From jesus.perez@quobis.com Sat Sep 15 12:30:54 2012
From: =?utf-8?q?Jes=C3=BAs_P=C3=A9rez?= Rubio <jesus.perez@quobis.com>
To: sr-dev@lists.kamailio.org
Subject: Re: [sr-dev] Websocket testing
Date: Sat, 15 Sep 2012 12:30:48 +0200
Message-ID:
 <CAJFj2EpgMt3bdDa03vn+xuYFL3NKp9U6B2O3SKTcXXbRYVef8g@mail.gmail.com>
In-Reply-To:
 <CAJFj2Eo4cvVy+xdH5ZvrrFdL-Z9Ab+auxYmuJ+D_W=4Suax-Jg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============0649422399=="

--===============0649422399==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

I said dirty because this solutions worked for me (I only need to run
kamailio on another port) but I'm quite new in VoIP (less than a year) and
playing with kamailio.cfg (one or two weeks) xD. I=C2=B4m a bit paranoid and
with the change I=C2=B4m broking a condition to accept a packet or not. I was
looking source code and I think It could be ok, but until somebody from the
list confirms me this change is secure I won=C2=B4t sleep fine ;),

Thanks.

2012/9/14 Jes=C3=BAs P=C3=A9rez Rubio <jesus.perez(a)quobis.com>

> Hi, I had the same problem and I solve it changing this line on my
> kamailio.cfg:
>
> # DIRTY WORKARROUND :P
> #if ($hdr(Host) =3D=3D $null || !is_myself($hdr(Host))) {
> if ($hdr(Host) =3D=3D $null) {
>       xlog("L_WARN", "Bad host $hdr(Host)\n");
>
>       xhttp_reply("403", "Forbidden", "", "");
>       exit;
> }
>
> Could anybode confirm me if this solution is correct (and secure) please?
>
> Thanks in advance :).
>
>
> 2012/8/8 Carlos Ruiz D=C3=ADaz <carlos.ruizdiaz(a)gmail.com>
>
>> Thank you for your time Peter.
>>
>> I'll setup a VM with Windows to continue with my tests and I'll come back
>> later with more feedback.
>>
>> Regards.
>>
>> Carlos.
>>
>>
>> On Wed, Aug 8, 2012 at 12:22 PM, Peter Dunkley <
>> peter.dunkley(a)crocodile-rcs.com> wrote:
>>
>>> Hi,
>>>
>>> I have added some comments in-line below.
>>>
>>> Regards,
>>>
>>> Peter
>>>
>>> > 1. After setting up the proxy ip:port in the call.htm file (of sipml5)
>>> to
>>> > *
>>> > 127.0.0.1:5060* the client started to work but kamailio script
>>> refused to
>>> > establish my connection because the following condition was not
>>> satisfied:
>>> >
>>> >
>>> > *if ($Rp !=3D MY_WS_PORT && $Rp !=3D MY_WSS_PORT) {*
>>> > *                xlog("L_WARN", "HTTP request received on $Rp\n");*
>>> > *                xhttp_reply("403", "Forbidden", "", "");*
>>> > *                exit;*
>>> > *}*
>>> >
>>> > *MY_WS_PORT* and *MY_WSS_PORT *are set to 80 and 443 respectively, as
>>> the
>>> > default config example of websocket module says so.
>>> >
>>> > Then, I decided to change the ip:port to *127.0.0.1:80*, always in the
>>> > call.htm file and afterwards the condition was satisfied but sipml5
>>> dies
>>> > with
>>> >
>>> >  SIP stack start: proxy=3D'127.0.0.1:80', realm=3D'<sip:127.0.0.1>',
>>> > impi=3D'2000', impu=3D'<sip:2000(a)127.0.0.1>'
>>> > tsk_utils.js:97<
>>> http://127.0.0.1/sipml5/src/tinySAK/src/tsk_utils.js?svn=3D5>
>>> >  Connecting to 'ws://127.0.0.1:80'
>>> > tsk_utils.js:97<
>>> http://127.0.0.1/sipml5/src/tinySAK/src/tsk_utils.js?svn=3D5>
>>> >  Stack starting
>>> > tsk_utils.js:97<
>>> http://127.0.0.1/sipml5/src/tinySAK/src/tsk_utils.js?svn=3D5>
>>> >  Unexpected response code: 200 :1 <http://127.0.0.1/>
>>> >  __tsip_transport_ws_onerror
>>> > tsk_utils.js:97<
>>> http://127.0.0.1/sipml5/src/tinySAK/src/tsk_utils.js?svn=3D5>
>>> >  __tsip_transport_ws_onclose
>>> > tsk_utils.js:97<
>>> http://127.0.0.1/sipml5/src/tinySAK/src/tsk_utils.js?svn=3D5>
>>> >  Failed to connet to the server
>>> >
>>> > Finally, I ended up commenting the condition block and restored the
>>> > original values of ip:port to *127.0.0.1:5060* .
>>> >
>>> > Having done that, I tried again and another error was thrown but this
>>> > time,
>>> > in the next condition block: * if ($hdr(Host) =3D=3D $null ||
>>> > !is_myself($hdr(Host))) *
>>> >
>>> > <script>: WebSocket
>>> > Aug  8 11:30:53 carlosrdcnx-laptop kamailio[16238]: DEBUG: <script>:
>>> > Host:
>>> > 127.0.0.1:5060
>>> > Aug  8 11:30:53 carlosrdcnx-laptop kamailio[16238]: DEBUG: <script>:
>>> >  Origin: http://127.0.0.1
>>> > Aug  8 11:30:53 carlosrdcnx-laptop kamailio[16238]: DEBUG: <core>
>>> > [socket_info.c:589]: grep_sock_info - checking if host=3D=3Dus: 14=3D=
=3D9 && [
>>> > 127.0.0.1:5060] =3D=3D [127.0.0.1]
>>> > Aug  8 11:30:53 carlosrdcnx-laptop kamailio[16238]: DEBUG: <core>
>>> > [socket_info.c:589]: grep_sock_info - checking if host=3D=3Dus: 14=3D=
=3D9 && [
>>> > 127.0.0.1:5060] =3D=3D [127.0.0.2]
>>> > Aug  8 11:30:53 carlosrdcnx-laptop kamailio[16238]: DEBUG: <core>
>>> > [socket_info.c:589]: grep_sock_info - checking if host=3D=3Dus: 14=3D=
=3D13 && [
>>> > 127.0.0.1:5060] =3D=3D [192.168.10.95]
>>> > Aug  8 11:30:53 carlosrdcnx-laptop kamailio[16238]: DEBUG: <core>
>>> > [socket_info.c:589]: grep_sock_info - checking if host=3D=3Dus: 14=3D=
=3D13 && [
>>> > 127.0.0.1:5060] =3D=3D [192.168.10.55]
>>> > Aug  8 11:30:53 carlosrdcnx-laptop kamailio[16238]: DEBUG: <core>
>>> > [socket_info.c:589]: grep_sock_info - checking if host=3D=3Dus: 14=3D=
=3D9 && [
>>> > 127.0.0.1:5060] =3D=3D [127.0.0.1]
>>> > Aug  8 11:30:53 carlosrdcnx-laptop kamailio[16238]: DEBUG: <core>
>>> > [socket_info.c:589]: grep_sock_info - checking if host=3D=3Dus: 14=3D=
=3D9 && [
>>> > 127.0.0.1:5060] =3D=3D [127.0.0.2]
>>> > Aug  8 11:30:53 carlosrdcnx-laptop kamailio[16238]: DEBUG: <core>
>>> > [socket_info.c:589]: grep_sock_info - checking if host=3D=3Dus: 14=3D=
=3D13 && [
>>> > 127.0.0.1:5060] =3D=3D [192.168.10.95]
>>> > Aug  8 11:30:53 carlosrdcnx-laptop kamailio[16238]: DEBUG: <core>
>>> > [socket_info.c:589]: grep_sock_info - checking if host=3D=3Dus: 14=3D=
=3D13 && [
>>> > 127.0.0.1:5060] =3D=3D [192.168.10.55]
>>> > Aug  8 11:30:53 carlosrdcnx-laptop kamailio[16238]: DEBUG: <core>
>>> > [forward.c:462]: *check_self: host !=3D me*
>>> > Aug  8 11:30:53 carlosrdcnx-laptop kamailio[16238]: WARNING: <script>:
>>> Bad
>>> > host 127.0.0.1:5060
>>> >
>>> > I commented the block too and only then sipml5 was able to register
>>> > itself.
>>> >
>>> > What am I doing wrong here?
>>> >
>>>
>>> When I tested this I was hosting sipml5 on a web-server on a separate
>>> machine from Kamailio, and my web-browser was on a separate machine from
>>> both Kamailio and the web-server.  The example configuration works for
>>> that scenario (which is likely to be the way it would be deployed in a
>>> real system).  I suspect that the Kamailio listen directives (or
>>> something
>>> else related) aren't set-up quite right for your environment.
>>>
>>> Host: is a required header when establishing a WebSocket connection.  The
>>> Host: header added by the client should indicate the name of the server
>>> the client is trying to connect to as indicated in the WebSocket URI (so
>>> if you put an IP address in the URI that will be in the Host: header, if
>>> you put a hostname in the URI then it will be in the Host: header).  The
>>> WebSocket server (in this case Kamailio) should check that this header
>>> matches what it believes it's externally visible name is before accepting
>>> the connection.
>>>
>>> This check needs to be performed in kamailio.cfg instead of the WebSocket
>>> module in order for the check to be flexible.  The check in the example
>>> kamailio.cfg is:
>>> - Making sure the Host: header is present
>>> - Making sure the name in the Host: header is an IP address (as defined
>>> in
>>> the listen directives) or alias (for example a domain name) that the
>>> Kamailio instance believes it is authoritative for.
>>>
>>> As the WebSocket stack in a web-browser will add the Host: header
>>> automatically, any problem with this suggests that the WebSocket URI set
>>> in sipml5 and the listen/alias directives in kamailio.cfg don't match -
>>> which would be consistent with the first part your connection
>>> establishment problem too.
>>>
>>> I would suggest that you should re-instate these lines as, by commenting
>>> them out (rather than fixing the underlying problems in the test set-up),
>>> you may be moving the issues down-stream.
>>>
>>> > 2. I registered a legacy softphone (twinkle) to attempt to initiate a
>>> call
>>> > in both ways, but the was something wrong with the signaling, probably
>>> > some
>>> > frame decoding garbage in the buffer of the SIP message. Perhaps these
>>> > bytes are part of the frame control header but since I haven't read the
>>> > RFC
>>> > (yet) I am mentioning it anyway.
>>> >
>>> > tcp_send: buf=3D*#012=EF=BF=BD~#003=EF=BF=BD*INVITE
>>> > sip:2000(a)df7jal23ls0d.invalid;transport=3Dws
>>> > SIP/2.0#015#012Record-Route:
>>> > <sip:127.0.0.1;transport=3Dws;r2=3Don;lr=3Don>#015#012Record-Route:
>>> > <sip:127.0.0.1;r2=3Don;lr=3Don>#015#012Via: SIP/2.0/WS
>>> >
>>>  127.0.0.1;branch=3Dz9hG4bK90a8.b1a7035e13ed19880dd12a1f4c86adbb.0#015#01=
2Via:
>>> > SIP/2.0/UDP
>>> > 127.0.0.1:5062;rport=3D5062;branch=3Dz9hG4bKimixlbyp#015#012Max-Forward=
s:
>>> > 69#015#012To: <sip:2000(a)127.0.0.1>#015#012From: "1000"
>>> > <sip:1000(a)127.0.0.1>;tag=3Dlrtfz#015#012Call-ID:
>>> > gxsqobolphfchfq(a)carlosrdcnx-laptop.site#015#012CSeq: 654
>>> > INVITE#015#012Contact: <sip:1000(a)127.0.0.1:5062>#015#012Content-Type:
>>> > application/sdp#015#012Allow:
>>> >
>>> INVITE,ACK,BYE,CANCEL,OPTIONS,PRACK,REFER,NOTIFY,SUBSCRIBE,INFO,MESSAGE#0=
15#012Supported:
>>> > replaces,norefersub,100rel#015#012User-Agent:
>>> > Twinkle/1.4.2#015#012Content-Length:
>>> > 302#015#012#015#012v=3D0#015#012o=3Dtwinkle 391470222 1383232165 IN IP4
>>> > 127.0.0.1#015#012s=3D-#015#012c=3DIN IP4 127.0.0.1#015#012t=3D0
>>> 0#015#012m=3Daudio
>>> > 8008 RTP/AVP 98 97 8 0 3 101#015#012a=3Drtpmap:98
>>> > speex/16000#015#012a=3Drtpmap:97 speex/8000#015#012a=3Drtpmap:8
>>> > PCMA/8000#015#012a=3Drtpmap:0 PCMU/8000#015#012a=3Drtpmap:3
>>> > GSM/8000#015#012a=3Drtpmap:101 telephone-event/8000#015#012a=3Dfmtp:101
>>> > 0-15#015#012a=3Dptime:20#015#012
>>> >
>>>
>>> That INVITE is for a call towards sipml5 on a WebSocket connection.  So
>>> this isn't a SIP message over TCP, it is a SIP message over WebSockets
>>> over TCP - and those are not the same thing.  The stuff at the start of
>>> the TCP buffer is the WebSocket framing and it is meant to be there.
>>>
>>> The WebSocket framing will not be present on the connection to Twinkle.
>>>
>>> > 3. Does Twinkle support the minimum media requirements for testing? If
>>> > not,
>>> > what (Linux) softphone is suitable for this purpose?
>>> >
>>>
>>> When using an up-to-date Google Chrome you need to use a client that
>>> supports RTP/SAVPF.  Boghe (from Doubango) is a Windows client that
>>> supports this.  I don't know which (if any) Linux clients support this
>>> feature.
>>>
>>> --
>>> Peter Dunkley
>>> Technical Director
>>> Crocodile RCS Ltd
>>>
>>>
>>> _______________________________________________
>>> sr-dev mailing list
>>> sr-dev(a)lists.sip-router.org
>>> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-dev
>>>
>>
>>
>> _______________________________________________
>> sr-dev mailing list
>> sr-dev(a)lists.sip-router.org
>> http://lists.sip-router.org/cgi-bin/mailman/listinfo/sr-dev
>>
>>
>
>
> --
> Jes=C3=BAs P=C3=A9rez
> VoIP Engineer at Quobis
>
> Fixed: +34 902 999 465
> Site: http://www.quobis.com
>
>


--=20
Jes=C3=BAs P=C3=A9rez
VoIP Engineer at Quobis

Fixed: +34 902 999 465
Site: http://www.quobis.com



--===============0649422399==
Content-Type: text/html
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="attachment.html"
MIME-Version: 1.0

SSBzYWlkIGRpcnR5IGJlY2F1c2UgdGhpcyBzb2x1dGlvbnMgd29ya2VkIGZvciBtZSAoSSBvbmx5
IG5lZWQgdG8gcnVuIAprYW1haWxpbyBvbiBhbm90aGVyIHBvcnQpIGJ1dCBJJiMzOTttIHF1aXRl
IG5ldyBpbiBWb0lQIChsZXNzIHRoYW4gYSB5ZWFyKSAKYW5kIHBsYXlpbmcgd2l0aCBrYW1haWxp
by5jZmcgKG9uZSBvciB0d28gd2Vla3MpIHhELiBJwrRtIGEgYml0IHBhcmFub2lkIAphbmQgd2l0
aCB0aGUgY2hhbmdlIEnCtG0gYnJva2luZyBhIGNvbmRpdGlvbiB0byBhY2NlcHQgYSBwYWNrZXQg
b3Igbm90LiBJCiB3YXMgbG9va2luZyBzb3VyY2UgY29kZSBhbmQgSSB0aGluayBJdCBjb3VsZCBi
ZSBvaywgYnV0IHVudGlsIHNvbWVib2R5IApmcm9tIHRoZSBsaXN0IGNvbmZpcm1zIG1lIHRoaXMg
Y2hhbmdlIGlzIHNlY3VyZSBJIHdvbsK0dCBzbGVlcCBmaW5lIDspLDxicj4KPGJyPgpUaGFua3Mu
PGJyPjxicj48ZGl2IGNsYXNzPSJnbWFpbF9xdW90ZSI+MjAxMi85LzE0IEplc8O6cyBQw6lyZXog
UnViaW8gPHNwYW4gZGlyPSJsdHIiPiZsdDs8YSBocmVmPSJtYWlsdG86amVzdXMucGVyZXpAcXVv
YmlzLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmplc3VzLnBlcmV6QHF1b2Jpcy5jb208L2E+Jmd0Ozwv
c3Bhbj48YnI+PGJsb2NrcXVvdGUgY2xhc3M9ImdtYWlsX3F1b3RlIiBzdHlsZT0ibWFyZ2luOjAg
MCAwIC44ZXg7Ym9yZGVyLWxlZnQ6MXB4ICNjY2Mgc29saWQ7cGFkZGluZy1sZWZ0OjFleCI+Ckhp
LCBJIGhhZCB0aGUgc2FtZSBwcm9ibGVtIGFuZCBJIHNvbHZlIGl0IGNoYW5naW5nIHRoaXMgbGlu
ZSBvbiBteSBrYW1haWxpby5jZmc6PGJyPjxicj4jIERJUlRZIFdPUktBUlJPVU5EIDpQwqDCoMKg
IDxicj4jaWYgKCRoZHIoSG9zdCkgPT0gJG51bGwgfHwgIWlzX215c2VsZigkaGRyKEhvc3QpKSkg
e8KgwqDCoCA8YnI+aWYgKCRoZHIoSG9zdCkgPT0gJG51bGwpIHs8YnI+wqDCoMKgIMKgIHhsb2co
JnF1b3Q7TF9XQVJOJnF1b3Q7LCAmcXVvdDtCYWQgaG9zdCAkaGRyKEhvc3QpXG4mcXVvdDspOzxk
aXYgY2xhc3M9ImltIj4KPGJyPgrCoMKgwqAgwqAgeGh0dHBfcmVwbHkoJnF1b3Q7NDAzJnF1b3Q7
LCAmcXVvdDtGb3JiaWRkZW4mcXVvdDssICZxdW90OyZxdW90OywgJnF1b3Q7JnF1b3Q7KTs8YnI+
PC9kaXY+wqDCoMKgIMKgIGV4aXQ7PGJyPn08YnI+PGJyPkNvdWxkIGFueWJvZGUgY29uZmlybSBt
ZSBpZiB0aGlzIHNvbHV0aW9uIGlzIGNvcnJlY3QgKGFuZCBzZWN1cmUpIHBsZWFzZT88YnI+PGJy
PlRoYW5rcyBpbiBhZHZhbmNlIDopLjxkaXYgY2xhc3M9IkhPRW5aYiI+CjxkaXYgY2xhc3M9Img1
Ij48YnI+PGJyPgo8ZGl2IGNsYXNzPSJnbWFpbF9xdW90ZSI+MjAxMi84LzggQ2FybG9zIFJ1aXog
RMOtYXogPHNwYW4gZGlyPSJsdHIiPiZsdDs8YSBocmVmPSJtYWlsdG86Y2FybG9zLnJ1aXpkaWF6
QGdtYWlsLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmNhcmxvcy5ydWl6ZGlhekBnbWFpbC5jb208L2E+
Jmd0Ozwvc3Bhbj48YnI+PGJsb2NrcXVvdGUgY2xhc3M9ImdtYWlsX3F1b3RlIiBzdHlsZT0ibWFy
Z2luOjAgMCAwIC44ZXg7Ym9yZGVyLWxlZnQ6MXB4ICNjY2Mgc29saWQ7cGFkZGluZy1sZWZ0OjFl
eCI+CgpUaGFuayB5b3UgZm9yIHlvdXIgdGltZcKgUGV0ZXIuwqA8ZGl2Pjxicj48L2Rpdj48ZGl2
PkkmIzM5O2xsIHNldHVwIGEgVk0gd2l0aCBXaW5kb3dzIHRvIGNvbnRpbnVlIHdpdGggbXkgdGVz
dHMgYW5kIEkmIzM5O2xsIGNvbWUgYmFjayBsYXRlciB3aXRoIG1vcmUgZmVlZGJhY2suPC9kaXY+
PGRpdj48YnI+PC9kaXY+PGRpdj5SZWdhcmRzLjwvZGl2PjxzcGFuPjxmb250IGNvbG9yPSIjODg4
ODg4Ij48ZGl2PgoKPGJyPjwvZGl2PjwvZm9udD48L3NwYW4+PGRpdj48c3Bhbj48Zm9udCBjb2xv
cj0iIzg4ODg4OCI+Q2FybG9zLjwvZm9udD48L3NwYW4+PGRpdj48ZGl2Pjxicj4KPGJyPjxkaXYg
Y2xhc3M9ImdtYWlsX3F1b3RlIj5PbiBXZWQsIEF1ZyA4LCAyMDEyIGF0IDEyOjIyIFBNLCBQZXRl
ciBEdW5rbGV5IDxzcGFuIGRpcj0ibHRyIj4mbHQ7PGEgaHJlZj0ibWFpbHRvOnBldGVyLmR1bmts
ZXlAY3JvY29kaWxlLXJjcy5jb20iIHRhcmdldD0iX2JsYW5rIj5wZXRlci5kdW5rbGV5QGNyb2Nv
ZGlsZS1yY3MuY29tPC9hPiZndDs8L3NwYW4+IHdyb3RlOjxicj48YmxvY2txdW90ZSBjbGFzcz0i
Z21haWxfcXVvdGUiIHN0eWxlPSJtYXJnaW46MCAwIDAgLjhleDtib3JkZXItbGVmdDoxcHggI2Nj
YyBzb2xpZDtwYWRkaW5nLWxlZnQ6MWV4Ij4KCgpIaSw8YnI+Cjxicj4KSSBoYXZlIGFkZGVkIHNv
bWUgY29tbWVudHMgaW4tbGluZSBiZWxvdy48YnI+Cjxicj4KUmVnYXJkcyw8YnI+Cjxicj4KUGV0
ZXI8YnI+CjxkaXY+PGJyPgomZ3Q7IDEuIEFmdGVyIHNldHRpbmcgdXAgdGhlIHByb3h5IGlwOnBv
cnQgaW4gdGhlIGNhbGwuaHRtIGZpbGUgKG9mIHNpcG1sNSkgdG88YnI+CjwvZGl2PiZndDsgKjxi
cj4KJmd0OyAxMjcuMC4wLjE6NTA2MCogdGhlIGNsaWVudCBzdGFydGVkIHRvIHdvcmsgYnV0IGth
bWFpbGlvIHNjcmlwdCByZWZ1c2VkIHRvPGJyPgo8ZGl2PiZndDsgZXN0YWJsaXNoIG15IGNvbm5l
Y3Rpb24gYmVjYXVzZSB0aGUgZm9sbG93aW5nIGNvbmRpdGlvbiB3YXMgbm90IHNhdGlzZmllZDo8
YnI+CiZndDs8YnI+CiZndDs8YnI+CjwvZGl2PiZndDsgKmlmICgkUnAgIT0gTVlfV1NfUE9SVCAm
YW1wOyZhbXA7ICRScCAhPSBNWV9XU1NfUE9SVCkgeyo8YnI+CiZndDsgKiDCoCDCoCDCoCDCoCDC
oCDCoCDCoCDCoHhsb2coJnF1b3Q7TF9XQVJOJnF1b3Q7LCAmcXVvdDtIVFRQIHJlcXVlc3QgcmVj
ZWl2ZWQgb24gJFJwXG4mcXVvdDspOyo8YnI+CiZndDsgKiDCoCDCoCDCoCDCoCDCoCDCoCDCoCDC
oHhodHRwX3JlcGx5KCZxdW90OzQwMyZxdW90OywgJnF1b3Q7Rm9yYmlkZGVuJnF1b3Q7LCAmcXVv
dDsmcXVvdDssICZxdW90OyZxdW90Oyk7Kjxicj4KJmd0OyAqIMKgIMKgIMKgIMKgIMKgIMKgIMKg
IMKgZXhpdDsqPGJyPgomZ3Q7ICp9Kjxicj4KJmd0Ozxicj4KJmd0OyAqTVlfV1NfUE9SVCogYW5k
ICpNWV9XU1NfUE9SVCAqYXJlIHNldCB0byA4MCBhbmQgNDQzIHJlc3BlY3RpdmVseSwgYXMgdGhl
PGJyPgo8ZGl2PiZndDsgZGVmYXVsdCBjb25maWcgZXhhbXBsZSBvZiB3ZWJzb2NrZXQgbW9kdWxl
IHNheXMgc28uPGJyPgomZ3Q7PGJyPgo8L2Rpdj4mZ3Q7IFRoZW4sIEkgZGVjaWRlZCB0byBjaGFu
Z2UgdGhlIGlwOnBvcnQgdG8gKjEyNy4wLjAuMTo4MCosIGFsd2F5cyBpbiB0aGU8YnI+CjxkaXY+
Jmd0OyBjYWxsLmh0bSBmaWxlIGFuZCBhZnRlcndhcmRzIHRoZSBjb25kaXRpb24gd2FzIHNhdGlz
ZmllZCBidXQgc2lwbWw1IGRpZXM8YnI+CiZndDsgd2l0aDxicj4KJmd0Ozxicj4KJmd0OyDCoFNJ
UCBzdGFjayBzdGFydDogcHJveHk9JiMzOTs8YSBocmVmPSJodHRwOi8vMTI3LjAuMC4xOjgwIiB0
YXJnZXQ9Il9ibGFuayI+MTI3LjAuMC4xOjgwPC9hPiYjMzk7LCByZWFsbT0mIzM5OyZsdDtzaXA6
MTI3LjAuMC4xJmd0OyYjMzk7LDxicj4KJmd0OyBpbXBpPSYjMzk7MjAwMCYjMzk7LCBpbXB1PSYj
Mzk7Jmx0OzxhIGhyZWY9Im1haWx0bzpzaXAlM0EyMDAwQDEyNy4wLjAuMSIgdGFyZ2V0PSJfYmxh
bmsiPnNpcDoyMDAwQDEyNy4wLjAuMTwvYT4mZ3Q7JiMzOTs8YnI+CjwvZGl2PiZndDsgdHNrX3V0
aWxzLmpzOjk3Jmx0OzxhIGhyZWY9Imh0dHA6Ly8xMjcuMC4wLjEvc2lwbWw1L3NyYy90aW55U0FL
L3NyYy90c2tfdXRpbHMuanM/c3ZuPTUiIHRhcmdldD0iX2JsYW5rIj5odHRwOi8vMTI3LjAuMC4x
L3NpcG1sNS9zcmMvdGlueVNBSy9zcmMvdHNrX3V0aWxzLmpzP3N2bj01PC9hPiZndDs8YnI+Cjxk
aXY+Jmd0OyDCoENvbm5lY3RpbmcgdG8gJiMzOTt3czovLzxhIGhyZWY9Imh0dHA6Ly8xMjcuMC4w
LjE6ODAiIHRhcmdldD0iX2JsYW5rIj4xMjcuMC4wLjE6ODA8L2E+JiMzOTs8YnI+CjwvZGl2PiZn
dDsgdHNrX3V0aWxzLmpzOjk3Jmx0OzxhIGhyZWY9Imh0dHA6Ly8xMjcuMC4wLjEvc2lwbWw1L3Ny
Yy90aW55U0FLL3NyYy90c2tfdXRpbHMuanM/c3ZuPTUiIHRhcmdldD0iX2JsYW5rIj5odHRwOi8v
MTI3LjAuMC4xL3NpcG1sNS9zcmMvdGlueVNBSy9zcmMvdHNrX3V0aWxzLmpzP3N2bj01PC9hPiZn
dDs8YnI+CiZndDsgwqBTdGFjayBzdGFydGluZzxicj4KJmd0OyB0c2tfdXRpbHMuanM6OTcmbHQ7
PGEgaHJlZj0iaHR0cDovLzEyNy4wLjAuMS9zaXBtbDUvc3JjL3RpbnlTQUsvc3JjL3Rza191dGls
cy5qcz9zdm49NSIgdGFyZ2V0PSJfYmxhbmsiPmh0dHA6Ly8xMjcuMC4wLjEvc2lwbWw1L3NyYy90
aW55U0FLL3NyYy90c2tfdXRpbHMuanM/c3ZuPTU8L2E+Jmd0Ozxicj4KJmd0OyDCoFVuZXhwZWN0
ZWQgcmVzcG9uc2UgY29kZTogMjAwIDoxICZsdDs8YSBocmVmPSJodHRwOi8vMTI3LjAuMC4xLyIg
dGFyZ2V0PSJfYmxhbmsiPmh0dHA6Ly8xMjcuMC4wLjEvPC9hPiZndDs8YnI+CiZndDsgwqBfX3Rz
aXBfdHJhbnNwb3J0X3dzX29uZXJyb3I8YnI+CiZndDsgdHNrX3V0aWxzLmpzOjk3Jmx0OzxhIGhy
ZWY9Imh0dHA6Ly8xMjcuMC4wLjEvc2lwbWw1L3NyYy90aW55U0FLL3NyYy90c2tfdXRpbHMuanM/
c3ZuPTUiIHRhcmdldD0iX2JsYW5rIj5odHRwOi8vMTI3LjAuMC4xL3NpcG1sNS9zcmMvdGlueVNB
Sy9zcmMvdHNrX3V0aWxzLmpzP3N2bj01PC9hPiZndDs8YnI+CiZndDsgwqBfX3RzaXBfdHJhbnNw
b3J0X3dzX29uY2xvc2U8YnI+CiZndDsgdHNrX3V0aWxzLmpzOjk3Jmx0OzxhIGhyZWY9Imh0dHA6
Ly8xMjcuMC4wLjEvc2lwbWw1L3NyYy90aW55U0FLL3NyYy90c2tfdXRpbHMuanM/c3ZuPTUiIHRh
cmdldD0iX2JsYW5rIj5odHRwOi8vMTI3LjAuMC4xL3NpcG1sNS9zcmMvdGlueVNBSy9zcmMvdHNr
X3V0aWxzLmpzP3N2bj01PC9hPiZndDs8YnI+CjxkaXY+Jmd0OyDCoEZhaWxlZCB0byBjb25uZXQg
dG8gdGhlIHNlcnZlcjxicj4KJmd0Ozxicj4KJmd0OyBGaW5hbGx5LCBJIGVuZGVkIHVwIGNvbW1l
bnRpbmcgdGhlIGNvbmRpdGlvbiBibG9jayBhbmQgcmVzdG9yZWQgdGhlPGJyPgo8L2Rpdj4mZ3Q7
IG9yaWdpbmFsIHZhbHVlcyBvZiBpcDpwb3J0IHRvICoxMjcuMC4wLjE6NTA2MCogLjxicj4KPGRp
dj4mZ3Q7PGJyPgomZ3Q7IEhhdmluZyBkb25lIHRoYXQsIEkgdHJpZWQgYWdhaW4gYW5kIGFub3Ro
ZXIgZXJyb3Igd2FzIHRocm93biBidXQgdGhpczxicj4KJmd0OyB0aW1lLDxicj4KPC9kaXY+Jmd0
OyBpbiB0aGUgbmV4dCBjb25kaXRpb24gYmxvY2s6ICogaWYgKCRoZHIoSG9zdCkgPT0gJG51bGwg
fHw8YnI+CiZndDsgIWlzX215c2VsZigkaGRyKEhvc3QpKSkgKjxicj4KPGRpdj48ZGl2PiZndDs8
YnI+CiZndDsgJmx0O3NjcmlwdCZndDs6IFdlYlNvY2tldDxicj4KJmd0OyBBdWcgwqA4IDExOjMw
OjUzIGNhcmxvc3JkY254LWxhcHRvcCBrYW1haWxpb1sxNjIzOF06IERFQlVHOiAmbHQ7c2NyaXB0
Jmd0Ozo8YnI+CiZndDsgSG9zdDo8YnI+CiZndDsgPGEgaHJlZj0iaHR0cDovLzEyNy4wLjAuMTo1
MDYwIiB0YXJnZXQ9Il9ibGFuayI+MTI3LjAuMC4xOjUwNjA8L2E+PGJyPgomZ3Q7IEF1ZyDCoDgg
MTE6MzA6NTMgY2FybG9zcmRjbngtbGFwdG9wIGthbWFpbGlvWzE2MjM4XTogREVCVUc6ICZsdDtz
Y3JpcHQmZ3Q7Ojxicj4KJmd0OyDCoE9yaWdpbjogPGEgaHJlZj0iaHR0cDovLzEyNy4wLjAuMSIg
dGFyZ2V0PSJfYmxhbmsiPmh0dHA6Ly8xMjcuMC4wLjE8L2E+PGJyPgomZ3Q7IEF1ZyDCoDggMTE6
MzA6NTMgY2FybG9zcmRjbngtbGFwdG9wIGthbWFpbGlvWzE2MjM4XTogREVCVUc6ICZsdDtjb3Jl
Jmd0Ozxicj4KJmd0OyBbc29ja2V0X2luZm8uYzo1ODldOiBncmVwX3NvY2tfaW5mbyAtIGNoZWNr
aW5nIGlmIGhvc3Q9PXVzOiAxND09OSAmYW1wOyZhbXA7IFs8YnI+CiZndDsgPGEgaHJlZj0iaHR0
cDovLzEyNy4wLjAuMTo1MDYwIiB0YXJnZXQ9Il9ibGFuayI+MTI3LjAuMC4xOjUwNjA8L2E+XSA9
PSBbMTI3LjAuMC4xXTxicj4KJmd0OyBBdWcgwqA4IDExOjMwOjUzIGNhcmxvc3JkY254LWxhcHRv
cCBrYW1haWxpb1sxNjIzOF06IERFQlVHOiAmbHQ7Y29yZSZndDs8YnI+CiZndDsgW3NvY2tldF9p
bmZvLmM6NTg5XTogZ3JlcF9zb2NrX2luZm8gLSBjaGVja2luZyBpZiBob3N0PT11czogMTQ9PTkg
JmFtcDsmYW1wOyBbPGJyPgomZ3Q7IDxhIGhyZWY9Imh0dHA6Ly8xMjcuMC4wLjE6NTA2MCIgdGFy
Z2V0PSJfYmxhbmsiPjEyNy4wLjAuMTo1MDYwPC9hPl0gPT0gWzEyNy4wLjAuMl08YnI+CiZndDsg
QXVnIMKgOCAxMTozMDo1MyBjYXJsb3NyZGNueC1sYXB0b3Aga2FtYWlsaW9bMTYyMzhdOiBERUJV
RzogJmx0O2NvcmUmZ3Q7PGJyPgomZ3Q7IFtzb2NrZXRfaW5mby5jOjU4OV06IGdyZXBfc29ja19p
bmZvIC0gY2hlY2tpbmcgaWYgaG9zdD09dXM6IDE0PT0xMyAmYW1wOyZhbXA7IFs8YnI+CiZndDsg
PGEgaHJlZj0iaHR0cDovLzEyNy4wLjAuMTo1MDYwIiB0YXJnZXQ9Il9ibGFuayI+MTI3LjAuMC4x
OjUwNjA8L2E+XSA9PSBbMTkyLjE2OC4xMC45NV08YnI+CiZndDsgQXVnIMKgOCAxMTozMDo1MyBj
YXJsb3NyZGNueC1sYXB0b3Aga2FtYWlsaW9bMTYyMzhdOiBERUJVRzogJmx0O2NvcmUmZ3Q7PGJy
PgomZ3Q7IFtzb2NrZXRfaW5mby5jOjU4OV06IGdyZXBfc29ja19pbmZvIC0gY2hlY2tpbmcgaWYg
aG9zdD09dXM6IDE0PT0xMyAmYW1wOyZhbXA7IFs8YnI+CiZndDsgPGEgaHJlZj0iaHR0cDovLzEy
Ny4wLjAuMTo1MDYwIiB0YXJnZXQ9Il9ibGFuayI+MTI3LjAuMC4xOjUwNjA8L2E+XSA9PSBbMTky
LjE2OC4xMC41NV08YnI+CiZndDsgQXVnIMKgOCAxMTozMDo1MyBjYXJsb3NyZGNueC1sYXB0b3Ag
a2FtYWlsaW9bMTYyMzhdOiBERUJVRzogJmx0O2NvcmUmZ3Q7PGJyPgomZ3Q7IFtzb2NrZXRfaW5m
by5jOjU4OV06IGdyZXBfc29ja19pbmZvIC0gY2hlY2tpbmcgaWYgaG9zdD09dXM6IDE0PT05ICZh
bXA7JmFtcDsgWzxicj4KJmd0OyA8YSBocmVmPSJodHRwOi8vMTI3LjAuMC4xOjUwNjAiIHRhcmdl
dD0iX2JsYW5rIj4xMjcuMC4wLjE6NTA2MDwvYT5dID09IFsxMjcuMC4wLjFdPGJyPgomZ3Q7IEF1
ZyDCoDggMTE6MzA6NTMgY2FybG9zcmRjbngtbGFwdG9wIGthbWFpbGlvWzE2MjM4XTogREVCVUc6
ICZsdDtjb3JlJmd0Ozxicj4KJmd0OyBbc29ja2V0X2luZm8uYzo1ODldOiBncmVwX3NvY2tfaW5m
byAtIGNoZWNraW5nIGlmIGhvc3Q9PXVzOiAxND09OSAmYW1wOyZhbXA7IFs8YnI+CiZndDsgPGEg
aHJlZj0iaHR0cDovLzEyNy4wLjAuMTo1MDYwIiB0YXJnZXQ9Il9ibGFuayI+MTI3LjAuMC4xOjUw
NjA8L2E+XSA9PSBbMTI3LjAuMC4yXTxicj4KJmd0OyBBdWcgwqA4IDExOjMwOjUzIGNhcmxvc3Jk
Y254LWxhcHRvcCBrYW1haWxpb1sxNjIzOF06IERFQlVHOiAmbHQ7Y29yZSZndDs8YnI+CiZndDsg
W3NvY2tldF9pbmZvLmM6NTg5XTogZ3JlcF9zb2NrX2luZm8gLSBjaGVja2luZyBpZiBob3N0PT11
czogMTQ9PTEzICZhbXA7JmFtcDsgWzxicj4KJmd0OyA8YSBocmVmPSJodHRwOi8vMTI3LjAuMC4x
OjUwNjAiIHRhcmdldD0iX2JsYW5rIj4xMjcuMC4wLjE6NTA2MDwvYT5dID09IFsxOTIuMTY4LjEw
Ljk1XTxicj4KJmd0OyBBdWcgwqA4IDExOjMwOjUzIGNhcmxvc3JkY254LWxhcHRvcCBrYW1haWxp
b1sxNjIzOF06IERFQlVHOiAmbHQ7Y29yZSZndDs8YnI+CiZndDsgW3NvY2tldF9pbmZvLmM6NTg5
XTogZ3JlcF9zb2NrX2luZm8gLSBjaGVja2luZyBpZiBob3N0PT11czogMTQ9PTEzICZhbXA7JmFt
cDsgWzxicj4KJmd0OyA8YSBocmVmPSJodHRwOi8vMTI3LjAuMC4xOjUwNjAiIHRhcmdldD0iX2Js
YW5rIj4xMjcuMC4wLjE6NTA2MDwvYT5dID09IFsxOTIuMTY4LjEwLjU1XTxicj4KJmd0OyBBdWcg
wqA4IDExOjMwOjUzIGNhcmxvc3JkY254LWxhcHRvcCBrYW1haWxpb1sxNjIzOF06IERFQlVHOiAm
bHQ7Y29yZSZndDs8YnI+CjwvZGl2PjwvZGl2PiZndDsgW2ZvcndhcmQuYzo0NjJdOiAqY2hlY2tf
c2VsZjogaG9zdCAhPSBtZSo8YnI+CjxkaXY+Jmd0OyBBdWcgwqA4IDExOjMwOjUzIGNhcmxvc3Jk
Y254LWxhcHRvcCBrYW1haWxpb1sxNjIzOF06IFdBUk5JTkc6ICZsdDtzY3JpcHQmZ3Q7OiBCYWQ8
YnI+CiZndDsgaG9zdCA8YSBocmVmPSJodHRwOi8vMTI3LjAuMC4xOjUwNjAiIHRhcmdldD0iX2Js
YW5rIj4xMjcuMC4wLjE6NTA2MDwvYT48YnI+CiZndDs8YnI+CiZndDsgSSBjb21tZW50ZWQgdGhl
IGJsb2NrIHRvbyBhbmQgb25seSB0aGVuIHNpcG1sNSB3YXMgYWJsZSB0byByZWdpc3Rlcjxicj4K
Jmd0OyBpdHNlbGYuPGJyPgomZ3Q7PGJyPgomZ3Q7IFdoYXQgYW0gSSBkb2luZyB3cm9uZyBoZXJl
Pzxicj4KJmd0Ozxicj4KPGJyPgo8L2Rpdj5XaGVuIEkgdGVzdGVkIHRoaXMgSSB3YXMgaG9zdGlu
ZyBzaXBtbDUgb24gYSB3ZWItc2VydmVyIG9uIGEgc2VwYXJhdGU8YnI+Cm1hY2hpbmUgZnJvbSBL
YW1haWxpbywgYW5kIG15IHdlYi1icm93c2VyIHdhcyBvbiBhIHNlcGFyYXRlIG1hY2hpbmUgZnJv
bTxicj4KYm90aCBLYW1haWxpbyBhbmQgdGhlIHdlYi1zZXJ2ZXIuIMKgVGhlIGV4YW1wbGUgY29u
ZmlndXJhdGlvbiB3b3JrcyBmb3I8YnI+CnRoYXQgc2NlbmFyaW8gKHdoaWNoIGlzIGxpa2VseSB0
byBiZSB0aGUgd2F5IGl0IHdvdWxkIGJlIGRlcGxveWVkIGluIGE8YnI+CnJlYWwgc3lzdGVtKS4g
wqBJIHN1c3BlY3QgdGhhdCB0aGUgS2FtYWlsaW8gbGlzdGVuIGRpcmVjdGl2ZXMgKG9yIHNvbWV0
aGluZzxicj4KZWxzZSByZWxhdGVkKSBhcmVuJiMzOTt0IHNldC11cCBxdWl0ZSByaWdodCBmb3Ig
eW91ciBlbnZpcm9ubWVudC48YnI+Cjxicj4KSG9zdDogaXMgYSByZXF1aXJlZCBoZWFkZXIgd2hl
biBlc3RhYmxpc2hpbmcgYSBXZWJTb2NrZXQgY29ubmVjdGlvbi4gwqBUaGU8YnI+Ckhvc3Q6IGhl
YWRlciBhZGRlZCBieSB0aGUgY2xpZW50IHNob3VsZCBpbmRpY2F0ZSB0aGUgbmFtZSBvZiB0aGUg
c2VydmVyPGJyPgp0aGUgY2xpZW50IGlzIHRyeWluZyB0byBjb25uZWN0IHRvIGFzIGluZGljYXRl
ZCBpbiB0aGUgV2ViU29ja2V0IFVSSSAoc288YnI+CmlmIHlvdSBwdXQgYW4gSVAgYWRkcmVzcyBp
biB0aGUgVVJJIHRoYXQgd2lsbCBiZSBpbiB0aGUgSG9zdDogaGVhZGVyLCBpZjxicj4KeW91IHB1
dCBhIGhvc3RuYW1lIGluIHRoZSBVUkkgdGhlbiBpdCB3aWxsIGJlIGluIHRoZSBIb3N0OiBoZWFk
ZXIpLiDCoFRoZTxicj4KV2ViU29ja2V0IHNlcnZlciAoaW4gdGhpcyBjYXNlIEthbWFpbGlvKSBz
aG91bGQgY2hlY2sgdGhhdCB0aGlzIGhlYWRlcjxicj4KbWF0Y2hlcyB3aGF0IGl0IGJlbGlldmVz
IGl0JiMzOTtzIGV4dGVybmFsbHkgdmlzaWJsZSBuYW1lIGlzIGJlZm9yZSBhY2NlcHRpbmc8YnI+
CnRoZSBjb25uZWN0aW9uLjxicj4KPGJyPgpUaGlzIGNoZWNrIG5lZWRzIHRvIGJlIHBlcmZvcm1l
ZCBpbiBrYW1haWxpby5jZmcgaW5zdGVhZCBvZiB0aGUgV2ViU29ja2V0PGJyPgptb2R1bGUgaW4g
b3JkZXIgZm9yIHRoZSBjaGVjayB0byBiZSBmbGV4aWJsZS4gwqBUaGUgY2hlY2sgaW4gdGhlIGV4
YW1wbGU8YnI+CmthbWFpbGlvLmNmZyBpczo8YnI+Ci0gTWFraW5nIHN1cmUgdGhlIEhvc3Q6IGhl
YWRlciBpcyBwcmVzZW50PGJyPgotIE1ha2luZyBzdXJlIHRoZSBuYW1lIGluIHRoZSBIb3N0OiBo
ZWFkZXIgaXMgYW4gSVAgYWRkcmVzcyAoYXMgZGVmaW5lZCBpbjxicj4KdGhlIGxpc3RlbiBkaXJl
Y3RpdmVzKSBvciBhbGlhcyAoZm9yIGV4YW1wbGUgYSBkb21haW4gbmFtZSkgdGhhdCB0aGU8YnI+
CkthbWFpbGlvIGluc3RhbmNlIGJlbGlldmVzIGl0IGlzIGF1dGhvcml0YXRpdmUgZm9yLjxicj4K
PGJyPgpBcyB0aGUgV2ViU29ja2V0IHN0YWNrIGluIGEgd2ViLWJyb3dzZXIgd2lsbCBhZGQgdGhl
IEhvc3Q6IGhlYWRlcjxicj4KYXV0b21hdGljYWxseSwgYW55IHByb2JsZW0gd2l0aCB0aGlzIHN1
Z2dlc3RzIHRoYXQgdGhlIFdlYlNvY2tldCBVUkkgc2V0PGJyPgppbiBzaXBtbDUgYW5kIHRoZSBs
aXN0ZW4vYWxpYXMgZGlyZWN0aXZlcyBpbiBrYW1haWxpby5jZmcgZG9uJiMzOTt0IG1hdGNoIC08
YnI+CndoaWNoIHdvdWxkIGJlIGNvbnNpc3RlbnQgd2l0aCB0aGUgZmlyc3QgcGFydCB5b3VyIGNv
bm5lY3Rpb248YnI+CmVzdGFibGlzaG1lbnQgcHJvYmxlbSB0b28uPGJyPgo8YnI+Ckkgd291bGQg
c3VnZ2VzdCB0aGF0IHlvdSBzaG91bGQgcmUtaW5zdGF0ZSB0aGVzZSBsaW5lcyBhcywgYnkgY29t
bWVudGluZzxicj4KdGhlbSBvdXQgKHJhdGhlciB0aGFuIGZpeGluZyB0aGUgdW5kZXJseWluZyBw
cm9ibGVtcyBpbiB0aGUgdGVzdCBzZXQtdXApLDxicj4KeW91IG1heSBiZSBtb3ZpbmcgdGhlIGlz
c3VlcyBkb3duLXN0cmVhbS48YnI+CjxkaXY+PGJyPgomZ3Q7IDIuIEkgcmVnaXN0ZXJlZCBhIGxl
Z2FjeSBzb2Z0cGhvbmUgKHR3aW5rbGUpIHRvIGF0dGVtcHQgdG8gaW5pdGlhdGUgYSBjYWxsPGJy
PgomZ3Q7IGluIGJvdGggd2F5cywgYnV0IHRoZSB3YXMgc29tZXRoaW5nIHdyb25nIHdpdGggdGhl
IHNpZ25hbGluZywgcHJvYmFibHk8YnI+CiZndDsgc29tZTxicj4KJmd0OyBmcmFtZSBkZWNvZGlu
ZyBnYXJiYWdlIGluIHRoZSBidWZmZXIgb2YgdGhlIFNJUCBtZXNzYWdlLiBQZXJoYXBzIHRoZXNl
PGJyPgomZ3Q7IGJ5dGVzIGFyZSBwYXJ0IG9mIHRoZSBmcmFtZSBjb250cm9sIGhlYWRlciBidXQg
c2luY2UgSSBoYXZlbiYjMzk7dCByZWFkIHRoZTxicj4KJmd0OyBSRkM8YnI+CiZndDsgKHlldCkg
SSBhbSBtZW50aW9uaW5nIGl0IGFueXdheS48YnI+CiZndDs8YnI+CjwvZGl2PiZndDsgdGNwX3Nl
bmQ6IGJ1Zj0qIzAxMu+/vX4jMDAz77+9KklOVklURTxicj4KPGRpdj4mZ3Q7IHNpcDoyMDAwQGRm
N2phbDIzbHMwZC5pbnZhbGlkO3RyYW5zcG9ydD13czxicj4KJmd0OyBTSVAvMi4wIzAxNSMwMTJS
ZWNvcmQtUm91dGU6PGJyPgomZ3Q7ICZsdDtzaXA6MTI3LjAuMC4xO3RyYW5zcG9ydD13cztyMj1v
bjtscj1vbiZndDsjMDE1IzAxMlJlY29yZC1Sb3V0ZTo8YnI+CiZndDsgJmx0O3NpcDoxMjcuMC4w
LjE7cjI9b247bHI9b24mZ3Q7IzAxNSMwMTJWaWE6IFNJUC8yLjAvV1M8YnI+CiZndDsgwqAxMjcu
MC4wLjE7YnJhbmNoPXo5aEc0Yks5MGE4LmIxYTcwMzVlMTNlZDE5ODgwZGQxMmExZjRjODZhZGJi
LjAjMDE1IzAxMlZpYTo8YnI+CiZndDsgU0lQLzIuMC9VRFA8YnI+CiZndDsgMTI3LjAuMC4xOjUw
NjI7cnBvcnQ9NTA2MjticmFuY2g9ejloRzRiS2ltaXhsYnlwIzAxNSMwMTJNYXgtRm9yd2FyZHM6
PGJyPgomZ3Q7IDY5IzAxNSMwMTJUbzogJmx0OzxhIGhyZWY9Im1haWx0bzpzaXAlM0EyMDAwQDEy
Ny4wLjAuMSIgdGFyZ2V0PSJfYmxhbmsiPnNpcDoyMDAwQDEyNy4wLjAuMTwvYT4mZ3Q7IzAxNSMw
MTJGcm9tOiAmcXVvdDsxMDAwJnF1b3Q7PGJyPgomZ3Q7ICZsdDs8YSBocmVmPSJtYWlsdG86c2lw
JTNBMTAwMEAxMjcuMC4wLjEiIHRhcmdldD0iX2JsYW5rIj5zaXA6MTAwMEAxMjcuMC4wLjE8L2E+
Jmd0Ozt0YWc9bHJ0ZnojMDE1IzAxMkNhbGwtSUQ6PGJyPgomZ3Q7IGd4c3FvYm9scGhmY2hmcUBj
YXJsb3NyZGNueC1sYXB0b3Auc2l0ZSMwMTUjMDEyQ1NlcTogNjU0PGJyPgomZ3Q7IElOVklURSMw
MTUjMDEyQ29udGFjdDogJmx0OzxhIGhyZWY9Imh0dHA6Ly9zaXA6MTAwMEAxMjcuMC4wLjE6NTA2
MiIgdGFyZ2V0PSJfYmxhbmsiPnNpcDoxMDAwQDEyNy4wLjAuMTo1MDYyPC9hPiZndDsjMDE1IzAx
MkNvbnRlbnQtVHlwZTo8YnI+CiZndDsgYXBwbGljYXRpb24vc2RwIzAxNSMwMTJBbGxvdzo8YnI+
CiZndDsgSU5WSVRFLEFDSyxCWUUsQ0FOQ0VMLE9QVElPTlMsUFJBQ0ssUkVGRVIsTk9USUZZLFNV
QlNDUklCRSxJTkZPLE1FU1NBR0UjMDE1IzAxMlN1cHBvcnRlZDo8YnI+CiZndDsgcmVwbGFjZXMs
bm9yZWZlcnN1YiwxMDByZWwjMDE1IzAxMlVzZXItQWdlbnQ6PGJyPgomZ3Q7IFR3aW5rbGUvMS40
LjIjMDE1IzAxMkNvbnRlbnQtTGVuZ3RoOjxicj4KJmd0OyAzMDIjMDE1IzAxMiMwMTUjMDEydj0w
IzAxNSMwMTJvPXR3aW5rbGUgMzkxNDcwMjIyIDEzODMyMzIxNjUgSU4gSVA0PGJyPgomZ3Q7IDEy
Ny4wLjAuMSMwMTUjMDEycz0tIzAxNSMwMTJjPUlOIElQNCAxMjcuMC4wLjEjMDE1IzAxMnQ9MCAw
IzAxNSMwMTJtPWF1ZGlvPGJyPgomZ3Q7IDgwMDggUlRQL0FWUCA8YSBocmVmPSJ0ZWw6OTglMjA5
NyUyMDglMjAwJTIwMyUyMDEwMSUyMzAxNSUyMyIgdmFsdWU9IisxOTg5NzgwMzEwMSIgdGFyZ2V0
PSJfYmxhbmsiPjk4IDk3IDggMCAzIDEwMSMwMTUjPC9hPjAxMmE9cnRwbWFwOjk4PGJyPgomZ3Q7
IHNwZWV4LzE2MDAwIzAxNSMwMTJhPXJ0cG1hcDo5NyBzcGVleC84MDAwIzAxNSMwMTJhPXJ0cG1h
cDo4PGJyPgomZ3Q7IFBDTUEvODAwMCMwMTUjMDEyYT1ydHBtYXA6MCBQQ01VLzgwMDAjMDE1IzAx
MmE9cnRwbWFwOjM8YnI+CiZndDsgR1NNLzgwMDAjMDE1IzAxMmE9cnRwbWFwOjEwMSB0ZWxlcGhv
bmUtZXZlbnQvODAwMCMwMTUjMDEyYT1mbXRwOjEwMTxicj4KJmd0OyAwLTE1IzAxNSMwMTJhPXB0
aW1lOjIwIzAxNSMwMTI8YnI+CiZndDs8YnI+Cjxicj4KPC9kaXY+VGhhdCBJTlZJVEUgaXMgZm9y
IGEgY2FsbCB0b3dhcmRzIHNpcG1sNSBvbiBhIFdlYlNvY2tldCBjb25uZWN0aW9uLiDCoFNvPGJy
Pgp0aGlzIGlzbiYjMzk7dCBhIFNJUCBtZXNzYWdlIG92ZXIgVENQLCBpdCBpcyBhIFNJUCBtZXNz
YWdlIG92ZXIgV2ViU29ja2V0czxicj4Kb3ZlciBUQ1AgLSBhbmQgdGhvc2UgYXJlIG5vdCB0aGUg
c2FtZSB0aGluZy4gwqBUaGUgc3R1ZmYgYXQgdGhlIHN0YXJ0IG9mPGJyPgp0aGUgVENQIGJ1ZmZl
ciBpcyB0aGUgV2ViU29ja2V0IGZyYW1pbmcgYW5kIGl0IGlzIG1lYW50IHRvIGJlIHRoZXJlLjxi
cj4KPGJyPgpUaGUgV2ViU29ja2V0IGZyYW1pbmcgd2lsbCBub3QgYmUgcHJlc2VudCBvbiB0aGUg
Y29ubmVjdGlvbiB0byBUd2lua2xlLjxicj4KPGRpdj48YnI+CiZndDsgMy4gRG9lcyBUd2lua2xl
IHN1cHBvcnQgdGhlIG1pbmltdW0gbWVkaWEgcmVxdWlyZW1lbnRzIGZvciB0ZXN0aW5nPyBJZjxi
cj4KJmd0OyBub3QsPGJyPgomZ3Q7IHdoYXQgKExpbnV4KSBzb2Z0cGhvbmUgaXMgc3VpdGFibGUg
Zm9yIHRoaXMgcHVycG9zZT88YnI+CiZndDs8YnI+Cjxicj4KPC9kaXY+V2hlbiB1c2luZyBhbiB1
cC10by1kYXRlIEdvb2dsZSBDaHJvbWUgeW91IG5lZWQgdG8gdXNlIGEgY2xpZW50IHRoYXQ8YnI+
CnN1cHBvcnRzIFJUUC9TQVZQRi4gwqBCb2doZSAoZnJvbSBEb3ViYW5nbykgaXMgYSBXaW5kb3dz
IGNsaWVudCB0aGF0PGJyPgpzdXBwb3J0cyB0aGlzLiDCoEkgZG9uJiMzOTt0IGtub3cgd2hpY2gg
KGlmIGFueSkgTGludXggY2xpZW50cyBzdXBwb3J0IHRoaXM8YnI+CmZlYXR1cmUuPGJyPgo8c3Bh
bj48Zm9udCBjb2xvcj0iIzg4ODg4OCI+PGJyPgotLTxicj4KUGV0ZXIgRHVua2xleTxicj4KVGVj
aG5pY2FsIERpcmVjdG9yPGJyPgpDcm9jb2RpbGUgUkNTIEx0ZDxicj4KPGJyPgo8YnI+Cl9fX19f
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPgpzci1kZXYgbWFp
bGluZyBsaXN0PGJyPgo8YSBocmVmPSJtYWlsdG86c3ItZGV2QGxpc3RzLnNpcC1yb3V0ZXIub3Jn
IiB0YXJnZXQ9Il9ibGFuayI+c3ItZGV2QGxpc3RzLnNpcC1yb3V0ZXIub3JnPC9hPjxicj4KPGEg
aHJlZj0iaHR0cDovL2xpc3RzLnNpcC1yb3V0ZXIub3JnL2NnaS1iaW4vbWFpbG1hbi9saXN0aW5m
by9zci1kZXYiIHRhcmdldD0iX2JsYW5rIj5odHRwOi8vbGlzdHMuc2lwLXJvdXRlci5vcmcvY2dp
LWJpbi9tYWlsbWFuL2xpc3RpbmZvL3NyLWRldjwvYT48YnI+CjwvZm9udD48L3NwYW4+PC9ibG9j
a3F1b3RlPjwvZGl2Pjxicj48L2Rpdj48L2Rpdj48L2Rpdj4KPGJyPl9fX19fX19fX19fX19fX19f
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPgpzci1kZXYgbWFpbGluZyBsaXN0PGJy
Pgo8YSBocmVmPSJtYWlsdG86c3ItZGV2QGxpc3RzLnNpcC1yb3V0ZXIub3JnIiB0YXJnZXQ9Il9i
bGFuayI+c3ItZGV2QGxpc3RzLnNpcC1yb3V0ZXIub3JnPC9hPjxicj4KPGEgaHJlZj0iaHR0cDov
L2xpc3RzLnNpcC1yb3V0ZXIub3JnL2NnaS1iaW4vbWFpbG1hbi9saXN0aW5mby9zci1kZXYiIHRh
cmdldD0iX2JsYW5rIj5odHRwOi8vbGlzdHMuc2lwLXJvdXRlci5vcmcvY2dpLWJpbi9tYWlsbWFu
L2xpc3RpbmZvL3NyLWRldjwvYT48YnI+Cjxicj48L2Jsb2NrcXVvdGU+PC9kaXY+PGJyPjxiciBj
bGVhcj0iYWxsIj48YnI+PC9kaXY+PC9kaXY+PHNwYW4gY2xhc3M9IkhPRW5aYiI+PGZvbnQgY29s
b3I9IiM4ODg4ODgiPi0tIDxicj48c3BhbiBzdHlsZT0iY29sb3I6cmdiKDM0LDM0LDM0KTtmb250
LXNpemU6MTNweDtmb250LWZhbWlseTphcmlhbCxzYW5zLXNlcmlmIj5KZXPDunMgUMOpcmV6PC9z
cGFuPjxiciBzdHlsZT0iY29sb3I6cmdiKDM0LDM0LDM0KTtmb250LXNpemU6MTNweDtmb250LWZh
bWlseTphcmlhbCxzYW5zLXNlcmlmIj4KCjxzcGFuIHN0eWxlPSJjb2xvcjpyZ2IoMzQsMzQsMzQp
O2ZvbnQtc2l6ZToxM3B4O2ZvbnQtZmFtaWx5OmFyaWFsLHNhbnMtc2VyaWYiPlZvSVAgRW5naW5l
ZXIgYXQgUXVvYmlzPC9zcGFuPjxiciBzdHlsZT0iY29sb3I6cmdiKDM0LDM0LDM0KTtmb250LXNp
emU6MTNweDtmb250LWZhbWlseTphcmlhbCxzYW5zLXNlcmlmIj4KPGJyIHN0eWxlPSJjb2xvcjpy
Z2IoMzQsMzQsMzQpO2ZvbnQtc2l6ZToxM3B4O2ZvbnQtZmFtaWx5OmFyaWFsLHNhbnMtc2VyaWYi
PjxzcGFuIHN0eWxlPSJjb2xvcjpyZ2IoMzQsMzQsMzQpO2ZvbnQtc2l6ZToxM3B4O2ZvbnQtZmFt
aWx5OmFyaWFsLHNhbnMtc2VyaWYiPkZpeGVkOsKgPC9zcGFuPjxhIHRpdGxlPSJMbGFtYSBhaG9y
YSIgc3R5bGU9ImNvbG9yOnJnYigwLDEwMSwyMDQpO2ZvbnQtc2l6ZToxM3B4O2ZvbnQtZmFtaWx5
OmFyaWFsLHNhbnMtc2VyaWYiPiszNCA5MDIgOTk5IDQ2NTwvYT48YnIgc3R5bGU9ImNvbG9yOnJn
YigzNCwzNCwzNCk7Zm9udC1zaXplOjEzcHg7Zm9udC1mYW1pbHk6YXJpYWwsc2Fucy1zZXJpZiI+
Cgo8c3BhbiBzdHlsZT0iY29sb3I6cmdiKDM0LDM0LDM0KTtmb250LXNpemU6MTNweDtmb250LWZh
bWlseTphcmlhbCxzYW5zLXNlcmlmIj5TaXRlOsKgPC9zcGFuPjxhIGhyZWY9Imh0dHA6Ly93d3cu
cXVvYmlzLmNvbS8iIHN0eWxlPSJjb2xvcjpyZ2IoMCwxMDEsMjA0KTtmb250LXNpemU6MTNweDtm
b250LWZhbWlseTphcmlhbCxzYW5zLXNlcmlmIiB0YXJnZXQ9Il9ibGFuayI+aHR0cDovL3d3dy5x
dW9iaXMuY29tPC9hPjxicj4KCjxicj4KPC9mb250Pjwvc3Bhbj48L2Jsb2NrcXVvdGU+PC9kaXY+
PGJyPjxiciBjbGVhcj0iYWxsIj48YnI+LS0gPGJyPjxzcGFuIHN0eWxlPSJjb2xvcjpyZ2IoMzQs
MzQsMzQpO2ZvbnQtZmFtaWx5OmFyaWFsLHNhbnMtc2VyaWY7Zm9udC1zaXplOjEzcHg7YmFja2dy
b3VuZC1jb2xvcjpyZ2IoMjU1LDI1NSwyNTUpIj5KZXPDunMgUMOpcmV6PC9zcGFuPjxiciBzdHls
ZT0iY29sb3I6cmdiKDM0LDM0LDM0KTtmb250LWZhbWlseTphcmlhbCxzYW5zLXNlcmlmO2ZvbnQt
c2l6ZToxM3B4O2JhY2tncm91bmQtY29sb3I6cmdiKDI1NSwyNTUsMjU1KSI+CjxzcGFuIHN0eWxl
PSJjb2xvcjpyZ2IoMzQsMzQsMzQpO2ZvbnQtZmFtaWx5OmFyaWFsLHNhbnMtc2VyaWY7Zm9udC1z
aXplOjEzcHg7YmFja2dyb3VuZC1jb2xvcjpyZ2IoMjU1LDI1NSwyNTUpIj5Wb0lQIEVuZ2luZWVy
IGF0IFF1b2Jpczwvc3Bhbj48YnIgc3R5bGU9ImNvbG9yOnJnYigzNCwzNCwzNCk7Zm9udC1mYW1p
bHk6YXJpYWwsc2Fucy1zZXJpZjtmb250LXNpemU6MTNweDtiYWNrZ3JvdW5kLWNvbG9yOnJnYigy
NTUsMjU1LDI1NSkiPgo8YnIgc3R5bGU9ImNvbG9yOnJnYigzNCwzNCwzNCk7Zm9udC1mYW1pbHk6
YXJpYWwsc2Fucy1zZXJpZjtmb250LXNpemU6MTNweDtiYWNrZ3JvdW5kLWNvbG9yOnJnYigyNTUs
MjU1LDI1NSkiPjxzcGFuIHN0eWxlPSJjb2xvcjpyZ2IoMzQsMzQsMzQpO2ZvbnQtZmFtaWx5OmFy
aWFsLHNhbnMtc2VyaWY7Zm9udC1zaXplOjEzcHg7YmFja2dyb3VuZC1jb2xvcjpyZ2IoMjU1LDI1
NSwyNTUpIj5GaXhlZDrCoDwvc3Bhbj48YSB0aXRsZT0iTGxhbWEgYWhvcmEiIHN0eWxlPSJjb2xv
cjpyZ2IoMCwxMDEsMjA0KTtmb250LWZhbWlseTphcmlhbCxzYW5zLXNlcmlmO2ZvbnQtc2l6ZTox
M3B4O2JhY2tncm91bmQtY29sb3I6cmdiKDI1NSwyNTUsMjU1KSI+KzM0IDkwMiA5OTkgNDY1PC9h
PjxiciBzdHlsZT0iY29sb3I6cmdiKDM0LDM0LDM0KTtmb250LWZhbWlseTphcmlhbCxzYW5zLXNl
cmlmO2ZvbnQtc2l6ZToxM3B4O2JhY2tncm91bmQtY29sb3I6cmdiKDI1NSwyNTUsMjU1KSI+Cjxz
cGFuIHN0eWxlPSJjb2xvcjpyZ2IoMzQsMzQsMzQpO2ZvbnQtZmFtaWx5OmFyaWFsLHNhbnMtc2Vy
aWY7Zm9udC1zaXplOjEzcHg7YmFja2dyb3VuZC1jb2xvcjpyZ2IoMjU1LDI1NSwyNTUpIj5TaXRl
OsKgPC9zcGFuPjxhIGhyZWY9Imh0dHA6Ly93d3cucXVvYmlzLmNvbS8iIHN0eWxlPSJjb2xvcjpy
Z2IoMCwxMDEsMjA0KTtmb250LWZhbWlseTphcmlhbCxzYW5zLXNlcmlmO2ZvbnQtc2l6ZToxM3B4
O2JhY2tncm91bmQtY29sb3I6cmdiKDI1NSwyNTUsMjU1KSIgdGFyZ2V0PSJfYmxhbmsiPmh0dHA6
Ly93d3cucXVvYmlzLmNvbTwvYT48YnI+Cjxicj4K

--===============0649422399==--