From 5e9a299eaafff141d9ef320b65aea3aaf12a42b6 Mon Sep 17 00:00:00 2001
From: oepen <oepen@96b47cad-a561-4643-ad3b-153ac7d7599c>
Date: Mon, 1 Feb 2010 16:40:27 +0000
Subject: [PATCH] - Object orientated refactoring of CardGenerator - PassportOS
 class in VirtualSmartcard.py is no longer needed, because all the
 functionallity is now in CardGenerator - Removed hard coded image - Added
 version number and type to file format

git-svn-id: https://vsmartcard.svn.sourceforge.net/svnroot/vsmartcard@38 96b47cad-a561-4643-ad3b-153ac7d7599c
---
 virtualsmartcard/vpicc/CardGenerator.py    | 279 +++++++++++----------
 virtualsmartcard/vpicc/VirtualSmartcard.py |  71 ++----
 virtualsmartcard/vpicc/jp2.jpg             | Bin 4102 -> 0 bytes
 3 files changed, 172 insertions(+), 178 deletions(-)
 delete mode 100644 virtualsmartcard/vpicc/jp2.jpg

diff --git a/virtualsmartcard/vpicc/CardGenerator.py b/virtualsmartcard/vpicc/CardGenerator.py
index 4924c3f..1f66d85 100644
--- a/virtualsmartcard/vpicc/CardGenerator.py
+++ b/virtualsmartcard/vpicc/CardGenerator.py
@@ -17,11 +17,11 @@
 # virtualsmartcard.  If not, see <http://www.gnu.org/licenses/>.
 #
 
-import sys, getpass, anydbm
+import sys, getpass, anydbm, readline, os, dircache
 from pickle import loads, dumps
 from TLVutils import pack
 from utils import inttostring
-from SmartcardFilesystem import MF, TransparentStructureEF 
+from SmartcardFilesystem import * 
 
 # pgp directory
 #self.mf.append(DF(parent=self.mf,
@@ -34,133 +34,164 @@ from SmartcardFilesystem import MF, TransparentStructureEF
 #self.mf.append(DF(parent=self.mf,
     #fid=3, dfname='\xa0\x00\x00\x03\x08\x00\x00\x10\x00\x01\x00'))  
 
-def generate_iso_card():
-    from SmartcardSAM import SAM
-     
-    print "Using default SAM. Insecure!!!"
-    sam = SAM("1234", "1234567890") #FIXME: Use user provided data
+class CardGenerator(object):
     
-    mf = MF(filedescriptor=FDB["DF"], lifecycle=LCB["ACTIVATED"], dfname=None)
-    self.SAM.set_MF(self.mf)
-    
-    return mf, sam
-
-def generate_ePass():
-        from PIL import Image
-        from SmartcardFilesystem import DF 
-        from SmartcardSAM import PassportSAM
+    def __init__(self, type='iso7816', sam=None, mf=None):
+        types = ['iso7816', 'ePass', 'cryptoflex']
+        if not type in types:
+            raise ValueError, "Unsupported type " % type
         
-        MRZ1 = "P<UTOERIKSSON<<ANNA<MARIX<<<<<<<<<<<<<<<<<<<"
-        MRZ2 = "L898902C<3UTO6908061F9406236ZE184226B<<<<<14"
-        MRZ = MRZ1 + MRZ2        
-
-        picturepath = "jp2.jpg"
-        try:
-            im = Image.open(picturepath)
-            pic_width, pic_height = im.size
-            fd = open(picturepath,"rb")
-            picture = fd.read()
-            fd.close()
-        except IOError:
-            print "Could not find picture %s" % picturepath
-            pic_width = 0
-            pic_height = 0
-            picture = None  
-
-        mf = MF()
+        self.type = type
+        self.mf = None
+        self.sam = None
+    
+    def __generate_iso_card(self):
+        from SmartcardSAM import SAM
+         
+        print "Using default SAM. Insecure!!!"
+        self.sam = SAM("1234", "1234567890") #FIXME: Use user provided data
         
-        #We need a MF with Application DF \xa0\x00\x00\x02G\x10\x01
-        mf.append(DF(parent=mf, fid=4, dfname='\xa0\x00\x00\x02G\x10\x01', bertlv_data=[]))
-        df = mf.currentDF()
-        mf.append(TransparentStructureEF(parent=df, fid=0x011E, filedescriptor=0, data=""))#EF.COM
-        mf.append(TransparentStructureEF(parent=df, fid=0x0101, filedescriptor=0, data=""))#EF.DG1
-        mf.append(TransparentStructureEF(parent=df, fid=0x0102, filedescriptor=0, data=""))#EF.DG2
-        mf.append(TransparentStructureEF(parent=df, fid=0x010D, filedescriptor=0, data=""))#EF.SOD
-        #EF.COM
-        COM = pack([(0x5F01,4,"0107"),(0x5F36,6,"040000"),(0x5C,2,"6175")])
-        COM = pack(((0x60,len(COM),COM),))
-        fid = df.select("fid",0x011E)
-        fid.writebinary([0],[COM])        
-        #EF.DG1
-        DG1 = pack([(0x5F1F,len(MRZ),MRZ)])
-        DG1 = pack([(0x61,len(DG1),DG1)])
-        fid = df.select("fid",0x0101)
-        fid.writebinary([0],[DG1])        
-        #EF.DG2
-        if picture != None:
-            IIB = "\x00\x01" + inttostring(pic_width,2) + inttostring(pic_height,2) + 6 * "\x00" 
-            length = 32 + len(picture) #32 is the length of IIB + FIB
-            FIB = inttostring(length,4) + 16 * "\x00"
-            FRH = "FAC" + "\x00" + "010" + "\x00" + inttostring(14+length,4) + inttostring(1,2)
-            picture = FRH + FIB + IIB + picture
-            DG2 = pack([(0xA1,8,"\x87\x02\x01\x01\x88\x02\x05\x01"),(0x5F2E,len(picture),picture)])
-            DG2 = pack([(0x02,1,"\x01"),(0x7F60,len(DG2),DG2)])
-            DG2 = pack([(0x7F61,len(DG2),DG2)])
-            fid = df.select("fid",0x0102)
-            fid.writebinary([0],[DG2])
-
-        sam = PassportSAM(mf)
-        return mf, sam
-
-def generate_cryptoflex():
-    from SmartcardFilesystem import CryptoflexMF
-    from SmartcardSAM import CryptoflexSAM
-                    
-    mf = CryptoflexMF()
-    mf.append(TransparentStructureEF(parent=mf, fid=0x0002, filedescriptor=0x01,
-                                     data="\x00\x00\x00\x01\x00\x01\x00\x00")) #EF.ICCSN
-    sam = CryptoflexSAM(mf)
+        self.mf = MF(filedescriptor=FDB["DF"], lifecycle=LCB["ACTIVATED"], dfname=None)
+        self.sam.set_MF(self.mf)
+           
+    def __generate_ePass(self):
+            from PIL import Image
+            from SmartcardSAM import PassportSAM
+            
+            MRZ = raw_input("Please enter the MRZ as one string: ") #TODO: Sanity checks
     
-    return mf, sam
-
-def loadCard(filename, password=None):
-    from CryptoUtils import read_protected_string
+            readline.set_completer_delims("")
+            readline.parse_and_bind("tab: complete")
+            
+            picturepath = raw_input("Please enter the path to an image: ")
+            picturepath = picturepath.rstrip() #FIXME
+            
+            #MRZ1 = "P<UTOERIKSSON<<ANNA<MARIX<<<<<<<<<<<<<<<<<<<"
+            #MRZ2 = "L898902C<3UTO6908061F9406236ZE184226B<<<<<14"
+            #MRZ = MRZ1 + MRZ2        
     
-    try:
-        db = anydbm.open(filename, 'r')
-    except anydbm.error:
-        print "Failed to open " + filename
+            try:
+                im = Image.open(picturepath)
+                pic_width, pic_height = im.size
+                fd = open(picturepath,"rb")
+                picture = fd.read()
+                fd.close()
+            except IOError:
+                print "Failed to open file: " + picturepath
+                pic_width = 0
+                pic_height = 0
+                picture = None  
     
-    if password is None:
-        password = getpass.getpass("Please enter your password.")
+            mf = MF()
+            
+            #We need a MF with Application DF \xa0\x00\x00\x02G\x10\x01
+            mf.append(DF(parent=mf, fid=4, dfname='\xa0\x00\x00\x02G\x10\x01', bertlv_data=[]))
+            df = mf.currentDF()
+            mf.append(TransparentStructureEF(parent=df, fid=0x011E, filedescriptor=0, data=""))#EF.COM
+            mf.append(TransparentStructureEF(parent=df, fid=0x0101, filedescriptor=0, data=""))#EF.DG1
+            mf.append(TransparentStructureEF(parent=df, fid=0x0102, filedescriptor=0, data=""))#EF.DG2
+            mf.append(TransparentStructureEF(parent=df, fid=0x010D, filedescriptor=0, data=""))#EF.SOD
+            #EF.COM
+            COM = pack([(0x5F01,4,"0107"),(0x5F36,6,"040000"),(0x5C,2,"6175")])
+            COM = pack(((0x60,len(COM),COM),))
+            fid = df.select("fid",0x011E)
+            fid.writebinary([0],[COM])        
+            #EF.DG1
+            DG1 = pack([(0x5F1F,len(MRZ),MRZ)])
+            DG1 = pack([(0x61,len(DG1),DG1)])
+            fid = df.select("fid",0x0101)
+            fid.writebinary([0],[DG1])        
+            #EF.DG2
+            if picture != None:
+                IIB = "\x00\x01" + inttostring(pic_width,2) + inttostring(pic_height,2) + 6 * "\x00" 
+                length = 32 + len(picture) #32 is the length of IIB + FIB
+                FIB = inttostring(length,4) + 16 * "\x00"
+                FRH = "FAC" + "\x00" + "010" + "\x00" + inttostring(14+length,4) + inttostring(1,2)
+                picture = FRH + FIB + IIB + picture
+                DG2 = pack([(0xA1,8,"\x87\x02\x01\x01\x88\x02\x05\x01"),(0x5F2E,len(picture),picture)])
+                DG2 = pack([(0x02,1,"\x01"),(0x7F60,len(DG2),DG2)])
+                DG2 = pack([(0x7F61,len(DG2),DG2)])
+                fid = df.select("fid",0x0102)
+                fid.writebinary([0],[DG2])
     
-    serializedMF = read_protected_string(db["mf"], password)
-    serializedSAM = read_protected_string(db["sam"], password)
-    SAM = loads(serializedSAM)
-    MF = loads(serializedMF)
-    #self.type = db["type"]
+            self.mf = mf
+            self.sam = PassportSAM(self.mf)
     
-    return SAM, MF
-
-def saveCard(mf, sam, filename, password=None):      
-    from CryptoUtils import protect_string        
-    
-    if filename != None:
-        print "Saving smartcard configuration to %s" % filename
-    else: #TODO: Ask user for filename 
-        pass
-    
-    if password is None:
-        passwd1 = getpass.getpass("Please enter a password.")
-        passwd2 = getpass.getpass("Please retype your password.")
-        if (passwd1 != passwd2):
-            raise ValueError, "Passwords did not match. Will now exit"
+    def __generate_cryptoflex(self):
+        from SmartcardSAM import CryptoflexSAM
+                        
+        self.mf = CryptoflexMF()
+        self.mf.append(TransparentStructureEF(parent=self.mf, fid=0x0002, filedescriptor=0x01,
+                                         data="\x00\x00\x00\x01\x00\x01\x00\x00")) #EF.ICCSN
+        self.sam = CryptoflexSAM(self.mf)
+        
+    def generateCard(self):
+        if self.type == 'iso7816':
+            self.__generate_iso_card()
+        elif self.type == 'ePass':
+            self.__generate_ePass()
+        elif self.type == 'cryptoflex':
+            self.__generate_cryptoflex()
         else:
-            password = passwd1
+            raise ValueError, "Unsupported card type " % self.type
     
-    mf_string = dumps(mf)
-    sam_string = dumps(sam)
-    protectedMF = protect_string(mf_string, password)
-    protectedSAM = protect_string(sam_string, password)
+    def getCard(self):
+        if self.sam is None or self.mf is None:
+            self.generateCard()
+        return self.mf, self.sam
     
-    try:
-        db = anydbm.open(filename, 'c')
-        db["mf"] = protectedMF
-        db["sam"] = protectedSAM
-        #db["type"] = self.type
-        db.close()
-    except anydbm.error:
-        print "Failed to write data to disk"
+    def setCard(self, mf=None, sam=None):
+        if mf != None:
+            self.mf = mf
+        if sam != None:
+            self.sam = sam
+        
+    
+    def loadCard(self, filename, password=None):
+        from CryptoUtils import read_protected_string
+        
+        try:
+            db = anydbm.open(filename, 'r')
+        except anydbm.error:
+            print "Failed to open " + filename
+        
+        if password is None:
+            password = getpass.getpass("Please enter your password.")
+        
+        serializedMF = read_protected_string(db["mf"], password)
+        serializedSAM = read_protected_string(db["sam"], password)
+        self.sam = loads(serializedSAM)
+        self.mf = loads(serializedMF)
+        self.type = db["type"]
+            
+    def saveCard(self, filename, password=None):      
+        from CryptoUtils import protect_string        
+               
+        if password is None:
+            passwd1 = getpass.getpass("Please enter a password.")
+            passwd2 = getpass.getpass("Please retype your password.")
+            if (passwd1 != passwd2):
+                raise ValueError, "Passwords did not match. Will now exit"
+            else:
+                password = passwd1
+        
+        if self.mf == None or self.sam == None: #TODO: Sanity checks
+            raise ValueError, "Card Generator was not set up properly (missing mf or sam)"
+        
+        mf_string = dumps(self.mf)
+        sam_string = dumps(self.sam)
+        protectedMF = protect_string(mf_string, password)
+        protectedSAM = protect_string(sam_string, password)
+        
+        try:
+            db = anydbm.open(filename, 'c')
+            db["mf"] = protectedMF
+            db["sam"] = protectedSAM
+            db["type"] = self.type
+            db["version"] = "0.1"
+            db.close()
+        except anydbm.error:
+            print "Failed to write data to disk"
                           
 if __name__ == "__main__":
     from optparse import OptionParser
@@ -178,11 +209,7 @@ if __name__ == "__main__":
         print "You have to provide a filename using the -f option"
         sys.exit()
     
-    if options.type == 'iso7816':
-        mf, sam = generate_iso_card()
-    elif options.type == 'ePass':
-        mf, sam = generate_ePass()
-    elif options.type == 'cryptoflex':
-        mf, sam = generate_cryptoflex()
-        
-    saveCard(mf, sam, options.filename)
\ No newline at end of file
+    generator = CardGenerator(options.type)
+    generator.generateCard()
+    generator.saveCard(options.filename)
+    
\ No newline at end of file
diff --git a/virtualsmartcard/vpicc/VirtualSmartcard.py b/virtualsmartcard/vpicc/VirtualSmartcard.py
index fe01b4a..5ab9762 100644
--- a/virtualsmartcard/vpicc/VirtualSmartcard.py
+++ b/virtualsmartcard/vpicc/VirtualSmartcard.py
@@ -21,21 +21,21 @@ from TLVutils import *
 from SWutils import SwError, SW
 from SmartcardFilesystem import prettyprint_anything, MF, DF, CryptoflexMF, TransparentStructureEF
 from utils import C_APDU, R_APDU, hexdump, inttostring
-from SmartcardSAM import CardContainer, SAM, PassportSAM, CryptoflexSAM
+from SmartcardSAM import SAM, PassportSAM, CryptoflexSAM
+import CardGenerator
+
 from pickle import dumps, loads
 import socket, struct, sys, signal, atexit, traceback
-import struct
-import getpass
-import shelve, anydbm
+import struct, getpass, anydbm
+
 
 class SmartcardOS(object): # {{{ 
-    def __init__(self, mf=None, sam=None, ins2handler=None, maxle=MAX_SHORT_LE):
-        from CardGenerator import generate_iso_card
+    def __init__(self, mf, sam, ins2handler=None, maxle=MAX_SHORT_LE):
         self.mf = mf
         self.SAM = sam
 
-        if self.mf == None and self.SAM == None:
-            self.mf, self.SAM = generate_iso_card()    
+        #if self.mf == None and self.SAM == None:
+        #    self.mf, self.SAM = generate_iso_card()    
 
         if not ins2handler:
             self.ins2handler = {
@@ -294,40 +294,9 @@ class SmartcardOS(object): # {{{
 
         return answer
 # }}}
-
-class PassportOS(SmartcardOS):
-    """
-    The PassportOS emulates a Passport Application according to ICAO MRTD standard.
-    It generates a data structure ...
-    It also integrates a SAM derived from the standard SmartcardSAM, providing the
-    Basic Access Control (BAC) mechanisms.
-    """
-    
-    def __init__(self, mf=None, sam=None, ins2handler=None, maxle=MAX_SHORT_LE):
-        from CardGenerator import generate_ePass
-        
-        if mf == None and sam == None:
-            mf, sam = generate_ePass()
-        else: #TODO: Sanity check if mf or sam are provided
-            if mf == None:               
-                mf, tmp = generate_ePass()              
-            if sam == None: 
-                sam = PassportSAM(mf)
-        SmartcardOS.__init__(self, mf=mf, sam=sam, ins2handler=ins2handler, maxle=maxle)
-        
+      
 class CryptoflexOS(SmartcardOS): # {{{ 
-    def __init__(self, mf=None, sam=None, ins2handler=None, maxle=MAX_SHORT_LE):
-        from GenerateCard import generate_cryptoflex
-        
-        if mf == None and sam == None:
-            mf, sam = generate_cryptoflex()
-        else:
-            if mf == None:
-                mf, tmp = generate_cryptoflex()
-                del tmp
-            if sam == None:
-                sam = CryptoflexSAM(mf)
-        
+    def __init__(self, mf, sam, ins2handler=None, maxle=MAX_SHORT_LE):
         SmartcardOS.__init__(self, mf, sam, ins2handler, maxle)
         self.atr = '\x3B\xE2\x00\x00\x40\x20\x49\x06'
 
@@ -387,11 +356,9 @@ class VirtualICC(object): # {{{
     
     def __init__(self, filename, type, lenlen=3, host="localhost", port=35963):
         from os.path import exists
-        from CardGenerator import loadCard
         
         self.filename = None
-        SAM = None
-        MF = None
+        self.cardGenerator = CardGenerator.CardGenerator(type)
         
         #If a filename is specified, try to load the card from disk      
         if filename == None:
@@ -399,16 +366,15 @@ class VirtualICC(object): # {{{
         else:
             self.filename = filename
             if exists(filename):
-                print "Found existing card " + filename + ". Will try to open it"
-                SAM, MF = loadCard(filename)
+                self.cardGenerator.loadCard(self.filename)
             else:
-                print "No file " + filename + " found. Will create new file at termination of program."
+                print "No file " + self.filename + " found. Will create new file at termination of program."
+        
+        MF, SAM = self.cardGenerator.getCard()
         
         #Generate an OS object of the correct type
-        if type == "iso7816":
+        if type == "iso7816" or type == "ePass":
             self.os = SmartcardOS(MF, SAM)
-        elif type == "ePass":
-            self.os = PassportOS(MF, SAM)
         elif type == "cryptoflex":
             self.os = CryptoflexOS(MF, SAM)
         else:
@@ -431,9 +397,10 @@ class VirtualICC(object): # {{{
         #atexit.register(saveCard)
     
     def signalHandler(self, signal=None, frame=None):
-        from CardGenerator import saveCard
         self.sock.close()
-        saveCard(self.os.mf, self.os.SAM, self.filename)
+        if self.filename != None:
+            self.cardGenerator.setCard(self.os.mf, self.os.SAM)
+            self.cardGenerator.saveCard(self.filename)
         sys.exit()
 
     @staticmethod
diff --git a/virtualsmartcard/vpicc/jp2.jpg b/virtualsmartcard/vpicc/jp2.jpg
deleted file mode 100644
index 8ecc6a427aa1b8efd9e18355a5ca60739e8e652a..0000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 4102
zcmbW&cTkgClmPG#LY2^zE+tX~Y0_%|0V$zF=%J|e7Qg_~1VQN%2vxc?QFwr~Anhp~
zR7B}bgaqjzp$VZazBjWwyMOKOxie?x&b@Qy{N|pSdogvf05Irj!?Xbs5&$5%T)@Q^
z05x&<4e&*|`}#qo#U%g*4VWPr8Sp0{oTR}3ji;ZRl!SzYxSNM7C#lDO+h3dmAjrim
zpb1b>P*75kQ&Cb<Qd3i10W;BpX=uRgSFh1CadGf)b8&ETLioi6A-tk|oSZ`Pw?ri*
zWn^S{1Qk^jq@d!`GE#qvkWf=ogK5BQw6tteH#l!d{h#CF1HecHm;p!-2`@m(NCILc
zx#$6SE~(@s|HMD4%S1v7A|t1uq@un;b9teO0U#v-fk??f<m7+kB#$r80WwDNt2ZRo
zDXy8`r{wi#l8V9<Q}JokbuycM+u@gf@GzSC3JWV6JBPqcL7`j1GO}{=3W`daceS*2
zbYXgMa|=r=Ya3f9XBSsDcMnfgKw!|L;E>R#&thWZ;u8|n(lau%vR~xnmXwy2zp8ls
zrn0`Fu?gG!uBElByQjCWe_-(A$mrPk#N^cU%pwlI^mBP-b#0xnySIOE`1|OX_{T*8
zfc|A&=6_}X!^L>%A|)dOkx~9}k&r(617{>7zadF+Ro#^GzW+5|sVFKY4NP%eCpDk6
z*$(rAhu^NS@XIU;5dP5qk^S#r(f=>mf5QIDH3NV_B$tl|Vg%HHRp)Q2H~P;TdWlLY
zj};;bGQHo<A(D{bVQu_*G5!Kbs7|)(BidvxO3ce(YVb`~JXu~!Je+H$x*)Ca-dKeM
z$s^Q6-Ww*DUkn92IMS#h_SJ5+{RQa@;N>_)2O%~NcLC5^d*+_S7JF10^GeOm2s1E{
zKJ+hqs1$1DM0+a#mH+Ei(i&@3ng~dMZ0E+L!4KBc>)vck$<uxGL6p!4(%iH#()Vz$
ze%rq0`>%sTyR|x^N9?tib#q}QHUJ<l-L~$Pn};C$Wh>UZdsJnVbvN@qdOYB#)aRZB
za<(;i_`MLm^sZs%xgd12G$S-;rbzgq|4a+DtbWdczQ__<<Zkm74humiiB$qVpCdQj
zUyN_G=<ZP-lkhK`kBqdqUQ_gva{v_1JEF?3|E?eRSn>%-VKj>K@T75=KDfwX<m$SL
zo7RLZmn=5V>)qmDAc!Bk>F1f940XB5*S@ojeZ!hZjbKUCwMU%vV4|fbXVNOGU+3FA
z4tO759eV*ht1_SpCR=-g8fBY>_ZNq2WrA)e$)uK6oa*ab0M{&`w{Uq}8Y3cx8i?U7
z>Z0H@czmG|%zF5Kf4G&U{WG%G^xa>s+Gb4PBD>HX72#6;@t$q}IQ64MR@70Ot|?}4
zH14v@-B8vZn6so{(*CP^At1vGVAIR>M{ldZ6s>O<H2#OAI-60!+kUmohw`d&ZDWw}
zdj&2hyawR(X-3Yv*T|%N=P|wNL|A=ul6V9p*h;f?+?61g<M)<{p3_pec25HI`gg5f
zLP0eyqGlilt-$}9AKw&yfIBn2Eh?*n4cjBbbaEs`Q@eoaRv`Ew9Zw?17{-@^PVHe4
zk*eDL%hC|HY^7tj?0z=6bGOc0QVKtWYEy1D<A9Ti00~SimifWqG?yQ0?Vw_fXeTu+
zd`$=lB5lVmO=Dxra;w%&5RcPfyeCTJsk(mGM=>^8`VvRwi)yMaX~v3w|GFdLZ?B43
z+z0{xXixRIHRtyHu-DbmMj)kkm`a;{(1RU~Q@V$LSyOqd;*D6zWbYup>D^A*?&mt~
zY`C;?|1$Y?c;#=RCGBTcK6pdg`jGF|ZBgjzLW_SBQ$8{|0{$y;LzUNBy)yV|r<|1}
z|J$L*yzR&nO|T%@VGXL+QhsKl7*)k3yu7UpKXhNR278dcT-2moDN;vR+9uw76vu7d
zSN>|=%Qo}*D7~<VvioO@oe<lMI#P{PM6;*Ww87f@fILevOE%a?9B~`6iV#T!c)If^
zjPli*#oLF>)>n)Y$$N)-AT3E~P>cf!)H$G5eFUmj0ju!1HXM04o76HWx=Rt+P%9`9
z-^s=f^|u?6Gm{8_1=0*GMvofTw>Dz>hMT(d-tYueE-{2o>f_mEGe_`(-Bv7BV0DLO
z>I@woweR2a15ejaO}gb1{tAqw1EI>+jlK=3H2>mDNI!b(-&|puTa6Qw`f{!#=g+=X
zqSI0YFSHRz6m)==8+NB}3{*Y0)d(xJ@U4`ssfE^c@pxQmn`Jj}f)IH;Tl@p-$N5hn
z-3%7&J1#3}Ive}d9sw%aT@!sLn`t+TWe^K{FWE6vU%s?yk_;Q6%(>kcv4zXlC2%+1
zHcfvaDPu|KE8tiIZQRT}EYy~f6NSH-?=cA;{8@UeXW^#<f}DUHwGom1?K}s)YWs|i
zvPbne-A$K<RxMUh7W?TH@IzMar!Q;E#Uk<Z^hDg{NY-r1^;yu_{_ZB4m}ot}mvUHi
z>M3H#J?IjIFxLoClSUCIMqj*mVlDr5?6As{NBkO@pG{pZ(*wh4vxzTk%^?gWD>c^@
zYaDyB2>k@*52KZfxgI8UDnU^xEB1IA7rU2t)TX^BnQ<!hr?8!?+6%7Bs7bXh;mq2X
z<GqAWyhl|ZmbE@6O~W`N10Q=C&8j!OYy5^3FKbO4HHdLxfr)?LYx%y+W3jSk8Sc0+
zTkQtl*(5lqU!9(7M{`;Knq!ShDfeCH=F(5n^|_xbgyw@4M2XcYk?)sSdN;8nG&8xm
z+rGA|S9pdRE)|z&mb5?9HV`jJqU#BJ?3GODdnRKj>`sDBTgM%g+3<?~WF*FRUH}J^
zb#|+@A)XUkp@goDrwvb!Cly0>mOtV~4(DeU`drPY=22;E+@}*}iK_~I_C`*NeHB=t
z#<o|%?}N-{uUM#Whv3?_jK;J|91$AD8i<0jKr&4FR*`3g+k&!tDH`XM^PuB{r91uh
zu5t`Avm?YivVKbcA%6nj%;zcc7OpT0bsL*>p^neVuKioKhWW{m_$l5w3M60wFdh+x
zLLAWn2$7+PZ;eAre%sMF;!pM6&nbg;hn@%3-n{OUdJ&sx<#m=DO)2U`i?DLUb&XW)
zO?kgJF2Ffavspn!>z0;E3`;lxKN0q+DhX@K8DZ|lA+?AeVOklT_#1=008)b0HWDLO
zdD~IAN?IMQ_K7r22qLDTK%(-h)+(O6G+K@0P}%#e@ZS-t7AiJ(LyOfWDqR5XAL#40
z%$|+IJ;rKqY2tbe-9@|7HfuN#cO))vQdcGN>+sR&mk#iX&u|=6{VjclSc>NHq+ml%
zZL3FT)!f=D%M``con_Ukqj4X3lRWrQ>B4M+)09>Z<~iDk<;~wM;5(1gyCZIp$9-}5
zbOF>_LX}k}stBxI+qp(>e7QP$3Z3R`GiX}q=t3>Jq>W8Ri#OC5xkm3itIFVYIgUem
zWsH@N3J_vT0+VuzpMFgGXpYHnb06qBvDmVLjfcMu2-~t9-!eFVpf{ZG(M_Rq9d$fW
zfPFDBe`750R%#w>F`0pF_oG$K!d!%6iB-CaaCmBLg|yiB+2Gq&)+_J4Nc?%G9URK#
z=_owsb9_rW&g#&!RyI#>Sz(HhR+#+5A>;<OZljgC_f?+cqafq_g+3}pXiZp9B}^^;
zexcCKJUtCRus7W@*N*bo^ea0%7p`Xkmmg=k_4sx37R=^fFL*W3rU(#!s&IM61PfNF
za@7`p?2EL&pTTN9z=tXPUU{}$@Y-e_?rG~BpQK9r*-9jSuz#Mi?o5Qzyy3kM$Zmqe
zBFn8o@@{Lm@`vMWwto0TO30=`DV=@}zK?h?^g32|%LdvhDaJ^4k6@LDQyIhlbgOIf
zXR5<$EM$N0q^zUt2x+kQ6py`ezg7q;U7(C|+hZ%2&n`!t^S8FOK(>9Ldnu;+S;foB
z91cnZ(V5y<q)!inmM@>chr3B0^lfD6>yfs<^?i?iKRtg}aULzQTx~0+@!K$$d88>t
z^6>d}7AgtUWbK+GY_>t*F9DsQpO8K&osUZB@kw=MPZzUZo@<_h#yj)HL9VTiyez0C
z{kjWafqx0K>gOfA*Gr6P>Z@SR!U)XSnwuJ;`0TwuO8FjZ(;<L@cDJ#BGD4&L$PvOe
zhN@6GDKK_sMrbhoGg7J_y0pLlSMRq#udT=)!t8u`a`|V=uX-bQtXq%yrM1-;;|%iA
zUY2??HBet=vAI^uJh6l7%o2NhJ)|BpxIDUYVVjQ<nz$aIy!Qq%<&eDIOjS?rs<7n7
zUMoK-irn|=F!}^Lv1qrNphhzK7<4_N`Y0y>;X~~q$xs-Fr;B+uGH3Dz4H@)u^HjJ%
zuDAKMW1J(avhO~ff$om(&u$FCeLf8g^9{>A0<U=1zLElZUCWz>CW;mdgwK|4`Po!h
z38G5Gf0~7!c{slt^OenR9S`8rbFVHNDrom7eacA*-Hm9fs-&5HA#>*X!|)v<4`$s|
zx}ZA{0Z$2kC{j>W7@e6Je{*!Jk%wume(EkHc8xzVxKsfiGe@W7pIBWQ95HOOGnYMC
zCpy`jw<PWSlUfj|i02*;{jn9g{od!1T#>(<hjWej9BsA8+kWFav=)t*Er_Z5@TzcZ
zuUiiyV5Oi>7}!Gkslu>KZk^psNX8cX>77FE`u9$vss?Fuw~zutLC?=aswo=c?h=%G
zoeQ-(wo0=TsA)Q=x}BOSn`9gFI_PF~+p*1I{q@Nug+k|hRrzV9EtLC1#`H4>KDLHN
zxV|v`Ft4CQMv3kL>*rWyk|-nI{LIFwILooJ#ykT@EL6?C0}b}Ry^IuGT9;cnnZu8~
zl{NJ0X|+prw40mh2TyMJu;eo2@IS{&aq@Je<W+zYp)lxh*y6x;Nur`rGh+f@dSnjA
z%I#ED2T6=Y_2#J&)PPvMompX@x~%M~^n`SV^8&cybJE}P#rSPa`j@a=4%X)p<3jcA
zS+GEM-<tcn)nnL!Qg4cgV7Bc@;dO<<gM*rD+B?bTF;%p-V|T<?{?2#2k(c08(0t=C
za07iN(mK}yJ<q^tk_&!vN-r21#v9DdrXm%T8-^X+OI|-1=+R!fN;h}#yNVc05ex$g
z=~Wv|O^C_i+G$al_?C*y>pGxnCQGVKjwgZr1V&>Mh2Ko3usGAQ@Mpid=*ulT@WwCD
zbe#jlZ(0i5f^`XgNr$DoDQPN${onb)m^Di~u-1p;c*-9lTFfJ8DMeK~e9F8K{%pop
K=w<rF^nU=bkfz%J