From d96f5ff660969e9c0e68eeb06f9f6a71ae6c57ba Mon Sep 17 00:00:00 2001
From: Hans-Christoph Steiner <hans@eds.org>
Date: Wed, 30 Jan 2019 16:48:35 +0100
Subject: [PATCH] support APK Signature V2 when apksigner is installed

This was done with much help from @uniqx.  This is the first level of
supporting APK Signatures v1, v2, and v3.  This is enough to include
APKs with any combo of v1/v2/v3 signatures.  For this to work at all,
apksigner and androguard 3.3.3+ must be installed.

closes #399
---
 fdroidserver/common.py        |  43 ++++++++++++++++++--------
 fdroidserver/update.py        |  31 +++++++++----------
 tests/common.TestCase         |   1 +
 tests/repo/v1.v2.sig_1020.apk | Bin 0 -> 13493 bytes
 tests/update.TestCase         |  56 ++++++++++++++++++++++++++++++++--
 tests/v2.only.sig_2.apk       | Bin 0 -> 12086 bytes
 6 files changed, 98 insertions(+), 33 deletions(-)
 create mode 100644 tests/repo/v1.v2.sig_1020.apk
 create mode 100644 tests/v2.only.sig_2.apk

diff --git a/fdroidserver/common.py b/fdroidserver/common.py
index 701a9e03..c362049e 100644
--- a/fdroidserver/common.py
+++ b/fdroidserver/common.py
@@ -2516,28 +2516,45 @@ def signer_fingerprint(cert_encoded):
     return hashlib.sha256(cert_encoded).hexdigest()
 
 
+def get_first_signer_certificate(apkpath):
+    """Get the first signing certificate from the APK,  DER-encoded"""
+    certs = None
+    cert_encoded = None
+    with zipfile.ZipFile(apkpath, 'r') as apk:
+        cert_files = [n for n in apk.namelist() if SIGNATURE_BLOCK_FILE_REGEX.match(n)]
+        if len(cert_files) > 1:
+            logging.error(_("Found multiple JAR Signature Block Files in {path}").format(path=apkpath))
+            return None
+        elif len(cert_files) == 1:
+            cert_encoded = get_certificate(apk.read(cert_files[0]))
+
+    if cert_encoded is None:
+        apkobject = _get_androguard_APK(apkpath)
+        certs = apkobject.get_certificates_der_v2()
+        if len(certs) > 0:
+            logging.info(_('Using APK v2 Signature'))
+            cert_encoded = certs[0]
+
+    if not cert_encoded:
+        logging.error(_("No signing certificates found in {path}").format(path=apkpath))
+        return None
+    return cert_encoded
+
+
 def apk_signer_fingerprint(apk_path):
     """Obtain sha256 signing-key fingerprint for APK.
 
     Extracts hexadecimal sha256 signing-key fingerprint string
     for a given APK.
 
-    :param apkpath: path to APK
+    :param apk_path: path to APK
     :returns: signature fingerprint
     """
 
-    with zipfile.ZipFile(apk_path, 'r') as apk:
-        certs = [n for n in apk.namelist() if SIGNATURE_BLOCK_FILE_REGEX.match(n)]
-
-        if len(certs) < 1:
-            logging.error("Found no signing certificates on %s" % apk_path)
-            return None
-        if len(certs) > 1:
-            logging.error("Found multiple signing certificates on %s" % apk_path)
-            return None
-
-        cert_encoded = get_certificate(apk.read(certs[0]))
-        return signer_fingerprint(cert_encoded)
+    cert_encoded = get_first_signer_certificate(apk_path)
+    if not cert_encoded:
+        return None
+    return signer_fingerprint(cert_encoded)
 
 
 def apk_signer_fingerprint_short(apk_path):
diff --git a/fdroidserver/update.py b/fdroidserver/update.py
index 42be7e5c..a0f9a5f2 100644
--- a/fdroidserver/update.py
+++ b/fdroidserver/update.py
@@ -414,29 +414,26 @@ def resize_all_icons(repodirs):
 
 
 def getsig(apkpath):
-    """ Get the signing certificate of an apk. To get the same md5 has that
-    Android gets, we encode the .RSA certificate in a specific format and pass
-    it hex-encoded to the md5 digest algorithm.
+    """Get the unique ID for the signing certificate of an APK.
+
+    This uses a strange algorithm that was devised at the very
+    beginning of F-Droid.  Since it is only used for checking
+    signature compatibility, it does not matter much that it uses MD5.
+
+    To get the same MD5 has that fdroidclient gets, we encode the .RSA
+    certificate in a specific format and pass it hex-encoded to the
+    md5 digest algorithm.  This is not the same as the standard X.509
+    certificate fingerprint.
 
     :param apkpath: path to the apk
     :returns: A string containing the md5 of the signature of the apk or None
               if an error occurred.
+
     """
 
-    with zipfile.ZipFile(apkpath, 'r') as apk:
-        certs = [n for n in apk.namelist() if common.SIGNATURE_BLOCK_FILE_REGEX.match(n)]
-
-        if len(certs) < 1:
-            logging.error(_("No signing certificates found in {path}").format(path=apkpath))
-            return None
-        if len(certs) > 1:
-            logging.error(_("Found multiple signing certificates in {path}").format(path=apkpath))
-            return None
-
-        cert = apk.read(certs[0])
-
-    cert_encoded = common.get_certificate(cert)
-
+    cert_encoded = common.get_first_signer_certificate(apkpath)
+    if not cert_encoded:
+        return None
     return hashlib.md5(hexlify(cert_encoded)).hexdigest()  # nosec just used as ID for signing key
 
 
diff --git a/tests/common.TestCase b/tests/common.TestCase
index 6c5ba647..b976376f 100755
--- a/tests/common.TestCase
+++ b/tests/common.TestCase
@@ -161,6 +161,7 @@ class CommonTest(unittest.TestCase):
         testfiles = []
         testfiles.append(os.path.join(self.basedir, 'urzip-release.apk'))
         testfiles.append(os.path.join(self.basedir, 'urzip-release-unsigned.apk'))
+        testfiles.append(os.path.join(self.basedir, 'v2.only.sig_2.apk'))
         for apkfile in testfiles:
             debuggable = fdroidserver.common.is_apk_and_debuggable(apkfile)
             self.assertFalse(debuggable,
diff --git a/tests/repo/v1.v2.sig_1020.apk b/tests/repo/v1.v2.sig_1020.apk
new file mode 100644
index 0000000000000000000000000000000000000000..006ff76473c2fddef98660cbef680a05e4db62da
GIT binary patch
literal 13493
zcmeIZWprG<vMAVQhM1Y{m>FV*#4$5tyUonZ>^P2@9Wy6(%*@P=nVC6ejA7azymQVs
z_ul#OX07=#PivJ*CACW0Rn;Y_w6~%R6f^*w;9oPqoPNn#6_~EU001z-w5YAIqn(AZ
z9LUzf)Wpe|+1<waN3x(jp*U9m+JW`3r~{*)RMd|ibz{cCI{Bm&5OO!Gkz@)LCGr+t
z5ePQeq+kA#tI9Z(v!PH@O0-w8AYZaqQAw#FH#<8!KU;PX`SEsz-^%4CO1+Qo#qM_X
z*YA_1=q17CX$6+ha3bjmZQ%*R>4&F+opMpkamFidXHxAj)Eu*Mr+wUgG}=vcCec$d
zw;a-JjYD2BXUHe$ClqSk=^*tSf-5{vM8Tl8FyF9E!4KH`I{Va|ixI9lr`fpU<>Pka
zS>wv26FguxX8Y7w;TWw5D`B%a`ilkhKB8YG!#&NzxcB{Uc-y1n1QXEvjM1p++dl$x
zqK9TBB#N6OTYyDy_fYc$1O19cpO?9PMl7JX4rPfACWQpE2?RSo(fxkI==+t8&$hZH
z+AH#4BQ9}j-f-Y#lP{a)KyaI<!{$N&*#USHvnG09m@|5WQychBn{soU=oj-Z@t>pd
zVOJ{4EDS!M>(p4PlI2Hq2`mo%FlkthQ;!#odYX0(`U%*Kq^`d7=G5Q$C|OlIH2r!|
z$coN^U1iwO5!XUtI0e)ZoU)zZM6YGSmiNMDIu}ZiPO`6bH&6UngKB~*UpkY~8?cKM
z+H`Swvo?l){Z<uXi^Meov2^8QJL(w!6}s;MsxM&+q0J;^!W`QsiR%}&o@ew4M#|HA
zp&70n?nfa&=PBHT^IR~ZSGhq^Bhu{mW2>+RR}Y1<x*zEk?TbEE)+LU<GB@m9(#yL~
zx9CNxZ#1mN$|z1V!l%}dB9?D3^IfI|H}`H_Qg=vfHWuDv$tBEz);2uDbWhm?cpB>E
z1b&|eYUilk=n7Tez%BL_llhz}puRvW9}~~>>?DL=(B<9yrZ-e<CEhz%-m2)OtPbO~
zVJ|YBpJ+bUn)umGQ%WBNng0`s>#$$7i&ydEGvc1$@^Aygi$q1{yQeGEQ@AM109|vO
zAu(Qah$aGubSYYx43TU7e%`==a7yL$wej}5f|%X=B?@_AOV?{15nn6~)i$*YqDo*C
z=X3PYQke*K`v{X%Yl=FH`4)XvoNw!qvc8Bmj*gbKelbcSOX#BFIrI5)?WSIWJ2BI0
zaUX%o+aFiL$3^a0GC;`RM_o=_B(?5%vbRS9WABGUh3i^pt58Z*&ly_ybRMNPB>2uK
zAD{1ivf?$(V*0pdTPgy9tU~X#Gs2zvBr5ITe}{4lf!h6fau>`{TJSeU&08vf257hB
z`%5X}YZy2_&2*K^(~Gir4@ouaatL<PThu5m4oIstXN6p=4FNnLwj2Bn6Hfhk7R?B{
z(M&-zrlyOR@J&5T!e_PY^m#{ZLXf%vDaXiZP48nNQy&XcWqvL9ROtDzuKgqX-j}tw
z(o6Xkov!ABb5rD&1*hHjd)GtHIqpydEXTNKRmARvjUxo^ji@bWo(S%|P%LW!b8k-r
zHzTcDS^{{?I%N=9zMbzPw|F4wi@762^4P62X`b~37iFm-!RmJg^3b;^MQX5~2_UV0
zI{V0(X||5d<lfyyIO{GBWj7JXL)AhaS#Q3c$ms5{(aWVj*ukK41{=atd_EM~%F!YL
zdvnI~!2r##xgp1{b^Ys4HgBkBI7P6F!vZ_AKV6&&r@e{=3Ya7W0Fc1Q$QtD2Wa7kZ
zY~mi7YGJKAgWW&oQ|(R|ZPr(5Rv9m#klw2$@Dmc+TFlxEGE~YMV@U)u1$V6aY2a>j
zdz7$0AT*e>CP5LAG@GnA7`jF>1hG~bB480M7^hY_M720qy4c%Xtw&iIyH-uq=EV*F
zcP|yZj&PRK*vgoo+qvv&dim*sC%(9u@Z(q=M`B({P1m{0o^bo=VA=FrVUqC7eC}L~
zH>1&Z5wQ;kQg3{s^L;SgMJcsmJi?-BArH{dPXYx{wBYWoQItq6vwl$X%|P?J0|cN+
zAQb#b{c$@>*6Y`O&gkymYKDHCG7y}H<_;R}P&0Uo2R#=+ga^T~j^&Qk0>29F2ki${
zNjrhV3afj@>W=b=U(>Vw4lS^`6aS3z4C##d4%&S5gH#2=GJvK-Z~e^~vO94Llo0f@
z$%o-ivJ?oj4uuZ84&JjjcW`$+ccjI3qD$GtrEp84q<Db2KtTiOFOW#fP$YmgxUrz*
zPOUTkGq^L7JAgN|5L|$It~NRhT?{N?2NxNfEd-8zr^6YUJJuumBl06r3&bkyX+XQb
z9|TiWWe~h3YE!3c1t}3E$2$Bw)L&51fkmB{>qYBoXEb+$cbIn!cj)PGSx`)((*Sft
zXi+JD^z9s};ZDQ~jQwn=e5pR8x0)!k{<Q|g`;bSSuoX(Zc02=T4X|H3aVoH_p^^g_
zI$Z6k8xXGoh3vWJA<7{5J6#O$zW5V%3dQ{ncxfU2cue<1bY)u5jwbm1DmsS}SyIKK
z?03TI&@J|zY+|^_v8MI|q-%rpx?P-WSy-C!eSVSm<dpo^s(M<V)bGRBt_Af@K+h}J
znO#J+TfQBgXQ!Y^9&V<?rR-BB&#eBo;k-S8hhmBLnLIb}uN1y6XQ>IE(p};ldnM}o
z3l?47(=^KKS&op8BxPxUKFrf?I?zn%CM7zH%hoC>4ib<z7mF5j)9;3=K6qmLiDL(C
z(WCY!v}g@#b)cj8k|$5FRX#(cVOgz7hV?cLKaxo=)8~K0q_<(XCuT#_Vh)~=LpUhH
zCpT#(AKA{2Ik{pY*BE~?TxH7D$75hLNk>K0Qm9A3S7w(CjiGDO8Q`XNX;QeeXe?d}
zzPUkajI+h4ioK9d6XTw0iMyrs&^}HKE+!Ry@Q)FCfIWYT#kwi3lBgUe#qi43n>YHt
zhUfZBPEI(8Q5E`2^#<`=5Epl6vmvpK;U?fpL%O!x==oC&s7a%zX~eEy()JDecVkK)
zl^(w|L^1AhB?s8S3*zrDsN2as9#p^OjHuk;wPdC!<c;s;sWliHKMvL+9Ss`2?=tcf
z={<2E3Kg6miKIeHJ0xkxX;GH@bR8?~tMIHd;736|CHMU#G4t^@_Qh)3PHw0n%JXN8
zHnp(G^Ntk$-s+>MJxTZrg&!;3mY;=?aK{k{PkP9wf>Su~Q5`Qd{^D3at(?+Nu8NOE
zE<L`nB3*_<-dSf2Sx4}v1*y0Xo9V4}fZ%q-!<}ww%4uE2l@uLC>-Ky8$75pTVXuN>
zj?x@r3z35uQweul$)&QH?p;hzDYU$vrp1KWXoMAUi7SHn#&#%6*`?S9-5)+uzz8pj
z(Zz`^^)@%kYuccsYa4Uwf_v7(;SbSAz2BESDaUZtLvOeW7Gj6*KaDG6CZYqLD(W|O
zt0?)7y-9@FqJ2P(>U5zK7Pk=-E@bUEjlKyjX!lx`!miZ>pL<>Brp+y~h|D;&C9V#A
za#u<`{CwX!!W_=P)xn8vf2ezp2BQwkS6ss(`XkZBPZ;B1SN~i1Eaz;#X3}I@`nQjC
z?diRM^G4e@9P7{glbHEY1p3h*1Tpq30?W~4oGmN`ZTsHcdo;({e0VYq_WUG{AFf+?
zao^}2!*;c&VMXU-uj3MV4SyKY+hqUSSaWsBH9uku;kH>J-AZfhA^%RArSuc9G(i^O
zrJB-{X|aZqP>?BqBD6lF$r35W&9AnwJ^z*rV|H?rhy-Q0G1?GS0{v0e+|@WlQ%Oty
za>Ru?B5zckt%%@i?6!mPLYJ*be<VJ-IDGOMZ&HJt7%{<fR!K;4(r8{3^d^=*>^z-6
zg?OVpS25-{mE?6NLl9nT)wy<j0;2wY*2l49+m;TN9|@>kJP)V@*q0~SD|j*qlL4ls
zy);+all-xBL}WfQ^PUO1A^cS&b_}a~mLvU9`D~wAL8rfTq3lY3*RZXRY7sVQt@v<k
zmTh}AWw(Uan`pLWe5_Q->++j??h0ICITlii-<PV@kd9>#r@BAL?whOjR2RtG9Ed8#
zI>+`;tiM#&Y(q-^__IFI>?7Qxw2XyyXI;Zo2?>$`^^{><K_=~qab=X+L}ae(NWFxS
zkpA1*5iT9OHzjTEQLQcZQ6@d}-*4uaL2IrEzgbv7en#OLFPrAbqy{CFa1X`!hf##T
z1Z4ESaA)THfS)?Dz(iY;BVh5xJKSQN;8gHx=<k|sjuyOqr!#vsU*2@mR;ly*!5k@X
z$7cl&O~7o$9TERs)cCvF^F^Pp#UVVkX<eJghq;lmb{GK@fZWYkjHKJ-vR`b<cKh6q
z4+*+u7qbkFqJyZ^%?Zo<9)29xGzN#iK%2VBRZ@vtb_9j1Te7Wrsh(yW*RXRvD`{9p
zQhEK{*JVIpYqCpyar|t?+oT+WEEAnysFSW&$_;+TR6LyX!hD=9ZieQ#GiYB>c3kDY
ztg^=y42bm7Z^K30Byg?x6tS5pUS@-iTqkDU5>MI73EJ`UaiLxWn<xw$8)&#19BW&S
z@ySn2ME}%;QQ_Is>rcTlDRfU0TYwo><AZVAd*~0leM3lL^C_NkO_5o`_i^yed;0#-
z@!Dkw%TavSRXXkaFG}<#4-*6FJ0wR1J%K(|=FNpCrlG<61^Z%AHchE){fF0_%8X_Y
z!~MsDN_pOQ%B~->=Y$k1FJY>a4UzgjTVb;|ZaT9RIC<o;ni2oR<0gV>$2yUn&1A$H
zPB}8@q)qm+=oKGAUZ^`LevFFPK4mjQ`vyt#nXz3m_Gz}prU4s{Qbv!;%ejw^M0}<!
z-9!PKV+y-_P$yK+@v~c6ylvs;vPmMl7xJ*a^TA>{J)bFQg*5fl!Sb?9YPp&s?c`WV
zyF84L9Elr#34E4<TxwJ*X_XANTYE&z*PSTcG(lYl!TXJn#}#$ahTgAj71qOItK;^r
zzLSg&MS2D|H_J^1Z54^87A$x-&ZgO#j46GFgkAd<e7kIDq??zg1+LLHz+TrMT9+7H
z<CGNNljDF@;WopqdnX#DZ4RHj$T!)dDLuXDn3*U(SG$_bIwLQDO5PgXDK0qg8e<N(
z8Sgz&3#hk6Y4(<$@bxnvi|h<wAB<pU9E>C^)~ok%4VTT&WmXp@tLuHAZu{9{RBYj*
z+oag}PQA1NsFh#3oZ4g@tB>g61}EN1=OF}pD|JA4(w+oK@#UK>`Qf)pg83>e!lH3^
z*EL_?D^%3eA?CuHo72HK?kG(A^epeT^K`{~kh_0P5Y)8y8AYX2KqUdmb>DWr7PFh}
zuY(-eZ>P+7Qzn+1{dN<Xv|pKpLx-o$iyLJ}3=L`1$25|YEH?rWmQuLr;74mNvDPKh
zq+Bj&=1q8eF0g*$h8;r~U7XdZ^x#X?&diXTDx>@~>}MZV+#MbK98ovoQF7eHYSYw=
zJeQ59v2H(%bIxPfz%dOVj81HAxwXt4;YX(2SV&NPJNY<(%k&vBQt=})9JjvQym*Nm
z$43u^3ASn&C!ACh%M>=Gkj<WnT$K)L3#A|~UL{ugn{DL6HG^~1jqO~gF9i0md08#I
z!UE!=_}W;hdVIf{7DANZ%+R(h8RLQO6`g%9#SaBEL}RnlmEZG*Rds55eJqu$z8~CE
zwDT%C!d5jme<hfZs5~}JBz>YyDkA9baR}o2)*pxZlMH@D0LDaDC1n`HR&R>gC|Fga
zj7V8alvC%|agKI9ZBQsAHsRNV!w_`-6fv>(K>?~|S|@35Rjks43-1Q&s7I%-Jk~i)
zjiW10I!(hk1Zf<I*zS7p?hN+Rm5Qn*AhgZe!WqlFjM~^nY;CB?6UNFfI**IG-u3EZ
zOabm*-d2wn?ldIhhsLoLrOoOIvOjz6%IW3Rc*!FkFsv|2Ff+cK^~uk!cul@&ab{;k
zggm14;blZx9%q;u`U-n#MyK-~__c;)crW^ug;?zA1THSPUs~K~aqyQ2&*a`K^yLVU
znx*YdDGNnfNY%Kq_x_s8lCQ0<kN@Hmb5*IK{P+?q636tYA7ofwe|~H8-tp~~TQG_A
z&HI;z$QOli+94D&pQeoV9oQVfnV*|ajF~8XV?EL3UsU#R+wP#|wR_~x+7}T>pC9D6
z@n7;bqTPS@Vz>*_Y<sb0#MlYjE&=N3ytv8N!oA4*1s+aFe6$mpL{~TNy~AD_277rJ
zzKsncRb=QZ|LUYZ=ughi(u?!8km8fZz3Dc&ZYCSO^ofbaX~(>n+PoEeeA0cg{q#br
z^W^*K;Nr(fJLSc}#ihx!A7aEnJ?G1^%#;c6k)Nua`31P^yN&jueeIzsl6-P8*6aPo
zVy_MH@PY&SyixN*)K|agYroeM86x=X^=G>CadK<{2c2Gl2!H@^G;v}vb_BVB46RLA
zER2BGAQxLBa}!5qds{QE1sK2|@v3k|c?lFmf>$mmQj#B(!5Hrq;9<e}x|`q~0012%
z^+8lsvj2ygj-rklmLN~`S3(T<Mh`s<cnCx~<Y1{H0ftE&#F`rCLKR{O^MW9<+!}QB
ze1RX=8c+NCU!KOLXXrNcjHfSH9|9;i=xs8FC`H(*QIf<UA*4x`SZL{>&0U@{TxRu-
z(p&eABgQ$%1SB1G!A!n?(Jhbkwp1qK;C}YkXe&f@+KR_S=(8P-?vap$J>8cffnql8
zpbtRT)?VTuK-LOPy|1@jdv?MzdlSToOvFe-X=$*JHWSsyI{8^VbjYX|($`B`8gT$B
zsL*7i(u>D(Q;ob+05xYT9`apM>VbeW>w*+|@QMW4eO#SNM`pKOi!tkHUFp2uTPbD#
zm|;<-(NUt+;(HT!UD8b!#v6*WiIzDe^YHUZPMW1=YSj#9kd9MGg1`^uZ?ZsLtKg_8
zSM%cXpoWyEj-A+cdR4f`tXVi^Z#iRQENJ?`kx5pUksGj*5BB%Xr_cm_D&AD1y#yS7
zmqu4&xA|a=SbP380ndarIa0ynJeb(*P`JOIOQYmA)$_Lt0Km$_12@dTux|gZ!?4nS
z#xP*<kUrbk@yA0*-VwQ5Eef)9$I%%!9H+I#<Is6fa5{z4v}Nr#;4KFL@Q&E^Ze1Cw
zB`pKWBu#lh$O)%V&Qw#ss<U^<%^&ODryJ=L7DX^Rz`#*>!zE7HJad{!Bu(VPC)(X<
zKExVll^G)f*VgxUhK?4^wUOeLDS7(vXb9ortjlU$0|48kfY}ZRq6Fq(Py~+`0?5}S
zB#NeN91z0MtNlo~w|6_guRthlRV$Q>?1slznCm!h;o_DmsynXsUSo6iwWZL+{YD_<
zfn`k)txE2vImHc{`UYaPznS=g++#e>lc+!wPZ3A;MikvvAnYiTfVnlAH~r_a70`-}
zSss@xxI^wrN{=KS!yUL04~a+gKwKwwJIej;_ad)7pPtSyo!z~4F^AZo?v2t5y54&(
zI|4Cymz(FlYJOdInxA6OUq!~CNHbZa6=d?ZWMMJa2Vu+|g*z()HY)piwx>(aDg*}%
zScNn?6ohYb9&VYVr&y0kP`YQ|Lfg2ms#ibGld$E?u|!8k=9ZN)Z##B!d`&hVy3YIP
zM4miKq+Nn620wA<t&c;ELnBA{R$g<D)MtKSR$yg%vdQc6Szk4mZf=b@i#dgd&<g;#
z6yWXj4}p<JrR(l`Zp*P*s2pr+BT+1w@m!XOJ3Po~lv6>D?;c2K%(4a27MFY@u(7ng
zbjQ>4W1(j%=UnwO_wt&t{B@qc<f!|?1)2mgBt0%34owu|+@g#4KX}>YV8}IsE;{qN
z@V6vyU8%3`B$|0lW?^JBF0D%F%L0e7o0^P8VY{)K?rf<oEp1b?bQ}{kM^sk!+bKQ_
zDI|Xqhy9#O#w<i478ukK@wO#X&ndC7F^vDpfC0<IY<07$LS>lSDp__HO)PdGz{x!W
zsQ0rz?*;P!Ar@<J>#A}-T}xcmF#oNdy+1I7itK8-%&sEz6z-Qm_T6%{1C0?Pn|;aK
z4CTh#JXRC){>29%)}ek0JPR-q?3Dmg;_@HL#0&yo-QO$yXF!Tn)okhlOf5sax<9}l
z?#~+JVdvt^0y1*8aJ6vu0NQ{oY+r-#E{c`%-K<zGxM4l-b@-eOL=I<j-U|lerBagT
ze6H1uRMWAMn!!WF^v25SHtUe~fYA9t?>T#r?sYSW3lWY63BTtK7endaDsyZ<bj$%a
zg0#z3ZBVC;^rS5KFxZ#4n!AFUHQSJSEvaIcDae<hQ$4;an7ZkPOxJ(B##=3#c@*ZT
z*ND-bbM5O=pek5v`t3*w?@Qr~^1+Pm54j(kpguyWD@|e1tKJrJ3PoHqzp?%#hpsd>
z%$o?o_JDPtXblWLQ_-)f&`pu1UT(Q_#w%fd*wvFU)KSJhFY(x|#(PST=k#J>-QEu4
zOs?6K8GeAjW%VjAuw%cASNs5$-7BDiY4B2E=i+Dt4&Q+sos1v>$bYne1qpxv%Q78|
zVZiW50#~yBT?S(`Fc5%&7Yv$UKt`4{v9`7&bF*`_HYNwa!>gD$J6qVAIRS`>{-*`$
zujc<wVE}Y=S2i+Nb}|(UGh2|e3z!vnFi0|pbSMD84_tHwumPCCIXgIa0$2ddz;*wB
zN@TCf0w?dk@N4;1ce-E<7SaDowEwFF0K5isslWgaFa|gRKma!|7y_&TCg3_)Fa`lU
z0CoTufb$=;6Bs*!C2RYKY+reMgX{l0yLh!K5-_~l3O^W-kp6840zg6ekG~`U4egb-
zvjsZ+Z7uNdAbWeDEy%_M+|~Tmq=0{z6qpqN5)%E7x&LXOuQlLjg;WKYzv92()fPp-
z@V}e>^eun*7$`_Ev%klFE&na*zsLT&?*GlPU&jE?0qRwUuVcS@w%78%>l94>@%%CW
z)@A@Mi-6&OH=%<Wkb&V<4zJJmI+wrZ^v4`t=~pNG+Wr^*V`_h07QnyO0|4_P2SRD!
zZXhs=*ZWX8aaB<!Dfy2q%Hp!(qAKFdDj#jeCv0;?uwd7{FxCQwSI|FbVUZuez?9DX
z5S0*Zu;>GI(6PRU``A+ioN}&ib~%;*Db@C}4M$Z}flX9GzKa5yPU`QT5OL%UWs;xi
ze>Nibb21;omug3&s<2n}VOJB3+bUE8l2I?%RG5@An%-%R(IhQ!H*Mf{4Ho5(Tu}<%
zch*|f%N}zCM~1(!#-JX){l?cR4O1^{Z#n!RLLh0S3DS8Mc)1Bn{{Bc{J3Qw5%<kpc
z5*M6hWYWrtq~ttnSgkngu$TpLI<nqj#)#3|O-hhhVPVf9d%ly&NDvKi686<D9$lxl
zgj9rG>WBbqVwIm6Vr<QoNX=Sx?3seswkDw)l|-iW&6T#8=mf$gNbd4C@{Ztg=9jEy
z-!=mNw0X~?=O(uDC-w_WBfoRE5(0DFI->47nU4rwG}<V+N$FBc?dmb(FB(wYJ6=Re
z#s=+64N4)2TU8N1Vih_0gd0FWf%{duK0U?9ubt2m^^RnA<E_#qJuGWj#;`=Hm!Z(=
zCo>1V7e(3gdB{kGtnqcRh0#LO!2eX`zKA2aHyi-)39Q*y2l9VYrLu}>ui8ETbOb@x
z%9qM71;tU4;%|J~-_!SKBBsW2sS>=WG#Vv4N<qe_wyolF$~fMp<-;c~D`4bE8u0y8
zIsGYWr;t&jYFXfRc`x1TCE#*v@6va5&m-&hz9kFSAZJSnFA{n<*iTBV*PxNnnYKd=
zt}|Ovks#&+Xc?0+NA(>fthgB9m{iQ18EFtga{$>N#%#L_q=<*?pxS&oAwPUdKzrjQ
zgY^l9m9_yBk{Zs*@s34gxYJr!6ko&>?$cn7+(AG<o9`QlbrKO!7)ElpR<QE^oOuEO
zTgNjSZH5E72SS;jx->mS#otcEKod}mOnbs=-?);L;BUahVaLbxj_NG5{_}hIL>!R<
zsNdLBqIx1|<xqzQ>!Od;Fj9Kx&;cs#-R-XLaAdE?h9BC1?~rIv?teyfYqHYjn+p$_
za<0)D?wZb}#SKs~(TSI^T+D2jzQ8=<=d3~}zf<G>etN;AOPc(-TYk*x(KaJ#edB!%
zCA~S)``naxsuWc(cJ+*`cDy|YbF1rfl2*675@M&7m2L3VpZm9;CV^HX8!_=7!|dI0
zc`^Y=T)%&?Z*nL6mOom{VZVmoyWgn3jHC%PZI2V9NdzrXq*sT)4hg%%3+md_-fxhI
zDg+VB@=IDbVbpNdw+`9XlxAr*2Uof$)$geHyG_x0EZCFPyK~zpso~=Xoh$mef8O`1
zGbPO8+3A<1vZhgqC4&2HcnUkveaBZPU>-(abv5x#Sw_DxdfQe8x?Fks#ye31KR@Ot
zZX6U(z2?FZG8aPTH+$KlJUkjt)zSz=-1fQ_zRB?w+j1#~cL-m&avFJq0y!PBc36)h
zbLy*}y5>zbT1pPeg|Lf<su*-?<NL+M5o~_bF7;dK%F5eke5lr=!~AgKY>T*7fv>N3
z{2rfVPM=-@CxyR6TwCx7!iNg(YG6=@Vy7uW9f*~0EkO?VB?S#7+vC1oblA2&{L}2E
z7ut$>n$~QQs*h_y7u@1I$A!_VQ!<Xk=;+ppGIgnA_6)v!)jUU+p!Q?K&C#ch)t&Fk
zZQ;heK-r3LV#CK6me8hZmpj1J+=khNSW~BM&AQR=iuR|yXD4yicUX{2?*NbelG4hb
zR^UChitlq<zBf?K+@f;Np{psi+HvN*xH+5=pS}}{5ujxgdmuW$;biN>IZgoV1E*Am
zx%yobjc?kR8|ELxbNDmYui~75vuzyBnGiSC`MYhRqx!xfXS>3!?DQPP98H^B#-?L)
zSNk5h_MF!z2K6|@5(VGSicJmjYK+zhewl}*zIBe)Qy%cD@iq0cNHO85ic#{4YZw1Y
z@j#VhvO+5Gvqw9NV$HR#cw(QzJwz@@`>R&!$%eiwF!QU;KBK($pmCDMiXKpYp{|OJ
zCR$bd(Aw{VZ>4g5BEGQFT$9?FZ)eGQxYBn4BC|HTNLBh8&opM^Im#PHF`kLruv2sg
zUxwZ(!H~B<%U*sMJzX%VsO~8~J!NuXBfx(z+S!V|Q+hHRl8M;Sla2P|zneRtsT^A}
z@}Kw&JVe-GU?3I^0}50oV7Ozl?}oVP@d=Oz9__Gf>U6=Eu&q))_1`%P&Q#89$#^mS
zgh4|fhY0GlzBI((T~2?DzHP@iR0))H5G&;{y_9r6oB2wev4ENLxibEJ!=@Vl)~8I3
z9wZ~T^XQEIU%DTjn<k!pi^|x%IN0=m)O+cWI9gC^T?OMt>J{6a91=R`u@GPq@9{>$
z-h8?$+xc={?n2c6d7l&psx1(?JnM56Js$7R@^YqN_5k<W2qQ*4vBt94L)sIWJPM<p
zGd^OHkA(C=k!#w`zo<?sM2J~ISU>9g88v%v$>@G(Zi-kh1Jj)RT0(^V;$BdMppjrZ
z<v#X4%F+<a3X@73+3R^D@&d;8A|O-u)Z%`acXoe(j*la0<Pck}dESj!;BpFE?X|t_
z-iZ&aDX}STo9E{lGERX*<P=lH2Bo#<%b80US*IZiNXc8g5uJgLYglyePK^rOH!W7(
zKe9OD#8&89u$y+fB#6)sNo{TgT&F@HTJSDD;#T=AZ}@2^#1RVmUi2qaOCEdCElh@+
zn0MzD!XYG|*rxeVzMY!CGw_z0WGqsqRsOsRH2CDbBXN_Qs*UixP6K3Z@O&V&DmN?O
zx-9fKT>IKlQ<#(h;k4h{K&4T~7$Qw{cx4{Eq5iA#(kS_^e@2$FDD#>d_(j({v@J8{
zj)M8dn;dvOI+~O;5s_iLa3xApzS?^0YP&_ZlwZef{56tH_T-C5r?S!_Z*<+0*2K0J
z4vlRIV{O-E-Vof2Gx6iwMI4{3K*#Y<VZm3Selv8H(aF4^)P$zc%w?pRN}pQZ9|yyI
zq?z9_@gwr08;QFx&i9J+m`kp6?zO_d)oSIS?=&H!NXo~4m)~CWap9QpiqVLw2664V
zJ0*zPas<UKq+AmIB%53(^04Lhce7SDZBSK#=9=cWVz$I^tVQWiun6*0a^lG(oTI1z
zmO**=_-S<X{m{*A-yvU}855&<WbL)?QVLt?`Fr=$Jn021=5CVYlvb}7l>c0<(a&O0
zZNVEaO7O<(KUQlwQF*D4;wq}lavyDCm*l%d&_hq9+{4;LbP(yqHpNTw%>$B@zuOxn
zoj7aF+q$@UZ63gIWu7_ij(PiCjAA*Y1*&=?i%q7ZaSiX+=*WwvPG*=EH+G1U!GyP2
zIR9q0tha?}87rFJ4Ii+`ZG@youF0I>*Q?jzNa)nydpc%4{8FnEQTfA-rTmItI;uHG
zJ*>@c=f*dvD@YjVs61-v2idh0CW;1;p(}NkG;4sR%ClxZ5|cm{34Q2fEWT_gfLcE%
zzXFVc4O4pYH9$>69c`J`-s%t2J8X4jp<*~g%LiD{K&qK{cjVut<^*mr!Ec4cU!u|t
z1hq#Prj{S~Keo{anbsdm{A@B%-yWF*Wd!)U5S4Fdp@yclDAII&PEzF>!_R&6<BFJb
z&&0tsy+t5x4_fwAGR<&Sfz91EDq39l!297x?j+IEuK}chXvdhCyL9Oi$vEar45u#4
z9aCFKOEigL*2@bubQ0#_v%wRsr6aTrJK$ddTj9SjK^TGq54g+$hHLO?N*27Qk^}=Z
zSZg9+JVv=mCECfCG5yIb`rDT|P25nUL`K=Ar4*?p!ZT^3hmh<}k<#&gmBqBMVCj<a
zXnZ76Ccs1GjG}^ydhh#Dx(qPSR4}jx!X&Z=LiuDvK|(-6Lenu%X0oEdBG89QhTft;
zKp?>YSiRVgSP@{M)SzK8A=Om=Cg3q4<+a$}u%f-Tz+u9RIojD-S$o*B;j`ktRv}`d
zOSpg>jV(a7WQvY<mL^8dZ0M}0uT4mpaB8+zwsvl|Y^1EjuQgDZIFcY+C#Lu2juuYN
zcJ}6ED$XVrwkD3OB)BMSoUGjJ9BkYi>}>4XxG0=#Y;3IW{v!Xsom?O!#lH&+0tNsT
z2#E%kDI_9fAS48!fCN^4DObp2&vo>UcuO=sB8q9!vt#|xMuA;$nR_iwcDrPWPxH4s
zA9^f0((ZApwLdR%4ZAb5N4dqx+?Fqo93<*sB+}d7+_NA<s^^<xeC`c){h_0=F`&H+
zJJdH09T6>GYG<CDt2gr~OP6*hjU-ZuL64-9ynNv%e%vC`z3zv{ouYl+)<yY#CO(Qi
z%SVb3c35#K5Y%~8ktz6n<84Zi%noq7)oh9%6!pV8C0p0-v=JmKa-Q{CdiCgw+S|yp
z3lHPZC`e&^5e(m^ypy#OZ+v0T*|zrkB=Qt#0+XtuTxi|~NC|EU!(vl{Es(V2sHKU#
zj)6&gL3X+U(cs@>k<EbQr1ODxPtSqr4?Z-=HDb#v97BbWTbYHNu<nS)S2v4oV}r^J
zAQc|gl`i<SteL)eM9V8Tna8;WjH%^-tL0-Yv02M<*y<A9=jL^mt%A@2LeL9KqoycV
zn%dUkXw;f4b3$5FuRu3cL!l*TewF#MEVA!|292lG4<dNlEH=ZeoJ+ZEgRPsoyr>s1
zm}w!u6n==D+z>X&F}*d9erW<K`>wq!K2YtsmI>7KKq_W>H^v5FuezAAPNsqE)2P@s
z6>%e({$uZzrl@(^P8hZpS=kdzpoV&=e88L!Q7#;8_%k)RpOs4G)=2_C4t(GK;Jl6U
z`P9b(Nbs2$B9EN)Pb()zg~ox#681VS$f*sApx9KAH-@hDn)t~8@$W_i{>Ooh2m+uQ
zheC<GD0l9$z$@#k$Tot^>Uf_JTgI@0U6eF2oTuJ@fjbr~qSl@ogP}Z<-s;0P6^MHD
z8{&QYJ)q|Jv_q(bzePybQtiERFN5KDDK1^?!ps;`pe0#tJ{^NyCz|Ty9Xj36dm{*Z
zr3mLuc)p~mZ*G!fF!?^sJiX5r+p?As@E8Vh#Yspq?|>m15{>kuBBpM;Y)ntdNrUdD
zN*7h{A34s}rQRf!)qZ}sih7Zf7X~g?OLDyI!(2$cReZC`)zbf*w|QdPSt=BZ1%>{B
z@J{aAveb`+<*-(0f>f6$_?Y={S#;~`!rk$FF7b!xp$8p*G1!s0)|l}-GGqYkc+Wm<
z@Dg7I>E&73sGni064d=}7u@;F3aikybu1UD?)8uZbzP|>YM;4C;_>ol%^@Q|pIKR5
zaF3hFjj#FQ6k{*uctb$L>Lr21N2j@EfbEP^*oQ(np!)}4)8?#5Ym|dr&@z$+!V|5#
zlfG-wNcx%!UcmYsdf|<du*Z0ZtisA?_F^?hgEZ*e2O*Lvwb2#j_i#1M<^}^fFqhYn
zTctJLNGGlRqmwgwj%UKMs>i9F{L0V?qgRQm_bsWa<=z>6(^h?nrr!&a%YCvmhK)~L
z{8)nx)K>yIManpZD3&ZPI`MoK1<V|w+$`owAXokG%+%0SPE4jneF|=Rz&;*;3|^k$
z!SL$zU&Aac$mW!TE{+=7Zz`3K;6I)Etk(raIyQ_oB7DcRzIn^kFRBke_hTB{wtC%&
zQjYz^DVX=p<565MNNHDK$3}T$3JZ}N$J>60#N6fchI>voEYp%9M#6jZU>LGHHaqxz
zOn=Ppz#Gp-xYWB<1p1fj2B=ASdm15)sPX1Ls`Kk2*WanMcB0X~xz+@-o%v)|SPrp^
z8m3f4&suX;>HGsWFPmcOc6ZELW}w3yRi1e5&hW9oHZSC_%Mb-FR=27+4QH(s5)tdZ
z{L1cl&a97S%vZhY9}9XRNsKGu>e9339?RAAbZU`wLp=T29oiKR*KVrgk}qY@qxnC^
zx?}L{>!=Y$+H3{OB`%zh;0u_*x|2+tD5UBKidMc=)Im$#db+8OiJ#nQcz*k)su}kk
zvqc7<)<})@2hPtVTe}Mkr;iYV90>y|qhsD{x1M}vApcef`}}Qer6jfS$KBHRfFKpJ
zMK;Ur`vnAvl@>@H?5-~wPLjH+R6V#|?hX{S^|s8VerSnC6H2rO6u`|^Iwnde)Ke;a
zdZ4(f0kD{=UkE{v#lPN&J#*o#iv%7OYvW6AI<Vwjg2Sh6sdux!Dt(R%SZzqYP(G<P
zl*X&a$<sju91Kf>UyE*Ri?$o}<JlNW6!On>_R^A-J*PZAo_<W*B~Vx~@5@20l<{P8
z`AP$}0r2ATe-@qpv*`RkEINO0Cq)%yUhhW8#H{U%tjIXo6=fj6HuReQjKKc$i<Cdx
z{?7l4?^9kG;QeuC_>;ju-}nBzD*&(sj{E-G+uwh7{A+g${?&iJmhi7`0Duel>zM!P
zPUxS{@Xs5*fAMn0{h#mq{>ACfKL5P``WL5cyno(?z4pa=6~uoN%l=nibmIRa9IEp1
zpA7yPLH!qlCGd^Oe-%&tCx?HY>i)$coaWy+{M#8%Q3mGqg$}SWzyr|0h7rU5O8sAN
Ct>tn6

literal 0
HcmV?d00001

diff --git a/tests/update.TestCase b/tests/update.TestCase
index 80870e02..2ba207b8 100755
--- a/tests/update.TestCase
+++ b/tests/update.TestCase
@@ -14,6 +14,7 @@ import sys
 import tempfile
 import unittest
 import yaml
+import zipfile
 from binascii import unhexlify
 from distutils.version import LooseVersion
 
@@ -233,6 +234,45 @@ class UpdateTest(unittest.TestCase):
         self.assertEqual(sig, 'e0ecb5fc2d63088e4a07ae410a127722',
                          "python sig should be: " + str(sig))
 
+    def test_getsig(self):
+        # config needed to use jarsigner and keytool
+        config = dict()
+        fdroidserver.common.fill_config_defaults(config)
+        fdroidserver.update.config = config
+
+        sig = fdroidserver.update.getsig('urzip-release-unsigned.apk')
+        self.assertIsNone(sig)
+
+        good_fingerprint = 'b4964fd759edaa54e65bb476d0276880'
+
+        apkpath = 'urzip-release.apk'  # v1 only
+        sig = fdroidserver.update.getsig(apkpath)
+        self.assertEqual(good_fingerprint, sig,
+                         'python sig was: ' + str(sig))
+
+        apkpath = 'repo/v1.v2.sig_1020.apk'
+        sig = fdroidserver.update.getsig(apkpath)
+        self.assertEqual(good_fingerprint, sig,
+                         'python sig was: ' + str(sig))
+        # check that v1 and v2 have the same certificate
+        import hashlib
+        from binascii import hexlify
+        from androguard.core.bytecodes.apk import APK
+        apkobject = APK(apkpath)
+        cert_encoded = apkobject.get_certificates_der_v2()[0]
+        self.assertEqual(good_fingerprint, sig,
+                         hashlib.md5(hexlify(cert_encoded)).hexdigest())  # nosec just used as ID for signing key
+
+        filename = 'v2.only.sig_2.apk'
+        with zipfile.ZipFile(filename) as z:
+            self.assertTrue('META-INF/MANIFEST.MF' in z.namelist(), 'META-INF/MANIFEST.MF required')
+            for f in z.namelist():
+                # ensure there are no v1 signature files
+                self.assertIsNone(fdroidserver.common.SIGNATURE_BLOCK_FILE_REGEX.match(f))
+        sig = fdroidserver.update.getsig(filename)
+        self.assertEqual(good_fingerprint, sig,
+                         "python sig was: " + str(sig))
+
     def testScanApksAndObbs(self):
         os.chdir(os.path.join(localmodule, 'tests'))
         if os.path.basename(os.getcwd()) != 'tests':
@@ -254,7 +294,7 @@ class UpdateTest(unittest.TestCase):
         apps = fdroidserver.metadata.read_metadata(xref=True)
         knownapks = fdroidserver.common.KnownApks()
         apks, cachechanged = fdroidserver.update.process_apks({}, 'repo', knownapks, False)
-        self.assertEqual(len(apks), 16)
+        self.assertEqual(len(apks), 17)
         apk = apks[1]
         self.assertEqual(apk['packageName'], 'com.politedroid')
         self.assertEqual(apk['versionCode'], 3)
@@ -321,7 +361,7 @@ class UpdateTest(unittest.TestCase):
 
         fdroidserver.update.options.clean = False
         read_from_json = fdroidserver.update.get_cache()
-        self.assertEqual(18, len(read_from_json))
+        self.assertEqual(19, len(read_from_json))
         for f in glob.glob('repo/*.apk'):
             self.assertTrue(os.path.basename(f) in read_from_json)
 
@@ -363,6 +403,16 @@ class UpdateTest(unittest.TestCase):
                 else:
                     continue
 
+            apk_info = fdroidserver.update.scan_apk('repo/v1.v2.sig_1020.apk')
+            self.assertIsNone(apk_info.get('maxSdkVersion'))
+            self.assertEqual(apk_info.get('versionName'), 'v1+2')
+            self.assertEqual(apk_info.get('versionCode'), 1020)
+
+            apk_info = fdroidserver.update.scan_apk('v2.only.sig_2.apk')
+            self.assertIsNone(apk_info.get('maxSdkVersion'))
+            self.assertEqual(apk_info.get('versionName'), 'v2-only')
+            self.assertEqual(apk_info.get('versionCode'), 2)
+
             apk_info = fdroidserver.update.scan_apk('repo/souch.smsbypass_9.apk')
             self.assertIsNone(apk_info.get('maxSdkVersion'))
             self.assertEqual(apk_info.get('versionName'), '0.9')
@@ -623,7 +673,7 @@ class UpdateTest(unittest.TestCase):
         knownapks = fdroidserver.common.KnownApks()
         apks, cachechanged = fdroidserver.update.process_apks({}, 'repo', knownapks, False)
         fdroidserver.update.translate_per_build_anti_features(apps, apks)
-        self.assertEqual(len(apks), 16)
+        self.assertEqual(len(apks), 17)
         foundtest = False
         for apk in apks:
             if apk['packageName'] == 'com.politedroid' and apk['versionCode'] == 3:
diff --git a/tests/v2.only.sig_2.apk b/tests/v2.only.sig_2.apk
new file mode 100644
index 0000000000000000000000000000000000000000..0b1804d318ee5a6e2c3236f9c6ea1ef274aae6ff
GIT binary patch
literal 12086
zcmeHtWmH^Cv*_S%!JVK10?gp<1a}A!Tn2{$1{vHTf#5-d1PBCzI|PDDfFQwxTL=&c
z?skXdoKMcX_r4$Zt#yCAQ)|^!SM_vt@9NrBd)ICaWh7((9MJE70I2pA3)OJG{Q&?#
z2<N4ot=u4XR;uRCcGh61J15M^u`E?ggHoQTZ)po)K1g=JWFC)Gjh+a|l1%T9S7GL1
ztnWL0#28B5eDIQk0XX9q6Td&BTBO~mlE9WU0FKg0CrZ~THY!j^pa)~7{!F@S^^JUr
zCi0Ac@pkrO!&ShQCuDDTMT_f3SYcfwist0ONA;l*iDx(Tyr`-&v{DVZzN0k9m_9f+
zs5dBbRC#ingqzIANXKf%^3QQ|b8;IrI^`s6QQk|d=cbObZ~AVkKU$R2iD(U9l<Zm{
zBfZ4E#JHrsM7pGWw)5~36|M&HV=%pD9^RX|QKX{R^+nQgb~sF$q)uaOyJNW1UZd49
zB%K+K`ErwcV_2UxzxvqH`U_~BUAgDBVi{7OkX`C%%)Q}iD$SRVDfU;H%@xrpu+ayB
zmm+&;d7hwgq>Stvf_)mn7mw=6><!O<jzKSpPIO%;{b*5PoO4BxJpUo!22-?&6x9&1
zt1W69XF#;kYbLyJNY~lA7Y{5;46H^n(}Z}&y6>1@=FIYZt?G;S7`d$%v*=CP1Vzix
z9v<bLTHn|%ozNK5N_vRu4K#$*vw1FZI_eIC%1GjJvW540gv;Fv<#Wa#EOgd<DPE%f
zfLr0Pubefo$LZg3wawd#M{uI2gStjiEk{13mfwap^241rV2eMXBr|4e6Jypv-xZJC
z5~XTMo>#f(Dqr1Qr3tl-lJ5M7E@LN6!+H;FmGRoFOu=NX%PSh{RsjAUcB6Y*R$bP4
z;?WNd%WCYn@WOkiL$G8$T>j=Kb@cd1xE#$D`2fY`&m)f?t)CBHPPy(rj6$7tsD!w+
ziTyky$}SO|LoL6tk=h-_^yQ?UyYlC7(1{m1XNe3%WIbixac~=uy?CX0(HcTF;VAF@
zaYDHCXuxqTn?FsP&+1ssFQx9N5}_n2A5eTGEeDlkGAhY76wN0yY+;D*d&_ct>#}(~
z)|W|1#e&#0%KIwZZIsIW;i}-82BvVB{X%RFUIL-~gy3Lq;DKW9=Of=InE?|!+dPq%
zz*bFfNI&#AKx6<W>-hZ*O52bzzM;ww(wDBm>MCtZOm<vv9=|AK<mcjzcuy*0Sp*~X
z{+4kttlSby0@1OIDbd#3pgq-Yk>^frzs=q^ijh~PAsN3B9y!ak>!O_-7H|rEuXD}4
zH^Cfebe_O}jV=*=J8#1{#rn!MhL62;nXq&uXv$_M>_l^Cu(P$aOnruH8OQF_4hf<J
z)286sA)V=hqHpk9fEvPj=F1fx>(zn?Bbt~vV1%8oM`4Ockckih))vJW0sG|`gHrz|
zF!C7EQ>;@9r5YRcndtKCiaZ!;PedT)BbNG1{wHa~GxFGHUSq4bg&b2{993`YK;sc7
zgPCqO+$^O_c{@j*EhU}J?+*&GTeb*)Mh^c-xz2_8-!Ego+6h+Zo6fiI<^)^0d9d$>
zYSM~RA)k%XLpcfaMuPN)q!O8EtqqaEYDikb_8(9{rrKZEEXSZjWY>nsVJKLOmHQEV
zCLQfZk6|*Mlw+{$V7=O9988GD8Zl0bH`Zd%J}U2GOK^i(M>G~!`2h)bOCm~zDeQ)#
z!s=7j3KjWG*B*Yb*!9oVh{cl-FX6s@+;dtDc!(o{2eaQH?q~qnQWMVU!SP<IDyJjG
zp{VwROI1ou@rj(a4yWpqBh}A?D#{$3UvQK;*oHrk)Mx=Gc$UApu?>A@{o?VyR?9_w
zNSQ<Fv7+i1)%Oz~?iefI+&Gm`j-;w%y;<ch(pfQo%DrF}D#q;f>7`p}F#`Pi5)in(
zPVI330Axx401LhZOGk4k6b$9G0>fg`?Hr9JiTg(UYrM%vHUw*C6tk&qTuI_;0L=Uk
z>v=FDT&W)PNh0!%@Qj=)_d=K<)>LSi7<RVWZ;0MX7b_7w7(GOoeP5<TP<ta;^giXO
zf@C;b?qTrz=LNNhb;-}_ZkE71q)Bv+H-5unUJ_^XJv`pf)?6DyE-|~M%b6pQfYguU
zi-tG7csu=f+4Gmr`10=N=ah8l^DYi{L0S@X+OnoBc1zgVU!FgeS=@dYCF$cY+x&1u
zdP+u|oNhLJ_WO_L!(rxVXF*pTq05HLBFhH*qURhiN<ZXVgp}MbxRnTwsD|xeGqf3$
zh;}|YtkY0(7gSN?Y!t3giIBDs{a3c^g2-&k2>XaIv|6*5H_Paa)bm)aXaNX|09wSd
z^hX%{p+DM@8*xO@vjJQo(;dF;%`a_H$Pjs!P4@lwDfgLSw0_vPD7R=7&qn!ektij(
zHqk=OxX2K$I>;*9vzBT0Rrh&exS42eXn_Douvf>`@=|+4W)ZHe6sCJn%(8tviU0zZ
zPCNCo_&)wQ=Q-${6^7A*xri8udWZas$`XyB645=>#06g^gxrN{9^oe{UT|N>__F-6
z_dYia=NjW0r3FnK^%Wgv5IXuGBNKvjJbp$kVkvS-5bmrLT0d+D*`fVeC2lF2u^G|~
zI)Cx`E~?!qQhiXF8D$*Qg}f2*IE1|ecNFciL)VO@kzxmNI!LpU)(8(beje}o`y{@F
z`W8eQ^7L|UG+*fsAlw<mo4oNserxce6)~rX8<a||tb7-o)f~NsqbxEVYHlFD#g^k<
zH~xNyL&>yo+wG(3meYJH=SS7LCauYjPcBmKjNToquE_a|91|3rHSaVV`%D$YH66b;
z_Ialaf!6ik7>pm4bGJqK=Zs-h+9Zq9ru>*F=%wm*yznNL4$FE-W5YcJHt3IfUi|cs
zogBY9nnG9jt%b9GL51#to(@Q`e04uQQGiVdi!85$eVtpFb!tgosOnVJU8S`7^I3lP
zkhDE-?pS@IDe+PKw-B<0SMeqp1X}f!-70EWU!RzgxG`lB9yt@7Nb8%kuDQ#8Lj553
z=}lq)cbLkTUFmwZ;_-z}b#~bs;H=1_b+!*upO^>O?J&Qp94RdpuNze9J;)0{-s+O}
z*^KT!lh>NbAE4>sY%|>n<~NTk4zQfLNRsAHV6qB|W%Erw&yJ3EbDdW*CA^ZnWG|Rq
z0R<X;!e3yrFy3e|XB5C7*R6ih%DCDViYd)MhT)3Zf4KYp&T~Dr+ne!fw_U-RxH`5_
zF7wl2mQuN<TUp`{lBuM=h_JrnH&Jsug4kSL*3R_aqZ6m+Ci@l~52xgBVa68~baz!@
zDv`Q#B}Nx}ba%w-XUt$Dd1D)etVCM+HZIn+`7DX<5mH7`Gl*92-IyO2?miHkL9q!h
zWrIs5fE^nx>2Sv+W9h|pO#f^PudAB1j2q{W;1?%<EJqx{cVa{*-DwLo#HVjqwpXBF
zi`F@rF_wbo$BAgW`!!yV826I%hASgH-x3srW>Bv*NtNk21Pw79C(=m2IPqY00%*EZ
zQcojQLIbZR(tHvcjmrELO(T8tLhEw-oc#8lP-viX{FwWqq;zC9k@|v0;JI$Y33E1A
zDfX^|QVm1u5kYPNFxe-O7vRh8%qf!BHT->r;7AZZ(IMG_EXz~vWjXbQ$ETCL^@UF(
z&u^+CQ67=Z5u)2t(+CY)*T!y6Udc7<9o)94tz%9&?4MkQtjqf3qWPEj?dr@Xzxg(K
z5-35lwPAuGi=-M%G^i2DZ1Y}ofZYb9;8$+ggWY%+dv;zd*8U@*NPbmRb^pZt1*d9R
zUkn+G1Vpb&wP@+3243|ehJ-;Kaf#G8V8m^UJx2kab8%S}jnv0@eNyL<@b!;Q@*mDK
zUD|xRn^IiM)T1hnJELGdO8u|)B}B@nb5%vE`zNK*W?dRIOdSx8Xo@C}Q;un5JB6QR
zcF8;xIs<)Pfia>`PVanDs>-X*+{pOBMk4=uuqP97GiNW@U|qL6^Ae~oo(J@RSt{&F
z3U9KXl)h`Jc-vPQDoszXi@PS&z%9~gDkmjz_9BPkTJI9%1753hdv$2KnZrE2Q{L9j
zHCWt*x3no@r}DWW>(uPA=Jr0HB?o{0bmHQR7HitA5<Dl#{>erL%KiFP|MCvM9R;)}
z1oS%##tthnC$xMQ^FlxT1l~78p3Eovsgu4EIH<?&Zx|=@wAVRTpUp9-^bKENuz%oh
zxSOoCu0)_{BAj<{Qkq4qUL;t}P$KJhVfJnJ8pya5uFUYAeSpU@)TE$*x8BTfev2>e
zqB4=%qP`&e(XK_+>EsvHJkQTOc_6$BLWhlvvWDlnrlNh>hJt-#7LI&ZSgDnewy>Mj
z)XKKn?%_aJ-U!?pzJ#uu32cw=9`YmFr1`36WBg%Tb+ze{yVfzJ5~wExDd;2P=x6$$
zeAZUp(U=c*;@!QU`zhfL4U}*K*XFfdeOh@}`eTF+sgHo--BXk1K%Tn&!YK`fOk?BP
z7hC28WHEGXG^`K31Glzm7)~Obdn)AniP<2biImBXdezGPs^w<_+7QITpES(F9;{vO
zsRGA=Cp0$O)I$>@uZsm5nSV~bB~wQ8an#+r#HsT&s37tf`*74fw!YWkSW=x-o8?bL
zG1Dd?BFYQo7ySUSfC=zn(@+fm%qDBL3yh!-)h&sqWt-KWazE3w9DcL$uxo19LT*H;
zP!n|0@@;d1x0^6Uj3cRaA-zM!x0qv1P)=R~WJ#>DkXa%4MD11jsvV{^$zu`s!@Yjo
zmvJ<7{3^3R7Uk>}$CQ@yB&G<Rl-IcqU%P5W9cH}W*?t>;Qv8ZWk^%bkn-wh+$xc(A
zF=$uGNB_Ba6zBSkHIx6Rs!O97qQR};Lq!n*>sN8c1F`7tb7&==t!Ag1jve}C`r+>N
zf(!E0Ut2WOYGMm;C}TrRqdbKzzhm}rZwTuE2fm3v^G@LIs&^7*YrCPpVA$As%Vw7M
zDJq&s$X0dkNx`<6RdKXc+>l@oVbN@I-A=KE&j))!@4-rCwS%JclD8$pPET3IEc8$F
zl&AflevvsfFVW%78s_kSb!&tYPJh#~aip_6zV4b@AGLom@oFpW!n|3hjH;Aw-MWb(
z)jIAed-?UK^es&Z-TbPWseV29Aq2+Dlf$DtZ%3N8AjV}1G@VhZsU^ks6&BNfOrm00
zg=6l{M-5GvXSuk(DjEWdXw<P!m3qIR*d!pBl<!yn+Fk!`5qie{bSZ7!<ay)gwdafC
zQOeQJS6>=u@lnfoHqIx5gbnz!guZrHtAF(l#7Ir9V0a3$)XPjF^?c*D9_4NwJ?!qI
zv}?$23>qY^sxY=ur!8yMDMrfj?$a2zZ*$KLajn)b^RrH<cC*<|l)HSixkydq@oxQM
zQ-ZF*#?g%HLY7SXMtVY9o1+rU%CFXO@Hsg2dXt)BA<IBzmy)bMo<Ek*B{Rn_`=C_g
z!W@=X%Md!@w@zOL4Xz@g!Fj@IlQNiP=;KqQx$TSD>z>|uea<mU2(IajTjAy-x923R
zNh8DjepFXbAPh6><hNEml;PPGy*N*>*813j;c19lB^rL%W9~cpiTbr?lpsTKdA)GA
z3g+@-&&M^`;Kk3n?6!lM4Fkkvg+l|*`4$>4*<BjJ(dTmz9qS?jej4^G*j}A%x)+&r
zXB}&?$=izru4hEV8E<w3sAgb%=A>m2HZKnqzJPd8pd{&F`%Dm4_-glyJneQSJI(y$
z*N@0_MFc{(1fI3X2sUkIzI~F}vB?4%j#Eo8jUbV;PK|92@HC&e{c71rF}O}l<5=rT
z{XT&8<=WQ_VFRdp`gT-(qq?fn6t9@+x&VvPu%xG#mp0+$qZD@XZ}MDG-&mK^1f46H
zarDP>$&rK8S=wGYV7eM~mO0FVU&e0_PAVpUldt(UO!K~k2s|2JVQ-nF6^d_xrme9l
zke1XL!~L#XUhdYObtH0d;}NjI1Nw!tT@Gs4+%#rfKRTPKS=4zV-41Rgj15107PJt_
z^7`q!7>_Brji>f83Jq1=+|CE~&;zk&NDb$!P6tj0gKJxj>Lsai($znOHMxaI@1#{-
z?FU#5CX)1D>nCkmg++Q+-<FRrs^^LC4(X5jn!fyUQPgV!Vcs~YMmzqLKE6n5IJ4FF
z5mFD_g>VGy`n6m<zIvOUHBIaErRCk4Ms_TZ>X9vLTyHJoGm$Kd@5g=GPCJu~mV3-%
zJ2tGhBOzS<Bmosqsz?nl7#cuLSeHMf@tD!x1da~efovaqLroB$>!o#<8KrTuJU}2B
zIbS>L-P0##sUT@Xn~R=dz10)>)?qqQEV>rRdrh#{1`DwTOSfW7Gp%36&H1z^4+J<#
zw-Vz?(|B$PrJ87fOX9t!ZA7na#GB5YnNAG6G3uep17ekoH=Bva<H}<a28pp_;WsV@
zSK<m#f0p&!p1tsv+VchcK$+=Q+SR+ksa6Jy4}M%ndoM&kT)#}etLUUZ6dRJb8gu_j
zdPmb=GI*EXM0>H;rsmJQF%E9Nt^ujb&NfwCf4HWS^5Z8-Sld_v-~4(j#Du?m{f2XY
zs9OuX@O6(=01SW|7|LbkX6|Kf;Rxokvov)y_i(nf1-o&&INR`jMFIS(nZ3|ZlgGiN
zxYvTCs35Bar)2ktjtc)>_7XdXzv6`|%1Y@d^p)uvY8dJgi3!BLrhI_j<Zb)_9RZUS
zJ52GNDEk-*W^Ju|p*FR=Z9ynqUM)WUThX!;y_?O=mp7wIldLPoRuhN7%V2sQHm9rs
z21#xvoD^w91SOg|u1BoMwjMWG9#h6YGCzLbi5}&l6IF0Cf-8Cd(x@WF&t8j)hyON6
zueA^tx|T$U(d#@E*DbGry0@uJgT!gw&K8XS?AaU-1-3y%`bC5D(k+zCh9Hy|o9Zz$
zgT2`%-ehbqa4bqLV!*NoF~C<z3G)+DXd!r|%2&XCRrg_sC~odr5~5&A`j)6W@T($z
z*n&LWMPj{ndv+J3#R@o7UpiyVqNo)VKPbg9G(@#nbODAL(XMhmKBeFP(lU)@`{JOA
zmwB$4NhizQ+z=Z6O0-O?SjE)HAuKl5)3&H0v@z|b{aZpCn-1D_&J>!KpQ@D=5i(oI
z=P{ti=hKaV^{vfK+i^TG|4M=yyu0A-_e%Jh+)lENm~{uQUy*@<sWIx_2VvAU+Y)^Z
ze0n8k={{E;002-x0Bw++ec45@-J&XJ(js_vo9&I2TiIoJ{*Q-VbvW2c?LYR3(Rdy0
zt_Kc6!!qfi6ZUn*re{0=fFQN!`LY&LOGXwFI791`IFzJN)mq=Ax}#^nD~RaAzYFU*
z5q%gwz|2iz#UoM6HhY3YGDGsvKMn?+33nt}<a`iK>Kt&DWoW>BVySU#{V;QID4cS3
z%44y<5kL$s;Dnf(GnnQ+pbr}@1Uy`lmwz|z<cjeEzb24&eSM?j{Q`peT8(;z<i?An
zN?Sv>HB!=2ji+vlJtxGxy{&1?iB}ku0;s@OQq`$_%zLDv<HhDcm(wpVvAeBC1(Ma7
zljsu}38e6yMI(R2P;h>X6UrRkaWHiNajKEhg|(|5D;m=zJ%E|6Bq5SfT~gOepAGQ~
zUd;-*2pb#zG~D>UEbW>Q+O<-8$l7zk2ceKg_c*=ntr0QeW*(MCel0nIM4Qc}q^_L5
zrh-bi+>c`GCecw9yi(QMy*^R8Un%y<3@EPGt}bz!dwIqgHxAsP!ReY}L3Z+7d|Goo
zLj%g4=8B7n$ty4CTzBi>d7WxIaFYK7`Y?5f>RAc4H2RlwKNAur5@uCO7B&6vwEi<+
zr$iSf#y<ES-J0m+u}&{h=WwP8Q2GJ@N1{R<LE$J$xU5~Bx2?HOU#t2*w9;slO!~~r
zCvI=$HmPc3Cv|;#)s*9G`lzU+n8L~4`3Od49LUASQNg<yXzS}cY5()!?VOv@9iRD_
zIeW_W?DoKyLXtCl$)HPLNbUpGCiBCN{7&*Ug)>j4<8%3D0q_)xvfhzH30rx{An}I}
zR#K>4L?7Vs&EDQQJ;%^3S^u;4!e$%2?0|aeb2-$gJUUKs8tIVG_Gp%tY-4D0Q&XhK
zu^BrN*k*CHx>9?P-yv0H15Y~PQ!o^kWokU!kbg(Gg^@tizjj<TlW8EQWAT>7*d@p`
zoRRK$q8w5gv4{3k^v(HvoGY^>Cdj3PB}=R6EFTEA?VG(cCE7MALFY1!fk!2PqMVv+
zxwKixeMRb?|6LTL)v*~rgmd!<_u&ulEBrZ{dqX_jxy&uy?L6(=y-l6W?VRsF0C;Fr
zsdWK~T1X?iWekPg%_O&{a%IFq$kG`e=0?@&$LJb5DNd4M68aJ4blJ2kc_SE>vH47G
zW%{1>lOnvpLqz`$LyKn!`l!6)GO)vg_8Dt~ug0wY8P<)K*kylj@?zcsZq8I=`iX)z
zBwI{4%dlp2Q7nDc3!AlXXGy3=D*H#In{m^FuH2IVj{+UBI_u&enq)5vC$+XFjmlKZ
zR?T}U6_52Lq>g)99@1-&+60dDrMPxxfCx{c#oB_G{p0i=2wO|NPDlO_W9{peH*K{L
z8Ax0+7S9xG<$sq%{L$*WCgK5`bYz#G>nMlk8-}dFU)8&NTm6O-a?EB~xb5x{7cPRQ
z3W$fBCA@xT?gq6)1YrN_fg2Kl0Jmi(oTB_5crO3||7^o49vms)C<I4+IAUWffE^tn
zbY2iQN2`YbbaZX7yStsU4HQ5{_1`6=Kf3>`4FeDmcyiN0oE^RCwC!x1&D}lRzyJUu
z9YQ7&01ybD*Au`E-~>Pb&HzV%H@pP}*a2+d^8a6e?tZi2;P(f;Z{P2o5uCzJ^bdIS
zkJj(fF(aHu2Ur2z0OkNMI9kB%2e&K$6;93JmV^L20PeqdD4e>%t?K;CuJ^kA;PU^<
zFYdjH29Ec>A_7M&tbcg|0pQ^L+bs#e!@K7p&Zf{my#*cJ+{MMz+1v>XA8LE=Ql`IL
z3a$!(h=~8I?ETw6?<MeSMbrV<-qSzu-WMg|_&<f;vE^5cK|+Kp`*ZI5_MfKybM8N7
z|1amhp98)Ir29R*pZh+t-M9aBPvPvZ>yQ7JJ~Mb*5{~~<z=tcKgX6s&?yv8DEq|=(
z*Bb8m`yhPZ{|EiGwDbGG00)Ubo=+(vF<b@UZ5}wDz@0_~-lqUZWVkX(IOS*ft_vKC
zK#5hc@#dB7GV6AeJxur56)<Qn^jpwlOC7zEbqs0zIcvP7e=7KcDlAbig#fFe_wshN
zQ|VpBS#%a$XF42#At=ef5G4OMNQelCh{&v*W7$9)R1CHVg@`j81OzM;0MHkN1;ju_
z(nUrkMAX&(lR+m$R5Jh(0P*g7&<N3`-5?MLM{j2kIgs>Tgh_}m?_us{WoPb8r{M;%
z2V1&>@PWAZU08%@y3P*H5HDvCEs*+Nf<#E7VD1d%kg;{MgStapZ0WS!!FJAIHy{lu
z4hUXP;pPGH^KgT>pOND5f<Pdk;2-S&?&3la>HpPO2q*xg5JWt<O%X8>Ll6-F1vIE?
zb9v(4-#v%Usn?{EqGLJ6eA<_{oz%I-=J}U0RMt!8g!Qjr!uSdJSQ|U(jzL1$wcPHU
z-W7Jc(`x|&s))G#F<2};dHbOjjJKyn<oqk#CIdf4Moe9lxsi%_3?&T$nA`<&j|paQ
z=8hn{O*D$hq1UuyLc%Y=f&7w6J+SSa4yoQQ$9Hc7!TuWE^FK5YAVi622u%5mF=^zz
zqpg~VoUUjaH6RUH4U@<Yg^x?;&oJaGb8n4XdW_lLwY5HcQ@EY9Pfv>yfMLOsCaB^d
z*L267yY3kHT=FIcjFPUcRcPA^NDFI;Bm!xo7AV;B)G^1L#G_=~VM9;NnaMAR=qAlo
zmEM{{Zf-*|Fa4RZYo+HGcm@g)*Rl(FQDK-?$EUNcBmG+J=Gp?lg--O0oXOrKO#5Rm
z<?HFM560(%kLPy`q^ImFP-{wzZkw06)(Rp%QJUXzHR((7W$3PL55+F2aK6fj?Gf!l
zYAm!jpIPKQDv#-v)noQiETckylmoKJ$vskiW43l$pC5bYi!vb|m?nadn->mJ7%^V*
z?o*;*bm{zlENotPU;sv%_>@kV+4W!r@V%z!alLXQ-SZ*obw=tYI+N?3V|^*xjBk;|
z26W{&C?R@JBh-SY{i*WMP+#0KJq&cvu3FoDB|?JUyV*bEq;)X<qyQ0q>m%ep1pfAN
zYFuOzWFiUQor2uD&}jNqZ8a<8I^QqD><ItrMDRNf?nDRxokSc4>{-<V@2^5C0UDss
z*g&_7R|)0p3&ihIz6|C+?K>nL36s=qOOJn`^*QsSKWIDz_s122Oxp#Zc4x0$yhNl$
z+{j*6MyrS2VziW$HR0>z2uFxLUENz&c1Q=F&e%CV>wt_U0=Z_i`zpF{%6PGt!U)P+
z|7L-nTf21?`)KqBW{E{9SjvK?;d=5-Y(tXPUK=2eo79wkn6>6%wahio{<0!LN_kz>
z<#FttqMC&1Y>fiX-6qPRB8vvWB4112ZT{-6bw{aq0ud6vEakas@w{T$tNF-}$Q0=w
zH|X&*FI4ayPYO3i-}1>_#tmE=21%oSp8gm=dQOK8KppMgd=xe(TuFPhUp^FQ@lg}$
zVxtr7;BEmZe&U$GM{9I4;L22As({;TE1A4AAEiHF3Fx&cuMg|?k~|HtogIJNLpa(P
z+_-o|A^!wAJr8i6ght91s+z)NO+TzoNq&rVRSliT(!;oU1cRD*zWbcH<Utm^JdIy?
zswv?;+ODF$5XD`j>t>dLoOdZsGp;+dpe2J=+iYw0DHrAFBxbF&)(>m<W8cu&q_Nw+
zgo@5idWVP>@~ffa<i(4Ybe#&ntlkNS-el|d1*sMOIeLRuyB>kSFteu%A-t01yyEn8
zc848g{<ESsZb)8s(<O+DLFYEQc-p(*2`T@A({6Z-2Vlc92s#|^gZ_Os(WEa*SNF6v
zmVGGn0jYJ$NXUar)(N2hdi_h#4IrG2XFuF^Qdg|qJx?|#)0HNZK2G8D8{eJw^cd~g
zy7N!bHFb7*@1{RIoe9?&ERue7cK7^@AJ<h9Gwv*6<1(U}E_bR>8Ie~%?rYu~a%uX3
z9_<7TZvc{X(nZ?FD93UJY?n>!s+pB!fDn`WI#uALQ5uC@rBe!BG5*nN;R&Jo1&1mq
zqOx4Yx3{R_Lh{?-5u}i$@ilblsT4tg=mRq2Z}K-6p5M;S@7%XTgl(WWrfH_p!aF4_
zCJDM>`29^rLNqoxi`qJ<*}RN_I8X6A^R3HS%>g#L;yV`{%^6MGVRtWNnfFG?`y<Di
z{7wVjdOsFZr_??zUhX6~h!XmiU`s>peyC(^{scpEgPm}sI1U764~pOs1nFrB(5{&J
zvK=#X8;*LqK2{B`i_293c4t0^rKuLR^Bh2p<OC+P3w3(N?e#f((en?_yfQ8Z1g+;D
zuVlwu;1zf9N2VF94JZ))0B<0%vU3BiYMM@jgXsrf3|7v#&ksI61~R^}{qSrIkHaTR
zuis!mrmoAS5ct;d%It=`|0i_fJa{!3+GqdsP8aAyidaZCvHc}up*{EOa`NL159XDb
zS>9S(<?}mJCo0<YZq4#2G<ung<obMrOoZa5$Pxup@^mR|5ehnHxDUXS%il@o@1*m8
zNjeFCyk~fU-K6g$$=~p|1^%|c-xm1W0{_bv`13tqN<;a+GDj!v2(fga<K@;+Mt~>x
zd$_L*{GX??e+mEb^Pim2zE?o@tIYFT!C%ij{$ng)4PJNn&rU%8Rl{G8EdEo2H9Wig
z%K^sU1OF&o!2k8{AJ+ak3;?)*pE3XMs+xbb!e49D|I~F(`rlWq|EcNsn7>wV|EY<Q
b{IB&~4P})3uX*sA9xC7^{L%Xr$36ES*G`zi

literal 0
HcmV?d00001