0x95, 0xc6, + 0xcf, 0xfb, 0xe5, 0xac, 0xdb, 0xb2, 0xb3, 0xdb, 0xeb, 0xe8, 0x43, 0x18, 0xa3, 0xd5, 0xa8, 0xac, + 0x67, 0x64, 0x7b, 0x2a, 0x85, 0x6a, 0xfe, 0xbc, 0x5f, 0x1e, 0x0b, 0xc8, 0x9f, 0x36, 0xab, 0x8c, + 0x3e, 0x82, 0xfc, 0x3a, 0x6e, 0xe3, 0x63, 0x27, 0xf4, 0x84, 0xde, 0x31, 0xef, 0x43, 0x00, 0x95, + 0x21, 0x8a, 0x6a, 0x92, 0x55, 0xcb, 0xc6, 0x4e, 0xe0, 0x75, 0xd4, 0x55, 0xcb, 0xa7, 0x10, 0x75, + 0xd5, 0x62, 0x75, 0xd0, 0x3f, 0xcc, 0xc0, 0x64, 0xa5, 0xd3, 0xe1, 0xab, 0x7a, 0xc0, 0xe3, 0x89, + 0x0b, 0x2b, 0x32, 0x1c, 0xbc, 0xe3, 0x1c, 0xe1, 0xf6, 0x21, 0xf1, 0x13, 0x83, 0xea, 0xf7, 0xc4, + 0xe4, 0xfd, 0x71, 0xbf, 0xfc, 0xe0, 0x55, 0x22, 0xcc, 0x2b, 0xfb, 0xbe, 0xe3, 0x86, 0x01, 0x0d, + 0xde, 0x44, 0x0d, 0xaa, 0x6a, 0xa6, 0xf0, 0x81, 0xde, 0x85, 0x31, 0xa2, 0xdf, 0x62, 0xf1, 0xa3, + 0x83, 0x4d, 0xe6, 0x81, 0xe6, 0xf1, 0xd3, 0x1a, 0xd6, 0x6d, 0xc8, 0x73, 0x49, 0x6e, 0xaf, 0x9b, + 0x86, 0xc0, 0x5a, 0x87, 0x9b, 0xd4, 0x75, 0xc1, 0x44, 0x73, 0x69, 0x08, 0x83, 0x6b, 0x62, 0xe4, + 0xeb, 0x4e, 0x50, 0xb0, 0xc4, 0xa6, 0x03, 0x42, 0x43, 0x20, 0xb6, 0x28, 0xb1, 0x6a, 0xb0, 0xb4, + 0x89, 0x43, 0x1b, 0x07, 0x38, 0xdc, 0x73, 0x82, 0xe0, 0x85, 0xe7, 0xb7, 0x68, 0xd1, 0xa5, 0x88, + 0xfc, 0xcd, 0x0c, 0x94, 0x6b, 0x3e, 0x26, 0x23, 0x6d, 0x24, 0x34, 0x78, 0x06, 0x2f, 0xf1, 0x88, + 0x7a, 0x36, 0x2a, 0x25, 0xb2, 0xe6, 0x51, 0xf3, 0x77, 0x60, 0x64, 0x7f, 0x7f, 0x87, 0x6a, 0xcc, + 0x08, 0x15, 0xdc, 0x48, 0x18, 0xb6, 0x7f, 0xd3, 0x2f, 0xe7, 0xd6, 0x7b, 0x2c, 0xe2, 0x6e, 0x93, + 0x72, 0xeb, 0x19, 0x2c, 0xd8, 0xb8, 0x83, 0x5f, 0x38, 0x47, 0x6d, 0xac, 0xf9, 0x68, 0x65, 0x18, + 0x63, 0x11, 0xa2, 0x44, 0x17, 0x18, 0x5c, 0x77, 0xe2, 0xb2, 0x43, 0x9c, 0x38, 0xeb, 0x0f, 0x32, + 0x50, 0x60, 0xdd, 0xad, 0x7a, 0xe1, 0xc5, 0xfa, 0xc7, 0x7b, 0x90, 0x1d, 0xdc, 0x03, 0x74, 0x27, + 0x92, 0xf6, 0x48, 0xb4, 0x0a, 0x51, 0x56, 0x89, 0x0d, 0x17, 0x85, 0xa4, 0x43, 0x4c, 0x97, 0xd8, + 0x7e, 0x80, 0x76, 0x88, 0xea, 0x92, 0xd0, 0xa0, 0x3f, 0xca, 0xc0, 0xac, 0xc2, 0x62, 0xd0, 0xf5, + 0x3a, 0x01, 0x26, 0x1b, 0x1b, 0xa2, 0x2c, 0x0a, 0x9f, 0x74, 0x63, 0x43, 0xd6, 0xae, 0x46, 0xe4, + 0x7e, 0x52, 0x86, 0xdf, 0x25, 0x1e, 0x75, 0x3b, 0xb1, 0x07, 0xa2, 0x86, 0x9b, 0x55, 0x15, 0xc5, + 0x17, 0x66, 0xfa, 0x1e, 0xe4, 0xe8, 0x9f, 0x44, 0x10, 0xa3, 0x66, 0x41, 0xc8, 0x4a, 0xd6, 0x7d, + 0x28, 0x10, 0x23, 0x70, 0x71, 0x31, 0x5b, 0xf3, 0x80, 0x36, 0x71, 0x58, 0xf5, 0x34, 0x6b, 0x6e, + 0x4d, 0xc3, 0xe4, 0x9e, 0xdb, 0x39, 0x16, 0x9f, 0x7f, 0x37, 0x0b, 0x53, 0xec, 0x9b, 0x8b, 0x25, + 0xb6, 0xbc, 0x65, 0x2e, 0xb2, 0xbc, 0x7d, 0x0a, 0xd3, 0x3c, 0xb0, 0x80, 0x7d, 0x1a, 0xcc, 0x64, + 0x42, 0xa2, 0x7b, 0x1b, 0x16, 0x5f, 0x68, 0x3c, 0x67, 0x25, 0xb6, 0x5e, 0x11, 0xed, 0xc0, 0x0c, + 0x03, 0x3c, 0xc4, 0x4e, 0xd8, 0x8b, 0xfc, 0xfb, 0xab, 0xdc, 0x21, 0x13, 0x60, 0x66, 0x21, 0x38, + 0xad, 0x67, 0x1c, 0x68, 0xc7, 0x70, 0xd1, 0xd7, 0x70, 0x75, 0xcf, 0xf7, 0x7e, 0x7c, 0xa9, 0x2c, + 0xe8, 0xcc, 0x48, 0x2e, 0x90, 0xed, 0x40, 0x97, 0x14, 0x35, 0xd4, 0x65, 0x3d, 0x5e, 0xdb, 0xfa, + 0xc3, 0x11, 0xc8, 0x49, 0x6a, 0x2b, 0xaa, 0xd7, 0xc5, 0x97, 0x3d, 0x3a, 0x11, 0x22, 0xdf, 0xda, + 0x56, 0x6a, 0xa0, 0xeb, 0x2c, 0x56, 0xc2, 0x16, 0xdc, 0x09, 0x32, 0x9a, 0x4e, 0xb7, 0x4b, 0x23, + 0x22, 0xc4, 0x6c, 0xad, 0x57, 0x69, 0xd7, 0x72, 0xcc, 0x6c, 0xb5, 0x8e, 0xec, 0xec, 0x7a, 0x95, + 0x0c, 0xe0, 0x93, 0xed, 0xf5, 0x1a, 0xe5, 0x32, 0xc7, 0x06, 0xd0, 0x73, 0x5b, 0x4d, 0x9b, 0x42, + 0x49, 0x69, 0xbd, 0xf2, 0x78, 0x87, 0x1a, 0x6d, 0x5e, 0x1a, 0x38, 0x67, 0x6d, 0x9b, 0x42, 0xd1, + 0x03, 0xb1, 0xa0, 0xd6, 0xbc, 0x4e, 0xe8, 0x7b, 0xed, 0x80, 0xee, 0x44, 0x73, 0xda, 0xc2, 0xd9, + 0xe4, 0x45, 0x76, 0xac, 0x2a, 0x7a, 0x0a, 0x8b, 0x95, 0xd6, 0x73, 0xa7, 0xd3, 0xc4, 0x2d, 0x56, + 0xf2, 0xd4, 0xf3, 0x4f, 0x9f, 0xb5, 0xbd, 0x17, 0x01, 0xdd, 0x44, 0xe4, 0xf8, 0x76, 0x84, 0x57, + 0x69, 0x70, 0x72, 0x2f, 0x44, 0x25, 0xdb, 0x84, 0x4d, 0x26, 0x63, 0xad, 0xed, 0xf5, 0x5a, 0x74, + 0xf7, 0x90, 0x63, 0x93, 0xb1, 0x49, 0x00, 0x36, 0x83, 0x13, 0x29, 0x6d, 0xd5, 0x1f, 0x53, 0xe7, + 0x9f, 0x4b, 0xe9, 0x24, 0x38, 0xb3, 0x09, 0x0c, 0xbd, 0x03, 0x13, 0x22, 0xbc, 0xc6, 0xf6, 0x9c, + 0x34, 0x20, 0xc1, 0xa3, 0x67, 0xb6, 0x28, 0xb3, 0x3e, 0x80, 0x59, 0x36, 0x13, 0x2e, 0xec, 0x13, + 0x59, 0x7b, 0x00, 0x75, 0x7c, 0xe6, 0x74, 0x4f, 0x3c, 0x32, 0xb0, 0x55, 0xf5, 0x8b, 0x3b, 0x09, + 0x48, 0xc6, 0x91, 0x79, 0xc1, 0xe1, 0x9a, 0xf0, 0x1a, 0x45, 0x4d, 0x5b, 0xc1, 0xb2, 0xfe, 0x73, + 0x16, 0x10, 0x8d, 0xa7, 0xd6, 0x43, 0x1f, 0x3b, 0x67, 0x82, 0x8d, 0xcf, 0x60, 0x8a, 0x59, 0x1a, + 0x06, 0xa6, 0xec, 0x10, 0x0f, 0x84, 0x69, 0xb3, 0x5a, 0xb4, 0x75, 0xc5, 0xd6, 0xaa, 0x12, 0x54, + 0x1b, 0x07, 0xbd, 0x33, 0x81, 0x9a, 0xd5, 0x50, 0xd5, 0x22, 0x82, 0xaa, 0x7e, 0xa3, 0xaf, 0x61, + 0xa6, 0xe6, 0x9d, 0x75, 0x89, 0x4c, 0x38, 0xf2, 0x08, 0x5f, 0xe7, 0x79, 0xbb, 0x5a, 0xe1, 0xd6, + 0x15, 0x3b, 0x56, 0x1d, 0xed, 0xc2, 0xdc, 0xc3, 0x76, 0x2f, 0x38, 0xa9, 0x74, 0x5a, 0xb5, 0xb6, + 0x17, 0x08, 0x2a, 0xa3, 0x7c, 0xaf, 0xcd, 0xe7, 0x62, 0xb2, 0xc6, 0xd6, 0x15, 0x3b, 0x0d, 0x11, + 0xbd, 0xc3, 0x0f, 0x87, 0xb9, 0xbf, 0x31, 0xbd, 0xc2, 0xcf, 0x8e, 0x9f, 0x74, 0xf0, 0x93, 0x67, + 0x5b, 0x57, 0x6c, 0x56, 0x5a, 0xcd, 0xc3, 0x84, 0xb0, 0x43, 0xf7, 0x60, 0x56, 0x11, 0x27, 0xf1, + 0x90, 0x7a, 0x01, 0x2a, 0x41, 0xee, 0xa0, 0xdb, 0xf6, 0x9c, 0x96, 0x58, 0x70, 0x6d, 0xf9, 0x6d, + 0xbd, 0xaf, 0x4b, 0x1a, 0x2d, 0xa9, 0x5e, 0x3f, 0xab, 0x1c, 0x01, 0xac, 0x2d, 0x5d, 0xb8, 0x83, + 0x6b, 0x6b, 0xed, 0x66, 0x63, 0xed, 0x16, 0xe2, 0xb2, 0xb6, 0x16, 0x52, 0x85, 0x67, 0x3d, 0xa2, + 0xce, 0x44, 0xa5, 0xdb, 0x6d, 0xbb, 0x4d, 0x6a, 0xcc, 0x99, 0xb1, 0x92, 0xeb, 0xf0, 0x6f, 0xa9, + 0x47, 0x98, 0xca, 0x02, 0x24, 0x0f, 0x2c, 0x95, 0x43, 0x4a, 0xeb, 0xe7, 0x70, 0xd3, 0x40, 0x8c, + 0x9b, 0xed, 0xcf, 0x60, 0x82, 0x83, 0x62, 0x0a, 0xad, 0x06, 0x7d, 0xe9, 0x7c, 0x0a, 0x38, 0xa6, + 0xa8, 0x6f, 0x7d, 0x07, 0xcb, 0x07, 0xdd, 0x00, 0xfb, 0x49, 0xf2, 0x82, 0xd5, 0x8f, 0xe5, 0x11, + 0x69, 0xc6, 0x18, 0x50, 0x86, 0xf3, 0x7e, 0x79, 0x9c, 0xd1, 0x16, 0x27, 0xa3, 0xd6, 0xaf, 0x32, + 0xb0, 0xcc, 0xa6, 0xaa, 0x91, 0xf4, 0x65, 0xa4, 0xa0, 0x04, 0x2c, 0xb3, 0xe6, 0x80, 0xe5, 0xc0, + 0x08, 0xae, 0xf5, 0x2d, 0x58, 0x9c, 0xa3, 0x76, 0xfb, 0x0d, 0x8d, 0xcd, 0x5f, 0xcf, 0xc0, 0x3c, + 0x1b, 0x9c, 0xd7, 0xa0, 0x82, 0xbe, 0x84, 0x99, 0xfa, 0xa9, 0xdb, 0x3d, 0x74, 0xda, 0x6e, 0x8b, + 0xc5, 0xee, 0xd8, 0x42, 0xb2, 0x40, 0x17, 0xbe, 0x53, 0xb7, 0xdb, 0x78, 0x1e, 0x15, 0x65, 0xec, + 0x58, 0x65, 0xeb, 0x09, 0x2c, 0xc4, 0x78, 0xe0, 0x8a, 0xf1, 0x71, 0x5c, 0x31, 0x12, 0xe7, 0xdb, + 0xe9, 0x5a, 0xf1, 0x18, 0xae, 0x49, 0xad, 0xd0, 0x87, 0x6c, 0x2d, 0xa6, 0x0d, 0x09, 0x82, 0x69, + 0xaa, 0xd0, 0x84, 0x6b, 0x52, 0x13, 0x5e, 0x43, 0x03, 0xc4, 0xe0, 0x66, 0x53, 0x07, 0x77, 0x1b, + 0x4a, 0xea, 0xe0, 0xbe, 0xce, 0xa0, 0xfe, 0xa7, 0x0c, 0x2c, 0x6e, 0xe2, 0x0e, 0xf6, 0x1d, 0xca, + 0xb2, 0xe6, 0xbd, 0xab, 0x71, 0xcb, 0xcc, 0xc0, 0xb8, 0xa5, 0x74, 0x4d, 0xb3, 0xe9, 0xae, 0x29, + 0x59, 0x0d, 0x0f, 0xec, 0x6d, 0xae, 0xab, 0x74, 0x35, 0xec, 0xf9, 0xae, 0x4d, 0x60, 0x68, 0x3b, + 0x8a, 0x79, 0x8e, 0x0e, 0x8d, 0x79, 0xce, 0xf1, 0x68, 0xd5, 0x04, 0x8f, 0x79, 0x6a, 0x91, 0x4e, + 0xeb, 0x01, 0x14, 0x93, 0x7d, 0xe1, 0xfa, 0x31, 0x6c, 0x3b, 0x60, 0xad, 0x47, 0xda, 0xcd, 0x8f, + 0x47, 0x65, 0xac, 0x37, 0x66, 0x42, 0x07, 0x84, 0x59, 0xac, 0x7a, 0xa4, 0x9f, 0x9c, 0x0a, 0x6f, + 0xff, 0x73, 0xa2, 0x9f, 0xec, 0x08, 0x3c, 0x63, 0x3e, 0x02, 0xe7, 0x3a, 0xca, 0x50, 0x05, 0x82, + 0xf5, 0x14, 0xae, 0x69, 0x44, 0x23, 0xad, 0xff, 0x12, 0x72, 0x02, 0x16, 0x8b, 0x02, 0x68, 0x64, + 0xe9, 0xb8, 0x05, 0x02, 0x59, 0xa2, 0x58, 0x7f, 0x9a, 0x81, 0x45, 0xb6, 0xba, 0x24, 0xfb, 0x7d, + 0xf1, 0xd1, 0xff, 0x33, 0x09, 0x2d, 0xdd, 0x4f, 0x09, 0x2d, 0x51, 0x14, 0x35, 0xb4, 0xa4, 0x06, + 0x94, 0xbe, 0x19, 0xcd, 0x65, 0x0b, 0x23, 0xd6, 0x21, 0x14, 0x93, 0x3d, 0x7c, 0x03, 0x63, 0xb2, + 0x09, 0x8b, 0xca, 0x44, 0x7f, 0x6d, 0x8d, 0x89, 0x5a, 0x7c, 0x83, 0x1a, 0x13, 0x55, 0x7c, 0x63, + 0x1a, 0xb3, 0x0d, 0x73, 0x8c, 0xb0, 0x3e, 0xbb, 0x56, 0xd5, 0xd9, 0x95, 0x7a, 0x1d, 0x23, 0x39, + 0xe1, 0x1e, 0xd3, 0x09, 0x27, 0xaa, 0x44, 0x1c, 0x7e, 0x04, 0xe3, 0xfc, 0xc6, 0x19, 0xe3, 0x2f, + 0x85, 0x18, 0xb5, 0xbc, 0xec, 0x9a, 0x99, 0xcd, 0x2b, 0x5b, 0x45, 0xda, 0x65, 0xb2, 0x4f, 0xe1, + 0x31, 0x5e, 0xb9, 0x15, 0xfc, 0x96, 0x98, 0xb8, 0x58, 0xc9, 0x6b, 0xae, 0x1a, 0x4f, 0xa0, 0xc8, + 0x56, 0x0d, 0x85, 0xea, 0x6b, 0xad, 0x1b, 0x9f, 0x42, 0x91, 0xa9, 0x53, 0x0a, 0xc1, 0xc1, 0x8b, + 0xc1, 0x32, 0x2c, 0xc9, 0xc5, 0x20, 0xad, 0xf7, 0x7f, 0x3b, 0x03, 0xd7, 0x37, 0x71, 0xa8, 0x5f, + 0xca, 0xf9, 0x73, 0x59, 0xbb, 0xbf, 0x87, 0x52, 0x1a, 0x23, 0x7c, 0x28, 0xbe, 0x8a, 0x0f, 0x85, + 0xf1, 0x06, 0x52, 0xfa, 0x90, 0xfc, 0x1c, 0x6e, 0xb0, 0x21, 0xd1, 0xeb, 0x8b, 0x8e, 0x3e, 0x88, + 0x8d, 0x8a, 0x91, 0x7a, 0xda, 0xe8, 0xfc, 0xfd, 0x0c, 0xdc, 0x60, 0x42, 0x4e, 0x27, 0xfe, 0x67, + 0xed, 0xdd, 0xed, 0x42, 0x59, 0x8e, 0xf9, 0x1b, 0x18, 0x58, 0xab, 0x09, 0x48, 0x90, 0xa9, 0xd5, + 0x6d, 0x41, 0xe2, 0x3a, 0x8c, 0xd4, 0xea, 0x36, 0x3f, 0xdf, 0xa4, 0x8b, 0x76, 0x33, 0xf0, 0x6d, + 0x02, 0x8b, 0x5b, 0xf0, 0xec, 0x05, 0x2c, 0xb8, 0xf5, 0x0b, 0x98, 0xd3, 0x1a, 0xe1, 0xe3, 0xbe, + 0x04, 0xa3, 0x35, 0xec, 0x87, 0xbc, 0x19, 0xda, 0xd3, 0x26, 0xf6, 0x43, 0x9b, 0x42, 0xd1, 0x1d, + 0x98, 0xa8, 0x55, 0x68, 0x5c, 0x8f, 0xfa, 0x16, 0x53, 0xcc, 0x30, 0x35, 0x9d, 0x06, 0xbd, 0xa8, + 0x6c, 0x8b, 0x42, 0xeb, 0xdf, 0x67, 0x14, 0xea, 0x04, 0x7d, 0x78, 0x1f, 0x3e, 0x20, 0xdb, 0x63, + 0x22, 0x33, 0xa5, 0x0b, 0xb3, 0x64, 0xd9, 0xe2, 0xe1, 0x17, 0xb6, 0xf2, 0xd9, 0x4a, 0xa5, 0x0b, + 0xc6, 0x24, 0xc5, 0x61, 0x14, 0x43, 0x12, 0xf1, 0x3a, 0x79, 0x18, 0xc5, 0x49, 0x07, 0xb6, 0x5a, + 0xc9, 0xfa, 0x1e, 0xe6, 0x75, 0xfe, 0xdf, 0xa8, 0x78, 0xde, 0xa6, 0x87, 0x2b, 0xca, 0x59, 0x1c, + 0x42, 0x6a, 0x20, 0x81, 0xab, 0xd5, 0x27, 0x50, 0xe0, 0xb5, 0xa2, 0x69, 0x79, 0x5b, 0xb8, 0x76, + 0x6c, 0x52, 0xea, 0x77, 0x57, 0x45, 0xe4, 0xf1, 0x67, 0x22, 0x54, 0x31, 0xac, 0x85, 0x7f, 0x9b, + 0x81, 0xe2, 0xe3, 0x87, 0x95, 0x4a, 0x2f, 0x3c, 0xc1, 0x9d, 0x90, 0x6c, 0x4a, 0x70, 0xed, 0xc4, + 0x69, 0xb7, 0x71, 0xe7, 0x98, 0x4a, 0xf7, 0x60, 0xf5, 0xa1, 0x5c, 0x95, 0xf8, 0xe9, 0xe7, 0xea, + 0x43, 0x59, 0xc3, 0x26, 0xe5, 0xe8, 0x2e, 0x8c, 0xee, 0x3f, 0xd9, 0xdf, 0xe3, 0x81, 0x83, 0x79, + 0x5e, 0x8f, 0x80, 0xa2, 0x8a, 0xb4, 0x06, 0x7a, 0x04, 0xb3, 0x4f, 0xf9, 0xa5, 0x72, 0x59, 0xc4, + 0x43, 0x06, 0x37, 0x57, 0xe4, 0x75, 0xf3, 0x9a, 0x8f, 0x5b, 0x84, 0x19, 0xa7, 0x5d, 0x09, 0x88, + 0xfd, 0x20, 0xc3, 0x98, 0xc4, 0xb3, 0xfe, 0x5d, 0x06, 0x16, 0x63, 0xac, 0x4b, 0x21, 0xdd, 0x11, + 0x9c, 0xb3, 0x5d, 0xa3, 0xe4, 0x5c, 0x54, 0xd8, 0xba, 0xc2, 0x58, 0x7f, 0x57, 0x63, 0x7d, 0x4e, + 0x61, 0x5d, 0xa9, 0xc9, 0x78, 0xaf, 0xd1, 0x3b, 0x8e, 0x94, 0x07, 0xce, 0xf2, 0x3b, 0x83, 0x59, + 0x8e, 0x08, 0x48, 0x44, 0x7e, 0x43, 0x89, 0xc2, 0xad, 0xbf, 0x04, 0x53, 0xaa, 0x2c, 0xd1, 0x12, + 0xe4, 0x1f, 0xe1, 0x97, 0x5b, 0x4e, 0xa7, 0xd5, 0x16, 0x63, 0x14, 0x01, 0x48, 0x69, 0x24, 0x32, + 0x16, 0x1b, 0x88, 0x00, 0x68, 0x1e, 0xc6, 0x2a, 0xdd, 0xae, 0x88, 0xfd, 0xda, 0xec, 0x03, 0x15, + 0x61, 0x42, 0x04, 0x46, 0xa9, 0x4b, 0x67, 0x8b, 0x4f, 0xcb, 0x85, 0x49, 0x45, 0x1a, 0x43, 0x9a, + 0x5e, 0x06, 0xa8, 0xb5, 0x5d, 0xdc, 0xa1, 0x86, 0x9c, 0xb7, 0xad, 0x40, 0x68, 0x4c, 0xc3, 0x3d, + 0xee, 0xd0, 0xe8, 0x25, 0x67, 0x20, 0x02, 0x58, 0x57, 0x61, 0x5a, 0x53, 0x05, 0xcb, 0x82, 0x29, + 0x55, 0xc0, 0x44, 0x2d, 0x6b, 0x5e, 0x4b, 0xaa, 0x25, 0xf9, 0xdb, 0xfa, 0xa3, 0x0c, 0xcc, 0x3f, + 0x7e, 0x58, 0xb1, 0xf1, 0xb1, 0x4b, 0xcc, 0x55, 0xd4, 0xd1, 0x7b, 0xea, 0xc0, 0xde, 0x50, 0x07, + 0x36, 0x56, 0x53, 0x8c, 0xf0, 0xaa, 0x36, 0xc2, 0x4b, 0xda, 0x08, 0x27, 0x51, 0xd8, 0x50, 0x7f, + 0x9e, 0x18, 0xea, 0xa5, 0xb4, 0xa1, 0xa6, 0x6e, 0xac, 0xeb, 0x75, 0xb4, 0x11, 0x56, 0x42, 0x4b, + 0x3f, 0x65, 0x60, 0x4e, 0xe9, 0x84, 0xec, 0xf0, 0x8a, 0xda, 0x87, 0x52, 0xb2, 0x0f, 0x71, 0x25, + 0xfd, 0x40, 0xeb, 0xc2, 0x8d, 0x94, 0x2e, 0x24, 0x94, 0xb5, 0x9a, 0xe8, 0xc1, 0xdb, 0x83, 0x7a, + 0x30, 0x54, 0x57, 0x5b, 0x30, 0x9f, 0x26, 0x64, 0x5d, 0x2b, 0x33, 0x46, 0xad, 0xcc, 0x1a, 0xb4, + 0x72, 0x44, 0xd7, 0x4a, 0x07, 0xe6, 0x52, 0xc4, 0x80, 0xde, 0x83, 0x02, 0x83, 0x31, 0x93, 0xce, + 0x4f, 0x58, 0x09, 0x66, 0x02, 0x3e, 0x4c, 0x57, 0xad, 0xff, 0x96, 0x81, 0x85, 0xd4, 0xc1, 0x47, + 0xd7, 0x88, 0x3f, 0xd2, 0xf4, 0x71, 0xc8, 0x69, 0xf3, 0x2f, 0x02, 0xdf, 0x0e, 0x82, 0x1e, 0x7f, + 0x24, 0x92, 0xb7, 0xf9, 0x17, 0x7a, 0x1b, 0xa6, 0xf7, 0xb0, 0xef, 0x7a, 0xad, 0x3a, 0x6e, 0x7a, + 0x9d, 0x16, 0x3b, 0x40, 0x98, 0xb6, 0x75, 0x20, 0x11, 0x50, 0xa5, 0x7d, 0xec, 0xf9, 0x6e, 0x78, + 0x72, 0xc6, 0x27, 0x61, 0x04, 0x20, 0xb4, 0xd7, 0xdd, 0x63, 0x37, 0x64, 0xe7, 0xa3, 0xd3, 0x36, + 0xff, 0x22, 0x22, 0xaa, 0x34, 0x9b, 0x5e, 0xaf, 0x13, 0xd2, 0xd8, 0x7a, 0xde, 0x16, 0x9f, 0x04, + 0xe3, 0x5b, 0x9b, 0x4e, 0x17, 0x7a, 0x8d, 0xcb, 0xe6, 0x5f, 0xd6, 0x7b, 0x30, 0x9f, 0xa6, 0x10, + 0xa9, 0x93, 0xeb, 0xaf, 0x66, 0x61, 0xae, 0xd2, 0x6a, 0x3d, 0x7e, 0x58, 0x59, 0xc7, 0xaa, 0x5b, + 0xfb, 0x21, 0x8c, 0x6e, 0x77, 0xdc, 0x90, 0x2b, 0xe6, 0x32, 0xd7, 0xb3, 0x94, 0x9a, 0xa4, 0x16, + 0x51, 0x35, 0xf2, 0x3f, 0xb2, 0x61, 0x6e, 0xe3, 0x47, 0x37, 0x08, 0xdd, 0xce, 0x31, 0x55, 0x76, + 0xd6, 0x30, 0x57, 0x56, 0x41, 0xc4, 0x60, 0xa7, 0xb7, 0xae, 0xd8, 0x69, 0xc8, 0x68, 0x1f, 0xae, + 0xed, 0xe2, 0x17, 0x29, 0x73, 0x47, 0xde, 0xc2, 0x92, 0x64, 0x53, 0xa6, 0x80, 0x01, 0x57, 0x9d, + 0x9a, 0x7f, 0x2b, 0x4b, 0xaf, 0xf6, 0x29, 0x1d, 0xe3, 0x2d, 0x1f, 0xc0, 0xbc, 0xc2, 0x90, 0xae, + 0xdb, 0x93, 0xab, 0xe5, 0xf4, 0xee, 0xa8, 0x16, 0x24, 0x15, 0x1d, 0x3d, 0x85, 0x45, 0x9d, 0x29, + 0xdd, 0x96, 0x47, 0xb3, 0x3a, 0xad, 0xca, 0xd6, 0x15, 0xdb, 0x84, 0x8d, 0x56, 0x61, 0xa4, 0xd2, + 0x3c, 0xe5, 0x62, 0x49, 0x1f, 0x32, 0xd6, 0xb3, 0x4a, 0xf3, 0x94, 0x5e, 0x93, 0x6d, 0x9e, 0x6a, + 0x13, 0xfb, 0xff, 0x64, 0x60, 0xd1, 0x30, 0xc2, 0xa8, 0x0e, 0xb0, 0x83, 0x8f, 0x9d, 0xe6, 0x4b, + 0x79, 0x28, 0x3c, 0xb3, 0x7a, 0x6f, 0xb0, 0x56, 0xac, 0x30, 0x04, 0x06, 0x27, 0x68, 0xd5, 0x2c, + 0xf1, 0xd8, 0x22, 0x32, 0x64, 0x82, 0xb2, 0x52, 0xc5, 0x15, 0x51, 0x20, 0xc4, 0x09, 0x8c, 0xb0, + 0x69, 0xbf, 0x66, 0xe4, 0x2d, 0xa9, 0xa8, 0xc0, 0x56, 0x2a, 0x59, 0x6b, 0x50, 0x88, 0x37, 0x8b, + 0x72, 0xcc, 0x66, 0xb2, 0xcb, 0x4c, 0x07, 0xab, 0x0f, 0x0b, 0x19, 0x34, 0x15, 0xd9, 0xc4, 0x42, + 0xd6, 0xaa, 0xc5, 0xfb, 0x2d, 0xc5, 0x84, 0xee, 0xc2, 0x38, 0x03, 0xf2, 0x51, 0x17, 0x0f, 0x7c, + 0xa2, 0xca, 0xbc, 0xdc, 0xfa, 0x83, 0x8c, 0x88, 0x2e, 0x26, 0x26, 0xd3, 0x27, 0xda, 0x64, 0x7a, + 0x4b, 0xf6, 0x20, 0xad, 0xb2, 0x36, 0x9f, 0xaa, 0x30, 0xf9, 0x2a, 0xf3, 0x48, 0x45, 0x52, 0x35, + 0xfd, 0x9f, 0x65, 0x44, 0x5c, 0x24, 0xa9, 0xec, 0x1b, 0x30, 0xf5, 0x6a, 0x4a, 0xae, 0xa1, 0xa1, + 0x8f, 0x98, 0x0e, 0x66, 0x07, 0xf7, 0x74, 0xa0, 0x1a, 0x7e, 0x21, 0x02, 0xa8, 0xa9, 0x8a, 0x38, + 0x44, 0x67, 0xac, 0xa5, 0x14, 0x6c, 0xd9, 0x9c, 0xd5, 0x4b, 0x94, 0xd6, 0x5f, 0x76, 0x9a, 0x62, + 0x9c, 0xee, 0xc4, 0xaf, 0x56, 0x18, 0xcf, 0xcd, 0x55, 0x1e, 0xb2, 0x51, 0x4c, 0xad, 0x85, 0xa3, + 0xdb, 0x6c, 0x2a, 0x53, 0xe7, 0xb1, 0x99, 0xf5, 0x2a, 0x8d, 0xd6, 0x60, 0x7a, 0x17, 0xbf, 0x48, + 0xb4, 0x4b, 0xcf, 0x48, 0x3b, 0xf8, 0x45, 0x43, 0x69, 0x5b, 0xb9, 0xbf, 0xa2, 0xe3, 0xa0, 0x23, + 0x98, 0x11, 0xd6, 0xe3, 0xa2, 0x46, 0x94, 0x5d, 0x2e, 0x25, 0x2d, 0x9c, 0x3d, 0x73, 0x1a, 0x3e, + 0x87, 0xaa, 0xb7, 0x42, 0x75, 0x8a, 0xd6, 0x1e, 0x14, 0x93, 0x7d, 0xe5, 0x5a, 0xf6, 0xe1, 0xb0, + 0xe9, 0xc4, 0x76, 0xf8, 0x2d, 0x7d, 0x6a, 0x6d, 0xd1, 0x60, 0x94, 0xac, 0x23, 0xb7, 0xd1, 0xf7, + 0xe3, 0xa2, 0xa3, 0x97, 0xf8, 0x84, 0xe8, 0xd4, 0xdb, 0xeb, 0xd1, 0xe5, 0x9a, 0x85, 0x18, 0x25, + 0xe9, 0x57, 0x4c, 0x70, 0x90, 0x7c, 0x15, 0x10, 0x9f, 0xe8, 0xa2, 0x82, 0xf5, 0x8f, 0x32, 0x70, + 0xfd, 0x20, 0xc0, 0x7e, 0xdd, 0xed, 0x1c, 0xb7, 0xf1, 0x41, 0xa0, 0x5f, 0x6d, 0xf9, 0x6d, 0x6d, + 0xb2, 0x2f, 0x1a, 0xee, 0x89, 0xfe, 0xff, 0x9a, 0xe2, 0xff, 0x34, 0x03, 0xa5, 0x34, 0xde, 0xde, + 0xec, 0x2c, 0x5f, 0xe1, 0xfb, 0x5e, 0xc6, 0x6d, 0x91, 0xa3, 0xcb, 0x36, 0x45, 0x67, 0x49, 0x27, + 0xc9, 0xff, 0xda, 0xf4, 0xfe, 0x57, 0x19, 0x98, 0xdf, 0x0e, 0x28, 0xfb, 0xbf, 0xec, 0xb9, 0x3e, + 0x6e, 0x09, 0xc1, 0xad, 0xa4, 0xdd, 0x26, 0xa6, 0xe3, 0xba, 0x75, 0x25, 0xed, 0xb6, 0xf0, 0x87, + 0xca, 0x1d, 0xce, 0xec, 0xa0, 0x6b, 0xc2, 0xda, 0xd3, 0x94, 0x3b, 0x30, 0xba, 0x4b, 0x9c, 0xa0, + 0x11, 0xae, 0x7f, 0x0c, 0x83, 0x80, 0x76, 0xbc, 0x63, 0x97, 0xf8, 0xef, 0xb4, 0xbc, 0x9a, 0x83, + 0xf1, 0x7d, 0xc7, 0x3f, 0xc6, 0xa1, 0xf5, 0x73, 0x28, 0xf1, 0x03, 0x61, 0x16, 0x67, 0xa5, 0xc7, + 0xc6, 0x41, 0x14, 0xff, 0x1b, 0x74, 0x88, 0xbb, 0x0c, 0x50, 0x0f, 0x1d, 0x3f, 0xdc, 0xee, 0xb4, + 0xf0, 0x8f, 0x94, 0xcb, 0x31, 0x5b, 0x81, 0x58, 0x1f, 0x41, 0x5e, 0x36, 0x4d, 0xf7, 0xe4, 0x8a, + 0x7f, 0x46, 0xfe, 0x26, 0x6e, 0x33, 0x2d, 0x14, 0x6e, 0x33, 0xfd, 0xb0, 0xd6, 0x60, 0x21, 0x26, + 0x42, 0x3e, 0xbe, 0x25, 0x22, 0x68, 0x06, 0x63, 0x97, 0x45, 0x6c, 0xf9, 0x6d, 0xd5, 0x60, 0x36, + 0x31, 0x42, 0x08, 0xd1, 0xeb, 0xbd, 0x2c, 0x80, 0x41, 0x8c, 0x71, 0xbd, 0xbe, 0x45, 0x60, 0xfb, + 0x3b, 0x75, 0x76, 0xeb, 0x8a, 0xc0, 0xf6, 0x77, 0xea, 0xd5, 0x71, 0x36, 0xe2, 0xd6, 0xbf, 0xc8, + 0xd2, 0x30, 0x44, 0x42, 0x06, 0xb1, 0x70, 0x96, 0x1a, 0x52, 0xab, 0x42, 0x9e, 0xf6, 0x78, 0x5d, + 0xdc, 0x4e, 0x1c, 0x7c, 0x8a, 0x94, 0xfb, 0xa9, 0x5f, 0xbe, 0x42, 0x8f, 0x8e, 0x22, 0x34, 0xf4, + 0x15, 0x4c, 0x6c, 0x74, 0x5a, 0x94, 0xc2, 0xc8, 0x25, 0x28, 0x08, 0x24, 0x32, 0x0e, 0x94, 0x65, + 0xe2, 0x0f, 0xf0, 0x98, 0x8f, 0xad, 0x40, 0xa8, 0x98, 0xdd, 0x33, 0x97, 0xdd, 0x15, 0x18, 0xb3, + 0xd9, 0x07, 0x91, 0x26, 0x65, 0x41, 0xbc, 0xb0, 0xc8, 0xdb, 0xf2, 0x1b, 0x59, 0x30, 0xf6, 0xc4, + 0x6f, 0xf1, 0xfb, 0xee, 0x33, 0xab, 0x53, 0xe2, 0xc9, 0x39, 0x81, 0xd9, 0xac, 0xc8, 0xfa, 0x5f, + 0xf4, 0xfc, 0x2e, 0x4c, 0xd5, 0x1b, 0x4d, 0x2a, 0x99, 0xd7, 0x96, 0x4a, 0xf6, 0x55, 0xa4, 0x22, + 0x7b, 0x3d, 0x62, 0xea, 0xf5, 0xa8, 0xa9, 0xd7, 0x63, 0xe6, 0x5e, 0x6f, 0xc2, 0x38, 0xeb, 0x2a, + 0xba, 0x0d, 0x63, 0xdb, 0x21, 0x3e, 0x8b, 0xc2, 0x53, 0xea, 0x0d, 0x0c, 0x9b, 0x95, 0x91, 0xfd, + 0xcd, 0x8e, 0x13, 0x84, 0xe2, 0x9e, 0x5f, 0xde, 0x16, 0x9f, 0xd6, 0x1f, 0x67, 0xa0, 0xb0, 0xe3, + 0x06, 0x21, 0x99, 0x08, 0x17, 0xd4, 0x35, 0xd9, 0xa3, 0xac, 0xa9, 0x47, 0x23, 0xb1, 0x1e, 0x3d, + 0x80, 0x71, 0x7a, 0xfd, 0x34, 0xe0, 0xaf, 0xa9, 0x6e, 0xf3, 0x2e, 0xc5, 0x1b, 0x66, 0x97, 0x54, + 0x03, 0xfa, 0xea, 0xc9, 0xe6, 0x28, 0xa5, 0xcf, 0x60, 0x52, 0x01, 0x5f, 0xea, 0x31, 0xd4, 0x77, + 0x30, 0xab, 0x34, 0x21, 0xaf, 0x03, 0x0e, 0x39, 0xf1, 0x90, 0x11, 0x75, 0x22, 0xb6, 0x5d, 0xfc, + 0xa3, 0x2a, 0x36, 0xfe, 0x69, 0xfd, 0x40, 0x6f, 0x4f, 0xef, 0x78, 0xcd, 0x53, 0x25, 0xde, 0x3c, + 0xc1, 0x8c, 0x59, 0xfc, 0xd8, 0x86, 0xd4, 0x62, 0x25, 0xb6, 0xa8, 0x81, 0x6e, 0xc1, 0xe4, 0x76, + 0xe7, 0xa1, 0xe7, 0x37, 0xf1, 0x93, 0x4e, 0x9b, 0x51, 0xcf, 0xd9, 0x2a, 0x88, 0x87, 0x22, 0x79, + 0x0b, 0x51, 0x28, 0x92, 0x02, 0x62, 0xa1, 0x48, 0xf6, 0x98, 0xd3, 0x66, 0x65, 0x3c, 0xd2, 0x49, + 0xfe, 0x1e, 0x14, 0x87, 0x94, 0x01, 0xcb, 0x61, 0x15, 0x8f, 0xe0, 0xba, 0x8d, 0xbb, 0x6d, 0x87, + 0xf8, 0x78, 0x67, 0x1e, 0xab, 0x2f, 0xfb, 0x7c, 0x2b, 0xe5, 0x0e, 0xa1, 0x7e, 0x6a, 0x29, 0x59, + 0xce, 0x0e, 0x60, 0xf9, 0x0c, 0xde, 0xda, 0xc4, 0x61, 0xea, 0x8b, 0xcc, 0xa8, 0xf3, 0x5b, 0x90, + 0xe3, 0x2f, 0x19, 0x44, 0xff, 0x87, 0x3d, 0x06, 0xe5, 0x47, 0x78, 0x9c, 0x8e, 0xfc, 0xcb, 0xaa, + 0x8a, 0xab, 0x21, 0xa9, 0x88, 0x17, 0xbb, 0x68, 0xd6, 0xa0, 0x47, 0x39, 0x3a, 0x81, 0x88, 0xd7, + 0x0a, 0xe4, 0x04, 0x2c, 0x76, 0x96, 0x93, 0x78, 0x40, 0x4a, 0x99, 0x6c, 0x09, 0x02, 0x12, 0xcd, + 0xfa, 0x14, 0x8a, 0x89, 0x06, 0x2e, 0xc6, 0xda, 0x03, 0x71, 0x54, 0xf3, 0x2a, 0xc8, 0x1e, 0x5c, + 0xd7, 0xd1, 0xd4, 0xb3, 0x84, 0x82, 0x72, 0x96, 0xc0, 0x8e, 0x10, 0x88, 0x02, 0xd8, 0x3b, 0x1b, + 0x9d, 0x56, 0xd7, 0x73, 0x3b, 0x21, 0x9f, 0x25, 0x2a, 0x08, 0x2d, 0xab, 0x27, 0x06, 0x53, 0xc9, + 0xeb, 0xcb, 0xf7, 0xa1, 0x94, 0xd6, 0xa0, 0x12, 0x4e, 0x91, 0xc1, 0x7f, 0xe6, 0xe8, 0x58, 0x27, + 0x30, 0xaf, 0xe5, 0xe9, 0x88, 0x12, 0x0f, 0x44, 0xf9, 0x49, 0xf2, 0xd5, 0x2f, 0x7e, 0xd3, 0x2f, + 0x7f, 0x7a, 0x99, 0xd7, 0x88, 0x82, 0xe6, 0xbe, 0xbc, 0x81, 0x6d, 0x2d, 0xc2, 0x48, 0xcd, 0xde, + 0xa1, 0xdd, 0xb6, 0x77, 0x64, 0xb7, 0xed, 0x1d, 0xeb, 0x37, 0x19, 0x28, 0xd7, 0x4e, 0x9c, 0xce, + 0x31, 0x5d, 0xe4, 0x15, 0x7f, 0x4e, 0x39, 0x04, 0xbf, 0xe8, 0x9e, 0x63, 0x15, 0x26, 0x77, 0xf1, + 0x0b, 0x71, 0x7b, 0x9c, 0xdf, 0xc3, 0xa6, 0x67, 0x25, 0x64, 0x3f, 0xd0, 0xe5, 0x70, 0x5b, 0xad, + 0x84, 0xfe, 0xf2, 0xab, 0xc7, 0x6b, 0xd8, 0x6b, 0xfd, 0x68, 0xab, 0xc1, 0x4a, 0xd3, 0xf6, 0x1c, + 0x86, 0x26, 0xac, 0x7f, 0x9d, 0x81, 0x5b, 0xe6, 0xce, 0xf3, 0x81, 0x5b, 0xd7, 0x72, 0x1e, 0x0c, + 0x38, 0xbe, 0xa7, 0x7b, 0x3a, 0x25, 0xe7, 0x41, 0x3c, 0xcf, 0x81, 0x8d, 0x9b, 0xde, 0x73, 0xec, + 0xbf, 0x8c, 0x9d, 0x76, 0x08, 0x70, 0x8d, 0xd8, 0x76, 0x91, 0x31, 0x86, 0x81, 0xb4, 0x67, 0x8e, + 0x1c, 0x66, 0xfd, 0xc7, 0x0c, 0xdc, 0xa0, 0xeb, 0x11, 0x0f, 0xec, 0x89, 0x82, 0xcb, 0x5f, 0xf6, + 0xf8, 0x08, 0xa6, 0xd4, 0xc6, 0xf9, 0x80, 0xd1, 0x47, 0xd2, 0x82, 0x83, 0x46, 0xd3, 0x6b, 0x61, + 0x5b, 0xab, 0x86, 0xb6, 0x61, 0x92, 0x7f, 0x2b, 0x81, 0x96, 0x05, 0x25, 0x83, 0x0a, 0xd5, 0x07, + 0xf6, 0xaa, 0x8d, 0x8e, 0x3e, 0x27, 0xd6, 0xa0, 0x2f, 0x02, 0x54, 0x5c, 0xeb, 0xd7, 0x59, 0x58, + 0x3a, 0xc4, 0xbe, 0xfb, 0xec, 0xa5, 0xa1, 0x33, 0x4f, 0x60, 0x5e, 0x80, 0x68, 0x9f, 0x75, 0x3d, + 0x64, 0xcf, 0xd5, 0x04, 0xab, 0x01, 0xa9, 0xd0, 0x90, 0x6a, 0x99, 0x8a, 0x78, 0x89, 0x07, 0x9c, + 0x1f, 0x42, 0x4e, 0xaa, 0xf2, 0x08, 0x95, 0x0c, 0x1d, 0x1b, 0xa1, 0xc6, 0xfa, 0x5b, 0x76, 0xa9, + 0xcf, 0x7f, 0xc3, 0x7c, 0xb4, 0xc4, 0xef, 0x44, 0x0d, 0xd9, 0xad, 0x31, 0xad, 0x26, 0x1a, 0xed, + 0x28, 0xa5, 0x29, 0x5a, 0xbd, 0x75, 0xc5, 0x36, 0xb5, 0x54, 0x9d, 0x84, 0x7c, 0x85, 0x1e, 0x79, + 0x11, 0x4f, 0xfe, 0x7f, 0x67, 0x61, 0x59, 0xdc, 0xff, 0x34, 0x88, 0xf9, 0x3b, 0x58, 0x14, 0xa0, + 0x4a, 0xb7, 0xeb, 0x7b, 0xcf, 0x71, 0x4b, 0x97, 0x34, 0x7b, 0x32, 0x2a, 0x24, 0xed, 0xf0, 0x3a, + 0x91, 0xb0, 0x4d, 0xe8, 0x6f, 0x26, 0x0e, 0xf1, 0x95, 0x6e, 0x58, 0xd8, 0x68, 0xd0, 0xf7, 0x61, + 0xaa, 0x61, 0xd1, 0x93, 0xfd, 0xa8, 0x46, 0xa6, 0x95, 0x88, 0x63, 0x8c, 0xbe, 0x6e, 0x1c, 0x63, + 0xeb, 0x4a, 0x3c, 0x92, 0x51, 0x9d, 0x81, 0xa9, 0x5d, 0xfc, 0x22, 0x92, 0xfb, 0xef, 0x65, 0x60, + 0x5a, 0x9b, 0xdc, 0xe8, 0x5d, 0x18, 0xa3, 0x7f, 0xd0, 0x95, 0x94, 0x3f, 0x21, 0x22, 0x13, 0x4c, + 0x7b, 0x42, 0xc4, 0xaa, 0x6e, 0xc3, 0x04, 0xbb, 0xeb, 0xd4, 0xba, 0x80, 0xb3, 0x2e, 0xaf, 0xd2, + 0x35, 0x19, 0x0a, 0xf3, 0xdb, 0x39, 0xbe, 0xf5, 0x08, 0xde, 0xe2, 0xd7, 0xa6, 0xf4, 0xc1, 0xaf, + 0xa9, 0x8e, 0xf2, 0x05, 0x6d, 0xbc, 0xe5, 0xc0, 0xf2, 0x26, 0x8e, 0x9b, 0x1e, 0xed, 0xaa, 0xe1, + 0xd7, 0x70, 0x55, 0x83, 0x4b, 0x8a, 0xf4, 0x45, 0x83, 0xd4, 0x21, 0x49, 0x3a, 0x5e, 0xdb, 0xba, + 0x95, 0xd6, 0x84, 0xca, 0xac, 0x85, 0xe1, 0x2a, 0xdd, 0x92, 0xca, 0xd3, 0xa8, 0xe0, 0x12, 0x56, + 0xef, 0xae, 0x32, 0xaf, 0x99, 0xc5, 0x63, 0x4f, 0x45, 0xc5, 0xf2, 0x24, 0x4b, 0xad, 0xff, 0x99, + 0x01, 0x8b, 0x4b, 0x2e, 0x2d, 0xce, 0x21, 0x3a, 0x7c, 0x94, 0xe0, 0x86, 0xaf, 0x12, 0xd7, 0xd4, + 0x68, 0x4e, 0x54, 0xca, 0x54, 0x8b, 0x3e, 0xda, 0x69, 0x46, 0x50, 0x4d, 0xb5, 0x12, 0xdd, 0xfb, + 0x85, 0xc1, 0x0e, 0xb2, 0xd9, 0x44, 0x73, 0x85, 0x18, 0xec, 0xa0, 0x46, 0x37, 0x95, 0x88, 0x1a, + 0x10, 0xfa, 0x07, 0x19, 0xb8, 0xc1, 0xba, 0xbc, 0xe7, 0xbb, 0xcf, 0xdd, 0x36, 0x3e, 0xc6, 0xda, + 0xe0, 0xf6, 0xd2, 0x8f, 0x6c, 0x32, 0x17, 0xb2, 0x6c, 0x34, 0xed, 0x01, 0xe6, 0xe8, 0xa6, 0xf8, + 0x60, 0x1a, 0x7d, 0xeb, 0xef, 0x65, 0x60, 0x59, 0x3c, 0x50, 0x8b, 0x9d, 0x63, 0x5c, 0xd6, 0x49, + 0xa9, 0x6a, 0xa7, 0x04, 0x59, 0xc3, 0x29, 0x81, 0x16, 0xa0, 0x0d, 0xe3, 0xc7, 0x06, 0x7f, 0x98, + 0x85, 0xd9, 0x3d, 0xe7, 0xd8, 0xed, 0x90, 0xf9, 0x25, 0xf2, 0x86, 0xa0, 0x4a, 0x22, 0xfd, 0xd2, + 0xe0, 0xeb, 0x49, 0x29, 0xf9, 0x95, 0x56, 0xd5, 0x4c, 0x28, 0x59, 0xd3, 0xc5, 0x75, 0x3d, 0xdf, + 0xc9, 0x67, 0x5a, 0x88, 0x2a, 0x71, 0x43, 0x8d, 0xbe, 0x68, 0xea, 0x78, 0xad, 0x58, 0x4a, 0x32, + 0x1a, 0x2e, 0x7a, 0x02, 0x93, 0xca, 0x35, 0x33, 0x6e, 0x14, 0x13, 0x14, 0xa8, 0xa1, 0x3d, 0xed, + 0x1d, 0xe1, 0xd4, 0xf4, 0x33, 0x2a, 0x85, 0x2a, 0x40, 0x4e, 0x64, 0xbb, 0xb3, 0xfe, 0xc9, 0x28, + 0xcc, 0x93, 0x3d, 0xab, 0x90, 0x4f, 0x10, 0x19, 0x88, 0x29, 0x01, 0x53, 0xbc, 0x5c, 0xbe, 0x96, + 0x33, 0x78, 0x23, 0x96, 0x7c, 0x4f, 0x43, 0x40, 0x1f, 0xa9, 0x9b, 0xfa, 0xac, 0xf2, 0x24, 0x3f, + 0x99, 0x37, 0x4d, 0xdd, 0xed, 0xbf, 0xab, 0xc5, 0x2f, 0x98, 0xf5, 0x6d, 0x13, 0x80, 0x6a, 0x7d, + 0x59, 0x08, 0x60, 0x2d, 0x1e, 0xd4, 0x60, 0x0d, 0xb0, 0x99, 0x75, 0x8a, 0x35, 0xc7, 0x4c, 0xc6, + 0x06, 0x0e, 0x64, 0x6c, 0x60, 0x8c, 0x6e, 0x94, 0x7e, 0xa6, 0xc4, 0x06, 0xe2, 0x42, 0x50, 0xe3, + 0x03, 0xec, 0x3d, 0x6c, 0x9b, 0x02, 0xd4, 0xf7, 0xb0, 0xac, 0x0a, 0xda, 0x87, 0xb9, 0x3d, 0x1f, + 0xb7, 0xe8, 0x54, 0xda, 0xf8, 0xb1, 0xeb, 0x73, 0x47, 0x94, 0x46, 0x98, 0x58, 0x7e, 0xa2, 0xae, + 0x28, 0x6e, 0x60, 0x59, 0xae, 0xce, 0xa8, 0x14, 0x74, 0xb4, 0x01, 0x33, 0x75, 0xec, 0xf8, 0xcd, + 0x93, 0x47, 0xf8, 0x25, 0x31, 0x76, 0x41, 0x71, 0x22, 0xca, 0xe9, 0x10, 0xd0, 0x12, 0xd2, 0x51, + 0x5a, 0xa4, 0x46, 0xef, 0x75, 0xa4, 0xd7, 0x09, 0x69, 0xfc, 0xe3, 0x0c, 0x2c, 0xc4, 0x44, 0xc3, + 0x3d, 0xee, 0x27, 0x90, 0x97, 0x40, 0xbe, 0xe9, 0x14, 0x41, 0xe3, 0xc4, 0xac, 0x63, 0x03, 0x23, + 0xf4, 0x46, 0x65, 0x35, 0xa2, 0x81, 0xee, 0xc7, 0xa2, 0x1f, 0xcc, 0x93, 0xeb, 0xe0, 0x1f, 0xe3, + 0x83, 0x29, 0xa3, 0x22, 0x7f, 0x32, 0x2e, 0xec, 0x20, 0x77, 0xe0, 0xf7, 0x7d, 0xa7, 0x79, 0x1a, + 0xdd, 0x12, 0xfc, 0x28, 0x79, 0x25, 0xef, 0x22, 0x2a, 0x78, 0x47, 0x7b, 0x26, 0x6b, 0x4e, 0x33, + 0x19, 0xbd, 0x98, 0x1e, 0xb9, 0xc0, 0x8b, 0xe9, 0x7b, 0x30, 0xb1, 0xdd, 0x79, 0xee, 0x12, 0x5f, + 0x81, 0xdd, 0x4f, 0xa3, 0x2b, 0xad, 0xcb, 0x40, 0x6a, 0xef, 0x78, 0x2d, 0xf4, 0x19, 0xe4, 0xb6, + 0xbc, 0x20, 0xa4, 0x8b, 0xe5, 0x58, 0xe4, 0x8f, 0x85, 0x34, 0xa4, 0xd3, 0x38, 0xe1, 0x45, 0xaa, + 0x92, 0x8b, 0xea, 0xe8, 0x63, 0x98, 0xa8, 0xb4, 0x5a, 0x44, 0x8b, 0xb8, 0x06, 0xd2, 0x1c, 0x75, + 0x1c, 0xd3, 0x61, 0x25, 0x6a, 0x93, 0xbc, 0x32, 0xfa, 0x42, 0x8f, 0xaf, 0x4c, 0x44, 0xf9, 0x04, + 0xd2, 0xf3, 0x35, 0xea, 0xb1, 0x97, 0x77, 0x45, 0x5c, 0x9b, 0xe5, 0x92, 0x61, 0x53, 0x97, 0x00, + 0xb4, 0xa9, 0x4b, 0xc3, 0xe2, 0xdb, 0x90, 0xdf, 0xee, 0xb8, 0xa1, 0x4b, 0xdf, 0xa8, 0xe7, 0x35, + 0x13, 0xba, 0xe7, 0xf8, 0xa1, 0xdb, 0x74, 0xbb, 0x4e, 0x27, 0x64, 0xa3, 0xe5, 0x8a, 0x8a, 0xea, + 0x68, 0x49, 0x6c, 0x35, 0x85, 0x0b, 0xbc, 0xb1, 0x14, 0x2e, 0xa9, 0x59, 0x50, 0x26, 0x5f, 0x3d, + 0x0b, 0xca, 0x1a, 0x1b, 0x4b, 0x9a, 0xcc, 0x72, 0x2a, 0x52, 0x44, 0x7a, 0x09, 0x55, 0x4f, 0x61, + 0x69, 0xcb, 0x8a, 0xe8, 0x16, 0x7d, 0x93, 0x3e, 0x1d, 0x5d, 0xf5, 0xd4, 0xce, 0xbf, 0xb2, 0xdb, + 0xeb, 0xa8, 0x01, 0x53, 0xa4, 0xf6, 0x9e, 0xd7, 0x76, 0x9b, 0x2e, 0x0e, 0x8a, 0x33, 0x5a, 0x9c, + 0x4a, 0x9f, 0x14, 0xb4, 0xd2, 0xcb, 0x3a, 0x0e, 0x99, 0x11, 0xa7, 0x4d, 0x77, 0x39, 0xa2, 0x6a, + 0xc4, 0x55, 0x82, 0x96, 0x4d, 0xa3, 0x42, 0xe9, 0xb3, 0xeb, 0xe3, 0xe4, 0xad, 0x7b, 0x9a, 0xfc, + 0x2b, 0xba, 0x75, 0xaf, 0x0e, 0x58, 0x74, 0xff, 0xfe, 0x00, 0x6e, 0xd8, 0xf8, 0xcc, 0x7b, 0x8e, + 0xdf, 0x2c, 0xd9, 0x5f, 0xc0, 0x75, 0x9d, 0xe0, 0x41, 0xb7, 0x45, 0x5f, 0xf1, 0xb1, 0xa8, 0x7a, + 0x6a, 0x26, 0x05, 0x8e, 0xc0, 0x32, 0x29, 0xb0, 0x97, 0xc0, 0xe4, 0x4f, 0x55, 0x5f, 0x69, 0x99, + 0xe5, 0xc1, 0x92, 0x4e, 0xbc, 0xd2, 0x6a, 0x29, 0x8a, 0x4a, 0xd6, 0x68, 0xe5, 0x33, 0xe6, 0x14, + 0xa8, 0x1a, 0x4d, 0x53, 0x2e, 0x76, 0x23, 0x80, 0x3a, 0x97, 0x94, 0x7a, 0x16, 0x86, 0x72, 0x5c, + 0x3c, 0x44, 0x64, 0x6a, 0x9b, 0x55, 0x98, 0x56, 0x3e, 0xa5, 0x9b, 0x49, 0xa7, 0xba, 0xd2, 0x82, + 0x2e, 0x30, 0x1d, 0xc5, 0xfa, 0xe7, 0x23, 0x70, 0x83, 0xcb, 0xe9, 0x4d, 0x0e, 0x06, 0xfa, 0x01, + 0x26, 0x15, 0xf1, 0x73, 0x79, 0xdc, 0x12, 0x67, 0x8a, 0xa6, 0x61, 0x62, 0xa6, 0xa6, 0x47, 0x01, + 0x8d, 0xd8, 0x48, 0x10, 0x27, 0x46, 0x1d, 0xd1, 0x36, 0xcc, 0xe8, 0x63, 0xc0, 0x5d, 0xab, 0xdb, + 0xa9, 0x8d, 0xe8, 0x55, 0xc5, 0x23, 0xe4, 0x56, 0x23, 0x75, 0x24, 0x68, 0x22, 0x45, 0x7d, 0x7c, + 0x7f, 0x84, 0xd9, 0xc4, 0x00, 0x70, 0x4f, 0xec, 0x4e, 0x6a, 0x83, 0x89, 0xda, 0xcc, 0x6e, 0xf8, + 0x14, 0x6c, 0x6c, 0x36, 0xd9, 0x48, 0x35, 0x07, 0xe3, 0xac, 0xdb, 0x64, 0xde, 0xec, 0xf9, 0x38, + 0xc0, 0x9d, 0x26, 0x56, 0x0f, 0x6e, 0x5f, 0x77, 0xde, 0xfc, 0x87, 0x0c, 0x14, 0xd3, 0xe8, 0xd6, + 0x71, 0xa7, 0x85, 0xf6, 0xa0, 0x10, 0x6f, 0x88, 0xfb, 0xcb, 0x96, 0x58, 0xeb, 0xcd, 0x2c, 0x6d, + 0x5d, 0xb1, 0x13, 0xd8, 0xc4, 0xb2, 0x2a, 0xb0, 0x4b, 0x9e, 0x90, 0x27, 0x51, 0x95, 0x6d, 0xd1, + 0x7b, 0xef, 0x41, 0x5e, 0x66, 0x87, 0x46, 0x39, 0x18, 0xdd, 0xde, 0xdd, 0xde, 0x67, 0x17, 0x84, + 0xf6, 0x0e, 0xf6, 0x0b, 0x19, 0x04, 0x30, 0xbe, 0xbe, 0xb1, 0xb3, 0xb1, 0xbf, 0x51, 0xc8, 0xbe, + 0xd7, 0x51, 0x37, 0x18, 0xe8, 0x06, 0x2c, 0xae, 0x6f, 0x1c, 0x6e, 0xd7, 0x36, 0x1a, 0xfb, 0x7f, + 0x61, 0x6f, 0xa3, 0x71, 0xb0, 0x5b, 0xdf, 0xdb, 0xa8, 0x6d, 0x3f, 0xdc, 0xde, 0x58, 0x2f, 0x5c, + 0x41, 0xf3, 0x50, 0x50, 0x0b, 0xe9, 0xb5, 0xa3, 0x0c, 0x9a, 0x83, 0xab, 0x1a, 0xca, 0xea, 0xc3, + 0x42, 0x16, 0x15, 0x61, 0x5e, 0x05, 0x3e, 0xdd, 0xa8, 0x56, 0x0e, 0xf6, 0xb7, 0x76, 0x0b, 0x23, + 0xef, 0xdd, 0xe1, 0x87, 0x6c, 0x68, 0x06, 0x60, 0x7d, 0xa3, 0x5e, 0xdb, 0xd8, 0x5d, 0xdf, 0xde, + 0xdd, 0x2c, 0x5c, 0x41, 0xd3, 0x90, 0xaf, 0xc8, 0xcf, 0xcc, 0xea, 0xef, 0xff, 0x00, 0x93, 0xa4, + 0xf3, 0x22, 0x41, 0x64, 0x03, 0x16, 0x1f, 0x3b, 0x6e, 0x27, 0x74, 0xdc, 0x0e, 0x1f, 0x32, 0x21, + 0x70, 0x54, 0x1e, 0x30, 0x02, 0x64, 0xf0, 0x4a, 0xc3, 0xae, 0x00, 0xdc, 0xcd, 0xdc, 0xcf, 0xa0, + 0x3a, 0xcc, 0xa7, 0xb9, 0x50, 0xc8, 0xd2, 0x9f, 0x96, 0xa7, 0x59, 0x87, 0xd2, 0x62, 0xea, 0x42, + 0x73, 0xf8, 0x01, 0x7a, 0x0c, 0xb3, 0x89, 0x65, 0x43, 0xf2, 0x6b, 0x5a, 0x50, 0x06, 0x91, 0x2b, + 0xd2, 0x58, 0x43, 0xe8, 0xc6, 0x17, 0x8d, 0x00, 0x5d, 0x4b, 0xac, 0xf6, 0x1b, 0x44, 0xc3, 0x8d, + 0xc4, 0xee, 0x67, 0x90, 0x4d, 0xb6, 0xe9, 0xc9, 0x05, 0x48, 0x76, 0x79, 0xc0, 0xea, 0x54, 0x32, + 0x34, 0x47, 0x68, 0xa6, 0xd9, 0x51, 0x49, 0x73, 0x80, 0x91, 0x35, 0xd2, 0xfc, 0x82, 0x78, 0xff, + 0x9d, 0xd6, 0x23, 0x8c, 0xbb, 0x95, 0xb6, 0xfb, 0x1c, 0x07, 0x48, 0x5c, 0x60, 0x91, 0x20, 0x13, + 0xee, 0xdd, 0x0c, 0xfa, 0x2d, 0x98, 0xa4, 0xd9, 0x23, 0xf9, 0xb9, 0xed, 0x94, 0x9a, 0x51, 0xb2, + 0x24, 0xbe, 0x68, 0xe1, 0xfd, 0x0c, 0xfa, 0x12, 0x26, 0x36, 0x31, 0x3d, 0xb8, 0x44, 0x6f, 0xc5, + 0x92, 0xa4, 0x6f, 0x77, 0xa4, 0x67, 0x2c, 0x18, 0x8e, 0x6f, 0x3e, 0x51, 0x0d, 0x72, 0x1c, 0x3d, + 0x40, 0x56, 0x0c, 0x3f, 0x48, 0x21, 0x30, 0x17, 0x23, 0x40, 0x76, 0x18, 0xa8, 0x06, 0x79, 0x79, + 0x7a, 0x8a, 0x16, 0x0d, 0x47, 0xb6, 0xa5, 0x62, 0xb2, 0x80, 0x87, 0x1f, 0x46, 0xfe, 0x4e, 0x36, + 0x83, 0xee, 0x01, 0xb0, 0x47, 0x49, 0xb4, 0x2f, 0x71, 0x46, 0x4b, 0x09, 0x01, 0xa2, 0x4d, 0x62, + 0x08, 0xda, 0x38, 0xc4, 0x17, 0xed, 0xbc, 0x69, 0xb4, 0x76, 0x60, 0x46, 0x3e, 0x11, 0xba, 0xb8, + 0x24, 0x4c, 0xd4, 0x3e, 0x27, 0x33, 0x88, 0xbd, 0xac, 0x95, 0xd7, 0x8c, 0x90, 0xe9, 0xe2, 0x91, + 0x1c, 0x4e, 0x56, 0x4d, 0xc1, 0x95, 0xa9, 0x39, 0x25, 0x6e, 0x3c, 0x59, 0x67, 0x0c, 0x17, 0x43, + 0x49, 0x6d, 0x57, 0xbf, 0x72, 0x84, 0x6e, 0x29, 0x0c, 0xa4, 0xde, 0x94, 0x2a, 0xbd, 0x35, 0xa0, + 0x06, 0x1b, 0x27, 0x6a, 0x75, 0xbe, 0x81, 0x69, 0xed, 0xb2, 0x0b, 0x12, 0xf7, 0x63, 0xd3, 0x6e, + 0x11, 0x95, 0x96, 0xd2, 0x0b, 0xf9, 0x46, 0xf4, 0x21, 0x35, 0x36, 0xb1, 0xac, 0x60, 0xa5, 0xb4, + 0xec, 0x5f, 0x2c, 0xc9, 0x69, 0x49, 0x64, 0xaf, 0x88, 0xa1, 0x6c, 0xc0, 0x9c, 0x8c, 0xc0, 0x2a, + 0xf9, 0xc5, 0x0d, 0x79, 0xc4, 0x8c, 0x23, 0xf7, 0x35, 0xcc, 0x71, 0x3d, 0xd0, 0xc8, 0x14, 0xa4, + 0x71, 0xe1, 0x29, 0xa7, 0x8c, 0x04, 0xbe, 0x81, 0x85, 0x7a, 0xac, 0x3f, 0xcc, 0xe5, 0xb9, 0xae, + 0x93, 0x50, 0x32, 0x88, 0x19, 0x69, 0x3d, 0x02, 0x54, 0xef, 0x1d, 0x9d, 0xb9, 0x92, 0xdc, 0x73, + 0x17, 0xbf, 0x40, 0x37, 0x63, 0x5d, 0x22, 0x40, 0x5a, 0x8d, 0x5a, 0xa7, 0x92, 0xa1, 0xc7, 0x68, + 0x9f, 0x3d, 0xb5, 0x66, 0x09, 0x5f, 0x9c, 0xae, 0x73, 0xe4, 0xb6, 0xdd, 0xd0, 0xc5, 0x44, 0x2d, + 0x54, 0x04, 0xb5, 0x48, 0x8c, 0xe0, 0x75, 0x63, 0x0d, 0xf4, 0x15, 0x4c, 0x6f, 0xe2, 0x30, 0x4a, + 0x92, 0x86, 0x16, 0x13, 0x69, 0xd5, 0xf8, 0xb8, 0x89, 0xb3, 0x38, 0x3d, 0x33, 0xdb, 0x36, 0x14, + 0x98, 0x71, 0x55, 0x48, 0xdc, 0x4c, 0x90, 0xe0, 0x55, 0x1c, 0xdf, 0x39, 0x0b, 0x8c, 0xd2, 0xba, + 0x07, 0xa3, 0x7b, 0x6e, 0xe7, 0x18, 0x89, 0x07, 0x45, 0x4a, 0x3e, 0xa3, 0xd2, 0x9c, 0x06, 0xe3, + 0xaa, 0x77, 0x04, 0x65, 0x96, 0x1d, 0x2c, 0x99, 0x91, 0x4b, 0xe4, 0xfd, 0x7d, 0x5b, 0xde, 0x5f, + 0x1b, 0x90, 0x45, 0x4c, 0xca, 0x27, 0x5e, 0x7e, 0xb8, 0x86, 0xf6, 0xa8, 0xd4, 0x93, 0x0d, 0xa0, + 0xdb, 0xd1, 0x7a, 0x6a, 0x4c, 0x08, 0x56, 0x42, 0x71, 0xc2, 0x87, 0x6b, 0x48, 0xbe, 0xd0, 0x4e, + 0x21, 0x7a, 0x47, 0x5b, 0xf6, 0x2f, 0x47, 0xf7, 0x2b, 0xc8, 0xcb, 0x6c, 0x58, 0xd2, 0xde, 0xc4, + 0x53, 0x78, 0x49, 0x03, 0x9e, 0x4c, 0x9c, 0xf5, 0x05, 0x4b, 0x5c, 0xa7, 0xe3, 0xc7, 0x73, 0x53, + 0x19, 0x07, 0xef, 0x33, 0x98, 0x54, 0xb2, 0x52, 0xc9, 0xc9, 0x92, 0xcc, 0x54, 0x55, 0xd2, 0x7f, + 0x47, 0xe2, 0x3e, 0x59, 0x34, 0x26, 0x78, 0x6e, 0x42, 0xb4, 0x10, 0xa1, 0x29, 0x59, 0x80, 0x62, + 0x28, 0x64, 0x3b, 0x2f, 0x92, 0x19, 0xa2, 0x6b, 0x3a, 0x86, 0xb9, 0x95, 0x35, 0x00, 0xd6, 0x67, + 0xda, 0x90, 0x5e, 0x6c, 0xec, 0xd5, 0x1a, 0x59, 0xcf, 0x5a, 0x97, 0x44, 0xfa, 0x4a, 0xac, 0x69, + 0x14, 0xa9, 0xa8, 0x49, 0x52, 0xed, 0x95, 0x09, 0x7f, 0x1b, 0x0a, 0x95, 0x26, 0xb5, 0xb2, 0x32, + 0x31, 0x11, 0x5a, 0x96, 0x33, 0x58, 0x2f, 0x10, 0xb4, 0x16, 0xe2, 0x79, 0x8e, 0x76, 0xb0, 0x43, + 0x6f, 0xd1, 0x2c, 0xca, 0xb5, 0x36, 0x56, 0x94, 0x8e, 0x61, 0x64, 0x6a, 0x03, 0xe6, 0x6b, 0x4e, + 0xa7, 0x89, 0xdb, 0xaf, 0x47, 0xe6, 0x73, 0x6a, 0x6e, 0x94, 0xa4, 0x4d, 0xd7, 0xe2, 0xf8, 0xdc, + 0xda, 0xcc, 0xca, 0x7d, 0x9d, 0xac, 0x5a, 0x81, 0xab, 0x4c, 0x88, 0x91, 0x58, 0x4c, 0xd8, 0xa6, + 0xe6, 0x3f, 0x81, 0x99, 0x0d, 0x62, 0x8e, 0x7b, 0x2d, 0x97, 0x5d, 0xb8, 0x44, 0xfa, 0x0d, 0x3a, + 0x23, 0xe2, 0x96, 0x48, 0x35, 0xa7, 0x64, 0x33, 0x92, 0x4a, 0x9e, 0x4c, 0x18, 0x55, 0x9a, 0x17, + 0x64, 0xd5, 0xc4, 0x47, 0x74, 0xed, 0x3d, 0x16, 0x19, 0x33, 0x62, 0x39, 0x6a, 0x54, 0x83, 0x62, + 0xcc, 0x60, 0x53, 0x7a, 0x7b, 0x70, 0x25, 0xd5, 0x17, 0xb3, 0x61, 0xd1, 0x90, 0xff, 0x07, 0xbd, + 0x23, 0xdd, 0xe2, 0x41, 0xf9, 0x81, 0x52, 0xdc, 0xb5, 0xef, 0x94, 0x2c, 0x10, 0x06, 0x9a, 0x83, + 0x13, 0x03, 0x19, 0x05, 0xfc, 0x83, 0xb8, 0xc6, 0x94, 0x9a, 0xc0, 0x07, 0xbd, 0xab, 0x53, 0x1f, + 0x90, 0xe4, 0xc7, 0xd8, 0xc2, 0x13, 0xaa, 0x7a, 0x51, 0xfe, 0x18, 0xe9, 0xf4, 0xa4, 0x25, 0xf9, + 0x91, 0x4e, 0x4f, 0x6a, 0xf6, 0x1d, 0x26, 0xe0, 0x4d, 0xb8, 0x1a, 0x4b, 0xa5, 0x83, 0x6e, 0xc6, + 0x05, 0x3b, 0x44, 0xa0, 0x8c, 0xd0, 0x63, 0xa1, 0xd8, 0x49, 0x42, 0xe9, 0xc9, 0x75, 0x4c, 0x7d, + 0x64, 0xe4, 0x0e, 0xa4, 0x0b, 0xa4, 0xa6, 0xcb, 0x41, 0x6f, 0xa5, 0x88, 0xf0, 0x62, 0xa2, 0x63, + 0x64, 0xeb, 0x50, 0x88, 0x67, 0x9b, 0x41, 0xcb, 0x52, 0x4a, 0xa9, 0x29, 0x75, 0x4a, 0x65, 0x63, + 0x39, 0x5f, 0x74, 0xbe, 0x89, 0x06, 0x85, 0x9d, 0xb9, 0xc4, 0x07, 0x45, 0xcd, 0x34, 0x92, 0x18, + 0x14, 0x3d, 0x81, 0xc8, 0x26, 0xbd, 0x0a, 0xa9, 0xa4, 0x8d, 0x31, 0xee, 0x4e, 0x6f, 0xa6, 0xd1, + 0x89, 0xce, 0x56, 0xea, 0x22, 0xf5, 0xa5, 0xc2, 0xd7, 0xb2, 0xb6, 0x6e, 0x26, 0x59, 0x2b, 0x1b, + 0xcb, 0x65, 0x4f, 0x0b, 0xf1, 0x04, 0x2a, 0x92, 0xa8, 0x21, 0xb3, 0x8a, 0x51, 0x95, 0x1f, 0xc2, + 0xbc, 0x3e, 0x8a, 0x43, 0xfa, 0x6b, 0xf6, 0x75, 0xa7, 0xb5, 0xb4, 0x29, 0x48, 0xfc, 0x2a, 0x49, + 0x2c, 0x43, 0x4b, 0x42, 0xfa, 0x29, 0xe9, 0x5b, 0x98, 0xf4, 0x95, 0x14, 0x2c, 0x17, 0x91, 0x7e, + 0x5a, 0xc6, 0x16, 0x29, 0x28, 0x85, 0x2f, 0xb1, 0xfc, 0xc5, 0x0b, 0x2e, 0x23, 0xa8, 0x8b, 0xb0, + 0x66, 0xa2, 0xb3, 0x4e, 0xbd, 0x1b, 0xf9, 0x33, 0x3a, 0xd7, 0x35, 0x31, 0x69, 0x1a, 0x5f, 0xd2, + 0x3a, 0xa7, 0x2b, 0x7b, 0x0d, 0xa6, 0xd4, 0x0c, 0x30, 0x46, 0x2e, 0x6e, 0x24, 0x69, 0x04, 0xca, + 0x7e, 0x6b, 0x46, 0x4a, 0x81, 0x71, 0xb3, 0x14, 0x17, 0x8e, 0xc6, 0x90, 0xb9, 0x4b, 0x48, 0x15, + 0xcd, 0x10, 0x96, 0xcc, 0x6e, 0xc1, 0x1c, 0x73, 0x90, 0xf4, 0x5f, 0x59, 0x32, 0xfc, 0x58, 0x93, + 0x91, 0xcc, 0x01, 0xbd, 0x60, 0xad, 0xa6, 0x73, 0x41, 0x8a, 0x96, 0xa4, 0xa4, 0x79, 0x29, 0x2d, + 0x9b, 0x8a, 0x55, 0x0b, 0xfd, 0x2d, 0xcc, 0x26, 0xd2, 0xd6, 0xc8, 0x40, 0x98, 0x29, 0xa1, 0xcd, + 0x60, 0x2b, 0xb8, 0x45, 0x3a, 0x1c, 0x43, 0x3c, 0x5c, 0x1d, 0x4e, 0x34, 0xb9, 0x96, 0xee, 0x88, + 0x3b, 0xd9, 0x69, 0xcc, 0x99, 0x92, 0xe3, 0x18, 0x25, 0xb8, 0x0f, 0x0b, 0xa9, 0x69, 0x71, 0xa4, + 0x5b, 0x31, 0x28, 0x69, 0x8e, 0x91, 0xea, 0x5f, 0xa4, 0xb9, 0x66, 0x63, 0x29, 0x57, 0x64, 0x1c, + 0xc2, 0x98, 0x66, 0x47, 0xc6, 0x21, 0xcc, 0xf9, 0x6f, 0x98, 0x34, 0x77, 0x60, 0x3e, 0x2d, 0x89, + 0x8d, 0x12, 0xb7, 0x33, 0x66, 0xb8, 0x49, 0x91, 0xa8, 0x2d, 0x66, 0xbb, 0x81, 0xda, 0x80, 0x94, + 0x36, 0x46, 0x09, 0xfc, 0x5c, 0x24, 0x2a, 0x4a, 0xa6, 0x9e, 0x91, 0xbb, 0xb5, 0x21, 0xb9, 0x69, + 0x06, 0x38, 0x95, 0x57, 0xeb, 0xee, 0x71, 0x47, 0xc9, 0x12, 0x23, 0x5d, 0xca, 0x64, 0x7a, 0x1a, + 0x69, 0x59, 0xd2, 0x92, 0xca, 0x3c, 0x81, 0x79, 0xb1, 0xc4, 0xaa, 0x59, 0x55, 0x50, 0x02, 0x27, + 0xba, 0xde, 0x2d, 0xad, 0x4c, 0x6a, 0x1a, 0x16, 0xb6, 0x27, 0xa3, 0x3f, 0xd3, 0xa2, 0xec, 0xc9, + 0x94, 0x74, 0x27, 0x25, 0x3d, 0x33, 0x0a, 0x7a, 0x40, 0xf7, 0x64, 0x2c, 0xfb, 0x9d, 0x39, 0x28, + 0xac, 0x51, 0x8a, 0x6c, 0xda, 0x9a, 0x08, 0x1b, 0xd2, 0x06, 0x75, 0xca, 0xc3, 0xb7, 0x59, 0x14, + 0x49, 0xdf, 0x66, 0xa9, 0x8c, 0x9a, 0x83, 0x33, 0x53, 0xea, 0xa3, 0x4a, 0x29, 0xab, 0x94, 0xb7, + 0xd7, 0x52, 0x56, 0x69, 0x6f, 0x9a, 0xa9, 0x57, 0xbf, 0x2f, 0x5c, 0xb8, 0x88, 0xde, 0xcd, 0x81, + 0x8f, 0x92, 0x4b, 0xcb, 0x83, 0x5f, 0xf2, 0xf2, 0xd3, 0x81, 0x42, 0xfc, 0xdd, 0x27, 0x4a, 0x7b, + 0x85, 0xae, 0x3c, 0x7e, 0x95, 0x8e, 0x88, 0xf1, 0xc1, 0xe8, 0x9e, 0x70, 0x0f, 0x75, 0xba, 0x86, + 0x97, 0xc5, 0x2a, 0xe9, 0xc1, 0x6e, 0x44, 0xf4, 0x04, 0x54, 0x75, 0xe2, 0x12, 0x4f, 0x4c, 0x55, + 0x37, 0x22, 0xe5, 0xd5, 0xa8, 0x2b, 0xee, 0x94, 0xa4, 0xe7, 0xcc, 0x79, 0x57, 0x77, 0xb3, 0x06, + 0x5c, 0x39, 0x1c, 0x7a, 0xfe, 0x82, 0x7e, 0x57, 0x24, 0x03, 0x4c, 0xbe, 0xfb, 0x7f, 0x27, 0x16, + 0x87, 0x49, 0xbf, 0x4f, 0x57, 0x1a, 0x94, 0x56, 0x00, 0x3d, 0xa6, 0x4f, 0x7a, 0x9e, 0x6c, 0xaf, + 0xd7, 0xf8, 0x8f, 0x31, 0x7a, 0x7e, 0x22, 0xc0, 0xad, 0xfc, 0xb6, 0x42, 0x24, 0x64, 0x56, 0x45, + 0x43, 0x3c, 0x5c, 0x43, 0x75, 0x1a, 0x67, 0xd5, 0xa0, 0x29, 0x31, 0xee, 0x14, 0x82, 0xa5, 0x74, + 0x82, 0x34, 0xe8, 0xbf, 0x21, 0x56, 0x33, 0x9d, 0x4d, 0x03, 0x0f, 0x83, 0xbc, 0x00, 0xa6, 0x36, + 0xe9, 0x64, 0x04, 0x77, 0xc3, 0xf4, 0x88, 0x49, 0xac, 0x5e, 0x79, 0xbc, 0xf3, 0x4a, 0x12, 0xd3, + 0x10, 0x0f, 0x57, 0xb9, 0xc4, 0x34, 0xe8, 0xe5, 0x24, 0x16, 0x23, 0xa8, 0x4b, 0x4c, 0x67, 0xd3, + 0xc0, 0xc3, 0x70, 0x89, 0xa5, 0x93, 0xb9, 0xa8, 0xc4, 0xbe, 0xa5, 0xeb, 0xf3, 0x26, 0x7d, 0xf7, + 0x72, 0x29, 0x99, 0x15, 0x85, 0x07, 0xab, 0xa3, 0x1e, 0xae, 0xa1, 0xa7, 0x34, 0xe3, 0x61, 0x0c, + 0x7e, 0x31, 0xb9, 0x2d, 0x99, 0x88, 0x52, 0xc9, 0x6d, 0xc3, 0x02, 0x93, 0x5c, 0x9c, 0x5d, 0x23, + 0x2f, 0xc6, 0x6e, 0x6f, 0x0a, 0x67, 0x27, 0x4e, 0xea, 0xb2, 0xf2, 0x5b, 0xa7, 0x2a, 0xb2, 0xef, + 0x13, 0xff, 0xb4, 0x95, 0x74, 0x5e, 0x75, 0x22, 0x22, 0x32, 0xae, 0x57, 0x3f, 0x5c, 0x45, 0xdb, + 0x74, 0x14, 0x74, 0xf0, 0x20, 0xef, 0x3e, 0x9d, 0x0c, 0x15, 0xd2, 0x96, 0x70, 0x88, 0x62, 0x3c, + 0x99, 0xda, 0x36, 0x33, 0x25, 0xb7, 0x3e, 0x17, 0xec, 0x9d, 0x49, 0x44, 0x6c, 0x61, 0x67, 0x3b, + 0x8d, 0x61, 0x92, 0x89, 0xff, 0x90, 0x31, 0xfa, 0x1d, 0xc8, 0x0b, 0xe4, 0xe1, 0x02, 0x89, 0x63, + 0x53, 0x81, 0x7c, 0x05, 0x93, 0x5c, 0x20, 0x94, 0x03, 0x53, 0x4b, 0x46, 0xf6, 0xbf, 0x84, 0x49, + 0x2e, 0x86, 0x81, 0x3d, 0x30, 0x1f, 0x2b, 0x2e, 0x6c, 0xe2, 0x30, 0xe5, 0x87, 0x36, 0x87, 0x75, + 0x26, 0xed, 0x77, 0x3d, 0xd1, 0x21, 0x7d, 0x46, 0x68, 0xfa, 0x51, 0x54, 0x13, 0xc9, 0xa1, 0x3f, + 0xc9, 0x4a, 0xe8, 0xd6, 0xcd, 0x74, 0x87, 0xe2, 0x1b, 0x7b, 0xbf, 0x0b, 0x4b, 0xf4, 0x0c, 0xe2, + 0xb2, 0x1c, 0x9b, 0x37, 0x29, 0xd7, 0xa3, 0xeb, 0x07, 0xf1, 0xdf, 0x63, 0x35, 0x11, 0x1b, 0xf6, + 0x53, 0xb0, 0x84, 0x6a, 0xdd, 0x48, 0x75, 0x18, 0xf6, 0x80, 0xc5, 0xe8, 0x06, 0xed, 0xfb, 0x25, + 0xb9, 0x1d, 0x6c, 0x69, 0x62, 0x3f, 0x10, 0x3b, 0xec, 0xf6, 0x44, 0xfc, 0x27, 0x68, 0x09, 0x95, + 0x7a, 0x82, 0x8a, 0xa9, 0xf6, 0xa0, 0xc5, 0x87, 0x76, 0xed, 0x82, 0xdc, 0x98, 0x0f, 0x47, 0xf2, + 0x32, 0x6f, 0x01, 0x52, 0x7c, 0x7b, 0xed, 0x55, 0x7e, 0x69, 0x5a, 0xbd, 0xeb, 0x10, 0xa0, 0x0a, + 0x5b, 0xe3, 0xd5, 0xf7, 0xfb, 0x4a, 0x14, 0x31, 0xf5, 0x61, 0x7f, 0x9c, 0x04, 0xdb, 0x9b, 0xd0, + 0x5f, 0xad, 0x55, 0xf6, 0x26, 0xca, 0xcb, 0xe6, 0x92, 0xfe, 0xee, 0x98, 0x9b, 0x30, 0xfa, 0xf8, + 0x58, 0x3d, 0x2f, 0x52, 0xdf, 0x36, 0xab, 0x7b, 0x13, 0xfd, 0x15, 0xb6, 0xdc, 0x9b, 0xd0, 0x06, + 0x75, 0xca, 0xc3, 0xf7, 0x26, 0x14, 0x49, 0xdf, 0x9b, 0xa8, 0x8c, 0x9a, 0x27, 0x1e, 0x4a, 0x3e, + 0xc3, 0x96, 0xfb, 0x6e, 0xe3, 0x0b, 0xed, 0x01, 0x47, 0x4a, 0x73, 0x29, 0x09, 0x37, 0xa4, 0xcf, + 0x6f, 0x4e, 0xc6, 0x51, 0xd2, 0xcf, 0x47, 0xee, 0x67, 0xd0, 0x2e, 0xcd, 0x3b, 0x9c, 0xf6, 0x63, + 0xbe, 0x26, 0xfd, 0x19, 0xf8, 0xeb, 0xc1, 0x84, 0x5e, 0x3d, 0x9d, 0xde, 0x40, 0xbc, 0x01, 0xdb, + 0xba, 0xeb, 0xfc, 0x46, 0xc9, 0x25, 0x58, 0x34, 0xab, 0xf8, 0x04, 0x8b, 0x11, 0x9b, 0x51, 0x0b, + 0xea, 0xaf, 0xe7, 0xd2, 0x25, 0x6b, 0x05, 0xc6, 0x19, 0x92, 0x71, 0xb5, 0xd1, 0x7e, 0x71, 0x17, + 0x7d, 0x20, 0x0e, 0x6e, 0x09, 0x8a, 0x56, 0x64, 0xe4, 0xeb, 0x03, 0xc8, 0xb3, 0xb0, 0xdb, 0xc5, + 0x51, 0x1e, 0x88, 0xe3, 0xdd, 0x41, 0x8c, 0x99, 0x6f, 0x55, 0x4c, 0xab, 0x01, 0xe7, 0xcb, 0x0b, + 0xf2, 0x4b, 0x1a, 0xfa, 0x14, 0xa1, 0x06, 0x33, 0xfe, 0x42, 0xe2, 0xd7, 0x91, 0xa9, 0x48, 0x3f, + 0xa5, 0xf1, 0x57, 0x99, 0x71, 0xc6, 0xc4, 0x7e, 0xf2, 0xb7, 0x95, 0xd1, 0x03, 0x98, 0x61, 0xc2, + 0x95, 0xc8, 0xc9, 0x4a, 0x03, 0x64, 0x36, 0xc3, 0xc4, 0xfc, 0x2a, 0xc8, 0xbf, 0x23, 0x02, 0xb5, + 0x43, 0xd9, 0xbe, 0x48, 0x88, 0x76, 0xb8, 0xe8, 0x4c, 0x54, 0x7e, 0x97, 0x2e, 0xba, 0xe9, 0xe9, + 0x16, 0x8c, 0xc4, 0xee, 0x2a, 0x21, 0xe8, 0xc1, 0x89, 0x1a, 0x9e, 0x88, 0x3c, 0xd4, 0xe9, 0x3f, + 0xb1, 0x3d, 0x24, 0x6b, 0x43, 0x4a, 0x14, 0xef, 0x87, 0xf4, 0x84, 0x06, 0x82, 0xa0, 0x7e, 0x12, + 0x38, 0x28, 0xa7, 0xc3, 0x80, 0x5d, 0x53, 0x94, 0x4e, 0xfa, 0x92, 0x72, 0x31, 0x1f, 0x2e, 0xa2, + 0x64, 0x82, 0x08, 0x23, 0x95, 0xb7, 0x4c, 0xd2, 0x8d, 0xc4, 0xca, 0xee, 0x70, 0xc6, 0x7e, 0x4d, + 0xbc, 0x6c, 0xc2, 0x8b, 0x3b, 0xe2, 0xf1, 0xbc, 0x13, 0x68, 0x53, 0xdc, 0x33, 0x8d, 0x51, 0x34, + 0x21, 0x0c, 0xd8, 0x7a, 0xf1, 0x9b, 0x96, 0x6f, 0x84, 0x50, 0x52, 0x6f, 0x2e, 0x4f, 0x48, 0x46, + 0x7d, 0x63, 0x84, 0xac, 0x01, 0x8a, 0x32, 0x3c, 0xa2, 0x55, 0x34, 0x68, 0xc8, 0xe5, 0x55, 0xc3, + 0x89, 0xee, 0xf4, 0x25, 0x53, 0x5f, 0xc8, 0x35, 0xdd, 0x98, 0x86, 0x43, 0x2a, 0xcb, 0x80, 0xbc, + 0x19, 0xb5, 0xe8, 0x87, 0x40, 0xb4, 0x5c, 0x19, 0x35, 0x7b, 0x47, 0xc6, 0xe2, 0xd2, 0x92, 0x68, + 0x94, 0x40, 0x14, 0xda, 0x3b, 0xe8, 0x14, 0x8a, 0xa6, 0x3c, 0x0f, 0xd1, 0xbd, 0xa4, 0xc1, 0x59, + 0x30, 0x4a, 0x3f, 0x1b, 0x5a, 0x8f, 0x73, 0xbc, 0x0b, 0xf3, 0x69, 0xf9, 0x19, 0xe4, 0xa0, 0x0d, + 0x48, 0xde, 0x90, 0x7a, 0xf9, 0x69, 0x0f, 0x16, 0x52, 0x73, 0x24, 0xc8, 0xe3, 0x8f, 0x41, 0x19, + 0x14, 0x52, 0x29, 0x7e, 0x07, 0x8b, 0x86, 0x84, 0x00, 0x51, 0x74, 0x70, 0x60, 0xc2, 0x00, 0xa3, + 0x42, 0x7c, 0x0f, 0x25, 0xf3, 0x5b, 0x73, 0x74, 0x57, 0x8f, 0x70, 0x9a, 0x5f, 0x78, 0x97, 0x52, + 0x93, 0x63, 0xa0, 0x7d, 0x9a, 0x20, 0x2b, 0xed, 0xf1, 0xb9, 0xe4, 0x7b, 0xf0, 0xe3, 0x74, 0xc3, + 0xa5, 0xb5, 0x45, 0xc3, 0x7b, 0xf3, 0x01, 0x54, 0x2f, 0xc0, 0xed, 0xae, 0xb0, 0x4b, 0xfa, 0x53, + 0xea, 0xd8, 0xfd, 0xf7, 0xd4, 0x77, 0xd6, 0xa9, 0x7c, 0x7e, 0x03, 0xd3, 0xda, 0x7b, 0x49, 0xa9, + 0xfe, 0x69, 0x0f, 0x4c, 0x65, 0x28, 0x3a, 0xf5, 0x89, 0x65, 0xb5, 0xf0, 0xd3, 0xff, 0x58, 0xce, + 0xfc, 0xf4, 0xeb, 0xe5, 0xcc, 0x7f, 0xfd, 0xf5, 0x72, 0xe6, 0x4f, 0x7f, 0xbd, 0x9c, 0x39, 0x1a, + 0xa7, 0xd5, 0xd7, 0xfe, 0x5f, 0x00, 0x00, 0x00, 0xff, 0xff, 0x59, 0x45, 0xc6, 0xa5, 0xa5, 0x8c, + 0x00, 0x00, } // Reference imports to suppress errors if they are not otherwise used. @@ -10932,9 +10931,6 @@ type AuthServiceClient interface { DeleteBot(ctx context.Context, in *DeleteBotRequest, opts ...grpc.CallOption) (*empty.Empty, error) // GetBotUsers gets all users with bot labels. GetBotUsers(ctx context.Context, in *GetBotUsersRequest, opts ...grpc.CallOption) (AuthService_GetBotUsersClient, error) - // GenerateInitialRenewableUserCerts generates an initial set of renewable - // certificates using a bot token. - GenerateInitialRenewableUserCerts(ctx context.Context, in *RenewableCertsRequest, opts ...grpc.CallOption) (*Certs, error) // GetUser gets a user resource by name. GetUser(ctx context.Context, in *GetUserRequest, opts ...grpc.CallOption) (*types.UserV2, error) // GetUsers gets all current user resources. @@ -11725,15 +11721,6 @@ func (x *authServiceGetBotUsersClient) Recv() (*types.UserV2, error) { return m, nil } -func (c *authServiceClient) GenerateInitialRenewableUserCerts(ctx context.Context, in *RenewableCertsRequest, opts ...grpc.CallOption) (*Certs, error) { - out := new(Certs) - err := c.cc.Invoke(ctx, "/proto.AuthService/GenerateInitialRenewableUserCerts", in, out, opts...) - if err != nil { - return nil, err - } - return out, nil -} - func (c *authServiceClient) GetUser(ctx context.Context, in *GetUserRequest, opts ...grpc.CallOption) (*types.UserV2, error) { out := new(types.UserV2) err := c.cc.Invoke(ctx, "/proto.AuthService/GetUser", in, out, opts...) @@ -13119,9 +13106,6 @@ type AuthServiceServer interface { DeleteBot(context.Context, *DeleteBotRequest) (*empty.Empty, error) // GetBotUsers gets all users with bot labels. GetBotUsers(*GetBotUsersRequest, AuthService_GetBotUsersServer) error - // GenerateInitialRenewableUserCerts generates an initial set of renewable - // certificates using a bot token. - GenerateInitialRenewableUserCerts(context.Context, *RenewableCertsRequest) (*Certs, error) // GetUser gets a user resource by name. GetUser(context.Context, *GetUserRequest) (*types.UserV2, error) // GetUsers gets all current user resources. @@ -13571,9 +13555,6 @@ func (*UnimplementedAuthServiceServer) DeleteBot(ctx context.Context, req *Delet func (*UnimplementedAuthServiceServer) GetBotUsers(req *GetBotUsersRequest, srv AuthService_GetBotUsersServer) error { return status.Errorf(codes.Unimplemented, "method GetBotUsers not implemented") } -func (*UnimplementedAuthServiceServer) GenerateInitialRenewableUserCerts(ctx context.Context, req *RenewableCertsRequest) (*Certs, error) { - return nil, status.Errorf(codes.Unimplemented, "method GenerateInitialRenewableUserCerts not implemented") -} func (*UnimplementedAuthServiceServer) GetUser(ctx context.Context, req *GetUserRequest) (*types.UserV2, error) { return nil, status.Errorf(codes.Unimplemented, "method GetUser not implemented") } @@ -14602,24 +14583,6 @@ func (x *authServiceGetBotUsersServer) Send(m *types.UserV2) error { return x.ServerStream.SendMsg(m) } -func _AuthService_GenerateInitialRenewableUserCerts_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) { - in := new(RenewableCertsRequest) - if err := dec(in); err != nil { - return nil, err - } - if interceptor == nil { - return srv.(AuthServiceServer).GenerateInitialRenewableUserCerts(ctx, in) - } - info := &grpc.UnaryServerInfo{ - Server: srv, - FullMethod: "/proto.AuthService/GenerateInitialRenewableUserCerts", - } - handler := func(ctx context.Context, req interface{}) (interface{}, error) { - return srv.(AuthServiceServer).GenerateInitialRenewableUserCerts(ctx, req.(*RenewableCertsRequest)) - } - return interceptor(ctx, in, info, handler) -} - func _AuthService_GetUser_Handler(srv interface{}, ctx context.Context, dec func(interface{}) error, interceptor grpc.UnaryServerInterceptor) (interface{}, error) { in := new(GetUserRequest) if err := dec(in); err != nil { @@ -17138,10 +17101,6 @@ var _AuthService_serviceDesc = grpc.ServiceDesc{ MethodName: "DeleteBot", Handler: _AuthService_DeleteBot_Handler, }, - { - MethodName: "GenerateInitialRenewableUserCerts", - Handler: _AuthService_GenerateInitialRenewableUserCerts_Handler, - }, { MethodName: "GetUser", Handler: _AuthService_GetUser_Handler, diff --git a/api/client/proto/authservice.proto b/api/client/proto/authservice.proto index fae098939a2cc..28fb3282766ff 100644 --- a/api/client/proto/authservice.proto +++ b/api/client/proto/authservice.proto @@ -1668,9 +1668,6 @@ service AuthService { rpc DeleteBot(DeleteBotRequest) returns (google.protobuf.Empty); // GetBotUsers gets all users with bot labels. rpc GetBotUsers(GetBotUsersRequest) returns (stream types.UserV2); - // GenerateInitialRenewableUserCerts generates an initial set of renewable - // certificates using a bot token. - rpc GenerateInitialRenewableUserCerts(RenewableCertsRequest) returns (Certs); // GetUser gets a user resource by name. rpc GetUser(GetUserRequest) returns (types.UserV2); diff --git a/lib/auth/auth_with_roles.go b/lib/auth/auth_with_roles.go index c00ffcec47fba..f7dd6f8ffb192 100644 --- a/lib/auth/auth_with_roles.go +++ b/lib/auth/auth_with_roles.go @@ -18,12 +18,9 @@ package auth import ( "context" - "fmt" "net/url" - "strconv" "time" - "github.com/google/uuid" "github.com/gravitational/teleport" "github.com/gravitational/teleport/api/client" "github.com/gravitational/teleport/api/client/proto" @@ -1649,116 +1646,6 @@ func (a *ServerWithRoles) NewKeepAliver(ctx context.Context) (types.KeepAliver, return nil, trace.NotImplemented(notImplementedMessage) } -// TODO(nic): Delete this, auth.RegisterUsing(Token|IAMMethod) is used instead -// GenerateInitialRenewableUserCerts generates renewable certs for a non-interactive user -// using a previously issued single-use token. -// -// The token's TTL is enforced, and if the operation is successful the token is destroyed. -func (a *ServerWithRoles) GenerateInitialRenewableUserCerts(ctx context.Context, req proto.RenewableCertsRequest) (*proto.Certs, error) { - if len(req.Token) == 0 { - return nil, trace.BadParameter("missing token") - } - if len(req.PublicKey) == 0 { - return nil, trace.BadParameter("missing public key") - } - - token, err := a.authServer.GetUserToken(ctx, req.Token) - if err != nil { - log.Debugf("Could not fetch bot token: %+v", err) - return nil, trace.AccessDenied("the token is not valid") - } - - if err := a.authServer.verifyUserToken(token, UserTokenTypeBot); err != nil { - return nil, trace.Wrap(err) - } - - // TODO: consider allowing scoping to a specific SSH node with NodeName and Usage - expires := a.authServer.GetClock().Now().Add(defaults.DefaultRenewableCertTTL) - - // Generate the initial set of user certificates. - certs, err := a.authServer.generateInitialRenewableUserCerts(ctx, token.GetUser(), req.PublicKey, expires) - if err != nil { - return nil, trace.Wrap(err) - } - - if err := a.authServer.DeleteUserToken(ctx, req.Token); err != nil { - log.Warnf("could not delete user token %v after generating certs: %v", - backend.MaskKeyName(req.Token), err) - } - - return certs, nil -} - -// TODO(nic): move this to lib/auth/bot.go, leaving it here to keep a minimal diff -// generateInitialRenewableUserCerts is used to generate renewable bot certs -// and overlaps significantly with `generateUserCerts()`. However, it omits a -// number of options (impersonation, access requests, role requests, actual -// cert renewal, and most UserCertsRequest options that don't relate to bots) -// and does not care if the current identity is Nop. -// This function does not validate the current identity at all; the caller is -// expected to validate that the client is allowed to issue the renewable -// certificates. -func (a *Server) generateInitialRenewableUserCerts(ctx context.Context, username string, pubKey []byte, expires time.Time) (*proto.Certs, error) { - var err error - - // Extract the user and role set for whom the certificate will be generated. - // This should be safe since this is typically done against a local user. - // - // This call bypasses RBAC check for users read on purpose. - // Users who are allowed to impersonate other users might not have - // permissions to read user data. - user, err := a.GetUser(username, false) - if err != nil { - log.WithError(err).Debugf("Could not impersonate user %v. The user could not be fetched from local store.", username) - return nil, trace.AccessDenied("access denied") - } - - // Do not allow SSO users to be impersonated. - if user.GetCreatedBy().Connector != nil { - log.Warningf("Tried to issue a renewable cert for externally managed user %v, this is not supported.", username) - return nil, trace.AccessDenied("access denied") - } - - // Cap the cert TTL to the MaxRenewableCertTTL. - if max := a.GetClock().Now().Add(defaults.MaxRenewableCertTTL); expires.After(max) { - expires = max - } - - // Inherit the user's roles and traits verbatim. - roles := user.GetRoles() - traits := user.GetTraits() - - parsedRoles, err := services.FetchRoleList(roles, a, traits) - if err != nil { - return nil, trace.Wrap(err) - } - // add implicit roles to the set and build a checker - checker := services.NewRoleSet(parsedRoles...) - - // Generate certificate - certReq := certRequest{ - user: user, - ttl: expires.Sub(a.GetClock().Now()), - publicKey: pubKey, - checker: checker, - traits: user.GetTraits(), - renewable: true, - includeHostCA: true, - generation: 1, - } - - if err := a.validateGenerationLabel(ctx, user, &certReq, 0); err != nil { - return nil, trace.Wrap(err) - } - - certs, err := a.generateUserCert(certReq) - if err != nil { - return nil, trace.Wrap(err) - } - - return certs, nil -} - // determineDesiredRolesAndTraits inspects the current request to determine // which roles and traits the requesting user wants to be present on the // resulting certificate. This does not attempt to determine if the @@ -1809,136 +1696,6 @@ func (a *ServerWithRoles) GenerateUserCerts(ctx context.Context, req proto.UserC return a.generateUserCerts(ctx, req) } -// TODO(nic): move this to lib/auth/bot.go, leaving it here to keep a minimal diff -// validateGenerationLabel validates and updates a generation label. -func (a *Server) validateGenerationLabel(ctx context.Context, user types.User, certReq *certRequest, currentIdentityGeneration uint64) error { - // Fetch the user, bypassing the cache. We might otherwise fetch a stale - // value in case of a rapid certificate renewal. - user, err := a.Identity.GetUser(user.GetName(), false) - if err != nil { - return trace.Wrap(err) - } - - var currentUserGeneration uint64 - label, labelOk := user.GetMetadata().Labels[types.BotGenerationLabel] - if labelOk { - currentUserGeneration, err = strconv.ParseUint(label, 10, 64) - if err != nil { - return trace.BadParameter("user has invalid value for label %q", types.BotGenerationLabel) - } - } - - // If there is no existing generation on any of the user, identity, or - // cert request, we have nothing to do here. - if currentUserGeneration == 0 && currentIdentityGeneration == 0 && certReq.generation == 0 { - return nil - } - - certReq.includeHostCA = true - - // If the certReq already has generation set, it was explicitly requested - // (presumably this is the initial set of renewable certs). We'll want to - // commit that value to the User object. - if certReq.generation > 0 { - // ...however, if the user already has a stored generation, bail. - // (bots should be deleted and recreated if their certs expire) - if currentUserGeneration > 0 { - return trace.BadParameter( - "user %q has already been issued a renewable certificate and cannot be issued another; consider deleting and recreating the bot", - user.GetName(), - ) - } - - // Fetch a fresh copy of the user we can mutate safely. We can't - // implement a protobuf clone on User due to protobuf's proto.Clone() - // panicing when the user object has traits set, and a JSON - // marshal/unmarshal creates an import cycle so... here we are. - // There's a tiny chance the underlying user is mutated between calls - // to GetUser() but we're comparing with an older value so it'll fail - // safely. - newUser, err := a.Identity.GetUser(user.GetName(), false) - if err != nil { - return trace.Wrap(err) - } - metadata := newUser.GetMetadata() - metadata.Labels[types.BotGenerationLabel] = fmt.Sprint(certReq.generation) - newUser.SetMetadata(metadata) - - // Note: we bypass the RBAC check on purpose as bot users should not - // have user update permissions. - if err := a.CompareAndSwapUser(ctx, newUser, user); err != nil { - // If this fails it's likely to be some miscellaneous competing - // write. The request should be tried again - if it's malicious, - // someone will get a generation mismatch and trigger a lock. - return trace.WrapWithMessage(err, "Database comparison failed, try the request again") - } - - return nil - } - - // By now, we know a generation counter is in play _somewhere_. The current - // generations must match to continue: - if currentIdentityGeneration != currentUserGeneration { - // Lock the bot user indefinitely. - lock, err := types.NewLock(uuid.New().String(), types.LockSpecV2{ - Target: types.LockTarget{ - User: user.GetName(), - }, - Message: fmt.Sprintf( - "The bot user %q has been locked due to a certificate generation mismatch, possibly indicating a stolen certificate.", - user.GetName(), - ), - }) - if err != nil { - return trace.Wrap(err) - } - if err := a.UpsertLock(context.Background(), lock); err != nil { - return trace.Wrap(err) - } - - // Emit an audit event. - userMetadata := ClientUserMetadata(ctx) - if a.emitter.EmitAuditEvent(a.closeCtx, &apievents.RenewableCertificateGenerationMismatch{ - Metadata: apievents.Metadata{ - Type: events.RenewableCertificateGenerationMismatchEvent, - Code: events.RenewableCertificateGenerationMismatchCode, - }, - UserMetadata: userMetadata, - }); err != nil { - log.WithError(err).Warn("Failed to emit renewable cert generation mismatch event") - } - - return trace.AccessDenied( - "renewable cert generation mismatch: stored=%v, presented=%v", - currentUserGeneration, currentIdentityGeneration, - ) - } - - // Update the user with the new generation count. - newGeneration := currentIdentityGeneration + 1 - - // As above, commit some crimes to clone the User. - newUser, err := a.Identity.GetUser(user.GetName(), false) - if err != nil { - return trace.Wrap(err) - } - metadata := newUser.GetMetadata() - metadata.Labels[types.BotGenerationLabel] = fmt.Sprint(newGeneration) - newUser.SetMetadata(metadata) - - if err := a.CompareAndSwapUser(ctx, newUser, user); err != nil { - // If this fails it's likely to be some miscellaneous competing - // write. The request should be tried again - if it's malicious, - // someone will get a generation mismatch and trigger a lock. - return trace.WrapWithMessage(err, "Database comparison failed, try the request again") - } - - // And lastly, set the generation on the cert request. - certReq.generation = newGeneration - - return nil -} - func (a *ServerWithRoles) generateUserCerts(ctx context.Context, req proto.UserCertsRequest, opts ...certRequestOption) (*proto.Certs, error) { var err error diff --git a/lib/auth/auth_with_roles_test.go b/lib/auth/auth_with_roles_test.go index 9732179e144f5..d55e6ac85571c 100644 --- a/lib/auth/auth_with_roles_test.go +++ b/lib/auth/auth_with_roles_test.go @@ -30,9 +30,12 @@ import ( "github.com/gravitational/teleport/api/defaults" "github.com/gravitational/teleport/api/types" "github.com/gravitational/teleport/api/utils/sshutils" + "github.com/gravitational/teleport/lib/auth/native" libdefaults "github.com/gravitational/teleport/lib/defaults" "github.com/gravitational/teleport/lib/services" "github.com/gravitational/teleport/lib/tlsca" + "github.com/gravitational/teleport/lib/utils" + "golang.org/x/crypto/ssh" "github.com/google/go-cmp/cmp" "github.com/google/go-cmp/cmp/cmpopts" @@ -117,114 +120,6 @@ func TestLocalUserCanReissueCerts(t *testing.T) { } } -func newToken(t *testing.T, tokenID, user, kind string, expiry time.Time) types.UserToken { - t.Helper() - token, err := types.NewUserToken(tokenID) - require.NoError(t, err, "could not create user token") - - token.SetUser(user) - token.SetSubKind(kind) - token.SetExpiry(expiry) - return token -} - -// TestGenerateInitialRenewableUserCerts tests that a user token can be used -// to generate renewable certificates for a non-interactive user. -func TestGenerateInitialRenewableUserCerts(t *testing.T) { - t.Parallel() - - srv := newTestTLSServer(t) - - _, err := createBotRole(context.Background(), srv.Auth(), "test", "bot-test", []string{}) - require.NoError(t, err) - - user, err := createBotUser(context.Background(), srv.Auth(), "test", "bot-test") - require.NoError(t, err) - - later := srv.Clock().Now().Add(4 * time.Hour) - - goodToken := newToken(t, "good-token", user.GetName(), UserTokenTypeBot, later) - expiredToken := newToken(t, "expired", user.GetName(), UserTokenTypeBot, srv.Clock().Now().Add(-1*time.Hour)) - wrongKind := newToken(t, "wrong-kind", user.GetName(), UserTokenTypeResetPassword, later) - wrongUser := newToken(t, "wrong-user", "llama", UserTokenTypeBot, later) - invalidToken := newToken(t, "this-token-does-not-exist", user.GetName(), UserTokenTypeBot, later) - - goodToken, err = srv.Auth().CreateUserToken(context.Background(), goodToken) - require.NoError(t, err) - expiredToken, err = srv.Auth().CreateUserToken(context.Background(), expiredToken) - require.NoError(t, err) - wrongKind, err = srv.Auth().CreateUserToken(context.Background(), wrongKind) - require.NoError(t, err) - wrongUser, err = srv.Auth().CreateUserToken(context.Background(), wrongUser) - require.NoError(t, err) - - client, err := srv.NewClient(TestUser(user.GetName())) - require.NoError(t, err) - - _, pub, err := srv.Auth().GenerateKeyPair("") - require.NoError(t, err) - require.NotEmpty(t, pub) - - for _, test := range []struct { - desc string - token types.UserToken - assertErr require.ErrorAssertionFunc - }{ - { - desc: "OK good token", - token: goodToken, - assertErr: require.NoError, - }, - { - desc: "NOK expired token", - token: expiredToken, - assertErr: require.Error, - }, - { - desc: "NOK wrong token kind", - token: wrongKind, - assertErr: require.Error, - }, - { - desc: "NOK token for wrong user", - token: wrongUser, - assertErr: require.Error, - }, - { - desc: "NOK invalid token", - token: invalidToken, - assertErr: require.Error, - }, - } { - t.Run(test.desc, func(t *testing.T) { - // TODO: we should not use a client tied to a user for this, - // instead construct a client just like auth.Register does - // (whatever identity is used there will have Renewable) - certs, err := client.GenerateInitialRenewableUserCerts(context.Background(), proto.RenewableCertsRequest{ - Token: test.token.GetName(), - PublicKey: pub, - }) - test.assertErr(t, err) - - if err == nil { - require.NotEmpty(t, certs.SSH) - require.NotEmpty(t, certs.TLS) - - // ensure token was removed - _, err = srv.Auth().GetUserToken(context.Background(), test.token.GetName()) - require.True(t, trace.IsNotFound(err), "expected not found error, got %v", err) - - // ensure cert is renewable - x509, err := tlsca.ParseCertificatePEM(certs.TLS) - require.NoError(t, err) - id, err := tlsca.FromSubject(x509.Subject, later) - require.NoError(t, err) - require.True(t, id.Renewable) - } - }) - } -} - func renewBotCerts( srv *TestTLSServer, tlsCert tls.Certificate, botUser string, publicKey []byte, privateKey []byte, @@ -261,17 +156,21 @@ func TestBotCertificateGenerationCheck(t *testing.T) { }) require.NoError(t, err) - privateKey, publicKey, err := srv.Auth().GenerateKeyPair("") + privateKey, publicKey, err := native.GenerateKeyPair("") require.NoError(t, err) - - // Create a new unauthenticated client. - client, err := srv.NewClient(TestNop()) + sshPrivateKey, err := ssh.ParseRawPrivateKey(privateKey) + require.NoError(t, err) + tlsPublicKey, err := tlsca.MarshalPublicKeyFromPrivateKeyPEM(sshPrivateKey) require.NoError(t, err) - // Generate a first set of certs. - certs, err := client.GenerateInitialRenewableUserCerts(context.Background(), proto.RenewableCertsRequest{ - Token: bot.TokenID, - PublicKey: publicKey, + certs, err := Register(RegisterParams{ + Token: bot.TokenID, + ID: IdentityID{ + Role: types.RoleBot, + }, + Servers: []utils.NetAddr{*utils.MustParseAddr(srv.Addr().String())}, + PublicTLSKey: tlsPublicKey, + PublicSSHKey: publicKey, }) require.NoError(t, err) @@ -310,17 +209,21 @@ func TestBotCertificateGenerationStolen(t *testing.T) { }) require.NoError(t, err) - privateKey, publicKey, err := srv.Auth().GenerateKeyPair("") + privateKey, publicKey, err := native.GenerateKeyPair("") require.NoError(t, err) - - // Create a new unauthenticated client. - client, err := srv.NewClient(TestNop()) + sshPrivateKey, err := ssh.ParseRawPrivateKey(privateKey) + require.NoError(t, err) + tlsPublicKey, err := tlsca.MarshalPublicKeyFromPrivateKeyPEM(sshPrivateKey) require.NoError(t, err) - // Generate a first set of certs. - certs, err := client.GenerateInitialRenewableUserCerts(context.Background(), proto.RenewableCertsRequest{ - Token: bot.TokenID, - PublicKey: publicKey, + certs, err := Register(RegisterParams{ + Token: bot.TokenID, + ID: IdentityID{ + Role: types.RoleBot, + }, + Servers: []utils.NetAddr{*utils.MustParseAddr(srv.Addr().String())}, + PublicTLSKey: tlsPublicKey, + PublicSSHKey: publicKey, }) require.NoError(t, err) diff --git a/lib/auth/authclient/authclient.go b/lib/auth/authclient/authclient.go new file mode 100644 index 0000000000000..6d5ca597071ae --- /dev/null +++ b/lib/auth/authclient/authclient.go @@ -0,0 +1,114 @@ +/* +Copyright 2022 Gravitational, Inc. + +Licensed under the Apache License, Version 2.0 (the "License"); +you may not use this file except in compliance with the License. +You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + +Unless required by applicable law or agreed to in writing, software +distributed under the License is distributed on an "AS IS" BASIS, +WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +See the License for the specific language governing permissions and +limitations under the License. +*/ + +// Package authclient contains common code for creating an auth server client +// which may use SSH tunneling through a proxy. +package authclient + +import ( + "context" + "crypto/tls" + + apiclient "github.com/gravitational/teleport/api/client" + "github.com/gravitational/teleport/lib" + "github.com/gravitational/teleport/lib/auth" + "github.com/gravitational/teleport/lib/reversetunnel" + "github.com/gravitational/teleport/lib/utils" + "github.com/gravitational/trace" + "github.com/sirupsen/logrus" + "golang.org/x/crypto/ssh" +) + +// Config holds configuration parameters for connecting to the auth service. +type Config struct { + // TLS holds credentials for mTLS. + TLS *tls.Config + // SSH is client SSH config. + SSH *ssh.ClientConfig + // AuthAddrs is a list of possible auth or proxy server addresses. + AuthServers []utils.NetAddr + // Log sets the logger for the client to use. + Log logrus.FieldLogger +} + +// Connect creates a valid client connection to the auth service. It may +// connect directly to the auth server, or tunnel through the proxy. +func Connect(ctx context.Context, cfg *Config) (auth.ClientI, error) { + cfg.Log.Debugf("Connecting to: %v.", cfg.AuthServers) + + // Try connecting to the auth server directly over TLS. + client, err := auth.NewClient(apiclient.Config{ + Addrs: utils.NetAddrsToStrings(cfg.AuthServers), + Credentials: []apiclient.Credentials{ + apiclient.LoadTLS(cfg.TLS), + }, + }) + if err != nil { + return nil, trace.Wrap(err, "failed direct dial to auth server: %v", err) + } + + // Check connectivity by calling something on the client. + _, err = client.GetClusterName() + if err != nil { + directDialErr := trace.Wrap(err, "failed direct dial to auth server: %v", err) + if cfg.SSH == nil { + // No identity file was provided, don't try dialing via a reverse + // tunnel on the proxy. + return nil, trace.Wrap(directDialErr) + } + + // If direct dial failed, we may have a proxy address in + // cfg.AuthServers. Try connecting to the reverse tunnel + // endpoint and make a client over that. + // + // TODO(nic): this logic should be implemented once and reused in IoT + // nodes. + + resolver := reversetunnel.WebClientResolver(ctx, cfg.AuthServers, lib.IsInsecureDevMode()) + resolver, err = reversetunnel.CachingResolver(resolver, nil /* clock */) + if err != nil { + return nil, trace.Wrap(err) + } + + // reversetunnel.TunnelAuthDialer will take care of creating a net.Conn + // within an SSH tunnel. + dialer, err := reversetunnel.NewTunnelAuthDialer(reversetunnel.TunnelAuthDialerConfig{ + Resolver: resolver, + ClientConfig: cfg.SSH, + Log: cfg.Log, + InsecureSkipTLSVerify: cfg.TLS.InsecureSkipVerify, + }) + if err != nil { + return nil, trace.Wrap(err) + } + client, err = auth.NewClient(apiclient.Config{ + Dialer: dialer, + Credentials: []apiclient.Credentials{ + apiclient.LoadTLS(cfg.TLS), + }, + }) + if err != nil { + tunnelClientErr := trace.Wrap(err, "failed dial to auth server through reverse tunnel: %v", err) + return nil, trace.NewAggregate(directDialErr, tunnelClientErr) + } + // Check connectivity by calling something on the client. + if _, err := client.GetClusterName(); err != nil { + tunnelClientErr := trace.Wrap(err, "failed dial to auth server through reverse tunnel: %v", err) + return nil, trace.NewAggregate(directDialErr, tunnelClientErr) + } + } + return client, nil +} diff --git a/lib/auth/bot.go b/lib/auth/bot.go index d478e7ae9b5fc..071c4825dc6a2 100644 --- a/lib/auth/bot.go +++ b/lib/auth/bot.go @@ -19,15 +19,21 @@ package auth import ( "context" "fmt" + "strconv" "strings" "time" + "github.com/google/uuid" + "github.com/gravitational/trace" + "github.com/gravitational/teleport" "github.com/gravitational/teleport/api/client/proto" "github.com/gravitational/teleport/api/types" + apievents "github.com/gravitational/teleport/api/types/events" "github.com/gravitational/teleport/lib/defaults" + "github.com/gravitational/teleport/lib/events" + "github.com/gravitational/teleport/lib/services" "github.com/gravitational/teleport/lib/utils" - "github.com/gravitational/trace" ) // BotResourceName returns the default name for resources associated with the @@ -153,23 +159,13 @@ func (s *Server) createBot(ctx context.Context, req *proto.CreateBotRequest) (*p ttl = defaults.DefaultBotJoinTTL } - // TODO: don't create user token, just use provision token - userToken, err := s.CreateBotJoinToken(ctx, CreateUserTokenRequest{ - Name: resourceName, - TTL: ttl, - Type: UserTokenTypeBot, - }) - if err != nil { - return nil, trace.Wrap(err) - } - - _, err = s.CreateBotProvisionToken(ctx, resourceName, ttl) + provisionToken, err := s.CreateBotProvisionToken(ctx, resourceName, ttl) if err != nil { return nil, trace.Wrap(err) } return &proto.CreateBotResponse{ - TokenID: userToken.GetName(), + TokenID: provisionToken.GetName(), UserName: resourceName, RoleName: resourceName, TokenTTL: proto.Duration(ttl), @@ -272,54 +268,202 @@ func (s *Server) CreateBotProvisionToken(ctx context.Context, botName string, tt return token, nil } -// TODO: delete this, use CreateBotProvisionToken instead -// CreateBotJoinToken creates a new joining token for bots. -func (s *Server) CreateBotJoinToken(ctx context.Context, req CreateUserTokenRequest) (types.UserToken, error) { - err := req.CheckAndSetDefaults() +// validateGenerationLabel validates and updates a generation label. +func (a *Server) validateGenerationLabel(ctx context.Context, user types.User, certReq *certRequest, currentIdentityGeneration uint64) error { + // Fetch the user, bypassing the cache. We might otherwise fetch a stale + // value in case of a rapid certificate renewal. + user, err := a.Identity.GetUser(user.GetName(), false) if err != nil { - return nil, trace.Wrap(err) + return trace.Wrap(err) + } + + var currentUserGeneration uint64 + label, labelOk := user.GetMetadata().Labels[types.BotGenerationLabel] + if labelOk { + currentUserGeneration, err = strconv.ParseUint(label, 10, 64) + if err != nil { + return trace.BadParameter("user has invalid value for label %q", types.BotGenerationLabel) + } + } + + // If there is no existing generation on any of the user, identity, or + // cert request, we have nothing to do here. + if currentUserGeneration == 0 && currentIdentityGeneration == 0 && certReq.generation == 0 { + return nil + } + + // By now, we know a generation counter is in play _somewhere_ and this is a + // bot certs. Bot certs should include the host CA so that they can make + // Teleport API calls. + certReq.includeHostCA = true + + // If the certReq already has generation set, it was explicitly requested + // (presumably this is the initial set of renewable certs). We'll want to + // commit that value to the User object. + if certReq.generation > 0 { + // ...however, if the user already has a stored generation, bail. + // (bots should be deleted and recreated if their certs expire) + if currentUserGeneration > 0 { + return trace.BadParameter( + "user %q has already been issued a renewable certificate and cannot be issued another; consider deleting and recreating the bot", + user.GetName(), + ) + } + + // Fetch a fresh copy of the user we can mutate safely. We can't + // implement a protobuf clone on User due to protobuf's proto.Clone() + // panicing when the user object has traits set, and a JSON + // marshal/unmarshal creates an import cycle so... here we are. + // There's a tiny chance the underlying user is mutated between calls + // to GetUser() but we're comparing with an older value so it'll fail + // safely. + newUser, err := a.Identity.GetUser(user.GetName(), false) + if err != nil { + return trace.Wrap(err) + } + metadata := newUser.GetMetadata() + metadata.Labels[types.BotGenerationLabel] = fmt.Sprint(certReq.generation) + newUser.SetMetadata(metadata) + + // Note: we bypass the RBAC check on purpose as bot users should not + // have user update permissions. + if err := a.CompareAndSwapUser(ctx, newUser, user); err != nil { + // If this fails it's likely to be some miscellaneous competing + // write. The request should be tried again - if it's malicious, + // someone will get a generation mismatch and trigger a lock. + return trace.WrapWithMessage(err, "Database comparison failed, try the request again") + } + + return nil + } + + // The current generations must match to continue: + if currentIdentityGeneration != currentUserGeneration { + // Lock the bot user indefinitely. + lock, err := types.NewLock(uuid.New().String(), types.LockSpecV2{ + Target: types.LockTarget{ + User: user.GetName(), + }, + Message: fmt.Sprintf( + "The bot user %q has been locked due to a certificate generation mismatch, possibly indicating a stolen certificate.", + user.GetName(), + ), + }) + if err != nil { + return trace.Wrap(err) + } + if err := a.UpsertLock(context.Background(), lock); err != nil { + return trace.Wrap(err) + } + + // Emit an audit event. + userMetadata := ClientUserMetadata(ctx) + if a.emitter.EmitAuditEvent(a.closeCtx, &apievents.RenewableCertificateGenerationMismatch{ + Metadata: apievents.Metadata{ + Type: events.RenewableCertificateGenerationMismatchEvent, + Code: events.RenewableCertificateGenerationMismatchCode, + }, + UserMetadata: userMetadata, + }); err != nil { + log.WithError(err).Warn("Failed to emit renewable cert generation mismatch event") + } + + return trace.AccessDenied( + "renewable cert generation mismatch: stored=%v, presented=%v", + currentUserGeneration, currentIdentityGeneration, + ) } - if req.Type != UserTokenTypeBot { - return nil, trace.BadParameter("invalid bot token request type") + // Update the user with the new generation count. + newGeneration := currentIdentityGeneration + 1 + + // As above, commit some crimes to clone the User. + newUser, err := a.Identity.GetUser(user.GetName(), false) + if err != nil { + return trace.Wrap(err) } + metadata := newUser.GetMetadata() + metadata.Labels[types.BotGenerationLabel] = fmt.Sprint(newGeneration) + newUser.SetMetadata(metadata) + + if err := a.CompareAndSwapUser(ctx, newUser, user); err != nil { + // If this fails it's likely to be some miscellaneous competing + // write. The request should be tried again - if it's malicious, + // someone will get a generation mismatch and trigger a lock. + return trace.WrapWithMessage(err, "Database comparison failed, try the request again") + } + + // And lastly, set the generation on the cert request. + certReq.generation = newGeneration - _, err = s.GetUser(req.Name, false) + return nil +} + +// generateInitialRenewableUserCerts is used to generate renewable bot certs +// and overlaps significantly with `generateUserCerts()`. However, it omits a +// number of options (impersonation, access requests, role requests, actual +// cert renewal, and most UserCertsRequest options that don't relate to bots) +// and does not care if the current identity is Nop. +// This function does not validate the current identity at all; the caller is +// expected to validate that the client is allowed to issue the renewable +// certificates. +func (a *Server) generateInitialRenewableUserCerts(ctx context.Context, username string, pubKey []byte, expires time.Time) (*proto.Certs, error) { + var err error + + // Extract the user and role set for whom the certificate will be generated. + // This should be safe since this is typically done against a local user. + // + // This call bypasses RBAC check for users read on purpose. + // Users who are allowed to impersonate other users might not have + // permissions to read user data. + user, err := a.GetUser(username, false) if err != nil { - return nil, trace.Wrap(err) + log.WithError(err).Debugf("Could not impersonate user %v. The user could not be fetched from local store.", username) + return nil, trace.AccessDenied("access denied") + } + + // Do not allow SSO users to be impersonated. + if user.GetCreatedBy().Connector != nil { + log.Warningf("Tried to issue a renewable cert for externally managed user %v, this is not supported.", username) + return nil, trace.AccessDenied("access denied") + } + + // Cap the cert TTL to the MaxRenewableCertTTL. + if max := a.GetClock().Now().Add(defaults.MaxRenewableCertTTL); expires.After(max) { + expires = max } - // TODO: ensure that the user is a bot user? - token, err := s.newUserToken(req) + // Inherit the user's roles and traits verbatim. + roles := user.GetRoles() + traits := user.GetTraits() + + parsedRoles, err := services.FetchRoleList(roles, a, traits) if err != nil { return nil, trace.Wrap(err) } + // add implicit roles to the set and build a checker + checker := services.NewRoleSet(parsedRoles...) + + // Generate certificate + certReq := certRequest{ + user: user, + ttl: expires.Sub(a.GetClock().Now()), + publicKey: pubKey, + checker: checker, + traits: user.GetTraits(), + renewable: true, + includeHostCA: true, + generation: 1, + } + + if err := a.validateGenerationLabel(ctx, user, &certReq, 0); err != nil { + return nil, trace.Wrap(err) + } - // TODO: deleteUserTokens? - userToken, err := s.Identity.CreateUserToken(ctx, token) + certs, err := a.generateUserCert(certReq) if err != nil { return nil, trace.Wrap(err) } - // TODO: audit log event. partially implemented, may need events.proto and - // dynamic.go, etc (unless we can reuse existing UserTokenCreate event) - // if err := s.emitter.EmitAuditEvent(ctx, &apievents.UserTokenCreate{ - // Metadata: apievents.Metadata{ - // Type: events.BotTokenCreateEvent, - // Code: events.ResetPasswordTokenCreateCode, - // }, - // UserMetadata: apievents.UserMetadata{ - // User: ClientUsername(ctx), - // Impersonator: ClientImpersonator(ctx), - // }, - // ResourceMetadata: apievents.ResourceMetadata{ - // Name: req.Name, - // TTL: req.TTL.String(), - // Expires: s.GetClock().Now().UTC().Add(req.TTL), - // }, - // }); err != nil { - // log.WithError(err).Warn("Failed to emit create reset password token event.") - // } - - return userToken, nil + return certs, nil } diff --git a/lib/auth/clt.go b/lib/auth/clt.go index 3178b23a49ea8..d2534ec7dcc66 100644 --- a/lib/auth/clt.go +++ b/lib/auth/clt.go @@ -1615,19 +1615,6 @@ func (c *Client) GetBotUsers(ctx context.Context) ([]types.User, error) { return c.APIClient.GetBotUsers(ctx) } -// TODO: delete this, RegisterUsingToken used instead -func (c *Client) GenerateInitialRenewableUserCerts(ctx context.Context, req proto.RenewableCertsRequest) (*proto.Certs, error) { - if len(req.Token) == 0 { - return nil, trace.BadParameter("missing token") - } - - if len(req.PublicKey) == 0 { - return nil, trace.BadParameter("missing public key") - } - - return c.APIClient.GenerateInitialRenewableUserCerts(ctx, &req) -} - // GetAppServers gets all application servers. func (c *Client) GetAppServers(ctx context.Context, namespace string, opts ...services.MarshalOption) ([]types.Server, error) { return c.APIClient.GetAppServers(ctx, namespace) @@ -1842,10 +1829,6 @@ type IdentityService interface { // returns the resulting certificates. GenerateUserCerts(ctx context.Context, req proto.UserCertsRequest) (*proto.Certs, error) - // GenerateInitialRenewableUserCerts generates renewable certs for a non-interactive user - // using a previously issued single-use token. - GenerateInitialRenewableUserCerts(ctx context.Context, req proto.RenewableCertsRequest) (*proto.Certs, error) - // GenerateUserSingleUseCerts is like GenerateUserCerts but issues a // certificate for a single session // (https://github.com/gravitational/teleport/blob/3a1cf9111c2698aede2056513337f32bfc16f1f1/rfd/0014-session-2FA.md#sessions). diff --git a/lib/auth/grpcserver.go b/lib/auth/grpcserver.go index 70aa1f4038be4..0e794066d442a 100644 --- a/lib/auth/grpcserver.go +++ b/lib/auth/grpcserver.go @@ -823,24 +823,6 @@ func (g *GRPCServer) GetBotUsers(_ *proto.GetBotUsersRequest, stream proto.AuthS return nil } -func (g *GRPCServer) GenerateInitialRenewableUserCerts(ctx context.Context, req *proto.RenewableCertsRequest) (*proto.Certs, error) { - auth, err := g.authenticate(ctx) - if err != nil { - return nil, trace.Wrap(err) - } - - if req == nil { - req = &proto.RenewableCertsRequest{} - } - - certs, err := auth.GenerateInitialRenewableUserCerts(ctx, *req) - if err != nil { - return nil, trace.Wrap(err) - } - - return certs, nil -} - // GetPluginData loads all plugin data matching the supplied filter. func (g *GRPCServer) GetPluginData(ctx context.Context, filter *types.PluginDataFilter) (*proto.PluginDataSeq, error) { // TODO(fspmarshall): Implement rate-limiting to prevent misbehaving plugins from diff --git a/lib/auth/join.go b/lib/auth/join.go index 8614fe792fbbc..a2f9d4364d2ff 100644 --- a/lib/auth/join.go +++ b/lib/auth/join.go @@ -22,6 +22,7 @@ import ( "github.com/gravitational/teleport/api/client/proto" "github.com/gravitational/teleport/api/types" + "github.com/gravitational/teleport/lib/backend" "github.com/gravitational/teleport/lib/defaults" "github.com/gravitational/trace" ) @@ -114,6 +115,18 @@ func (a *Server) generateCerts(ctx context.Context, provisionToken types.Provisi if err != nil { return nil, trace.Wrap(err) } + + switch provisionToken.GetJoinMethod() { + case types.JoinMethodEC2, types.JoinMethodIAM: + // don't delete long-lived AWS join tokens + default: + // delete bot join tokens so they can't be re-used + if err := a.DeleteToken(ctx, provisionToken.GetName()); err != nil { + log.WithError(err).Warnf("could not delete bot provision token %q after generating certs", + string(backend.MaskKeyName(provisionToken.GetName()))) + } + } + log.Infof("Bot %q has joined the cluster.", botResourceName) return certs, nil } diff --git a/lib/auth/join_test.go b/lib/auth/join_test.go index 5a7da88a11620..f6c8b04f32e26 100644 --- a/lib/auth/join_test.go +++ b/lib/auth/join_test.go @@ -24,9 +24,13 @@ import ( "github.com/gravitational/teleport/api/client/proto" "github.com/gravitational/teleport/api/types" "github.com/gravitational/teleport/api/utils/sshutils" + "github.com/gravitational/teleport/lib/auth/native" + "github.com/gravitational/teleport/lib/tlsca" + "github.com/gravitational/teleport/lib/utils" "github.com/gravitational/trace" "github.com/jonboulle/clockwork" "github.com/stretchr/testify/require" + "golang.org/x/crypto/ssh" ) func TestAuth_RegisterUsingToken(t *testing.T) { @@ -249,3 +253,112 @@ func TestAuth_RegisterUsingToken(t *testing.T) { }) } } + +func newBotToken(t *testing.T, tokenName, user string, role types.SystemRole, expiry time.Time) types.ProvisionToken { + t.Helper() + token, err := types.NewProvisionTokenFromSpec(tokenName, expiry, types.ProvisionTokenSpecV2{ + Roles: []types.SystemRole{role}, + BotName: user, + }) + require.NoError(t, err, "could not create bot token") + return token +} + +// TestRegister_Bot tests that a provision token can be used to generate +// renewable certificates for a non-interactive user. +func TestRegister_Bot(t *testing.T) { + t.Parallel() + + srv := newTestTLSServer(t) + + _, err := createBotRole(context.Background(), srv.Auth(), "test", "bot-test", []string{}) + require.NoError(t, err) + + user, err := createBotUser(context.Background(), srv.Auth(), "test", "bot-test") + require.NoError(t, err) + + later := srv.Clock().Now().Add(4 * time.Hour) + + goodToken := newBotToken(t, "good-token", user.GetName(), types.RoleBot, later) + expiredToken := newBotToken(t, "expired", user.GetName(), types.RoleBot, srv.Clock().Now().Add(-1*time.Hour)) + wrongKind := newBotToken(t, "wrong-kind", "", types.RoleNode, later) + wrongUser := newBotToken(t, "wrong-user", "llama", types.RoleBot, later) + invalidToken := newBotToken(t, "this-token-does-not-exist", user.GetName(), types.RoleBot, later) + + err = srv.Auth().UpsertToken(context.Background(), goodToken) + require.NoError(t, err) + err = srv.Auth().UpsertToken(context.Background(), expiredToken) + require.NoError(t, err) + err = srv.Auth().UpsertToken(context.Background(), wrongKind) + require.NoError(t, err) + err = srv.Auth().UpsertToken(context.Background(), wrongUser) + require.NoError(t, err) + + privateKey, publicKey, err := native.GenerateKeyPair("") + require.NoError(t, err) + sshPrivateKey, err := ssh.ParseRawPrivateKey(privateKey) + require.NoError(t, err) + tlsPublicKey, err := tlsca.MarshalPublicKeyFromPrivateKeyPEM(sshPrivateKey) + require.NoError(t, err) + + for _, test := range []struct { + desc string + token types.ProvisionToken + assertErr require.ErrorAssertionFunc + }{ + { + desc: "OK good token", + token: goodToken, + assertErr: require.NoError, + }, + { + desc: "NOK expired token", + token: expiredToken, + assertErr: require.Error, + }, + { + desc: "NOK wrong token kind", + token: wrongKind, + assertErr: require.Error, + }, + { + desc: "NOK token for wrong user", + token: wrongUser, + assertErr: require.Error, + }, + { + desc: "NOK invalid token", + token: invalidToken, + assertErr: require.Error, + }, + } { + t.Run(test.desc, func(t *testing.T) { + certs, err := Register(RegisterParams{ + Token: test.token.GetName(), + ID: IdentityID{ + Role: types.RoleBot, + }, + Servers: []utils.NetAddr{*utils.MustParseAddr(srv.Addr().String())}, + PublicTLSKey: tlsPublicKey, + PublicSSHKey: publicKey, + }) + test.assertErr(t, err) + + if err == nil { + require.NotEmpty(t, certs.SSH) + require.NotEmpty(t, certs.TLS) + + // ensure token was removed + _, err = srv.Auth().GetToken(context.Background(), test.token.GetName()) + require.True(t, trace.IsNotFound(err), "expected not found error, got %v", err) + + // ensure cert is renewable + x509, err := tlsca.ParseCertificatePEM(certs.TLS) + require.NoError(t, err) + id, err := tlsca.FromSubject(x509.Subject, later) + require.NoError(t, err) + require.True(t, id.Renewable) + } + }) + } +} diff --git a/lib/auth/usertoken.go b/lib/auth/usertoken.go index 81448826d2d46..2b2e239cfdb25 100644 --- a/lib/auth/usertoken.go +++ b/lib/auth/usertoken.go @@ -62,9 +62,6 @@ const ( // second factor re-authentication which in other cases would be required eg: // allowing user to add a mfa device if they don't have any registered. UserTokenTypePrivilegeException = "privilege_exception" - // UserTokenTypeBot is a token type used for certificate renewal bots to join the cluster - // and request renewable certificates. - UserTokenTypeBot = "bot" ) // CreateUserTokenRequest is a request to create a new user token. @@ -114,19 +111,6 @@ func (r *CreateUserTokenRequest) CheckAndSetDefaults() error { defaults.MaxChangePasswordTokenTTL) } - case UserTokenTypeBot: - // bot tokens are like user invite tokens, but don't require you to set - // a password since the user will be a non-interactive one - // (for these reasons, we use the same defaults and maximum TTLs) - if r.TTL == 0 { - r.TTL = defaults.SignupTokenTTL - } - if r.TTL > defaults.MaxSignupTokenTTL { - return trace.BadParameter( - "failed to create user token for bot: maximum token TTL is %v hours", - defaults.MaxSignupTokenTTL) - } - case UserTokenTypeRecoveryStart: r.TTL = defaults.RecoveryStartTokenTTL @@ -375,10 +359,6 @@ func (s *Server) newUserToken(req CreateUserTokenRequest) (types.UserToken, erro token.SetCreated(s.clock.Now().UTC()) token.SetURL(url) - if req.Type == UserTokenTypeBot { - token.SetUsage(types.UserTokenUsage_USER_TOKEN_RENEWAL_BOT) - } - return token, nil } @@ -400,7 +380,6 @@ func formatUserTokenURL(proxyHost string, tokenID string, reqType string) (strin u.Path = fmt.Sprintf("/web/recovery/steps/%v/verify", tokenID) } - // TODO: case for UserTokenTypeBot? return u.String(), nil } diff --git a/tool/tbot/auth.go b/tool/tbot/auth.go deleted file mode 100644 index 6cac01dcf73a1..0000000000000 --- a/tool/tbot/auth.go +++ /dev/null @@ -1,198 +0,0 @@ -/* -Copyright 2015-2022 Gravitational, Inc. - -Licensed under the Apache License, Version 2.0 (the "License"); -you may not use this file except in compliance with the License. -You may obtain a copy of the License at - - http://www.apache.org/licenses/LICENSE-2.0 - -Unless required by applicable law or agreed to in writing, software -distributed under the License is distributed on an "AS IS" BASIS, -WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. -See the License for the specific language governing permissions and -limitations under the License. -*/ - -package main - -import ( - "crypto/x509" - - "github.com/gravitational/teleport/api/client" - "github.com/gravitational/teleport/lib/auth" - "github.com/gravitational/teleport/lib/tlsca" - "github.com/gravitational/teleport/lib/utils" - "github.com/gravitational/trace" - "github.com/jonboulle/clockwork" -) - -// RegisterParams specifies parameters -// for first time register operation with auth server -type RegisterParams struct { - // Token is a secure token to join the cluster - Token string - // ID is identity ID - ID auth.IdentityID - // Servers is a list of auth servers to dial - Servers []utils.NetAddr - // AdditionalPrincipals is a list of additional principals to dial - AdditionalPrincipals []string - // DNSNames is a list of DNS names to add to x509 certificate - DNSNames []string - // PrivateKey is a PEM encoded private key (not passed to auth servers) - PrivateKey []byte - // PublicTLSKey is a server's public key to sign - PublicTLSKey []byte - // PublicSSHKey is a server's public SSH key to sign - PublicSSHKey []byte - // CipherSuites is a list of cipher suites to use for TLS client connection - CipherSuites []uint16 - // CAPins are the SKPI hashes of the CAs used to verify the Auth Server. - CAPins []string - // CAPath is the path to the CA file. - CAPath string - // Clock specifies the time provider. Will be used to override the time anchor - // for TLS certificate verification. - // Defaults to real clock if unspecified - Clock clockwork.Clock -} - -// insecureAuthClient attempts to connects to the Auth Server using the -// CA on disk. If no CA is found on disk, Teleport will not verify the Auth -// Server it is connecting to. -func insecureAuthClient(params RegisterParams) (*auth.Client, []*x509.Certificate, error) { - var rootCAs []*x509.Certificate - - tlsConfig := utils.TLSConfig(params.CipherSuites) - tlsConfig.Time = params.Clock.Now - - cert, err := readCA(params.CAPath) - if err != nil && !trace.IsNotFound(err) { - return nil, rootCAs, trace.Wrap(err) - } - - // If no CA was found, then create a insecure connection to the Auth Server, - // otherwise use the CA on disk to validate the Auth Server. - if trace.IsNotFound(err) { - tlsConfig.InsecureSkipVerify = true - - log.Warnf("Joining cluster without validating the identity of the Auth " + - "Server. This may open you up to a Man-In-The-Middle (MITM) attack if an " + - "attacker can gain privileged network access. To remedy this, use the CA pin " + - "value provided when join token was generated to validate the identity of " + - "the Auth Server.") - } else { - rootCAs = append(rootCAs, cert) - - certPool := x509.NewCertPool() - certPool.AddCert(cert) - tlsConfig.RootCAs = certPool - - log.Infof("Joining remote cluster %v, validating connection with certificate on disk.", cert.Subject.CommonName) - } - - client, err := auth.NewClient(client.Config{ - Addrs: utils.NetAddrsToStrings(params.Servers), - Credentials: []client.Credentials{ - client.LoadTLS(tlsConfig), - }, - }) - if err != nil { - return nil, []*x509.Certificate{}, trace.Wrap(err) - } - - return client, rootCAs, nil -} - -// readCA will read in CA that will be used to validate the certificate that -// the Auth Server presents. -func readCA(path string) (*x509.Certificate, error) { - certBytes, err := utils.ReadPath(path) - if err != nil { - return nil, trace.Wrap(err) - } - cert, err := tlsca.ParseCertificatePEM(certBytes) - if err != nil { - return nil, trace.Wrap(err, "failed to parse certificate at %v", path) - } - return cert, nil -} - -// pinAuthClient first connects to the Auth Server using a insecure -// connection to fetch the root CA. If the root CA matches the provided CA -// pin, a connection will be re-established and the root CA will be used to -// validate the certificate presented. If both conditions hold true, then we -// know we are connecting to the expected Auth Server. -func pinAuthClient(params RegisterParams) (*auth.Client, []*x509.Certificate, error) { - // Build a insecure client to the Auth Server. This is safe because even if - // an attacker were to MITM this connection the CA pin will not match below. - tlsConfig := utils.TLSConfig(params.CipherSuites) - tlsConfig.InsecureSkipVerify = true - tlsConfig.Time = params.Clock.Now - authClient, err := auth.NewClient(client.Config{ - Addrs: utils.NetAddrsToStrings(params.Servers), - Credentials: []client.Credentials{ - client.LoadTLS(tlsConfig), - }, - }) - if err != nil { - return nil, []*x509.Certificate{}, trace.Wrap(err) - } - defer authClient.Close() - - // Fetch the root CA from the Auth Server. The NOP role has access to the - // GetClusterCACert endpoint. - localCA, err := authClient.GetClusterCACert() - if err != nil { - return nil, []*x509.Certificate{}, trace.Wrap(err) - } - certs, err := tlsca.ParseCertificatePEMs(localCA.TLSCA) - if err != nil { - return nil, []*x509.Certificate{}, trace.Wrap(err) - } - - // Check that the SPKI pin matches the CA we fetched over a insecure - // connection. This makes sure the CA fetched over a insecure connection is - // in-fact the expected CA. - err = utils.CheckSPKI(params.CAPins, certs) - if err != nil { - return nil, []*x509.Certificate{}, trace.Wrap(err) - } - - for _, cert := range certs { - // Check that the fetched CA is valid at the current time. - err = utils.VerifyCertificateExpiry(cert, params.Clock) - if err != nil { - return nil, []*x509.Certificate{}, trace.Wrap(err) - } - - } - log.Infof("Connecting to remote cluster %v with CA pin.", certs[0].Subject.CommonName) - - // return these root CAs as we'll store them for later use - var rootCAs []*x509.Certificate - - // Create another client, but this time with the CA provided to validate - // that the Auth Server was issued a certificate by the same CA. - tlsConfig = utils.TLSConfig(params.CipherSuites) - tlsConfig.Time = params.Clock.Now - certPool := x509.NewCertPool() - for _, cert := range certs { - certPool.AddCert(cert) - rootCAs = append(rootCAs, cert) - } - tlsConfig.RootCAs = certPool - - authClient, err = auth.NewClient(client.Config{ - Addrs: utils.NetAddrsToStrings(params.Servers), - Credentials: []client.Credentials{ - client.LoadTLS(tlsConfig), - }, - }) - if err != nil { - return nil, []*x509.Certificate{}, trace.Wrap(err) - } - - return authClient, rootCAs, nil -} diff --git a/tool/tbot/config/configtemplate.go b/tool/tbot/config/configtemplate.go index 38c6d0a4a6d28..e0587493939c0 100644 --- a/tool/tbot/config/configtemplate.go +++ b/tool/tbot/config/configtemplate.go @@ -17,7 +17,6 @@ limitations under the License. package config import ( - "fmt" "strings" "github.com/gravitational/teleport/lib/auth" @@ -59,7 +58,7 @@ type Template interface { Describe() []FileDescription // Render writes the config template to the destination. - Render(authClient *auth.Client, currentIdentity *identity.Identity, destination *DestinationConfig) error + Render(authClient auth.ClientI, currentIdentity *identity.Identity, destination *DestinationConfig) error } // TemplateConfig contains all possible config template variants. Exactly one @@ -80,7 +79,6 @@ func (c *TemplateConfig) UnmarshalYAML(node *yaml.Node) error { switch simpleTemplate { case TemplateSSHClientName: c.SSHClient = &TemplateSSHClient{} - fmt.Println("no params, using defaults") default: return trace.BadParameter( "invalid config template '%s' on line %d, expected one of: %s", diff --git a/tool/tbot/config/configtemplate_ssh.go b/tool/tbot/config/configtemplate_ssh.go index fde210b9ef870..848126ef8f515 100644 --- a/tool/tbot/config/configtemplate_ssh.go +++ b/tool/tbot/config/configtemplate_ssh.go @@ -60,7 +60,7 @@ func (c *TemplateSSHClient) Describe() []FileDescription { } } -func (c *TemplateSSHClient) Render(authClient *auth.Client, currentIdentity *identity.Identity, destination *DestinationConfig) error { +func (c *TemplateSSHClient) Render(authClient auth.ClientI, currentIdentity *identity.Identity, destination *DestinationConfig) error { if !destination.ContainsKind(KindSSH) { return trace.BadParameter("%s config template requires kind `ssh` to be enabled", TemplateSSHClientName) } @@ -165,7 +165,7 @@ Host *.{{ .ClusterName }} !{{ .ProxyHost }} # End generated Teleport configuration `)) -func fetchKnownHosts(client *auth.Client, clusterName, proxyHosts string) (string, error) { +func fetchKnownHosts(client auth.ClientI, clusterName, proxyHosts string) (string, error) { ca, err := client.GetCertAuthority(types.CertAuthID{ Type: types.HostCA, DomainName: clusterName, diff --git a/tool/tbot/identity/identity.go b/tool/tbot/identity/identity.go index bc1b42777950a..01c60c81e3e16 100644 --- a/tool/tbot/identity/identity.go +++ b/tool/tbot/identity/identity.go @@ -25,6 +25,7 @@ import ( "github.com/gravitational/teleport" "github.com/gravitational/teleport/api/client/proto" + apidefaults "github.com/gravitational/teleport/api/defaults" "github.com/gravitational/teleport/api/types" apiutils "github.com/gravitational/teleport/api/utils" apisshutils "github.com/gravitational/teleport/api/utils/sshutils" @@ -192,6 +193,35 @@ func (i *Identity) TLSConfig(cipherSuites []uint16) (*tls.Config, error) { return tlsConfig, nil } +func (i *Identity) getSSHCheckers() ([]ssh.PublicKey, error) { + checkers, err := apisshutils.ParseAuthorizedKeys(i.SSHCACertBytes) + if err != nil { + return nil, trace.Wrap(err) + } + return checkers, nil +} + +// SSHClientConfig returns a ssh.ClientConfig used by the bot to connect to +// the reverse tunnel server. +func (i *Identity) SSHClientConfig() (*ssh.ClientConfig, error) { + callback, err := apisshutils.NewHostKeyCallback( + apisshutils.HostKeyCallbackConfig{ + GetHostCheckers: i.getSSHCheckers, + }) + if err != nil { + return nil, trace.Wrap(err) + } + if len(i.Cert.ValidPrincipals) < 1 { + return nil, trace.BadParameter("user cert has no valid principals") + } + return &ssh.ClientConfig{ + User: i.Cert.ValidPrincipals[0], + Auth: []ssh.AuthMethod{ssh.PublicKeys(i.KeySigner)}, + HostKeyCallback: callback, + Timeout: apidefaults.DefaultDialTimeout, + }, nil +} + // ReadIdentityFromKeyPair reads SSH and TLS identity from key pair. func ReadIdentityFromKeyPair(privateKey []byte, publicKey []byte, certs *proto.Certs) (*Identity, error) { identity, err := ReadSSHIdentityFromKeyPair(privateKey, publicKey, certs.SSH) @@ -344,7 +374,7 @@ func SaveIdentity(id *Identity, d destination.Destination) error { {TLSCertKey, id.TLSCertBytes, destination.ModeHintSecret}, {SSHCertKey, id.CertBytes, destination.ModeHintSecret}, {TLSCACertsKey, bytes.Join(id.TLSCACertsBytes, []byte("$")), destination.ModeHintSecret}, - {SSHCACertsKey, bytes.Join(id.SSHCACertBytes, []byte("\n")), destination.ModeHintSecret}, + {SSHCACertsKey, bytes.Join(id.SSHCACertBytes, []byte("$")), destination.ModeHintSecret}, {PrivateKeyKey, id.KeyBytes, destination.ModeHintSecret}, {PublicKeyKey, id.SSHPublicKeyBytes, destination.ModeHintUnspecified}, } { @@ -379,7 +409,7 @@ func LoadIdentity(d destination.Destination) (*Identity, error) { } } - certs.SSHCACerts = bytes.Split(sshCA, []byte("\n")) + certs.SSHCACerts = bytes.Split(sshCA, []byte("$")) certs.TLSCACerts = bytes.Split(tlsCA, []byte("$")) log.Debugf("Loaded %d SSH CA certs and %d TLS CA certs", len(certs.SSHCACerts), len(certs.TLSCACerts)) diff --git a/tool/tbot/main.go b/tool/tbot/main.go index 39a0f9622c49d..b073aaf04f0ac 100644 --- a/tool/tbot/main.go +++ b/tool/tbot/main.go @@ -18,24 +18,24 @@ package main import ( "context" - "crypto/x509" "fmt" "os" "strings" "time" "github.com/gravitational/teleport" - api "github.com/gravitational/teleport/api/client" "github.com/gravitational/teleport/api/client/proto" "github.com/gravitational/teleport/api/types" "github.com/gravitational/teleport/lib/auth" + "github.com/gravitational/teleport/lib/auth/authclient" "github.com/gravitational/teleport/lib/auth/native" + "github.com/gravitational/teleport/lib/client" + "github.com/gravitational/teleport/lib/services" "github.com/gravitational/teleport/lib/tlsca" "github.com/gravitational/teleport/lib/utils" "github.com/gravitational/teleport/tool/tbot/config" "github.com/gravitational/teleport/tool/tbot/identity" "github.com/gravitational/trace" - "github.com/jonboulle/clockwork" "github.com/kr/pretty" "github.com/sirupsen/logrus" "golang.org/x/crypto/ssh" @@ -140,7 +140,7 @@ func onStart(botConfig *config.BotConfig) error { return trace.WrapWithMessage(err, "invalid auth server address %+v", botConfig.AuthServer) } - var authClient *auth.Client + var authClient auth.ClientI // First, attempt to load an identity from storage. ident, err := identity.LoadIdentity(dest) @@ -186,26 +186,27 @@ func onStart(botConfig *config.BotConfig) error { return trace.WrapWithMessage(err, "unable to generate new keypairs") } - params := RegisterParams{ - Token: onboarding.Token, - Servers: []utils.NetAddr{*addr}, // TODO: multiple servers? - PrivateKey: tlsPrivateKey, - PublicTLSKey: tlsPublicKey, - PublicSSHKey: sshPublicKey, - CipherSuites: utils.DefaultCipherSuites(), - CAPins: onboarding.CAPins, - CAPath: onboarding.CAPath, - Clock: clockwork.NewRealClock(), - } - log.Info("Attempting to generate new identity from token") - ident, err = newIdentityViaAuth(params) + params := auth.RegisterParams{ + Token: onboarding.Token, + ID: auth.IdentityID{ + Role: types.RoleBot, + }, + Servers: []utils.NetAddr{*addr}, + PublicTLSKey: tlsPublicKey, + PublicSSHKey: sshPublicKey, + CAPins: onboarding.CAPins, + CAPath: onboarding.CAPath, + GetHostCredentials: client.HostCredentials, + } + certs, err := auth.Register(params) + if err != nil { + return trace.Wrap(err) + } + ident, err = identity.ReadIdentityFromKeyPair(tlsPrivateKey, sshPublicKey, certs) if err != nil { return trace.Wrap(err) } - - // Attach the ssh public key. - //ident.SSHPublicKeyBytes = sshPublicKey log.Debug("Attempting first connection using initial auth client") authClient, err = authenticatedUserClientFromIdentity(ident, botConfig.AuthServer) @@ -267,65 +268,14 @@ func watchCARotations(watcher types.Watcher) { } } -// newIdentityViaAuth contacts the auth server directly to exchange a token for -// a new set of user certificates. -func newIdentityViaAuth(params RegisterParams) (*identity.Identity, error) { - var client *auth.Client - var rootCAs []*x509.Certificate - var err error - - // Build a client to the Auth Server. If a CA pin is specified require the - // Auth Server is validated. Otherwise attempt to use the CA file on disk - // but if it's not available connect without validating the Auth Server CA. - switch { - case len(params.CAPins) != 0: - client, rootCAs, err = pinAuthClient(params) - default: - // TODO: need to handle an empty list of root CAs in this case. Should - // we just trust on first connect and save the root CA? - client, rootCAs, err = insecureAuthClient(params) - } - if err != nil { - return nil, trace.Wrap(err) - } - defer client.Close() - if err != nil { - return nil, trace.WrapWithMessage(err, "Could not create an unauthenticated auth client") - } - - // Note: GenerateInitialRenewableUserCerts will fetch _only_ the cluster's - // user CA cert. However, to communicate with the auth server, we'll also - // need to fetch the cluster's host CA cert, which we should have fetched - // earlier while initializing the auth client. - certs, err := client.GenerateInitialRenewableUserCerts(context.Background(), proto.RenewableCertsRequest{ - Token: params.Token, - PublicKey: params.PublicSSHKey, - }) - if err != nil { - return nil, trace.WrapWithMessage(err, "Could not generate initial user certificates") - } - - // Append any additional root CAs we received as part of the auth process - // (i.e. the host CA cert) - for _, cert := range rootCAs { - pemBytes, err := tlsca.MarshalCertificatePEM(cert) - if err != nil { - return nil, trace.Wrap(err) - } - certs.TLSCACerts = append(certs.TLSCACerts, pemBytes) - } - - return identity.ReadIdentityFromKeyPair(params.PrivateKey, params.PublicSSHKey, certs) -} - func renewIdentityViaAuth( - client *auth.Client, + client auth.ClientI, currentIdentity *identity.Identity, certTTL time.Duration, ) (*identity.Identity, error) { // TODO: enforce expiration > renewal period (by what margin?) - // First, ask the auth server to generate a new set of certs with a new + // Ask the auth server to generate a new set of certs with a new // expiration date. certs, err := client.GenerateUserCerts(context.Background(), proto.UserCertsRequest{ PublicKey: currentIdentity.SSHPublicKeyBytes, @@ -336,27 +286,6 @@ func renewIdentityViaAuth( return nil, trace.Wrap(err) } - // The root CA included with the returned user certs will only contain the - // Teleport User CA. We'll also need the host CA for future API calls. - localCA, err := client.GetClusterCACert() - if err != nil { - return nil, trace.Wrap(err) - } - - caCerts, err := tlsca.ParseCertificatePEMs(localCA.TLSCA) - if err != nil { - return nil, trace.Wrap(err) - } - - // Append the host CAs from the auth server. - for _, cert := range caCerts { - pemBytes, err := tlsca.MarshalCertificatePEM(cert) - if err != nil { - return nil, trace.Wrap(err) - } - certs.TLSCACerts = append(certs.TLSCACerts, pemBytes) - } - newIdentity, err := identity.ReadIdentityFromKeyPair( currentIdentity.KeyBytes, currentIdentity.SSHPublicKeyBytes, @@ -371,8 +300,8 @@ func renewIdentityViaAuth( // fetchDefaultRoles requests the bot's own role from the auth server and // extracts its full list of allowed roles. -func fetchDefaultRoles(ctx context.Context, client *auth.Client, botRole string) ([]string, error) { - role, err := client.GetRole(ctx, botRole) +func fetchDefaultRoles(ctx context.Context, roleGetter services.RoleGetter, botRole string) ([]string, error) { + role, err := roleGetter.GetRole(ctx, botRole) if err != nil { return nil, trace.Wrap(err) } @@ -410,7 +339,7 @@ func describeIdentity(ident *identity.Identity) (string, error) { ), nil } -func renewLoop(cfg *config.BotConfig, client *auth.Client, ident *identity.Identity) error { +func renewLoop(cfg *config.BotConfig, client auth.ClientI, ident *identity.Identity) error { // TODO: failures here should probably not just end the renewal loop, there // should be some retry / back-off logic. @@ -532,27 +461,35 @@ func renewLoop(cfg *config.BotConfig, client *auth.Client, ident *identity.Ident } } -func authenticatedUserClientFromIdentity(id *identity.Identity, authServer string) (*auth.Client, error) { - tlsConfig, err := id.TLSConfig([]uint16{}) +func authenticatedUserClientFromIdentity(id *identity.Identity, authServer string) (auth.ClientI, error) { + tlsConfig, err := id.TLSConfig(nil /* cipherSuites */) if err != nil { return nil, trace.Wrap(err) } - addr, err := utils.ParseAddr(authServer) + sshConfig, err := id.SSHClientConfig() if err != nil { return nil, trace.Wrap(err) } - return auth.NewClient(api.Config{ - Addrs: utils.NetAddrsToStrings([]utils.NetAddr{*addr}), - Credentials: []api.Credentials{ - api.LoadTLS(tlsConfig), - }, - }) + authAddr, err := utils.ParseAddr(authServer) + if err != nil { + return nil, trace.Wrap(err) + } + + authClientConfig := &authclient.Config{ + TLS: tlsConfig, + SSH: sshConfig, + AuthServers: []utils.NetAddr{*authAddr}, + Log: log, + } + + c, err := authclient.Connect(context.Background(), authClientConfig) + return c, trace.Wrap(err) } func generateImpersonatedIdentity( - client *auth.Client, + client auth.ClientI, currentIdentity *identity.Identity, expires time.Time, roleRequests []string, diff --git a/tool/tctl/common/helpers_test.go b/tool/tctl/common/helpers_test.go index bb97aabf4d845..46f19e699fe20 100644 --- a/tool/tctl/common/helpers_test.go +++ b/tool/tctl/common/helpers_test.go @@ -29,6 +29,7 @@ import ( "github.com/gravitational/teleport/api/defaults" "github.com/gravitational/teleport/lib/auth" + "github.com/gravitational/teleport/lib/auth/authclient" "github.com/gravitational/teleport/lib/config" "github.com/gravitational/teleport/lib/service" "github.com/gravitational/teleport/lib/utils" @@ -85,7 +86,7 @@ func runResourceCommand(t *testing.T, fc *config.FileConfig, args []string, opts clientConfig.TLS.RootCAs = options.CertPool } - client, err := connectToAuthService(context.Background(), cfg, clientConfig) + client, err := authclient.Connect(context.Background(), clientConfig) require.NoError(t, err) _, err = command.TryRun(selectedCmd, client) diff --git a/tool/tctl/common/tctl.go b/tool/tctl/common/tctl.go index 89d96d6c8dbe0..47dc8c5c02c7b 100644 --- a/tool/tctl/common/tctl.go +++ b/tool/tctl/common/tctl.go @@ -18,7 +18,6 @@ package common import ( "context" - "crypto/tls" "fmt" "os" "path/filepath" @@ -26,14 +25,13 @@ import ( "golang.org/x/crypto/ssh" "github.com/gravitational/teleport" - apiclient "github.com/gravitational/teleport/api/client" "github.com/gravitational/teleport/api/types" "github.com/gravitational/teleport/api/utils/sshutils" "github.com/gravitational/teleport/lib/auth" + "github.com/gravitational/teleport/lib/auth/authclient" "github.com/gravitational/teleport/lib/client" "github.com/gravitational/teleport/lib/config" "github.com/gravitational/teleport/lib/defaults" - "github.com/gravitational/teleport/lib/reversetunnel" "github.com/gravitational/teleport/lib/service" "github.com/gravitational/teleport/lib/utils" @@ -152,7 +150,7 @@ func Run(commands []CLICommand) { ctx := context.Background() - client, err := connectToAuthService(ctx, cfg, clientConfig) + client, err := authclient.Connect(ctx, clientConfig) if err != nil { utils.Consolef(os.Stderr, log.WithField(trace.Component, teleport.ComponentClient), teleport.ComponentClient, "Cannot connect to the auth server: %v.\nIs the auth server running on %q?", @@ -173,92 +171,12 @@ func Run(commands []CLICommand) { } } -// AuthServiceClientConfig is a client config for auth service -type AuthServiceClientConfig struct { - // TLS holds credentials for mTLS - TLS *tls.Config - // SSH is client SSH config - SSH *ssh.ClientConfig -} - -// connectToAuthService creates a valid client connection to the auth service -func connectToAuthService(ctx context.Context, cfg *service.Config, clientConfig *AuthServiceClientConfig) (auth.ClientI, error) { - // connect to the local auth server by default: - cfg.Auth.Enabled = true - if len(cfg.AuthServers) == 0 { - cfg.AuthServers = []utils.NetAddr{ - *defaults.AuthConnectAddr(), - } - } - - log.Debugf("Connecting to auth servers: %v.", cfg.AuthServers) - - // Try connecting to the auth server directly over TLS. - client, err := auth.NewClient(apiclient.Config{ - Addrs: utils.NetAddrsToStrings(cfg.AuthServers), - Credentials: []apiclient.Credentials{ - apiclient.LoadTLS(clientConfig.TLS), - }, - }) - if err != nil { - return nil, trace.Wrap(err, "failed direct dial to auth server: %v", err) - } - - // Check connectivity by calling something on the client. - _, err = client.GetClusterName() - if err != nil { - err = trace.Wrap(err, "failed direct dial to auth server: %v", err) - if clientConfig.SSH == nil { - // No identity file was provided, don't try dialing via a reverse - // tunnel on the proxy. - return nil, trace.Wrap(err) - } - - // If direct dial failed, we may have a proxy address in - // cfg.AuthServers. Try connecting to the reverse tunnel endpoint and - // make a client over that. - // - // TODO(awly): this logic should be implemented once, in the auth - // package, and reused in IoT nodes. - - errs := []error{err} - - // reversetunnel.TunnelAuthDialer will take care of creating a net.Conn - // within an SSH tunnel. - dialer, err := reversetunnel.NewTunnelAuthDialer(reversetunnel.TunnelAuthDialerConfig{ - Resolver: reversetunnel.WebClientResolver(ctx, cfg.AuthServers, clientConfig.TLS.InsecureSkipVerify), - ClientConfig: clientConfig.SSH, - Log: cfg.Log, - InsecureSkipTLSVerify: clientConfig.TLS.InsecureSkipVerify, - }) - if err != nil { - return nil, trace.Wrap(err) - } - client, err = auth.NewClient(apiclient.Config{ - Dialer: dialer, - Credentials: []apiclient.Credentials{ - apiclient.LoadTLS(clientConfig.TLS), - }, - }) - if err != nil { - errs = append(errs, trace.Wrap(err, "failed dial to auth server through reverse tunnel: %v", err)) - return nil, trace.NewAggregate(errs...) - } - // Check connectivity by calling something on the client. - if _, err := client.GetClusterName(); err != nil { - errs = append(errs, trace.Wrap(err, "failed dial to auth server through reverse tunnel: %v", err)) - return nil, trace.NewAggregate(errs...) - } - } - return client, nil -} - -// applyConfig takes configuration values from the config file and applies -// them to 'service.Config' object. +// applyConfig takes configuration values from the config file and applies them +// to 'service.Config' object. // -// The returned authServiceClientConfig has the credentials needed to dial the -// auth server. -func applyConfig(ccf *GlobalCLIFlags, cfg *service.Config) (*AuthServiceClientConfig, error) { +// The returned authclient.Config has the credentials needed to dial the auth +// server. +func applyConfig(ccf *GlobalCLIFlags, cfg *service.Config) (*authclient.Config, error) { // --debug flag if ccf.Debug { cfg.Debug = ccf.Debug @@ -317,7 +235,7 @@ func applyConfig(ccf *GlobalCLIFlags, cfg *service.Config) (*AuthServiceClientCo return nil, trace.Wrap(err) } } - authConfig := new(AuthServiceClientConfig) + authConfig := new(authclient.Config) // --identity flag if ccf.IdentityFilePath != "" { key, err := client.KeyFromIdentityFile(ccf.IdentityFilePath) @@ -360,6 +278,8 @@ func applyConfig(ccf *GlobalCLIFlags, cfg *service.Config) (*AuthServiceClientCo } } authConfig.TLS.InsecureSkipVerify = ccf.Insecure + authConfig.AuthServers = cfg.AuthServers + authConfig.Log = cfg.Log return authConfig, nil } @@ -383,7 +303,7 @@ func (m *sshTrustedHostKeyWrapper) GetKnownHostKeys(hostname string) ([]ssh.Publ } // loadConfigFromProfile applies config from ~/.tsh/ profile if it's present -func loadConfigFromProfile(ccf *GlobalCLIFlags, cfg *service.Config) (*AuthServiceClientConfig, error) { +func loadConfigFromProfile(ccf *GlobalCLIFlags, cfg *service.Config) (*authclient.Config, error) { if ccf.IdentityFilePath != "" { return nil, trace.NotFound("identity has been supplied, skip loading the config") } @@ -433,7 +353,7 @@ func loadConfigFromProfile(ccf *GlobalCLIFlags, cfg *service.Config) (*AuthServi return nil, trace.BadParameter("your credentials are for cluster %q, please run `tsh login %q` to log in to the root cluster", profile.Cluster, rootCluster) } - authConfig := &AuthServiceClientConfig{} + authConfig := &authclient.Config{} authConfig.TLS, err = key.TeleportClientTLSConfig(cfg.CipherSuites, []string{rootCluster}) if err != nil { return nil, trace.Wrap(err) @@ -452,6 +372,8 @@ func loadConfigFromProfile(ccf *GlobalCLIFlags, cfg *service.Config) (*AuthServi log.Debugf("Setting auth server to web proxy %v.", webProxyAddr) cfg.AuthServers = []utils.NetAddr{*webProxyAddr} } + authConfig.AuthServers = cfg.AuthServers + authConfig.Log = cfg.Log return authConfig, nil }