pax_global_header00006660000000000000000000000064151103646710014516gustar00rootroot0000000000000052 comment=e4db22eb29a318af9af70d72fbeffe10be32bfe5 mitmproxy_rs-0.12.8/000077500000000000000000000000001511036467100143625ustar00rootroot00000000000000mitmproxy_rs-0.12.8/.cargo/000077500000000000000000000000001511036467100155335ustar00rootroot00000000000000mitmproxy_rs-0.12.8/.cargo/config.toml000066400000000000000000000004741511036467100177020ustar00rootroot00000000000000[env] WINDIVERT_PATH = { value = "mitmproxy-windows/mitmproxy_windows/", relative = true } [target.x86_64-apple-darwin] rustflags = [ "-C", "link-arg=-undefined", "-C", "link-arg=dynamic_lookup", ] [target.aarch64-apple-darwin] rustflags = [ "-C", "link-arg=-undefined", "-C", "link-arg=dynamic_lookup", ] mitmproxy_rs-0.12.8/.github/000077500000000000000000000000001511036467100157225ustar00rootroot00000000000000mitmproxy_rs-0.12.8/.github/FUNDING.yml000066400000000000000000000000341511036467100175340ustar00rootroot00000000000000github: [decathorpe, mhils] mitmproxy_rs-0.12.8/.github/actions/000077500000000000000000000000001511036467100173625ustar00rootroot00000000000000mitmproxy_rs-0.12.8/.github/actions/setup/000077500000000000000000000000001511036467100205225ustar00rootroot00000000000000mitmproxy_rs-0.12.8/.github/actions/setup/action.yml000066400000000000000000000021701511036467100225220ustar00rootroot00000000000000name: 'setup' description: 'checkout, setup rust and python' inputs: rust-version: description: 'Rust version' required: true default: 'stable' extra-targets: description: 'Extra Rust targets' toolchain-args: description: 'Extra args for `rustup toolchain`' runs: using: "composite" steps: - uses: mhils/workflows/setup-python@3c9fc8f5b40cb8f3f1b81163f3f195cad843b09a # v18.0 # PyO3 wants recent Python on Windows. - run: rustup toolchain install ${{ inputs.rust-version }} --profile minimal ${{ inputs.toolchain-args }} shell: bash - if: runner.os == 'Linux' run: rustup toolchain install nightly --component rust-src shell: bash - run: rustup default ${{ inputs.rust-version }} shell: bash - if: inputs.extra-targets run: rustup target add ${{ inputs.extra-targets }} shell: bash - uses: mhils/workflows/rust-cache@5b6540d578f48644ffa5e955cedadc81034cb7d8 # v19.0 with: key: ${{ inputs.rust-version }} # proxy value for glibc version - if: runner.os == 'Linux' run: cargo install --locked bpf-linker@0.9.15 shell: bash mitmproxy_rs-0.12.8/.github/dependabot.yml000066400000000000000000000011221511036467100205460ustar00rootroot00000000000000version: 2 updates: - package-ecosystem: github-actions directory: "/" schedule: interval: "monthly" groups: dependencies: patterns: - "*" - package-ecosystem: cargo directory: "/" schedule: interval: "monthly" groups: # If a dependency matches more than one rule, it's included in the first group that it matches. # Any outdated dependencies that do not match a rule are updated in individual pull requests. windows: patterns: - "windows" dependencies: patterns: - "*" mitmproxy_rs-0.12.8/.github/python-version.txt000066400000000000000000000000051511036467100214620ustar00rootroot000000000000003.12 mitmproxy_rs-0.12.8/.github/scripts/000077500000000000000000000000001511036467100174115ustar00rootroot00000000000000mitmproxy_rs-0.12.8/.github/scripts/build-macos-redirector.sh000077500000000000000000000042671511036467100243200ustar00rootroot00000000000000#!/usr/bin/env bash set -eou pipefail if [ -n "${APPLE_ID-}" ]; then echo "Signing keys available, building signed binary..." APPLE_TEAM_ID=S8XHQB96PW # Install provisioning profiles mkdir -p ~/Library/MobileDevice/Provisioning\ Profiles echo -n "$APPLE_PROVISIONING_PROFILE_APP" | base64 --decode -o ~/Library/MobileDevice/Provisioning\ Profiles/app.provisionprofile echo -n "$APPLE_PROVISIONING_PROFILE_EXT" | base64 --decode -o ~/Library/MobileDevice/Provisioning\ Profiles/ext.provisionprofile # Create temporary keychain KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain security create-keychain -p "app-signing" $KEYCHAIN_PATH security set-keychain-settings -lut 21600 $KEYCHAIN_PATH security unlock-keychain -p "app-signing" $KEYCHAIN_PATH # Import certificate to keychain security import <(echo -n "$APPLE_CERTIFICATE") -A -k $KEYCHAIN_PATH security list-keychain -s $KEYCHAIN_PATH mkdir build xcodebuild \ -scheme macos-redirector \ -archivePath build/macos-redirector.xcarchive \ OTHER_CODE_SIGN_FLAGS="--keychain $KEYCHAIN_PATH" \ archive xcodebuild \ -exportArchive \ -archivePath build/macos-redirector.xcarchive \ -exportOptionsPlist ./ExportOptions.plist \ -exportPath ./build # Notarize # https://developer.apple.com/documentation/security/notarizing_macos_software_before_distribution/customizing_the_notarization_workflow xcrun notarytool store-credentials "AC_PASSWORD" \ --keychain "$KEYCHAIN_PATH" \ --apple-id "$APPLE_ID" \ --team-id "$APPLE_TEAM_ID" \ --password "$APPLE_APP_PASSWORD" ditto -c -k --keepParent "./build/Mitmproxy Redirector.app" "./build/Mitmproxy Redirector.zip" xcrun notarytool submit \ "./build/Mitmproxy Redirector.zip" \ --keychain "$KEYCHAIN_PATH" \ --keychain-profile "AC_PASSWORD" \ --wait xcrun stapler staple "./build/Mitmproxy Redirector.app" mkdir -p dist tar --create --file "./dist/Mitmproxy Redirector.app.tar" --cd "./build" "Mitmproxy Redirector.app" else echo "Signing keys not available, building unsigned binary..." xcodebuild -scheme macos-redirector CODE_SIGNING_ALLOWED="NO" build mkdir -p dist touch "dist/Mitmproxy Redirector.app.tar" fi mitmproxy_rs-0.12.8/.github/scripts/pin-versions.py000066400000000000000000000010061511036467100224140ustar00rootroot00000000000000#!/usr/bin/env python3 import tomllib from pathlib import Path with open("Cargo.toml", "rb") as f: version = tomllib.load(f)["workspace"]["package"]["version"] pyproject_toml = Path("mitmproxy-rs/pyproject.toml") contents = pyproject_toml.read_text() contents = ( contents .replace(f"mitmproxy_windows", f"mitmproxy_windows=={version}") .replace(f"mitmproxy_linux", f"mitmproxy_linux=={version}") .replace(f"mitmproxy_macos", f"mitmproxy_macos=={version}") ) pyproject_toml.write_text(contents) mitmproxy_rs-0.12.8/.github/scripts/release000077500000000000000000000013021511036467100207530ustar00rootroot00000000000000#!/usr/bin/env -S python3 -u import logging from releasetool import branch from releasetool import get_next_dev_version from releasetool import git_commit from releasetool import git_push from releasetool import git_tag from releasetool import status_check from releasetool import update_changelog from releasetool import update_rust_version logger = logging.getLogger(__name__) if __name__ == "__main__": status_check() update_changelog() update_rust_version() git_commit() git_tag() if branch == "main": update_rust_version(version=get_next_dev_version()) git_commit(message="reopen main for development") git_push() logger.info("✅ All done. 🥳") mitmproxy_rs-0.12.8/.github/workflows/000077500000000000000000000000001511036467100177575ustar00rootroot00000000000000mitmproxy_rs-0.12.8/.github/workflows/autofix.yml000066400000000000000000000035271511036467100221700ustar00rootroot00000000000000name: autofix.ci on: pull_request: permissions: contents: read concurrency: group: ${{ github.workflow }}-${{ github.ref }} cancel-in-progress: true env: MSRV: "1.86" # Minimum Supported Rust Version jobs: protobuf: runs-on: macos-latest steps: - uses: mhils/workflows/checkout@5b6540d578f48644ffa5e955cedadc81034cb7d8 # v18.0 # FIXME: https://github.com/mitmproxy/mitmproxy/issues/7877 - bump SwiftProtobuf and then re-add this here. # - run: brew install swift-protobuf - run: brew install protobuf - run: cargo install protoc-gen-prost - run: protoc --proto_path=./src/ipc/ mitmproxy_ipc.proto --prost_out=./src/ipc/ --prost_opt="bytes=data" # --swift_out=./mitmproxy-macos/redirector/ipc - run: cargo fmt --all - uses: autofix-ci/action@635ffb0c9798bd160680f18fd73371e355b85f27 rustfmt: runs-on: ${{ matrix.os }} strategy: matrix: include: - os: windows-latest - os: macos-latest - os: ubuntu-latest steps: - uses: mhils/workflows/checkout@5b6540d578f48644ffa5e955cedadc81034cb7d8 # v18.0 - uses: ./.github/actions/setup with: rust-version: ${{ env.MSRV }} toolchain-args: --component rustfmt --component clippy # We could run clippy on mitmproxy-linux-ebpf with # cargo +nightly clippy --workspace -- -C panic=abort -Zpanic_abort_tests # but that means we'd use nightly clippy, which may change its behavior (and thus break CI). # So we rather exempt mitmproxy-linux-ebpf from clippy lints. - run: cargo clippy --fix --allow-dirty --workspace --exclude mitmproxy-linux-ebpf - run: cargo fmt --all - run: git checkout src/ipc/mitmproxy_ipc.rs - uses: autofix-ci/action@635ffb0c9798bd160680f18fd73371e355b85f27 mitmproxy_rs-0.12.8/.github/workflows/ci.yml000066400000000000000000000215121511036467100210760ustar00rootroot00000000000000name: CI on: push: branches: - main tags: - 'v[0-9]+.[0-9]+.[0-9]+' pull_request: permissions: contents: read concurrency: group: ${{ github.workflow }}-${{ github.ref }} cancel-in-progress: true jobs: test: runs-on: ${{ matrix.os }} strategy: matrix: include: - os: windows-latest rust: "1.86" # MSRV - can't use variables here. args: --exclude mitmproxy-linux-ebpf - os: macos-latest rust: "1.86" # MSRV - can't use variables here. args: --exclude mitmproxy-linux-ebpf - os: ubuntu-22.04 rust: "1.86" # MSRV - can't use variables here. args: --exclude mitmproxy-linux-ebpf - os: ubuntu-latest rust: stable args: --exclude mitmproxy-linux-ebpf - os: ubuntu-latest # old Ubuntu to test eBPF verifier compatibility rust: nightly args: --package mitmproxy-linux-ebpf env: RUSTFLAGS: ${{ matrix.rust == 'nightly' && '-Zpanic_abort_tests -C panic=abort' || '' }} steps: - uses: mhils/workflows/checkout@5b6540d578f48644ffa5e955cedadc81034cb7d8 # v18.0 - uses: ./.github/actions/setup with: rust-version: ${{ matrix.rust }} - name: Run "cargo check" # the action-rs/cargo action adds inline annotations for "cargo check" output uses: actions-rs/cargo@9e120dd99b0fbad1c065f686657e914e76bd7b72 with: toolchain: ${{ matrix.rust }} command: check args: --workspace --verbose ${{ matrix.args }} - if: matrix.rust != 'nightly' # XXX: weird errors here name: Run "cargo test" # the action-rs/cargo action adds inline annotations for "cargo test" output uses: actions-rs/cargo@9e120dd99b0fbad1c065f686657e914e76bd7b72 with: toolchain: ${{ matrix.rust }} command: test args: --workspace --verbose ${{ matrix.args }} - if: matrix.os == 'ubuntu-22.04' # Test that eBPF loads run: cargo test --features root-tests working-directory: mitmproxy-linux env: CARGO_TARGET_X86_64_UNKNOWN_LINUX_GNU_RUNNER: sudo -E build: strategy: matrix: include: - name: windows-x86_64 os: windows-latest - name: linux-x86_64 os: ubuntu-latest args: --compatibility manylinux2014 --zig --sdist - name: linux-arm64 os: ubuntu-24.04-arm args: --compatibility manylinux2014 --zig - name: macos-universal os: macos-latest target: aarch64-apple-darwin x86_64-apple-darwin args: --target universal2-apple-darwin runs-on: ${{ matrix.os }} name: build mitmproxy-rs (${{ matrix.name }}) steps: - uses: mhils/workflows/checkout@5b6540d578f48644ffa5e955cedadc81034cb7d8 # v18.0 - uses: ./.github/actions/setup with: extra-targets: ${{ matrix.target }} - if: runner.os == 'Linux' name: Install maturin[zig] from PyPI uses: install-pinned/maturin-with-zig@c69b784f32c6a34427a937c4887c928284a6d4cc - if: runner.os != 'Linux' name: Install maturin from PyPI uses: install-pinned/maturin@9f07e24f8a6ddec5e728f9a6ce2fd377213a9e4a - if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags') run: python .github/scripts/pin-versions.py - run: maturin build --release ${{ matrix.args }} working-directory: ./mitmproxy-rs # ensure that sdist is building. # We do this here instead of a separate job because we don't want to wait for the entire matrix. - if: contains(matrix.args, 'sdist') run: pip install --no-dependencies target/wheels/*.tar.gz - uses: actions/upload-artifact@v5 with: name: wheels-${{ matrix.name }} path: target/wheels build-macos-app: runs-on: macos-latest steps: - uses: mhils/workflows/checkout@5b6540d578f48644ffa5e955cedadc81034cb7d8 # v18.0 - if: ${{ !startsWith(github.ref, 'refs/tags/') }} # harden against cache poisoning uses: actions/cache@v4 id: cache-app with: path: mitmproxy-macos/redirector/dist/ key: macos-${{ hashFiles('mitmproxy-macos/redirector/**', '.github/scripts/build-macos-redirector.sh') }} - if: steps.cache-app.outputs.cache-hit != 'true' || hashFiles('mitmproxy-macos/redirector/dist/Mitmproxy Redirector.app.tar') == '' run: $GITHUB_WORKSPACE/.github/scripts/build-macos-redirector.sh working-directory: mitmproxy-macos/redirector env: APPLE_ID: ${{ secrets.APPLE_ID }} APPLE_APP_PASSWORD: ${{ secrets.APPLE_APP_PASSWORD }} APPLE_PROVISIONING_PROFILE_APP: ${{ secrets.APPLE_PROVISIONING_PROFILE_APP }} APPLE_PROVISIONING_PROFILE_EXT: ${{ secrets.APPLE_PROVISIONING_PROFILE_EXT }} APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }} - uses: actions/upload-artifact@v5 with: name: macos-app path: mitmproxy-macos/redirector/dist/ build-windows-wheel: runs-on: windows-latest name: build mitmproxy-windows steps: - uses: mhils/workflows/checkout@5b6540d578f48644ffa5e955cedadc81034cb7d8 # v18.0 - uses: ./.github/actions/setup - uses: install-pinned/build@80919007c59a8977ba4eedf1f3234e73f674aa2e - run: cargo build --release --package windows-redirector - run: python -m build --wheel ./mitmproxy-windows --outdir target/wheels/ - uses: actions/upload-artifact@v5 with: name: wheels-os-windows path: target/wheels build-macos-wheel: name: build mitmproxy-macos needs: build-macos-app runs-on: macos-latest steps: - uses: mhils/workflows/checkout@5b6540d578f48644ffa5e955cedadc81034cb7d8 # v18.0 - uses: ./.github/actions/setup with: extra-targets: aarch64-apple-darwin x86_64-apple-darwin - uses: install-pinned/build@80919007c59a8977ba4eedf1f3234e73f674aa2e - run: | cargo build --release --package macos-certificate-truster --target x86_64-apple-darwin cargo build --release --package macos-certificate-truster --target aarch64-apple-darwin lipo -create -output target/release/macos-certificate-truster target/x86_64-apple-darwin/release/macos-certificate-truster target/aarch64-apple-darwin/release/macos-certificate-truster - uses: actions/download-artifact@v6 with: name: macos-app path: mitmproxy-macos/redirector/dist/ - run: python -m build --wheel ./mitmproxy-macos --outdir target/wheels/ - uses: actions/upload-artifact@v5 with: name: wheels-os-macos path: target/wheels build-linux-wheel: name: build mitmproxy-${{ matrix.name }} strategy: matrix: include: - name: linux-x86_64 os: ubuntu-latest args: --compatibility manylinux2014 --zig --sdist - name: linux-arm64 os: ubuntu-24.04-arm args: --compatibility manylinux2014 --zig runs-on: ${{ matrix.os }} steps: - uses: mhils/workflows/checkout@5b6540d578f48644ffa5e955cedadc81034cb7d8 # v18.0 - uses: ./.github/actions/setup - name: Install maturin[zig] from PyPI uses: install-pinned/maturin-with-zig@c69b784f32c6a34427a937c4887c928284a6d4cc - run: maturin build --release ${{ matrix.args }} working-directory: ./mitmproxy-linux - run: test -f target/wheels/*-py3-none-*.whl # ensure we have a universal wheel - uses: actions/upload-artifact@v5 with: name: wheels-os-${{ matrix.name }} path: target/wheels test-linux-wheel-sdist: needs: build-linux-wheel runs-on: ubuntu-latest steps: - uses: mhils/workflows/checkout@5b6540d578f48644ffa5e955cedadc81034cb7d8 # v18.0 - uses: ./.github/actions/setup - uses: actions/download-artifact@v6 with: name: wheels-os-linux-x86_64 path: target/wheels - run: pip install --no-dependencies target/wheels/*.tar.gz check: if: always() needs: - test - test-linux-wheel-sdist - build - build-windows-wheel - build-linux-wheel - build-macos-wheel uses: mhils/workflows/.github/workflows/alls-green.yml@5b6540d578f48644ffa5e955cedadc81034cb7d8 # v18.0 with: jobs: ${{ toJSON(needs) }} deploy: uses: mhils/workflows/.github/workflows/python-deploy.yml@5b6540d578f48644ffa5e955cedadc81034cb7d8 # v18.0 needs: check if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags') with: artifact-pattern: wheels-* artifact-merge-multiple: true # repository: testpypi # environment: deploy-testpypi secrets: password: ${{ secrets.PYPI_TOKEN }} mitmproxy_rs-0.12.8/.github/workflows/docs.yml000066400000000000000000000032551511036467100214370ustar00rootroot00000000000000name: docs on: push: branches: - main pull_request: # security: restrict permissions for CI jobs. permissions: contents: read concurrency: group: ${{ github.workflow }}-${{ github.ref }} cancel-in-progress: true jobs: # Build the documentation and upload the static HTML files as an artifact. build: runs-on: ubuntu-latest steps: # TODO: This should ideally just reuse the main CI artifacts. - uses: mhils/workflows/checkout@5b6540d578f48644ffa5e955cedadc81034cb7d8 # v18.0 - uses: ./.github/actions/setup - uses: install-pinned/maturin-with-zig@c69b784f32c6a34427a937c4887c928284a6d4cc - uses: install-pinned/mypy@75779f141592e4909d64e13f8a1861f06aa9cd8d - uses: install-pinned/pdoc@69ba59f9699df21e1026110af4ec6b10a98cf5cd - run: maturin build --features docs,pyo3/extension-module working-directory: ./mitmproxy-rs - run: pip install --no-index --no-dependencies --find-links target/wheels/ mitmproxy_rs - run: stubtest --allowlist mitmproxy-rs/stubtest-allowlist.txt --mypy-config-file mitmproxy-rs/pyproject.toml mitmproxy_rs - run: pdoc -o docs/ mitmproxy_rs - uses: actions/upload-pages-artifact@v4 with: path: docs/ # Deploy the artifact to GitHub pages. # This is a separate job so that only actions/deploy-pages has the necessary permissions. deploy: if: github.ref == 'refs/heads/main' needs: build runs-on: ubuntu-latest permissions: pages: write id-token: write environment: name: github-pages url: ${{ steps.deployment.outputs.page_url }} steps: - id: deployment uses: actions/deploy-pages@v4 mitmproxy_rs-0.12.8/.github/workflows/release.yml000066400000000000000000000014501511036467100221220ustar00rootroot00000000000000name: Release on: workflow_dispatch: inputs: version: description: 'Version (major.minor.patch)' required: true type: string skip-branch-status-check: description: 'Skip CI status check.' default: false required: false type: boolean permissions: {} jobs: release: environment: deploy runs-on: ubuntu-latest steps: - uses: actions/checkout@v5 with: token: ${{ secrets.GH_PUSH_TOKEN }} # this token works to push to the protected main branch. persist-credentials: true # needed by release tool - uses: mhils/releasetool@v1 - run: ./.github/scripts/release env: PROJECT_VERSION: ${{ inputs.version }} STATUS_CHECK_SKIP_GIT: ${{ inputs.skip-branch-status-check }}mitmproxy_rs-0.12.8/.gitignore000066400000000000000000000001421511036467100163470ustar00rootroot00000000000000/.idea/ /dist/ /out/ /target/ /venv/ /docs/ __pycache__/ *.xcuserstate editable.marker *.DS_Store mitmproxy_rs-0.12.8/CHANGELOG.md000066400000000000000000000235331511036467100162010ustar00rootroot00000000000000## Unreleased: mitmproxy_rs next ## 22 November 2025: mitmproxy_rs 0.12.8 ## 15 July 2025: mitmproxy_rs 0.12.7 - Add folder support for protobuf parser. - Update dependencies. ## 31 May 2025: mitmproxy_rs 0.12.6 - Add JS syntax highlighting. - Add CSS syntax highlighting. ## 30 May 2025: mitmproxy_rs 0.12.5 - Add `mitmproxz_rs.syntax_highlight.languages()`. ## 30 May 2025: mitmproxy_rs 0.12.4 - Fix a bug where macOS local capture mode wouldn't clean up connections and stop working after a while. The changes may break half-closed TCP streams. - tun mode: allow using a pre-configured persistent tun interface, to avoid requiring CAP_NET_ADMIN. ## 29 April 2025: mitmproxy_rs 0.12.3 - Various fixes for Protobuf number encoding. ## 29 April 2025: mitmproxy_rs 0.12.2 - Make gRPC and Protobuf parsing more forgiving. ## 29 April 2025: mitmproxy_rs 0.12.1 - Contentview bugfixes. ## 14 April 2025: mitmproxy_rs 0.12.0 - Add `mitmproxy_rs.contentviews` module with MsgPack, Protobuf, and gRPC views. - Add `mitmproxy_rs.syntax_highlight` module with YAML and HTML support. - Wireguard: Bind server to specified address only. ## 17 February 2025: mitmproxy_rs 0.11.5 - Fix a bug where buffer space wasn't reclaimed correctly, leading to an error in local capture mode. - macOS: Make sure an existing network extension is replaced if a newer version is available. - macOS: Fix a bug where IPv6 addresses with scope ids were not parsed correctly. - Improve error message if `bpf-linker` is missing. ## 06 January 2025: mitmproxy_rs 0.11.4 - Fix PyInstaller hooks to include `mitmproxy_linux`. ## 05 January 2025: mitmproxy_rs 0.11.3 - Fix CI to build wheels compatible with Python 3.13 for mitmproxy-linux. ## 03 January 2025: mitmproxy_rs 0.11.2 - Add local redirect mode for Linux. - Update dependencies. ## 11 December 2024: mitmproxy_rs 0.11.1 - Update twine to fix the deploy CI. ## 10 December 2024: mitmproxy_rs 0.11.0 - Add `LocalRedirector.unavailable_reason()` and `TunInterface.unavailable_reason()`. - Add `active_processes()` on Linux. ## 28 October 2024: mitmproxy_rs 0.10.7 - tun mode: disable rp_filter, remove debug logging. ## 28 October 2024: mitmproxy_rs 0.10.6 - tun mode: re-add debug logging. ## 27 October 2024: mitmproxy_rs 0.10.5 - tun mode: add default netmask ## 27 October 2024: mitmproxy_rs 0.10.4 - Remove superfluous debug logs. ## 27 October 2024: mitmproxy_rs 0.10.3 - Add more debug info. ## 27 October 2024: mitmproxy_rs 0.10.2 - Add debug info. ## 27 October 2024: mitmproxy_rs 0.10.1 - Assign a local IP address to our `tun` interface for Linux compatibility. ## 27 October 2024: mitmproxy_rs 0.10.0 - Add `tun` mode. ## 18 October 2024: mitmproxy_rs 0.9.3 - Improve error messages for better debugging. ## 02 October 2024: mitmproxy_rs 0.9.2 - Improve error messages for better debugging. ## 06 September 2024: mitmproxy_rs 0.9.1 - Actually better speculative fix. ## 05 September 2024: mitmproxy_rs 0.9.0 - Better speculative fix. ## 04 September 2024: mitmproxy_rs 0.8.1 - Speculative fix for stack overflows on Windows. ## 04 September 2024: mitmproxy_rs 0.8.0 - Move functionality into submodules. ## 0.7.2 - Make `active_executables` raise for invalid paths on Windows. ## 0.7.1 - Make DnsResolver.lookup_* methods return error numbers matching `getaddrinfo`. ## 0.7.0 - Set IPV6_V6ONLY flag for UDP sockets ## 0.6.3 - Fix a bug when initializing local redirect mode on macOS. ## 0.6.2 - Handle errors when remote host has closed UDP socket ## 0.6.1 - Add dedicated IPv4/IPv6 resolution methods to the DNS resolver. ## 0.6.0 - Change intercept spec syntax. - Add DNS resolver. ## 0.5.2 - Dependency updates. ## 0.5.1 - Make server shutdown more robust. ## 0.5.0 - UDP connections are now modeled as streams. ## 0.4.0 - Renamed `OsProxy` to `LocalRedirector`. ## 0.3.9 - 0.3.11 - Various improvements to the `mitmproxy-macos` source distribution. ## 0.3.8 - `mitmproxy-macos` is now also distributed as a source distribution on PyPI. The source distribution contains some pre-compiled binaries built by our CI. This is necessary because the network system extension needs to be signed & notarized with a valid Apple Developer ID before it can be installed. ## 0.3.7 - Raise an ImportError if platform-specific dependencies are missing. ## 0.3.6 - Building from source does not require a protobuf compiler anymore. ## 0.3.1 - 0.3.5 - Improve transparent proxy functionality on macOS. ## 0.3.0 - Add transparent proxy functionality for macOS. This will receive a proper announcement later on. - Prefer a system-provided `PROTOC` env var if set. - Split mitmproxy_rs into three Python packages: mitmproxy-rs, mitmproxy-windows, and mitmproxy-macos. - `mitmproxy-rs` is a cross-platform package distributed both as sdist and wheels. Building from source requires a Rust compiler only, and optionally a Protobuf compiler. - `mitmproxy-windows` and `mitmproxy-macos` are distributed as precompiled wheels only on PyPI. Both can be built from source using a full git checkout (see the [build-os-wheels] CI job). Note that the macOS app needs to be signed and notarized using a valid Apple Developer Id for the system extension to work. [build-os-wheels]: https://github.com/mitmproxy/mitmproxy_rs/blob/main/.github/workflows/ci.yml ## 0.2.2 - Fall back to system-provided `protoc` if `protoc-bin-vendored` is not available. ## 0.2.1 - Fix source distributions on Linux and macOS. ## 0.2.0 - `mitmproxy_wireguard` is now `mitmproxy_rs`. As indicated by the name change, the scope of the project now goes beyond WireGuard. - Add transparent proxy functionality for Windows. This will receive a proper announcement later on. ## 0.1.18 - Expose the "original" (i.e. not the address inside the WireGuard tunnel) source address of WireGuard UDP packets in TcpStream via `TcpStream.get_extra_info("original_src")`. - Internal refactoring to simplify code for spawning TCP connection handler coroutines, which makes it possible to check whether they raised an exception (which were previously just silently ignored). - Update all Rust dependencies, including an update to PyO3 v0.17.3, which is the first release that marked support for Python 3.11 as official. ## 0.1.17 - Ensure that the virtual network device does not block unnecessarily and that it is always polled when necessary. Fixes a regression that was introduced in version 0.1.16. ## 0.1.16 - Optimize event processing in the internal network stack by always consuming as many events as possible before polling the virtual network device and processing open TCP sockets. - Ensure that only one TCP socket is created per connection, even if `SYN` packets are resent for some reason. - Channel sizes for processing events in the internal network stack are increased to avoid errors with full channels when some tasks don't keep up. - Logging calls are removed from the network task's hot loop unless the project is built in `debug` mode. - Failures to send to channels that were already closed when processing data that was received for sockets are now ignored to avoid crashes. ## 0.1.15 - Manually include source files for the test client binary in published `sdist`s to ensure the sources which are published on PyPI can actually be built. ## 0.1.14 - Increase buffer size for WireGuard packets to accommodate large outgoing packets. - Check length of outgoing packets and drop packets that are larger than the maximum possible WireGuard packet payload (maximum packet size - WireGuard header length) to avoid crashes with super-sized packets. ## 0.1.13 - Update dependencies to the latest versions (pyo3 v0.17, pyo3-asyncio v0.17, pyo3-log v0.7), now that pyo3-asyncio v0.17 was released with pyo3 v0.17 support. - Switch back from patched version of pyo3-asyncio to the official releases, since v0.17 incorporates our patch. ## 0.1.12 - Fix a race condition in the shutdown code that could cause shutdown to never happen. - Make logger setup more robust and only try to initialize once. ## 0.1.11 - Make failures to initialize the Rust -> Python logger non-fatal. ## 0.1.10 - Temporarily use a patched version of `pyo3-asyncio` to fix a race condition in the handling of Python `Future`s which caused frequent race conditions. - Implement `is_closing(self) -> bool` method on `TcpStream` to match `asyncio.StreamWriter`. ## 0.1.9 - Simplified GitHub actions for CI and publishing wheels to PyPI. - Failed sub-tasks are now handled immediately and cause a server shutdown instead of silently returning and only yielding an error when shutting down the server manually. ## 0.1.8 - Fix building binary wheels for `aarch64-unknown-linux-gnu`. ## 0.1.7 - Do not exit the network task when a draining TcpStream is already closed. - Make log messages for "no current WireGuard session" more user-friendly. - Attempt to build binary wheels for `aarch64-unknown-linux-gnu` for Raspberry Pi support. ## 0.1.6 - Fix test client to only send valid packets. ## 0.1.5 - Adapt the test client to handle EAGAIN gracefully. ## 0.1.4 - Split test client into separate workspace crate to speed up builds and hopefully fix them on macOS. ## 0.1.3 - Adapt test client to produce packets with correct checksums. - Build test client binaries in the `publish` GitHub Action. - Stop building binary wheels for 32-bit Linux and Windows targets. - Validate TCP checksums and reject invalid incoming packets early. - Lower priority of log messages for non-fatal `TcpStream` cleanup errors during server shutdown. ## 0.1.2 - Revert addition of `ChecksumCapabilities::ignored` to the virtual network device. This change in v0.1.1 completely broke TCP connection handling. ## 0.1.1 - Added a simple test client binary (`mitm-wg-test-client`). - Ignore TCP checksums in network device code, they are already checked in other places. - Port to boringtun v0.5. ## 0.1.0 Initial Release. mitmproxy_rs-0.12.8/CONTRIBUTING.md000077500000000000000000000035051511036467100166210ustar00rootroot00000000000000# Contributing ## Development Setup To get started hacking on mitmproxy_rs, please [install mitmproxy as described in the main mitmproxy repository](https://github.com/mitmproxy/mitmproxy/blob/main/CONTRIBUTING.md#development-setup) and [install the latest Rust release](https://www.rust-lang.org/tools/install). Make sure that you have mitmproxy's virtualenv activated and then run the following: ```shell git clone https://github.com/mitmproxy/mitmproxy_rs.git cd mitmproxy_rs/mitmproxy-rs maturin develop ``` mitmproxy now uses your locally-compiled version of `mitmproxy_rs`. **After applying any changes to the Rust code, re-run `maturin develop` and restart mitmproxy** for changes to apply. ## Testing If you've followed the procedure above, you can run the basic test suite as follows: ```shell cargo test ``` Please ensure that all patches are accompanied by matching changes in the test suite. ## Code Style The format for Rust code is enforced by `cargo fmt`. Pull requests will be automatically fixed by CI. ## Introspecting the tokio runtime The asynchronous runtime can be introspected using `tokio-console` if the crate was built with the `tracing` feature: ```shell tokio-console http://localhost:6669 ``` There should be no task that is busy when the program is idle, i.e. there should be no busy waiting. ## Release Process If you are the current maintainer of mitmproxy_rs, you can perform the following steps to ship a release: 1. Make sure that CI is passing without errors. 2. Make sure that CHANGELOG.md is up-to-date with all entries in the "Unreleased" section. 3. Invoke the release workflow from the GitHub UI: https://github.com/mitmproxy/mitmproxy_rs/actions/workflows/release.yml 4. The spawned workflow run will require manual deploy confirmation on GitHub: https://github.com/mitmproxy/mitmproxy/actions mitmproxy_rs-0.12.8/Cargo.lock000066400000000000000000003476751511036467100163150ustar00rootroot00000000000000# This file is automatically @generated by Cargo. # It is not intended for manual editing. version = 4 [[package]] name = "addr2line" version = "0.24.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "dfbe277e56a376000877090da837660b4427aad530e3028d44e0bffe4f89a1c1" dependencies = [ "gimli", ] [[package]] name = "adler2" version = "2.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "512761e0bb2578dd7380c6baaa0f4ce03e84f95e960231d1dec8bf4d7d6e2627" [[package]] name = "aead" version = "0.5.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d122413f284cf2d62fb1b7db97e02edb8cda96d769b16e443a4f6195e35662b0" dependencies = [ "crypto-common", "generic-array", ] [[package]] name = "aho-corasick" version = "1.1.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8e60d3430d3a69478ad0993f19238d2df97c507009a52b3c10addcd7f6bcb916" dependencies = [ "memchr", ] [[package]] name = "allocator-api2" version = "0.2.21" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "683d7910e743518b0e34f1186f92494becacb047c7b6bf616c96772180fef923" [[package]] name = "anes" version = "0.1.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4b46cbb362ab8752921c97e041f5e366ee6297bd428a31275b9fcf1e380f7299" [[package]] name = "anstream" version = "0.6.18" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8acc5369981196006228e28809f761875c0327210a891e941f4c683b3a99529b" dependencies = [ "anstyle", "anstyle-parse", "anstyle-query", "anstyle-wincon", "colorchoice", "is_terminal_polyfill", "utf8parse", ] [[package]] name = "anstyle" version = "1.0.10" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "55cc3b69f167a1ef2e161439aa98aed94e6028e5f9a59be9a6ffb47aef1651f9" [[package]] name = "anstyle-parse" version = "0.2.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3b2d16507662817a6a20a9ea92df6652ee4f94f914589377d69f3b21bc5798a9" dependencies = [ "utf8parse", ] [[package]] name = "anstyle-query" version = "1.1.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "79947af37f4177cfead1110013d678905c37501914fba0efea834c3fe9a8d60c" dependencies = [ "windows-sys 0.59.0", ] [[package]] name = "anstyle-wincon" version = "3.0.7" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ca3534e77181a9cc07539ad51f2141fe32f6c3ffd4df76db8ad92346b003ae4e" dependencies = [ "anstyle", "once_cell", "windows-sys 0.59.0", ] [[package]] name = "anyhow" version = "1.0.100" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a23eb6b1614318a8071c9b2521f36b424b2c83db5eb3a0fead4a6c0809af6e61" dependencies = [ "backtrace", ] [[package]] name = "arc-swap" version = "1.7.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "69f7f8c3906b62b754cd5326047894316021dcfe5a194c8ea52bdd94934a3457" [[package]] name = "arrayvec" version = "0.7.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7c02d123df017efcdfbd739ef81735b36c5ba83ec3c59c80a9d7ecc718f92e50" [[package]] name = "assert_matches" version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9b34d609dfbaf33d6889b2b7106d3ca345eacad44200913df5ba02bfd31d2ba9" [[package]] name = "async-channel" version = "2.3.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "89b47800b0be77592da0afd425cc03468052844aff33b84e33cc696f64e77b6a" dependencies = [ "concurrent-queue", "event-listener-strategy", "futures-core", "pin-project-lite", ] [[package]] name = "async-recursion" version = "1.1.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3b43422f69d8ff38f95f1b2bb76517c91589a924d1559a0e935d7c8ce0274c11" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "async-stream" version = "0.3.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0b5a71a6f37880a80d1d7f19efd781e4b5de42c88f0722cc13bcb6cc2cfe8476" dependencies = [ "async-stream-impl", "futures-core", "pin-project-lite", ] [[package]] name = "async-stream-impl" version = "0.3.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c7c24de15d275a1ecfd47a380fb4d5ec9bfe0933f309ed5e705b775596a3574d" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "async-task" version = "4.7.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8b75356056920673b02621b35afd0f7dda9306d03c79a30f5c56c44cf256e3de" [[package]] name = "async-trait" version = "0.1.88" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e539d3fca749fcee5236ab05e93a52867dd549cc157c8cb7f99595f3cedffdb5" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "atomic-waker" version = "1.1.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1505bd5d3d116872e7271a6d4e16d81d0c8570876c8de68093a09ac269d8aac0" [[package]] name = "autocfg" version = "1.4.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ace50bade8e6234aa140d9a2f552bbee1db4d353f69b8217bc503490fc1a9f26" [[package]] name = "axum" version = "0.7.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "edca88bc138befd0323b20752846e6587272d3b03b0343c8ea28a6f819e6e71f" dependencies = [ "async-trait", "axum-core", "bytes", "futures-util", "http", "http-body", "http-body-util", "itoa", "matchit", "memchr", "mime", "percent-encoding", "pin-project-lite", "rustversion", "serde", "sync_wrapper", "tower 0.5.2", "tower-layer", "tower-service", ] [[package]] name = "axum-core" version = "0.4.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "09f2bd6146b97ae3359fa0cc6d6b376d9539582c7b4220f041a33ec24c226199" dependencies = [ "async-trait", "bytes", "futures-util", "http", "http-body", "http-body-util", "mime", "pin-project-lite", "rustversion", "sync_wrapper", "tower-layer", "tower-service", ] [[package]] name = "aya" version = "0.13.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d18bc4e506fbb85ab7392ed993a7db4d1a452c71b75a246af4a80ab8c9d2dd50" dependencies = [ "assert_matches", "aya-obj", "bitflags 2.9.0", "bytes", "libc", "log", "object", "once_cell", "thiserror 1.0.69", "tokio", ] [[package]] name = "aya-build" version = "0.1.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "765c92c523541cbf5e3a94c7a6ff4068a4d9537f98a2eeb136461c0537ded8c1" dependencies = [ "anyhow", "cargo_metadata", ] [[package]] name = "aya-ebpf" version = "0.1.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d8dbaf5409a1a0982e5c9bdc0f499a55fe5ead39fe9c846012053faf0d404f73" dependencies = [ "aya-ebpf-bindings", "aya-ebpf-cty", "aya-ebpf-macros", "rustversion", ] [[package]] name = "aya-ebpf-bindings" version = "0.1.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "783dc1a82a3d71d83286165381dcc1b1d41643f4b110733d135547527c000a9a" dependencies = [ "aya-ebpf-cty", ] [[package]] name = "aya-ebpf-cty" version = "0.2.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2cce099aaf3abb89f9a1f8594ffe07fa53738ebc2882fac624d10d9ba31a1b10" [[package]] name = "aya-ebpf-macros" version = "0.1.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "72f47f7b4a75eb5f1d7ba0fb5628d247b1cf20388658899177875dabdda66865" dependencies = [ "proc-macro-error", "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "aya-log" version = "0.2.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b600d806c1d07d3b81ab5f4a2a95fd80f479a0d3f1d68f29064d660865f85f02" dependencies = [ "aya", "aya-log-common", "bytes", "log", "thiserror 1.0.69", "tokio", ] [[package]] name = "aya-log-common" version = "0.1.15" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "befef9fe882e63164a2ba0161874e954648a72b0e1c4b361f532d590638c4eec" dependencies = [ "num_enum", ] [[package]] name = "aya-log-ebpf" version = "0.1.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ae348f459df78a79e5cd5e164b6562b927033b97ca3b033605b341a474f44510" dependencies = [ "aya-ebpf", "aya-log-common", "aya-log-ebpf-macros", ] [[package]] name = "aya-log-ebpf-macros" version = "0.1.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f6d8251a75f56077db51892041aa6b77c70ef2723845d7a210979700b2f01bc4" dependencies = [ "aya-log-common", "aya-log-parser", "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "aya-log-parser" version = "0.1.13" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "14b102eb5c88c9aa0b49102d3fbcee08ecb0dfa81014f39b373311de7a7032cb" dependencies = [ "aya-log-common", ] [[package]] name = "aya-obj" version = "0.2.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c51b96c5a8ed8705b40d655273bc4212cbbf38d4e3be2788f36306f154523ec7" dependencies = [ "bytes", "core-error", "hashbrown 0.15.2", "log", "object", "thiserror 1.0.69", ] [[package]] name = "backtrace" version = "0.3.74" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8d82cb332cdfaed17ae235a638438ac4d4839913cc2af585c3c6746e8f8bee1a" dependencies = [ "addr2line", "cfg-if", "libc", "miniz_oxide", "object", "rustc-demangle", "windows-targets 0.52.6", ] [[package]] name = "base64" version = "0.13.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9e1b586273c5702936fe7b7d6896644d8be71e6314cfe09d3167c95f712589e8" [[package]] name = "base64" version = "0.21.7" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9d297deb1925b89f2ccc13d7635fa0714f12c87adce1c75356b39ca9b7178567" [[package]] name = "base64" version = "0.22.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6" [[package]] name = "bitflags" version = "1.3.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a" [[package]] name = "bitflags" version = "2.9.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5c8214115b7bf84099f1309324e63141d4c5d7cc26862f97a0a857dbefe165bd" [[package]] name = "blake2" version = "0.10.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "46502ad458c9a52b69d4d4d32775c788b7a1b85e8bc9d482d92250fc0e3f8efe" dependencies = [ "digest", ] [[package]] name = "block" version = "0.1.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0d8c1fef690941d3e7788d328517591fecc684c084084702d6ff1641e993699a" [[package]] name = "block-buffer" version = "0.10.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71" dependencies = [ "generic-array", ] [[package]] name = "blocking" version = "1.6.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "703f41c54fc768e63e091340b424302bb1c29ef4aa0c7f10fe849dfb114d29ea" dependencies = [ "async-channel", "async-task", "futures-io", "futures-lite", "piper", ] [[package]] name = "boringtun" version = "0.6.0" source = "git+https://github.com/cloudflare/boringtun?rev=2f3c85f5c4a601018c10b464b1ca890d9504bf6e#2f3c85f5c4a601018c10b464b1ca890d9504bf6e" dependencies = [ "aead", "base64 0.13.1", "blake2", "chacha20poly1305", "hex", "hmac", "ip_network", "ip_network_table", "libc", "nix 0.25.1", "parking_lot", "rand_core 0.6.4", "ring", "tracing", "untrusted", "x25519-dalek", ] [[package]] name = "bumpalo" version = "3.17.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1628fb46dfa0b37568d12e5edd512553eccf6a22a78e8bde00bb4aed84d5bdbf" [[package]] name = "bytemuck" version = "1.23.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9134a6ef01ce4b366b50689c94f82c14bc72bc5d0386829828a2e2752ef7958c" [[package]] name = "byteorder" version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b" [[package]] name = "byteorder-lite" version = "0.1.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8f1fe948ff07f4bd06c30984e69f5b4899c516a3ef74f34df92a2df2ab535495" [[package]] name = "bytes" version = "1.10.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d71b6127be86fdcfddb610f7182ac57211d4b18a3e9c82eb2d17662f2227ad6a" [[package]] name = "c2rust-bitfields" version = "0.19.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "367e5d1b30f28be590b6b3868da1578361d29d9bfac516d22f497d28ed7c9055" dependencies = [ "c2rust-bitfields-derive", ] [[package]] name = "c2rust-bitfields-derive" version = "0.19.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a279db9c50c4024eeca1a763b6e0f033848ce74e83e47454bcf8a8a98f7b0b56" dependencies = [ "proc-macro2", "quote", "syn 1.0.109", ] [[package]] name = "camino" version = "1.1.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8b96ec4966b5813e2c0507c1f86115c8c5abaadc3980879c3424042a02fd1ad3" dependencies = [ "serde", ] [[package]] name = "cargo-platform" version = "0.1.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e35af189006b9c0f00a064685c727031e3ed2d8020f7ba284d78cc2671bd36ea" dependencies = [ "serde", ] [[package]] name = "cargo_metadata" version = "0.19.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "dd5eb614ed4c27c5d706420e4320fbe3216ab31fa1c33cd8246ac36dae4479ba" dependencies = [ "camino", "cargo-platform", "semver", "serde", "serde_json", "thiserror 2.0.12", ] [[package]] name = "cast" version = "0.3.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "37b2a672a2cb129a2e41c10b1224bb368f9f37a2b16b612598138befd7b37eb5" [[package]] name = "cc" version = "1.2.20" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "04da6a0d40b948dfc4fa8f5bbf402b0fc1a64a28dbf7d12ffd683550f2c1b63a" dependencies = [ "shlex", ] [[package]] name = "cfg-if" version = "1.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd" [[package]] name = "cfg_aliases" version = "0.2.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724" [[package]] name = "chacha20" version = "0.9.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c3613f74bd2eac03dad61bd53dbe620703d4371614fe0bc3b9f04dd36fe4e818" dependencies = [ "cfg-if", "cipher", "cpufeatures", ] [[package]] name = "chacha20poly1305" version = "0.10.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "10cd79432192d1c0f4e1a0fef9527696cc039165d729fb41b3f4f4f354c2dc35" dependencies = [ "aead", "chacha20", "cipher", "poly1305", "zeroize", ] [[package]] name = "ciborium" version = "0.2.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "42e69ffd6f0917f5c029256a24d0161db17cea3997d185db0d35926308770f0e" dependencies = [ "ciborium-io", "ciborium-ll", "serde", ] [[package]] name = "ciborium-io" version = "0.2.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "05afea1e0a06c9be33d539b876f1ce3692f4afea2cb41f740e7743225ed1c757" [[package]] name = "ciborium-ll" version = "0.2.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "57663b653d948a338bfb3eeba9bb2fd5fcfaecb9e199e87e1eda4d9e8b240fd9" dependencies = [ "ciborium-io", "half", ] [[package]] name = "cipher" version = "0.4.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "773f3b9af64447d2ce9850330c473515014aa235e6a783b02db81ff39e4a3dad" dependencies = [ "crypto-common", "inout", "zeroize", ] [[package]] name = "clap" version = "4.5.37" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "eccb054f56cbd38340b380d4a8e69ef1f02f1af43db2f0cc817a4774d80ae071" dependencies = [ "clap_builder", ] [[package]] name = "clap_builder" version = "4.5.37" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "efd9466fac8543255d3b1fcad4762c5e116ffe808c8a3043d4263cd4fd4862a2" dependencies = [ "anstream", "anstyle", "clap_lex", "strsim", ] [[package]] name = "clap_lex" version = "0.7.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f46ad14479a25103f283c0f10005961cf086d8dc42205bb44c46ac563475dca6" [[package]] name = "cocoa" version = "0.26.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ad36507aeb7e16159dfe68db81ccc27571c3ccd4b76fb2fb72fc59e7a4b1b64c" dependencies = [ "bitflags 2.9.0", "block", "cocoa-foundation", "core-foundation", "core-graphics 0.24.0", "foreign-types", "libc", "objc", ] [[package]] name = "cocoa-foundation" version = "0.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e14045fb83be07b5acf1c0884b2180461635b433455fa35d1cd6f17f1450679d" dependencies = [ "bitflags 2.9.0", "block", "core-foundation", "core-graphics-types", "libc", "objc", ] [[package]] name = "colorchoice" version = "1.0.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5b63caa9aa9397e2d9480a9b13673856c78d8ac123288526c37d7839f2a86990" [[package]] name = "concurrent-queue" version = "2.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4ca0197aee26d1ae37445ee532fefce43251d24cc7c166799f4d46817f1d3973" dependencies = [ "crossbeam-utils", ] [[package]] name = "console-api" version = "0.8.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8030735ecb0d128428b64cd379809817e620a40e5001c54465b99ec5feec2857" dependencies = [ "futures-core", "prost 0.13.5", "prost-types", "tonic", "tracing-core", ] [[package]] name = "console-subscriber" version = "0.4.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6539aa9c6a4cd31f4b1c040f860a1eac9aa80e7df6b05d506a6e7179936d6a01" dependencies = [ "console-api", "crossbeam-channel", "crossbeam-utils", "futures-task", "hdrhistogram", "humantime", "hyper-util", "prost 0.13.5", "prost-types", "serde", "serde_json", "thread_local", "tokio", "tokio-stream", "tonic", "tracing", "tracing-core", "tracing-subscriber", ] [[package]] name = "const-sha1" version = "0.3.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0d8a42181e0652c2997ae4d217f25b63c5337a52fd2279736e97b832fa0a3cff" [[package]] name = "core-error" version = "0.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "efcdb2972eb64230b4c50646d8498ff73f5128d196a90c7236eec4cbe8619b8f" dependencies = [ "version_check", ] [[package]] name = "core-foundation" version = "0.10.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b2a6cd9ae233e7f62ba4e9353e81a88df7fc8a5987b8d445b4d90c879bd156f6" dependencies = [ "core-foundation-sys", "libc", ] [[package]] name = "core-foundation-sys" version = "0.8.7" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b" [[package]] name = "core-graphics" version = "0.24.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "fa95a34622365fa5bbf40b20b75dba8dfa8c94c734aea8ac9a5ca38af14316f1" dependencies = [ "bitflags 2.9.0", "core-foundation", "core-graphics-types", "foreign-types", "libc", ] [[package]] name = "core-graphics" version = "0.25.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "064badf302c3194842cf2c5d61f56cc88e54a759313879cdf03abdd27d0c3b97" dependencies = [ "bitflags 2.9.0", "core-foundation", "core-graphics-types", "foreign-types", "libc", ] [[package]] name = "core-graphics-types" version = "0.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3d44a101f213f6c4cdc1853d4b78aef6db6bdfa3468798cc1d9912f4735013eb" dependencies = [ "bitflags 2.9.0", "core-foundation", "libc", ] [[package]] name = "cpufeatures" version = "0.2.17" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280" dependencies = [ "libc", ] [[package]] name = "crc32fast" version = "1.4.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a97769d94ddab943e4510d138150169a2758b5ef3eb191a9ee688de3e23ef7b3" dependencies = [ "cfg-if", ] [[package]] name = "criterion" version = "0.7.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e1c047a62b0cc3e145fa84415a3191f628e980b194c2755aa12300a4e6cbd928" dependencies = [ "anes", "cast", "ciborium", "clap", "criterion-plot", "itertools 0.13.0", "num-traits", "oorandom", "plotters", "rayon", "regex", "serde", "serde_json", "tinytemplate", "walkdir", ] [[package]] name = "criterion-plot" version = "0.6.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9b1bcc0dc7dfae599d84ad0b1a55f80cde8af3725da8313b528da95ef783e338" dependencies = [ "cast", "itertools 0.13.0", ] [[package]] name = "critical-section" version = "1.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "790eea4361631c5e7d22598ecd5723ff611904e3344ce8720784c93e3d83d40b" [[package]] name = "crossbeam-channel" version = "0.5.15" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "82b8f8f868b36967f9606790d1903570de9ceaf870a7bf9fbbd3016d636a2cb2" dependencies = [ "crossbeam-utils", ] [[package]] name = "crossbeam-deque" version = "0.8.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9dd111b7b7f7d55b72c0a6ae361660ee5853c9af73f70c3c2ef6858b950e2e51" dependencies = [ "crossbeam-epoch", "crossbeam-utils", ] [[package]] name = "crossbeam-epoch" version = "0.9.18" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5b82ac4a3c2ca9c3460964f020e1402edd5753411d7737aa39c3714ad1b5420e" dependencies = [ "crossbeam-utils", ] [[package]] name = "crossbeam-utils" version = "0.8.21" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d0a5c400df2834b80a4c3327b3aad3a4c4cd4de0629063962b03235697506a28" [[package]] name = "crunchy" version = "0.2.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "43da5946c66ffcc7745f48db692ffbb10a83bfe0afd96235c5c2a4fb23994929" [[package]] name = "crypto-common" version = "0.1.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1bfb12502f3fc46cca1bb51ac28df9d618d813cdc3d2f25b9fe775a34af26bb3" dependencies = [ "generic-array", "rand_core 0.6.4", "typenum", ] [[package]] name = "curve25519-dalek" version = "4.1.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be" dependencies = [ "cfg-if", "cpufeatures", "curve25519-dalek-derive", "fiat-crypto", "rustc_version", "subtle", "zeroize", ] [[package]] name = "curve25519-dalek-derive" version = "0.1.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "data-encoding" version = "2.9.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2a2330da5de22e8a3cb63252ce2abb30116bf5265e89c0e01bc17015ce30a476" [[package]] name = "defmt" version = "0.3.100" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f0963443817029b2024136fc4dd07a5107eb8f977eaf18fcd1fdeb11306b64ad" dependencies = [ "defmt 1.0.1", ] [[package]] name = "defmt" version = "1.0.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "548d977b6da32fa1d1fda2876453da1e7df63ad0304c8b3dae4dbe7b96f39b78" dependencies = [ "bitflags 1.3.2", "defmt-macros", ] [[package]] name = "defmt-macros" version = "1.0.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3d4fc12a85bcf441cfe44344c4b72d58493178ce635338a3f3b78943aceb258e" dependencies = [ "defmt-parser", "proc-macro-error2", "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "defmt-parser" version = "1.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "10d60334b3b2e7c9d91ef8150abfb6fa4c1c39ebbcf4a81c2e346aad939fee3e" dependencies = [ "thiserror 2.0.12", ] [[package]] name = "deranged" version = "0.4.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9c9e6a11ca8224451684bc0d7d5a7adbf8f2fd6887261a1cfc3c0432f9d4068e" dependencies = [ "powerfmt", ] [[package]] name = "digest" version = "0.10.7" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292" dependencies = [ "block-buffer", "crypto-common", "subtle", ] [[package]] name = "displaydoc" version = "0.2.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "97369cbbc041bc366949bc74d34658d6cda5621039731c6310521892a3a20ae0" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "either" version = "1.15.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "48c757948c5ede0e46177b7add2e67155f70e33c07fea8284df6576da70b3719" [[package]] name = "enum-as-inner" version = "0.6.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a1e6a265c649f3f5979b601d26f1d05ada116434c87741c9493cb56218f76cbc" dependencies = [ "heck", "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "env_filter" version = "0.1.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "186e05a59d4c50738528153b83b0b0194d3a29507dfec16eccd4b342903397d0" dependencies = [ "log", "regex", ] [[package]] name = "env_home" version = "0.1.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c7f84e12ccf0a7ddc17a6c41c93326024c42920d7ee630d04950e6926645c0fe" [[package]] name = "env_logger" version = "0.11.8" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "13c863f0904021b108aa8b2f55046443e6b1ebde8fd4a15c399893aae4fa069f" dependencies = [ "anstream", "anstyle", "env_filter", "jiff", "log", ] [[package]] name = "equivalent" version = "1.0.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f" [[package]] name = "errno" version = "0.3.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "976dd42dc7e85965fe702eb8164f21f450704bdde31faefd6471dba214cb594e" dependencies = [ "libc", "windows-sys 0.59.0", ] [[package]] name = "etherparse" version = "0.13.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "827292ea592108849932ad8e30218f8b1f21c0dfd0696698a18b5d0aed62d990" dependencies = [ "arrayvec", ] [[package]] name = "event-listener" version = "5.4.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3492acde4c3fc54c845eaab3eed8bd00c7a7d881f78bfc801e43a93dec1331ae" dependencies = [ "concurrent-queue", "parking", "pin-project-lite", ] [[package]] name = "event-listener-strategy" version = "0.5.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8be9f3dfaaffdae2972880079a491a1a8bb7cbed0b8dd7a347f668b4150a3b93" dependencies = [ "event-listener", "pin-project-lite", ] [[package]] name = "fastrand" version = "2.3.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "37909eebbb50d72f9059c3b6d82c0463f2ff062c9e95845c43a6c9c0355411be" [[package]] name = "fax" version = "0.2.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f05de7d48f37cd6730705cbca900770cab77a89f413d23e100ad7fad7795a0ab" dependencies = [ "fax_derive", ] [[package]] name = "fax_derive" version = "0.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a0aca10fb742cb43f9e7bb8467c91aa9bcb8e3ffbc6a6f7389bb93ffc920577d" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "fdeflate" version = "0.3.7" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1e6853b52649d4ac5c0bd02320cddc5ba956bdb407c4b75a2c6b75bf51500f8c" dependencies = [ "simd-adler32", ] [[package]] name = "fiat-crypto" version = "0.2.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d" [[package]] name = "filetime" version = "0.2.25" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "35c0522e981e68cbfa8c3f978441a5f34b30b96e146b33cd3359176b50fe8586" dependencies = [ "cfg-if", "libc", "libredox", "windows-sys 0.59.0", ] [[package]] name = "flate2" version = "1.1.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4a3d7db9596fecd151c5f638c0ee5d5bd487b6e0ea232e5dc96d5250f6f94b1d" dependencies = [ "crc32fast", "miniz_oxide", ] [[package]] name = "fnv" version = "1.0.7" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1" [[package]] name = "foldhash" version = "0.1.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d9c4f5dac5e15c24eb999c26181a6ca40b39fe946cbe4c263c7209467bc83af2" [[package]] name = "foreign-types" version = "0.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d737d9aa519fb7b749cbc3b962edcf310a8dd1f4b67c91c4f83975dbdd17d965" dependencies = [ "foreign-types-macros", "foreign-types-shared", ] [[package]] name = "foreign-types-macros" version = "0.2.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1a5c6c585bc94aaf2c7b51dd4c2ba22680844aba4c687be581871a6f518c5742" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "foreign-types-shared" version = "0.3.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "aa9a19cbb55df58761df49b23516a86d432839add4af60fc256da840f66ed35b" [[package]] name = "form_urlencoded" version = "1.2.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e13624c2627564efccf4934284bdd98cbaa14e79b0b5a141218e507b3a823456" dependencies = [ "percent-encoding", ] [[package]] name = "futures" version = "0.3.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "65bc07b1a8bc7c85c5f2e110c476c7389b4554ba72af57d8445ea63a576b0876" dependencies = [ "futures-channel", "futures-core", "futures-executor", "futures-io", "futures-sink", "futures-task", "futures-util", ] [[package]] name = "futures-channel" version = "0.3.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2dff15bf788c671c1934e366d07e30c1814a8ef514e1af724a602e8a2fbe1b10" dependencies = [ "futures-core", "futures-sink", ] [[package]] name = "futures-core" version = "0.3.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "05f29059c0c2090612e8d742178b0580d2dc940c837851ad723096f87af6663e" [[package]] name = "futures-executor" version = "0.3.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1e28d1d997f585e54aebc3f97d39e72338912123a67330d723fdbb564d646c9f" dependencies = [ "futures-core", "futures-task", "futures-util", ] [[package]] name = "futures-io" version = "0.3.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9e5c1b78ca4aae1ac06c48a526a655760685149f0d465d21f37abfe57ce075c6" [[package]] name = "futures-lite" version = "2.6.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f5edaec856126859abb19ed65f39e90fea3a9574b9707f13539acf4abf7eb532" dependencies = [ "futures-core", "pin-project-lite", ] [[package]] name = "futures-macro" version = "0.3.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "162ee34ebcb7c64a8abebc059ce0fee27c2262618d7b60ed8faf72fef13c3650" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "futures-sink" version = "0.3.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e575fab7d1e0dcb8d0c7bcf9a63ee213816ab51902e6d244a95819acacf1d4f7" [[package]] name = "futures-task" version = "0.3.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f90f7dce0722e95104fcb095585910c0977252f286e354b5e3bd38902cd99988" [[package]] name = "futures-util" version = "0.3.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9fa08315bb612088cc391249efdc3bc77536f16c91f6cf495e6fbe85b20a4a81" dependencies = [ "futures-channel", "futures-core", "futures-io", "futures-macro", "futures-sink", "futures-task", "memchr", "pin-project-lite", "pin-utils", "slab", ] [[package]] name = "generator" version = "0.8.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "cc6bd114ceda131d3b1d665eba35788690ad37f5916457286b32ab6fd3c438dd" dependencies = [ "cfg-if", "libc", "log", "rustversion", "windows 0.58.0", ] [[package]] name = "generic-array" version = "0.14.7" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a" dependencies = [ "typenum", "version_check", ] [[package]] name = "getrandom" version = "0.2.16" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "335ff9f135e4384c8150d6f27c6daed433577f86b4750418338c01a1a2528592" dependencies = [ "cfg-if", "libc", "wasi 0.11.0+wasi-snapshot-preview1", ] [[package]] name = "getrandom" version = "0.3.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "73fea8450eea4bac3940448fb7ae50d91f034f941199fcd9d909a5a07aa455f0" dependencies = [ "cfg-if", "libc", "r-efi", "wasi 0.14.2+wasi-0.2.4", ] [[package]] name = "gimli" version = "0.31.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "07e28edb80900c19c28f1072f2e8aeca7fa06b23cd4169cefe1af5aa3260783f" [[package]] name = "h2" version = "0.4.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "75249d144030531f8dee69fe9cea04d3edf809a017ae445e2abdff6629e86633" dependencies = [ "atomic-waker", "bytes", "fnv", "futures-core", "futures-sink", "http", "indexmap 2.9.0", "slab", "tokio", "tokio-util", "tracing", ] [[package]] name = "half" version = "2.6.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "459196ed295495a68f7d7fe1d84f6c4b7ff0e21fe3017b2f283c6fac3ad803c9" dependencies = [ "cfg-if", "crunchy", ] [[package]] name = "hash32" version = "0.3.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "47d60b12902ba28e2730cd37e95b8c9223af2808df9e902d4df49588d1470606" dependencies = [ "byteorder", ] [[package]] name = "hashbrown" version = "0.12.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8a9ee70c43aaf417c914396645a0fa852624801b24ebb7ae78fe8272889ac888" [[package]] name = "hashbrown" version = "0.15.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "bf151400ff0baff5465007dd2f3e717f3fe502074ca563069ce3a6629d07b289" dependencies = [ "allocator-api2", "equivalent", "foldhash", ] [[package]] name = "hdrhistogram" version = "7.5.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "765c9198f173dd59ce26ff9f95ef0aafd0a0fe01fb9d72841bc5066a4c06511d" dependencies = [ "base64 0.21.7", "byteorder", "flate2", "nom", "num-traits", ] [[package]] name = "heapless" version = "0.8.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0bfb9eb618601c89945a70e254898da93b13be0388091d42117462b265bb3fad" dependencies = [ "hash32", "stable_deref_trait", ] [[package]] name = "heck" version = "0.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea" [[package]] name = "hex" version = "0.4.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70" [[package]] name = "hickory-proto" version = "0.25.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6d844af74f7b799e41c78221be863bade11c430d46042c3b49ca8ae0c6d27287" dependencies = [ "async-recursion", "async-trait", "cfg-if", "critical-section", "data-encoding", "enum-as-inner", "futures-channel", "futures-io", "futures-util", "idna", "ipnet", "once_cell", "rand 0.9.2", "ring", "serde", "thiserror 2.0.12", "tinyvec", "tokio", "tracing", "url", ] [[package]] name = "hickory-resolver" version = "0.25.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "dc62a9a99b0bfb44d2ab95a7208ac952d31060efc16241c87eaf36406fecf87a" dependencies = [ "cfg-if", "futures-util", "hickory-proto", "ipconfig", "moka", "once_cell", "parking_lot", "rand 0.9.2", "resolv-conf", "smallvec", "thiserror 2.0.12", "tokio", "tracing", ] [[package]] name = "hickory-server" version = "0.25.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d53e5fe811b941c74ee46b8818228bfd2bc2688ba276a0eaeb0f2c95ea3b2585" dependencies = [ "async-trait", "bytes", "cfg-if", "data-encoding", "enum-as-inner", "futures-util", "hickory-proto", "ipnet", "prefix-trie", "serde", "thiserror 2.0.12", "time", "tokio", "tokio-util", "tracing", ] [[package]] name = "hmac" version = "0.12.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6c49c37c09c17a53d937dfbb742eb3a961d65a994e6bcdcf37e7399d0cc8ab5e" dependencies = [ "digest", ] [[package]] name = "home" version = "0.5.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "589533453244b0995c858700322199b2becb13b627df2851f64a2775d024abcf" dependencies = [ "windows-sys 0.59.0", ] [[package]] name = "hostname" version = "0.4.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a56f203cd1c76362b69e3863fd987520ac36cf70a8c92627449b2f64a8cf7d65" dependencies = [ "cfg-if", "libc", "windows-link", ] [[package]] name = "http" version = "1.3.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f4a85d31aea989eead29a3aaf9e1115a180df8282431156e533de47660892565" dependencies = [ "bytes", "fnv", "itoa", ] [[package]] name = "http-body" version = "1.0.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1efedce1fb8e6913f23e0c92de8e62cd5b772a67e7b3946df930a62566c93184" dependencies = [ "bytes", "http", ] [[package]] name = "http-body-util" version = "0.1.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b021d93e26becf5dc7e1b75b1bed1fd93124b374ceb73f43d4d4eafec896a64a" dependencies = [ "bytes", "futures-core", "http", "http-body", "pin-project-lite", ] [[package]] name = "httparse" version = "1.10.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6dbf3de79e51f3d586ab4cb9d5c3e2c14aa28ed23d180cf89b4df0454a69cc87" [[package]] name = "httpdate" version = "1.0.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "df3b46402a9d5adb4c86a0cf463f42e19994e3ee891101b1841f30a545cb49a9" [[package]] name = "humantime" version = "2.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9b112acc8b3adf4b107a8ec20977da0273a8c386765a3ec0229bd500a1443f9f" [[package]] name = "hyper" version = "1.6.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "cc2b571658e38e0c01b1fdca3bbbe93c00d3d71693ff2770043f8c29bc7d6f80" dependencies = [ "bytes", "futures-channel", "futures-util", "h2", "http", "http-body", "httparse", "httpdate", "itoa", "pin-project-lite", "smallvec", "tokio", "want", ] [[package]] name = "hyper-timeout" version = "0.5.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2b90d566bffbce6a75bd8b09a05aa8c2cb1fabb6cb348f8840c9e4c90a0d83b0" dependencies = [ "hyper", "hyper-util", "pin-project-lite", "tokio", "tower-service", ] [[package]] name = "hyper-util" version = "0.1.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "497bbc33a26fdd4af9ed9c70d63f61cf56a938375fbb32df34db9b1cd6d643f2" dependencies = [ "bytes", "futures-channel", "futures-util", "http", "http-body", "hyper", "libc", "pin-project-lite", "socket2 0.5.10", "tokio", "tower-service", "tracing", ] [[package]] name = "icu_collections" version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "db2fa452206ebee18c4b5c2274dbf1de17008e874b4dc4f0aea9d01ca79e4526" dependencies = [ "displaydoc", "yoke", "zerofrom", "zerovec", ] [[package]] name = "icu_locid" version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "13acbb8371917fc971be86fc8057c41a64b521c184808a698c02acc242dbf637" dependencies = [ "displaydoc", "litemap", "tinystr", "writeable", "zerovec", ] [[package]] name = "icu_locid_transform" version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "01d11ac35de8e40fdeda00d9e1e9d92525f3f9d887cdd7aa81d727596788b54e" dependencies = [ "displaydoc", "icu_locid", "icu_locid_transform_data", "icu_provider", "tinystr", "zerovec", ] [[package]] name = "icu_locid_transform_data" version = "1.5.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7515e6d781098bf9f7205ab3fc7e9709d34554ae0b21ddbcb5febfa4bc7df11d" [[package]] name = "icu_normalizer" version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "19ce3e0da2ec68599d193c93d088142efd7f9c5d6fc9b803774855747dc6a84f" dependencies = [ "displaydoc", "icu_collections", "icu_normalizer_data", "icu_properties", "icu_provider", "smallvec", "utf16_iter", "utf8_iter", "write16", "zerovec", ] [[package]] name = "icu_normalizer_data" version = "1.5.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c5e8338228bdc8ab83303f16b797e177953730f601a96c25d10cb3ab0daa0cb7" [[package]] name = "icu_properties" version = "1.5.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "93d6020766cfc6302c15dbbc9c8778c37e62c14427cb7f6e601d849e092aeef5" dependencies = [ "displaydoc", "icu_collections", "icu_locid_transform", "icu_properties_data", "icu_provider", "tinystr", "zerovec", ] [[package]] name = "icu_properties_data" version = "1.5.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "85fb8799753b75aee8d2a21d7c14d9f38921b54b3dbda10f5a3c7a7b82dba5e2" [[package]] name = "icu_provider" version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6ed421c8a8ef78d3e2dbc98a973be2f3770cb42b606e3ab18d6237c4dfde68d9" dependencies = [ "displaydoc", "icu_locid", "icu_provider_macros", "stable_deref_trait", "tinystr", "writeable", "yoke", "zerofrom", "zerovec", ] [[package]] name = "icu_provider_macros" version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1ec89e9337638ecdc08744df490b221a7399bf8d164eb52a665454e60e075ad6" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "idna" version = "1.0.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "686f825264d630750a544639377bae737628043f20d38bbc029e8f29ea968a7e" dependencies = [ "idna_adapter", "smallvec", "utf8_iter", ] [[package]] name = "idna_adapter" version = "1.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "daca1df1c957320b2cf139ac61e7bd64fed304c5040df000a745aa1de3b4ef71" dependencies = [ "icu_normalizer", "icu_properties", ] [[package]] name = "image" version = "0.25.8" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "529feb3e6769d234375c4cf1ee2ce713682b8e76538cb13f9fc23e1400a591e7" dependencies = [ "bytemuck", "byteorder-lite", "moxcms", "num-traits", "png", "tiff", ] [[package]] name = "indexmap" version = "1.9.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "bd070e393353796e801d209ad339e89596eb4c8d430d18ede6a1cced8fafbd99" dependencies = [ "autocfg", "hashbrown 0.12.3", ] [[package]] name = "indexmap" version = "2.9.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "cea70ddb795996207ad57735b50c5982d8844f38ba9ee5f1aedcfb708a2aa11e" dependencies = [ "equivalent", "hashbrown 0.15.2", ] [[package]] name = "indoc" version = "2.0.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f4c7245a08504955605670dbf141fceab975f15ca21570696aebe9d2e71576bd" [[package]] name = "inout" version = "0.1.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "879f10e63c20629ecabbb64a8010319738c66a5cd0c29b02d63d272b03751d01" dependencies = [ "generic-array", ] [[package]] name = "internet-checksum" version = "0.2.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "fc6d6206008e25125b1f97fbe5d309eb7b85141cf9199d52dbd3729a1584dd16" [[package]] name = "internet-packet" version = "0.2.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b6cfb28f710b057e47c991776879091bd1c706318cc724ce65c932474cd95e95" dependencies = [ "internet-checksum", "smoltcp", ] [[package]] name = "inventory" version = "0.3.20" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ab08d7cd2c5897f2c949e5383ea7c7db03fb19130ffcfbf7eda795137ae3cb83" dependencies = [ "rustversion", ] [[package]] name = "io-uring" version = "0.7.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d93587f37623a1a17d94ef2bc9ada592f5465fe7732084ab7beefabe5c77c0c4" dependencies = [ "bitflags 2.9.0", "cfg-if", "libc", ] [[package]] name = "ip_network" version = "0.4.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "aa2f047c0a98b2f299aa5d6d7088443570faae494e9ae1305e48be000c9e0eb1" [[package]] name = "ip_network_table" version = "0.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4099b7cfc5c5e2fe8c5edf3f6f7adf7a714c9cc697534f63a5a5da30397cb2c0" dependencies = [ "ip_network", "ip_network_table-deps-treebitmap", ] [[package]] name = "ip_network_table-deps-treebitmap" version = "0.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8e537132deb99c0eb4b752f0346b6a836200eaaa3516dd7e5514b63930a09e5d" [[package]] name = "ipconfig" version = "0.3.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b58db92f96b720de98181bbbe63c831e87005ab460c1bf306eb2622b4707997f" dependencies = [ "socket2 0.5.10", "widestring", "windows-sys 0.48.0", "winreg 0.50.0", ] [[package]] name = "ipnet" version = "2.11.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "469fb0b9cefa57e3ef31275ee7cacb78f2fdca44e4765491884a2b119d4eb130" dependencies = [ "serde", ] [[package]] name = "is_terminal_polyfill" version = "1.70.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7943c866cc5cd64cbc25b2e01621d07fa8eb2a1a23160ee81ce38704e97b8ecf" [[package]] name = "itertools" version = "0.13.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "413ee7dfc52ee1a4949ceeb7dbc8a33f2d6c088194d9f922fb8318faf1f01186" dependencies = [ "either", ] [[package]] name = "itertools" version = "0.14.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2b192c782037fadd9cfa75548310488aabdbf3d2da73885b31bd0abd03351285" dependencies = [ "either", ] [[package]] name = "itoa" version = "1.0.15" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4a5f13b858c8d314ee3e8f639011f7ccefe71f97f96e50151fb991f267928e2c" [[package]] name = "jiff" version = "0.2.10" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5a064218214dc6a10fbae5ec5fa888d80c45d611aba169222fc272072bf7aef6" dependencies = [ "jiff-static", "log", "portable-atomic", "portable-atomic-util", "serde", ] [[package]] name = "jiff-static" version = "0.2.10" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "199b7932d97e325aff3a7030e141eafe7f2c6268e1d1b24859b753a627f45254" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "js-sys" version = "0.3.77" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1cfaf33c695fc6e08064efbc1f72ec937429614f25eef83af942d0e227c3a28f" dependencies = [ "once_cell", "wasm-bindgen", ] [[package]] name = "lazy_static" version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "bbd2bcb4c963f2ddae06a2efc7e9f3591312473c50c6685e1f298068316e66fe" [[package]] name = "libc" version = "0.2.176" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "58f929b4d672ea937a23a1ab494143d968337a5f47e56d0815df1e0890ddf174" [[package]] name = "libloading" version = "0.8.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "fc2f4eb4bc735547cfed7c0a4922cbd04a4655978c09b54f1f7b228750664c34" dependencies = [ "cfg-if", "windows-targets 0.52.6", ] [[package]] name = "libredox" version = "0.1.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c0ff37bd590ca25063e35af745c343cb7a0271906fb7b37e4813e8f79f00268d" dependencies = [ "bitflags 2.9.0", "libc", "redox_syscall", ] [[package]] name = "linux-raw-sys" version = "0.4.15" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d26c52dbd32dccf2d10cac7725f8eae5296885fb5703b261f7d0a0739ec807ab" [[package]] name = "linux-raw-sys" version = "0.9.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "cd945864f07fe9f5371a27ad7b52a172b4b499999f1d97574c9fa68373937e12" [[package]] name = "litemap" version = "0.7.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "23fb14cb19457329c82206317a5663005a4d404783dc74f4252769b0d5f42856" [[package]] name = "lock_api" version = "0.4.12" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "07af8b9cdd281b7915f413fa73f29ebd5d55d0d3f0155584dade1ff18cea1b17" dependencies = [ "autocfg", "scopeguard", ] [[package]] name = "log" version = "0.4.28" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "34080505efa8e45a4b816c349525ebe327ceaa8559756f0356cba97ef3bf7432" [[package]] name = "loom" version = "0.7.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "419e0dc8046cb947daa77eb95ae174acfbddb7673b4151f56d1eed8e93fbfaca" dependencies = [ "cfg-if", "generator", "scoped-tls", "tracing", "tracing-subscriber", ] [[package]] name = "lru_time_cache" version = "0.11.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9106e1d747ffd48e6be5bb2d97fa706ed25b144fbee4d5c02eae110cd8d6badd" [[package]] name = "macos-certificate-truster" version = "0.12.8" dependencies = [ "security-framework", ] [[package]] name = "malloc_buf" version = "0.0.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "62bb907fe88d54d8d9ce32a3cceab4218ed2f6b7d35617cafe9adf84e43919cb" dependencies = [ "libc", ] [[package]] name = "managed" version = "0.8.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0ca88d725a0a943b096803bd34e73a4437208b6077654cc4ecb2947a5f91618d" [[package]] name = "matchers" version = "0.1.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8263075bb86c5a1b1427b5ae862e8889656f126e9f77c484496e8b47cf5c5558" dependencies = [ "regex-automata 0.1.10", ] [[package]] name = "matchit" version = "0.7.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0e7465ac9959cc2b1404e8e2367b43684a6d13790fe23056cc8c6c5a6b7bcb94" [[package]] name = "memchr" version = "2.7.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "78ca9ab1a0babb1e7d5695e3530886289c18cf2f87ec19a575a0abdce112e3a3" [[package]] name = "memoffset" version = "0.9.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "488016bfae457b036d996092f6cb448677611ce4449e970ceaf42695203f218a" dependencies = [ "autocfg", ] [[package]] name = "mime" version = "0.3.17" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6877bb514081ee2a7ff5ef9de3281f14a4dd4bceac4c09388074a6b5df8a139a" [[package]] name = "minimal-lexical" version = "0.2.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "68354c5c6bd36d73ff3feceb05efa59b6acb7626617f4962be322a825e61f79a" [[package]] name = "miniz_oxide" version = "0.8.8" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3be647b768db090acb35d5ec5db2b0e1f1de11133ca123b9eacf5137868f892a" dependencies = [ "adler2", "simd-adler32", ] [[package]] name = "mio" version = "1.0.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2886843bf800fba2e3377cff24abf6379b4c4d5c6681eaf9ea5b0d15090450bd" dependencies = [ "libc", "wasi 0.11.0+wasi-snapshot-preview1", "windows-sys 0.52.0", ] [[package]] name = "mitm-wg-test-client" version = "0.12.8" dependencies = [ "anyhow", "boringtun", "data-encoding", "hex", "smoltcp", ] [[package]] name = "mitmproxy" version = "0.12.8" dependencies = [ "anyhow", "boringtun", "cocoa", "console-subscriber", "core-foundation", "core-graphics 0.25.0", "criterion", "data-encoding", "env_logger", "futures-util", "hickory-resolver", "hickory-server", "image", "internet-packet", "log", "lru_time_cache", "nix 0.30.1", "objc", "pretty-hex", "prost 0.14.1", "rand 0.9.2", "security-framework", "smoltcp", "socket2 0.6.0", "sysinfo", "tempfile", "tokio", "tokio-util", "tun", "windows 0.61.3", ] [[package]] name = "mitmproxy-contentviews" version = "0.12.8" dependencies = [ "anyhow", "criterion", "data-encoding", "flate2", "log", "mitmproxy-highlight", "pretty-hex", "protobuf", "protobuf-parse", "regex", "rmp-serde", "serde", "serde_yaml", ] [[package]] name = "mitmproxy-highlight" version = "0.12.8" dependencies = [ "anyhow", "criterion", "tree-sitter", "tree-sitter-css", "tree-sitter-highlight", "tree-sitter-javascript", "tree-sitter-xml", "tree-sitter-yaml", ] [[package]] name = "mitmproxy-linux" version = "0.12.8" dependencies = [ "anyhow", "aya", "aya-build", "aya-log", "const-sha1", "env_logger", "hex", "internet-packet", "libc", "log", "mitmproxy", "mitmproxy-linux-ebpf", "mitmproxy-linux-ebpf-common", "prost 0.14.1", "tokio", "tun", ] [[package]] name = "mitmproxy-linux-ebpf" version = "0.12.8" dependencies = [ "aya-ebpf", "aya-log-ebpf", "mitmproxy-linux-ebpf-common", "which 8.0.0", ] [[package]] name = "mitmproxy-linux-ebpf-common" version = "0.12.8" dependencies = [ "aya-ebpf", ] [[package]] name = "mitmproxy_rs" version = "0.12.8" dependencies = [ "anyhow", "boringtun", "console-subscriber", "data-encoding", "env_logger", "log", "mitmproxy", "mitmproxy-contentviews", "mitmproxy-highlight", "nix 0.30.1", "pyo3", "pyo3-async-runtimes", "pyo3-log", "rand_core 0.6.4", "tar", "tokio", ] [[package]] name = "moka" version = "0.12.10" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a9321642ca94a4282428e6ea4af8cc2ca4eac48ac7a6a4ea8f33f76d0ce70926" dependencies = [ "crossbeam-channel", "crossbeam-epoch", "crossbeam-utils", "loom", "parking_lot", "portable-atomic", "rustc_version", "smallvec", "tagptr", "thiserror 1.0.69", "uuid", ] [[package]] name = "moxcms" version = "0.7.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ddd32fa8935aeadb8a8a6b6b351e40225570a37c43de67690383d87ef170cd08" dependencies = [ "num-traits", "pxfm", ] [[package]] name = "nix" version = "0.25.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f346ff70e7dbfd675fe90590b92d59ef2de15a8779ae305ebcbfd3f0caf59be4" dependencies = [ "autocfg", "bitflags 1.3.2", "cfg-if", "libc", ] [[package]] name = "nix" version = "0.30.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "74523f3a35e05aba87a1d978330aef40f67b0304ac79c1c00b294c9830543db6" dependencies = [ "bitflags 2.9.0", "cfg-if", "cfg_aliases", "libc", ] [[package]] name = "nom" version = "7.1.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d273983c5a657a70a3e8f2a01329822f3b8c8172b73826411a55751e404a0a4a" dependencies = [ "memchr", "minimal-lexical", ] [[package]] name = "ntapi" version = "0.4.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e8a3895c6391c39d7fe7ebc444a87eb2991b2a0bc718fdabd071eec617fc68e4" dependencies = [ "winapi", ] [[package]] name = "nu-ansi-term" version = "0.46.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "77a8165726e8236064dbb45459242600304b42a5ea24ee2948e18e023bf7ba84" dependencies = [ "overload", "winapi", ] [[package]] name = "num-conv" version = "0.1.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "51d515d32fb182ee37cda2ccdcb92950d6a3c2893aa280e540671c2cd0f3b1d9" [[package]] name = "num-traits" version = "0.2.19" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841" dependencies = [ "autocfg", ] [[package]] name = "num_enum" version = "0.7.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4e613fc340b2220f734a8595782c551f1250e969d87d3be1ae0579e8d4065179" dependencies = [ "num_enum_derive", ] [[package]] name = "num_enum_derive" version = "0.7.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "af1844ef2428cc3e1cb900be36181049ef3d3193c63e43026cfe202983b27a56" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "objc" version = "0.2.7" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "915b1b472bc21c53464d6c8461c9d3af805ba1ef837e1cac254428f4a77177b1" dependencies = [ "malloc_buf", ] [[package]] name = "objc2-core-foundation" version = "0.3.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1c10c2894a6fed806ade6027bcd50662746363a9589d3ec9d9bef30a4e4bc166" dependencies = [ "bitflags 2.9.0", ] [[package]] name = "objc2-io-kit" version = "0.3.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "71c1c64d6120e51cd86033f67176b1cb66780c2efe34dec55176f77befd93c0a" dependencies = [ "libc", "objc2-core-foundation", ] [[package]] name = "object" version = "0.36.7" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "62948e14d923ea95ea2c7c86c71013138b66525b86bdc08d2dcc262bdb497b87" dependencies = [ "crc32fast", "hashbrown 0.15.2", "indexmap 2.9.0", "memchr", ] [[package]] name = "once_cell" version = "1.21.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "42f5e15c9953c5e4ccceeb2e7382a716482c34515315f7b03532b8b4e8393d2d" dependencies = [ "critical-section", "portable-atomic", ] [[package]] name = "oorandom" version = "11.1.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d6790f58c7ff633d8771f42965289203411a5e5c68388703c06e14f24770b41e" [[package]] name = "opaque-debug" version = "0.3.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c08d65885ee38876c4f86fa503fb49d7b507c2b62552df7c70b2fce627e06381" [[package]] name = "overload" version = "0.1.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b15813163c1d831bf4a13c3610c05c0d03b39feb07f7e09fa234dac9b15aaf39" [[package]] name = "parking" version = "2.2.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f38d5652c16fde515bb1ecef450ab0f6a219d619a7274976324d5e377f7dceba" [[package]] name = "parking_lot" version = "0.12.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f1bf18183cf54e8d6059647fc3063646a1801cf30896933ec2311622cc4b9a27" dependencies = [ "lock_api", "parking_lot_core", ] [[package]] name = "parking_lot_core" version = "0.9.10" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1e401f977ab385c9e4e3ab30627d6f26d00e2c73eef317493c4ec6d468726cf8" dependencies = [ "cfg-if", "libc", "redox_syscall", "smallvec", "windows-targets 0.52.6", ] [[package]] name = "paste" version = "1.0.15" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "57c0d7b74b563b49d38dae00a0c37d4d6de9b432382b2892f0574ddcae73fd0a" [[package]] name = "percent-encoding" version = "2.3.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e3148f5046208a5d56bcfc03053e3ca6334e51da8dfb19b6cdc8b306fae3283e" [[package]] name = "pin-project" version = "1.1.10" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "677f1add503faace112b9f1373e43e9e054bfdd22ff1a63c1bc485eaec6a6a8a" dependencies = [ "pin-project-internal", ] [[package]] name = "pin-project-internal" version = "1.1.10" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6e918e4ff8c4549eb882f14b3a4bc8c8bc93de829416eacf579f1207a8fbf861" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "pin-project-lite" version = "0.2.16" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3b3cff922bd51709b605d9ead9aa71031d81447142d828eb4a6eba76fe619f9b" [[package]] name = "pin-utils" version = "0.1.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8b870d8c151b6f2fb93e84a13146138f05d02ed11c7e7c54f8826aaaf7c9f184" [[package]] name = "piper" version = "0.2.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "96c8c490f422ef9a4efd2cb5b42b76c8613d7e7dfc1caf667b8a3350a5acc066" dependencies = [ "atomic-waker", "fastrand", "futures-io", ] [[package]] name = "plotters" version = "0.3.7" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5aeb6f403d7a4911efb1e33402027fc44f29b5bf6def3effcc22d7bb75f2b747" dependencies = [ "num-traits", "plotters-backend", "plotters-svg", "wasm-bindgen", "web-sys", ] [[package]] name = "plotters-backend" version = "0.3.7" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "df42e13c12958a16b3f7f4386b9ab1f3e7933914ecea48da7139435263a4172a" [[package]] name = "plotters-svg" version = "0.3.7" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "51bae2ac328883f7acdfea3d66a7c35751187f870bc81f94563733a154d7a670" dependencies = [ "plotters-backend", ] [[package]] name = "png" version = "0.18.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "97baced388464909d42d89643fe4361939af9b7ce7a31ee32a168f832a70f2a0" dependencies = [ "bitflags 2.9.0", "crc32fast", "fdeflate", "flate2", "miniz_oxide", ] [[package]] name = "poly1305" version = "0.8.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8159bd90725d2df49889a078b54f4f79e87f1f8a8444194cdca81d38f5393abf" dependencies = [ "cpufeatures", "opaque-debug", "universal-hash", ] [[package]] name = "portable-atomic" version = "1.11.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "350e9b48cbc6b0e028b0473b114454c6316e57336ee184ceab6e53f72c178b3e" [[package]] name = "portable-atomic-util" version = "0.2.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d8a2f0d8d040d7848a709caf78912debcc3f33ee4b3cac47d73d1e1069e83507" dependencies = [ "portable-atomic", ] [[package]] name = "powerfmt" version = "0.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "439ee305def115ba05938db6eb1644ff94165c5ab5e9420d1c1bcedbba909391" [[package]] name = "ppv-lite86" version = "0.2.21" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9" dependencies = [ "zerocopy", ] [[package]] name = "prefix-trie" version = "0.7.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "85cf4c7c25f1dd66c76b451e9041a8cfce26e4ca754934fa7aed8d5a59a01d20" dependencies = [ "ipnet", "num-traits", ] [[package]] name = "pretty-hex" version = "0.4.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "bbc83ee4a840062f368f9096d80077a9841ec117e17e7f700df81958f1451254" [[package]] name = "proc-macro-error" version = "1.0.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "da25490ff9892aab3fcf7c36f08cfb902dd3e71ca0f9f9517bea02a73a5ce38c" dependencies = [ "proc-macro-error-attr", "proc-macro2", "quote", "version_check", ] [[package]] name = "proc-macro-error-attr" version = "1.0.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a1be40180e52ecc98ad80b184934baf3d0d29f979574e439af5a55274b35f869" dependencies = [ "proc-macro2", "quote", "version_check", ] [[package]] name = "proc-macro-error-attr2" version = "2.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "96de42df36bb9bba5542fe9f1a054b8cc87e172759a1868aa05c1f3acc89dfc5" dependencies = [ "proc-macro2", "quote", ] [[package]] name = "proc-macro-error2" version = "2.0.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "11ec05c52be0a07b08061f7dd003e7d7092e0472bc731b4af7bb1ef876109802" dependencies = [ "proc-macro-error-attr2", "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "proc-macro2" version = "1.0.95" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "02b3e5e68a3a1a02aad3ec490a98007cbc13c37cbe84a3cd7b8e406d76e7f778" dependencies = [ "unicode-ident", ] [[package]] name = "prost" version = "0.13.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2796faa41db3ec313a31f7624d9286acf277b52de526150b7e69f3debf891ee5" dependencies = [ "bytes", "prost-derive 0.13.5", ] [[package]] name = "prost" version = "0.14.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7231bd9b3d3d33c86b58adbac74b5ec0ad9f496b19d22801d773636feaa95f3d" dependencies = [ "bytes", "prost-derive 0.14.1", ] [[package]] name = "prost-derive" version = "0.13.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8a56d757972c98b346a9b766e3f02746cde6dd1cd1d1d563472929fdd74bec4d" dependencies = [ "anyhow", "itertools 0.14.0", "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "prost-derive" version = "0.14.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9120690fafc389a67ba3803df527d0ec9cbbc9cc45e4cc20b332996dfb672425" dependencies = [ "anyhow", "itertools 0.14.0", "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "prost-types" version = "0.13.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "52c2c1bf36ddb1a1c396b3601a3cec27c2462e45f07c386894ec3ccf5332bd16" dependencies = [ "prost 0.13.5", ] [[package]] name = "protobuf" version = "3.7.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d65a1d4ddae7d8b5de68153b48f6aa3bba8cb002b243dbdbc55a5afbc98f99f4" dependencies = [ "once_cell", "protobuf-support", "thiserror 1.0.69", ] [[package]] name = "protobuf-parse" version = "3.7.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b4aeaa1f2460f1d348eeaeed86aea999ce98c1bded6f089ff8514c9d9dbdc973" dependencies = [ "anyhow", "indexmap 2.9.0", "log", "protobuf", "protobuf-support", "tempfile", "thiserror 1.0.69", "which 4.4.2", ] [[package]] name = "protobuf-support" version = "3.7.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3e36c2f31e0a47f9280fb347ef5e461ffcd2c52dd520d8e216b52f93b0b0d7d6" dependencies = [ "thiserror 1.0.69", ] [[package]] name = "pxfm" version = "0.1.23" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f55f4fedc84ed39cb7a489322318976425e42a147e2be79d8f878e2884f94e84" dependencies = [ "num-traits", ] [[package]] name = "pyo3" version = "0.25.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8970a78afe0628a3e3430376fc5fd76b6b45c4d43360ffd6cdd40bdde72b682a" dependencies = [ "anyhow", "indoc", "libc", "memoffset", "once_cell", "portable-atomic", "pyo3-build-config", "pyo3-ffi", "pyo3-macros", "unindent", ] [[package]] name = "pyo3-async-runtimes" version = "0.25.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d73cc6b1b7d8b3cef02101d37390dbdfe7e450dfea14921cae80a9534ba59ef2" dependencies = [ "clap", "futures", "inventory", "once_cell", "pin-project-lite", "pyo3", "pyo3-async-runtimes-macros", "tokio", ] [[package]] name = "pyo3-async-runtimes-macros" version = "0.25.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ca31e43a0f205f2960208938135e37e579e61e10b36b4e7f49b0e8f60fab5b83" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "pyo3-build-config" version = "0.25.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "458eb0c55e7ece017adeba38f2248ff3ac615e53660d7c71a238d7d2a01c7598" dependencies = [ "once_cell", "target-lexicon", ] [[package]] name = "pyo3-ffi" version = "0.25.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7114fe5457c61b276ab77c5055f206295b812608083644a5c5b2640c3102565c" dependencies = [ "libc", "pyo3-build-config", ] [[package]] name = "pyo3-log" version = "0.12.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "45192e5e4a4d2505587e27806c7b710c231c40c56f3bfc19535d0bb25df52264" dependencies = [ "arc-swap", "log", "pyo3", ] [[package]] name = "pyo3-macros" version = "0.25.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a8725c0a622b374d6cb051d11a0983786448f7785336139c3c94f5aa6bef7e50" dependencies = [ "proc-macro2", "pyo3-macros-backend", "quote", "syn 2.0.101", ] [[package]] name = "pyo3-macros-backend" version = "0.25.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4109984c22491085343c05b0dbc54ddc405c3cf7b4374fc533f5c3313a572ccc" dependencies = [ "heck", "proc-macro2", "pyo3-build-config", "quote", "syn 2.0.101", ] [[package]] name = "quick-error" version = "2.0.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a993555f31e5a609f617c12db6250dedcac1b0a85076912c436e6fc9b2c8e6a3" [[package]] name = "quote" version = "1.0.40" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1885c039570dc00dcb4ff087a89e185fd56bae234ddc7f056a945bf36467248d" dependencies = [ "proc-macro2", ] [[package]] name = "r-efi" version = "5.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "74765f6d916ee2faa39bc8e68e4f3ed8949b48cccdac59983d287a7cb71ce9c5" [[package]] name = "rand" version = "0.8.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404" dependencies = [ "libc", "rand_chacha 0.3.1", "rand_core 0.6.4", ] [[package]] name = "rand" version = "0.9.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1" dependencies = [ "rand_chacha 0.9.0", "rand_core 0.9.3", ] [[package]] name = "rand_chacha" version = "0.3.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88" dependencies = [ "ppv-lite86", "rand_core 0.6.4", ] [[package]] name = "rand_chacha" version = "0.9.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb" dependencies = [ "ppv-lite86", "rand_core 0.9.3", ] [[package]] name = "rand_core" version = "0.6.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c" dependencies = [ "getrandom 0.2.16", ] [[package]] name = "rand_core" version = "0.9.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "99d9a13982dcf210057a8a78572b2217b667c3beacbf3a0d8b454f6f82837d38" dependencies = [ "getrandom 0.3.2", ] [[package]] name = "rayon" version = "1.10.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b418a60154510ca1a002a752ca9714984e21e4241e804d32555251faf8b78ffa" dependencies = [ "either", "rayon-core", ] [[package]] name = "rayon-core" version = "1.12.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1465873a3dfdaa8ae7cb14b4383657caab0b3e8a0aa9ae8e04b044854c8dfce2" dependencies = [ "crossbeam-deque", "crossbeam-utils", ] [[package]] name = "redox_syscall" version = "0.5.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d2f103c6d277498fbceb16e84d317e2a400f160f46904d5f5410848c829511a3" dependencies = [ "bitflags 2.9.0", ] [[package]] name = "regex" version = "1.11.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8b5288124840bee7b386bc413c487869b360b2b4ec421ea56425128692f2a82c" dependencies = [ "aho-corasick", "memchr", "regex-automata 0.4.11", "regex-syntax 0.8.5", ] [[package]] name = "regex-automata" version = "0.1.10" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6c230d73fb8d8c1b9c0b3135c5142a8acee3a0558fb8db5cf1cb65f8d7862132" dependencies = [ "regex-syntax 0.6.29", ] [[package]] name = "regex-automata" version = "0.4.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "833eb9ce86d40ef33cb1306d8accf7bc8ec2bfea4355cbdebb3df68b40925cad" dependencies = [ "aho-corasick", "memchr", "regex-syntax 0.8.5", ] [[package]] name = "regex-syntax" version = "0.6.29" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f162c6dd7b008981e4d40210aca20b4bd0f9b60ca9271061b07f78537722f2e1" [[package]] name = "regex-syntax" version = "0.8.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2b15c43186be67a4fd63bee50d0303afffcef381492ebe2c5d87f324e1b8815c" [[package]] name = "resolv-conf" version = "0.7.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "48375394603e3dd4b2d64371f7148fd8c7baa2680e28741f2cb8d23b59e3d4c4" dependencies = [ "hostname", ] [[package]] name = "ring" version = "0.17.14" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a4689e6c2294d81e88dc6261c768b63bc4fcdb852be6d1352498b114f61383b7" dependencies = [ "cc", "cfg-if", "getrandom 0.2.16", "libc", "untrusted", "windows-sys 0.52.0", ] [[package]] name = "rmp" version = "0.8.14" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "228ed7c16fa39782c3b3468e974aec2795e9089153cd08ee2e9aefb3613334c4" dependencies = [ "byteorder", "num-traits", "paste", ] [[package]] name = "rmp-serde" version = "1.3.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "52e599a477cf9840e92f2cde9a7189e67b42c57532749bf90aea6ec10facd4db" dependencies = [ "byteorder", "rmp", "serde", ] [[package]] name = "rustc-demangle" version = "0.1.24" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "719b953e2095829ee67db738b3bfa9fa368c94900df327b3f07fe6e794d2fe1f" [[package]] name = "rustc_version" version = "0.4.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92" dependencies = [ "semver", ] [[package]] name = "rustix" version = "0.38.44" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "fdb5bc1ae2baa591800df16c9ca78619bf65c0488b41b96ccec5d11220d8c154" dependencies = [ "bitflags 2.9.0", "errno", "libc", "linux-raw-sys 0.4.15", "windows-sys 0.59.0", ] [[package]] name = "rustix" version = "1.0.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d97817398dd4bb2e6da002002db259209759911da105da92bec29ccb12cf58bf" dependencies = [ "bitflags 2.9.0", "errno", "libc", "linux-raw-sys 0.9.4", "windows-sys 0.59.0", ] [[package]] name = "rustversion" version = "1.0.20" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "eded382c5f5f786b989652c49544c4877d9f015cc22e145a5ea8ea66c2921cd2" [[package]] name = "ryu" version = "1.0.20" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "28d3b2b1366ec20994f1fd18c3c594f05c5dd4bc44d8bb0c1c632c8d6829481f" [[package]] name = "same-file" version = "1.0.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "93fc1dc3aaa9bfed95e02e6eadabb4baf7e3078b0bd1b4d7b6b0b68378900502" dependencies = [ "winapi-util", ] [[package]] name = "scoped-tls" version = "1.0.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e1cf6437eb19a8f4a6cc0f7dca544973b0b78843adbfeb3683d1a94a0024a294" [[package]] name = "scopeguard" version = "1.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49" [[package]] name = "security-framework" version = "3.5.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b3297343eaf830f66ede390ea39da1d462b6b0c1b000f420d0a83f898bbbe6ef" dependencies = [ "bitflags 2.9.0", "core-foundation", "core-foundation-sys", "libc", "security-framework-sys", ] [[package]] name = "security-framework-sys" version = "2.15.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "cc1f0cbffaac4852523ce30d8bd3c5cdc873501d96ff467ca09b6767bb8cd5c0" dependencies = [ "core-foundation-sys", "libc", ] [[package]] name = "semver" version = "1.0.26" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "56e6fa9c48d24d85fb3de5ad847117517440f6beceb7798af16b4a87d616b8d0" dependencies = [ "serde", ] [[package]] name = "serde" version = "1.0.228" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e" dependencies = [ "serde_core", "serde_derive", ] [[package]] name = "serde_core" version = "1.0.228" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad" dependencies = [ "serde_derive", ] [[package]] name = "serde_derive" version = "1.0.228" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "serde_json" version = "1.0.140" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "20068b6e96dc6c9bd23e01df8827e6c7e1f2fddd43c21810382803c136b99373" dependencies = [ "indexmap 2.9.0", "itoa", "memchr", "ryu", "serde", ] [[package]] name = "serde_yaml" version = "0.9.34+deprecated" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6a8b1a1a2ebf674015cc02edccce75287f1a0130d394307b36743c2f5d504b47" dependencies = [ "indexmap 2.9.0", "itoa", "ryu", "serde", "unsafe-libyaml", ] [[package]] name = "sharded-slab" version = "0.1.7" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f40ca3c46823713e0d4209592e8d6e826aa57e928f09752619fc696c499637f6" dependencies = [ "lazy_static", ] [[package]] name = "shlex" version = "1.3.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64" [[package]] name = "signal-hook-registry" version = "1.4.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9203b8055f63a2a00e2f593bb0510367fe707d7ff1e5c872de2f537b339e5410" dependencies = [ "libc", ] [[package]] name = "simd-adler32" version = "0.3.7" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d66dc143e6b11c1eddc06d5c423cfc97062865baf299914ab64caa38182078fe" [[package]] name = "slab" version = "0.4.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8f92a496fb766b417c996b9c5e57daf2f7ad3b0bebe1ccfca4856390e3d3bb67" dependencies = [ "autocfg", ] [[package]] name = "smallvec" version = "1.15.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8917285742e9f3e1683f0a9c4e6b57960b7314d0b08d30d1ecd426713ee2eee9" [[package]] name = "smoltcp" version = "0.12.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "dad095989c1533c1c266d9b1e8d70a1329dd3723c3edac6d03bbd67e7bf6f4bb" dependencies = [ "bitflags 1.3.2", "byteorder", "cfg-if", "defmt 0.3.100", "heapless", "libc", "log", "managed", ] [[package]] name = "socket2" version = "0.5.10" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e22376abed350d73dd1cd119b57ffccad95b4e585a7cda43e286245ce23c0678" dependencies = [ "libc", "windows-sys 0.52.0", ] [[package]] name = "socket2" version = "0.6.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "233504af464074f9d066d7b5416c5f9b894a5862a6506e306f7b816cdd6f1807" dependencies = [ "libc", "windows-sys 0.59.0", ] [[package]] name = "stable_deref_trait" version = "1.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a8f112729512f8e442d81f95a8a7ddf2b7c6b8a1a6f509a95864142b30cab2d3" [[package]] name = "streaming-iterator" version = "0.1.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2b2231b7c3057d5e4ad0156fb3dc807d900806020c5ffa3ee6ff2c8c76fb8520" [[package]] name = "strsim" version = "0.11.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f" [[package]] name = "subtle" version = "2.6.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292" [[package]] name = "syn" version = "1.0.109" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "72b64191b275b66ffe2469e8af2c1cfe3bafa67b529ead792a6d0160888b4237" dependencies = [ "proc-macro2", "quote", "unicode-ident", ] [[package]] name = "syn" version = "2.0.101" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8ce2b7fc941b3a24138a0a7cf8e858bfc6a992e7978a068a5c760deb0ed43caf" dependencies = [ "proc-macro2", "quote", "unicode-ident", ] [[package]] name = "sync_wrapper" version = "1.0.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0bf256ce5efdfa370213c1dabab5935a12e49f2c58d15e9eac2870d3b4f27263" [[package]] name = "synstructure" version = "0.13.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c8af7666ab7b6390ab78131fb5b0fce11d6b7a6951602017c35fa82800708971" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "sysinfo" version = "0.36.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "252800745060e7b9ffb7b2badbd8b31cfa4aa2e61af879d0a3bf2a317c20217d" dependencies = [ "libc", "memchr", "ntapi", "objc2-core-foundation", "objc2-io-kit", "windows 0.61.3", ] [[package]] name = "tagptr" version = "0.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7b2093cf4c8eb1e67749a6762251bc9cd836b6fc171623bd0a9d324d37af2417" [[package]] name = "tar" version = "0.4.44" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1d863878d212c87a19c1a610eb53bb01fe12951c0501cf5a0d65f724914a667a" dependencies = [ "filetime", "libc", "xattr", ] [[package]] name = "target-lexicon" version = "0.13.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e502f78cdbb8ba4718f566c418c52bc729126ffd16baee5baa718cf25dd5a69a" [[package]] name = "tempfile" version = "3.23.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2d31c77bdf42a745371d260a26ca7163f1e0924b64afa0b688e61b5a9fa02f16" dependencies = [ "fastrand", "getrandom 0.3.2", "once_cell", "rustix 1.0.5", "windows-sys 0.59.0", ] [[package]] name = "thiserror" version = "1.0.69" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b6aaf5339b578ea85b50e080feb250a3e8ae8cfcdff9a461c9ec2904bc923f52" dependencies = [ "thiserror-impl 1.0.69", ] [[package]] name = "thiserror" version = "2.0.12" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "567b8a2dae586314f7be2a752ec7474332959c6460e02bde30d702a66d488708" dependencies = [ "thiserror-impl 2.0.12", ] [[package]] name = "thiserror-impl" version = "1.0.69" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4fee6c4efc90059e10f81e6d42c60a18f76588c3d74cb83a0b242a2b6c7504c1" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "thiserror-impl" version = "2.0.12" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7f7cf42b4507d8ea322120659672cf1b9dbb93f8f2d4ecfd6e51350ff5b17a1d" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "thread_local" version = "1.1.8" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8b9ef9bad013ada3808854ceac7b46812a6465ba368859a37e2100283d2d719c" dependencies = [ "cfg-if", "once_cell", ] [[package]] name = "tiff" version = "0.10.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "af9605de7fee8d9551863fd692cce7637f548dbd9db9180fcc07ccc6d26c336f" dependencies = [ "fax", "flate2", "half", "quick-error", "weezl", "zune-jpeg", ] [[package]] name = "time" version = "0.3.41" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8a7619e19bc266e0f9c5e6686659d394bc57973859340060a69221e57dbc0c40" dependencies = [ "deranged", "num-conv", "powerfmt", "serde", "time-core", ] [[package]] name = "time-core" version = "0.1.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c9e9a38711f559d9e3ce1cdb06dd7c5b8ea546bc90052da6d06bb76da74bb07c" [[package]] name = "tinystr" version = "0.7.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9117f5d4db391c1cf6927e7bea3db74b9a1c1add8f7eda9ffd5364f40f57b82f" dependencies = [ "displaydoc", "zerovec", ] [[package]] name = "tinytemplate" version = "1.2.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "be4d6b5f19ff7664e8c98d03e2139cb510db9b0a60b55f8e8709b689d939b6bc" dependencies = [ "serde", "serde_json", ] [[package]] name = "tinyvec" version = "1.9.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "09b3661f17e86524eccd4371ab0429194e0d7c008abb45f7a7495b1719463c71" dependencies = [ "tinyvec_macros", ] [[package]] name = "tinyvec_macros" version = "0.1.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20" [[package]] name = "tokio" version = "1.47.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "89e49afdadebb872d3145a5638b59eb0691ea23e46ca484037cfab3b76b95038" dependencies = [ "backtrace", "bytes", "io-uring", "libc", "mio", "pin-project-lite", "signal-hook-registry", "slab", "socket2 0.6.0", "tokio-macros", "tracing", "windows-sys 0.59.0", ] [[package]] name = "tokio-macros" version = "2.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6e06d43f1345a3bcd39f6a56dbb7dcab2ba47e68e8ac134855e7e2bdbaf8cab8" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "tokio-stream" version = "0.1.17" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "eca58d7bba4a75707817a2c44174253f9236b2d5fbd055602e9d5c07c139a047" dependencies = [ "futures-core", "pin-project-lite", "tokio", ] [[package]] name = "tokio-util" version = "0.7.16" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "14307c986784f72ef81c89db7d9e28d6ac26d16213b109ea501696195e6e3ce5" dependencies = [ "bytes", "futures-core", "futures-sink", "pin-project-lite", "tokio", ] [[package]] name = "toml" version = "0.5.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f4f7f0dd8d50a853a531c426359045b1998f04219d88799810762cd4ad314234" dependencies = [ "serde", ] [[package]] name = "tonic" version = "0.12.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "877c5b330756d856ffcc4553ab34a5684481ade925ecc54bcd1bf02b1d0d4d52" dependencies = [ "async-stream", "async-trait", "axum", "base64 0.22.1", "bytes", "h2", "http", "http-body", "http-body-util", "hyper", "hyper-timeout", "hyper-util", "percent-encoding", "pin-project", "prost 0.13.5", "socket2 0.5.10", "tokio", "tokio-stream", "tower 0.4.13", "tower-layer", "tower-service", "tracing", ] [[package]] name = "tower" version = "0.4.13" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b8fa9be0de6cf49e536ce1851f987bd21a43b771b09473c3549a6c853db37c1c" dependencies = [ "futures-core", "futures-util", "indexmap 1.9.3", "pin-project", "pin-project-lite", "rand 0.8.5", "slab", "tokio", "tokio-util", "tower-layer", "tower-service", "tracing", ] [[package]] name = "tower" version = "0.5.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d039ad9159c98b70ecfd540b2573b97f7f52c3e8d9f8ad57a24b916a536975f9" dependencies = [ "futures-core", "futures-util", "pin-project-lite", "sync_wrapper", "tower-layer", "tower-service", ] [[package]] name = "tower-layer" version = "0.3.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "121c2a6cda46980bb0fcd1647ffaf6cd3fc79a013de288782836f6df9c48780e" [[package]] name = "tower-service" version = "0.3.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8df9b6e13f2d32c91b9bd719c00d1958837bc7dec474d94952798cc8e69eeec3" [[package]] name = "tracing" version = "0.1.41" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "784e0ac535deb450455cbfa28a6f0df145ea1bb7ae51b821cf5e7927fdcfbdd0" dependencies = [ "pin-project-lite", "tracing-attributes", "tracing-core", ] [[package]] name = "tracing-attributes" version = "0.1.28" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "395ae124c09f9e6918a2310af6038fba074bcf474ac352496d5910dd59a2226d" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "tracing-core" version = "0.1.33" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e672c95779cf947c5311f83787af4fa8fffd12fb27e4993211a84bdfd9610f9c" dependencies = [ "once_cell", "valuable", ] [[package]] name = "tracing-log" version = "0.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ee855f1f400bd0e5c02d150ae5de3840039a3f54b025156404e34c23c03f47c3" dependencies = [ "log", "once_cell", "tracing-core", ] [[package]] name = "tracing-subscriber" version = "0.3.19" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e8189decb5ac0fa7bc8b96b7cb9b2701d60d48805aca84a238004d665fcc4008" dependencies = [ "matchers", "nu-ansi-term", "once_cell", "regex", "sharded-slab", "smallvec", "thread_local", "tracing", "tracing-core", "tracing-log", ] [[package]] name = "tree-sitter" version = "0.25.10" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "78f873475d258561b06f1c595d93308a7ed124d9977cb26b148c2084a4a3cc87" dependencies = [ "cc", "regex", "regex-syntax 0.8.5", "serde_json", "streaming-iterator", "tree-sitter-language", ] [[package]] name = "tree-sitter-css" version = "0.25.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a5cbc5e18f29a2c6d6435891f42569525cf95435a3e01c2f1947abcde178686f" dependencies = [ "cc", "tree-sitter-language", ] [[package]] name = "tree-sitter-highlight" version = "0.25.10" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "adc5f880ad8d8f94e88cb81c3557024cf1a8b75e3b504c50481ed4f5a6006ff3" dependencies = [ "regex", "streaming-iterator", "thiserror 2.0.12", "tree-sitter", ] [[package]] name = "tree-sitter-javascript" version = "0.25.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "68204f2abc0627a90bdf06e605f5c470aa26fdcb2081ea553a04bdad756693f5" dependencies = [ "cc", "tree-sitter-language", ] [[package]] name = "tree-sitter-language" version = "0.1.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c4013970217383f67b18aef68f6fb2e8d409bc5755227092d32efb0422ba24b8" [[package]] name = "tree-sitter-xml" version = "0.7.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e670041f591d994f54d597ddcd8f4ebc930e282c4c76a42268743b71f0c8b6b3" dependencies = [ "cc", "tree-sitter-language", ] [[package]] name = "tree-sitter-yaml" version = "0.7.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3d5893f2a05e57c86a2338aa3aed167a1e5c68b8fdff3bf4a460941f2d8fc944" dependencies = [ "cc", "tree-sitter-language", ] [[package]] name = "try-lock" version = "0.2.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e421abadd41a4225275504ea4d6566923418b7f05506fbc9c0fe86ba7396114b" [[package]] name = "tun" version = "0.7.22" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7904c94104239657089d14bccbf23fd6d363e30639ce49af21ef008a445baf97" dependencies = [ "bytes", "cfg-if", "futures", "futures-core", "ipnet", "libc", "log", "nix 0.30.1", "thiserror 2.0.12", "tokio", "tokio-util", "windows-sys 0.59.0", "wintun-bindings", ] [[package]] name = "typenum" version = "1.18.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1dccffe3ce07af9386bfd29e80c0ab1a8205a2fc34e4bcd40364df902cfa8f3f" [[package]] name = "unicode-ident" version = "1.0.18" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5a5f39404a5da50712a4c1eecf25e90dd62b613502b7e925fd4e4d19b5c96512" [[package]] name = "unindent" version = "0.2.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7264e107f553ccae879d21fbea1d6724ac785e8c3bfc762137959b5802826ef3" [[package]] name = "universal-hash" version = "0.5.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "fc1de2c688dc15305988b563c3854064043356019f97a4b46276fe734c4f07ea" dependencies = [ "crypto-common", "subtle", ] [[package]] name = "unsafe-libyaml" version = "0.2.11" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "673aac59facbab8a9007c7f6108d11f63b603f7cabff99fabf650fea5c32b861" [[package]] name = "untrusted" version = "0.9.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1" [[package]] name = "url" version = "2.5.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "32f8b686cadd1473f4bd0117a5d28d36b1ade384ea9b5069a1c40aefed7fda60" dependencies = [ "form_urlencoded", "idna", "percent-encoding", "serde", ] [[package]] name = "utf16_iter" version = "1.0.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c8232dd3cdaed5356e0f716d285e4b40b932ac434100fe9b7e0e8e935b9e6246" [[package]] name = "utf8_iter" version = "1.0.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be" [[package]] name = "utf8parse" version = "0.2.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821" [[package]] name = "uuid" version = "1.16.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "458f7a779bf54acc9f347480ac654f68407d3aab21269a6e3c9f922acd9e2da9" dependencies = [ "getrandom 0.3.2", ] [[package]] name = "valuable" version = "0.1.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ba73ea9cf16a25df0c8caa16c51acb937d5712a8429db78a3ee29d5dcacd3a65" [[package]] name = "version_check" version = "0.9.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a" [[package]] name = "walkdir" version = "2.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "29790946404f91d9c5d06f9874efddea1dc06c5efe94541a7d6863108e3a5e4b" dependencies = [ "same-file", "winapi-util", ] [[package]] name = "want" version = "0.3.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "bfa7760aed19e106de2c7c0b581b509f2f25d3dacaf737cb82ac61bc6d760b0e" dependencies = [ "try-lock", ] [[package]] name = "wasi" version = "0.11.0+wasi-snapshot-preview1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9c8d87e72b64a3b4db28d11ce29237c246188f4f51057d65a7eab63b7987e423" [[package]] name = "wasi" version = "0.14.2+wasi-0.2.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9683f9a5a998d873c0d21fcbe3c083009670149a8fab228644b8bd36b2c48cb3" dependencies = [ "wit-bindgen-rt", ] [[package]] name = "wasm-bindgen" version = "0.2.100" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1edc8929d7499fc4e8f0be2262a241556cfc54a0bea223790e71446f2aab1ef5" dependencies = [ "cfg-if", "once_cell", "rustversion", "wasm-bindgen-macro", ] [[package]] name = "wasm-bindgen-backend" version = "0.2.100" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2f0a0651a5c2bc21487bde11ee802ccaf4c51935d0d3d42a6101f98161700bc6" dependencies = [ "bumpalo", "log", "proc-macro2", "quote", "syn 2.0.101", "wasm-bindgen-shared", ] [[package]] name = "wasm-bindgen-macro" version = "0.2.100" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "7fe63fc6d09ed3792bd0897b314f53de8e16568c2b3f7982f468c0bf9bd0b407" dependencies = [ "quote", "wasm-bindgen-macro-support", ] [[package]] name = "wasm-bindgen-macro-support" version = "0.2.100" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8ae87ea40c9f689fc23f209965b6fb8a99ad69aeeb0231408be24920604395de" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", "wasm-bindgen-backend", "wasm-bindgen-shared", ] [[package]] name = "wasm-bindgen-shared" version = "0.2.100" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1a05d73b933a847d6cccdda8f838a22ff101ad9bf93e33684f39c1f5f0eece3d" dependencies = [ "unicode-ident", ] [[package]] name = "web-sys" version = "0.3.77" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "33b6dd2ef9186f1f2072e409e99cd22a975331a6b3591b12c764e0e55c60d5d2" dependencies = [ "js-sys", "wasm-bindgen", ] [[package]] name = "weezl" version = "0.1.10" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a751b3277700db47d3e574514de2eced5e54dc8a5436a3bf7a0b248b2cee16f3" [[package]] name = "which" version = "4.4.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "87ba24419a2078cd2b0f2ede2691b6c66d8e47836da3b6db8265ebad47afbfc7" dependencies = [ "either", "home", "once_cell", "rustix 0.38.44", ] [[package]] name = "which" version = "8.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d3fabb953106c3c8eea8306e4393700d7657561cb43122571b172bbfb7c7ba1d" dependencies = [ "env_home", "rustix 1.0.5", "winsafe", ] [[package]] name = "widestring" version = "1.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "dd7cf3379ca1aac9eea11fba24fd7e315d621f8dfe35c8d7d2be8b793726e07d" [[package]] name = "winapi" version = "0.3.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419" dependencies = [ "winapi-i686-pc-windows-gnu", "winapi-x86_64-pc-windows-gnu", ] [[package]] name = "winapi-i686-pc-windows-gnu" version = "0.4.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6" [[package]] name = "winapi-util" version = "0.1.9" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "cf221c93e13a30d793f7645a0e7762c55d169dbb0a49671918a2319d289b10bb" dependencies = [ "windows-sys 0.59.0", ] [[package]] name = "winapi-x86_64-pc-windows-gnu" version = "0.4.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f" [[package]] name = "windivert" version = "0.6.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "fc6b6833a760d1c36b489314a5541a12a39d162dc8341d8f6f400212b96d3df1" dependencies = [ "etherparse", "thiserror 1.0.69", "windivert-sys", "windows 0.48.0", ] [[package]] name = "windivert-sys" version = "0.10.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "832bc4af9272458a8a64395b3aabe10dc4089546486fcbd0e19b9b6d28ba6e54" dependencies = [ "cc", "thiserror 1.0.69", "windows 0.48.0", ] [[package]] name = "windows" version = "0.48.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "e686886bc078bc1b0b600cac0147aadb815089b6e4da64016cbd754b6342700f" dependencies = [ "windows-targets 0.48.5", ] [[package]] name = "windows" version = "0.58.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "dd04d41d93c4992d421894c18c8b43496aa748dd4c081bac0dc93eb0489272b6" dependencies = [ "windows-core 0.58.0", "windows-targets 0.52.6", ] [[package]] name = "windows" version = "0.61.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9babd3a767a4c1aef6900409f85f5d53ce2544ccdfaa86dad48c91782c6d6893" dependencies = [ "windows-collections", "windows-core 0.61.2", "windows-future", "windows-link", "windows-numerics", ] [[package]] name = "windows-collections" version = "0.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3beeceb5e5cfd9eb1d76b381630e82c4241ccd0d27f1a39ed41b2760b255c5e8" dependencies = [ "windows-core 0.61.2", ] [[package]] name = "windows-core" version = "0.58.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6ba6d44ec8c2591c134257ce647b7ea6b20335bf6379a27dac5f1641fcf59f99" dependencies = [ "windows-implement 0.58.0", "windows-interface 0.58.0", "windows-result 0.2.0", "windows-strings 0.1.0", "windows-targets 0.52.6", ] [[package]] name = "windows-core" version = "0.61.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c0fdd3ddb90610c7638aa2b3a3ab2904fb9e5cdbecc643ddb3647212781c4ae3" dependencies = [ "windows-implement 0.60.1", "windows-interface 0.59.2", "windows-link", "windows-result 0.3.4", "windows-strings 0.4.2", ] [[package]] name = "windows-future" version = "0.2.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "fc6a41e98427b19fe4b73c550f060b59fa592d7d686537eebf9385621bfbad8e" dependencies = [ "windows-core 0.61.2", "windows-link", "windows-threading", ] [[package]] name = "windows-implement" version = "0.58.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2bbd5b46c938e506ecbce286b6628a02171d56153ba733b6c741fc627ec9579b" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "windows-implement" version = "0.60.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "edb307e42a74fb6de9bf3a02d9712678b22399c87e6fa869d6dfcd8c1b7754e0" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "windows-interface" version = "0.58.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "053c4c462dc91d3b1504c6fe5a726dd15e216ba718e84a0e46a88fbe5ded3515" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "windows-interface" version = "0.59.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c0abd1ddbc6964ac14db11c7213d6532ef34bd9aa042c2e5935f59d7908b46a5" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "windows-link" version = "0.1.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "5e6ad25900d524eaabdbbb96d20b4311e1e7ae1699af4fb28c17ae66c80d798a" [[package]] name = "windows-numerics" version = "0.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9150af68066c4c5c07ddc0ce30421554771e528bde427614c61038bc2c92c2b1" dependencies = [ "windows-core 0.61.2", "windows-link", ] [[package]] name = "windows-redirector" version = "0.12.8" dependencies = [ "anyhow", "env_logger", "hex", "internet-packet", "log", "lru_time_cache", "mitmproxy", "prost 0.14.1", "tokio", "windivert", "winres", ] [[package]] name = "windows-result" version = "0.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1d1043d8214f791817bab27572aaa8af63732e11bf84aa21a45a78d6c317ae0e" dependencies = [ "windows-targets 0.52.6", ] [[package]] name = "windows-result" version = "0.3.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "56f42bd332cc6c8eac5af113fc0c1fd6a8fd2aa08a0119358686e5160d0586c6" dependencies = [ "windows-link", ] [[package]] name = "windows-strings" version = "0.1.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "4cd9b125c486025df0eabcb585e62173c6c9eddcec5d117d3b6e8c30e2ee4d10" dependencies = [ "windows-result 0.2.0", "windows-targets 0.52.6", ] [[package]] name = "windows-strings" version = "0.4.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "56e6c93f3a0c3b36176cb1327a4958a0353d5d166c2a35cb268ace15e91d3b57" dependencies = [ "windows-link", ] [[package]] name = "windows-sys" version = "0.48.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "677d2418bec65e3338edb076e806bc1ec15693c5d0104683f2efe857f61056a9" dependencies = [ "windows-targets 0.48.5", ] [[package]] name = "windows-sys" version = "0.52.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d" dependencies = [ "windows-targets 0.52.6", ] [[package]] name = "windows-sys" version = "0.59.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b" dependencies = [ "windows-targets 0.52.6", ] [[package]] name = "windows-targets" version = "0.48.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9a2fa6e2155d7247be68c096456083145c183cbbbc2764150dda45a87197940c" dependencies = [ "windows_aarch64_gnullvm 0.48.5", "windows_aarch64_msvc 0.48.5", "windows_i686_gnu 0.48.5", "windows_i686_msvc 0.48.5", "windows_x86_64_gnu 0.48.5", "windows_x86_64_gnullvm 0.48.5", "windows_x86_64_msvc 0.48.5", ] [[package]] name = "windows-targets" version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973" dependencies = [ "windows_aarch64_gnullvm 0.52.6", "windows_aarch64_msvc 0.52.6", "windows_i686_gnu 0.52.6", "windows_i686_gnullvm", "windows_i686_msvc 0.52.6", "windows_x86_64_gnu 0.52.6", "windows_x86_64_gnullvm 0.52.6", "windows_x86_64_msvc 0.52.6", ] [[package]] name = "windows-threading" version = "0.1.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b66463ad2e0ea3bbf808b7f1d371311c80e115c0b71d60efc142cafbcfb057a6" dependencies = [ "windows-link", ] [[package]] name = "windows_aarch64_gnullvm" version = "0.48.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2b38e32f0abccf9987a4e3079dfb67dcd799fb61361e53e2882c3cbaf0d905d8" [[package]] name = "windows_aarch64_gnullvm" version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3" [[package]] name = "windows_aarch64_msvc" version = "0.48.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "dc35310971f3b2dbbf3f0690a219f40e2d9afcf64f9ab7cc1be722937c26b4bc" [[package]] name = "windows_aarch64_msvc" version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469" [[package]] name = "windows_i686_gnu" version = "0.48.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a75915e7def60c94dcef72200b9a8e58e5091744960da64ec734a6c6e9b3743e" [[package]] name = "windows_i686_gnu" version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b" [[package]] name = "windows_i686_gnullvm" version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66" [[package]] name = "windows_i686_msvc" version = "0.48.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "8f55c233f70c4b27f66c523580f78f1004e8b5a8b659e05a4eb49d4166cca406" [[package]] name = "windows_i686_msvc" version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66" [[package]] name = "windows_x86_64_gnu" version = "0.48.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "53d40abd2583d23e4718fddf1ebec84dbff8381c07cae67ff7768bbf19c6718e" [[package]] name = "windows_x86_64_gnu" version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78" [[package]] name = "windows_x86_64_gnullvm" version = "0.48.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0b7b52767868a23d5bab768e390dc5f5c55825b6d30b86c844ff2dc7414044cc" [[package]] name = "windows_x86_64_gnullvm" version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d" [[package]] name = "windows_x86_64_msvc" version = "0.48.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ed94fce61571a4006852b7389a063ab983c02eb1bb37b47f8272ce92d06d9538" [[package]] name = "windows_x86_64_msvc" version = "0.52.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec" [[package]] name = "winreg" version = "0.50.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "524e57b2c537c0f9b1e69f1965311ec12182b4122e45035b1508cd24d2adadb1" dependencies = [ "cfg-if", "windows-sys 0.48.0", ] [[package]] name = "winreg" version = "0.55.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "cb5a765337c50e9ec252c2069be9bf91c7df47afb103b642ba3a53bf8101be97" dependencies = [ "cfg-if", "windows-sys 0.59.0", ] [[package]] name = "winres" version = "0.1.12" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b68db261ef59e9e52806f688020631e987592bd83619edccda9c47d42cde4f6c" dependencies = [ "toml", ] [[package]] name = "winsafe" version = "0.0.19" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d135d17ab770252ad95e9a872d365cf3090e3be864a34ab46f48555993efc904" [[package]] name = "wintun-bindings" version = "0.7.31" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "605f50b13e12e1f9f99dc5e93701d779dbe47282fec186cb8a079165368d3124" dependencies = [ "blocking", "c2rust-bitfields", "futures", "libloading", "log", "thiserror 2.0.12", "windows-sys 0.59.0", "winreg 0.55.0", ] [[package]] name = "wit-bindgen-rt" version = "0.39.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6f42320e61fe2cfd34354ecb597f86f413484a798ba44a8ca1165c58d42da6c1" dependencies = [ "bitflags 2.9.0", ] [[package]] name = "write16" version = "1.0.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d1890f4022759daae28ed4fe62859b1236caebfc61ede2f63ed4e695f3f6d936" [[package]] name = "writeable" version = "0.5.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "1e9df38ee2d2c3c5948ea468a8406ff0db0b29ae1ffde1bcf20ef305bcc95c51" [[package]] name = "x25519-dalek" version = "2.0.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "c7e468321c81fb07fa7f4c636c3972b9100f0346e5b6a9f2bd0603a52f7ed277" dependencies = [ "curve25519-dalek", "rand_core 0.6.4", "serde", "zeroize", ] [[package]] name = "xattr" version = "1.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "0d65cbf2f12c15564212d48f4e3dfb87923d25d611f2aed18f4cb23f0413d89e" dependencies = [ "libc", "rustix 1.0.5", ] [[package]] name = "yoke" version = "0.7.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "120e6aef9aa629e3d4f52dc8cc43a015c7724194c97dfaf45180d2daf2b77f40" dependencies = [ "serde", "stable_deref_trait", "yoke-derive", "zerofrom", ] [[package]] name = "yoke-derive" version = "0.7.5" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "2380878cad4ac9aac1e2435f3eb4020e8374b5f13c296cb75b4620ff8e229154" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", "synstructure", ] [[package]] name = "zerocopy" version = "0.8.25" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "a1702d9583232ddb9174e01bb7c15a2ab8fb1bc6f227aa1233858c351a3ba0cb" dependencies = [ "zerocopy-derive", ] [[package]] name = "zerocopy-derive" version = "0.8.25" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "28a6e20d751156648aa063f3800b706ee209a32c0b4d9f24be3d980b01be55ef" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "zerofrom" version = "0.1.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "50cc42e0333e05660c3587f3bf9d0478688e15d870fab3346451ce7f8c9fbea5" dependencies = [ "zerofrom-derive", ] [[package]] name = "zerofrom-derive" version = "0.1.6" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "d71e5d6e06ab090c67b5e44993ec16b72dcbaabc526db883a360057678b48502" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", "synstructure", ] [[package]] name = "zeroize" version = "1.8.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ced3678a2879b30306d323f4542626697a464a97c0a07c9aebf7ebca65cd4dde" dependencies = [ "zeroize_derive", ] [[package]] name = "zeroize_derive" version = "1.4.2" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "ce36e65b0d2999d2aafac989fb249189a141aee1f53c612c1f37d72631959f69" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "zerovec" version = "0.10.4" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "aa2b893d79df23bfb12d5461018d408ea19dfafe76c2c7ef6d4eba614f8ff079" dependencies = [ "yoke", "zerofrom", "zerovec-derive", ] [[package]] name = "zerovec-derive" version = "0.10.3" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "6eafa6dfb17584ea3e2bd6e76e0cc15ad7af12b09abdd1ca55961bed9b1063c6" dependencies = [ "proc-macro2", "quote", "syn 2.0.101", ] [[package]] name = "zune-core" version = "0.4.12" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "3f423a2c17029964870cfaabb1f13dfab7d092a62a29a89264f4d36990ca414a" [[package]] name = "zune-jpeg" version = "0.4.21" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "29ce2c8a9384ad323cf564b67da86e21d3cfdff87908bc1223ed5c99bc792713" dependencies = [ "zune-core", ] mitmproxy_rs-0.12.8/Cargo.toml000066400000000000000000000064371511036467100163240ustar00rootroot00000000000000[workspace] members = [ ".", "mitmproxy-contentviews", "mitmproxy-highlight", "mitmproxy-rs", "mitmproxy-linux", "mitmproxy-linux-ebpf", "mitmproxy-linux-ebpf-common", "mitmproxy-macos/certificate-truster", "mitmproxy-windows/redirector", "wireguard-test-client", ] default-members = [ ".", "mitmproxy-contentviews", "mitmproxy-highlight", "mitmproxy-rs", "mitmproxy-linux", "mitmproxy-linux-ebpf-common", "mitmproxy-macos/certificate-truster", "mitmproxy-windows/redirector", "wireguard-test-client", ] [workspace.package] authors = [ "Fabio Valentini ", "Maximilian Hils ", ] version = "0.12.8" publish = false repository = "https://github.com/mitmproxy/mitmproxy-rs" edition = "2021" rust-version = "1.86" # MSRV [workspace.dependencies] aya = { version = "0.13.0", default-features = false } aya-ebpf = { version = "0.1.1", default-features = false } aya-log = { version = "0.2.1", default-features = false } aya-log-ebpf = { version = "0.1.1", default-features = false } tun = { version = "0.7.22" } [workspace.lints.clippy] large_futures = "deny" [package] name = "mitmproxy" license = "MIT" authors.workspace = true version.workspace = true repository.workspace = true edition.workspace = true rust-version.workspace = true publish.workspace = true [dependencies] anyhow = { version = "1.0.97", features = ["backtrace"] } log = "0.4.27" pretty-hex = "0.4.1" smoltcp = "0.12" tokio = { version = "1.47.1", features = ["macros", "net", "rt-multi-thread", "sync", "time", "io-util", "process"] } boringtun = { version = "0.6", default-features = false } console-subscriber = { version = "0.4.1", optional = true } image = { version = "0.25.6", default-features = false, features = ["png", "tiff"] } prost = "0.14.1" tokio-util = { version = "0.7.14", features = ["codec"] } futures-util = { version = "0.3.31", features = ["sink"] } lru_time_cache = "0.11.11" internet-packet = { version = "0.2.3", features = ["smoltcp"] } data-encoding = "2.8.0" hickory-resolver = "0.25.2" socket2 = "0.6.0" [patch.crates-io] # tokio = { path = "../tokio/tokio" } boringtun = { git = 'https://github.com/cloudflare/boringtun', rev = '2f3c85f5c4a601018c10b464b1ca890d9504bf6e' } [target.'cfg(windows)'.dependencies.windows] version = "0.61.3" features = [ "Win32_Foundation", "Win32_Graphics_Dwm", "Win32_Graphics_Gdi", "Win32_Networking_WinSock", "Win32_NetworkManagement_IpHelper", "Win32_Storage_FileSystem", "Win32_System_LibraryLoader", "Win32_System_ProcessStatus", "Win32_System_Threading", "Win32_UI_Shell", "Win32_UI_WindowsAndMessaging", ] [target.'cfg(target_os = "macos")'.dependencies] security-framework = "3.2.0" nix = { version = "0.30.1", default-features = false, features = ["fs"] } core-graphics = "0.25" core-foundation = "0.10" cocoa = "0.26" objc = "0.2" sysinfo = "0.36.1" [target.'cfg(target_os = "linux")'.dependencies] tun = { workspace = true, features = ["async"] } tempfile = "3.20.0" sysinfo = "0.36.1" [dev-dependencies] env_logger = "0.11" rand = "0.9" criterion = "0.7.0" hickory-server = "0.25.2" [[bench]] name = "process" harness = false [profile.release] codegen-units = 1 lto = true opt-level = 3 [features] tracing = ["console-subscriber"] mitmproxy_rs-0.12.8/LICENSE000066400000000000000000000020701511036467100153660ustar00rootroot00000000000000Copyright (c) 2022, Fabio Valentini and Maximilian Hils Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. mitmproxy_rs-0.12.8/README.md000066400000000000000000000112561511036467100156460ustar00rootroot00000000000000# mitmproxy_rs [![autofix.ci: enabled](https://shields.mitmproxy.org/badge/autofix.ci-yes-success?logo=data:image/svg+xml;base64,PHN2ZyBmaWxsPSIjZmZmIiB2aWV3Qm94PSIwIDAgMTI4IDEyOCIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIj48cGF0aCB0cmFuc2Zvcm09InNjYWxlKDAuMDYxLC0wLjA2MSkgdHJhbnNsYXRlKC0yNTAsLTE3NTApIiBkPSJNMTMyNSAtMzQwcS0xMTUgMCAtMTY0LjUgMzIuNXQtNDkuNSAxMTQuNXEwIDMyIDUgNzAuNXQxMC41IDcyLjV0NS41IDU0djIyMHEtMzQgLTkgLTY5LjUgLTE0dC03MS41IC01cS0xMzYgMCAtMjUxLjUgNjJ0LTE5MSAxNjl0LTkyLjUgMjQxcS05MCAxMjAgLTkwIDI2NnEwIDEwOCA0OC41IDIwMC41dDEzMiAxNTUuNXQxODguNSA4MXExNSA5OSAxMDAuNSAxODAuNXQyMTcgMTMwLjV0MjgyLjUgNDlxMTM2IDAgMjU2LjUgLTQ2IHQyMDkgLTEyNy41dDEyOC41IC0xODkuNXExNDkgLTgyIDIyNyAtMjEzLjV0NzggLTI5OS41cTAgLTEzNiAtNTggLTI0NnQtMTY1LjUgLTE4NC41dC0yNTYuNSAtMTAzLjVsLTI0MyAtMzAwdi01MnEwIC0yNyAzLjUgLTU2LjV0Ni41IC01Ny41dDMgLTUycTAgLTg1IC00MS41IC0xMTguNXQtMTU3LjUgLTMzLjV6TTEzMjUgLTI2MHE3NyAwIDk4IDE0LjV0MjEgNTcuNXEwIDI5IC0zIDY4dC02LjUgNzN0LTMuNSA0OHY2NGwyMDcgMjQ5IHEtMzEgMCAtNjAgNS41dC01NCAxMi41bC0xMDQgLTEyM3EtMSAzNCAtMiA2My41dC0xIDU0LjVxMCA2OSA5IDEyM2wzMSAyMDBsLTExNSAtMjhsLTQ2IC0yNzFsLTIwNSAyMjZxLTE5IC0xNSAtNDMgLTI4LjV0LTU1IC0yNi41bDIxOSAtMjQydi0yNzZxMCAtMjAgLTUuNSAtNjB0LTEwLjUgLTc5dC01IC01OHEwIC00MCAzMCAtNTMuNXQxMDQgLTEzLjV6TTEyNjIgNjE2cS0xMTkgMCAtMjI5LjUgMzQuNXQtMTkzLjUgOTYuNWw0OCA2NCBxNzMgLTU1IDE3MC41IC04NXQyMDQuNSAtMzBxMTM3IDAgMjQ5IDQ1LjV0MTc5IDEyMXQ2NyAxNjUuNWg4MHEwIC0xMTQgLTc3LjUgLTIwNy41dC0yMDggLTE0OXQtMjg5LjUgLTU1LjV6TTgwMyA1OTVxODAgMCAxNDkgMjkuNXQxMDggNzIuNWwyMjEgLTY3bDMwOSA4NnE0NyAtMzIgMTA0LjUgLTUwdDExNy41IC0xOHE5MSAwIDE2NSAzOHQxMTguNSAxMDMuNXQ0NC41IDE0Ni41cTAgNzYgLTM0LjUgMTQ5dC05NS41IDEzNHQtMTQzIDk5IHEtMzcgMTA3IC0xMTUuNSAxODMuNXQtMTg2IDExNy41dC0yMzAuNSA0MXEtMTAzIDAgLTE5Ny41IC0yNnQtMTY5IC03Mi41dC0xMTcuNSAtMTA4dC00MyAtMTMxLjVxMCAtMzQgMTQuNSAtNjIuNXQ0MC41IC01MC41bC01NSAtNTlxLTM0IDI5IC01NCA2NS41dC0yNSA4MS41cS04MSAtMTggLTE0NSAtNzB0LTEwMSAtMTI1LjV0LTM3IC0xNTguNXEwIC0xMDIgNDguNSAtMTgwLjV0MTI5LjUgLTEyM3QxNzkgLTQ0LjV6Ii8+PC9zdmc+)](https://autofix.ci) [![Continuous Integration Status](https://github.com/mitmproxy/mitmproxy_rs/actions/workflows/ci.yml/badge.svg)](https://github.com/mitmproxy/mitmproxy_rs/actions?query=branch%3Amain) [![Latest Version](https://shields.mitmproxy.org/pypi/v/mitmproxy-rs.svg)](https://pypi.python.org/pypi/mitmproxy-wireguard) [![Supported Python versions](https://shields.mitmproxy.org/pypi/pyversions/mitmproxy.svg)](https://pypi.python.org/pypi/mitmproxy) ![PyPI - Wheel](https://shields.mitmproxy.org/pypi/wheel/mitmproxy-rs) This repository contains mitmproxy's Rust bits, most notably: - WireGuard Mode: The ability to proxy any device that can be configured as a WireGuard client. - Local Redirect Mode: The ability to proxy arbitrary macOS or Windows applications by name or pid. ## Contributing [![Dev Guide](https://shields.mitmproxy.org/badge/docs-CONTRIBUTING.md-blue)](https://github.com/mitmproxy/mitmproxy_rs/blob/main/CONTRIBUTING.md) [![dev documentation](https://shields.mitmproxy.org/badge/docs-Python%20API-blue.svg)](https://mitmproxy.github.io/mitmproxy_rs/) ### Structure - [`src/`](./src): The `mitmproxy` crate containing most of the "meat". - [`mitmproxy-contentviews/`](./mitmproxy-contentviews): Pretty-printers for (HTTP) message bodies. - [`mitmproxy-highlight/`](./mitmproxy-highlight): Syntax highlighting backend for mitmproxy and mitmdump. - [`mitmproxy-rs/`](./mitmproxy-rs): The `mitmproxy-rs` Python package, which provides Python bindings for the Rust crate using [PyO3](https://pyo3.rs/). Source and binary distributions are available [on PyPI](https://pypi.org/project/mitmproxy-rs/). - [`mitmproxy-macos/`](./mitmproxy-macos): The `mitmproxy-macos` Python package, which contains a macOS Network Extension to transparently intercept macOS traffic. Only a binary distribution is available [on PyPI](https://pypi.org/project/mitmproxy-macos/) due to code signing and notarization requirements. - [`mitmproxy-windows/`](./mitmproxy-windows): The `mitmproxy-windows` Python package, which contains the Windows traffic redirector based on [WinDivert](https://github.com/basil00/WinDivert). Only a binary distribution is available [on PyPI](https://pypi.org/project/mitmproxy-windows/) due to build complexity. - [`mitmproxy-linux/`](./mitmproxy-linux): The `mitmproxy-linux` Python package, which contains the Linux traffic redirector based on [Aya](https://aya-rs.dev/). Source and binary distributions are available [on PyPI](https://pypi.org/project/mitmproxy-linux/). - [`mitmproxy-linux-ebpf/`](./mitmproxy-linux-ebpf): The eBPF program embedded in `mitmproxy-linux`. - [`mitmproxy-linux-ebpf-common/`](./mitmproxy-linux-ebpf-common): Data structures shared by user space and eBPF. ### Architecture ![library architecture](architecture.png) mitmproxy_rs-0.12.8/architecture.png000066400000000000000000014145041511036467100175630ustar00rootroot00000000000000PNG  IHDR(,4sRGBtEXtmxfile%3Cmxfile%20host%3D%22app.diagrams.net%22%20agent%3D%22Mozilla%2F5.0%20(Macintosh%3B%20Intel%20Mac%20OS%20X%2010_15_7)%20AppleWebKit%2F537.36%20(KHTML%2C%20like%20Gecko)%20Chrome%2F131.0.0.0%20Safari%2F537.36%22%20scale%3D%224%22%20border%3D%220%22%20version%3D%2226.0.4%22%3E%3Cdiagram%20id%3D%22BQiAnaiH7KaMx0HOIAuv%22%20name%3D%22Page-1%22%3EzLzXsuTKkS34NTSbeWAbtHhMJHRCqwTwMgaZ0Fp%2F%2FUXsXXV4FNlsTjf7bqtdlQgAgYCH%2B1rLPSLrL%2BizPYQpGgq1T7PmLwiUHn9B2b8gCAxR0P0PaDm%2FWwiY%2FG74TGX646K%2FNdjllf2880frWqbZ%2FJsLl75vlnL4bWPSd12WLL9pi6ap3397Wd43v33qEH2yPzTYSdT8sfVdpkvx3Uoh5N%2Faxaz8FD%2BfDBP095k2%2BnnxjzeZiyjt9181odxf0OfU98v3p%2FZ4Zg0w3k%2B7fN%2FH%2F52zvwxsyrrln7mhjM%2BM0NkefZeTCrGV7obCX2Hsu5statYfb9yWSztM%2FXH%2Bf9P8Y%2BTL%2BdMcU792aQZ6hP6CMntRLpk9RAk4u98OcLcVS9vcR%2FD9sYnirDH6uVzKvrvbknuk2XSf2LJpKW8bK7%2B7YOlBD1FTfv708sePE3G%2FLH17n8j7brF%2FDA48MC%2Bb5tk3%2FfQ1WDSNMipP7vZ5mfo6%2B9UZIqGyOP%2FRw6%2FaIQhFCQLccb9U2X3uVvw%2B%2BqOpf1gfjCw7ftX0w%2FRC1rfZMp33JT%2FOYhjyfcuPOIB%2FusX%2BN6%2B6n%2F%2FdVvzKoxDiR2P0w5M%2Fv%2FT9t8m%2BP%2FyY7%2F%2FC3CN%2FmHora%2Fslu9vuy7K%2FCms0pffBsynBe%2F%2F%2FcoX%2FBgvCOP5bC6J%2FtCD1JwbE%2Fqfsh%2F7BfsBsP61mZ9P9bn9BiOYeBxODTx%2Fw6f%2BJ%2B%2Bn2rGXt%2Ft%2F%2FdZNiOPKfmhSG%2Fp02%2FSMcrXM2%2FXX%2BsgIImd%2Bbs8uWvZ%2FqPz03L1FS%2F8kMzO1NIMnwv29%2FnPqt%2FZE%2FAYU%2Fc%2Blf5uS%2F3f7EH%2Bz%2FByNlXfoAxAoQuonmufxG2Gha%2Ftj8K3P91rbZUS7%2BjzPgcwDa%2FwP%2FccQev7qMPX8cfNEJc0%2Fp56uvn7Dd9V32R%2BwnMJKgyD%2FDfuj%2Boel%2FNIFzv05J9p9H%2Fv3On2z5z705S3%2BjMf6uO%2FwV%2Bg8Epn%2FjEX%2F9efwrj8D%2FxCN%2Btk1ZEy3l9lvx8mde8mMQRl8CaP85AgL5Ow75s4tv0%2Fy469di4%2Fcdkb9DFvJ3HX3b7h909PPCPs%2Fn7DfXfDn2L9b7132d%2FDf5%2Br%2FuZ8g%2F6WfoP%2Bln%2FyYnIn439%2FC%2F6EQk%2FNuOfq%2BE%2Fo4P%2FXf5x89h%2F8pBjHMpbqWKQA9D%2BhNiMU4d%2Fb%2BPVf7XhRIM%2F8GQ%2FzOR9o8Z4k%2BYgCCgX7MR9B8k%2FmtC%2Bod0dE%2FQdP76LnAc%2FOQ0cPC3%2B76Oft74r%2BMB9k%2FiwU%2FP%2FS8Qz02JxO%2BYB%2F%2B3Mg%2F9O%2Bb5l0Hj94nWP4ka%2F07mQf5MZn2jSVpuvwkMYlxBgYD5zafPj3%2B%2F7ri1cfezzXka94Bc1vhTPWwvUxa1d1JPRC2AnS6eh191dN%2F5675%2B1fw1qJ%2Bt%2F%2F7A%2FX0dYfr2vr9bRmjLNAXD%2B6WS0GT5r6%2F%2FWUf45bof2b71w6uh3xQAiJ%2Fvw5fNz9H%2F8KFsKm9XyCb7n6sW%2FKfx%2FV%2BN21sv%2Fltj9HfpIvWvisPfqUz6%2F74IRf%2BY3P%2FB84GvgviZsrm8oviXKtTUL9Hy4xj6Y2by%2FfMHPvrh6%2F88%2F%2F9S8%2FzxqL%2F8uqz4p7rgd2bH%2FygL4D%2Fznv%2B5Aso%2FkW1%2BG%2FkPRvnHk%2Favm%2Bp%2Fzxb%2FRDYyF9EAPpbtV9H67%2BLfL%2FXRvwOraZZHa%2FNniPijADsP36X0vDwARDNfD3z8bIV%2BtoCubk%2F%2FC%2Fr4PkT44QZB5Fl6jG7t0Ev49I%2F7R7PdgnM%2F96cY%2FMXU3CO4%2F33WUF6b4AJGSBnH5R4PRTCA9Y6CAe1PprJ5WbvPE%2FJ940e6Gw3Q4%2FNB3H%2Bnzv2XPoAuifb%2Bi0efydpw1FePraxY0Ffn9w%2BLm%2BSNEjz4%2FPQZ6e2r4JoIHL8%2FzC6RBf11F2rJjuuK2IeTuCf0mmGXoffHwzEH2eJ4N9OmpfNTjNd8FMw28kWZcTWahYbZWZNIYtZIzTk%2BS%2B1VvzSZsRSB%2BTwfT2iYn5%2Fm8xjypN3cbRNdqZNsszDimdyuuxcdWK%2Bg0%2FszQ54JefcaMRTaZ12VyuFKJhmaIviAk9cFi08pLIT%2Fzl89bqz7%2BTLEePg75Nt36HTVdC5yXTrHQPU7q6pfv8rpUjCfyfZszC9cnmW3ucinq2XSlXcY%2F5ZzV5ZTt8HekzxwdWUzKlHPIbzP9IatWTOoFFofYyW%2BoI%2BA7up%2BPb5%2Ba9T%2F9PGciqzh3gNhqU5JT3cRrAP63PKFr4eAtI8h%2BlQmOK2MyQ5VdKBUQ4SLIzkwr3tCGPWpQ5WqN7Ijp0otE4614bxQyOp9buMagtrFG0qYOKobYHIHHQdNWNwItwk0Lrg4fVys%2BvV7OpnfNcV98agL7xFPBu291keE4hnEfk7EXRbpeZkFHZBQqmzmWrN2eD0%2BMUF1hi%2FIqXY%2FwBi4VKhTAnfwKYJvrNfWPSha7uv32HQqqe988gEh6E7U%2FFsIFuuQkeIUrve82Mo9ap7qTNLntFHUW%2FozmmKJC%2Bu%2BTx9j3CWjaPrcDn416otdHyifKIbby0gtJrJ8d0HiwFFHWyGZyCYGRejUFOYH5XY4ZiChucqHIkNqHtGkiU7q7QYHTe%2FnyN%2BD0ReY8r5svfthip00jQEPUtkmoLbZtJg%2BncePGXwCE6PNAMPMLBxxyJlnLXtxYGzjm5agaTAwfPEgbXZjTiIu0%2Fegx%2BTyRG77gxgXkbEM4BnrXnUSTQxPnCNzqmysp2tJFB1LgRNJyf0ykYVxr72TbXgsn20dknI9bYENUU%2FUxvQgWkm1PWOvh4p3Xpc4qxMkmHAfek704%2FjpxZW%2B4FEQB8sHQm5r2sV6hyriVnEgfe60nr9piSFGzMYhjZjtbdjmqC7IB0oWuzr3KWzrOoqp5ktI59hoPflBr07Ty4x3oHDkPR%2BL0MPQrKD2y%2BPZhvzoau0JMqYEwo3iDFursFRzeP2A8J%2FeULR8Fujoy4J7qMzt7hgtg82G5Cnd%2BYyqBJVvjZLQVRlh4%2BSy3r1MHQo7d3d84B5UDnWSZj9SSFpQq6hMxGxggMbR6wumwB%2FEWwTPd2ctSCev%2Fhn5LZ8EyB7JgTkM6xnVBywXb%2FeArgcD5iNQIOhx2R9rkcodqhvbMgSkWgknnS5HEBfOLYlYFgdGbGCrgepwkWXcbRTncY0gD%2FF%2Fxvd%2BMXqgbZ9TblR9C%2B5z0FiEVVEH4ccpdInwxls633GeRcdKKsg8vBAzS%2Bh6svSQlprGLXPH1%2FfuzByylvammXiRVWsjhaafs8qqWr9vwWODdpdwqB29MUlvQ7MQ6Sfw9Xe4KEx68xMje%2FIbZc822SN7nRODIO%2BbwJhIESDFRTC0Ak%2BDyrG2od8tpjXsFUsZv8zW3D5vmJZgLJxQUnjd76G%2BXKGO8MiC6%2BORJRQV2886tovGmA0%2B3dAzuCeNT8YHUdMnRtJTw%2B3og9zkGLIAi9i%2BWzoq88qd%2BwBb2gjK%2F4bQMW7An%2FBZVMFCMdlYLv797qb42W%2BA4nOrguZnRFYvVWR9DmqC1Gcc%2BGmMRYk%2BEfRxETlj83v6%2FvBrkzESdLzQ2Zriwvv4FnIjpVHhhv52NQI72MFbneFFExbrtEJglV%2B%2FnKt0hNn37wdqMrgOnS5GTDs%2FEKk8NKhMcEK9FeqdIvLPtwhcEsNG6%2FrE8IIdJtWhYiqXp5y%2FpYcDI7VPiPkLudJGXKtPToSSMigUmBUc%2BGzRmSdUPAD43U8yd%2BuGHKLOXKJK3c2FPZW2Nzqk3%2Bp%2Bplg18Ghc28RTGLiO7Cw4S0iHGQC0Efz8WbMtyWrXEGUk74T17WGiaKaIgwJXIz2SY4pvGre063L8aHPJo0598qMQXmLY%2Fj0eJoFh5VdcaVUZ5HXvQLJRityiR%2F02upAentBeMb5w4sOEmnyTxK%2F6ygdCbOsWzUy%2Fn7sqXrRo7AHqh%2FXgeIMsOjbgukTaID6jBUIah%2FbpHf5GNSnToNF9znMu%2FVYAwCvt4ZXeLXya7Yfqiyv9sikvpsNGKCPDdupIkNW%2B7ZBLe5TzsNdhR9lzlR1hJFG5h2avhkbqJWu8fjBIDcmuiY6rybKp4NauvHn8bbZnx%2FhM19unecVbdCiADtTmfVg294w46%2BcRkI9FPlG8FR3pBgaaccsqD3fo4o%2Bb7O%2Bh1vCXMmLsu%2BPm1JZnZyuCGYev7KZKnNIpzaOGYd7EdiD6qS%2F62b4ocnwjVVDYrVzGWldYkYUnDofEGmsiLn6%2FMdJ9vdmBpV5o9r7cWfhn9HEEIrdFWLKOEgDUW9tglES%2Bvn%2B%2BTeAcstwJhcLwIJQXlYYmBeChQ%2Bq5REIVSksMTX3YkF4O0jeC9x6rqrfVPXlDTR8aEBU7y%2FR5vJtPPaYkxCg30Eh24XakWOY0jhg2SlJl7CM%2BfD%2BBFxdjYV5USAzGxEJdmjGx6tWAu16mwmcT193DeM%2FFUz73L83V9QXzEO7GsKKs9EX2N3QyPogmynwFFYCu5ypSJY6vbRLijf9Ea9vwWvdbR3S1Kvgwcx4pngi%2B%2FXQXGT2KDj%2F3iojGFvAqz6hiQ%2B2TK7wRpoJK4rq5ApFHeD9fAKenqkCazC4GWXBsIESRDxm0VcLA%2FUTVTlqo4%2BdOcXOC0%2FR8Gh4%2BbQdLGcPHPTZBZpkF5ZkhxJFT4uiELiN5wSl7mtr4xgffbQzpRNj3q0zGCMkVSnnAEzIJsD%2BT72BovFEBExOex%2F2qfEceEZBd05vgM20rP45lN%2BN7IEvXj05bv3Zc2uUa2LOdmMiDBuh2Z%2FXwinysGu9kz6mrh%2FhmWlXF7JNXO8WXHWTEhoykMjqVYYqqNPCOaCrN32jecY8TbwLzZAdCGXYQ9Ku11NunamjJpGdCJ7QpQyIMLCbzdn6wgjG1uD7kADtE1saIRRoINmE7FlYklY4oXjJ0jDZXX9VyJWMcs1bSp0Y%2FEA47AMBrazvyo4M2RDltlAzL2p59DPNxn%2BvvPiG6StIYerjn2NL2G8T9uehf1ADTqNj4yao3GjKgkS3YtKi%2BeQJNJsQ6W5qyiS7c%2FEbOakOmUe2zEmpCIoKKRQ75AspmAxoYLwpUEl84JAiTb1kZeMZ797VjIePubDGKJncii8dcCL5x75O5j%2F5430mbpTv5xud7wNJ07uvsvM%2FxjSHMw1%2Bntd%2FLzZdFNHjU2Icd5matgRo0OIr1X1k%2F7mFEfMLVqFHLJyqfv2AguC7dEhZjiDGfywhTkaCGDa%2FCJ9FdscP8ySmAGT6oebG3rmZyBWdW1mZoV5og76iQLPnCxnwP5UpjaTRZB3YdWisfMYIpK4SQy7zMfNFbNmsq9LDZYVLsiutN1kzMjUQLQhJvvjH%2Bke2i%2BvHJeiBWIJwigBZ7p0pVto7%2BO%2BEqgDMdHpzWFnaONU6tytZakQ7Kt9Ky%2BSkvabsrfZ%2FuXsh261YGuYb9bbGgRrC76UtBLCjJbPTOSHf2hEYcVmKD2or5FIBnklVlF%2BZHmA%2BMvTBfEm%2B%2F3TeRV8c%2BF5LIgUQ0C5w7XJ%2FBLtVqAr9oCQc6pYNT74pjNPgI6u3bQuDtA5Fk60FVciFEXVjNS%2F0qbjrEauDn4pjCH4EaMvFj4GCFltmxoHwcaKwzB%2F3ohls%2BMNRnMSOKwRaQQi9RVmuDAqrMUoCmmAcYtJPYwsvUbsnhz3oQBA0VdGWUuNXEg4%2BFh%2BwDKkjJuz8jN8V6zjFxcc%2FYh4OPrn%2BhtIfJyiMv0%2FCRk56wLcCQkABkgY1%2FLk%2Fvn%2Bj2wjZq1mgPmyHCuyJQLGWEPS577d0d8xIIlhfcZH2iAFdnijBT0o4oYjXyLQSRZc%2BSB7CV8rIciYFL3RgaEiy53SOC48hi3PUwR0xJEIRGJKb6UsjqyZ2EZr4%2FJOgjjmx2PYwWSHCBjNWs%2FcolqaeuPW%2Fap1P2XLchGQyktLnkE42OEZGxUQ3wC%2BQ36gAVXX%2BnBK%2Bz4KMehlt%2BcAgQfKHz3KYKCPqDEj3uGGCsnjwjS9vWa4hnzj38a0detUbrmjPkHvBY%2FpcM3pDamKIecPUM6Yjwl41aK1vOa8lBE1uHvBgkAsHCedkyUta03Iblzy0OIQ%2BWLAA4YBp9bo68nQ9B6voKvdiOl9wyIzOXGlCiqIpmaOD4%2FnS%2F9W0Th1nRmq%2FePzMYMSnwWdVFqq5XjDXPQfTSTfTTA8TsZzsfeLcO72RH%2FAimjuH5HsEEEl5Ve8kCQ2gwJNE9Gppq%2FYCl4lc7%2BVXEKg48A8dLoyiVmDcjpgKydanuHNmeTE2OHNRYG0tOJMbL%2FaWeQF1KoRbp69zFS0BSGYQVDaQ%2FUjgprfC6W2yDU4wrA4gX4TZLWIVTP1UmPd4zxnhbSK5uc8dVeNr2tVEJ%2Fe7osWhWuCnRDnAmicw5xN13H8dsnkL2cKcPfeyV7%2Bw64Yh9XRvZsygmsvYjR7L3x%2BqVQRIehdGz1YJuE3aDMb8ZCXTC3%2FOohvR6B2LHJ%2FLN0aT90OnYotHAUgYUN44SIRF7ciJ3z1kSWTHLCDMLHXvgWHVJKuKlheBtikyf9vr2Fv6yR2%2BRXGQkEZRVRtn90GRc8TfbuX4q59ibuVVxivs87uHcitQsEQA0Jt8IobT3hzJhKK6hyzpOuP2NiXIKLTW8yCB00sdzAPJl7d6U9J1VG8uO9M9L4xkwpEFC5lCTvAFn100KiRSy1Dvn0v0ADt%2FCkp7LYZnYLg74Lr%2F9x%2FxR4LKBAwXkna9bVJM5CT%2BlYYGsKdm0Bkj22Z%2FIPQF1AAKRpJHxQbUsBHOQMO8llx6QCANP7aaWMmkVQSTFugYliIDXMm9aKjucBy%2B2SyJb2vIBDUX2cAbZqiQYeXysndi3kZhYtotNFzhG94zSDWMgGGSQ9ToR7xDLoDm11WGWOejjSxCZglogAQBhn4eacclPhnrPaOfoOzt9fseGcD7kkKw%2BAS1VHh2xa5KyFehTBlKEXKsXz6AdgluQe6vtjQ7qyiOhSVTAC46tzMXG8wlIFhNDuu8qaNJ4%2B81BN69gpnB2cknMV8E44dwhSpIlYGp2k4Yt%2BuY1FAPvHO%2Fh9FUENXLoA4%2FPlHZLkLGVAa3KKkTUsI0hcSi5B2xHGlApGu9Ck4A5RWU%2FuKJDFVe8FCUxF6I%2FkE4kwEMK8mng1Efz6d1gdUmB6etZwTeyR5tJRIm8xB7QxL69yOxNAgxIzSgC%2BSDfNY%2FQu2pzbQ3twW%2B5%2BxwRpCNXDaps4EFjyqPqLTOnPoSlnMS2Buti6n2La8R4%2BmCEjUoO0q0v5kZTKOv1MPfRvIR3j2QLikG0SBqHF2UcmevcQckqoQ%2B1OkpKKYs35cqLuywV%2BjiZ21U%2BC7n7QzFEB2cSM8sQLdl%2BcPI0lWMG01R40a3rgOtVA7ehvUjp9UIsPe04iOX25%2FEGBHx20E3xTCOp5HNXXgAnwgz2k2cH23pfPqVtKwhLdpwjVSO4pk1hIS0%2FnaSMIHHuhg0fAokvp6yipHhfUZYXd9YAHdUtO4EsxmEiCO4PvQiWZHlpGfQ1rdhYfbAWrNjzq0oCIifb1CKZZLCI1l%2BCL86rIKISE9SaGkaccMcjgRScq3GmRe9mU1oDjwvBbDHzZqVtBqdTOxn0w8g4%2FJWJ5OuZgVumZgBWEOuha9vNBOEmxTqq9QbesygCfLqgz9rk%2FbVghub9tS6CY1QrmhX72Kplc4BOAo4d8JBB2zFElKFS%2BoBQY5jjpb5%2FmYfJFYHKAiyQ6cxgUt%2BRFo71IX7CaKf59AXZzwo6fSysNcwpmW6N89bh2UEYmPPIcAhK0ryZoRr8Tod8PZHM%2FPmcDlEdLNFW0RPUXMREPKfqVStaLQaKaUj5rcIiGpk32xz9ZuC%2BogC4GRXnHToXlcQ3g5TN%2BhFUKr21RXfYU89cl%2FkqlS0Y8c3w1E0C4HcwFfGQceZDcZ9i3YCOmZpP1gHVJeQXTCnI9uDjdI%2BTr0IZFikU7HEziXA4pR4C80Q5EKy0sOYBTRQ2l7421eBr96WU40AddqEPot6sl8GqH2G9fG1CqAT9nAtmKKDWVN5q61nhbH18bCnd8YX2Z407c4V7o6AA9wQyFhNSWNJH5849Vgw0Jjctrrx95idNhvZz%2BXx4NZzWcrvPMikVpFOE2VfbjE6n3uH5ALAnmuClasqD5oqiw49iZr4%2BTqA%2F2M9fcEeM9E5d5GClxwZMClhq9TDXJkivE1EDuQOVnyPOllB8EN55LcfibRx0QHIS9%2BnHliis%2FaJdmUU0Sbg6apCi5BpIKd3oxoJjZRw%2BOc8WPv3ab8UVYhUaG%2FH38oxFTjiH%2Bh2TH6%2F3WufQkh%2Fbaw3ay8bGdx6HAY1tcm5gZIMElzEE8Y52V3gm8ingKC9%2BTcMCRPdCTgT6gG4Vwd%2BQsq7ERazYEWtD%2Bdh02rMHo1B5REBbULmhvBvHtnjgcYvob73sdgSEyiOJN2%2FBmtn%2BVOzkAwPnap1c2rFbXloZ4FWBag9LJmbHh2nFG9KvhE2P0VjZTJ8ZDKGRucn2Xge6MQ%2B%2BsUrfUarMAXFIWz1KVJmB1dZ89e%2BvUiYGq06NpBr7oeCF65FLxsLXmVH1MaNBQ34VILa%2BBRRKOFtEoRsndmg%2BigtLJ4bksyIOLzxOCfoiKSLRXK9goG1xGFWthxvRySyh4KGK2mqD8OvLIVTU99ewVRbNdWFlrZAN9%2BGDCifbLW2dQhYNrNQcCi23cIps8zvb41tmOZrUEFib%2B5LBmrCXwnTNs3xlZ%2FlnDZ%2BkJrQwN5pkiqtRfqOnS6%2B1Ur5oMP4Kqgla2lKqdDL6ig6Co4f6GiZSqQZ2HMc0nXZu7OAkdLwDgao%2Bhn1Q7aXmW9lVDVi5mB7ImLevAV7qFi2xHix60A7fB3dK%2FMKq9hsGus3mWdqAaRM5xjsNAnRm5ROhwwr1GGPD0C%2BA%2FjENm%2BhUvwiJPruWwLX57GxQD9MlHAGIRjqfm9TI86vEtwXRIhzb3kkDmLF2FQZ0e9SAdJ5w%2FJ5CrrObGJY6DOdMB6JQS15kA5fXMUmjYGEiUHNCiTut6j7ZFttPGnanmA6gYQDP9Mypjj5IHoLnXqd4mnQyC3he9FUdxs%2BvVUfkzodedzw8PHVqYnHz6CTxXzgy0ZgcDgagD2Ucg0c8zBbd%2B%2F7nxR4x4yCol7FSRdlg6RA7oQC3KvIKyNjVqkVkAeaN9BLVn06zSyqG20FxY5%2FQ3DrPnle4bLR3WrRP3PC%2BkTeZTuwwjHrfOMlCFCL8zJaYAa8gOwb%2F8APbL6%2FIP83U0GHZwyXc8GMVvc4wwZsz1buNB%2FWj4cKRE2Q0OqVugFNICsf1HHyTiU81f10fRmOfo40ZHUj6e8MYsRqE%2BHrjU48Qup8DNbcQDkyNzZIiEY8MHFts7W3c%2ByeJH5FW3vJrWMcJXOp0l7FWG5K9E8IFcwF0AIPPoFgTQkVsF8LL2cgy1EhUm8pPKwwKMirEWx7CcoeCd%2BNHtMF3JSHTRitkhIF0MygZoDh2hIa%2Bc3buq5ejpKwwl5XtxTPlW9oic7ZNzwbpZpdDTwdJxeRmMcNAiY6CqtssQi2tgaxPBb7e4HRkkhW6ElbwVYGSh4o0h8hRpjdKq3BaUr4q8c5WpUO2UMbT0lGQCqzWcCuUdEEcO7JBXe6WBR4N068X9BEDSBZbED5x7hPTxQ9PfVdQ07GLUE%2BAVsgrGKousAQ4vCdiJymWyCIcWcc4lRWoA3pwNg6q49CuOwa5PXywc5hHiOeL9gpScPdxIdhQ6bjVnN8UXQ1mSZ%2BlNKbV0b01HIPS%2FASCySG%2FQGVZmdRJQVplxAeUbXC7k2aaQYQegBA%2B0acIqmvUW5KSaoIhzBposLpsUDbbMza5biwZXsIQCiyh0AAceyD5GEwS2OqrPCLLDJEaF%2BK7oluu4NGZ3zcgf68qwV9hnOgR8c7QeZAmU9cEj4QY9F%2FryEa25OcaXRl3YxuZzewTP3vlGQI1Z2R4AUXG%2BDZkijvvfMs7j3XN3Xh6FrD5UBYxLS4ZeNblh5CN4mBF4GNgypg5M395F2ckA5F6EUj8G5tbmDDBxvjdRcSpCXWlQAahDsha1pFbixTvjXqjka6H18WV9wyMda1PQqkKB71p9h%2FFLqZTxMlN6rfcZ1C2IVFWhS7fKkCdIFNQKKvXMJxGKOkwqR%2BuYpgay1iok045AAdbjktk2L6BDcX2cj9xrlcDX7VKGG%2Bjf6aLCnSPQ%2FvShseZs%2FVZwKwvgraENwYHd6aSKrMtX4QALzCBcJOJ5cFxNjFBIIy6GeOpCAcJt%2F11ejR6C4mK8zByJROphnOoJZgccX2uiDNqLXJiJuP4QVhlkcgNTXr0hrPXczVupkJa%2FID6h1JYWhu9rtt8efm4ziJbfU2r41rK55Aw2exIiYefF4%2FPrEl08qEM8JIw8bH87mEsiwcDqOlXSMNjqnEgUCfeVYFjVqshSOBiL3uFkNdTuWBdqwjqTnNosmvzkh8yM21fEzy3JyyneagaOjaWfU9Bmjc3YzT10sNP0efl8aLH7YbrSM1HrY0B13DTkV%2BCkoNcSR91Ht5BJtoZ9KaxtmL4KKCxgTPsTu9CYO4U4JOnSohtcdXpQRvw0kzGvRgZyUyANYmh2IcmOGHPEFxmowObuZOuKkgSCbSdozYKnY4dM9Qs2bA0o0gd5RNuXfZ7O7vplU5YcTbzI%2BsDduvOVoCCraOzB4y%2FOq11E00zPak1J3ofi9JwD4uJ%2B1GHRUBO8S3OX9S1p9x8FkAm87UX0T0CP15vvpyevbD24RXVmzSozJ1hq83o0qgDJ31AlEr7%2BKJoBqTIexo4rZnDp5fqoQltn5QYiY5RfGJ%2BpANuWSIJGQqGXntuwUFxmZDrbeSCyNstLpRlWUjsWQ2FpUQn0HoPf9XewjOffIF8vvNQSRNzfBklvSwvvQcS84mSNxMwJdKz1ySXoUs4YbG034tgxQ4QskszPuVN21HtW5Hy8nJuMNMq1ZNFLC%2BnX01lA1HMIycpQn70Pj7Pgr1ihQC8FRvrsju0wnj46%2B0sgNU1wpMmvpo3pxEL600XzNMbzGWJ%2B0GU6o%2FrF3VNp2530lpUWaYDsifiDD2HQVfjEhJyHbqxa7Zbg6kL8Srf2SDPEY777za5U5GkV920tkEmU0fUPJU8ZUUfaON4LQodv9q5yaMPtW4znn%2BUUzl0Oucwn7S9HQRbsSBei%2FAtiEDEDK9O97tMSLQxFnQyMq4Aix0SGgj8HayycGVTKmVALFQbYfWH%2BSmsXcqgUEgNsI5oegzNoTsuy%2BwbR8s3l0hZGkCdTC8ylN98OkFGQqHhSx2Chz054QP1gemfYuAMXc8rqFEVEWMfPkT5oa7KIFkp6U%2F09tA8g0vWjq3B3z4rBKQZYkQqWMK8aFtj8aUwNDw8c4p0UxQWT6OHaYcdVFpEGGIzIJGYEEhCyleeEg6gWcIdDEkHrKs%2FsyQGuz0MWhFAoYS9HCA0dQ%2BTULJ%2BmupbnYhTh6b5UZQNN%2BCJi59bWGgHryn10DTPO%2BUGDtSTJoUIKWe6KI2QRgGZoZkf3huUA8B5hMVmwmIHwuRfxhhkz81Au3IKM84neLx4%2B6CgYI8v2SJ7z4qRUi2Zeb%2BJcUOpGCNCMTxnB8bn2cMXaMFpquI%2Ban7zapSl10Qs%2FBLuzufMZdEgAMvmNt6AeOXYx94JuXzmc15u8ajdubR9ay7DBnjXegxhQUNznSSMWAU%2FNZy2wG8pd5wNiE5VD2coF0fHZ%2BGnGrA4U64VS8fh1NLMdGvSqg421Bc9QHpqKH4iS%2Bi%2B8Kqb15UjidEEMoZsOyh5%2BWDZhKmG9qt%2Bzl9wUm8IC1W4vn%2BWJwrR9au0Npxadhkd55ib8sFXP1DvY6%2FdyIhekRmuwABXLVMukDigZE83KNZRkiY4y8%2BanINfT9CeZM1Ed6YCP0UczCqMPs6w3bKs9ulYKThKJF4oVE1mAlMRKofoCdY2O9YnvXTb9TKYInXxM25IOGeTCohjSYPkFs%2Bvnjr%2BoGaT2fHWiAuqjO3JLWMOXh7va1UKnH1vRA7qd4bZP1R9Keb4o4p5Mfrmfsgk3VeC9nlwRvVUcKgiV%2BvOVjwl0QJtj5nKNPnOUhQefslvKF9Q%2FEGsjiaiF3UtIhWMwuZh%2BJvaB2kbb6rir7oTi3wtiU3Un8DqOkinrV2MNQgsVzB1vwxuV1XYAKTIjJe5kSJ7aVOFZWJmXZVxJqI5DD0GUyyzRSOC0cle4gBdCKZXWruCIpAD%2BGpwHnfyEqYdHUL5VjGDX2FY%2BuaQ8JIPkRohnCJoF%2BuNvBeSmgVI24R9epEBCrc0DJ9YKp8FA6VTb3sHdfa7TOzhUIVtNcraa9Ex1S0dcSujRs5HMMlkkNR0BuMGDJuNXRtfyS8W6EEFKc1hcxNzSk43jKVXYbNCsqnyRCSjMDy8%2Blhcrb41SUS0h1KCTX49qZR9cWctO9aGxustfaCsJzkqdMHmji5ojUzfm1WydpjGMcwsJ8OBTn8CFShG3F%2Br3vL99lCnEvcbxcx5BMpliPqwCUO7xWeSlld385f%2FYfJ1C7CeR2qjMVhJgVm7XvfW8UwhnraFf%2B1gtSwXSp6fHOcyyxUgnd%2FpKdbVlT6sKuZEimjxw52RRIArrUnZUcgBks5kWSwzX93CWkyr4dYgh7oZXwHE%2BDoGOxMoGKF3gpj2T4XqZ9rU3hAf6RR%2FYOM0fLQ%2BawQD2kWBm873Is8CQ7l7V0jvsV3eIq2a3LAXvoXZLoPfXnP%2FPspwZlKYpXGAklNFDJ5JCjCVVtWy4%2BYiLuQtB5YIZNSe6kB38Ns3MkoDcstHHcncuTQxduSkAOAAqLT2E0cdPmvrOk%2BxunjmWN5BZqGW3Ecnl1o%2FjKXn5K8NgQdLq8Jowv4nfkFTOmfZsmd5RHRziJESnxlYQNJzDMNbW18Q3d1amOk2hVhpO4WhlBpOZPcXQk%2FHOzc9YiCrSHEBmpB2G6t696vzlgSyRyuQjAgMXXABe30SdoGUl6mGxGhl64NNc9zo5HbEiSN%2BlqAAi2sIwFjD2kFumaaZS1PTuWGpH5e8ilZ0S9IF0gx7%2F%2B63T%2BPn2oyQOADUNODtnQDrrKRNoXx%2B26hRSnnfxaHgP0FBmMeT28L2yioENuettqq96z7ru58nw9skgJyWf%2FCI1U63HOa%2Bq2e2qwqZuPh5CR9wprRUpx%2FgNYf6I6eJRvCqZTRCq%2FLhJ95jsHeXcd5jFr8CToy0dqGNpvZMdRXrbXh6FbGg2Hf9j3%2FwLPwQeHVOXrnbPKT44X6OjzyLPObUajq2IeBhr9r1U3uGUCY8nsb%2BMUyb8BWTMVtedvBu1DDsfjJWJLqM2ojZ1RZcmkN1IaBqzz9LxYH5gOwGQ%2BN19BkuTwDtDx6dHy5xvkwAavABMZ9ljkf9JmQickg1flhFBkHsHm5dENU2vQLq%2Fgxwx%2BAvpPAXh%2FcRtBlJqxS2VjwZTXl92mt%2BTtItVmyklOuw6OdtIPf8hKx6l8Q5Vqktt3CDYKJ6UlpOJTyGQtGwJLCH%2FMK50hFUmjfVx27qL2yrsQdamyNS0H439ZVPGRg%2BMK0AKhWfGGXnTcrA4pdRM6HV348LL0zwsErEsC60P82z9xmgh%2BswRbw%2BRJqLKT6t%2B6I2dT0eKvZ2hMTPEKLCWgEx0Fs0ppT3VUyr0kSWhlp%2BoEC9oQAcjvMDdgnNNL0x7k69bPy6HNFse8kj9GvNRyYWnKB1jMdsGVuslDd5krTDg0Vm%2FmvT2hcHUg6GfjjyXJlnchpUfu1Vw%2Fj5Z0KimXxYmuU1eV0Fl3DcsJbZm79voQOxRfS4CBiRc8fI2yl%2FvxO%2FqJjC2ykgQ8C3K45LzRH0mSCueDS5nK60U5lRou1gsrPQ0jIvWgvn9WzKUp6pDYa13RNH1xJHm0kLEgO0Srm2%2FzKpfMQ1yOuU87vkJ86G%2BFSMnRsU96YEZYPodW3tZvZxDOyU%2BiqxpdnLU7WEcknDwLwse7TsNN2JdBPD2aBzimGW9tN%2BQeULpr7D6mzjAk0f3ZRha85KRg0lS%2Ft80pUVNVsFt%2BUaE7CD6whYLjAr93a4AMrr5j017PNMsetVCvxguI%2FsTuYQSaHZqhvINXlD7u4yufuJam%2FhIjrU5C18g%2FSqyfmPanTrvpBSSVV93ATjq4a%2B3%2BDBrHdyFTlUoAi9bwh0tSvv66XXl5zdchEzDIOz3PG1BQsPRxl8h39v0w8jSe8XHryx5M7enqO%2B2Z4cupmv86Yo%2Fs2w9io%2B%2FaKwbL20PcfaUyPWtyxv2KCAUArHHUovxqqla54700nlVJrjZ70c5xn%2FiERwzOqCbm%2BlUQZ8hq9KXIpBSHbT2%2FgjRYt4sGmano9P6Jh7AvmHiFzPRFTQT12ljiz4UmR9Ph2qeCWzIlyqcPZkYW9RNaEGDWKOhBPPRJ9us0jJQzeyKi0njTGnIPOTeH4Mb2Y4PZIrNUtVXqlxdFt4Qi%2FfWHd%2FkKTrSinZwczwTbD0c327h2oPLlOiUUV%2F7PxcVwps3et1UNQ%2FEK19br7G8ib1biwViELnkUWSfBxN0wAt5LVN7t7ZDjgDN9qbKnYIZewMA1kQn3ALYSE9hD1eT0Vzo6cJBcXRuTEMwRAugklU5VNbPjKB7hViVDSWtKAEWU%2Br9AmVEjULz8E8KpFjWfI3gK1zGEG9psCIfazTBmoFwDu782HwMPl80Y%2B5kJ%2B8ipOjUUtveQKLNsEAinb9na6SlXYdRAl8q1NYpx7T5NqvA0Zpa67sSG07d17d%2BgUBmAL3tqBMgVUoyKkTwcd4DbIWgvCSVS3V4wHSp5cEkltn649B65Y7FxA%2FsO1fqQpfb%2BYDcSCxWLXce4tNcSoAmi5mSFeLrIwaHciRJNzK11qB14nVBmtgDRPnxOjzOjhiqiJUELc1%2Blw4Eal9V1k0jRSOhqBMxTAsjXXn02O3z9fCWBhVqtBwr%2BaE%2BTpeFA7NSPpOOCfU7V7i5MDk2vv0yW5S6tLJdgtSyvWIuC0VDpo4xFxBKXPbwup5vHzEdXPEM202WrqdI%2B2pJT9zGdMpiMC1xccze8KS0jfPDWQkHOUXbOOv5zneOL09akTijxCsrWI6N49gS2dUqhEHy8EERY5%2BS8sb5v0xyu8Il4m2ojD1pVdXjrTqhrovjFUTIlaZ8MZbjiKRp1qQyxiBNT2QxVD15mAceaflosb3u9FWZoMjdI3108fdPuWtSf0grXBN3yJVb60ojSd8n2w%2ByZ9Qeahh4gWWhTOiRn5VJ3DINOAza50bWaC2OQZqN8xC1piw2a6Sk223eNocV9p56aMtGSUAbZMM5%2Fs4f2z%2B2Q93qiuaJTXapj52uBaD%2FWbVNupOp%2FiRwj25EvqAki6BJZTdkYN%2F0Vc9k50saNtnaw1aWojRe2RlUhnyS0lyFuUbd5uqwA4XJlmdZkhDWmaOfgMEpeAX7jw2BpZWkCU%2B1XfjrBtqHrW5LivMP5ctHOGb005NbYROHcYKoq3zNo3RK2WC%2B%2FbYqLt4TKltjbeWTCYP7K3IlpUGSxBgfURvPrnqZljTBeZrfW4Kj9tVFwhdv8FYYJFvbg%2FpGEO1XvMu93sFEdFqekyanUvLZxEUyB02sD6OaycNe2mWpLMhiEOoE27NAQAOy11zqQ1wUBq4kVTlFlkTCO%2BoUiqempfA8nN0jabLvbpykD8b1ptz37%2F9J5PZN2kLr5imLNuUZpxtdOLFUQxv%2BAoUmxzm6YFtrM%2BrtETBsilTSeYO4oaXWXAYxWkNB4YspiWF7O8EEo%2F5HXBvs0ISlJGsT%2Be%2Bo13MvQLGpnMvq9l71mpNcn22B3d2cbYV%2FX4MwcexHFEdsfFMCrEmgiGYi27b0reFzKRR7B2oXQoIAtUtKNZoTYS4gZaB2NYJHqdoukrE8THx4mr6SFDPI00NBH3ai76DtTZXb2VemqFIWV1DJQelKvqcEfv5ZY7b2yDJS0LKOwjChqw8AfUpB6AdpYmwdx74eLRKZ6CwaM85UeVmprIggHQH0XPCsoI3Oj4D%2B9mT%2FmRWWThMJQTbbr1lMjxkemlNtojIy4ueFLzflSE46QR%2FYQqC51EEtAa%2FyTnVjYdv28o%2Byp%2BTJQvlIKUcclDIhbZ7LoQP5jhmX8zmasvH0iD7FrT77A6zSxBf4sIV2Id5a0FKfb9gPKWd2a3JO3Puop%2Ff4tO1VeHzsr5T5vBJIGxl8zjsFmA1k7K0hPdyHjegRrOmSkkUbUGFcwl0kh381yLmospZeH3naaOkHRCp7I71eS199QgxdhZbZQ2RRaQgoWPaWCV8F7m%2BhVRaf6Ce3nf4SqYVIrox4HMB4Nghwess9boXvZzAGxezVEH57uYStDqLlvZXi3lbPjq2F2xM9WS5BsRlPkmQgsCML41MEI7GBPco4%2FBLsHpiX5gVYQkFPFSm0oUPh8BGdugzQHHTGK1zzqD4R%2BHT%2BYNfCmGz3St%2F0utpG7WRLa8sbCJLRWmHwcri8fH68aQphQ%2BIjbIy%2BHiHmmgQJqq%2B1Dt7ffqTxidy8nrLoCxyDW0lfe9CREuBo0uW%2FmyI1yEKxiWEhiGGM7IJir8%2FBUxEJdQ7HBwE2sljQZVyYp4sQ0QkyVLaLr36rKrBaQMNSg6kphcEU96XZ0oQmat669cikIpmXS9YvbYy5p3SBcU60EGwNejTXnYsKzEbSZKX419YoFMuzUnZwMZgsxrPf3p70zgr%2F54gTwnq5kViNgqqGq6Loec7BMLY2wj7xm9boHnCKPNhsEwKQO9F7kN5R6cHkr7mCFEe93jruJWc5O8cruzwV3K1Pid5L5maiuq9LJHylGkyfa9nfLEeOnkg6Vg47Ea%2FyIP3umTe5Tt5OGpCu%2Bots9H3MNgd8zwTqeE8ZKkYNE9L93VzsTDISdIJnRRLDrPASyejU%2B5e586tIqlkUfc%2Bne%2FvRXL7%2B0BvHm9OJp%2FmQGzypeajfu7Xre0fH7FRTTrXmYZcnzhfIiRVgB3yK9xkQsSP9qWxOJ6Qls1y4mZXYqC%2BDhR5siHHHINrDYJuxaRl3AqxpFq9G5uDhfdnLvBOsoC6NoAnaofafevnptFsb13sjEbUEAF1A8hyRljRUCRNmm81Dq7vIFttjFi24jj9jGdfXbc06OwgiC2X6PgVwVx130MczJXQ0c6gAr4p1zL0MLeuuJeumlNItukjnWBZkDwwy6JyOJKtBP1qW%2FI%2BLHSFwdZrmzyXkNFwSpo1ONxoMAP6LTUY1YANZgnsGq%2FGRmZTB1gowBYXUueMG5dAl%2B9VIqcWz8aMbOmlw%2Bin6pwm%2B1y%2BduwalqCd6EI6Kbn%2F%2BIYqX%2FuA6kXHd%2B2h%2ByTGMDrsex6hC4kwXiDfbZt60tc%2BdBo5yEkNnpjCeyLSSOVo112SECwV5Uv47vdyrG6k4rflfZFEDyfse91Vr2Lh81mPuUh8jNN0CF7SrVvEka%2Fs63swh%2Fp4IP3OLYZr%2Bo0VxV2TAIXObGkJdxfYEkDlYg5eFQaru0%2FzB341RkHgc0cIz4bUXz3KhSNAzKbr9gmmHx342rp6YK8OrEDBGGqV0NXFaL6jUzC8fcfircBB8N3N1pqUvDR4DTLfb6xnmeWXAjH27TrAk4SXzucqMtEmfWk%2BD4tgk8sT1JE63sGNShiTN7wjB9R4wwdxH7Vdl9LX9%2Bc4GizZO6BihqEJY4yqgD7Ajd4eKvBKFyoR9lHq7oJWxZCCdW0DdRC0meSIhTwkiQ%2FS5hJQSoNnEU50Q2pkx0M9CAp%2B7mJ9yqnsDdgnNld%2Fp8PtHups7lbc9v4nyzkDdWZ94WLBn%2BRFkDvkgwmReYtfqmG4kSiNJk5ikO3E7VvCyQDUX%2BS6HmcWyi%2FoyYGF8obAnArnjTmGPnjSR%2FzJ2JBQrmeKqIszBtrHM0AqAVyM29m%2BiFa%2FHogdqchZf9IDmJavtfuNBNpWK81C7UqHts1D6nL%2BeOblSFncwYGqWSuhvMRdDNJNR3f67cgK9kLHVUTxYUKHAYqK13s6hiRKqc%2B%2BJKXXvEp9D%2BJCijSn7OyeYJH6GFlsA8oXosymX57NevMzWXS1JxUK6vSl61Hl4E4%2Bnwb29mTM4wBZUH0lcY1zIg32D5S6KE4kEYP%2FHpm54%2FcNWVH%2F8kGvFf7wh6dnuE2jU3xPCkacsOos5W4Yo3CS9VGmTVL14pYBJJb1HH5tXIS%2FqmxNqyW%2BqX9%2FFy4s58%2FoMXyqa%2BlDRIbSG9FIF5bHc4IHLtPl9iiGBQb0gLOqDL7LKbTzdJmz4LVrDRYChCMdeZfv4leNBHk%2FktQgv%2BuV5Hj7SRRLH0RsXNSFmOKzJuoP7yO%2F0ulhmNot6TVcOsu1mKjPa%2FStalwyx6t0sD6ak2mBRiTXTgzdgdrj2W5A8%2BdgCl%2BdWYIgaJpiI0r6KBu3wFICoXbdrNh0w6qiAKDJLTOCNvpGiCaxWOK5x5OCZfVgXPQbWg94XZw1XREQJLJ%2FLIqNjvBxcxM4Dv172lOJZ%2FJa%2FEpGajfrLDVGyeWKF7o1Ry6vrlLcDtGqG4GecVT3ZPyxRhBDDNO78q%2F7vZuCubRdtXQFQYnHFKigqlowLdjtWi0S7adJdlHuoZEc1nnAgy9IzpzPGqtoz%2BzdT75qGXgty8Xtbh8LAM2D3e%2BmTGDcp9R5vCoR8NUznmQMe8ofnAaWMKYpPImvtcenjscL5SYldWUZdmQsHHrkE%2BYugGXOW69IL1IfYR1U29Wmwx3qTyF500jfz1W%2Br8RbSRBtFRGnNm3iuSTGtR0%2BhLLjnNyhYUZY%2BBrAAgL471Z4RbYmjkrfU1JPQXq4Il633UuhFr5vPh8aazMZp9yvrzRiWO83QDK%2F1OalcbLFVWE%2FNmXUlBN6paKizWtzk3vp1QTKJOmJGs7haoYPlJW%2FX6TUvQT0xIqDNYumdEza6RdZ9meZeVDl83HLBeqjuZjTjqXKx3GDPAyc8BrbRFDbVvcefn79LwPlrfZ2erKyiZ7pYFtWDwcFCmDEc4DHbxYuxXMeh3OorR%2FYFzRgU4KSeFZYMZQoZWUKw612WEEVBRcVgUGiNPq4aJydTeX5Ljk0KueGfOho9LVwSdZA15FCsXSSIXmgmrHDXiQQH1iyy6fpHazVBZXXBaoP95nX7XnkYgHfU7C8VJcox1ZsyyyhZJU1SO%2ByfC3hM39hxyKZ5K0q0edBxEjI0xkn3LJC9QzqEea8nd9iAPj011at1zOJhYP4%2BhqEv%2Bu0STnoKxeNltoc2jUUOiOpNBh9D8tQfDsoi6R1TZYRAtXfvqt0lWtgJ0di%2FWp5XJ0gC48YEdXWHaK3GI%2BjsQW%2BPxRPFkpVFeT0F4VlhnlzDk0SFvT2c%2BID0lO2xIBiqezEHnebHsxZMdLlQ8nS2wexjPqbNh1mCFvxA5OeUPRJrhN7gy1%2B9vx%2BbC%2FndOFGeX8S50ETXczQt%2BIlGpbEbQR%2B%2FUQ7n3E39opmNAKr4HVhrzh8eT4VYP%2Bnu%2B9actzItv2aiTjnQRPw5pEgQBjCA4Thyw147z2%2F%2FiCp7plWd0mj0Yxa0o0OdpFVAAjkdmvtnZk7E%2FwLFZQrAnneuhTAMly098t5WjdX3%2B7iPRhOHpQNqefCs4QftzVa3abX23E4Vq2QMgUhBfRlmzqagpAp0A%2B%2B5T3BEwPZY%2FalsK5jB2m7UouYvANLcfmJbqMAVin8id8e4UVRM7pprYllw31LWUPh3gGw4HifCuPtZfMU4T%2B0kY98tbtfg8pkDdPAHsbWGdndbvSrxRHXmguUfaorsDiVicS9pMPjyiOK6GSbPkSbAnQPLP84UmyUn%2FjDMTkn8WinAX%2FQg%2FtSoK%2FZpKY5furvdIX1xPytgK79qlHGhB4kfCeteiMaWX%2FBr31o8%2BYF6auba1fyDjLU7gEc3LBfvdXHZudhGYV5PWYidslAM06XymmOJane0EDojyu0WOWAWja8mzH3gOP7YgfUpGf%2BXOpAwkY4ssXziVSjfazScQGojC3mbkwYfGCTMQSzfQ4pTi9ZVcX7zTKy2XKiLWUYgHPJI27cwEEYcCK3cYpozlFACHYVVB4hXjy7lyPcdRlEOh0wRm7KYfIyOzP9UXfBSM0LKEler4SICinDWXlinOHEc5CTBAKMzoX%2BjodENt9cnab3SepFSc%2FWemIEzPDxPH9gkfME2V9IlYbpBtPz8IABLkHgvTGCFhucpZOTOl2mx6HdQrc%2BWrzNr1uFWRoHcTUae6mcHlaa2CQSdrOmRk68BGhPTiQiVjbxXnZ5SCb2YBLC8oDo0UvtS6A%2BROWyvYb0zO0NVxHcPSF64xP%2BvlJSvWgteQEpTo0peNu7PhKCGHiIDIRENx0j6YQijQUJjYRx2r3xBZ%2FoW6qTSOgmH4zuYwv6lpOhRqhEA8SlrCXFfnRudt5v1SOWXoe8e5w7Au4zmS%2FeunQTHtvlo4fOkzY4htn6he0KHVikOR8SzDoKnliMHTNo6yUNlskBUgnO5bnPphkWKpjOm1N9r6tuRYNv9M0KTAvxPaYtfTqsy9IQBHth93pK%2BCfFPErTVVn5JODSaXyiZVPKNj8b8WFwwd0aNO31yKx74N0T%2BMSDxXvmFXcrJAiHwfuHEg8nXT5p4wllI%2Fgks8m8TZur0LARzkIPU8hnLbY2gPzf%2BW3VVDVVcCA%2FkuQrL1RayoUg6bQFaour90VdjGk%2FVhR7yDiDTaRkTd0oQrJ0pUr3ynjVeCU7KtZelHPd%2FvZ525bKGWD%2BwO5upviDlOkcQQhbxeAPdn6GFUsSfHUhGWF82tUwZNicq7JJbHnr51t3h8gKJaSB3QQZB7ZgvC4mhITC2Dx5WMn88O5TZWWxoE7Gh8jeg1GVCbBxAyPQm1u1a%2B2r28qnO7XfBpdSzB8f9qbrzwTL1B1KzZjoWxWKxMxfHqFRyURk3WoA4fS6V2K5T%2BEEICzktGlXVE4QZECvE1OM47uWqenHkKDdY9YJ2mCucE82aRswxQFYDF8KMnqSFv%2F1aX%2BXSglevI2qYo7IawPTiOw%2B7qJLdDqDh24JaLtJ9xH5PPkMwnOAiylNyVK2hHTjfqoTbD0E1k5ullAkQoJO90l1qG2IetchT%2BBFi80tx9H3ZgwFUXvsavlJuWExtF9gVnBMuJ%2Ftu3Cz28o0DZuzwBZxNxCvKsnj2JqhGXc1siBm%2BloMM%2FnFi02rCHeo8IpBipY7zrsFyFfeZtRR9sEl49HMW%2FJ0udby0EqKGRMBYMbknpZqBoGlxbZeGi4i6BWowTYAnGqGGg36gw3btWCAlenpPdFHVsAhS39U6RWwQcowMkvkQS7N61ZdEB2VJm%2BKMGC8M8NP8XEjrdfUh5IuQ6GNS%2FchXRuq2kr5jAUdyOlQgnnjlUC9c2ptn3BricrO0AM0chqd8ZBNPcVfCLLfH3MvBVbMNbpTp32qaDVcAuGmBo6fDqHYKVItBfbARA0Q7NGx9YHxn8suoYymGwHUVLfw4Y1iZys8sxrRY3lCMwR1joWZndILLmY4xNo8ONo%2FYbkpKn2YQw6TVTwYeijX%2FcBpClcsC31Y6MF4kCwllvB7MfXuqTJa8E1Bj8OyDS0NQ%2B3Ft3KUIIqFugF%2BRYNZEzwIfV3pmUKyrwNmiOv9hjnNvpwc9N4ZBmsLJQXsElAsGN2FlDSmZG2M8BrR%2B%2B1mSTSYW04ctKtxFLyRdGeLK3N6nnFKLlczppUWWR87SG6A6cEKquSDmOtEPHkne642f13Cnm2uHMdJ2R3zcGEhWFYcrmTucES26nedr%2BFeigCW86heQLUqGU9oCKUMnLLDw5Hsg%2Bs82OHc984r3YVvH0JEBF7CAbd5OnwDNVVeJ7AX59plyFYEXHA6biA26imIUj%2F3dMkp2%2FMc9yi2A0B12a0uOKMZt7fRm4gp5C5IGTLQCt9jn42AMj%2BRWdQyX0f6eYvjF3rylw3eTpua9GN3kwugtFRrP052kR33jSsm%2FfJSqXGWtp2jcNZAAowEGhNegpNDUaUMLDnwFTqNvYm83kAqRrIhMA3jUK1jLIgUL%2FkTlqtwGBgvLFuD25TXfuPql%2BLmgei2Mjn2ClNCjxQsE82MCbv6wXu8oXkX2CLvzc4vT5XcumsjywZH4DbqwLFCU%2B5QbjBJYlPGEhvMbsSJVO9tdEEenqkl7iQnPXPbeIr2JIJ5huU8U76ZqR43B90ZuB5l9N4y7U7AgyW58vV52VPlSGZxNTvc6TF0X1raF%2BiJGiTCo5aMCu%2Fg%2BRSwTwxJMapQoeGDJa%2Ft8QQpipFIBstz7cs9MLHk%2FmSOVNmuIdFASABmeNXNTDP2GeK79%2BYYgaAwjBajV098xs5064mduvb867zT6f4ug1IcgqTproIVGkI%2BSyWl1erYkFFlgmSRC6LALd1Gi6U08V01mVHUNYBOWekL8XpMynl2OUPoinlUpp%2FOjmkfh3883W1wjtO1AIyUU9ZkBvZ0jU5eadj8xVY26JndXxttHtXDM4TqYFoC5xhrVnzxcRVRcy6cOg9yf19Nuy%2BitAhMKuyFwe4jw%2FM4JZsqeKnEIMNqOvBPgy7qMsA2fc4lJ4HOgA635vIEs2JvrnNTTgdnO%2FCMA3DP18MZsk7WDZyojNMktUUxZeb9KzhwoFfNapShCD0dn%2BVT6lmSIAl8c8neaieRw9yWu7SCjz2gGvAbql5jmYUT%2BEA6VpZFX2NWQqzHTFEQyNGPdGY2XdOap8yL0vHiwDK%2BQsexh3RQ9NA9ozrgeYScwj4H06l4rgnCKzjoeIDJUfYUFOak3y%2FakdAjYUPy%2BRnf5mAPXulzLxJYAnNqbjfB1nsnbSj%2B6rOP5F0%2BRzLSe7uINhivj5o%2Bcb8saJwhu1jDcOa8lcx4kJYwNzHnxa14RYj3ZKmwrByWW1n3icF9%2FsCX5ZAAGEfINgZrQxn%2FbsIrParOBi6PB89AzNLgQFrtSnF%2BZglEfuARolB7lLOxa5pjgDIlypg6pIxC7u26c2hycbPynkVyZXROVw9o2XQEl9mV2f0yNyyFVJedu22OnFMyW0572hHpGEId8sqeuS2%2FfKFhJfeqw2xZ8fH6AHPUkVdAybcQvZFQEbz3uHEs3F%2FMKSQhcooR4KOOffFE0bvwjVjtA5ohiAU1PGbbuBCLDp5eBQ3p1DtYe8Zz%2FLDTFIDY7viuKsEMzKEzvNmsomHXVAGqwSWpEkcvv3BSdr1Bx141GFlol1CLwtZunE2t8fPqLkAInsQr%2B8krpZlr6yIqUHh5oFAZQfLMRFmxVltOmyVqXVV3j6y396vkcMR9HyRLo2vcX3hWaQqqTNMgPgNngpvL49LDuqKTAUoDldSk1HlFGbTnG5wFN93xBBGkAC0b4S%2BktNj0yjuRoiw5yD2S%2Bx6DjPh7vffoPmGDAps73x66UEHE09RH%2BjJLUbzKNR8v9qt6QC%2Bt7XrYdu4I7l6tMD%2FD3Q3D%2B%2FmQx1Gl4VKLFEORFkRFqKkLN7KQTbKWWiQ0pFbjE9PFSyLH%2FDFpA1zELR7W%2BdzLHPb2LPNi2hUfsRJaBPWBm534ditgr7293%2FhkicOq2%2BgMBfUSUT5JlEpgxyqjVlgmoWqDZC9ASgEyQxaJpyCdeloBinITgVISaeOPQ3Y8zaT5pOEvCxW0QplmITM9HlV86u2LIxTd0ldwoZav3mtpK5hUPIK%2FvQvbO2LHA3zFWBFi%2FRPZY%2F4aXR1u2g17osZ7q8FA6QpASz1vnSynkUAOyWhdTYbviEbOjEFxfMBXPslA7YvCKewZzuIG9URnolNtgcGEoZUWq5LajfcsZdY48W2knUjmdWG1GS6fa8b7wW5vIr%2Fd4qjN%2FC441NKiwEy98jJX%2Fa6kzw3V%2FEjIF1%2FfSQP2tWQQopN9h%2FOwLPuUOAIFbWCQr9BrZakWo%2FX%2BBd3IYmhWbVxQDCmVN%2Fw%2Fojm64uU%2Bx1LBDfg1qdzyRpGuxRQh87pemxECPogYlihStPvcaQ9VQhBWihJ8hkbKnN3NTHmLLA9O1YZUzeROQelBrwQ6D%2B3h5KGEb6VFBghUO2yEmcaHOIejtJREpCyktZIYlAmku9XIkVSVzxQBPnagKjXnqavnQM4HI9o9b6Ds3Q7WCAtCY0XD%2FnoG0XSEphZFtLTkXhibN9795qGZgiFE4hMeDbKqhq6M9Ti%2FTgMWxWi7kbq4N051HW0w37lOULQRaUXSbDqVV3tnYwXk1SdJqsdmXC1l3h0ZQXqN6hvMEwZ5W7wr3m7J9U7FPjKWUsm4k0QVV8CbITrUYet2R54ec%2BfNpKlG84DJ6AmRduW3ZZS4I1hF5gjty%2FNsT4suukZNvryLL0a6lcSVxho5dAWa5SwmCblNwK7bIC6magWQHt%2B0OU%2BqcN4z3SzNmxYVySqkOIMEkStUHUHbcicxy2myAtLnq04bBBoO9AN21BXXbN6Gckl%2BQ6wSd%2BfdR3HseNdqSI8LL6SbKyfTF6991IqTJeNPbltgCbnPPnKy9z1J%2FO55iFL6HG8wZm4byiRXa2Y3dvJNO1SINyjSaVgi3XisVYpglc4Dk4EXwUfbPnmndGA4FJCGBumMuDSm8WTTj9vzvTcxeJUdY6hSRW%2BQSOAsWpY9CFxGwAocMlIYLVE0emN3PTaH8qYNwHKlup4lZL0NzQSumqTHMyeepVMxwoQVLhOfWDjnZ9X2Md7PpKAJXnOcb6A0aLUJ5SPzSwCgaZfLuZ%2BC7ugbp8cL3K0Cae5REpWmlNG41RNLzngcNmYhBEBRnRWOdic40dNrE8E%2F9Oeh0rY4sITxeNC3rONFc0%2BCB0XWnTEFLzS0d48ldnicrfGqP%2BF9OQlXMACVuBlaN%2BnJLBAYZo%2FODYuVGtaHlFke4krTw4QKKqHXu8OZDpp4%2FFWnCS8acXoT8BAeY5tAnwHg9AVdzutLX0euOYN5wa5OSk9RBVuuA3iiFWORQGiTorX9orYjZ4HoQHtI4ogjNEqGyShumnIXXeSfswxtnYgBhKDBTsje34shOEjIggxVg52nzVFs6otPy5Gi2nf%2FcOdb7XP8IVPkMue92lhCMuniif3jeqsFfwLaz3B1wXEmTBwY%2FtAE2yP0WQMhGEGScErqF%2Ba8LPgEGOKE4V6nTaV4nBinxOaZVh%2B39iId9n5v0Xx%2BygSbNHRwKkydOnTWOwnwk%2FeBvOIs26%2BluDOz1YCg15zstBHY6xy7dxl48lnPBrPRcoIzjPxQq8D1n3E5Ca9kMV9QD2PoGF5YgZGW%2B%2F2RX5e7ehNCx9VMtrBxu%2B1iM7%2FDbIoi9RiOOlhCnO3K1KQyiWLOWPap9EpHS4eF7fXezCXM0wSC1%2FUUusRQXYIAPwv1InTJtR5v2uBAxTvJ12QhCHfZzBJgDRfa7U7itfBxGy4Kb%2BiVSY2owbtEfjXqlBgLbYxTNK0XBgvvTGaFVyjdZvbpU0FzTfm5Jk8hgOUGNwwya4nrSdl5neG2A37dWx804fIKDyuydnsm4WPf6sh2a3K9C%2FuLWosRPfZdye5uFDs3NgLSWw1NHsz20o%2F3FdF8uU3hhQopPM%2Fe1VGY8%2BBZkR9ta6o2LaGKQSJ3Alnai%2BLPL%2BTZLRhFuzbGZ77KXEaGUmvXszcHT4whOH1UOB24QI8VyjmmbZjynQgpaW3EzZEsLICvhawfq5aN0XjSTk8WimimQJHNWpM7yJMAFNsUbZyCFFY7NeT9dqB9LV8wqKSScfDBNJsVf141%2F8o0u0rfxGWNeIAtoCkCsIlqM5WwkEe0U5IJUOBJ15eLaAFGL%2BnuNUQVbb2UL%2FFOx5jLWo%2FLYUSLytO0ginoBHBamsnE2LxXG471sB95bJ1IpKdfflVTSo1huslzJh%2B1752KXf0GMnc5L1ABWCy43huaWYPWWGl8pMWn1fiaeOKqtJt9P%2F9xU59b9qJ0b2SJ9040d%2Bth%2BtgQ2UNIHAdAhBxxixVPc68DBnJKYOVucsUo%2FeHBNrevfVQyyVqXJIIsDN3fiyi%2BSEXnoLhCywsGUBhT3KsmZKljE%2FRrU%2B3xsDyn50VqRGy29DqFg%2Bxh0u8MJlNU2FVNdLgN6CfIn3Rae2PGpVuB5XnOtj9Okh0uXuU96qeoGEd%2BCKrnjQJfI7RAMD3StKQ0ovrkx89w4MGMIQuy9W7p4F0AF%2BEs8BhgWSEzvH01xe8qskE%2FAgQYpesL4d%2FFUXhX9m4bznQWkB2poie5QYfN8BZ237ZUNQmnztYKAtVNO3QA%2B20ywAO6sfVANpchJp0V%2FYxUPVhYQHWamUdekwyIqfic602OPKjmniM0S7wXD7e6Zb%2BabX6ctkkA%2FbOemV%2FC1%2Btjdw44Le%2FUetI8wOMFQ3L5SrlgYl6NkcnFikWCbhO3KujBQh%2Bc054syiMGVwrXqebTOH0SJ8KU0o5c%2BSHfNuxprCcLEo6V5sawJc0Qvh%2Fh3JZL7vLlHsGxEawkPvi5eT067aTkVX4tLja%2B8i1qmzQbyw89b%2B3FiWajq8P5hZEqS0hH38K8cLILPUmHZwqHF%2BR5JxYsJ1PIDIxVobUwqWiBxg%2FTX8IFqVcjDaWQvvmhNT%2FaexaRSXI7GS8cRlIhdjYQjDJp62xKFVWg7Pl8t5vGprRjC9Ht9pqVhQWkbZoGOkImOjrO19gl5RqUw8v1CHpIQwcP2XzcGJSjIsRgXiFz2NA8LrGTIng1t0%2FydOhKKSyLkNeOjqYORIDiriLmwjZdk5hz4vsz2faA7eX72KbPhx1r415dllqoVo7K6x2tDboPVHxEc7sF1RWGGqo6F7LMVmRrliyOE7jCvI4rHU5%2Bi3b9OrwegB9vQ5DN%2BS4e7Nrlx%2FYqxw2ZcWyvQK9ShmReWJoPdRWvI7puudvwz%2FAKMBLHnq6igkw%2B9bGwFqRggwklD17CK9rcBZSf5BsKoq6n1%2BxxOzz6Yi2S5ywGsSCVRBZsE2k5ws77a25o2WncUReLlzvCr%2BAFv%2B4v%2BBjOn81I76mnPpjr7OonBSWj0nNIhG55ckJCUkHPB9IUsAcZ8yT4DFkN9GqmqDF1yDh1VvGYX4PRF4StnTTbQ%2FrL7k6Fk%2BNNBfB5cF%2FtYmC3JhwPA2gbp0gCKkU62OErrnW7voAkE78hu%2BNOIG3Foq17xkXFZJdVy7fn21ERxKWty7hQ2n1n0cJmO0d%2BCvr0TNb3RmNVJDOP1MxCZN%2BypeIl3njgTVKmbG5NZoPH60kR4y4xd2OjoUyjaXfP%2BQpl6Ts0bDnHhqRnRMCFwPG1PwEFJXmLPUdWaiLZ4FMGC5LCRXORFnA7Uxs1Abt9qi6bWRPAF86FyKtz8W0Fkdc7L0%2FXm9aW92HP4TAjC8mk1VHqRgZyQOobQnc5RUY01VI0eIAJLlU7LQm8LoWzn7Q6GaZF0p2iGujYd%2BlnvZFY62Yb9aa0MBHLcIiPFG776V5pJXWajUluVvrKe0nvn8TrjsquK8UsDrLrINpp3VqOVnMgrCIlMyVuFNdlRPPYGS3qMhZko7UnmEhxAo1Jb54vlYIS1aRuiq8u3LbzeDZSW2xeaaJgYfvqhS97LF01FW%2BHrHoCOpFSw9VTHiL8pSKT%2FZJsawwSvhfUguMsvKfBC4v8Tzv0a9iFWveQcxUwoBrygNM7iG%2F7rCfFofvW8zatG70B1CvdoBNH9Qnwv5Y3Bu%2B0s8RoBxQTiaH17VUOcd4IofLJWga8ug62dvRQO57TzSg2pTVZhXK7vHcgRDhVZNBUwOknF2OzX0EZmfSqhMUoqJaAu7O1gEczTVUMHDh%2BZdlprIIZiDCe89oR6fkMkopvafZqWtN92PsFHmoSPe29QkedQk1SGcvypqCwnrRZM9ihL15jnnsSC3vr92sraKVxv6NsKuEcmC0ytUfS48sKtqJlKGG%2FRko6OEe1EuCOQcX8ZK8B3opYloaq9Gyq9N0r5dVk9MaFEej3wdCE%2FV7oawnjkY1jW%2BpcCI1Y6Y31HqodX6BUDo07Vl0SVOIROlvtiFEiAlBnWmfTXoK9ygiiuT29L%2B5COghSlIeL2h2SCNKeQNQkKZx4hkTPuGPkUe9q3Dyw6CWf3zJlqXknmDm0JCoBpCuJEoPVtzhdVl0ukdBQr%2FxM634O0fFSDQ703qPngikUMRpxT92GOm1ldFyDo0LBrASmeW%2BzRgCHS4Q70U9PHPg8c5NvdNwnj%2FJlozBwTr0D%2BiOYzAil7x17lSftiriQgwwHmxFasCwpyGeUWrW2CoU%2BcaVEYFY8%2FUXi0JTZAujQyZ0uCp1KBAPRa8j%2B6JNXqaHj04TYFyUQ9mGohXU6BjyG5heddCBf%2F6CTFEfv9soeKXx%2FxuBuuhnczS7rVuJfwM7GJZqlXO%2FMFyQdXgCbuACTnY6saqIEvo%2B3udAyA78bi9babDCLVUV2upRj%2FEsGJZv%2BqssVFtLG0nvoqSgKTWwRaSR1PnC3KOMbqGo963FKjoPm8Hgzz56hJAGnArPeXi9HAGVq7uXmM%2BaFymVn3%2FPtTrpoXHKcUuGgS0gMmIBfQEGl6iVC0TX3vGhoCFzsOzXebhgQB53jelKRFNSS8hGpLuQOV9KMl5bOoXYQpVpfJa3ZAlUEK88eJwnrucSk5CWAMpDfym2ckCTiqV8EMPfHYC6PWKJ2qpDfDUEY4OQqcQBzZaSkHq17FruXsW1RYVKm%2Br0z7RUVl2YKBoNsFnnt8UcJPEW%2FDdmnGQ7c4W6CFHm50K%2FcnR%2BKtVbmu%2BuluqAJid7Tg40bGxbsJrul95OuBaa89PJSnEDush674IRmPeYPWI45dr05hyCVOx2KFo9WAzbd1lYXive6BcktoMtQzftgo1nLRlYJ6n%2Fu6fW4pOoXrVKyXb4%2F7QfH2cMDFyEcLq2syb2DGy2sZPwDfrSyXx%2FUHpW0g2SjF51%2B%2FZIYaSNXYTwD5R%2F38L7QL0x97xCsilfpwVdY2uI6mrz3zwJZEV3mKDTnef8lBlzkabE6mMnpsWLpRbWo%2F6BeoWAKgOFL%2FbFm8iwlJ2a45mo5d0%2FUrW7%2BJ0F3b0fpwg0XBLGkQIvB9Ea%2B9369WjBDiy8PFmObvaR3SbqcI3gy5kYfCyblh5N%2FJ4m%2FOAC1QbKl01yq4TegNbd6wR8ZAjMgZuae8a5%2Bp6ze96emWLqjw8%2BHlZntoQN2ZCZUh%2B2xPvt5yVM0%2BzL9JA0aNeL3O%2BcdVpuGz9M3VXkijzGbspCmFw7v39swZutt6p0xoUUQ0Y0iTC9CYPPTpLcV7Rmkp%2BgvITCBwhRCHPk0BL1Cq9pikQNhftNn3VaPtx69okUeRiOlTnLpm9PNeeGpQtUvibl5G%2FsmhBXblcEJmnrWyYY4nt%2FloryrqytTMxrP2QR0%2BvYbzgdgEOycIUyP0mdWCQzhUZU6fAUZE0bZE%2BvZ1uanbg7ghecPBNMOs%2ByASykOuxNpqYCgWj4hQZw%2FkapPhROJ8VUSCq28ZPwQUfBjheNHjiILV6Vd7nfOgTNNNrBKi%2B2Eo3CiX18qSSavV%2BlgnmGQxHZJlEkVo4l9qsUBvy6fZPQjtqEolaVb25gXaygOVs2sQkWcAKjJpG3XiUlm7NI9appbaUMF88TFCuXPqAOUSQtBJwqVPlTay8HOU9txeazxfeTNM2587tcjqTAW8BTwBbeHl2XI6x%2Ff%2Fzu8HAxU1sAEO%2BYiAAx%2BbMzVePeZcyDTyaEnf4Oedl9GjZPH%2FOOilJddLaBNvUK7cjM29dVtCtttajFtSnm%2BV%2BVJu0SgcVx9cgk%2F5k1wHhG6dBW4T%2FxyRhnFzmaF5c5X%2FlBsn1DZB6HYl%2FH8HaGwJ2EGUe0Al7AE8%2BYK5ituIsJvbq%2BnBcNRU12eTT097W6VD5rVCtqJEOeIDhoGP2Uk7uMrPQeeOUeCtCZCtYSo1MrIvj4Rag15ug0PuIia2%2FK84ue1U6W7CcO7KR5X3%2BzKWozmev2w7eQvd2z81c2of9rO%2FtuWwjCKfNtl8XPD6v%2BkyyKf%2B5yLFMmLdFoXRWpOiOUfvm1E7RZt3G3Tt81y5S4KwPXMJC5G0Pjwj27rjX3VfRX5oK03DP1OPSs%2FHE38X7es%2FA7dgT8374a%2F7Nz99899vD%2Fu3f1VS1YCIwmK%2FLhFOATR9K9t6vtLOvcvm3Zjv7L37%2Ffp9Yt%2F3Uab%2FC81%2B4W%2F7hr8M91%2B%2F%2Fbvd%2FL9cPh%2FRY%2FZL5T0H63i%2Fz0N%2FdxoOjq1IxnfHd%2FjT%2B2ioW%2FUqgbC%2BiEOxup%2FPmkYsNrz6VCOBf%2F%2BF7QBD6b8ffVfdB5f6hSqHPNAsmWEoyvjbj%2F8P9SqP%2Bvev9FPGsGpn4oL%2FsbJ%2FI5ah30%2B5fgcCH6j1mEU%2BncK%2Fuc%2F8qfN7b9pXf0ftJw%2B1SQ4vjiiB2dM%2F6Eqqwm5wJOy4LJN%2F3AgtQbl9x%2BQP4W%2F%2FcBHEgQE%2FUZP%2FKv86oejgf9Kv%2FrvNlX%2FAfo7hFLYT%2FTlB4T6nmZA0F%2F7TPy3mQFJ%2FIsLfd9W678kxy%2B0ugkisNr4L4fI%2FhHavgci%2ByV%2F%2F8VYykW77H8D7c7%2FcsOJ%2FOHDSX0znPYYtFPfgU46X48ntyaf%2Ff6Xo3g%2B%2FPzTofoGLHzdhb0p4hic%2FuGY%2F1QqadfOH7ni%2F4I4cOpfazfxgTT%2BG%2BTtQ2nQ30jDDLbzF6J%2B%2Fqef4Sr544f%2FX7GFf2P4wU6VX0KhD%2BgejX%2FH4Yd%2F1rn8aAkx6Ej0oynYD%2FU8UOni5PMfz2%2F84u9%2FOlfz0eB%2BZ8%2F95wB3fyIy%2FYtK%2BBdn0yj6GwEd8TmF9jlGYr8O0P0GsPbx%2BKPfOoFPOOLbiPgJx0GXvv%2FDLR7GfzpwH0Uz6rsaPPadDP4%2FMDb0W2P7JQj%2FJzE2DP3K2JDfnET4CpB%2BnQP7vY3tW2r0ydi%2BtrR%2FZLH%2FlLb2Uab6%2B9rav5cE%2FO229ruEvA8SHb%2BUaP6zWuFvTSDDXyVD%2FnGD38sKyV9rhZ%2B59p%2FSBv%2FwePctffvJeEHv6cKQmTTdfNIG6FoXSfvHJyW%2BHsePmMJ3HUfkWwT2F%2FJl9Le%2B7Bdx%2Fp%2FEmcFfIQH0ax%2F0qyHF18Tzezuzb1Nav4%2F2nKoxHt6XH36kkgj%2B%2BfM%2FyeT70%2FF7qh35F1U78qvQR%2FxGtUOgf3Ghn1G7n69t%2Fcz3fHXDn%2Bt3P3dfKPzV8dgvH48hv3g8mFX6vuP%2Fqs18%2Fs4vbGZeWug%2FC00gaWJ9OjdY5u78VXceXMzgyagPDYG7EAxB%2FHfCGvq1oD4Iax8p9u82l%2BTbMa4BOvhh%2FFSd6MZv8db%2FJIx%2B%2ByEMpnPQQf0cuhzB%2F%2F5nYvmeMkC%2BKs59WO%2FA6e%2BILb7lm9uPxPILMfw92ZMPRFG0P1TJ2Cb12%2Bt9rigBoZzclC3AqPyVRfNRfvij4sd%2FQzQfpli%2BTb5%2Fzq6Z%2FxRNAID0N6JRk3nrwLIjyDqmOWnON9w%2BJ%2B1UdO1fWCYfVlu%2Fq7l8VoqfgKkfhx8Uhn4yrsSwdD%2BWPr5495ZPPxZrUScZcGLQtITTW0jTF5WTHy%2F2M6WT37%2FA9TlMgc%2Fg27R%2FCJ38fIj7ebh%2FrD5%2BVRb7XbUA%2F3ZmxoeW%2BXUS8LdoQfXSmVnu6IpNmc6vE9uJzQ8s8xsZ%2FX9WuPkKHf9GTP63byD5zxdy%2FrC6zVfahv5WAI5%2FlcRCEeKnF%2FrNvO%2F8OHbAofzz8NOQc1B8BUf8Hw%3D%3D%3C%2Fdiagram%3E%3C%2Fmxfile%3EF$% IDATx^w|Uu?WzO(!@ P*MXqu;Xf," H{'%Ԅ~7l&&7!7>GAn=y=В$  H@$  H@$  H@$  H@,P%  H@$  H@$  H@$  H@PE  H@$  H@$  H@5J 99FF$  f-[$[f $  H@$  H@$  HH@] $  H (S[$  H@$  H@$ "B 9: H@ ThG$  H@$  H@$  H: (PΆE$ BM8: H@$  H@$  H@ >'%  H@P/$  H@$  H@$  P@AW$  H@ $  H@$  H@$  H(PCNC$ j#B9 H@$  H@$  H@N (T}$  H&(P΢A$  H@$  H@|.IA H@p @/ H@$  H@$  H@PЕ! H@|+o=5 H@$  H@$  H@! (ԐÐ$  H(PmNvD$  H@$  H@ lh_$  H@  (Ԅc$  H@$  H@$  (sRmP$ ;\@;K@$  H@$  H@kteH@$  ([OmM$  H@$  H@j 5D0$  H@6 (TS$  H@$  H@$ $Bu: H@j 5,$  H@$  H@$  H (T$  HP@t$  H@$  H@$Z@]$  H (S[$  H@$  H@$ "B 9: H@ ThG$  H@$  H@$  H: (PΆE$ BM8: H@$  H@$  H@ >'%  H@P/$  H@$  H@$  P@AW$  H@ $  H@$  H@$  H(PCNC$ j#B9 H@$  H@$  H@N (T}$  H&(P΢A$  H@$  H@|.IA H@p @/ H@$  H@$  H@PЕ! H@|+o=5 H@$  H@$  H@! (TΉ Dpp0BCCO؟AAA@aa! \?- H@K@:_[ H@$  H@$  H@"*͠ሌDTT'&&gX!'wf %dgg#++ ~dddc% H@@P@$  H@$  H@$  FgaHDGE!V-ԋGBBԫWuE\\aw 5?#Bv•+Wwnܸa؅AK$ #B9 H@$  H@$  H@F (xv2N FEhݺ57o[P!<,  dfd ==Ϝ#GpA=zB Ń  +ymG$P~oߔ$  H@$  H@$ ,B'8I&ԩ:vhxg(!P î p ;vb$  H@ (^$  H@$  H@$  TSܟp$6l6mX(UV)!&&`7Һ%A~^O OHH ;8]rsr,pe>}ݻ-QPM?t- H@ (S$  H@$  H@$ (c5иqctڵQ 6DZKCp5\rW^-~[vv~P`8!<<:201qqg?**U An?-=gNž={p!Ւ$  HP:k$  H@$  H@$   7O+;$SB.],lP| ;+ p.^h] R`8]p3ٖ3gHPNԭ[CBBA ,(cصs'vލG>ߴ$  H@|*X  H@$  H@$  H@~(,ѽ{wۺ&pC`E8A \t gϞɓ'q1}`б#"#$ł> 9svP`HEZ6~֭[#>>޺/y\⾳{ | va]8 - H@|/ME H@$  H@$  H@wj@E|HԩƎk~P``x.شqSRRllC Tu Zliϟ-Z :*GW&1++O\˗/lj'iI@${|o-J@$  H@$  H@@  P~}ÆEfgcs{nlݺCjj*_j3&AvN۷G=ѶMDEG#(0Ǔk)EAm۶Yw- H@|+o=5 H@$  H@$  H@!wZ@!**:CӦM[cq߿߂ {ɓ'nUAu"Y3tݺuH+:\t uqF ^#;.hI@$P~oߔ$  H@$  H@$ ,p'eC0`z}77n\L` >};wV %/M!QFڵ+Ѯ];4hFZ8#*=j!#GȈl;^`gvВ$  H{7oH@$  H@$  H@ p'XF1rH: 8+//FˣN/k֭[GAXg_π7K@(&. H@$  H@$  H@ PBNZBDdQ`ɓ裏siL|2" M6A`ޡÇ{.>|)r2nܸa#YZwEZnbbbpDfЮ];odp>?۶mêUO0-.e@AROz ",2G {A˿؁-^? \|ٮUO?3f̰φ*׮]-[ u@P@FN$  H@$  H@$  J&Xo޼9LaÆaYX?u4/Zŋ۸,3СCVrr`YN(ؽ{7o.]dOe?SdNHHcA1:tٽk֬u,8j")) ;w0G"vFFN8;w{Yg;,ѭ[7;1-/^<3O`6oK/B}?`M6aܹذan'C$'ND߾}mLD`@nq۷oիk.+Wf0թ>nڎȀ bȀa9sqsCY]#)k/=mx31~x€w}ǏS@χ6- y (y\G, H@$  H@$  H@{@ &L`O; (`'cѢE`X"?GL8ÆEpHu&p V_s`qv- ֭^zaҤIhٲeX C )|GjI[v:ujUWwP)$ ;\@;K@$  H@$  H@k(`ԨQl p]z… =*ߥK : 2QEcDطo,Y+Vض~e]wg*XѣGԩS{N lʕm (P OvIPNV$  H@$  H@<BbСCfp`VlAYUV6au,[ 7nNP]hӦ5 ލ7yfn:,˱i?*&B**BE$  H@$  H@$P#5qوc,-[Z4??ߊ3gδ iii?`ڶm]Z8VZb@\8g϶> (xK %t^-BѣGW_ٟbᏔdffOE~uadnw]B-i@P@v=%  H@$  H@$  H [@bcc_CEݺu8##{6bbĈHLlCԉcVoڬڶ8ڵ Ν; Cnq<-)O?u Rz:._\@#/X޿?*d_|tƟ[9~pKO: HNP@N>:v H@$  H@$  H@p+ovh޼9^|E8!5%s_|aO*w wbbbopv*4\,gXD8zA`ј\l,x IDATڟl_qqq6m=AQ6@!*7noիWŋؚ~2x |OGv`P.! (T6% &BM;: H@$  H@$  H@8z)+qz׿{u $$ӧOGrt7N%&D蛝N] Þ̦k4 #ݏ ڈJHLLQiܸBhH3@;9s} V`QE~d8_Pgqa_o^۫ (T㓣] ThG$  H@$  H@$  H: S@$<>|8MXr%y\z'E}v`ׄg{'/E%:7 \)]&?'Ob֬Y8u!]w݅;Z{}9j_|ߗ^oA8~.7. 0~x Iy ^n:|6"'=ڸ^T3.5U/{(8?ݶZq 4mvٲe ?ZW]AxT[7ǩJ@jZ\' H@$  H@$  H@~!Ot?;v"*СC ]vERӦ.5@Sslڴɂ .]:6 -׾8a#*t?:Mе3C aHٿ^:vM!a>tuW6iuIœcg@ -- 'NQ~K° ?sβ(Oau6|8:u6fg?<-qq]hN\-_v>)y~}:|qԅs~ysskIx~Y/OqawvlQE*e]/9jujʸ] ?ߞ:P@S)N$  H@$  H@( (‚ӭ,vM`aqѢEev'OFڵwqd2$!W_^} q,"[,&''[!Oo+/c۶mCv9,Ҿ oOC(Űw,ł?6lBWU/E瓴=+ +VbÇ[XkZUVv;O. e[lb_88c:)tfHb'UfAĀw (9Ҷ]YLk%C@,2tqg]O*ye1LbzedazF|y)m:gN:Uù.'e Ҽ~3{I@/>/ G#H CY@4ʼg:&;ׯcx7; K>.p+b-|i0q"Ll,[[o;O[xB+tqiݺ4=讳0˧RBj$  H@$  H@$P`qeС?\bxU$%H-M>ep '왓|4Q^Cԩ3nX1xݺudmv,rSbU+W]aW.'wq)+)H ѢM{ < ԱqrrsSZ#(XbgPXre_>#'jpg#""~)2ߟ6f}]€`Qsxv22믻 (<`]*YիW͗tbh{n S`-GUFG Oa`S7qÆ TV0]@~V~it{E^a'J.vz`!!v"Spac,`w>E']قty])!)D<7ᬚP`8xF-/v`@an /vaXv.y|,XQxv`~>_08?~98"wߵpG^1i$Sr{cL^@ȨѣX"wͳᛥKtlw}] E0k,,?ߺ(x}dܝWJ xz>*u (T- H@$  H@$  H@~+/>n,t[WzzxO8Y B l,Ȥ'5jh6ܷ_z߯_V,ѩvz7FdH!.g"Z0.f!#f;"h3ؖVw%ߐ8`@Q C -'r11a{yzɓWłªX,:`NX|[?wVM ( >Lfnw1*/XfݘwoU?>.\Iv'@Q+.0' 1uV[{M:Wgj<N;9W[3{l1-Bu<~~W!.۟ @p}߿Zr{|=G6}Op98i A?Bކ <_F_jj[$  H@$  H@$Pc%)=v |]q>̃B!2111v-[qf98-^Y 0=sW›O )]B6V5'±l6LFHfkVUFY{ am|şgm,guWeM.۹K؇.7'0pru#XX| /v`sTʮ]\Sd7 ^7o>쳢K|HH'-*7or$c6c֭.| 4j,Գ`Ϯ %G+:H$v2u*BC݆~O`' gѰgϞ}q}x2jNG~ݺusIgrr0sLGou_ (T3$  H@$  H@$ "/aLbE&gÀt7ר,s=/|Ezgﾃk mea @۰|G|H^z^eavк~uZXv$/6B㎃h<()WX쪪U^=+6׿'iq`'Ѣc?lgxny{ӧY8s~<{~/^ʀ?`ɶ (jӲCEXc1w,l{Vƌm7yl샳؅^QryoÆ ;g4 mڴɂ"l{KJJw=Wrx1n^e mK@$  H@$  H@ C@3ΦO͋AsU.|Һdv>?`z (n6 %?#F,8,쳸xq(< (0g<7J99v}Z( o ?0D2rH4LLt{-nVN 6Μ9cA)# /`lg$ũS زys{sCu [.!g{M7vMcc֭Q)ƍ0323-RuSL빴2g%K$|γwE#$\u~gϞm"ykP𥦶% H@$  H@$  H@5F ,>Vlqfq YTB&?VxY\eA#dm4"D!l(B|D:YY8\ CT#M]q_~e{ߕ?[CK'_`+V&cjРuea]CGr^xnh1,X ϟ0m )wĉ߯b7'f@s7#͵%zs>͔ɯB k9OzKg͞[.˺g3`G{M@ӧcHWmЀC>3Ǣ?GÊoKxc0waÆL7B |xؿYlvdE޷\… c(K8KG H@$  H@$  H@r()RΦf8>>ތXPj>aU,D1g;O8sN:{вF\PO:'_vR(aؒ2й~6W'޽gusȢxUvP|B_~E#Xb=Esi@رcՂO|Bߓaq„ `a]PX4cq۠ | ^={-` (vڵ$*-Pڶ9'K (K/y]$piB'y ?G (e=ϵ-x{: Æ sۺU@3j\ 9;Z!wh 3koB~֬Y3gb޽~{ a+]^W8j?# t3f̰%F}ANCZW83;,^F҂!|_xb]~7˹sevw:֜n±_'N^Z_T@xU H@$  H@$  H@P`{X`jgUi٪8K|S.]ºk__CNm|66Ǻ!1eVnA~'CѽE&FS9rTQ1O z]`7ܾ {5֬P` 'RZ|M+gWZ—7%R@aW\|2 &'@|wv)Oٿ:Xe=}]]vM (S(<28K IDATjyA. :5j _1$ Z~ĎCp]eݿ2 b ZPȰ#~Fӱzj@6*WU@xU H@$  H@$  H@P_=< (pV ޺wechǘ 5}uZ,gvP8rHZUvP(};|r7on>}(p Ph€­{ \jR@E{'H o '@vQ+Wϑ F;Мo"`O0,8d6(^n+{aȑxK}eXo* (Pz? H@$  H@$  H@ ($&&Z@aQV% b fjP`m=ve/xDP>PP@Wdy ?;:#뀫(\aA@bw9^j2 qZjN9*cΜ96wؑbƌ4q'݋fY X )7 p$+聾!NƵ@TH-[|6{UViР g']c^ ((kL<~_x+=u͚59s( '7iÇ㡇Bl\J;vZv-K>_#߳>.]w;S >SIЂcQpfw}Wr~OF7$  H@$  H@$ ,+k_bE*!f+11#9`amm^'Ѿ^.v W{%#bs,4? Y8o`m^pR0j6 6 mv`׆W_}WU$?>HS,ϟ?ߞ̬󠀂 PŒ3L_PxW,`2oVXXڷogڭBCCfߊoU?իW޼mk$`7~C -ϰv-x g68fO?CwE+V8vR𷥀1$  H@$  H@$  T?8qk%8,^-0*xg0tPԯ_6. |*g"`'F5B|/ Nwx>DeX" xpp<;2&3s@((9}1G{ S\,i_%g{{{\E10aBѯu7eH!77Mu ((G<Դ 1 ?8nΤ@vV}O{6 ʻ]ߺ ~m3L1Lieoƍ__Ѷm[^uΜ9S6Qc)KMmK$  H@$  H@j?8wGĉQ^=Ӡo6.Y1j3vXL2g?,Cr(J CL^چuD> nG ¥i#.,ˎcSZc44؞TSά q*Rdƌ٣Gk+>`_ݶm̙oJ ((O<Ԁ 1 ={Dlll 7ߴ G} .uzo]鷺EĠ[nx@[9s,mR@ΘW$  H@$  H@D U=uT{hҤk ѣUbI-P'X lݺ k\5Bv~aPܜ @pH!c.!ɉو +axj{&܏>} 8$~ƍ=swq3\p,8h,IV_| 6x/} (R@AO%55tޓ5CPkNqH..^`[Z0m4l԰aC]V|->x}?~܂ ܍?ނ Ec_bϞ=j)I@$  H@$  H@@uBppuO`;֭[-Xs{RH9Cǎ 9իz\8k]Dو )@\ d|} hfr& i2 \ :xB-+mm6 GlgSNӴׯ_=zb HvrؿP1͛5sypFkoqKjj@@3h mҥK>Feܽ{wcc0#cȎv}g믿1N>nmH_j{$  H@$  H@$P#!S{nE$'`˖-}q'(p6{ElݲkVC[4,DbL a vR(DV^^HzI]oPk]~˖-;} tPpN n>'hwލ=w[Ǔ 90N|╋f‚-PKx)'P`8nݺx1l0} cPGLO|Mvp}ឱc-0j19s}1x[p;裏j* ?.i%  H@$  H@$  H!@9`@B G|63r;ѷo_p _l+W=;|#C 1#o!Hǹd5D61x Ԯ]^}m(m-Yظ ;G$ Vpfϱcǎ* u h$  H@$  H@$pK@}V {~T @ΧzH{ Z"Sla[+W`۶mذa:l+"04j[^{Grc\|'Ouƍ6O Neb8kbRTԬ8$vC"+;ͳ[`1bg(Y۷o~d'Ox( vx^͂b=n|ʿ"#cGm ~70aG%I'N. "T1ÃCÇ;e =C rs 50LK=so H@$  H@$  H@T (>i$<08a8w\:8jղ'Y~lѢhzl?9W"#P7> 4,1`[omE%N(WO~,4/wt DEz9 Rc Hv?ZvۊErrr܆8ҁ&ND" {2{PŦ tj~W 4?ϭd,FX_h~w4ap~m~qПg '>*CU۔$  H@$  H@$ B\\FG}7w9?l]ŧKHMMC.dI#]vV. OEA EXhJ8{׮])xeGsiaÆ6v~ m֡otԎ!!'h8N An-Pkŋn[~݇H+jq&8pe{j)PQ ` nԩ߿W>8yfϞ˗ڍ_! 9zg]`{H֭[#))[;/z-8pon3Z5-1c,P.&V^Y`,&ڵk~ھww!@kv+x-dffZs'{]*SWۖ$  H@$  H@$  ;wi0r+rX?z(/^l-ᮻBЩS'lٲht,Y~v28rvm?&N={bѬ2g 5LGțeG";MAJ,"q:gs Lׯ +^VWOݓ)P~_x$'' ޷f̜9{d._n.3 dlj*^y xƓm8=z{B`KXH=t2e 8wL1FdyK>{w H@$  H@$  H@4 (>=OpH| ;1" YHl:*m|N:B(G9پPcvH`W{mHVZnƊo!7hzke% Xu!u?kQ|_Wd3ށ3?C spVxU.Pf̘` x6m 8Vbw`c n۶m֩ﾫpvbwuvve}Wpߏ=|%?~ܫqKemv C]) H@$  H@$  H@^ l ݧO7AwQm' VX> T5ͧIի ~` ""®l\|يgϞ?Y6P" EF:6n%RBصX6"? ,u\^{=4ibV,l8?FaxPu Oz < II.w<86&M6mڸc׮٨"~˾{u3( y\tO(_BQ.7xK/cڵՇ=Wc}:7i@E:OY瓟.+8?zj{9D`~? 'p,ȱ[s=g,ؿGpAFMж]_ya( TQkt8_w9BX PucٽR@¬Y*9̓'O=YdӦMv/W#d b=Tdi#Fc=f.WۀgA-j>S>~2^1{7|S s>~?5 ϷNP3$  H@$  H@$ J |B511tdP $6jϞJoIXxcwnlbVXu)gab`WZ؂rIر q)UgTO?]Բ5>C,_PBؿo^~ep=?S7 ?0HգG{BvZxr8&櫯ٳgw޸1`ٚPuȰ'|7_7;v,x ZMSb6:ݹ?wVZe:c}wxt׮^Qo*X#'C~={/~ n1|o~'q_vmaA_ (K@$  H@$  H@@S@,8?q:(L0FB-+U7nܰN/.}_N`6,ggg[(+=j(1 'S^ӰFXx\bE~ۊQcW@? ,.rD 9Zy*F5%lۑu@1tڥKQWM@!22m۶/Kn&3g֮]k-[b)v.IvV\iv)G=쳸idxؑױw+%K@$  H@$  H@"o8/|ړO44b<r`l2ܹچBӺ`q 'Pu)ZҞfҊP| ON?֪'>.ܹsXBVEΡ P`7?/ *2 C ,nݺՂ/ŗ ?xP39/-,4Ԫ]!n?9q9ZrF<ܮ]* /X :[ \$@7^}< (^׸qc0@7i$wwN<7o^QA&Lh qxsȐž={Nyn{GDӦM L-\pWoX/V@ $  H@$  H@$ (!!٣ƍ!Xqž 6`ɒ%صk222U++>g |ꖋ /b͚5?oGl֭ua2dHQAvζȌ:(γӡO̳%=.P~}yoy뭷p1f̘f {O{kP`W^yź;b؁#z)+jeeg[y_}eA61c,Љ3K.n;ga IDAT 8f}. q?3^Sj:)J@$  H@$  H@P@zTT]0j(vi^ޘe{[$ =#[ |`ʶmLN_i5p|ٳu!?,X`}rìYtM7*@dV5ve \Z B`U,07bl{믿ۆ\ 2     @VqBJb>dJbg07KmA_WD/R>D#3;vvcooqc N_{^*'ض- عvV9avZcʐs=+umBl{fntPhM ]je./e1AG)a&:daô*qm̳Ϫ.һj>뮻zA,06i$/xvVdĈ:>Wށ6V)hA[biߒ=3gՆ̀MU(zG;4SA@!iQC@@@@( r ("-[i2V߾fR͝;W}.\+VΟklfm4` :VO?rlQn˾Qkuv[mvRV"<آ^${^zky7ndyeߩB7pz!YN8C'X?7nXp.U3 a`[T]>xg%6L#lڼ=2[؂]>[T{ݪ3X'찰̍7]si 6v۪:ȼnUɼ=6dSu (oa[iy矟L+yv7-*ۛav쳏N;4mA>7? Xl8X>kfwlak//`A\AsW{~㱐Um``nΚ5K<(8xg>lm -B9&     @9lv[o\2KK,R>޳5-QNm,0a 2[^رź~7f*Xފ[b:(LET "m`29db-ڶSNoL]VjmAخk>5-~J0[dmf-`Q²-Zr!:"-㫮[$,$`guW'k{:qZ}waϵ^> ~{ooVÞ[[P +d/W\q Y`Cc޼y׶YHԞ! 3 4(26oZ Y5{.{kݞ#n@ha"3w>ìm -*]XʾolKaϴ<Њ'6N=ou>0[l!0bߍPM!ܗǞ!aTPɬZU>e_fy\η-v!4a׳АnXJw˾g?b}ԫЖ-% bC@\@@@@@ K@ws;O̞[<݇-րMjEZ#!+0A-^o?oqgm{5h\[p-… 7hmWf%շ-z@m0Gyo[pm[XpZbwm7oqmW:{bap.L^XekBc ym7r-,gHn㲾3kq >?nm53^ao~g̏oWd~rͯ~{~!n@ިzkbe~}l}f .d\g6s'_g-xęUv %MNw݃.rFl#=F%%     ]R\ gm;ܢ?{@;;K4ׅ_;wFrGvK=W6?=3oZj[jV!w|2[ı7o-`+n彭叻]7S!}-`%37fm{_ޠ@PNM<9﵎CFPNH?^'pW'^CC*[mRfJ}     @K@J[s9G=*޿WUkуW;u??~1;o2(-Xypc~^Xaذa֙JuW8Nϼmk㱒V- s-Pm`e ؛n n2%_~e۬VJC v@uw-!`{or)Ga~j+VbzP(6B@@@@4P U1/y5U5 ݣQKWV襹i.h͇o3n4pPm&&   *wW5 RV܂ VYm棏>B RPB!UJ;vWrۂkm`׷L`[^X8O?4/E+P \>h;qZ/3<+ǃB9*     fr (X%{knM/K7yuV߾z* 8֐BDX + 4 )X8*ؿ{UU /a %X x{rUN@}^a&ݻwСC;##Խ[7L8 PZJk>MnѣGc!M￯wf3PLX@@@@@&P.JC 1chK̷ vj>r4ȫbo4sLw}z4o6URȞ4 5쿙gZH~2;d<z%>u]5d X,`ěo)Sm$іr. P,wnq&xzUL ^zW=\P,O-D@@@@(@9 ΪlnV[iuqFy  g֋/m0c B{9cm DXw1 e0EԐNGQ}}W\s.bP(2HBdt^<;yds=Zti->(0(@@@@@(yZH z믯>{QÆ Seeb o̱bJ͟7ϫ&nhӦɶ= h9 m%1j(^HO-9sxzJ*:ׄ/ PHn]|:5V[bޘ1CW\qOަmfx mt@@@@@(ǀBf-ۏU Ǐ.m}z}p/髯>+iӦK~zGVUelp +x#ZE,_\}~뭷ڽZDypWWBqZoN:$zm`.2}ge]Bg"    @9ǎ= +XhgϞl`AoFf |^%R8,|a?V b604n8mᆲ3ʕ+-*ԩSp, ,p @ P(9b?\s :>5KnX(rs      t9¾-FZk[֢[7^5z_|-X~yu&{ 6 [oUޭ!vX`xN=;4ZRƔ-`,wYgi}>&մr-^X >     @A]1`P߷o_oa) 2̑Y_l.\wyG/^uo +Xub}8j(/0fm^XBUlLV 7ԓO>g}pBf dU9sМ=q?zo r?( s      tՀaol[T"Kfkg o+K,Ѽy_>Ps>īR`[@ض ITV޽,пo<D>|6tSm0tL.[ܫ/z,Xa t(Wp > BBrO~o;w^—_~Y~A@@@@@Br@!e ) fm9r]w]S-h"o>~>S /W_}Fh ,X`?ӻwo/,aUl1ruz뭧__믷},`m+=db}z7+֜9sqP5A42?_lU-%3S'O*p P,taOu!߮GyՇe     %-@@jT1bƌRÆ L ,_BK &؏XHaoB ^{ Ni? ~Oۨ˗{A "{^83 V!j%38}lUNq**zgy۹L:)]([S]U"0p`߽WOSO=m= ]aG@@@@@(&5jƌ *XUpV! Q͂nShgŊZiF )X ݺwoU!{MĊ^a%?oW)^}>ޜ(m~fm}W}Urmh'카V{B] f{D@@@@[Bn2{+tȐ!˶=tP-f[P  ֩n ,|_]ӧOm)a8@@(t0@@@@@ {R,x`{;W^Zkȑޏ1zk[A{tٲes{ｧyGW)*4X0B   PJc     @ P?!V VU߿ Chk:zl;kk 9؏w8d UGꫯj .\]ʵ[/Y{*&ğ;Z" PL Z     FBSe={za@~wU^ѳztm a,`br/l`L@aɒ%^!_߶< +D@͵@@@@@:dʪ,X*-Oݽ`UQTR6g= IDAT%l+Vx?m8@@s Pƨ@@@@@YB;= t9 ]nʹa@@@@@8(@/@@!-@@@@@.4* EBQ     @g f" @ P(b|     "@@Cع( 2\n @@@@@p q&  $@@@@@@@ <  @7@@@@@2 P&m  @P(`      $@@f  @9P(Y@@@@@ 8)" @ n@@@@@ XO  d= @@@@@L(Dr  P2Jf*     @) P(`,  Pa@@@@@($NJ  (tG@@@@  $+@@!YOzC@@@@( e2       PJJi6  rE@@@@@ q ! tq ]@@@@@(d   PH֓@@@@@DBL$ %#@@d     R Ƃ  @@f{@@@@@H\Bt ]\B}@@@@@` <  @7@@@@@2 P&m  @P(`      $@@f  @9P(Y@@@@@ 8)" @ n@@@@@ XO  d= @@@@@L(Dr  P2Jf*     @) P(`,  Pa@@@@@($NJ  (tG@@@@@@[Ԗ:#XS@@@@@@PC^]܁G](+/#      @ X8႖1Z@*)p @;PhTD@@@@@@N#PpU:1&@@E@@@@@@ >.  #      ]U (@4p.@@݉      @P8!3L(1/@@!w       (PE!O@ RB$ @@@@@@@r2J2tn(t0@@@@@@(@U;'\ P-"      j8Lc( 1 @@@@@@J^ UJ~:`g Йf"      @[ 'dCs.Yx@@@@@@@PBWy:v \@@@@@@J@pBfTQ( d_BC@@@@@@PB/- ID@@@@@@m 'dn* !`/@@       @ $P(BI}޿"l&`I;J@FKZ)5IoJz[;^m?[~ 9Kj,ĐslI}VH;'Y_KRϬ :zI煚$yA͋>G5@@@@@@@H"B(F҅E}s@1sdxhi2_$McaIq -A KLi:9QuDI)IK/C ZiI- xْo<|=6||       Й (RE RhOqQ.t@򴤟H@񀤃*GKP*{2eAhI:;Wҟ@VW$a;$Նke3C yW9"@@@@@@:@̍[E F+%4{H!$3z^}#iaV>.B"[d}(@@@@@@:@{Hz4G8쭊- J.icrcۆǖnjIj1`vMHE# q[!      @ghpB`o g 9f*9IBP ৒~-Gm_EAzXz$ C$v'IVM!Ij}n)iȍlަ$Hڻ6i9'sD@!#K@@@@@@lPȷB\yg5^,ܓ3MGǩ       Pr ($]E!~6VOIJs,?\AI $ɪD{JgևI:׸ džTKH'0G       P2 'dn:* ItoVt[g*ɀBvQ .j✬ݾ/BwIKwV}➀/P(o B@@@@@@v'paHOU(ty {&$ޒ܏m2dHڒ/6oc+}X}(ׯ"      @1 2؂ T$ D탷!Ŝ II-~Oto%m~&4ogbKG9%|7vE# E-r       .Qa0!3\LD@aW}6/.᝶u{_J:3᳛VeIn  m}=E# E-r       @AX0!38L\IB]$=A)0h?$-qIHBҞ!zBU촷Ztc@*KװE# E-r       @Pp *D>9AKBZWF\ى0h;!Xpm-iFJ?}9K(xOUE# I       t?,7o!̹kB[o2!0_%=+Ymlڐs1зyk%}9CA9"Q_\@@@@@@Ȅ &dݖBZE!8I`txyg5WXiIY6qyPTSݫ(P@@@@@@JRvd[ (dk㰐r$PD,gJڲᜠ%-ѧ96 oIk%C$*09Y8B"Gغa|mmOp}$4Ϣ6,"      @H2V$ %}0n:@IkKՏ 7h{-IKCX?tEևl_s\ogI>߷aKum{0$(Fw_IC)6I`nt;"𸤽ƶUK۶o> 6KtIۆIN]ĀЂ5)P@@@@@@Q 6GI}-R3ݛ X[-iX@'^^_U+E67g Z})|Pښ ߹J? o,쾲m#=G"Pi       PPT뛝-[4av ؋ߧH{8.ۈ{!iMQthrsBNL:`A}(Pz@@@@@@Z %0kJ y#|R>[eXŸ׏$mkcoR-)I(<'iGߵlLCQ9"PC)       P>PyJniKj*`vByC[T~m;$E}pa=쾷<:񯐾 (H `LbΑwMx(@@@@@@(r (#鱀Yu%(i01I(Ѿ˘O ,X},Oba͎d?$ '1n Ɵ$9G0(D@@@@@@N\ 6QH7o$!yv!-~KRҢ'K:9kKz:Sg C1UҡOQrq~[ +G"ͧ*5bΑ7> 1&       @ s@/,d6H:W-ῖ$LpeKz0SQ^UU?U hȿfJ:%dk kn%[Aj®9d9&iSI#ZVd.5?֮XsB~rc       C vVMoAZ![q9ιFZ_Ycyݤ{KŅCγ-[>2A9c .GP@!ϡ69:5GA@!jJ@@@@@@Y 6wH-I\91(Ux$ĩD1Rҳ-ჶRR})(Xh⡘7P9Z= 1gf       P]!`uKHathk!NX }[Pmg6CN9_>'ڞ//cd@#Jz;u3M1Gk BCS@@@@@@(;R (۲By$[4OcKRܠJ-/c A$-ϣeuR$޲ńtvyI~1Gk B)     ]ZV ҩ7t.R (SnKIIj A dZ~fIzBR}9b^k$2bIJڨ90@IKD IVb^Bg9ƍ     1U50(wS:L " U Pq m 6?F@@@@jڌs P P"0@@@@@:@[ U5_Jxn(5\N'Q` @9 P(^JZBIOC@@@@(9`ޞS1VWVrˀ@ Ps     I(tb @l h@(͏@@@@@6/cD(D0 @@@@@"pA#vݻN}YU [}R/Nz?d37S}hcƒ\w*E=f˖Y= іBg9npzs/]YUPIߑQȖ#^rnFcZGk٪=ի>_#-QR 9ΥzjƟwP@IK$wT1_>5hʔ>5s^k;顥w 근oxh+#;kv++N}G{4h)KHyuQRSTw\cyG_z,H{8g < '@@@@@A` k=C?+*GIэrU57-K:W\>+m6I{V՜!#ϝSTݙ|*'&ǽ'>]]ϵ郴ۿK\:W{^{= ,V:տe>GIk΃랦BQU%Ƿ ,px^ IDATSUG6\,!ƕ5A9ΟСsoT_79 W'[ڽf\$WcsR9s75V\ 94x ?P"m"    %-0Nxn=S%gx>J6絺Y tQfE9M35qo:ΑSY}{v/SS_UEIc8:W?l@]U}>U &9"X[75Y}>^sK݋E6P Ż4+     PfJlɝs6^$gV˹GpV:5U mop {TvVۻWޙ|(؛_uOW}ݵ_`g,{=S%=#U|.i-91!R:8$Z\ Wnҩ|}գϒS[~>uԳqa蹮sjs,H- (LZ2#6Msۂ\Sh J C     g%HS e1n:W\KZM>Qt&Z}ᆪq1b>m N}훗 ^#{ k59ִzʚ9$t[DpJN 3fVOroVT jjInWu:RԻxt$߀B"Gҵ7Q[nX\q<& @@!D@ 8JA@@@@h_ZڽJ3lwĔV| \y@qJ>\ (OڇݣzWԺ Aj[Vr*P:"U58?<3qҩC?MYQ1$4@P9$9 9 TX+]weʕU 8[^cN߶k Ǩ$n>EB)(T     t@d@@ )]9OBQj5>/ɀB D\]9[%&h>ryZ{.2ߪ֜5;+]S/Lertr^n<枘E/qҩG JҵpTU376G)+ҥ=$16{>չUnTSVۣf*ށ.fFj,A PW(@@@8NC@@@@HP *8'+?kKV?+oW$y \i&P(%BվuNh?qzh}|u1Z/^aGUsvh+UgߵK.ۮG̿ j㒻wz :P)ƾS#jHPUc4Fѳq]=w~A7''g?'"{kY#9\ j?zg59φ1Mr޽F3b]=%16ʚ(<<{ݡtʶ <:\1N.@@O G@@@@B * t{w`hli3? (H[+Z:C)VP(%.TZĜoл?Sߕ)ɭmN_W BtjXHD[uJמ. U͙%isImT_XkS$߆U-"6D ұOaG PH}ݥ!R,,     @QJ5tJWo9|rݨɱʚ蘐)ᛗ-\d5yݪwHQ!f*2L5a!+wX++>lOeLgU#9>CJN}[~Ci+# rVP9m&\r̐jՌ)˓^IB;-~ <     /@@Ar*ƪ'3 (V c=pU57I:1m 9ߠסJn*'~O;9rRҩI1}ۤqr*CLдzUN gWB;     @δOog4 ؚ!ȽóJƩ÷x Դr~q~Ը]c6?j^oY 8/kʚN+]Rݿ_[&1}Z,=%)=59{hZS1[ӬPP6N'I/qM(  %1 @@@@Pht˵kJ@ۇ5'Wiҩw% i{ҩC,ꪚ?H:/t|lPUexyB}r:TU%9GIJ*]w猯"gѠtJ0[顛z@‘纏gm)5!9Trw+[?t)&cjJz }p*E PTn.     (@@sn@Ac=xł Q݅r5^$OUcU W?QC )P̀Gg̪'ZDIW. =%-/` XU_WVE쳺[,fLv{RosOpar5$#     I3-)PLKh. `,%@UM|Pr-fKtVg D49{hZSϭqz~eV}w]I3wԺEy^KS Ymӕ99@ fZa!bۆ[K;~o$evZUIukmh6'Tl:PҙvjjbpV3%mc oޒ5 $ŶYQZ:FY/JaZqY#n%H{9VmӱMVd$E[{2ZnMl똨qe]9cIIg`x$ RoPHޔ@@@@@(ՀBzqkNbnJ $yP򉮠`oGqrOo(\R ԙ Xn=(=쪗kmlc36WcŚU:Z5 `ٽ4`-e/NEܭ*kn#̦iڵD+v$翲grtqBXݷKW[+PBI_lAyh GҼpn?v/ q;Y _l^඀C{$Y8){{ ڇ\dsCa0U+΀*=ZX+ m6 [p@nΕ~%-޼}U߳-[-a; 9DQrvEBQ     @@wPMw{S5!uBOB*3WSkʖG ԙ^GhmYq؛Xq^\PO=sv2_}\g6 Cj)]KvU՜\sL9?TնQ (5_8[&J2` GK:*`a%]Z=قij­U );*VtP8Z¤ܠq'U>V9pƫa-@9V~s؞oAf:OT@!RUM>z a5V/cڶʦ-&??qurs5b 2(o}LCMԜCpjHTQU엳bE=O= y=M u!+zNHy?3h o m4OX[{a[4_н&To$d\o ?tEEs|n%%sIm=f3J*w#(І[T:6x8m^^o٪ö)pC^ۘB\)!     ?'5+Uu۴T5Dǒ`gq MFg2#8I9GfGza-|1jZChH˂З|*TmjdՂҹU#FNߎryAzKm>qgV*Dn*9%wj.yCUt@ky`BJ(f@s+/IIoX2*E[:wP_Ɵo ao^0-C׮:CPC[]Yߚ _d``f_Z?*` `%Yx *a~'5I_IھeLh8,fb"fc?ڜ_S,?6A@&!      P6F'IwjR'ɝrPEsDb Q$ AˢN *Y) V vW5@qQ˖)Ac.NҩslV?=Z=@4.$ X`+`[7<p¶ЄCT-H@B&`w%MײFvSB@      YE1{K7lCN[@1 gျ$Td #¶-a״+mkϰy7I7Tz>BCqZKٖ̿cwIcZyX@7㴭 YX#UNرy{~,rgU;ÝrL|mDclk?(t0@@@@@HB̪$ 7tXTUHrX&*εJ ;`ϛKyX0(}FKe{"I~}ĀU>F6Wx7F+~&߹f׬V }܀ lv$إy XP:XuqFKn^ G"%2#9      ߪZ;zu¶rᇣT}ʿ}pH΅E5G>uxQE]# S *UB VM\jª| X3ǽo-h-gm2U'P}MN KAAK%[Ľ\=(_\f%Yc?Ie  ~ rPl3x@@@@@(e <;6GԴmZ]IUտjF&!uB[|tm`ֻG` 2d6Pm%vxRlۊe6HmOؕ[:dWE-iXgrk#%O tQ80$8ۮayH?ljG䴒s Yd9KY 9Q\ ""Q, AP’}qx IDAT^{jgzzgs]S]ᮚ:OcfpXq=f&!I֫/W`  @ @ @m@/)"Pδ{=9TMZUL22|Tpe"+ LZ?R+,if 'oE"c@q"V(z8%GEZP* 22Or\Sy C4@ @ @@ P&|Vb B('Gf&ki;(?6:A @)"QT _83[6 OIl(H$0Hy3;v)VW=^ j~ٱinBXucna|Y ma"@ @ @cs_[%L—.?={Mچ@( 1sLb;2;fvSgƦWpMo5lK34QH EtHI3{v\z qM}3~yRZlhfWuJBi( @ @ 3}m^~P1yvԦ}a6Mf}=tޛf:k{a@ T!PvFrʸp 3ȹXU!PiWʲ9ʔNAn⣔ƶ#Br(t'Vhg"14w e} @ @ @#* r$c}x딾ǹ^)~ O㱢#:{fvLR *ESHJB6. @ @ @@RځfQu]˓6 '_lc;IH )$mV3S*,;~ ]t 1YZhezf{fvuօB S? @ @ @ 2 l s~nf b3ܹvnO *N7Groٱbr<e$-[Q^v#to$OZz)7.qmW䙰v!@ @ @ @Ulg;/ gNݻ$|!f6&{lgǛA9'DIS M3V3nf/$pmOQݿu@yB(טډ1KكNvr@ @ @ @ pU @66" )3yN/X_ڮ@A=Q~ef{"'PCbf?s)ut3$SFx[(w׉\j>jfvcoZG8e4NJ QbC L$dso5(T!@ @ @ T)P\NiLƊ1F%5 f\u2ƥpQ}G^w^(E1O5Ɲf53藳}Փ">hfO"CD Xcy(-kYhqr95qnf3پf63VBJ*Mc @ @ @@`(h>@'H$6XHdQT&4 ƑcO;. ءo󤐈9|\ߡ ԧ]6_2̾>6{QڥJCIE @ @ @@ T-P9x3۴C^6Ъsle R7EHfiDh5>c#Ph?@a"3zl䍵X+nfqmW.AT @ @ @ Ԅ@/ 1ES8el R E# 5ߦ8]('@ҁlfvAɺ@B,2bp1cW`f_uKo3k<і+Qډu2Yt\ʋdo?(OQf)^1 L @ @ @z@ w3[b3"l^33+XHcG @ @X @OB~V @ @@ ,@ '@!?+JBk @ @@a!@ @ |3M> 0K @ @A  @_ {vϝ(qґQ?:OBt.@J@ @ O(l2@ ,#6>^Ў0 GӇ19zEB. @ @  5( @ P EQj**D Ƌ] *@ P"\ @ @@B?"c @(B &X+LPy+2.B(zh @ NBD @J'FQH6%("P ⶲ)}T  P2M@ @ :@P٣ @EQH֕& #Ph%LPڝ5 gA @ @ y@ hE!!WLJ%LEГ)  P2M@ @ :@P٣ @Ȋ; y qB'3Ƶ@ ?@ @ cz<4@ 3y(A eҤ PmF @ @&@ TJHN;8S\:  @ @=&@@ @=%Pe =j  @ @3 u=@ P*( N(c#tB!@ @zLB'!@zN( z>t*L @ @(y; @@YEqBYD=@ ?@ @ cz<4@ nFQ@Ӊ  P2M@ @ :@P٣ @eF euNB3D @ @@ P< @@0EB0KG* @4@ @LBgC M( ʞ gA @ @ y@ EBPSKg* @4@ @LBgC t@Q'tcf3tB!@ @zLB'!@#PF M+  @ @3 u=@ -DQ@ЭY P} @ @1 = @@'Q(9t*L @ @(y; @@7 EqB7gC'@! @ @(xh @ XDQ@tұ  P2M@ @ :@P٣ @&P$nNB3D @ @@ P< @@DQ@Tҹ  P2M@ @ :@P٣ @UEqB3A@ ?@ @ cz<4@ <C @ OC Ԃ@( j1t*L @ @(y; @@|Q'T9:  @ @=&@@ @!@6GG+ @4@ @LBgC TM EqBi/tB!@ @zLB'!@jE EBV@/*7M@/ա @@ 4Q I`kf@}|P@w vCv@` Pg @f*  q5 ?B!P蟵H  PoN @  m@@8X(6!tozh`" @Ae@9p PWCC [ _|E# ЂԤG@ @@ GŲcN ́u}ހ+P'A ~Cb P %@ @ 8:@%݁S  = M ^ (2iR @  !} )kZAy ~C P %@ @ 8:@%݁S  = M ^ (2iR @  !} )kZAy ~C P %@ @ 8:@%݁S  = M ^ (2iR @  !} )kZAy ~C P %@ @ 8:@%݁S  = M ^ (2iR @  !} )kZAy ~C P %@ @ 8:@%݁S  = M ^ (2iR @  !} )kZAy ~C P %@ @ 8:@%݁S  = M ^ (2iR @  !} )kZAy ~C P %@ @ 8:@%݁S  = M ^ (2iR @  !} )kZAy ~C P %@ @ 8:@%݁S  = M ^ (2iR @  !} )kZAy ~C P %@ @ 8:@%݁S  = M ^ (2iR @  !} )kZAy ~C P %@ @ 8:@%݁S  = M ^ (2iR @  !} )kZAy ~C P %@ @ 8:@%݁S  = M ^ (2iR @  !} )kZAy ~C P %@ @ 8:@%݁S  = M ^ (2iR @  !} )kZAy ~C P %@ @ 8:@%݁S  = M ^ (2iR @  !} )kZAy ~C P %@ @ 8:@%݁S  = M ^ (2iR @  !孷޲n.{WW^f}v6lXsakM7t&#}!CWJzK/̽$Q IDATO?m>=36z_ghh-}_)~HXBwE~AP9s{D&pBVFPoA C3St<-30}_g_|q[kl喳&㺩Y}]jxvqe]~jL3M Xb>o}SN9م^h[mUC.6dBm ba 8 @AW\㎆Zz{-||;K<Վv!o~H;+7(?(nu(=mh=jEXV^yնzko~ۦz>#l;`/;_jJ{;W/.@A*n)h|GP߄j/f5Z")=k|b-V>pU?VN e;m/zOP7 60xH{W۬Z}Nhvmgַj7vowc9=PO:$w}syw :Y0r Gn9 "P" @@- Ywm٦M7Tȁrl6/b:6\"k6.rtM ,|S 7 MR$)o矿#`;pFW!P4ɪg_gsnf|>,Q4Cг6|wNuu6GPz8J{RW7%N(-A .B 6j([ir2XRj5W;& B^(ώ+!@ Ysٜs裏絴p:7@ZQE/TA{G?3l=Ȝ m.ћozrϭD?:̺)UZ}kAi_z\GmDRV LEW:@~wޮΪT駟XBj?r-.Jm4k>z-BnG5C}^ w]j5Z_'E´?uYYUyI /DO"".)ҴN۲hp s1̎ q% @ 6: D֗V}`s'G/br,oVv#n|M5T(ƫB:SQ$'B'F}IrM:"P@6LaI't|=3Qą:$Z/Žpq(=?_ k--qH(M}ݩeoD&SGPYPYÊ63w@@ikZ~igy omfecΝ jrA? ܷQD=vWFmrZӏs&7PT/g>l^y{0K˦@!% @ z@a]wMu:6Zgy斓wDر B2-i?S x7|ќ}y&g/ĿN¿DSͳ8K.m… ka79Yd^{yӵ{,W= Q H:/no[oiASO=3w}eDP_vq~c;5"Pyf @Du(ȀrHOvmz:Y_LS駟Oܴc㠘YlMUi2dH[(Buh^FM5OČ"/n J'?IC#+`fԨQp@Ч;nX.PJuS!PxyIF%ҳE]d뮻nSC.;P@@}@DG\g鍊nj^ziaxzTF*6?oz`ml)U||cƌifaI\9S}ҿbgtMhG7 RQ>ceYrkIV+ {n(D/o)D+Svۭnt+$6.cq^_N& "Ph@ @u Pw/bMEH|ԎH&(F{+{4SUuG0~{BkE{گtTyy#(t~8u"P0K"%Qi)P=쥗^O2C>dڲaYş'ߊ'i\8+w" %M:~;0;# 7Y@GPxھ`` m]ve  : \m6J)1餓K '@w}kC\{r. J('M/0w^B?Ȯj˲H^>;b*jCzI{7jB ,N7\awA)T_+{gM5߾0b-Җ]vYSQ_zSzO+^/=ҝ߷6E\SEVHx)Tk<8RYu9i!K"< @ P PIS{me=)Tm$l ,w26)=44\Z]y㯗!N(q3h)Y@Hn]wuk65T;S_w}7~NhL3M6Y|m|Y큜~鹮^{7M*Q}:̢}%6::96b[uUԞ!F CM+Q>(hOM +q C![/{O?mkr;3rUk7u(nS_$iG} 6,ӟ7)X|ɦnkSYcSj ŴGh%iͅWu~m6ڨ/޲#(d~?G`!Sv뭷6E=&Oj{RVKoFY>߀ؔF@co=IӡTUd$ZtT|*GǠg>yDc滏MsXZ߸}oo饗F鐸OklBwY P(:/?0>zO~ʤ}=>D}r˻_6=~я~`BI tHllCQ(wo=kwf9|_wuWF<_. GEOuOnim[s}d4Zrev.s?R}A7> P(D]{+h~c J(QVŖ&Pя~ ~cEоM>< _|:M$G)k-PZn(@a7`%M?OS JR^ 襧Op~zQkDaO/]-bA>KtF/!횮޵ :zM,;믿>zs_BL/|\se(&ŲR!EuJ"kE6?|/Z'i74BWt#P(J @@]@!TN)fÇI)=$u BK3!4jwt@A!8OFMH'Pb?vOOpU-PA_im"yH,!5M}4gOHr<q6kԠq&1e |+)ҭI9^Qk}QT!Eֽ0>SEPʋɡYA:!oEuC˰eGAgf[E3(;oeGX߯c9&]Le $LJ-X_@AEQd"&"nW[B ={ʔ*J.j+ahZ(d<<;e܍C @d+L[ޝ|)ť.wC]$ ٧4ElE贼T[mUj5RV?4iz.C= P^$?]ZbT״6pCe7xcBFJlWX#U6|p_$邴!y򮝸(@ ԅ@?w]J3)THAЗSз !\+(*E+Pb?,-nA#U ve{w69}%13@AVBWC1ڿsE:KEJ9NT#yR:Ju W|)VuO5(hΗNhJ]Om3hil[e7tNCt,rz?|Zci5'в Yi?lt(t28u'u]t(L=T㯽7GZ{e d_ЍUs  )拂H3ECTq==@kB@|d.Q[~x0Z "UBI{huGU)ʃ^ޖZj)_ {*B[nUVYeG㨗s‚!6iz)r-IOl YtMc͕_^z}\q\sJd0k>m(G1NӨ5>PJY4)@//@-B @u"/#K Q8w=JP=2K=36s7YcKS뭷i%Ҟ+i{GcA oi'|2eJJaT/=Qof4N'vɧ/REz!V.xzjm%?,wֽK WIM5nVάk&J%4~}ߍ78w(]!P=Uku7C} ŘNgi*1((Ր!C.k%PˀDsZ>r=wy0fRbPaQ7/sVC /}iJ˩\&UPD4NpMmK1zʷ!iy:}ѦI!$p{>h|Њ>)-eG͏})Bjm_ȷ:_GPe!@ :Bڞr ;QS>ǶoEukCIS|;z@aĈrݍ)* :ٮE^W_Te^k),D XT -Ljsv4*?׾"s-PP i k#K0_^"p뭷:ҵ7 B6hH ֆO%Pޠ~[~d[W ѝ4cj̘1ѡ/5?g3A*QG@Pdׯ ҽߗ2@QɃ:4wXґ+0/Ho FWk&uq(犤2HiEv%PTmBYw^ g_(`wah(." iRFS8~OZU}O(/:y2dWN8G\8-h+:&92rGtB=L7 V i`u^{wҡ](Z YNE:Q(-IӞ=VI'մid%b:7.LZ'kEi_ݯO_d?BN @A^7-;1JKS.龐D3%y~}>1"2 :,1ω3E)J i&!"7 ~yG7҄:uw7ϴB&(NvI0*HZ>/0̯Zo._g w饗6}$xꩧZ*x/r5|7 E\"7uB|9Ɨ@A?J ;*![!k:,S;_h67݅=K^{5tw@kb6k(K$Lb͏4_u@-B @u"/1}Եy`(B'ͷ,V4w4BZdu]7n.ڨRJͷ'Զ:Zښ( IDAT6q}Y:t*˔Dpy]Yu>W{8ZJወ"$KġC6uח6MzkK~RC|:5"4EͻV?!XS &Q'@oL@LiptpSQ\:ЩgTLJ;oVK((-|Y&_oP,UW}ϖKF覉HkUN_(A9_%PЏwGr>Bw >e;sMV9:ӜEjO_vWQB@BM)=krRhݕ2it=X4M507B5e#iY/E6?|/ vWdef\ yIQ @~((wS:94_h:+ _49rR=,P7ԱQD4Ghwt~rDO1-\ar*ZjZmv>)"ꫯtIi?6YfeE gyI(tj>$.38c.rSvKwHϛ!m գ=47{+ͥ4i i~8dN*B4FK3_*FµVH /~oVO?G8*+K)~ǒvI'E)|$*K-J[>mjX@!O"Uʰvis#čR}@!k/Y-]3P!R=\I+ֵʹ+637e^yZ~NZ|}-tG6\V[m5oJᆕSJNVP/L3MPz뭦(!f=UE

_D EV*u y ,@|3HIV5>e+JY<"a^9<)@((j";1_ﯾUɷ|^vZ]%^Ȳn  B n6=M8M$}=gq+YrlyloL/IKTYl~^{9}[br⤗"'> E(S @~(h.$VpEԵ^xa=Sr&-+W}wt@!+mܗ*|'[u'.PTh}Eh}"gS@!'zz`sJvu]wEtJ5RqpISN'"*w}54Tsݫ/#ɍruHMˤ鿵=IUĴϩ}Nn Ef~e]VX?xs93'',Ee}(M6>)5Ҙ+tlU|"r}OKݑd/߂ .4LB P(@- zwy3x)~( ŹaJcfy Nlyf0;Ci1czhP-}j[_"\6yL%yz2p,)~g:3QM+i"'xHK5 mE>Cl ] #@ @&I Mפ@9S ~iygw:9d_4VPwtCwX7*;0RzDnuuަ}垜!CJ1ԴG.PDs~ԩuK%-o5nٲ(a@Luˌ49 |{ﴲa*캯/ĴT8>/LY,|Q`ݏLf+zE O^TSMTOm),<1>1)b{WC]igy{noe "Z#P(i(ݮIo|#sM)Zk Htu03r#PȜ BP&IF?v*S}HEQ4˖W1((<bԃhҊI^绡Āw@!-^Y3ӖU]T/B&N+b^bt 3t513S&CCE6?|/JeUs@ @MhGID :/)4SG}> M:iiie yWK1+j/eL/GqI@w@'kDkhJ[tE l]y啙M>c"d^, "PHQJEP^rqQؔ>7IB19L(-YmH)ceu/ҭ,-j7TnY}\=v#B5 _ >Jf!f喋"$[nUW]or^Kfe ^{Bim(T Z aݱu[vuҗ2@@iO -Mc_83÷̩PDĻe˛g_4V:.'qҒa((4v˺R7b9ri\}/zɐ2ws5ieE6?}!r(t[B @ 7OlЗEPҬ,N7#P(޹+(~g+vy虸!P(#[ 4 D {Cy'xU~]I U{m7/A|(iH):kRuj /1&Iݾx㪫jJ6-PhĤ]{kСC>lS8wLU||<ڬps8幖y(Q @#~(qĮWgI n)IOο-.袆t`A"VV]Barp1Mv~OƌEp[wדOmFV=DVU+킻? ¬ڔCB]tBSF -S 9im'.da͏YҒ&=m_)JnYqs//y}aH{)y(B MBcҒd;d B(T Y{9aJ$1,nBy(o->M#TNRջѲHiv^P){A+"Plei4C{YՋqgJ<'(BҤMjXh󗵶(ds@ @MyP?aJ$"л[ld(z($-Ojբ}˗%PКgy%sk=2[guOSCy-ow-kw?28]8@"Pho%tSt'7R8+2W_ݲP UB(?' g4Wtp =V B~ oM;M;M{al7Ae@_!~2z;i*7@WQP,s)&E•%Uz)պ:S*JYG4Pnͳ:+sE6?}!eCE!@ G\{I#Y76j(S]RYVBaȓ2Yr9Y7  n]Es@JJ9ST"U&L/Gü9TGgMI_k(>_O>gS1eݭȴAB{-ðaÚ"K} +كP UB(>:L4eС"42K8AB4CPr벡BS_h/~w z٤I-$sh/^@\ U s]3i(萒i]w]{*|2 ( K~9IFnR!O'WZo}+r2 >AR{vۑGж 9S"qC\sͦqePՇ~㸑ݏLk?tN7>oMB+\!GҮL34MVV^*P@AQ=&_O_x1)Ґ"*˜S/6͎/̚rkIٚ4&SO=y=^?TBh4 _H03͵"][K^X`zES]Ӟֆnt)/M io_ ] |`a)lG`~믿޾4) J!I+Sp'NKr-tL2ISEtֺR$WG.v[C-THo5羽b]n:Z+cƌj4i{H:݁SdRWC=?Σ>V^y冊"ąC(T U秫anRs;iBYo#P-oݔ7'i ٷ7/$RI} ԷW_n)P__$4uTQOɭ~rR!;BטJyƛO^[Ewí_͏N^:Bo @ W/D;7y#`dslur,Y;z'4F46h#W[n)X}GIn9,M;R$MyO8ᄖ_;Ｓi1((5N~n/ԵnyC"{TYHFyj<+u~͑D ~/ϑ( r<@sKa[@wIWƒA+K aO;4kᮻjjH8Bwd}5 /Cn:+rJX_fii}a7nk!)r3tOM}W#B(|hÇ7 Kz9mZ.)袋6]@A*v=v6mp(B!A'P8C?1Ep Rc7WM)"T~?~kyQ=yPd_yF[@9@ @nUSbr2b=أi!Yꀉ ]薮[!5(޴wb-R+'"g"dՊ֐:UGa:/>qڭEH֮7}=6yD: IH@((;6Sgf1cuMs㞴vˈUyswG,|ޚVҟgDZ{(rV:o.䒆y6;)]~V?,D™gi'uGU{>Uy=;)rk:&60߃ygnmlK @+QS_R8묳ꫯ %5)`$*.:􂢗;AUViH77Ie3D kzs_:o뭷zꩶ{ 'H SELu4Y"qZK}ZdMQ @@OpIGvNۧE?YgKQn.ީ@xjuǟkgwƮT]C2rJjJm@A$pM{S]w]&(O(e Ss+QO>9uMTM5T )W>t(7O?|(2i =ۊFcT #G2V:Kz*͐!C=PE{ b|)[NIġ*i&ь[obpEVN/7e|+:k?cMW:ݏt ݁?e |Kv&sR>r!)ʤNTVbVX[GU X[t:iJgNeY y޵^Vi:p[7 60Vj =LL0|zAZpMjׇ~`{ÔB=.PJ6-j򥀍UVaVg}g/sqTDE_H M}P.)WJ7Q 4WsʩVاnԪ(݋oF[mR Z+ A &Hs~8S @@@!.kB'߆l;G T֎5!W"E|Y7 _i4͊>Dr\R_[E DsN#:CwTN:k{u{&.E(5_$!]+'JLT@*Xhz(n-YH>FWyBorFNþ]O|ey^ZMC)]@A}T84A'.FJy.~4􀛕߱UO I:{ܘ1c*V}{)ыZ͏2^8i,(„8$ɗ? @ x7cB 8 BϊC־Nji{量ûyG/CP~;N[@JoӞ=4UUWА=+)I 79qO֎JEY$ =t()!PPZk鷮:Rp7[_T M qQ%M6oU _w_^ Eg#PP~_tM^^o'⮸ [}[N 9c Ҏ&q>![_֏O:y)j -PO,U:E')zڣGY/u@ #@|@ $&PP[ 8 NkoZ.i9iV U~oJ::קqHjՙk%PP EyMDE:2@AR[~)ž}YxM(]{wZӂkRCN%T*$l6Q,sU ]%u~)$RL$mN}9IS^:Z)|+uPN<&ifmY zqD}&PPYկ~-ˀXKOgHISV}Cx;|nJ[B%*<`^KB &M/G<{s ڱ:_z(P n=5 @@4 [BNCE|/nk%mt6|ZwtP8pe MՇnj[!ũPa6>DM4 7EA}ͻ":~$О`lY ?qӉEK;%Yo|F5Mkmt+kM"]>pY:=2Onki|mi=Ss]pڇvX7BY_:]H]8oV|(yN?ZY~A Nz5Jg~NWٿM7.&u}r&+ܕ$|N߻ee>>˓n0Ř{t衇6 *٠R+k@ոJ^Wڭ#[Pv!WqB^s=\Zb*,^) 8ɗ*VuߢK/շL,?H(\,tczg,9ug2zRT QyOӲ.[5:AB+ah=!ǚ @ M@*B{_awSd??2$ذaâ8[BeYJgE{wygԮQo(W:59@$~MX[؆ԌRo?i/E" AwID)GϋjMR={$4[Z15j}QSj 0[,Q$2ؽkvuE>jW{ZW[璉Z/Zѣ5f6`iz"tNI<37T&Qޮ%ޤ{~ $Tv^W?h(<B!P3 @,aB['7@ @Z t/Bn p@d!% @@3<t/Zsu`5iDi*W" @I*(&hDDO(i^ @0(-V) C tN;cKj_yt@7 ]z*@ E 1v' d @",Ί^B]| Bw1JAwyg/~P[wu; @kSO@a=a @@ (䍢jYB]^T@O S P6l5T2\sSO=eM4Qgs5 U(tu$% &ĸ0H B @y F( nw*TQ" @}H tN"tH<7J۰KСC]vFP/KaWLI@'B!PɲQ@ PT DOŘ @ cy DQH]/ PS;pj5n|*nv[iZ^0 3s=gC _1%!@'˂F!~$Ё@ aB  @zL @Al7BrE 8 z@h@M )`A#P9r1"zF - @2 I~[T @("P4Bry 8 Y(t@A)(pvLRJB=# Bϖ CF@laB  @!PD.E!9,@ ݀ P3;pj3|J[q.Xh裏 6 ezN /: n   @$PTPf$4 ] P;pj0.|Plz^z%{l̘16,smO@A'PGPk!##@B{+ !P-Qjj0 @A@ i X?@Z gD \~!PljR@@@V5# *E @ t@B `q@teک@(*s)|Py@( P|Q P m!T B-V  @@(=!0B kf"f/?QO(fT@ q]eDT k @(@^B (}ʩ@("P T>sEO!r P@P6@ X%*E!UB @ POy FOhW@^C@;}f[–YaPB?<(, A%@ } #P@SQn1`@ t@B;:& PS; ~'l%Bad^@R4DB zn뮻W_W^y%Z&mgaÆE1ktM2+"{?Ɛ!C+_Jp}]/l׿l&13l- K$LRiiw PN(n)2 @@B e b8 zx ;37B -4ݽ :7UD@Fz4TS>P+ Dh z37YUx~v7m6DMd~8㌑I׾.կ7D3=z,PkOEl 6#FD_x9±>|xcےK.i<@% N?υڛalަz\תUVYygnm:K>|SO= OE DQ( @K K7zB„xBp@finvvo{ﵥ^zk_/kgMgj&G]9?/rx{ԛn BLh %z3'Ys=gs9gG~^~[{#g~vw۹k\rIt/.男?oFngiH(QԸ%ֽz$PxGmnph3r0_|Ŷꪫs9הHfDGy_(:/veE,bj(vgڮt"H$o`ZzV|%*EKsM @4Y &y-4)BIsȑ/VZd?' AwƌEUdVtHj )P{P9lE'\sqN;Ԗsx*C1{:5UlV6U3<.RO5 K5G d-Qe(@ 馛nZ$I}ǷE/3ZY;ӾoJ裏n@ B1b:z)Td2d:+]@!hP( M)WC @(maB~}RK- yt‡~h}'-;W{ܚ{twO?ǽ!PED a%U7 hɴSՒhno-آ!"v}}~<}ܟy/m6kymyBXVB9&c H$Vf]t衇QGUϻDJ/͂oXR 6&pB,n! éj{g*% 7o苊w{ Pn%T B%Ei@ @C@=*aBU.۟'p| ^]駟NveWۚ{TiR`ָwv*P<qj/qRO6d X}Gմ>x㍹R>kSиBvq+B{e(T( lĈ/>w.KW_}դ`:SLcȑ-R Y7[.JuL}Q.E_NDi([x DQ(( @ x  U 
nپ+aq +4u^( PW{TN{'TR  "j4ձ/|^ MfȐ!w}x {9xQʇ^="+O/.eJ^:)#>3[s5nD=X(͸u(T$PP'7_D/EyLOŧ } 3+Lπ+QDkO$( 3&qEa0\Q4nK\~{4fEefۦr{oխ=ꫯBbnwnj3g&xG6Sl /xӮ!(SޘQN{F`F`F#DPH• [aƍ9s{N󲾟pׅ4QmmmnBR3Q hDPXjU>(0Տ<򈶘.UPYr%n2Q݋3_{(%}sh@cB5Am!g2 H^ :u*]~ڮa V #muj Cզ;Nж RM8j7ӛ LP(AaܹtꩧM U)LF.xxI\lX V[mUÇ+)F{GڃQQVVf03A^ '0AT\`F`F`t 'ҕ Y@)O~ BZPyi0A>c82dG.r MPH ]"~?( ~U> hxDPnjCw}wanwtqec/oFOh2C&A4v)ɂ8/0A4$s[}D lMN9k֬dUπ.] łݍ6Obaxƪ\n:A#A.d8U8t|;2/R2lUEPJ_ӧONT@&u?*aM&(!F`F`F3\8JCC9VBPή-ZDIq_!pg|[ 7||uVڒ]s=tS)@ 1lt}!-o߾nz Aq|d:`fiO>d/ѥu[ |"(@K&)lJA6z7A!yOSccmHh4L=ʤIrW_}gm3:?]?~<͞=۴iv1/FC@#BZ"߼ X2LP+:vO>X.2`sӔ)S+ꦛnwyg5Pׯx 7B/rAD |7u~:"wSN99:smhFMs :b*\ @WH| WVVҊ+lm0iB[*L[~ 8 %%U^|E{o׆<`Ojԁwg׬wc&B-U{OE Tm)}NDT~G~:*pnW IDAT&-{Щ&(LPKj -X#y<1rX֋/8B<_@+ Q^^XUGcO9眴NhqX_>7A~ W^I:֠Vu&(xE1#0#0@OC =moWWWZE?~3v#(3gzR|8J{ Pp83+qx'q9 wR@c9jAQI9yZm a^s@*(E>}:PU)Ao=<@G}&uy}^{Wk d ''@:dR8YFaf R (`LRf V}?@  ؏AطlHkY68E:Rۂ¿Kۥ ?b*pd`6{ށ[nMg]LX}*C6SŹ MiBusOGAX7V)K9Hwc-! B-DGPۇyߙ \`F`F``BvZکz(ɁcW v #M_`Aa~-EDOu:{'A!"=8/RB.ce ]7(4AJ4 Y<Oe&(u*܀guCd"58'x㍞+^2j([ʇ#FЇ~h+Gxȷ gJvzQGyV{_W[yQ<ÜׂLP-]^gXX! _}!L*xi`m!2Bww7}'I5+M N8aÆѯkB.@)t 5^u;ֺ$(ЏM)k*(Aڜ\QpAYcXsOMx!(`cPaW?mu!O>eS|N",q| #0#0#LP((.AZ6pÌʸp5eʔ'"y)Ç.rNEPXYYYZs0_k.(©J*`9baB>8tLl?6T X:1iCP ԹOF`F`F(LP(ʥŋi{ra3#A pfAVS CO"=Yga ڒhU =҅L/ "vvl<ǬYhܸqicWr&MƎpk!***lʼn3#')aJ[nUF39ˬiNq=CYi>1zVg|f=y YLE&(+ZIP+8/H!/3[I2*TNeַoߴv3ELGNW]^7/( 4^z6UߪC! Q*`ޮF髮V^R%AkAG|0b-&=>$UAc APii: ׬Ydy?#@Ks"(Ă9婠 s\=ܓv =F`F`F``*tLz;%#p\#JRyH ˖-@&Pgjj q"(@|gcAA ݬvHn:ziU 8$NQD[,!VQfq9׿ ^}qu!GQfm "^/DP@ʤLtҤ3,"szDHd>m^Nc.u?]6LwĝK]5Z1cF2:"R_DcWLip&#bdCreBh4 ,U|x\񢞭8+$AA}iê뮻O / ^'xH <FD(iBe]Fm!M5Z狠~HI\k'S  'ONn0V^2U;߿HU ӇMM@ܜ W&(!F`F`F&(aOm9=Q䅯QGPYu z9g68هU :Ow\.zU ^#s%( >꺤`09lTC .pYgk#n;EM'0wDuqEth8=T2Y A){$ co9B`&(n.ʉO)TAD384:"9 D ŵ* ^d2n ^"R~ RG.on:$( V9餓^D^?m_H^PTN >Ә`VC%( t"ĉ1JO#҃/'_?hw_> AP* _ve[ǥ#"0 :'N%dʗ|>n`F`F`=LPXW.Uq&:HE%wy~"aZC2,Wqr`Y#(1JPSꭉ0 ~XEw') [neԽ 4т* )~k.@6&?Qa.Z &(}.*hHM8Q STLu@@b)eڵkO>Lo[z衇lm:JP/NbKoL}FP`B=cf7< TStPZ$}Vх*!_];!#[̽7AA1 ]~{< ^BՍ?Sx%&(x]Y\`F`F``B1pB ֹ/[llMtL:ݪڮ7S N*ߗ97AA!"҆cM> -wQGE?N UJr*LPp90#0#0@0A!w {j H4VyדFz7:L mJU9~뙕?K\*gϦ3<3 \ GN()ҮލyTakjhu|t]pjil4wm 8"D/cCP8ch]tNeF`F`F(,LP(,ޥԛ.<ʪ6Oago$ y ~Taʌ3hҤIߊIPs/0e#pb:cmUJ@@W.6>q^ >#W^\d̍*Q\ZeB.eZ.Rp=!B'`l"3x51JML:*^cwfs/ 6ۤRHAA<ӱ^+LÇ'=A~@(N8V7–[n!qve_w6 l)'Aap}gٲe$rꩧܹsmMM8*&(\r%tW Aeg3wߝfΜi"\#0#0#0JmF \'Zu)ƌCp\<#ɉlW[[vΡsM]qѬY|-;３N:$[R"(Jl!%2vjU&(ry?V@P}뭷N_Y/D-*VaC,?쳼F@aÆ鏾)rjTtuuQYYYxl _B~gC  Ղ"(" :8dMvrz0"PAP8# FwGq,7IPЅA0_tEF1p4因c'a U&(ȸMF`F`F(8LP(8%!]hb'îI7T>h_ptUW%׿M* oovZDP@YDaF .S)tƢR$("Z8LA/@U|E="@eQ,tW 聴j*'N3Хw[!ꫯ /02ID,W.J< U?{B}/xt~2A!`ii5g:32АVO?v۴t5*vaױ7g  ji}gRk+O^}ISd/(7or)iMŖJoŸ{X`C ,&0#0#0%Jf* .\ә7|!Ӡn6:lEJ}7pFE9dȐt蚽3q*sP*%.bm)tx0!9K0d"(%'4ܾng`fD -\UtFw>Kfa Bs]lf6~Oں=P_Nq|ѢETUU-|ALPUl h@lQ뮣;/urH' :x?_CU^^y\t}Q[ynl1A<0.0#0#0Jyv ^wwqWӆ/~a:ꨣ<+3|K /HHAa8|wiUzAaմFOS`Կ6&(P$q]Kq2ݭ*HPiҤI6Uq( , pꧼF Lvm䃆ok#G#3n&(8ry?VBP.}ѣ`_ym z goA{gZ:Ή8hH^Iܽ2&(p/kla塇6DЅDdH+b x]e? eNqS UMP@D[T(6ˡC+4\rIڥӧӹ瞛{ N!ΝKcǎ<& &( eF`F`F`B)N[ cD'NtXGPȬY\'|UEݹk"`LB된xXa&(M IDAT`#0#0#`BO`t|뭷V 誫rPGP@i? "@'D&h 8_o#(O!u/^tQC|n4G/)LzW,F]r[|=KtW_\sJ1hE!Iʡrϥj.h H)gVwʕ{##Gk$RH3 HHbG&0U)H"n'"&(3#0#0@I"(v8X KnDPa7 ĭJgyfua:n+G'Slᆎ."%*H<6| "o6hЖlc&w=AJ[ 8( (m4KO;&(;'پ@R#( u>Q P'(aw*WBY!J!S l=>67l֦K]h.8xxu^3A J\`F`F`z"LP艳?o&:sl ©AZ(A!U;8y."<<^X'8qwMx>I#7'8:!?Gco$(fvxN'ƺ9q"(.2,~OyHM{''#b@FY(kj[>F!7ZX0?’"x7om6fЦ5L&Gd|2O-S )/=d䛠>yDS#`G#d) ~^{=W'6/$(@'||!u[`L>=cB=) m\`F`F`t~ D'HO!%JPQGGxro@8w Mi&4SX+68={6}U`|rdDpAeVۄ᳭Rj$茈,"P.GQv^S3A!X}?VHPx'ueDNEGD*؝r>:d[j*4e~syA6e u$(Az/Xs)  ΍mfxụq:uj2d>BȀ0@J#(F@9dɒ%{#>N K=hp#X}TVAߙB !tW}LPp50#0#0@f+dICU/_N pgN=к\8W0è ---{l̙g8H&HmaME H#Uafm5{969hPvyQW^ў`8gMGpވMiРA<IG&A(GDaÆ%A{ｷM٧:?yK/yYuݣ"f "V[meF,'2pAW e( SH&(lmx>f(A [꾄>`^ !xMd#IS'lIvo~oBojݫ )P`Gd~>3B|'xK'ءCf^"H̿~;`oI0*xoxclxcC="^s,*;>WW\LO QtKԁ|0?sɹ:&s!;&xV? >_'|2? ) GS~G?},"!ly)pB}0#0#0@1`B1P/>qCUR:,8Y 0T ^Hs,"_u㩧Zw(s8zS"^ ғ38on***ʖN:a³l e@T- C8D;s!΁0_}U 53W8; >~G"PE eEQ3⏀ -)t x3rmr!8 Ν{)Ȓ{VJBp e;-8\`?0AZ\`F`F`zLPI@% \ȹe7dut 8Y#s1` 5qE1 3˽h8?H`4 w+߂^)/H j\` LPe0#0#0&(֙7.x³*4ykK {*r|MGQ^,vJ?@ 8WS3r]`wF Y %S[ꫯNpST{~/w -"Fp@ 4F`F`F":>}unjCw}tI! H`?3gΤZ[}FKj~G/:N?t[KU^W 8 ߢopH{^m) ~`fSVA|h/LV/w> -"Fp@ 4F`,D~k32J?" Ċh?qo Ɖ`F`BiG1yyvib}瀀nN?Oq3;VyjZ?spdq P ꁣ(7LP[~?3il{ԓ!ڳ{WϨ-.0@˃YGk.&}Z˲ʛgz$DFTR+*ZORSXxw! 39uTYǒK'ñ-ݏ,;{ݡ+$5<81#LP((6^x!!qJN:$ۋ%|v[ +5552Jw}T]]M+V]Gz*Km֯jGq=}UW\~PÀꋋh( NDIb"g?<]F&`f~x|,Gw&(A2#&(`zȕDbWe2:I[AFh]BvǪzt&rU߅4]z^u2#z$RUX`+!h`~D}„=($/bbRk}qbF(-PZQlmV^M#F/r*|_Yɭ.Mm]vمrK"xs=iTdMwޡaÆzPW^}wH5? 6`=} XP5ꥧ vEec{ｷx+,uLPcF&(azLPYӴec7 U>-I:_Ȕ nj}P:p?#P0AtX=_r]EX3~~4o޼qa9T># ?e%3bptQQ2EPY ^ >y+I,uLPcF&(azLPYӴec7 UjQmI2社-#.LP(ݹ)fz*͝6Q9'xb2u_ IOAƖIYYĴg hdn-w矹\U~U?!W4Wh0A a7 U Baz&LPZ3 F|}?/7ޘJ4bu]s2EG]eaٛZBZ?,YBݴ6Ж[n$0bon82A !0G(.0Y#+xE&(x p*T)&( i0Agk0#R0pV)Ö[fFL1Ak0=&(bUz1A\1AN*B!0=&(ycF`JP?gT?e`BruF0AA;y8#0~`ʺfF}NZI rЊpxJ$ߚmo󥫵# 4A̱W߾@U\KfI(RJA][Θt1 K7]~Q6PU! mh.nΊ|AϚ'>{Qiz`gD⋉l`N n߈i\/_\&( gF(EJŀFQV.W(Уe<"P*Ӑ8B'b&(ϣu]SxRMLFNUcġ AQds xL|WUv7L;2T9aКpc'BERl VZ?%hյ W㷶h1$nV= A_Vt^_<Q~]Eo5'G=Ɩ~r%(!W~K/aqi H[۷/fkСBlZFH47k_G[g%hues^qn]aHZOJs!ӆz|Pӭ k-Bhdϐ=~̄ c9 z,{FBڣ5< dcfQ"pSL8M؟L0k}B i^k 0ۤo q$zE/[55éƑu&,1k0jښ$ɝM-iqmoɟ۞!z!|# }**k\A$MH#Z_4 5 tvdǙn׍&L4rw< 2|-Msw$1ޖz|i~e`Bs#0@ 8WͶA!4wŀ^3<F@)o:ՙsB8#0N0A#@^;~X 17dLx 2oޕL{4r?J8%&ln?F6B{4r%ZLF-5+U]rHȔ#-ll~kV?`3 n-Au~ GڙdҌ^\_}!D')ߩrEG 2ƨs'ZIR;M]D7'ElMx?]⾭ky!^Zfi}N ^c u@DF"om&qHS/E# IT57gDP(f :Jԯ~+ϘM?DcSCD_U 2S=HΊACF{~GJq_V=mf'^W6ܦ+Iel{|4; $q\շYѾ<&Od*q`  6w0#P0Jɀ0-jmI{R0H5l_,yf{]ˮt3ʡH4ů,'B?Tc8&IFO ƄB\^򎛮ak#H>nLPVo/ɸm N !gn?^LB%䪐08E:@{r)*$'zm+%iOOk/!. 77奟%jw4שeW67~B<~ DIA* IDAT$1 ?1?[5_Iƹ-pu $#<LPc`FGMQr[LP ?0=RT$sk0%JlBX "!sn{tmhIv"'!(N{42GmO"e\m*ЕieeDk H\+HKeE2p,~U3ck?V&R:0K_"зlrKZڈlgڍ螕)*SO=M--)&A!lՑf[ESk Fm -r05}C[zBJleS=#lHʦ։?Bm+Bk7ڰ%ׅG2ߩK3iR<8 Ǒrq^-Bnytڮب뤊p#Z3Y .|)~nPBZ= 8x'Xyٷ'4B=t%s*c뮵=Rtfi0EwhqwHnb܁؛$ ̄AH&}h4 6)2+:|P46|k;aNh5DS5xKI얉DB) y`H $(VOI i;$=go*ڡIǒcAd"(|M3*+4^1n<^[hIɲqߠAlSk[Ր2)0#ɺBvvw)CթjkNFFZDl2C]Nlbͪ5U.( D{ !T0z?![:Bgٳ9o'h:ٰ\mkGOMFK#L#qeUìA!7T;&}o !yN͹==L{m,FlE߉ښe iVZl) TE,~Sۢđʺ|/gCP(Գ&ci^nj} h|"z]JpSkSJgl}Ҟ9S!@0A!h}F`b PoQ7mp+ 1#;(-.z:Q0@ V8|}iӢ⮊ۭt"(Ui*8^ IӘ֯` њ?z_+bT&(| ^S.B׆/xY(A7BMuo"R8ʭ9uѾttȹBQvVQ14"M3kݘDN4ʆ'ߓ^!ٜ֞G8eFȖm+² vɫ齺1,<;pS˽ߊOPcۜz[]M<b~ֱdt ߽kY8nn8xGk6+k]ja+Z^Hї_B!5sI󼿐Hާ8{M3?ʹҞDT1j6m]dB//aF A#3#R6pWrǐ[`@)o@ =s]֌#P0A'U*8:Botz_h4qʵ±ki Bv-h3f|6xFSp #dmSRج'u Au0+N K5Gԣ}J'ElOecki:WjFC.rJ^11N]oV_@dW"0_k9Z&A#Z$OSRLXre)RgJP@T~ߟ#5rU1~BREWI劊!W\=g@\ Z[9PI ~ӄi#R``s{yxiO?[DG7cv?/B>k TV74OuR M)Bڣ5 { l&ĸBϏcB A!2#R6R=p Ҍ#{( (3A5 #&(y@@AwUy}>v74k x< -NV[=R$}njt7A#Zs$ڗ46/ؤʴE u36Ǘ'HM<[aح?'ñJPXZ?~%DKD6L{m b7~)1.A4z-_FXfl.7ۼ n:QNxcij?tZ~h[+f|[MUT$z&'b[~]!{q#I!KP(Գ@8td4j I~t:t$B̏|#|#1#n( &(f@oLPk5gC %6!NQЧxHI9}lsM8:ZO!13!(,V4DFP -ZsP Gt因V[}&־]a| 62kD0k7L"ָ_rA!ZsXh]~'bnam|䰐0.U}M1mv]5֌m.`Jq|f{N60^ &?c27l׋JP pu}ۣcSSHNB[f|g/耲0暊X] ]zJKo}BB=k 2:m:jkNN ؒ Gi ~}3A#F`@ptQQ z\LPqS 3@( yhn`&(`tCnj}>:W{c!uLӍ}+Į߻d(5%Č槭m|T_wSsݪw>qJ=oB{&c?sB\S]%@JqWeSsZL}*A#Z}$\tw+;±ڜ>kpܸ}g> mg fb#,|$ro,_TX1Jk\. A*[^Ot-ͮ$Fxk\CdK]jzNȠ? jh>U1>Fɡ%(Y"(EN%(7BWB!muF h4>#0@1(u0Q(+\=O&()cF Oߩt!pck]T>n1H!(Yܴ)|)~ۼ'^_nc@0A!HtmF`b!P. ߢo`H{bA#eB&V`@7&(0$#0AawA!S't!x2tm4(z3.< vv]UuSIPꀎ-#u͚f覔|{4%GX4l>짟E$ľ:j]_lӗcpcRdT(ā%mF  ({I4ҫc+*(g& +W-1&[Z>Β 67CIIxID訋ܣF !wYRS3Fp :\CP(c){~ .@dF(6n⣦z(  q F޹xT#PPй˒C@GP(K *a3){2YD0k տ"iZRQ ->0cs29 oYn. O{fmg]h)1Rn_WLѡ2>ALk_K'nXhO!hcKgnbڀ3tq8rzݜz%(Xtx#i$6;gHY K[cLW 1n] BGٞ|hjrA 9d6#//$F`RB 8V^}q68BRXF($1Ab^z<"#( ~ 3`7ׄcj::ٰ\mߌyh5DS2ME ;A.rI֧a\nǩT8tb8z=xZ^%(tUVJZ)܋^myA/?P #(%Wִ5c3AAd{(eB7Iv: ܊X:=O<'f5K]z 37iϸ3F=k0ΞNPv0A/b\`F' PCoU1A^\`z1A5 #&(y@@GP ±k*>FqSTeO qarUqcg=ȍB6%ͯljMu+ C\[7ln}<%&m%6eG8_N׏0CET¢hOCdbL^nOe:ƦڢsLwW6_G}F"(,T!)F޵]7$쬵yH_M-iMTL>;UY{&("M0BW*󵨲%nN'ߕB?RZHB aTZ0%ūZrZњ[hz7M})LqgX VLP(x}p9F (.#0@1(u.BQ= cV`F 3#PRVuc@@KPbАb4ӭO9jTY#)6sec˾XE{q2Wo&NVNP9UE !WU-?Y̟p\,-W}2(!. 77] S rꨲ%#Wlh?/i\ABf-ob5VG#Q"qMsM{YLj*w$|ӼBڣ ~Ҽ|pSkj I1/cܰ9Q :I-烠@!#1qPì/u-is2~R@,9"!(jG|";>AqZLIh!IAM-9N B=kIRg+7ݚtr/ą!%!& nnm|FPn`F#bmxa68Ճ~TBIM$+0@( |`;M9!B ښ#H1iv]5OEPSKͷP@8y!Bbɰ M[6|:&9B g0ZwD#% i&<$eᇋc-縎zr*Ae:jZ^JsEbX/ā5;%LJ!6Ru׭HՁ<v T"!Ƀsۢ5 % ( K*#U ylҊj\₪lg„=($/O["k7ojQ1ϪC e\]:#GISLM fZ ?{uM-gIBPgM)GP(xY\&(.0#P* Nm0AN\`z?1A9!#&({H8`/[^o5*.`]i5' y$ Q ЩzQa:&(ښ ֟V9X Z}&TRk49wmJ*fDRDz v %Q^GPz3Zm`'HUOh"z?kZ=Z} 1LSHyAEC4|D#$#tL+XCdK]YkhdjRFF৺LYU:a|P(!ߨh։. -ۗGݢH"\Sn=ঙ6T:LBJ8rE2_GP c)} )eBH[;wC F`J̀ㄹ.GQHGw Dp ?'ED%'JmcBNɕFȈxw8!W_Q~(%Mhly]SL %B^XEAaIm^fz*<![f}.< vDdT$?ŧ˩Su,]tJ,|7$6eu$2~WP#i$6OC7VWt^3lڟ"Vt)I^Qg4G55énLqiIH(F m5 !; IDAT4m>pqv 븤U6'[kݘDNB\nbdq]daZ!-ּ_Br 󑕝mo.=cnQv ڟ)gU56ƩS/$ Opz?.'*ڗ΍^W+Fm@l'ISm _'m/эPϚR&(9Xe2@>xUl $$P"$) PHo %D@BW( $!DP銀J@z5鐐agwfwv3yx^s=w.4 @@@vc(XE(  @`9ٰpML>/\sy\~@<1(d]yO+b +$ S]n X )a+z~bM= l԰_ ]z@@N@BxD} d|G׭ȕdr$bp@^$w?Z75"/bp5C಩@@@d ua\d#!.P:⨏Xln1sm<^~se7w^ cHΓbupK {20fT KWq m\Qps ץ@AxR-20'Ґ"!78͛r lOز.fra1'kRSo #9{phiR"I?T]/-!yhj5:F_9 @Zb0fLH`1C6̡LA 0(VlAqvYp\1XQOH(dT|곧Y/+e}ef}^x@%q)r`/cˍGo?lE䌽:"T 'W*Mh8\` g.yܜw5Öl">qS0~h~X+8>ZFC+̏I3٤ ^1t\ (xb.fȑ3 0bMy)O}iܶhcwT}kqarisTQ ^|+7oޓ԰%ybIDiRH9s׽Jg<]ƕE86DT Im?ѫPSr9'^9i||.\3[g47kl@h!Ώ]s qTQ+&H`GLd2-Q=A&($1q~:)@ur@$P^E@ `"YڌQTBWn~A@@ JvuXZ)֨s}QEyj9 K@@r p',4P{9tLc9rqc m9(Lx؀ tICvot ǎ@@    nj qi{䳂#B; G@@TAUA sꆓr][":9 ^fFX⼜5yK xaȽo45ǎ@@    nbU#SxD=u*z 7Br9TQpX:: v   @V2tQ9>zukiHAm0|t{$bW$6h8?KD/Ś@\ _@@5DEST1b9,ݻHTOP&|9k>ol5!V  !jR@>Z.Y" yϺei,Yr1_GĽc(wѲ[&,%r3֍j>fx/+4-܀@0Ԙ@@rDrOt59rBc53TQplA9 @@@@5 PPM*HA1O&9i"-_ָ;3PK8L2 ~e12] @TEU$V̆Q=Zbw%|PEw Ν?D  "`G-鱐#MQ['IEf$ G܇af07@N@z   %* maP=!lLs;@@TEUá$ i 8KNsĝ\a~Lcaj!`IFw_/k @`-1؃@Q#^P.8-bP=7$@N>G  !PP]J8/=x-pn %w݂sI|0KK.q=;@@RBi37ɍ􋊹Ƹ%\Ru0JH\$W;\=re+8ft"r"P@(8o9O Aٕ2đW#峸4~od @ɚnD9wލ[>&q@S؏ c   `/% \M.Oɡ!(Զb(9BV(8g58 C@@@@1QyLoͦ`jTJ9#%&AvkL@ (8羂@9A@@@@@@@a PpjL  0n* 5wImH'8AOUo?@|9C        P(87&=H=;CZJT LhШB .1 QE ()P@$(8_18 ō@@@@Q`;Ns-ED b'L{n{P NN@Iq(8צ@hA@@@@@@@ Pp8rL  Q#)6+:2w*VA@\q`M@U@B9@        j(:=@@,c;zfjh`q ؂Ul;c P@@@@@@@ N*   氶jG&l蹢IP=r`)P@;(8O) r;&E z@Z4CO #P@E49{(PE96 Α'D        F\CA@@@Q`RK~e `-'C%(8@9(A@@@@@@@ @k11(J@BxD} <,'-hN β+=8BUAe}B,Ox#˥ (0 IKUt&&bE8R* ߂(?G@@@@@@@r J. *EqG`F)'q' &Gp8A&TQpTvm۸a(Tc  y@Td]=[:'X nY8sBRs=KQEA*@4 P+WQT5Ab BvC'#q(s@μ *P T   Q#):`4Zي\O($;;ϡυ5='PEAuQj@T P@Tdg83T=T    @A((^@@MOQZ)C P(8'@y/ @n8= s &N=Y @@@@5lR  L@\<^dܸCnVQT5-\E(v!Ppbu $a+0 @ P1M 7u@A:G%RN;QEUYA h(8c@1 @ s т Py{ o   % MY֖ǮAݖ5F6:e)~@@t)*`c&s+_@@@%C,OxPCTd~p8[:N忑( ƫ j̊ *Kp Pp|!Z 3o< @@@ PY")* ' 5&4I 強F^bIA+(8W-XKk@AY  (<٭ޙKT*a`:aB -r>xp@t%`²He<FIoҝ)TÓJT 7XTӋ ~7tAnНT (G>KMsgiӕ=|LY,*%<8OWÓ{U&7{  6$@  @A!r@c%(( ey:@fr(h$7#ş)Q]"ey6ԹAS,s~/׬JkjWnGÉ5:AzL~ȚOo|͠WH跬ޞz4LW29pag ((Hϳ2iיMHu0nN#ߗJ[Іy쁨ƫutT.yN?ٜm b_ڣKFlU}NWթ^ט0fRc08'L{.gl N(  ~(?GB\B    `-%fey:@<0aN r奖WJƵ;U/Y&o W(qfZsU)QftXBV_DS߉O~Kl,ynᡷԤ)nW{󭹆!U%bɁ_?3bAe=d*1|3^fع~v+ c$vaJ}ۍNdx)Vţ;1 N2  V(53qA\B    `-%fey:@`[^ݯ&AbPxnQ϶ |= k凌ѯ綊R(\H9C]b_-sTLC̈ (FKβ:o7+9UxoI ]M3m)"g.) n'YAj^ф6s-`"k1V(>u[BRt[ @`+9#(8ז@hA@@@Z(XK̼= 7u@< 'X? @_-:|R@U`i%ݿ)9=}/N@?l;Ne1($lרp"nF}l9"j1BNbk~a]Kkb%~/#@ N*'@c%(X"A@@&dR *I;@AY((@@Ake+Ѫ [l|Q00m n@A ;.QƵM-+7\3 l:*K>]D/5Y]K˒@/ NL`Fe!;PW]6o/gPL^l,u{5J׵cx]}wƘسvL ޳$P`B?U&Jӣt1匎~52,.Ρ:VxT= Y!BntI:zZz`hƕޠU}~֭(H qnwgU_=iŃb(UUA8#+k(8W-XKk@AY  (˃LoQTd Uj3=ۧUcT  Pp,B\B    `-%fey:@`9Z: ի:r(1XEލiL/({~$ffe+S = bznxVMg^;dÅz)B4Mb&vnxI%&8;)i*5L1B`'4kRVb[XDd/hTޫ66i?1=gBfr%5:/co0kN{˩S>  (X  ` ε? Pp|!Z 3o< @@@ P΃ LШB G%RN;* (4oJk-oLq길 r٠VtkۢFL&Y @(-j/OL͢ 2ݦBjG}Jg +y %%Pizʔ(EwB۹ԷN:- 4 wTt}Y_2l__2 L^T|(# P f  ` }ԕD   J@AY((@@A\ ‹=`C\Vmx<&WZ=SХ@aU2$]}tktt3 za@AE{W` .)ۇIb1Q5МoB^Ub%&P`7,ۏX+Eҁ>Zb)&luai'7uӓf51B-M> QPd@r5T5YPxqW[ӭg ^r%krC\I@h_ʢUV_nݻY˦iӦ;w|wȐ!w=<˗ڵk?嗢fkfbwyOZREL8N1zh2d9+ ] 1-vC^m`O{2=!oŞo=Ǖ&,F`| oɷ\Bg4bÇ빭\gqrj^mh`>41~R3K^P%NMzDL<ӓ[>Kz[ZmhY ߅A˾*{>d (Ȁj&Ll|%'' \mj_O?D0.\Haaaj=sm+_?gΜ߯_?GS&On-X+W0aBd~=L[o;eʔĠǶ!g̰aDGGckMƍ,Z#fgϸ  !!!111¦DԾ}?aɓ'OլYc(EHey8+={P>}U+չsg3g-Ǐi4a[g9r$3JOņ' &m )Vy= }E=Z~Mq8Ӫq*xȞO@9V`ć>M©Ou I=IeC9=K~.|[sO>F4/D < xMLu1^A  e@A$W3@A@A1 Ε;+_h%Ǝ[^izJ]b www)ݻ|\\F2ԳgeZmbO>)Sܜ-jr`mPIAV\( zlEG7Id`Ӫ NŪ(GԧHw]BB)j],:o wzd]^VFj(.f:pa9ݪ*oV(2{Uj I }O3DG [Bșpǩ 4bCwi4M5Є# @H* $B" ԝsA\@򕗣;4 }Im߾͛?60=zs۶mE׬Y}5wsֻwwկ_ǏM 5z0mڴہO+c wQQQmQqӅ *s1ޓ%&x9qС"b;{ի;u{} P?c  o L"""hܹ!ׯ_ W `bCю;htSn,Yt) qDu ~?ti77 )l2?c+sׯ_/lHyX3#ey8!CВ%KLBeB_~m^͛SNoNڵ}o̘14g{X{iZW?͚5XNJ ]5x[zp* j(~` Y]g6Q7B1Yn &l ?1 $jO~K#7  L^4VL䦱|h* ׌KK/6<^`JzyȟÌ~>}ħӣudc@ jF-vOE>>>2nŋW 󔜜LdzgϨB Rؓt?jK,/_>T3դBV (d+…|gʕ3 `]~ɓ'oV2e2ϯHxZƍW^>e˖,Wb_3gu떇0UV͐VbŊ\vqVZuw[)XJɓMfҦ RSS)XIۈ{ }wYO}&QI sΝVZ->Kh"ﰰ06_uAODo&ϔٱf.'Ohؿ@իo~n>pL)p-wV1VUTɨRʳEZlϓŋ'%%{xxYYY;y5K,þSϝ;Çg.]E3Mk6{i.^Ν;>>><>>>YrJ+WbO9ѲK.yd\Z-<\a  fey› ӰC=Yؿ8v]7"KGe IDAT]zUw/`驻U] cW\9i._~Xi0_mݺUt<*0^֭?|bqqqԻwo[]č7lAG V#W$%b rTɏJv^v* j(H6CoʹA}>\֜N' ls[b=\ӊ?Q*oY\3Z}mݳ_(7gv8 )$U.PeLfq-tۡ-&҈VSMC`) LWt)Px!-][Oi%S*-3pBZ~h):f~hߟ>c*QUa "߰afbK/D͛7 cҠ*cT@`!Cʤf{WK'&&ϝ;ʕ+}]v3yd???!;|Zxڵk}M]=BCCݭ+$$$[`A[yf~EF=0`.]ܳ o-{bRtYaÆ\˞={ jժ;m޼E:Ҩ#Mʕ_cbŊK7v?|_}cccowo߾s-Z}T (v 6a<;ηm&L̲j*-[OHH4>;۷ۧOo#[/ٍ;wnݺw.js+TcǎC Ic֭[W*[~ia'|Rܹs٢ <?~|*6bĈ2[lW`=z9?z}bG L81Y~֬Y%O8uT67~hذa۷oZH%6mTؗ <޽{ZXXX~gddpz?{N{wu1bDտ߶m;vX6L~K.-qBRN:U^)2c)}%;wf]vÆ Km޼cKsݻжm۲ٰĔ)S1]jU9sF8 망ѩScƌIPBe(Xfd Ђ0@DD=;n۶sѬY7@F}k:z(\֮]+zgϞ{;ǑA˗/׭ߥwk'P6m.e4vX+VP~hp:}4լiW e/K6ݴiSʙ… *W(Xjow&7/TQP@aˉ54\Mc3ێmO;N `  =CX}CWkbJ2#Rŭ)ҰeȟUEs&8 XLiR6,uzN(ȫ@+zHe1V2yxl"y2=벗@'R|WT2e0IO)\D~!Pȃ;  LСCѣuL~M>|L``OK#Fw޹u+"""J͝;WpN:?~Қޟ4iɓ'ͻ᜽ Ν/Q'ViGGGˎ}VXqnݺ{0P>}:$l)1g}vcԨQ ohc"Di߾}ɓj֬irh+lx(>u֗WXbN(~:#J/_ܤ}GsI4޽]fĉf̘4m4ɓ';#À+NسCv/[t^S[O2S2y&T-ƌhQiۢS R6),{jRɲЀ Į5P "+w_ ] jܚѹfo-7gl,z3(Uev.nNN#7ղ P) !Ppʴ,(̜9&Nhsl~\OU@`lc1Bv1cI',X'223}]0W\kbO]Y3Fd=IoV/vbUSyK1Y>{vڂCc6d&%%43zh׿KϚik/¦MUr4iVZU ٳ=<|gVI=.5נA.]*8@aĉm۶(8k9ӦMG(dɒlQRp9Fo3nܸ[uE.)0}t͕2/-1rOşPB 3AJbmb(UUžA9ZJ7"r532vrJc;v(Я>z,uE**l˗@6/9Şz<ʃnݺ}k>-ڮ]bMzwxڵkXcn,cǎVZގUXbmqzV}eʔTرcKڵ3JJ^1b[[dlWm/K~'Y$Zonݺ޸qrZҥKV`cX=e>cI} ǾKsTpڵw(!P8qbə3g9ü~2eMrG,b'59(,[xHHH%KߕkkԨ9+&`(;zs* 1 )ƍgQX. 7 lQ-0 v9[+{W~`UPY =SO8*ƭ`kԨA*%$8vO7ް8W(8CmPrR)%v Pelb9|P-=8Kt|p4%Pfч˛k wlR-G@AGz u?C]cZ!g>&`k(l_Elol;  Λ;#w@᯿"CG3fw_Æ ٓ~8qX/EٻwN v{~ Ur޽{t%Zj-YbZ҇ٳŋ 9L`|ծ][W ,Y>}_wa\\: Pyk@r=VU- u^n'?9rqK{uNJ+|Ğl՗f͚bzl;\={?-Wv'СCccc7lc@ {;yCp@3Z(mڴ}Lo ^gpVbʗ/o6ˬkCax}~^Ly_/S.lX$] C s%%P?~3gJ4ڵXv0tSR)rLNN=u~b<_VN*d8ύ7aO#ӪVZ \S 4 2Bzcx)v͞OKK{qжbOtW\R}):Tܶmaޠ Cv/?և-bF=7oc"[66i&/CO>&(Ɨzɓj֬)T `s޽ KA0ۇjXe(w]4w H~!!!e-[f .R8AzСe/^_I]L5k 6m*4?UV۷Iu͛7_ر}1 s^ɩ0A?իGפInN:Usd & ?ۼysю\RZH @ɓgusI9}5j8;ӖY@A@,Ox9k$UAE)΁Xr*1|GLk.UzuܹCU<=xO߾}iʕ%¨o>C+VbŊ&SƍuU.8MAȹgw.J X{ Q#o'\;Sh{~)g\?t%*VЋJ+SE'foэ_w п))fV>p o_v҉GBiJ{Jױ_-]ߖ!OB5)Bt>ݽHYO., U 5JԬ0GW JZ%ݻEK _:M*U\sRNW<1*(X̘z PPon"@| ءŋO{?66+44Ҽy1⎹hJՋ')R)?ﾻ*g=z(o\]@hϞ=ZjUاToc-[y,|rhʕ2ra x̙3?^93zb =ݥKi &P&N9OY|xy$"VX޽3ӧO= 8zqٳ=:;OϟWzuɆ .v_f;wn۶|ޞm۶%oޤՀaD~~~gb I>t7//3q%Ŭ(jʤ5H˖-޽oѢE۳gԸ> l^x񔒟O?oƌRgb5^t)_*U{];_J`ЩS^ڵcAH ,Xp>JGiʗ/_˸ԩSoL4)x/$;ey›m ~k֩ؽ6TI."EwzĪ$jY*e4m4[~o.Ը"ȑ#E-x IDATQG /VՁݣ_߿?m޼9G!5wU riC`( jo I(%s%BBBY  _9B3Ѷ;v OfիRJ)JLLUݦMڵk-CG/\`3g' mؘ-ZZ q 9 N.@| ϟuf]YO>=?~Gɱ((iξǍW0W׮]f>bB1رcK͞=[vUz,'O $ɓ'ϱXtqFAs*رcm˚QF1(̚51cD z_|vZ]kbd8qbJ|km-Pr\l^-[|7MfIqe˖ d8q Lª{H=hw&M>,BKoܹ󲥼:@+WNV;f͚U5(Ҏ{yyeF x.Z+,,L +[7n2/%P0'Z?[+U7om9{ѣ$k >(8f1qw@}ǥ&&?,7*  X!Ƃ "hGDQBňb/(QPPw6;3.<~y[e=gĈ/o.RE zqޔS@'kb ¶).^iwDcTQǎi'DONƍ"._\D|y{{PΝ;fˣGH[j7l HkfOPgзo_ϟ?'ȧA0Iz#G@k`)> (7oHn>p ը '~TlW+iLY*>7&δ@@Фg B UOM 6m"'N(1~x -l9cbb,A:t(^t)YpСi& ={$''K`w2BIA@Ai! ZVPP_lBJJJܼ0*-b !>},G 6ea4 ޽i!jO>Z@@ ۷ow*2eGse(uʕ2ׯ_7 /G?>}d>|WusU7 #$$$-bGRR #6-/W ښϗ/_J7Y{=vttW/U]Bll#{{OlӤ~lǬYR4'P35k%A^ݻ7Xuddd~Ǎ5*?@P{ՇT2zE O>5#PGc{Nlϟ?_a6@aŊ̙0"_|AOOi0|GmB@A\=7` =i* Ȗ+V0R%# Qtt4kJ \Ȼ ʂlUl UAݤ$_N._̈Ӡ I,C1b \)v>_DOQ{uf2(hP_ԡ @aٲe @@Yh^7o.Q-޽{ɠA qN{g`[uP-!6lmx`SP?{l/¿| lFOBB#[[[|ƃ:K,8&ӇּB m۶ѣ)it!WH_J#,T3TÇyml{??>}1zpUR{{111Q7n0lٲ| SGd;3*{jjj) Ju p< 4[z !DQVFYhqu"""dG`\\\\xpc|'*D9p@;wEFFRӕ@#Oxĉq=z(H%(?~<͍W!<)\^^=CCCVW PWOM9y H- _:֏^JڴiC1k>\{E?N)bcՒuN۷oD,Hݻw N⌰P\9/Iu+ @D *AQOvg O#R` j P =P%(CU-S$olٺu+5j`u^ \[N$}.x@ ޾}K ݪTUP#}>Qd ɖg6@aȐ!w~eP@!;;ỸT^M B{~ٲe7uU_Ϟ=۩S'Q4]uɒ% "===jժ #cpNuoWbӹs3g$*?зo߬C)?01cDt̋/ƸPy)DĚWl) }nn!cA%J8ɶQ\iJ?- #P0aM> H:ujv;vp%E }~l$ݮ[nΙ3ǂ>G >>>-ZDM1̙3S"ܬ_I^K |R!чnҤIO(a{SN6@adݺu |Թ~B(mѢ$RXe23ԭ|dKÆ IDD.Ճ߻vK\_UPXY7PP( (pEM(*)-EA7d5 Mu}jP~7E فjZ"$ܹsG&@aK!{]x߿tMp&MC@A,hO?(h/Xu耂DŽx`={-^zy0{:_VtelU\iq&oގ)<:vuu7g } (lau=S~ۗ0p7BmbA&5jՎ; DA{.e_v$wwwAdm z2f̘lgl[ 6hР=ZZZI]C@A\=7`f̘A֬Y١uT1d|N˜5~EQلLt,7#P+@@A+ 1:,A@Ajy=-|t|ɓ'333^Pe @U t;do7&j"ZQF6իW'Ra9(KP6 o߾-P/%%@`nݺj֬擣c^ӦM?}>|x]vUmKTb;?}tOOOO۟?A__{P 戈ҍ7vտW_~ٳg) .\AV+W88ظ_~u5jr ogϞM066iMj׮Mh Er(? (hJ?Cbb"%Sbv*j!ɓ-6l@W6턕U}wdjjjyʩ&KVYxF;;nݺ;AD5k6m+PP& O?ds18пX PxQd|kB. 5SqޔS@M=zӇ"` EruVAjU*Wnjðbǎd@ǏW 4QJtPwPPPB[;O/3H E=j}ҁ~I=ǘAw)]  uX:T>5(@xi-+V sB 32p@K0vI)FEy<}TO@a)K,v~ P`Kwyyy%GČ#(={SNm4~I4u2eH#ti )ql?})SF9Z3AdZ1#BLL ]5(oI~Օ҂aXQ# ((s4np\)v>҈" boD驹9*R * _mo'=(EWc%Bլ jG@PkPp Ele"Hp^^^LJRgժUӓѣGK*E ^%$iF"'p wETӽ(PP_ (ܹs |6gNƲf۠pBLy߲eKŬRR/T^l9s[׮]O:E ++ɫWJV\6_|lǏܼysU&Nq%M(hӧOvES&L`S4a>!o#633󁩩)opl߿qƼQ(L@A͘1a.ER|||xod;w }*UԩS_,Y[!±c^֦Çgر{BZMGHoh~4(Zٳs[n}2jԨ FH1cƼ D\zVT=boߞ8bĈף իGV)==z({ ؛r h;#H`dDad%b~`K]mF֬Y3v www!x] ^ E,VCǏ'nnnƓW>}R):JFac),=&(`JnfKQ4XdȂ,^#M&T.1P(< mdM Ɔ2G,ua޼yj / 6!߄ރ۷oSƁwe˖%‚ajNN)_<$[lInܸA/t :.rV@!))IƆq ?++끉 `lk8p~ɒ%/^J*0{bK0~ƍ͛V.o#zѢEU}}}-ehiiǰg bZW0{lUVUW=^8qg"[J/uVrt֭ӧ)Sxo{xxY242qwwСÛ'4hP'22ks|Џ@!66VN:c<{7[|9GkvHHzbԩi|>rO?D! ]'))1K7i҄ *]f%jFϞ=_;v\qzbo)̀&׏HJ sqrr%ɓ'+$2.he(akLJz"˱c ˖cǒ͛7+m4޾}RX7PP ^&}CEA7)KRR;A@A;V4(|0(hB [/_ AVZ1| `B̉;Rz=|0A~?C*ߊ@KFFC> f͚)))c%{xxR)P׫(' (hr[nǏO6mKqƑ jWR_Xh#)e*ܹ1Ѭ^z57nJ/;kXX{V 2gB Ne>`mz`0ų ȆƿS : :* E@A)t&PK.ٳ l)bi%33wpǏ4tr|dٲeCM8OO.i ii& "/  ѹ (0rV@a d';+f=rH;v0`6@AC oذaD&aXXXt6mdKLLԷ&_ }/RHIIkڴi }æY 7θzjl5> mN.]DٸTBQh2(Μ9rʙm3LY|y3>5oߖi@/>}wlʡo,l@AS3 _M |!Cػw/g!٪UZƲ yNN>][n "555lFEEQXgyz@B>}d>|8˯lQ,N=[<}tN60a5!޽{yjSqF@A\=7f@AG"zdee{{ -I_ m(m!D9`+ ̚5K)G^vnݚ-\svvf*ݛ?P٤N:Kj@`t@a֎ !FM`?QV\X*TUDS:C@A\~4(ܻw5oH@ull, Y- [Õ-$FpH 1!t9%L߯ IDATE13gdu* 5= V\PPN?mmV%%%=8_dIUoooJ:l\cKϝ;W~}q'Olav͛l'楶կ_?700𹋋K._o1ydk&7([Jh *;Pvm΍v%\ӧ g6o\q0LHaiiـxlrȑe˖-O!ǏGԀ{''''BOO6mԺz*e3Np)Jr%=zԢ6Iآ{M4hy0JA;wD999QҲ \zL6mfBQٹݯk׮e@ eFF!Cm5L*W4xlڵk;]- i$]h((m{ظ1}8q"Zj0{H-0{l z}YeΞ=۩St\~͚5ll%%%=\WRf+u l;@ˬ,+/XlFFFF#ѣ"W4~YSR C ܶms:qvvDXXX0U#4oVMu='qqP"?QGMm7_>d 9v,ya0aB%ĸ -Lby*;* F[ [~p,hРO8Qm Dׯkt2eڵk)aYf??yljyy2e==r={ _0&LSl6W^:kQGGG\SS/KS2lwu&OJ]ɓ'˺2?{졕#E~~͛7z 6W5jgmmd#Cy~СÛs%푈0tl@?M6uppr\σ6 /88ظ_~(xfZlnݺܹcv_щ(lC4ҥKN5jT/ռywNNN*ϟ?׿~\*T)@6 YF+1wfff_KEDD9t`k;|L++O iԨ$%-аgϞ+T{EFF>;w9}t"P [:v(*U*<<Y?|߉ũ/<@A:Ja (omMLG@*z4\744D w ]^YZZK&z=B*]-~%`PQ>aš]LL y1#[Pvm|m},.P7ft4z \Cl (DŽً0DmM WZ—𐄊S9rD^^~M֭W4U僗oKY+vZ(H/ _|̀˗/Kխ[ׁkC^-ZtRTј@-Dرc-|ԅ>޽]N)!l!K^=zhlmwQaȑ'}U' iԩ `7nlْ`/-[Φl2jժvFFZFjtt*U0NK|E-Zԑhl즻6 ` ͛*'E U}E|'PN/__6klxK+)@]hQU___]<*Uɓ!V\lٙ@kH֫D7+#K\C$Hd ,5V`= "71(QB/YoK&D>bW@SFMP^( k= -" \3o)Iyހ`f+`ƌ… :vSN%o BrvH~%k̙~`G¥K$ad 0B@,ڭ@! l`T, A@A̬F>x 7Pcǎؼys WƎl[> }.{ BO8:׆l"N8񥏏O$͛7 ]]]H617l`h"+'ܚ;wni^+R>VݱcS0nݺ̙3'Yf֭vڪʜ2dH+E}\6>{lUVU;lذ̝;w>^Q;;;6`ԩiBT h`KAoԩS3 #͙3|Hd޽{m۞Ad4tRyӧ33p0'!!ᑭ'6mZ[v3e|) .M6͊Pwwoŋ =|WM>ƍ"A+V<7nkS|yGu$._F@}E)z{{s> -ZxtT)mǍg}v 0gΜ^^^3gάqF#u\Ppԩڵk7_>0ak{uq_G@[#!5 4 * ě[ɓ'֖ʦ-\,]sRlgEҤw֥KrYpZ5ÔX?5&//;9b|Ν2?. Q[XX|^z~ [޴R/^,߿rʟak\|ٳ^x)'Zj}͇T .T ;rmǏ)/_ꥧIVZ>l|tss{۽{wJMK.MJJ*]J l@|rÃcjjZÖf0 1~I鴴4_PZOz}BIIIz{x% y>M46lX6t#ؠl48vX'O觥3_f|;;|{{|GGrnțNNNI >}􃱱WO`8vfddeffJ~oMMM?7hCϞ=ߴi&mcCN333daavmgg_`|uVReʔrΝI0x@aŊT,}TÇe={+=KKOuP^icc\ ]vD́h۶m&%;^z>X'[  ( #k T@@A\co(>HݺuKPԪUK>P 3~:t=A$XQ5={JIe%aaa-]zUb#%:=HmN*Po:[L󠼂~I=JAy=%* Q6T{@PT@.0AD@ܢ XSF3mE * \3 VnP(@?lQdW7ob]T@PųgqTX l#}hoDiٜ vU3l Z ZQ C@AT@4(=D@ZT@PTx(B3,P\( T@@A\co* "(=MWml00 6* ^RF[*@Q@ R0z>* @PgY" +Eb (o @P⢀"@AEP]7o(oh(EvXPO)g' 醭PT`(@A0 Vp?;{/jdP_1sT@(QK"{>CQT@KPPLe0zBa5T@PT@@@A( KS2QdST@@A\co*  =MsLN7 T(Q<N?ܫ2P W)ݬn FP-T@@A 0AFOyo S( * (U0ciPFQV(PT(.  ==DRP)0@$®`WټH(;_FN1oQ l` |T:(rT2@ @@AXX@PTaPah: * Hk.PP5|A7 @qQ P( !@A?2Ozdg*]j][%9F&K7*2yg[(;_* hP`t=AP VEPT@tX+Wi۶m]),Yŋ_=-*^^^VEi&O챰?nPHH !dAѬ9r (pJPT@XMٻ@uWVx7qQ(T2BjTMPȦaD미ww k= APT@( L0zauT@PT@;zmNcftq+P3L (o @Pwqf 8:GQ`wW"aPP]pTP{@@AN)PP' '[P(VGPT@PT@@@A\ `t(Έ* 7T@ !h]Eag2Q{TT"(66{mCPRPhO"E8;`u9OZf! * *fKGGGK@*a[-U@ *@BfY* @ABv@{E% B$a׹nq$icׅM#Y/ = s3ш]X8>cL5E;!5LXmsk#yZы;z֕I- >x8ia|Jr16$eűgdPtחsE~n/R]rv"n @P,’U4XL!h* * "+Ȃjiw͝H0oG(h,T@L!"3o(VSQi@!<<+ mkudwgr3>9` Ar}qYEJH\GB' {?IzӍşe7Tu%ʃRdǍ@wv>~"zE*$6WF@Am(! D@ITK y_^&'Ƃ * *P$xlw״T*65-+Iw١>eoVJmJf$cB@AmcǨ* )P(RL-&dN G%u ~>]`VCPTx(B3=2.}NVӀBW fR WRSKpi9F1@iQ* PPe0g2)k`\Ѝưd͹Er͂1"K@ UִE@Ak\CPP)* Gx RY*`7 ª* * (4 Y" 7T@(]OۛQOr_Fk2nm#Og[jj-|q2iOKfƖRϷAd'K;ɛ$Mr$bk} "F9OD"< ,켱?'\J{@R<ן\`3hHA}sGb^Jef+2Ɓ6["uIC@);dIOÓn[  A#PCP * PZ%6QbaUT@PT@tPu@A \`t(o @P EӁ~I=wf:7i6@6:e.՚H6 ?i)sE)VfyZo_Bfq dv%[pѝq qqf")gȸPܝ麒*hw16LݛyFCɪ~Jb{m!Rx$˾^ާd֡Ql|$ͣNPPZ5 Z4@J ҉ *` ,jC**`iP;YpYnnmٲepKx( xAx҉ߜR5jȷT^7X\y*K NNNyÇф(2@AH,P*+ khhH֕Q\أ'~(fR6@atҳ`Q1'/I$7򞱗HMF&|޿&F.HR5}VkJJ&\' -|Fh`3- y/Y2"ۺ ݹnIj&5Z:UFn$WF@Ay(( 6W$ݻw۷o `={1cƐ; j+2@ , ۷o1k,2i$bj$xwbsΑΝ;3z qGBP# 5EQ8 @?4m4k)^^^)۷暘|\W5kL=<<(|}}/XLV+9sիWiU3gNׯ_kYfe-SFX:u4P6VJ|% 6l`2ydJѠ'cƌaOZ;S㴴G5CCC <]'Ά*V@@AEi͹f@!33TR88Q"d޸|2qq޺u+5jWSׯ\Bڶm˻VjӦ ֭qppP_m /\P`Z&Mݻwa(8p_6iP4(v!eoD9ZV PX/i,T2캹 1zJ|ĩF+F]fRoBJ([0$êP#>=WJZu"ju'U-xӥJ(蒷ۊpͰO`ȑZeaժUʔ<@ϟL63f g&fff*LC={6v$U@t|AP7ZVZJeʔY7o8~l6,sΝϔ}||xyyYɶ3g΋+V+'(]4P?~|ƦMT, W\)3m4+^zysMԉ\]Ql HfP̚5B4u,u۷ 5kVO: 7/^LPPWa.@+z,* $ddd z{RɓՕvZՔSNݻ/"@ 'ѣfZ_;aÆ$""aMĉ) hXh (-ՃDQ(l@!"鿉Pɨ 6;A8VR^+{'Vksc,?DQ aaұNOJt@'FM u 0HA6޵fE@AmVtVhOON6n(Ĕyq&[&QQ(2 AڵEa&&&rǛVVY }VzHgYbEYqy .]W(EO  +PTرc]TZ:ѣO>AV^MfΜށ5; [ b0ų 7dֳȬ. gT+_1rI#kWm@ U54hJ_Wѯs3IrIr.w`Ldnߵc |T:(rOOO?RG << 6wݻ 4S/ƏO e@x۷oIBB$¼y䦨i4k֌ܾ}[Pf0h6? P*`97/_X;22H:y^oicѢE)>>> \ \  (mM6<'RoXZZ{yyѣ;33/VxKWعsgeyuVԏ?z{V^LkfΜ1lذ1 |TRNq@Azcfl޼YmPPA@i0Aj# {c*PSkNN cmϸYz Gz".}lsTm^$k([O%)^K%WQAV֑Β OM$5M }T_5]dg_E;IWɵstTI3:ih#?a ZB@A$!BdDrח˕6>>Q VZ*e "%Ke6ɛ7o$*mjǣGxw~+ؖ[-FA>u ׯn-;˗/T\t @SN>_ Uj3zjSOOOJviҖ/_fhh118qׯKѽB;X\(@tFP_S FӾ}\++ϚGGQ_բE @e(sy (,0A:K7TXS̫/_ӧO -Z`w5_@!55ܼy2ߖ-[j,: zR,REۣ(hEH84$R[ȒS(Mz4(-WV#Yڛ#.\.T. |zl@[ lR:iK#Zz$/<5!$$D@ lk׮)ݙ3gԡx0!":LqW^J*uԠ IAef{]P-Qz&MJ_~ y \\\\x1A(Qf@&$$DVu/\]*9iiiZlY;99=41EኴmڴuUc$߹s'VF@A\Up+2⹘4sn'{C@A`X](H'x]XbbbN S  lκ P > G+ؕ4s6JP8>4ĶsG'_2hs[rY8ZĢPO~_v!bOP麒m! Pg+i+p29u KC]7QuIVDq8;Ӳ (hCD6-M4lܸ1}Ξ=Kʖ-4o߾O8aBYAUVQA o߾GGGCJ6mڐ0yJ?tؑϦMR8 h! h:e˖UYpP\ -[=:_f=m*UԈ 11Q͚5? ƞ={* :Ԗqnnn #y yqĢ[Ď#G[lĽ Lq1U@fR!U)ofF@AC@Ab=Csgs3X='U ߒ&(My;#Ðfo tm5YyzUŚ̴(R#`&k_ Q5!Ĩyxi[yMM;}Էw=ͧ= |T:(BHJJdzDOOӣ@%A;­%KrS!??_bp344$rʢ/OJJSLX֒h|vZYQ bccg Da={cǎ AٳGNsN2bJSHse"DtޝR^zh ҪU+rU^} {37LLL$dŊq~*y@WH":P{E?>`iiPvӵs9gΜIT$жm7w)Gbbb%666Ԕ5]}1իzp*]OOﻥg+ 7oޔ6HOOx} 33/666j a7*URvm&  4YZG|inn ##C_uN<2} 3xoߖ011jjjf͚˔)#(҃:w*Q$gTjӧ! <UT§ϟ?/UbŊ_-,,> ҏ8:(W .p G5jPKz]IͿI%33$<*T իgY:xE[S oz>K)ڈKϟ?`ffFڵkb) **/Ń( kGo $%%]MMM%i6\5)8ka&UF GkWk O_ӑx (D>8l4qD^hOHjՈ%>5(X5Khk (@Ṁ{oф~b=_(*Ena}C)kkm@9c;(uw|㯑V1IMuRC6/ e!ցy^O[،G:G&[@w\т .kRl8y'Z m8vY@OOOJa-f+W$b8'dԨQ[n[ݻwF6l;8Z ںu$'}8aرys_Ƈ ]&L^p!֭©d* lBF-T!_>e/ދ/$/BҺukGu^)>>A/ᠮ2p@rJW&3gΔl/NX4[ WZ@D (d?3?CJy\xaGXvڒfW\!07+W_bWӦMNMPи* (6~zwww wބAQd(0hРW͛7ϝ1cF zۑ#Gܶm/2JU@6v]ѣΜ9SLm5|Ei!ϡCh%nddu)F/!C@@@)SXƘlۿsww//Y:r~9sd#,mٲdϞ=&.]*/^5>ٳ3Vk3v…f111 r͛'6˦Onqoʔ)577\WP8x`3(4.-<%[Cllllu~'#GP)//oooIϟ͘1BHw|ҤI *sӦM6)a߿ݻ+EEEC١C7poL0!TRsS‘#GwE=Biٲ{W|]5::4W:_̛7/cΝo߾-3664][ӦMs5*+*ITTM9R1..ΐn#vnnnG}|Rdddrwwk̙/೻w ~S_J˯Yjddd0~Frr<<<2Q[n۷:tNNN{x֬YS988"s m g6_j%Ç 4]:(U_=J-X߀uzi85۷o "I &?t#vZɩw؃|nj#Y;B )1V``=Օס]`| .]*YSɾ}$#B{S:Y;6nTTd X-[`]ҹT Pցe :e`-]R 0Oo߾U(;Xks|҈j߫q^uuh7M]M'm]K֕驏y-3"?s9RH~YT {___Rw7n3f?!?| l7mB MC@@i֬ f8~Im``{HKk@ALv?w^`^ٗ.Evd'@Hz@% ".\P04*ę3g$/}| پ};С2d Dׯ$ cuP[Q'6бcG .lNfׯ#6 vJn޼yw2r\x1ť`HR N*;mڴlLƃ  /z/uС~n*Umۖ8ry}䔬Xbcz=~?"r=zhC ܽ{3^ZfҤIm2~888ԕnݺ+W;vѣk7LCBB{|ĉr={d*TIdDo;`36K m7l`2yd ddd<,[,-[*zyyY1MnJU]y~1:uٳg+}& jڵ)\nnn6!!!Mwݿ~#]-y>@G棣e[h+ @6ޛ6m;\v-~넄sssc{{msCrZӵo߾/_K _|!_VggΜQlԨۑ#GN}%((1czXX0B_-Z(' n WDoٲ%QFrX͛7CMFqHѦM| #acXX5Hk#A0a$˗/G@e7=<<*!W\Vr>>>e (gmذa9-63f̸3rHYgƬYbl⬅@1~]|!;w.GZ*7Ԝ9sb T00jԨ"ӧO(45j_AAA%dkk4۷9::V!"f>œ[zpwEFt9?nP6BT\^zց5.a(dnO\vi_|S1A jSH$%%q>>>A ֞o)9\9"G 5 Ig̼-) ZA-kBهrKCkr?88[yr&sj% ŪqnehaÆIΜ93qD9BP@n>} ;rH^QO>~Pqju9CB2ߙ ,(Ñgp)|֭k9s4W}8Aqiڷ?$$$BNEP0gj[lMKEPVZ,51c5eL>}\V^-с>} (_YjժFz,[,:$Yc Ǐ3MG;||DC+A~(2uTzj11g~&]{"(EJ]="()-MP@QF4YͽF\ W޾}k J37M6޽{<]vq-[dc`T8HWĜ/TT%&C͚`<!͆-AP@0bhYkg DPP~gzEV Sӻ(~{3n>5_(z͸vi)ؖ _S;qNqU\S[rXqbY~>=M@uaP)$nMDPHԭ7MP*țC tJQ *UdFY?اMfH*ȣǒCΐ:)P=|0sv(@IU}~Dr#F0 rݾ}|! 8!VFX ׯ_+J)zfH .H NJouLpSif_5̝?/_RҌ ,P5AFF-XB*F#q? { ?[-P Ղ]IP8p`K dsy섪y)|^|"222TV)'h˖-[jTzG0=w\={8$۴icǎT3Aq p;iׯ_m|lv>|0sB$N{]-\0֠Zj/_@xX[+111scy{{?=uM~}8+VŊL}ܶmۤ>,B <ڑk֬ɷ`",ȑ#Θ1)i-&(z%@prrz{9uիWeϞM~ *~VXܿAԁ,G[Z^O%'vfn:I&J*_n4 B },^S/_<`FU>KI/ڴi{|: s;vlqyqH}]z_+WңGkԨ<.]ٳ-((-0ӧσO>9zjVqI7~ٳiӦM|Xbv9W\$ZRz`'Rr/_^<8Er7mTBDѣGWN>֭[0Ç]V@hY.]RI}s77TF q::4F/^s{s:\p:ckƁwW^˕+*o޼`9r$}:&&OWWWg ؁sO>Fާ7o:,\ k6hɑ#G$*JZ !!!9}||ڪ_z%׮]y%޼y棳gXbE3.&`NYb-Si2DPЊDPOVo$(\pAVwR=`!*ǎ3Xp .pBy`...ܓ'OhC ID޳JA\AA\y)`{`.V Qxޭ[7+AwFXK{pR0</#.º.J+1g18_(WUpoXJSk-AP0cA,U@ܹ$ߘG>uBBB,}~t'&&2Y) k޼0u!+gΜNH~#7``v;8(6EPDL2IŞظ8={p_L`/H,Rj1~b٧gAAoD-۟WW b+5#%E=#éN}qZ ϟ?8jEٓS;222˹x5kd/[lYըQCd|N$J5wrr1%eG =IlG.֭D&#Ċ+dSغuk7 \ĨAԝ;w~\|YdH%(,^_BNSÑUV5ޜ79j֬JBTR矧ԩS'@0tڵƍ;S1X;w]cle˖0 ^?>w¾HPP Jjqqqa6ZcmۺܹSBGiӦcYfeXi5J"oӊ+䢘wg`?ҥKoOX 6hu qŪ/_wRg̝;Å OYjo7@jc}_~_~q(?>~„ 7o޼Æ s?dr$fA D@7o?b9W T|ɒ%!={v%iX2%ZLA* |. E jժ[{f~']tqxmO8^z_~[nM z|Bœ՛ [B8 ᠼxQsʢ }(!dd"sN$ d .gp-S!ا_~v'..9}{$([%LAwh??;*sĉ%T0 ;MII1sVAiڵ㠬Ró~xX ܟ#."(dL<sN?bK* ?֋4i5=pn Uu.p`A]~9dU* e.E޵smts0&ug   m{/v`9֝]M1l_Yzrs9_K**AAHv\$(-l`|A.72XP*| ~p±T@0*+`)i\gF8!Cy CzQ"HW7o+IUKVǏRbVˍv"\Vs@ b( >5j$r%ו#(otV̐~;>k֬C"(6"^I*u0A-EP}vҥK 4͔Rgݻw/Ɋ\vmtݓXHj!(,Z(7|#q4:u*qFuJH ڵ{m۶۬Zƍ+n /5o޼_:W}r ?9 ݻFfdi:tm6-)Sƌ#1fԑ#(KAS~zV Nzgs _n]ϵRQLN#$(444bŊStS߁U4hPVL޽k O,[ݺu8qB cǎPMUKPؾ}{ۗaÆ.]Ȯ>+=l}J?,egDPH zҶDPOVo"(#ȥPۺ}v}{id$P1(!,Y$ 8E(cblcAk޻wϠ!.EPP}PS^xa^,e#KM)cߍM)\J=zH&u,{Yܷ!e\&~xͣ:jSYg,5G;%<㞼xq,s,qtjheΔRfoʫg\lb4k.W<\1[O.K|(_=ĝ>=|vK|osYTWҹ Wlp^u5;"5ѶXAq[l1Rr׮] f͛WW,Z8)%dqJ8j,I<ָ`=/|7Č{0YO5Rs9@\ 5$%%X;vPs:udgt`hB` Lָ 4.^P{p#(DDD rKP&ݫ^zj{9,uB[X6EP`EJ-Ai<<<$ȏ Cx8ʕ+'4hZ IDATE1!bE+,+IԪUK\bŔ#F(:{lId.\d&V{``` &Ç\8v“'O!-/GPؽ{-ZL!DPȆ|ѣGoxyyY`iݺuNPm߾}b߾})=}… ,Ns!C<EDΘ1C-\P=b9YذQ}-j*-;:\p!RǙ%VXr(tliӦͣ;v0NF[MVpGMolU*&<<<ݻY6l(FG;5Z ׯw޽@q׮]J½f͚ϟ6cƌ;#G(s9ՒX߳H#w^Zsկ__wx>7ovꫯL~)6 @ҠаaCI r{GB֭b-|d}ݺuҥKއ ~AA_!@[[} [$E*)~.1eCVjxq!{ stC{@L#(j@>)P\?a[W.G"+2Sui)P@?bAZ_Ŝ5 ҅"_G u19t! 9)rx|~SQk'K/¯رcGSG֬YMM-A""Z`ʕ}P?X! GdEoV$%KVˊ9%8X7NG]A OҥK,... ڵk;}@MNAn#- r M4y~ xJRC*HE!-0Mn ,Y~pV1r hߟ[l"H"~@3FΝ+9 K?C*@5$GlI Ǜ ?\Bq]dCBB `5yln5,>䰖|XoSDESEPڕ`\~A>>z>#SLJCc?:;;KP*8#mЋxIÇ'̞=["Ϛڳd:uR1%(62?'VիoK+[ݶmvڥg4iRѳgϦFp^:_>}N?q4ϖ-iiMPR%ϰ\|6lեK'ׯ_$_ovA 77WF‘yԩH777vQwq z\iܰ<"(]6{IJc jIP8qDҼ]'"AAݓ5E-f$ĩjzooHs!l"(={c ]~J\p9rC>3q4qYCX,ԯsVBKJ#JŤFAsX|s`ESRX41[۬9cA_bDVׯg yE\a^|988VNڏܸqTtH4,]+m| /^,H!ϞoV3f$~ʔ)qcƌIRVKP`kCS %(U&_t)ȑ#Μ93 a>vX o޼9SNjb'Yܾ|Ν;ыÆ +6o<%"(wrk%(M6EuY^Hk?PtR`‚8ՆC&̝;er Vt)]viݺ(cjC5zڪU'5k|'-煚qTX1%444_EP8~xORbZPzrEi^x}۷[ڥK"Tdh!(={6g}&Q!k?ˁa8]܀sӦM|}}a+)!(|Eg̘! 93b\JϫW I.ėe/\P;J S "((!9eNmkL"!K`#Y 6mH\ Pr ΝSc:PSiNY6YDGj*=}] ҂n۶MLJ^a,"(rs&~zfgS \vBeiRQȈ+Mse`˫v>( AE)"(=@i%(y +~ {Zh!VZJ^5kH>ys gRAL3F/ցFM*~ 4!D5@ HW2tPM0ab%iȌDP0tlAcǎ~WA$u1}s pTZC"EGG)S PF /r+}kq֮])W95j_AAAXxoDDDCgΜ;bƍvZ??nkŎ6bE"(!(8;;yfr#=ܽ{7̙3 -[KYǏ_͖-AL2^)P@ܓ2˗OrCѣ+0JR0<2dȣ\rFkyMZ7V:󧫫q(a@^݇HP&R=\pZU)2/-Ziy~޽T(,zϞ=41JR0Ϝoa-Zп+V(̟#]Æ =zԑ7qk+^8q@J"BڞAA^ԶA) /?3׳gO&VpҨQ#C_ sh7 bk֝9^pkР3 F!J.!C -44XQp4SݻwֳAA]5E-H20fA.l#?(ùٳg+e-ºu=z(#жm[nǎ?+ UtEPO |jdϴN|EO'9ω "JOk︟~)HC=k9 1A/T')6J,ڵkWӜGM6Mf֭Ew!Bz"(ׯ_ݭ[70S\7N:x`4%()_8XO4иq\ٳF͟!@Cu巍_dAJZ0cEȲ"FMPupw'=eO<2i޽75ke|~ʊ#4o}_r]+A};e͛W٢4 [sq=5͛G}ٳg S_ SNm/w~{w֬Y#XAAnQW pJK-kϭXB`&F:\xrJڴiSj ժUcH`L٧Oڵkݺ^K#{ܘuOe}bN8 Kz/"(Xuj̄L$"(纩 AP#?MDMƕ+W 6Άݺu+9˩ 4HUΟ?լYSҝ^ݻd,=)pFT?Z˚5SSs΂C:3ǡ/6\4P;H~z"##9OOz:&Ń9QXk(& d}}}azDPX/BNJmݺUHhC? Mmذ!K.OXrʊJXm8Xc\|9{j*4^/<R9 ӦM+8zhAZ\)X໶mۺܹ0XNW}˖-;w((t 4;J/sa[,EP^z}+#G81888@г3gN!~[~ҳgiG3gΜaÆ 0,^8'QG'޽{>V:)LBBBnΝ[Ps'BZvcƌ)T\#""(*W-z):7o}tH99s&]R.b?½^!( 4%K));ť3GLJO|1KPPНQF=T;OSA}df //jUC6Ç V<)>WIII1ܕ}#p WMɒ%9,YD$09V: rC]RJ٦'AYBAAv3/s f^̌R=d)$DPe("(04A۷?? p8]vkX iĐVBv8` 111\Μ9u H0C~A*痈C:\m۷oڷo/i֔8AB\:vF>kxذa2GVqeѣG9/P^RP` *MFԩSRS?'!u _ue˖ Ǐ?a„j N A{ym޼yƏ/P6m=m/{qYb[cWͼhq*RH%~4kZ9sX?4xb5jrܱc'sOo…"HQ9Kv̙3kժ߇% 6Lڹsg QQQʕ+'~xxus\YXjmڴyci2V(awc痤oHLL/_wO<$111񪃃$mZ\^y;NYڎ7.>00PY0aB@|z˖-wڥvNzDP05mmΞ=>|z~aU?N8^zf*ލ+fvz;Vsѣ=N҃ԫWɱcǢf͚U ݘ1c2e[ =2eo37}-j*UVݻwkSKkPM*hy %<DPA ~&I 8%C .<ȑ#&3WP ƍ&M$I|$л4kL)p.\Xkg @-fT܋LwQnfu4/Bf ,E !VKվ[[9)~b<+)d~[DeʔIՆa͚5įZzb4_8JB B8Zh4 H,.P@H:Cv$i;E6PKaI˖-9p}2ڲ~zI\x,[, AqBnlpPӻA!W@zFUd(V-BPr0~b^!(tu۶m jWAgϞ=]֮]+JII ?_4iRc wc}IRRR2Ν[ఆ#?...LQÅ ؂}MP[8,f͚`g9aQC\uY/"##_e9GWPPSUVwݻ Y=YFU{5Dte[N888?ɬuaB)Nة3}M9UBP sT$9Ç(PYntSցzjg+߇j u??֭ӤZ'ֻ~޽F-y/RPЊDPOVo ( I ( R&\x1OǏG9A P ӧ9K,Y^zkT w^UX IDAT;;VZ pg%?~99IT#"RΝ;W}qIP&~x,ToG`z  45A 61 X-MP_9qd<Μ9jY4iG2&LHӉ'zIlM#GU2U (X,6+V@z_$ڹ),N.$bjK׮]7q S ]D^pA?`ĴJ_;v(Hsmڴq;zhD)*ڷo}T"5HA!NKrbZ Çnܸ@G.XoB~/_\UT7$_اN QW;Wq=D7lP㠐V|y1X֬YݣG$Xi;͛ o{ȑ 0Szꣅ  > 4HZ0甌1WקO!Gh!( !_^zu)[l }vJ&MUXQnDPкs/xb?zرcKj?޼yQl٪1o箩١ GVPeӦMe@_nÇSMʖ-u֪䰱nݺb]O󠆠Sl2\LL̵,Y~gYi@5kx޽ғ 5r:{5k )&ȱAA_>>XYP}e={UX'}QbyXŋw׫Zj˗srשSɓ'ciUի˚5kéSRSRǴAcnőmj={vcO>W\) N9ť8]… U^] {+ߝ۷o18ܹ&t%*תB|9W\m |ѢE1 JT3Km"s7iDf͚|z\0ʧ~ /Z ǧlHHӱcǿlvfg.0bA*Vrϟ_lSbŔڵkɍ7+!(@SNOJ{3z迦N*PrvWV̓=z111 ~vAA 9\PܬBy~ F'nݺ%!IAP'q :rרQ#s-w4rxgD¥K%#z\#Hu+.r3= ZY2MKEap@5npɠOݞ"(dUoNDP` 8M>]02`+8?s ~#(0`I=✝A:7o/pM͒3Y sʩS ec)b֭~IjPrv`{C_̑Bgr䣯D._>A0("(` gKJɓ'OJ j( zqIҊuEP#IЃ,Y١rʲknbD @gaJ#r:u*ub<оvĻZj=;s(ćr7mTBf{բE7r!K9rPam"DPPB(ϭAP_|w!H "wGE}|/䡎32eP̙3CHq05 I%#"## wZJ A;˔*%2MII1Kgs|B R,(S{G*UHlHoe UTB@߸G IC lAE!c}-MP`) nqrBϞ=9A͛72r`Cv n":}ƶx&=KzeƟ={6SR~}Z\`  [-qqqXpڋ R\ԭ[WmWz/_pxS 5hzjCF~#( r{}lذ֭$ܹ@+ Ŵm RFD Jum=׋Y䉟yJZÆ vJgam}||ܯ^*5Eh&AA<\rrʪR(ݬY3 ֭[F7o\:oذa٣G2l2ﾻg=g}"ׯ_gސ:t(QF\,_ɒ%+#uF.EN*Id }u;{'Olx'vԨQŋ_۷v;43888_q <;~xOض?^Mrʽ H믎;v,+n0'O)Wg˗#X)[͛7H!ɓ'#H[Eg͚%!a]vEI"##uڵ4k/ʩIJ 6h`-,~ YO]Oeg]"('76 f խ,M@z] b #@ A&(~+_< 2J.́q|~`ÚrвeKC$?~CXpTb5sQ`p8Tcr~[0d*Cx,8̑N/28!~5A])r$9 ~5Sc[\b|駆sZp1|pɸJ4ԩsqsPT HZj FԲIP`ɟ93f'Ac?ĉ%RF; xyfǯJz;q|YF? qܱYs~„ Yx|h=T.(/_|ڵ0//W1R}]~ݡB Lb0aݞ={>6@5k{'?+W~9BBB$8>,ye8gW-[| Ν;YsNw٩S½d9-le˖e%2իW7|e;sL8ŋbk+ŗ.]ZwS$CAAA_ ï*TkM۷VP<_PPP1cư* O9r$J.5\JO>$O^KAAFQY *JC5k`&PLKQrR2\jH @]/Up!cgA(b !ɭ%0eK:)؃yX ?e }܂@:SQ@@9gm``WF CvQQ1A's1'ǙUO=fO2 k0,إ? Vʕ+ XyEPߕ$ ,66>Zp rd2edVw[l맨Р/07-xmӦA/ ?^uֆ*XݰEPغuai)wLH"(@V҉ -8먨kJc>|8wƍ9z`͚5iӓ)dUVM6KeJ 7<ͻ=dȐGwqɅƍ'M*q((#'O.Ur!CǞRR; wn IDAT2dH¼y?`~wgɒ:|Y؁3l05)e19sęRaVXbŭ}`sܹUӦM۷oR:68֭SNAA ZuQZk<|P6%}. HxQUd޼yJ32`Ȑ!pfZP*pRs0Yo/Q0-* b֔_@rʩ^) Z_ZsΕt3gv+VpGVu1sXi%¹`7{;Y"%nJ@3 kq%.'3Z~0 <)YoذaL`Π6KEap@5np:z0Gq$36PQ趺a$BP0k;cm.l^uVx۳gw5áJ*ejѢgEŋsu15U0&6Zp}5arx\BBAx6ȁ`g#B^AW )))u {A?C;lA8a Gp8Wl!GP3f 2nڴ qp =B[^mz0/\|nj` 4 N;v8={6wBBBևf͟?ۢE.^k//]tIrqqycT ϟ?(gΜ (jժ//Δ6wK,Ν;='>>>p^(RB )U+__ߧ͛7`I[mo췣G>sL=bt%J.UjѢ3OOOk-s=vX xۈpڞ:u*cruVv`o`.nnnJ.m_qz5˺cǎkܷ3g~8СÓի&6III_p ׯ_7owK~]j՗JdDٳ'޽{b{ݻw+V5,Yu6mMHsСCyΝ;;66YC#x?۷j ?#Ǯ]3d*--k^Nr'Ok Ņm7]M"(苧-f!ܹsifϞ;|pRFdU! VUR75) &߆ I!@DPuW+ijzoofr:6DP]@vB@DBP`c)C+>A!}pQ A -=Y%JTwݝ>}GTB&xG W@ə3组?+&'CF!`e͚5)f3gN?of xRo!@lc VSD9̟ n%X* 6r5SAIDPH?idB& ~@FO (#G9sf1pg9[c^4!@hG`Ŋ/oٯ_˗/ BC !!!Kbdy2d#KF}Q%xRo!@lc vܹ&ɩ("'`DP]@BL`DL0KݛDPݵ! @`&~XZ'K3/_+>>83gƎ1d⭱4!ׯ_TjUׯ7 X+QuB 5kV*EXXXx֬Y-B$ۑ I!@DPug+X* q %Xƞq! >J* FR`{ >d!`qDPKkd)l~ k(AC_~q*[+wwסك 8p u˖-wGE!ŋOs/"YM{sAAA_<7B @ nXEqO괔P ~SUQE"(艦}AALGB ~EFO$(VZ޽{q.`U1}YVS̙3kժB='BPq O4E6mwaQ2ԯDPP!B7`o+f5̊ d>hQQHDNH+oOcL#6["(臥5z4A!>>>Gc (XcUi B4j _~[n%, B C@3gw\\\7'"(.œz#B ``~ތ.Xjzoo.U"k(AwlBBAA?xaj(Xcei B@%t ,p$BckQ-!@<`_ہ ^d-!@!@Z VL'}B l"(:تVSe{3S E芀* DPui3 BDPU&}YK!@V1/!@m @X[Zj DP@鍀* DN{U3BDPE&}YK!@V1"(F!`AVvl4Q duCE Y+G!ވR!"@Zz"(z!@!@hE Z#Qo!@alFK`[kMX(9:kdQ` TOB  }-;kZB B "@AA_Ĩ7B {@ Ji% q*BBEE Z+tK+LCk`_E!@!"(hEtof{ϯ1K}HcoEzx^`n{!@"(dԕμ&)A:F(9QEDPЂ%BDPAZ/ B AA+bAA_<7B @ n^D"(N E"(m#mYA"("A֋%B B@+DPЊEz#B`d6AR }5Yi(92k`^`Mi,BA ^d-!@!@Z VĈ/b!@= @{X%1-DEۛׄZB@'(AA'ӱ"(#44!@d,`_IZ/ B AA+bS}B l"(:d4+%)A!VԨ(9A+Y .d!@!DPE#}YK!@V1"(F!`AV~mJT 5YjT {h|B0A ^d-!@!@Z VĈ/b!@= @{X%Q I d>RQ r>B/DPU B C @ZF"(z!@!@hE Z#Qo!@a2j 7Yf"`JE fj͈`B&}"@Z7"(z!@!@hE Z3]k RG؛{,޿ީ9!@@FE uems^ )?; k ls*"RQ ruңAS! @Zj"(z!@!@hE Z3] I!@DPuЬ0@m7|YT 2zlB  B:oDP04jB!@!@} I!@DPu b5"(|B@䄌G֔fD x3%Q3B B "(? K+ u@@@@ϟ?r0@%$, D}D%B   6@hh  Pp7b         Pp^c   W(s@@-D{D%B   6@hh  Pp7b         Pp^c   W(s@@-D{D%B   6@hh  Pp7b         Pp^c   W(s@@-D{D%B   6@hh  Pp7b         Pp^c   W(s@@-D{D%B   6@hh  Pp7b         Pp^c   W(s@@-D{D%B   6@hh  Pp7b         Pp^c   W(s@@-D{D%B   6@hh  Pp7b         Pp^c   W(s@@-D{D%B   6@hh  Pp7b         Pp^c   W(s@@-D{D%B   6@hh  Pp7b         Pp^c   W(s@@-D{D%B   6@hh  Pp7b         Pp^c   W(s@@-D{D%B   6@hh  Pp7b         Pp^c   W(s@@-D{D%B   6@hh  Pp7b         Pp^c   W(s@@-D{D%B   6@hh  Pp7b         Pp^c   W(s@@-D{D%B   6@hh  Pp7b         Pp^c   W(s@@-D{D%B   6@hh  Pp7b         Pp^c   W(s@@-D{D%B   6@hh  Pp7b         Pp^c   W(s@@-D{D%B   6@hh  Pp7b         Pp^c   W(s@@-D{D%B   6@hh Q! @O)Y c BMp4(hأ(h90 @@@ @6nh  /(_欅@!\pTN/P>CM@mI:$3n!r Woh F@8{{E z!GE(/5)@ ;A@A-mBh     PPCkm6*+X  `_ZA`_7'&kA@@@@-@A?&oh~@A? % 7zpb((_@@@@AACkm6*+X  `_ZA`_7'&kA@@@@-@A?&oh~@A? % 7zpb((_@@@@AACkm6*+X  `_ZA`_7'&kA@@@@-@A?&oh~@A? % 7zpb((_@@@@AACkm6*+X  `_ZA`_7'&kA@@@@-@A?&oh~@A? % 7zpb((_@@@@AACkm6*+X  `_ZA`_7'&kA@@@@-@A?&oh~@A? % 7zpb((_@@@@AACkm6*+X  `_ZA`_7'&kA@@@@-@A?&oh~@A? % 7zpb((_@@@@AACkm6*+X  `_ZA`_7'&kA@@@@-@A?&oh~@A? % 7zpb((_@@@@AACkm6*+X  `_ZA`_7'&kA@@@@-@A?&oh~@A? % 7zpb((_@@@@AACkm6*+X  `_ZA`_7'&kA@@@@-@A?&oh~@A? % 7zpb((_@@@@AACkm6*+X  `_ZA`_7'&kA@@@@-@A?&oh~@A? % 7zpb((_@@@@AACkm6*+X  `_ZA`_7'&kA@@@@-@A?&oh~@A? % 7zpb((_@@@@AACkm6*+X  `_ZA`_7'&kA@@@@-@A?&oh~@A? % 7zpb((_@@@@AACkm6*+X  `_ZA`_7'&kA@@@@-@A?&oh~@A? % 7zpb((_@@@@AACkm6*+X  `_ZA`_7'& ~ݻw/pYf,Y2g>#o޼IɓFSH9K,u4   PPxCkwޱgϞř `L@@o(8͗/uh[laM4qR"ڙׯ/2hܹgϞ1p @%ťׯB }|Igk׮sXf͍6m@g:?siӦeN-***CEٳK.]DXiӦO6oX0%@A PPϙ[ӡΝ;rPޗ{iY^˚cְaCY W^eEa:t`˗/f(=z41bȮ'O0777 @ h}'C@h]xsA`C-Xk  C}ǒSlllN:C0 :~GF  PPcs7od!9rlׯ_3* eʸ kfSI&ꅄ0oA`#* h}Gy($0<@ D[;0 (h7,@!m]@A[% `?(؏%$ϖ-[15??#wp|(1 9{9rH5j[f߾}vڊ=*Wlq*T`'O`QQQqA`1NTnjp4 ~@!6@A~Yv}c2uk@Zb#Xz@!~w&:C޽;_dz), h ]ta/Kh蛀7pM7@!} @o($κHQ!PHt(v}c2uk?<'vJ_PhӚ5kni湖- `@ݻwI6lؐq .L2o@Q X  PPuƍY˖-eN>ʔ)cJXdɒٳu1VJY~j*߳ݻw33 `JGx sssӪɰ ⍀7pmN1 NhL@@F@7tB]C]ߘ sum0V^X*P|f' Zq$(& 9{lٲ0̙3,3gN(=i0WL/v=u1sw!Pp/c <ZA:Ɯe(#(h@!~}BEMu@A?fH"R& EUX~Y<˗/g:u2[OAAÆ َ;D ,BCC͎ Pp/b" {Y@Y=yhQ-=zܹ)R`>}b2ebg3fg>~hx$?(aܹY\Xt2CKi/eʔV4͸"C PT=Je1EŦWII迤Ii#^ݻƍ>|S>>>o3gI44ל|wׯ_Oŋ#SL9'daaa\\\ygCO>MJ7/z*)qJ*g})P:WHٳd.s>k֬-]{(<=`kCW^*yn%P}60N̙YBoI{MG3(ϤuD)1ݙ] ;!Zq74!P7@@~@A (K,«WدjPߊӣ<۷7g&?u|%6w\FyCq`zܹ3۷ʚB# ۰auiYժUY@@_\@!^@AYeͶÇgvuuxHS=<}4Y@@@i^zEŚj{ԩ4SL"ӱc'qoǍɓ7m3g0hРhip?~|d>/\0"C m۾Xz͛y6UZyVb&OܪM/ܰaCk׺?>]LLLnnniCO:t6hn陷lْRJjӦ͓={>17bĈ,W\I#" qݺu_8LJ3h;<<<-ft>-[,޼ydƌ׬Y~մJ}רQyfbuf+v 9#V\yM₱cz,]4sdddOK*kN֧O۶ms3#=66)Kn:׭[ WiN-[رc L;~xs~Cv2{G{.Inݼ޾}~SSLidȐĉ~֬Y;c%Jj۶v=#:s?(> !b~ᰊRMaۡ9!{~cif+Wl8 ŋlƌdR\9V^=Y{p`ȑ# ~ڵkWժUzcӦMw`/^ *nݺ5jب(SzFhҤ Y:uL~`o߾ՙ4iTC a^]֣GQe˲ݻsb„ ƭC5kf{@}hjZX 0~@!aցFI ƍ yCԢEW_}ejuR:iM6Ç7+"RӃ5ǎk+*(XCU[u!PЖ?Y9B^?|%K֎H;z&M^޽CsՁYN*JPp1\\\ 7shɓ'N)0007n\J2gPY|/׭[w;W\6 J׵kܦ6+6ݦMn?I m]f͍6m6su.]1000'oN?} a^^^""".Kǣ1"%lm ,fٲe+V(Y<=zd_`ϟ? Mټy<ሒ@6Ν>xMK_yJӥӧO?#J}}}cmvkӦM}GgϞM]tiGӦMl޼9\:Mi^4h fّtaYƌe$Ço;v,ms+ڍ1"rĈQ5 eլm۶N:ʗ//NM,YB ˅ Xb[t)ҥzLL,'ҡCFbiFyț7/y&;{p ,)}a'N(=xbRLyfC#F6̍[R%/"f͚Ullڴb$V ~dɒަ HDUHH`g$d={68p)0eRd}>(jJX ~@!~Z0~xFf[ 4hloԨ;tٺ l&!ܹs6O聇|  6M($ 2qyzzYrM:ѩK>}͚5Kyr5S,Yқ"ܿ?X"]@m#BgϞ %qfrӧl\]tZd(r9='M\Jxo„ S gϞyƍW3f,λaÆ6icQF"qF@@@… E|&L Z׽{w_Utm+V,ԩSH&((,nݺOׯ_njc'P2dȃzyƱ@.m5~jFDYfȢLtђ%KEY|>9oepp51eʔwCwﾙ#GrݙA('OSD4n8Aat| 0-[]:u!RSR N8!kV0k,'Z~KMs$|%L Hh֭VZ%fJ@ěLR(@L߾}v\SxBaQFE0~}vq}2/ƍB*E#UK($*~@rd:uʱ|ra sCy"c{Syܹs,!C;V1lMhѢ,rc( 2s& 1hnCoȑSB#""R̙KR𺩍Qs3x[^oܸq\ݻwE"̕NEߺu _'JxL4u]*P _u^K#{(ҦMh)V.!P2^ze7o(b섿(ׯ Xc[͚5ݤt"(P[V@)j׮j^dÑ#GBJ*%1 IDATNQP"<6>I% R̜8qj幩[(=СCe鏬 ?ɚv/ԭC P  Pџ+W蜔Dz`s"#Łn(*1Z+*vCQ@njvJr@/RS;}@0lbH ,, WEi*xeƺ< x"A+KڪU+C  jBX ~@!|JpFxlKfYda$ Gx0lz>aذaf@HQOϟ?7[b_)^ƌ$\ C'(䟧)wEYHC oVT7 :&@A_@rmܸ1C˖-EIa)d~hhU^/ϟ?O* /g4=oРAƏ/SPvg͛7+Wĉ.۷oKU@ùQ^~4GEyo&M-[5sʕǏOg@ȑ#iUVRJ) ?ydEeZjUf^;w}/׊-ZHnJ0O?e9s,ji.roB!4:K'I@uSddd˗/6lXgϊ"q-cǎ0,((u ZgJ,Fw[J?b\{7oLI>9+JAkfرL^|}}}n~z6iY b)> M|smޟʖ-oQt&]:ٟvf.*o@ސlц=[ &h2&uΜ9ܥs%Fx޷0JyAm8`r* ȆQ֖޷H\rD>!'h R5Axc 0z'*DϸψCLd[h]f-O1o! h7pMOA}B! w)Z(9inR&KBQ_^^<1@A ,;w.KZ4 #{""c!PG@;,׋/fȐA&8P￧oܸIwSyǏ&܈#!P -[nTV-VJ#666ij 6/\pXbS3f$T~˗/rͷeQ:jӦM>CZjEyAlٲg=?x ءC+WE:fѢEQ ]jԨQ>EFFgϞ]eN0x{ZzZpɓ'7ܷI&y"}ޟ8qC^*_~#G6L0y*իWs̉;{lҥK>Jzu0ޜIF"+i0o޼;;vnV7oRĘ눠v @ ׯ_6ͥE֭[YӦME)m ¢߶m J&s{ *U6mwE8Э[ /(*fXҤIevk׎^Z9mS$S@{n̙t(ܽ{%Mm$j^x:tQi;wb2s_z%v P2{l?}DCZn-ӡCDo*}֫PWJmZ6=[} A⇀o(ď5kBH}L9E)/ٻw/U:(Br4OÛ۴iDթS0Rz(Xj\@6k>>>ļBs.*Di7o"ͧf͚=6ьc,QO((mHYf6mIaiJi_%)X(EXn]֭["tHOϞ=۽w޹ 6,rܓzo޼I)SbR/_"gtkɒ%xe]~0<;w.7pׯ*͛(Duӵ ?uTn|cwI;wnY^SPf:uh կ_]n m6ڵkEk7ŋ!J'„+TP! ZWJǎBȤbŊ/?~ݒ}|ap,Y"X+P!VttEaS 6,رcE!ǔ( LEﷁ:9s&Ԓ O>M&Bc9s*R٤$T/^6n81cB͛7/G\ -P,=g/ŋ>[X;Syu?'Of,,UTaG}FGY0Bwssɛ7!`J@"sˆ{Di/N:x_؞6y7oH߷͘1t וQo&JPXo)MaL4Fir|R長Nx|]W_}ev4(CBNp Pp@bJ  x[;n% { Gअу%2DU={'\bRS6c6ժU{ֲeKqFQ],BJ(] ;J.] իӧs /N\fvd;w.Yr~={z߿I&6K.-Ma*~LLL9rȢ5H  mڴ$ldwٳHPیl֬Y-[Noܸz_ MA麐RܹssN\$Jipƍ+yڜۻwo4-{:W\(Z}/dYfGΪVNxi0'L) oAAAR|ƏN廸X=rСƍ~(TT_%MXCQ*B Ҩo߾;wn'P[={05kŧ>p@5x"3segV׫W>WKR}嗢݌h}ƣg9sJ ̓  [@ZGo߾eRx5Y z~zN{(;$cQJ ҥKs]V@$(B%҈.]TTD$0Jx҉~a:RE\h)S&KdӵkWdQ=zy}E9cei:@aE_'E%KP ˜*d/X(%6Dx# xt 8 ']-P;R 3傧Or>4Q*]Ie4=p`X$/ϝ-СCz겦(BSm PжA`(ts$&&BƌNڵ+$=m6  Fyhٲe7ZBjoeK,):+Wo߾bIxqC5~r^GLxQERddd#GoשS0*5t2eJhŋ-†g_ѢE IS <ᒥ'^k׮񑥝x9k~V^ڮ];QȲ?ZbE}{PHWD4W^b'tVDc"J,]VNalm!PPqCPă)RȐH# v^D(%Es΢-Zd7Ç3???Q^Da[ƍ[~^ RLמ'(X 4='$@H "R "ZrE1VE F.$ZX`o:LD)A'РnDdɒ$EH| ,oyرI*mZ6=[} A⇀o(ď5k| (w}'skK9XdxIm۶lڵnnjÆjP6קwew11aH:N8 6lC4a(X﯀ŋBoݺzƍNKOҗ-[S¤ay˿}:9f끁'O,(̟?vc+"AΝ/Tao64Cb-OpӠA۷6׷z:uݻUY|oڴi~gg ?su(={6uҥE-=|q۴i~ ef̘qO>uyK [ڔKfҥHEbÇs Js|rjhMF'9pK͚5eb87o޴iSSe˖'O,zל9s2M6MeᑣF2#:~h-&дiSF"M@vա-9s2sRf͚M6ŵ8q"4h-Z 6(G@!88f%"w2DTҤRTcmiӆYƒ!K [H[~)){\DB1F ڨQ#gÇgXxٳ =nE;`{'N|8|,Ҽ7nHY@QxQFE >R5K7=i\^8{@wUVo^tW*P0`@ViTfz Nr§=Qˍի#>uԢ Qv<}48eʔd7jH|:KQ}ޟ6mYP`$Itlk OO0!Eo-R w;> Z7p@I&3i&z͚5wٓ^z"!>}d5kVVmH<ǏR2{ZWߖ>٥鉄6t#1=-_{~ PP9Ck1糞={> x'{hhNVۛl߿ Z׽{p޽{~0sLN›cm@aڵڶm+JCӬY'6m 77ѣ=F!ҧO3f͏'P8KKNԼ`oBCC͛7II.KbҥHJSך]vZhE)בBλ(bW\al>sæ} 2`FJ.6i[)L(TH9hZÇY,?DPZު%FKXbŊ/\~/âqy'x (a=Z@Q@_z(y3RWbHA:֚Dx! xu 9S ']-P֭\"U.[>sA@Bxq;Amm{'PX(#(g(Zjۿ(˗/&~_>&Mϔ'U_xy7on\r5UVo %I_[ wem ZnkݺuҴ d^B'O58rȵ*UqرUTKwԩҨi^ IDAT 7~t9˩-*z+=o޼=z0Ν;)f̘yѢE_6 N>Q8(DEE%,f߬dɒ[;w6ꫯ1f@aə  ĐXK`*ҋ2ַF`=z]H%›_Bx),z;~\[n,ZLHH%oooi-}%QuXlssu(6 wuue/_4qŘғO4ItMxX?du]1b mӆPDV+Pf2|W\ 7o6o,E"(޷={LKRYDA>5kӧK^JH Ǐg+V4ԗqzYNDhAD:Z7SNeV27MuJA&Mju[4HXZIX7 S@2ZA`V| x]*|+RFa9z(\Fjm)waXR/^(Pʦ_jC{QX P{4 qE@`&Y%^ݻw֫Wtsr/=j8IO~y㏸Qiϟ?KbS;v|l2M- x{{n"(RhH =zȾ` 0v9|###S ݿ?8k֬O>/pBUc޽jzE_3gO?FDD\`꤈~׮]ۗA:>J(A= O>fٳgE.Lݽ{wso,ŋ2dE&w4i̞6j֬YժUz<ĉ0 ?S3gR$@!!"Pؘ5׭(_>CVDmM;Ѯ]W,'JB޽͞=[ȮbŊֲRHr}jժ;X;Hb(){xir5v=ׯc5<- <:~h-'о}{ʕ+Yv]mPIm`7 Ν;%Kt A.C*60H1zhQ5@ݻB֔{1//Q-(PD &,ƔO^۷,UixiCbbbXƌtK"CRTJ˄5J<( PM@8ڦ} Pо`!@ {oBQx5k )sco؆ D*P~`sΕ]@F!HT P |m IUpaѩߟ4i!C;v$=)Sd߿ǒNGFF(YdE7n޼yJVjIp5kZ\8ٳg;3@',`դ߿o`9sLȺwNE]r } V؟o(1 ,OQ:\CgXXKtuTҲeK~h6Al>)ӥK߿ϲg{cM޽ *'O@b" qPlo#v֭כ4i"R{\ʔ)BR9&Mxxx*a??mrKՒ@lC>|ZժU_[JdɒϟO'/(fB f۷ 3.l3x` &nnk.nZdŅ} 4Ç_q!Ї 9zhQdFΝ;EBCSy]s ?Qƫ%JX]`ҥt"zɓ'ƒzj |Qm۶5j(.5bY4**J9$$䒷{skx}߾}j׮-$J‘#GVV~}(ʖ-[Du}kÇ$eʔ|7o^xϞ=EQnN?>Dx=jԨ,#GEV{˙3gDqͿasiyEBt0ooѭ!l3Z(\xѐRTX E0BXӧ-N?wI*PoU˙Ra4=䧨Bjժ%޳+WNYǎي+>CN]t[޽{RdhC),87onHa.+Xɦe˖kH@8!@!܈I@@7lp#4oǏY)d()--Ia0a8p`GRJ.oݺ%I)k׮OCu #'}/Ype\{/ ԃ@A?"K!P_vJ/\( j%A˖-smܸ1.U@|>x ׯk'OmB -Zˢ -Z<ްaKHDP;@6RLYRڧQ0??^1UDҥϞ='(U+Ῡr_v-R%^ `Ȃڴ9r79 tS( ><˘1cD$ ٳd3f M=m%:tqd($?ow=?zi5kV@(TRcBd';uch#~y%@IRJ%7o=zemYJ]!Cx?^'Mt;v̱b YT~ݟ:u*7]jԨ!JDv\r岏W(!ey-"\vrB,t(4 5/%h)z^>}3fRk:LCQ>eʕ;JR Cv;-(HTCB"\ }Hi<ڷo/jK i@vy&IڴieGG9bIzpBNbGbիW/.\䆋 }6k֬R Ζ-Gsԩo޽zR]TR>+_'N} ꫯd߿5kVE[y!޿;-lkJA/ӥKW\(b)VX Bq5^OW^]n[ڥɓ'TPG… oX[V|޽{?9s}aŋ/$=ni|$͑#Gј( ƾSڵKtQ"X+PED5~޽K-G%ϓ';Fm6o|iӦ/B@c~sƍW-sѴUVEa)S&uD;==S~oxcǎRlm&LXb!D$jޮ]WάץKԩS\*ijժ?r(L;iܸlTJ[R%z=ݽ{77t]@PB'OOQ<?~/^1 @1vԩe˖}#ʟwŋ#6~D~SEob ˗S-ZTĘ1 `֬Y"1~xcxSѴi7o^pf͚϶mvT j[ZRъoK" [ )fΜ9߁4i|^j^ ={WLLe. qT$u/M'͗_~Y͛s]پ}{FRP]|N4nRx҆e͌*111ע@A)(PJU?|`HtR.@*͚5+AIĒϗe%6(5DFHE":-PHH~]tɱtRY\;>Zpam۶/\֭[#mx]ԩSˢݻ7VZu@̞=۽w޲d6޽/˫W֫W/4=aÆ-Zx[? Xo߾=*U*n*ij=͚5{bŊ4-wN߮]*(={>|O|ҤI J.]DGOTTTyʢTP4hLh@'OMvŴNJۄ9^x񚇇WtrڵT>>>(yWXU=} C( z&;ʖ-dɒt*ҥKi-[vcǎ!\1 Vfv,Xp}ϩ C>͐! Ȓ8q"ӧE;}Q$IHBXXX%J֟񷎾3f:88X#"G)K=UeW\Owp>;vc֭кukCSͅ>{ӧ)ORF o*PPiTڵ \\\ɓ'فdoxc*"5#1õkeiXcܹ}WzwIH;Do۶5i҄;ƨQMK`l@H@f)*AkR36jpɞ,JVUAe}E ~@IWfB y TSt׮]t*d7cӧOy(zi… s:X2=hW  f D*m7.b׮]m۶Mׯ_YE٩e U>PW(P&LE3;#k+EcLӦM# 0'h:X0v z޽{EE Pƍ4XF+HZQ)!C keH1$U#0 GMCO;pvXd IDATH=+.PA%i^^x | ߒ(Q"/Yf1qJ7op){`9s$)SfD*pBXz{{77jlEݻzO-}25Ç)ࡦ` ^9r{Y#m9d+gO[t)ѣY( z Q#ӹ\|J:uiΝ,[+^8UY AԅOP8~b m _N :gYz'O^P(ｰ7ϔ)S rFuϞ=)[_s_ʜ9He@JzVN;wJ&G=Qɓ'ӧO/[;DsٳNooNZ|y"Ҟ;;[H9k;wξvZʠ@ ݬY*'Oi>F4-[|_4w`ov0I}.]zO)q ʕ+TZAe:_5rc}7/FmO؛`鼀… #iD,i&Ǻud*RP4gϞa9\w|ӧ2dbZs0e+DP@yM;#ks43WhD˗읙!%(-}zf͚(zGcH:eCUGp&(5=iPK.) oqqq$qĚsE)1ch۶mB }G8GȵGJp"3AeԨQj<ARy  &p ״(;7&}wzjj?C4|Xz l) lٲq 𹀠Zg%KTyj=07قtD0.@XD!sT9j> *P.G'鴰3~ڵOxv)s׵ӑ;;ط!!®]@"m7WԌv #(X~=_~– $Ij>qlѢE (s̉3̙3Jk{{{w^ 履 *<)S4iRQ"-[hڴ) CKg@#"Nz{O>_^ʕJr SlRm\22ڵkN¾5k;cƌs~gSfȐ!YfΜUXŋWJ}A1bСJzp,'wޱFSW@q-U> FtÇ=jԨ!E EK%gqPP]]? ȶcIyO~D 4AubĈYWZEMBs!52e?w)qll%f…}ݏQݻw&M@$?C˗g #Uȑ#ڷoV^)U+z[111_j%888DIܹsn ֫S/[.2|2`+* DWr@X v*UEyӧOMFf' yPN@^Rݻ7Y`ݻsA*BӤIٳgsfBʁV 2O80@rʉ(:H$K۹1=p6HS$ZTKҦyRB'p5A-Z`|8vԪ1pvٰR\ݻwbАJʕ+v߄u Ǎ9Ս?rmBE8H{׺uƥJ.jɓ'Q쓚- P!O3c K,I?#Ki\oӦSe%Μ9b[>:::Ǐ/̙3ϐ!Enܸq|ժU_q:Ǐ>>gI& ʨE;#s|˖-iBBBܢ><1'_|o}}}.\Z%07o&FT>f˖}ҥ_k9#""nݺ5́RaMqO59sw2ez#G 6|_?CLp5w^-[޷o_j~^~~3gη-ZF2fq\p ԩS)oFӧ%K.TЛm>ysq1e+FP({Q#BƑ#GȦMHhh(????.hW/^ aIARJ\tg">];>Gb|?~̍#1g>b!e;p̚dBMP>ׯcPxbMӧg-_cn@jsEhܯ j646A4 "hT)Q7lAPG-֩iӦimۖ\Rso똿9Z$ [?sm:|c{C!AAkA!_l C!`0D0eBi* mMTp%e+j3 5pv5%J&(k׎YFq[qE*_@J`ʕ+[0Š&A3ANx(Z+5 C hU7n77%` )@M@M/.\ڍ9i@xnR- I&jFk|c{C!=AA/1'h6FPHЗ#C!`0 `٦"(({Q`0D8֜ؖ+ؓUf͚ɶRp#G.6޽˩ 2DVoNҔT&..(P@*T@Dg3-em J{9H7nlKNjcǎ%HPӎ*ѣΝKAhz H1`R`AnnPL&OLFI;Tȁ@HiJPGj W&HS% {sV'1cPA * vY*{?l"57FP³f / >v #(h!~g0 C!`SֵT#6Q`0D8֜ؖ+ؓ0p@Ω,e˖P2]6N[hk׮%[Uر# }ܸqdޯ_&͛7HRSR="(,0k,RhQk޽{^hPz@~4i#HIsB"(@M6~iJHL4{џ|֭$k֬p!zҥeCiѥ|߿J@a(kYlYٟo`gm3_'(CL g :v#(a0 C!`SAAp$"*²` C8ǚsr{*VȥM賓ay摀Q=D?^7oyʶ o޼!-ZTrBS#(` $O&~#]t=c ڄ۷oIƌe/__P#(t5%rӳgOh"YUqʕ3mӦMTY&i!|L6MA3gf  89X @Bz e zv#(Aa0 C!p`RA=QQR+9 ,[ V!`0;p9/-Wz?AASŨ~ *DA=* Bt!ñcǸZ3X p¢JUÇ Z}}ҤI\AAꨧ9l02Р LV(dɒiDNVJ_FDZi[N怴 P2҆dΜYFFҜmo+V\tTמOs,7FPp`]3  8|`.nnnS} ˗׽C.\(*OS`P"(\x/^\w^}UM*G(YjHgg*{4Aa~:ZHj4 H UPk5pQRZ5Y3QQQqA5hЀ޽[TTH3^Gq#(8jg~ >n,FPЋ+`0 C a  ^z1WEA8BDWr@X6C!`XgqD''r;;IBj˕EP"V~} H(Q"۷I>^_ݝxxx_|JIaܸqSN$}ۗT"(Д$:ShǏ'*U2{lŠzk/4A "*wJW^%HT9k{Y@5,715`|y'(X l;FP0+`0 C   -* ‘%*²` C8#%#$H +ؓ@v" i??? 'ظq#G$Ctaaaf͚:pB矢 =z /oĉ!CըQ`!('k(GETp%e+j3 5'#S##H +ؓVZɢ Bʔ)it` E dC駟8Vrer1Qڵkm6lH+ZFPȑ#CAs!CN8A_nO0ڵkI֭ O`gAۨ[?,6#(X `0>#MP1SO0A `8C!`0 G,[@k(GDTp%e+j3 5dZs[R9UY~`O 2JRnߟ(P@ƏOƎk}KDm '}5 (I%lеkW"E xiolݺUsn'uQSJ9uKFP(]49ٽ{gn|xA6 /eM f F7#(Eg0 C!0egެ JVf0 k"`Hs FJ=zDD@R" |ر@b̙3G傟p[z*BsEٳUS>y.:6lC!`0 =dcWڵnG|iq.x¼5P6C!pJ8h0wv3*'AK"(ܸq-4-lxx8ٵk?zm۶mI&cƌ!'NUP&˕(Q#իe |d̙x۷u#NTFPԩtZl޽Έ#Ȕ)SLûsɖ-[TFyܹs… ŋsӦM4 4H@R9)ʠmԈFntC 2 uE1dN#(8Ⱑ1 C!`P??T`0'7d5O!!^)W)M~I( +WNF ŠPs Ç9¡CT'M+D m۶d[%[G9Er*򁁁"hs֔xo^ITȐ!C8BI$I_^AUVdÆ 6֮]+k{;N{cX>c}0N7|`~N0*6%A C!`0_:!j1 k! >sY#'XkUkK"(;@4ǙM[O۷iӦɢQҥKXb\UDwELRȹs笿pJ5=|ҷo_gI ^x,_`RkٲyO#(*T\r0u){:uD# uH* h+Th cǎ%Ǐeƌ B8q4=(Q"?cvD9FP`G;'C!)yc0֥C!`0 / FPH<$&zY1 k# >CБcH `Ԟ3]tܙ!,4AԩS"n)NI }Y4R,v)*ZfM+ o)(X鑍7QYM#ɚ5~0NrIʔ)6>~HҦMK7޽ԫWOW??#0aXjС\ƍ9^RCOQA`89A|i} >倉h<'Β{k=N !`0 C@O&Ľ{2:" h[U|i1OLe]aY=C!>~CΐyߑJv̬PΗݻw9~xyy4-$!غuH6mDEBjIddMAၖB@vڑ5kֈ~(۷Iw2zaFP0oZ !`OњDw0^X9C!`0 FPl`0B@C(kuij$X!%6k~p5t&xСCL#(ү9iߓ p2S&\ ?.ںs)Z(NL8Շ%JpPR3(@1f$(|JJ Xٳ<ի9 y{{s{! EѩS'(F@3Z|~t҅ZC=r"#)S$H̀۞={HT߉'di*PΟ?O|}}eki^,ᑹkj~exP_a|a`0'(XTtn6FP +`0 C  -^ F \aj C!`-:plER_JYHJ&D"Jp; [ >}JΜ9cDPSNGX۶mST طo,1>IP3*UUKPF2e4=>S"EB 0kPc;v{|Xh}0g2  <$ zPbe C!`$AKP0W=\b?+Wt@X"6C!`X#KIxFƛPg~FF0+x =5 hP1Pr(kYB(y5Cj( 2C`` d&(`\?#0at_x1ѣwA{dɒh!} P0'x 5R8q!제0}tNAlwFo'#(8u'C! AlSQбAAHC!`0 #(Xz 8n,%&rEe+j3 501Yg8Da/ Z[f̘AڵkG'NLDd[ 6ަsΜ9m'JHW2i$2{l]AZ-:oj֬)jwٲek׮VÇS=( Xc^AaZ#4 %{]S}7n5kfΝ;Ǜ~ iҤ 5Uw%](5 6xzzj/`{(hf!2w ,oI$!ӧwY2샀 !*0UAIOn wIҥh~g0 =<1?[ҥ˘=%C!0֭[S:t(%jMqEo^,CRAz \a٪ ")Rr\3Zz|J{5Lﮬ M,l^zEs7:: @H޼yIrTnp.UW\\bŊq}Ν/jj}>|ڵݻܹs S\Hٹ… S{9<9z(9x #?#GO|}}I_l]p$7oNݼy1lذf˖-?'NW\YҴi'[l ٌo[n )Reppp(̙3N9rb/kԩʕ+յC:uww]֬Y,XufkԨ2I$g6mr[.ޭ[sh[<3fd6lXv˗ҥU`ٮ"(uXipFKβd-F5jEDZVEVJ4h-0j׮M8`*sɪ%Գ[-|ܣG{y-(j 4lIRH6+"($ɲXsoVBNEPر# ")&:w3U?>۷ަrC s#W^6H14h+<رcEOPX3V@ڵksfu%{B/_n'(%*0h Ÿq~jԨ~ϝ;VLYf6mpի۷_ =z^xqΉ[@… ^zU14(SLsq| *aС93gND@@@f'S!Xb"b5gΜF?zM0AӧO/%MT=:::I̙Koܸ۷%^zeRpRsn޼jRnW^nj"E 8ڱcHK2888H"o-+W}IZdȐbFPlilEL0=c3s[dijH1/"&-s5uqA>80w\| @7D^$V'Գۄ%sI P@7D9rBTW7)[n-L`.r3  ΰ ;KoSV\IsEjUn#(^N{ڴiNt"nQضuK8l A$~g2 FPHjYY|8)1#' 8֕ y{L!7 rH mx8>pR3gA9r.ݷ <\jD,%(3kĉVzf3%UVСCocǎfzsfЪU6l@;/_QOqqq===K(>|S> 0 9sH_r%PB/bŊ[;v|'#(h!D{˖-i5* MQ1^ 4G h,ۣP [ndҥ.3ma޶miڴv~h 9$x A]AMu$~`Fa a͖w*&'OrmќׯO qhº#O:De"EMM04YG" ff#(rZBPH+Wb¦VNY%#(w=ZE?#(XKZKJPXdgϞ=e֪UKӴnZx`TAю׻ u%6lH*x]Ǐ'yq˗/ SWڵkon:^m2y״Qz(*TŋC6[?AAꔱ71_Bp@0e{ֵIP6l!ӧO9Wi"J֮]KZn]g. ]FPЏRVmnDUw++th>8WkM*$A!,C& sۗ,X@X߿'I V/Y?؇NNkCL",,,9w|j*>Yd^kXws 4)S1bcs "At1UBp@0e{ֵEP@hӃݻI6mD *'On*%($Գ[[#(CIZ]E]AℵH .dVsalRRϟ'%Kd֭[ǽx(F|-_|$,PX<+ Vرc\ݻ]EÚLҥKn*U*@K|]tq q%(ܻw/iEj$37FP0 p0XCڲ}``6\DΡm۶2pg;2#(dFP0_-6725I]A/AS~`pY#($tTA Aky˗/ /ѫWV]?iӊR"&L  ]bرj{.]"%Jٺu+ol@xpK$Jj}zk+YdT $**<~xx|R/Θ1#)PI\50jsgCX;`ܹC @Srș3gD7oLrM{%uۼr޽pA*wwwZ;|A*G~cKs^-gmCPS/_^0iҤ{FzdO$ S}$I )5k2d8IۦqׯJ-Ɠ#GShd/^H={h_qqq###<dɒ僇ƌ4"111Ӌ=G|||"` i3G_c+T[yc/_výǏ_:}6M4 g&(Y&mvH (Q~ 0t2?ӽiӦe:Խ=|0XڨW^{u('O77o޼U[gmE?{ɒ%_?%p=4QD2gΜ'On3B%R2\r˗/Z64i?">~Æ d͚5|Ν;^͊fs$+V$={$j^-!(cv\R2DC^zenݺ%?gHeezMW33k,QZ G3|M2ر\~Z͛(}B-* A''/?;}hb 2#!6f̘AEjwڵ#P&_\vTˋ`=aqqqdҥdܹʖ-գGnl6FP6mBVrlذ!pd߿欆Sfĉ߯z+V|ٲeKYJs?rH*\p-[,=9NcvۨQDƍӬ_^*[Ç放zj+Vxnݺ5SHINԬYҥK޽3Oǎc4iaxx 1oذaΝ;H"}I2 4QJ8sܖ-[~hR{ݦMؾ}#/3WNm۶{IC]v:tx bak?944$}_t#Glj m֭|zEbÚ^snݺ%ϑ#Ǜ5j<ׯ_Lҥ_^P֭]ڵ{Rti#{͚5i6ol*qʕw9˗/(Lpԩ˗D3{yΞ=;Ӷm+Ɔku1G_M̙35,,-$$aʔ);w}Gxyy6gΜXL#?K,Hxy)eʔ%x+_0M4)Sll)Aƌק_{lAP,W\i4pwYӞ̘1ѼORGwِ"CPPwob^rQ;H_nݺ[lIO{ҹs' .y&@mb„ eg̘q?W\ק?~|֫W^Lrڵkn/_ؓL#OrgA鯿J٨Q#ٳ#z zV\ #(Xڎ$( s0|sKZ IDATcZ*8ϟϝM vJ 1G5(\HJSP܏BG*(L/A-ΥgOeʔ13ΞF gjf/q}As=PR%tKum.Gpa7SPWRc.IbAXRsiAjA7Ka樨jiEW jHFEddСW\I:t@|||DK8"ZM/WAAA@@6$Wjmڴ^yC;^R.>h/9Cbԩp܂|ȅSs;v !,4zZV\KFQ@#{۷ԭ[W3H0Nrܺuk^~9G5E f,YSV9R6>}_~)ƌ#>F,L<aEm7ڵkT͛G{U8ށLe@p*Þ={T=:PQǚ Dm%(?~d)l%i.AA);vܨQɡ(ӧOá/#j)|;ZQO}z\ѣO8$@[ŋo>nYf͚EnFڵkoX<ڵ+e3vѣG?Ҋ5AA~*U=zSu%ԉFP3M*ٯ^ Xn;wRJXXBWrd'… Eÿ{.,,,Y-rKA 0 e˔_(`D͘1# j1իWU"jc̘1Ǐ{mY\ѢE H䋵kQ  `Ͼ}֝cE_P:v}ͲF)Um<=:ujѾ4WByYFP ?=EP#dkƙF V!P3\ |FDhrm#F@VP3WVPp~&]c= p) SٳggYѣp+V dm9-](}<(JqT#(?k]_ `5%!PU%ª͍&Up졮`(fW&7C!`)xY2F$(s-[*WDADQg˖׏cg QjQwq-5#/4œ9sY>T@N#4KIj8[jE =֙+%-[M*vXz)M UR?~\6T k|1o2EsڢՁ Ρ`P^c4>d:ud}Za$99iWQ%)cgϞE;n8U3fkӦenݢ.]*CPXbEΝ;4Ex޽{*U|9$Ȥkk /lbw̠DP@D D|Z3gށmR;p|i2Pr;wR;ѣ6l((l?*r *<A蠶A!""r*U"1A^AIAy^,UJ&~B?a2V}hhhT5P4)\pvA??J$jP֯_N:/ ;w 9se5ՠAܻwyvqiᠧ a@3h` @~m%( 4(4~޽aj%K3>s0JPX|ynݺ*T@Gn *PrE{VFPYEP;.Z9^I@ ȯ>SPWǏ6mZsڛ-Tk4=@4{Z:uDi}lEP񄦜CJP~H9Q||҈rwշڶm\m۶TM6'{.{{{ˤQnYgϞ-"5j߾=7ޣ^xq# ׶mXv(=Z%*,uAcԩʕ+3 ǃγg.JIZǏ7f]cƌ8q$WtgϞ bu֥zȑPZJA#(h=+MPw8G(BH 2|Ƨ)9_"̐GÃ8j}(0Ht$dɒ\ڀ7oސsihaPokZ!'v)F);a TSBcذaD\ |(`HAA*mkKҁcH֬Y5EP@AK3I#h@L]~]R =50JP9l?~!eʔT?kPjٳg֭KL^ǎX➵Q5BPXdgϞ=Er! +[,:u8p@>Qeʔy'OaaaO:qTǎ>OٳWK.-FPP c~W^yG9J ХKy}:uϟO%~"JVZhclܸ&M<}?!oڴ-[ڲ7AAm 6mO6?0iӦe1bUi^*WTRq]6ms玛ҜlEPP>k׮:=6lX3f^&p=<СC\|8:u! 7HMi VuQ}aA/֭['K P\5&:vȥ$AfMRqŇ -S#(Z={u>j|⣉v-@{AO$kMSwFPЄȩ !(ܻw/iERzI[hm۶ݦ_v-y*U Hm~%).^-W:ĸVd7Jc3gN$֭4((莗5aȐ!YfΜ)s U}j7oޝZj s̉ׯ_,ЧOl .tR*cN+/ܹs ϰdիWO#dц Fߺu븂 K$ɿyk`ȑ  [tNrlݺՓ (4m4vE}K~ɋ+&i7rM% (9C* }/Ih4r~ǎD {~`Y{PE_a 4J[`0%AAIɓW*?z ׯOӺukYz7oke.\VT)'..To͹u}4hРSN}4iR˗5jȑ#2 TF!KEP%00J)wl2/X:Zzz+$KLDll<ɸJm2`~zjۋ̢EWʆ^g-~,\)& 哉 qC[Ԭj\0 FSQ@B֭M7J.]Jz!ܻGx"A̔. g[H+5=O/{pEig;ݻw$O<`g Xp>s4y'؃f͚qgim{gFٱ3qGHR3aXUWS-#(X.`2xi `4HB6D[ӜxJ~Z!BƲINSY8swwW\'NFt޼yee1V4<W9)hcGK@&1\駟ȸqTxFH ;w9O:)EXR55#, z-/* R* ҭ`A |#"H8?iҤc{e#B]i ( رc$բ]AA)9 pHq?>>>2@ڎR6-wA\rׯ_f~ +VձcGEiܓjժ+u))_(azk*Uzׯ_OVZ5IYf6muAYfME=%{ɒ%"gp5ANကQp}_=.]*À.݃4Oݣ,Y"sȑ#3O:5pJ4v&MH!OcS^@PjJ)6oތ>nԠ=;UT|(RsA#hF,) (`K r咑Hq)EfV\TKIhs2d5- 8D?{g\yS܈$f^NVuSQ#)0Q4YyC  fxhР̑3 o҈phQhчAR|Ai@R2&I%~iaJ`)A?aŀ+N5BT 7U߾}Emn!EV~CrCh_ho4|}eRִҥK>`Ht!RjDPcD-ʙ3Lehh(r2kuEҞ@&Yb` zk0n8~Iڣ.5 Uf!z EP={v\/T"9uvQNJ+W"O~wС"ǐAݼy3$K,' ժU?|M-.]G" Fر㶰.[X*˭MwΝkQRuG~~~Tz~N>|׷T_/111sQT꠴%AAMx"W1~ZF\\\bOOr4\pڵkRh"MD!GVjU vڲ8o߾+WBh OǧǗ%A$^xi80fIIAh)9hD ėgφєg}Ѯ17(03g΄) A[n>˗/}-Yvݩ B4|AA;#(X"( E긦@"=cS:4i5HA߳gH4bj8'zvvF @[$(虋2^AjSJ)غu+!4>p' (A)3^z6WC:_\g$(Hzi ?{\_#(轲+'>,!Z]A MV!p}A-_,%(e=:RbTZ'zxxȚ3"ea|cRH H 2Wr7*Hu'4/UyA)m GƍEb,C95G$#̔4 ]& WW`ƌy.„4 '5A ֲEzc{e#Z$JXJP@J={b0ظqƫ&m.j3gf2dpk恧IV3&rzLs| z\1%UGzB "`+TɓׅsI\}YMYCHٳgXhiAP_~ܮ]D zkd1{]9#2O6M9o+"ÃSN-/۵kWʆ ʘw޽LKUCðjժy;Z[llEOOAvwV^=St>URN]BHuIp6mZ#FN嗈>}3J*… iƍ;vRZےEunj*^N8^rҽltԩ+VRv:p@t,:tȾj*QN8AC~h M]bҤIFH#(E^,OOm{޾}KM{sNҰaC=@^iE& @U[Ҕ"HEтp3 uhiciv2A!  5iPP.Hhou֢"RyJ hQ"(={~9*r IDAT#(S2Fl'9aZyI0k!p%AMdB'r~,4l~$^v(_Pӄ d* | V2K J&h$|3ǜBdv+\,' >H i3b4&: Ջԩ;}HفBׯPh_JrvXZ#[GHP4Z{!>Ah/ 9 ‡h) _OQ.4.Z3^u|j7fj)Aaʕ:t蠘&@&Hvڛ[9W?~2zW*DPȓ'[ }r0xtJ5kVQu住I+hixWIjV?́`})lCoA|]tE:q-Zx/?hdJc~ooo>Ao߾ϟY;vE3Ey5Fw\_aaaщ'W,vCS<"'L`" МJiXhƍ?پ}{8T,RJ%JߴlqcKMB/A)|9?ܹsEÆ {0mڴOuFnO޽;4iRjuG~h9Al ”)S25JD߿ٳ软0^A2ԶA @h W ʡ=..h!<3тL԰z*a7M u5LA &AJJG/=)M .cFHXX-'+4[ ?{]_` kCVmndjl4k!pvArv!\*%bY!y}&zjҾ}{Qy8iPhD+K.@13, ߶m[1CJPhӦ D͂I߮];#]w9ApGGhդyǏOƎkF\=)TRp)%@ԪU@UCjJ*rPƀyX_Zn?C ( ˮ5tRңGO?pP2ڞD:H%5D J) zPA#C`޸-1FP=5BPY4O3iAZtZhmiZ]@#(М3J}׈F/A^zyݛ\E; %8z4h ݻ? |6*:j[<ZFjnbŊN:J8ŋCDw\p*Tɛ,ٳy"E#%R-U̡Cc㺰#RЎj'F 2QO6V#Z^&PiDSz)51wd`vXB`L!`vԥ@.oG )ԩ=9shN N#($@!K,w>O;^.***4g v{e7@nݺW^}J2vܧ~zJ{ *_tyoNΝΚ5Kw-! ׇ4! ;}+Va1| '?Zt͛La[ x!Cǯ_L;;v(_˗/'˜9n7xЌ3m۶zO;|VN֭ &Lp"22o'/> &M ɵkv(m L8D޽u~xr?Ũ6ѷoh8vnՕ}G cƌ}筎 LQLkwﶜ:ף@?+!P۷@hxmOEӴiSڢpkxfv~`WlC5,y="bӢ=S:^zH(VZOP#a| { 'p}QhUUljo1+!6ݑ@# Z@)Pp(P8x(^\w#Ӫqe}wĨQtצ{@vډs]*N ϟYfDP(|G>aYH?3fԽ 87 y?+d)իyO҆O@dұcGgŵi ͛p Hvw;4:G|hݺkٚ4{g`";FB0x0ϐ!nc.`R kcG`ܬէOޓ#Gx(X6AK͛?ϟ??S۶m ʈ5o޼wLJ@SNggϞuk2!"E~(>*P0f{;MjԨQ+VEbHHB88vֹ[ ,ŤIN_~e6mz:3i$4.ﯲesCf_u_RFq"P?zOcm|(̞=;s.]tz?7nx;7 eVŋɵʕ+2dިK.fϞOmO]8~~mU 6mJO5ou(X%%G3~VZCеkW1k,9.;@M*{_n:H㈈v%PQ@@ATRJԩ@OmAfͬ`ָ7찎^jѢEq$@!EBPK ڵ\!m i?)P`]"ï=zDRD:!P/XmwJCnٳgy8z47i T֭(zumnRwA@A /ZY @A&APSd߯{?ӘxJ֫WOZ*1Hq_ ]F?e uY;(!ppZd=mMbS&P&DFfR<#P8t(ZTAW#Xf(K.a(6•!;wѩL\r۷Ri;wnwlllr!ͅ  /fʔ1cGyˮ@᯿z0}>}VZA//B*{7s~9^YDqU(Ȣ4hҊ+-r@!7(8gu8 ƍәlڅ c87n*ؐ6ڡ)PB"xɝ;֭mIlMCrь'p2S@218RN~w /$ABaEQ@!i/IDyGt{$mZϞم%  pT;>C5}t'3:X[ٲeCXQ&Pxo6{@A&@*UJ~Ebɒ%>x*Q1 c~Kxֲ x'1ZG0"!yB>ADpRd6 (XPw /kdF\&P;Ym(;!oX|Gfk- ,M Jv daٿ>1 )P'?ى3gtbRM}*U.f1OO`f?(oxg@RJQ?ZQ g)yOu PP΁F@!?'°_ppƞ={<*@E"UkMpDkTT(,]TlRg6R |^fM/m1 -s   ~"EGխ[W C#`OB;66Vki#lMĤ۷=,'O&~` >NK0s#;uTO$c  ,Ղ8}-2RIm۷׍8)(8v O>d[N.^p˖-I*jժ]Yv)Rm6Pݻy]zϟߝ5kֿCR"Pxg.^d+ӧOrtIUB8ׇD]QL̓pݻwɓ'Nx;#F9n^׮]n׮]q?'O~gϞM,Y\7 `,2ʕ+YFwz^zVZT,=ܾ}E6ĭ D@h%K,v4uhw:djԨq?"O6|:Jů߿Y{U yo9^0 V YiLwx'a "h7B3YTN۷塶l"W?ywG^q,#"DEE l*ڒ#(|7H7,"̯ht%)S@8m]ݻ@@ӹsg][T:0ޑwhVN]_8ˑ K# e^!(P@!<p4  !( ]@7M@Ώ\D}XpKm@c61ߤIؔizm6rf#K,>$^i@[f(^%D{+)RH'AW_kӍϊ̙RL#uQߡC駟ru2p@qZj]Yne˗/O߬YZ%@!O{s˯TREۧKmr]3f6$}J4L8D޽uWdw} cƌٲe 1"CLL̯y7ѦɗGR()رc! F{ٳgSjD:͛7mѢnoF-4իW/f֭[;SL7ꆶMLLL%KԫWjɒ%oi"P9rC ;v?o^HURz(8gu8 /P Z` {u:)5˸d ﰬ7FxĻt҉ӧOէ˗/u_oR$FeU^]Aݻwh[n+W6~pI}A9 V>䓸ɓ:G}$^}U) |;adUV6m|}@5kV4i$ѫW4}iLiØ3WFтLXVDb>ytW[˜1c4h{~O8yik׮KـϱIwރYh_~eޅ5qĬ}ѩe}EߧU+^n#ϟq-CUdɒ Z BaOڴiYB ֭ eMfTŊӥCRʟ7o>6ٳ3wEL*'4mժU%K",P#GrM*o6}&Mt"/b` o߾9&L{>}z̏?~…hGݛ?fBTRMӭ[7iTdLYcĉ:W^y咕:(X%%G3~VZC`ȒxbZرc!XoIƕ{իW{[NԩSGA 3މQsN" K`+ƐB1?֫W&35R~}D )P_^(XVd=/` R48%KS= ' h B$P0)uS 0' nl7oD8wO@y_F-os] H`Vnݺ%RN' 3<|=p@Vd*ϬYT`Rpx5jj[>O7MhB bzԩS&E>|!C~Mp.O<7?nIL5s,(auY?MR(DEEoܸT0f̘ `*@ V KSOsδׯ_[6nܨ~@=3֬YsȑHGƍTVG+K@A(***aÆW{(PpJp`,eZ<V WhO{ߡ@߽]*84mڢ=47] 5&FY*ODE65D0FR>N&CSDTR&@!\˟@+׵b@)@)?êHGyr O4DG}-;[l>/+}%f8q pǡւ Zmƀ~C((C3m(P@aҥe˖~=dULaoP@LI0<Йls'6€QkSLG<+_x|XHڴ Nv!U={# LmXDT~Жӧc#PSumoD[B_jUPyr"# *}ʮ]W@Bc1(T[ڴHк_|x饗|>|2d#VhLca@Alٲܹ@A;y|Jj7`޽{2e:ҥKrUXvڗ-[cLGm _u%ל9st_iҤ{\[-ܯ_Ǐ 7desZjEL",PQJ pj̘1!0;hK .XѾ(,^p˖-uAl"""JSӾ@!!)PpJp Nޘh7ޕTX ڡУZڶx'ƢH j,#G^,22RZ'1 һfʤ-Dj֬?H&)[DWVxH\!f;1 w`la}`-KB />\e;|%t7pePh:Y= #= 징-[ "1RV_;v js|,[ñUVT^ۿ8hG= }x K!3o Ӗq4h'ԬYSoޯ3nܸ!u릫[AtHeL{-Z2z XCЊrAѧOkނ=>"Gq"Po46F-$J7"{1L눺F8-!1ea̙Bc # kv 0N:W^o(Pǭ3fҭ[7˗k۶m9Y(lSx˗/?Z@H Jٶm|ψ#N;>a$P8{lKf'~q?~#mC}Ț5k* `k_ 6i1`èQN4gMٳ'uz ڠ]B ݻ`-EGG".]\;Q՘Ro߾{+7jHw>W\6mt(OlfݴE?YmSfIM65 W\I:vJk62غuʕ+D0:N &MK?bg跅M yZ0gΜӦM{h?fڵke~ߪW~&z+￯Ax☇z(`"""tB&@7 YimaϬ8ѠA83'VlHF=\t#,'qHmڴ=K3|u`|(xqx=ŧ#>ҍaJݭR4 |dÇJdС>l!*`}`cFfԛd,*nB 0pϿ/6l2I%ɚ g[7pXZP?;2U[)PJJ_cgDnѢg ڭDU~ZpѣY&LP~⭷޲:>W3//^ Yu+e߷]E$M5k!QqoˢBhXpoG$&+-;: TTJ2eLwޱh͘1ic1*P0S{}9֭[+\F]&Pu|9?RL/ Dɒ% PX!tÄ܇h/{(xCYj,Y.KqF9ndP㦎u3$lód;Ec@#ol;)| BmExJ eoҤX|tou!H|ҀÍ`%\#F<:tP[+VjР_fA?tQ^J[nb?~o.6RT\Ȟ={aQ)QLyuT8 ?Jojպv#X7 q…_xiXPµҥK_G}=}t'N^nojوB[ Z`1k֬,]vϒ%]lj+Wڭ[ܲeK۷ P'%Kdhժ^9/Ml>W+v̙3)vؑV^Qo۶mK,y}{T%J()'u vCM(;<ߌիW)SHr1wI_[^bEt qs"P@G}q3۷onΜ9'+:::eٲe"aN+W{B̙Rٳ'YC6L ´iѣG^p‹e˖͗_~M6? .y= :PG+}6lnɓ"wn 9^P.^Dի< [46Ap@eM"4g}&x!&,Yf_>6v׷ 8pƂM#QuBY?+o޼ݻMExǃ*f~z"'*TODMhWT(_|}3REFF"jའl9 g[7p"1EBp^ Ł#w^Ki n0g0+VΝ;{RXk 6江`V֮]+&+#'8״}Xc(j@iN xo~!41CXP*z.駟<V1B榿pڱT(F VXB m1(K\2f[cf( 3+'شiSe1FUDC+y+? @( 6eၐW Qk'n84WX(X7#!7`0(X%F=1MuwwF?x 8z"=z4eժUDAs>]Y} 0TVxxۈB 1TR |r[]RZт pXH2{lӈXΛ7K/tYVi];;bkB mRs"\V\aÆ>q-22 콞 °z{/')kFRᘙ=˖-ТE Ȫ G( ~x\~o5k֔7D8;v_|y}@ꪐף@?+)P=xĊ8܁DgB?X8ƂŊuzP{g%p[,Pd>0J* d! 'cm+֠ݮ .~!nɗ/u#c(xS8*0r (=@!ie%5sI-+P(2xmF!Yg\%I;W5 ePa{ ~ØwpS&PĪ3X;QvvIɚrs[o()B aI?nqjQY97? ZlILꫯzGS?d1rHY1 o" 4CЀTk]ד@)uv5dx9(61?~|U?ii5jTHI!P/3fK+ _~4?QT)@3^@.1}} :4{lO` }t>|5jo~OS"B'B)QSxgv% R;(8/wDS TܹIh v ҄6*#\ $f@Ϊep@!8V ؗ^P<yîfX;'gN]ַ8lqaO' {x饗ļy` QpžނSHm>>SdV&,j R]y#\>gjS6x4p@]~ֵ?QXda._7݄Y+(&+BABNk 2d| ܍Ycc|K8 _ڂ9binOO?h!8o@T4NSD#,6L\Qx֭G@B("L"(fDT|k y ; _׮@n:ϢEj/ ?̀yn … db4K.=ܼyX(@XW^g&Mt:P׮]{hѢeyr#ĉ51+/g޳gϳ8q2eJ?D3fXVkw/,]x̿={<3eʔ,'O^^;Vٲeڹs@C,=D +ͯvƼDq…=lz=ӧ?oGZ!̛7/RJ7 mṼ}wYwK%1k֬c;w֥&@?2ݻ)SIb.~ki|+_7~bͨQ2do2dBժU mٲE.m曋¶Qw9'O쓒!ayik ٳFȕ+׭'O3N/ڵ?bs\U|A+WyݬY+ulٽȑ#{ (d̙31~lhgΜI>x|ɣ: 8cDGTTTƍ~6iҤzu\`Nr/^XL9 ,SNggϞkg|ԥ@.1}} [כ7Xf񌏴V F$@x^lRws_;A1?6Fe;Dl R+h ޭ`~N |wƂ#LW(Nc͛70&Ŗ*U> '/)!6m3w{-o t ^zIP`p@!8ҁ Cy嗥"C٩S'{Ic2H1OK#`c cx8QF)ex?@/6t{7ވIe@̉>̦@pϕN0g̘c2 ΁![I !($e3F.v/^,~7O8ɫrCYʔ)/WD38s?<'(r W~} AyB yAMc=)o&P G9"jƍ7E=xXj b<@Y~@Hc(P\´ FߧUVQ{7afFoرc~ gΜ/wܷ7o~,I59} =" 41N]V#J{| Uܓ}g,=Y$=w 5,]{i ffq8,?Y \~'P/4 $P>Xjժ9j%BWp;RIgp$. M B(Dz v%l` '2cbbH$@$I&eKy1c)5,$@ Mٳg/}Ÿкu^^zuPG)Pp(PpƏIH$c L+v_ D>hQ`ɒ%}Iâ4xPnDY2q> .  ؁@ R'i 0!ҰaCfp4kV]a  Nڵ4M<O/[aVNTQTW&M!$@?0)P CW dyW\y~AT9 '|֭[ibuvH!0gΜL:t(h+͂g@?& P8jRsU(+3؈$-8HoBiذᥨc"@kIH w9'=ŋ3gwҥ™z{I뵬UVZJBiG3~lM$@$&7pԤ(PW2 }"Fee޼y}ϬFi63lv?쳺 и[nbƌ~;3}vu6mcslҏ1B +WN/>v"EJtu iݺtȒ% /\L4*2/]T@$a,'|RFxݜ7 zI@(8^Ja X_PBq;v_|a# @ӦM}7qO۷?7gΜAuF$@B ***}ƍuǩ=7`ӎgؚHH@MoI=VQd{N,ZRo8 x SҩS'1rHKx+͚5K :T}}@)5kgȐ!)E!| B[.^(2gR,|G:׮]E9sxWuut"!bccu~7QHd"NDßSN=z;@@ \$@ PB /vDC{شio5ic: F$@$rٵkW:4.\ 2 36"O?tM6ev޿Scǎ`(8G3zlM$@$*7pT(PS2 q-[zNG0`#P@Ԁ3ZشiSgT@-t۶mC$^]oV bM4EhѣuaLgV8>b֭ʕ+}&(fn(O ` o(, q= p*P믿,X`gϦΜQܵh- @%PrGycǎ~6mڴ'$+HO[V^ӲevѣRٌ[ I@ 5* LгgO1eKZ(TVMlܸRv+!Ä t͂(sXf/m5kzR:x K {H"]~Ļ )ϯhK߾}}駟:"6m*];̭N:q -ZK,4^00`dJ@ \$@ PB /vTc,YUV3BX]HH hׯ_'w' @ qǔ/^|e˖:g)PpƏIH$c J&Pݻ8q ʔ)#~WK}ڭH-  ի^ԨQC Cڴiu6o,T%\rHg;B7o^g]vHc-H VԮ][_^W}ǎ|q%@/\PnTX/o(p 8&@?)PpA( 0Ey-[xFQ9 @"#~k׎J(   5 TQ{@!8_K K7i+ XEufxS, "Ah͛7ET<M>]t]wŋ"s̢}b޼yq .,:3q>_`hӦm4 ǎӵ;Ț5kg)P0)"Ν;#}۴؞ PF+ c'OhQuxu AE>!%HP N>Eܹ&ҫW۷ $@$@$@$rӧO2{G0 _xWXjU߿_,YRg4lPd̘Q\z5B0 (h D ]r}> >ז(xS_`KzKKvܹsLuM~@KH $7 lXvP`X@!agIHHH@*)y= ck  5 &5XEBp @ @[(N ={Iq ѨQ#]ʄNjz+|gdϞ]-sFQah )A[u&Mf ӑ#GDBqي=m)'Ň@aԨQbРA:{eTXr_/o(pՒ @P"a00$@$@$@$ 9gؚHH@MoI=VQ%P4i٠Ab [bݺ6m۶iҤ}DMsD=Жk׊:u>ۺu\:9s}Q@N|R?ܺuKLgǏ}?~-%KfҠ-?/uŇ@aI&qbbba,rXH<o([$  ܵ (Pph- 8%@3(8$@$@jP}GMj|.¶mO}RE RHA[Ǝ+,\ {~g X1eSc= o(pْ @P"a00$@$@$@$ 9gؚHH@MoI=VQ%Pf~֬YիWukbƌ&v^tu!z駟|;(3DP@$`,ȓ'̝;ד<3>bZjuYi&O=N@ٲe=*UX+PFW-  !n(PhC$@$@$@@#(PpƏIH$c *\X7zh1x`CQzu#ӧOO[@L v&0%QӧE9LܹS/_1c|6+:tHTXч=S!Dxꩧ|(\سgH:up 9RFB_> @P:pP$@$@$@$ gؚHH@MoI=VQ)Pp'Qd?C ⣏>ݺu`\޽{EL|~T|>zRf_~ʕ^~7<A@CbΜ9>qbԩ"y>׎?.*W,Ν;sٳG<еkW1k,[*  K~@˖HBD S7( 4!   EP(8$@$@jP}GMj|N,o# _Le ::ZZd˖MY>}z!7n,ƍg,_xQ*@g˖--Z;|p1dȐ:yȝ;8H (a믿JOk !P'TAҥK z(P% @!D  aaHHHH@(8s 5 TQ{@!8_[+R=ؙ Ddd&fQ4h VXaG>}ĉ}C|dv؀Ϛ5֭[=QiӦ=zXjZF"**JIFZ'! 0dܹ_ -[?HčUQF$^((PpJIHHH](Pp/ ck  5 &5XEBpJ,ODN2)&@^߮]L0b ڵkEݺu}l4KGX|ysN][D^tH,yϞ=[tr}mE!EtL'@;bƍ>Y$7RFB"^| @x P^NG@)A'   w@(PpƏIH$c رc ebȑ:wφ{ժU=#+V\:RC3F,YR}TBۋW $P~H6O;+i(Ǝk~e۽wb"Ĕ)SD֭8]#`h׮'m64k֬u \&A`KTQ G$>(u(F@!  |E3~lM$@$&7pԤ(Pp} %W\"[lL2*T`x]~@AUCH\Iww֒ S(8#H3~lM$@$&7pԤ(Pph) @h ~@!fo$@I r> %   (PpFgؚHH@MoI=VQ_R PFBhH0 | /ZK$@$@$@N P  5 TQ{@=$@% $a((_HHH@A ck  5 &5XE{|EKIBK@ 7{#H(Pp)Pph- 8%@3(8$@$@jP}GMj 7 BoF$ P.S.Z   pJg)PpƏIH$c -%-o(H @]Χ@]$@$@$@$ R[ I@ 5* +ZJ$Z(P @&@OEkIHHH) @?& P8jRsU(WH TQZ7 $Lw9w֒ S(8#H3~lM$@$&7pԤ(Pph) @h ~@!fo$@I r> %   (PpFgؚHH@MoI=VQ_R PFBhH0 | /ZK$@$@$@N P  5 TQ{@=$@%- HHUpIX@!M%   $K3bNY!Bbn(1E6!  ]RHD(PHDTHl@.V& DEIΡi$@$@$@$(P. qc+  w@] d- : @b%@Bb,E$@ PQ L$@$@$@$A~ bm  w@~3OΆH: bM Hl(PPأ((F$@$@$@a @=($@$@$@;FBgC$@R(8HHHHHHHH!@AP4HHH@+h @ PfHHHHHHHH (P-OF$@$@$(PH@M(ZE$@$@$@$@$@$@$@$` A 2(PP4H (P3pG$@$@$@$@$@$@$@$Z('{#  (?c@$&  "       HXHHH@(( B$f(8#       - B˓ ? 1G P jV X$@EPF$@$@$  q !3  Ñ  HHH Ϙ# I5BHHHHHHHH,@"(V#  P ʸ  aHHHHHHHHBKdo$@$@$@Og'}vQrek׮kVxZ4 Fdž$@$@$@$@$@$@$@$@*@A/   ;(PCu+~AԬYS7˗&M$)s^B  HHHHHHHH\MWƓ @$@Bttƍ]ر}b$FBbj9Qk (LCHHH(P?Ѽys &DDb)PH~IHHHHHHH @!Ѹ!  $C$@).DVDPNHHHHHHH 9_  p? P̀ B n$       @ HHHm(Pp^ (Pեf(ZE$@$@$@$@$@$@$@$` A 2(PP n ($" (8#       - B˓ ? q|puq qI*U*%K裏lٲ:> .\qǦ9riڲ+PwCgϊ{[nyC`qUiE+"22R<#8(L4I>}ˢFA͍Cp($@$@$@$@$@$@$@$@DxnIHH 6^:>}6l5ki,Y2] +WZ} V|7Ą D),E;m "'XBŸq|(]Xf'j(PP7HHHHHHHH ,@b   P;(*TAH3gԉB!P]͛7ׯ.4zܹs}Yf zK*+P@_VKrի?lF(6"       = Bϔ= / o({o۶?iH`裏>j\( RE+Vl3x{'e͛a?ѴiS]v 'GbŊ3gvd# QHHHHHHHH ݒ   mH;^thٲOH1A>t2e Y@!زg        0@! 9 @H PRY޽= m0+ǏkǎUY`hӦO_{P IDAT3D@mA H1M&z衻(˖-9s4msNQ|y111"o޼>>|X.\s|aL$ J(X(@ʢEcխ[-"M4`POh (؀Ū$@$@$@J@A 752eAMӧdɒm9qݸ:SYdi@"F?R.tTJ֭LqFQZ5>Ϝ9.X)}Va&PhРܹ]ҨQ#W_zȊ  t M"       NXHHH@ (@V<^z) ԍ066VT^];vLׅLT }իXؾ}8 9W E&PK?g,%@{}GIHHHHHHH(p  ,ڀrVhܸgӿJ*`'j6:uJ}zq15k@C(PP)4HHHHHHHH: bM   5PZqmO 6xD pWP?E*v _|x饗|}߾}=l'O\jʗ_~iI-`N ƌ# B-[ Ӯ];1w\'óm@!sX        @!4 @P>bbܸq>`Ǟ={Dҥu&(ȄHDѢEN?;wՓEP:t1b{AX-[l{DǎŃ>L&P5j4hnƍ{Rl "Xԯ_ߪ9 q         qc+   #@B±:֭[u=4r+Wx6чȄv 2eW^w߉gyԐ6aȑhK&M< RJUҥ|&(-HTƒ+W.#XC ) =H;;wD\;u$@$@$@$@"贙\ebƪ.P0n@( @w]b)ʹB+NN'|3?pB />\@ -v #<F=Qud D?ZOwǎ nݺbqm ~mq{)LVP @ Pn6ƣ@,V%   D@gN@?& p 'VR`T՛>}޽; dY۶mu}(\tIdɒʭ[Dʔ)ꫯ?SO&Py(T8p=zt^}U1sL]I&^z}fGpmQlYi͛7*U @~$@$(PH YbV#   p!Ϝ>)Pp< ck  w@~j% VI%\=gx'uoDƍM[rhذ}%J}nGF".\XٳGN: GL˨XH v) ; @ P(#{! P jǮu(%ׯ_ٳgH-;wț7(D3ݻ1c;w6l jԨ?~AA9|hٲXt{.]ڧӧĉń L!_~>oQ\9믿\?hӦn6>oG?;vշ+P@]vfСbذa_(6$/PHo(d4sHHHH q8z'R  | HTI{~(7G_]Y=DѢE=i2d Ξ=+~'FQ:精=* ,(#W\"M4b̘1UV:}ر~v< PyGk&ҥK'իWzI0VZo˖-"::ڧ.ܹg.\ 'e( 2Fzx ~`F#k:OCc"]pH Pp`   HH k "`&Mrwlƚ{}zcoEEEe"%|>i"ݻW,YRw>} HH k z-l8 SL?xÆ|CV?ŰaĤIԡC1b{EѴiSyf2"ISD~[dɒŴmڲfQN8pZX tH,Y>X!a~@!aG%H(PpS)Pph- %@]bSZHH@ oAɽVPNĈ+WzR>߿ʕ+ɔ.]Z*THϟID^*9";&n߾-ٞ;wnQX1"E i_'qGv*TVȘ1Oۛ7oz!޽[\vMdȐA)SFTZt,o'qժU;O:% ` Eo($% $ |pR7"   @!@!< TQ{@$@~@ٚHP@EkIHHH. _do$@$@jP}G J 8#gek #@ %   (PK} B˓ A@ 5( ;ZN$7 IH  Z (_HHH@.1)P-OF$@$7pԠ^+(Pph9 3(Pp_& 8(k1P.Z   Kק@!< TQ{@$@~@ٚHP@EkIHHH. _do$@$@jP}G J 8#gek #@ %   (PK} B˓ A@ 5( ;ZN$7 IH  Z (_HHH@.1)P-OF$@$7pԠ^+(Pph9 3(Pp_& 8(k1P.Z   Kק@!< TQ{@$@~@ٚHP@EkIHHH. _do$@$@jP}G J 8#gek #@ %   (PK} B˓ A@ 5( ;ZN$7 IH  Z (_HHH@.1)P-OF$@$7pԠ^+(Pph9 3(Pp_& 8(k1P.Z   Kק@!< TQ{@$@~@ٚHP@EkIHHH. _do$@$@jP}G J 8#gek #@ %   (PK} B˓ A@ 5( ;ZN$7 IH  Z (_HHH@.1)P-OF$@$7pԠ^+(Pph9 3(Pp_& 8(k1P.Z   Kק@!< TQ{@$@~@ٚHP@EkIHHH. _do$@$@jP}G J 8#gek #@ %   (PK} B˓ A@ 5( ;ZN$7 IH  Z (_HHH@.1)P-OF$@$7pԠߊ[ΈTJd{=I9Njk׮y*U\Y4j(\~I13gXO?ʕ͛7wgb@ yqn$@a%@BXq; (Mкdo$@$@jP}G J@a;W4Q j0t!AȺ@%}رc\ &Ƞ}Ȇ~H6_~YG,hݺXhQ111"o޼DdB@ \$@$"(d@!L9 $ B do$;(_QX@{7;ck&{7c$bرD}-(%XP}ߙ8d<>-ݝ9{* P@m$ K!ińhaiXIII!%K$/^ȓ'y!IZgHYiӆcNF ˗ϲ"~:^}3~}C@A=#*}Z *  `b# * 6кG*Iڐ !1[(P߾}ڵkZp!6lƚ*`*ݻY6̙3xyyj;FQ?Hvhm o4@lE(kZTЎɎh޹׎h * *;yPT@8P4+.}H 5bt @ȹsHڵ4 m> (@*Ep^1ZEݝ?$o޼zbvkbK펫VJ._f:tiҤ N>>$>>>K???MQ*TкGwoJΟ}h) Y,v;; Nxbֺ̞=3jiE@,l~}C@Nw,}6k` ,#-[F d]ptQPHSPrح1ʕ+{MW>|ҥK9UVz۶mSwynÉ[Eׯ_gˑ# Pׯ_ҪU{Ѳ\rUNjDpPT PwPWOM NyA 8MQ*TкG[+ CFV&~, Pظq#ѣKǏ }~L[>nh}URbE:Z!`ԺSy-6 g(XU~G@dɰ إ TׯϿ{̑-ZPx7ʏ# ' ꉽiS!GS;plaUԆj$C=;˗x$999ѣG9s6P0}5kF *<]֭KN:ezG6B7lxZ7\v*EF@"o(,6P@TT믿^fMH'N_~m)뉀zboT@e(hs*T@[Y5!ľY!Zt):t(kKAO>Vn灀KgҺukVãG ޙ xbRK| (kPz٪(PP~mPP^c~@@A޵F@A^=7m*2h}*u-ʅINiSH0Q3k פXb ~S޾}KȽ{Ȼw)X &tiMzz:5|^ar4ÇɫW( b ;99Q:*T*U`-TS߿ D%s333}H\]]G"/]hQ֞nܸ19|h[{ 9TNh(X$U#`UM% ( P;1s%-[u_*`v T@aϞ=y={]˖-_@@w* (ȧ%􄀂zboT@eǎ#4KIPP6EAPW@[{PrC٧6dd2ddeV(+ǦMHY۷lR:ٳgvy!ڵ#{&RL0SN#FP=zDVXA/_Ϊhcx,'֭#W&<ݣGҹsg={# Q[BZZ_ŋ t0DH B%44I h IDAT(.3g$^^^m~:Ylٺu+yBQ ܧO2|pRpa}?_.9޼yCvI͛G._]R=+43ĉYo,]JZ!`;ԺSy-6 g(XU~G@dɰ HDR@x= Ȩ 2bboUivi0T@1QlVXBpLUVH˗/ɒ%KȘ1cL5_N>SriaҳgOI:upK)M6 z d<0X[p͚53:@(Ν#5k䍛A&L@-Z$eYuͤIh2k,2~xː>l o)ҐRKDD)_<)Sɓva~}C@ ve()Pzث5(w((vAAyqQy#(ȫ'My6BT@%n! rEQ0'P 8,-Z H;v$7TP?~J!T/5JppڵkdժUݔD#KK!7eh?vXM z{ SϪ +~G^[!} 3BA!RR[@Z "@TR\tIP6_G7l~ OP 7\r1jЁ/Bț!COΑB rmG@AJv(klZk o޼ɖmBJPz^o߾圖PX71={'Цxo\\\Y7˗/ `޼ys&u>}͛. NٳgJ,YtLSJn@!**%>>)111wԚzxxX⫝̸9sʾ 7n^˗ܷ*`H(ȫ'M\e!3P9s4;l ؍ZwBpl"Y:ݒ9GVԙVQF,!Uby`(==`N4B (XC׍7nݺzܹZIa…dذa( @9s"CE`}bꀐcmۖڵU~bE7tZK=B(gݻG~gc!jGpF@AJv(klZ“'OϘ1Çh-j׮޾}g\m,YRԩSy׋+pp.YN:OHvڥ'588X8FѣGׯ_;*U՜9szaQFQRwλi&f_v#F<2Δ)SDFFptt 8>;6@Xk޽efffO=R[jEixʕ7S͛? 5ѣmۖ׮]?~~ }}}_uq^lٲc%%%9u\]]/^u֭ 0 )̙3SSS.\cf/=9l߾=߯Zرc ՠAH ٳOzz:]F>>>tOHx111΋-*@Ҹq~mJ۶mKmd#>}ʼy>bڴi^7o:3{cƌ᭻9۠*zboT@e8555K  @gf͕+c͛Tli-tBNE ' R9NJHZ,xȘX8 epG@ӧS\\\p'|(u9sR%0V'lt(2zhީwjjcABڷoOE8Tqtt$/^$Ç-pNsmzEH0*RRx6@ T^]=|?ժU#Et'k׮%+VlcHw)Ç) O(SN%+VqƬ3f 'N>,СCJ+֭[d[>Ƙ+hZ-ZZnܸAEJ8r䈤1 UЂ ~l۶ BfDT D.̕G:wBAK)x>… ,8-{8[KB9،uPP@`ILb_QyP ߟİ;46V۹sgVxNՃ=zhoʕ+yr f9u_AkժEXL^nN2Ǐy \wk15 ] Dk57RXs5? yk`+N*B*ǽ"~G\|73gg5jӇYFW [߁ =A% b9zJС / .pA6TP }e(klZyuܙTi߾}V^G?Fc:ƩS2e N) ʕ+Q H_իWo@x{)HcO.xgP8~x-[f:u}[5Jksܹ 67u'/E+(hY?ѨQ#b[nԩSV9tVZ "fDX~`4!@!444zE E@@ALy|_IPW]{Ӧj=/P7o6948 ڨj O<FBBBB(g/>O@w *`Zw;/k3%fYBI:Ӵw@[‰uf:p_AeΝ3 AW\EKOӧyCRP|ׂhݹsJu$T '|‹::p[Bqp]k׮=D PP1b+ft+@*Hs,H,X %C?]& {ܸq<;bcc 63V޼yCESb?!jCVWnkMn;IuQ2֭ ,%޽{_|! W5PۅVUPT#GD 9ՈVZ~.]͝˸qfΜ)Ro߾>k׮%;w}f KBKc*HиqcKl'SVj 5k,kskus L;:]|?R@Ru|Ģ9bvCD? K>RPTAv{{Ӧj=/PD9caGR Jy(Q\zU%a[W@=h a,{PrC p#; t[ndƍ5lؐ|͚5m 1M"(S;::N(ԁSpzXTYVZ}O|;R ͘eJ q(q9@ !(;78/r1(@$ ] <`(Xs*79X_P 'u:jpd8>/A:_ޫW( oH((HګĘE(klZk nݺiŊ{#3gڶm[Ah=zH^~}w `\HyPl@}pʕ*Ub9:Yf6MO6M0ʀWX} zeqժU{Ypw~=*`(X = ꉽiS5\! ϩy ( z߾}g8@4i:84iFBt8ZS*vib0P0NPH =z`mɓ')Sn˗ps'iٲ%ə3h?* .]⥈!t0֘υQ!Pd p3_WPT #Gd Ʌ $@3-Zd_PeJ b,㯾ܹ5PT HE_Pf4ԸR3G9t@_9/59N+5j pQcDp" vG@Ak#d Z/[VM@N>}:yꚫwܹu (3QFq!fͺ?vϷ~/.6lս{J%cB5^l߾!0쉈p)_'E믿믟00(@/F˝>EX0 {Ӧj}޽{$ 22f 7oP`Fv0}+rSkE {6mT7ȑ#=,XJ8 !?oڵΝ;9R=z?ݻwoHl|2kfׯG1_3P8|pMlر;Xݻlذ>!@Zj &)`T@iPWa{ӦJ?/gm) 52Pɱcx ` @!33@k׮쁜r[ *]*RhADP*%9I6 "R0ˮ]H֭%o5S f 47@*C%J[_  ~-Yr輤 R#0)`A^n%U,r?.g}FΜ9zݻחUG(D E7 UPft(WK=jбdO8!H!`l6ŐU(klZS 8ʕ+Yn۩S' {k Zjɾ}ܤCE7iv>|(9 /\0 v0(-D$솔;w4 g =(0 =zIFB#ufQPر#l404y!@Ah BΜ9yUZ yѢEӞZ7s5F@\tN.5sC^ϟ 3g; `jnׇk Z/[V-@!..):PKߨZhdƍ?=|hđ#Gz.X@c`ˋKOO*e_u>\5 j{%V/^;w,X- 5Pa_~="00𵩶d˖О;?!@a֬YǎbxXPCUy޴Y[( :@(c)EM@aҤI\.\ իWb*sIKE!ɱJ(g+dsx7W `i jPS#{&L}_233 駟 !KZe)|@KTR,J " 0 @+ÓZΞ=Kd#ݻw|!BBBH6mAn߾Mwx{{SQ o5ոY"  JpG:ԐרYf&GK et2`: ZS^jZƒ===%R PHHHpf9̥͛lUT񏈈%?֯_GO~y^"޽K%(>|Zj01PH O(hSs@ã|RR3ԫnnnL1%333 /B (4U[Uy޴Y[( 6,\Pj `8@ae˖/^$ά=4JJ;pp"]lnهl(Ɗ`=o 6ejF;  o%+W4>tW_}E ( 6p`e˖Ջ@z f*p]'l-Q!ٳgՀQƎ˪ߡC}vkJ 6m"ݻwg_{JD0xΝzIP>>F#G\t)g~$XN)+P;%KxrQbtK}r26o|q/@A(5@Zfff^fK ڛ(}vΝ;N%J`ݹ,YUll,#(ȱ؇ (ȫ'M~^F=z7V*#Pp  * J:ppؾ)$Ԩû{ZTR%@]8 >(K8@,+}QR(ͧ~JN>jU@R999-ZHOA 2{l3fQP= aMΝ;Y7nL>N`H:@oЊ[jZ>㥉JHH ^^,֮M! :C.5sCgȐ!<ϏI&` &#`hVlǡg@ɓ4hP ΝYvmV4mհaçGM`閴P2eJSz3m/ݻv1C ggg 'O\͟?.˗g%FnݺuDr)P#GD7j(N:Z~4%(*Ղ(Ȼ (ȫ'M~^F~QE* lOhZ ҚJ9px!= jFKS( e-ށgcڵkLf1%5D`e: U@ ϑ#GXsɱc$}Qn]^ݔRP!J ^dz7n9s\O`Hg$(k֬!}c۶msμz7o$e˲UUHvqqۖ+(u}K3RRg(}åf5rp/pq/ V a G@A_kVg@aŊ TR *uV)bw*u,,YRcqƍHs1ԮTR帺]rFJ^I (rʿ ? .֮][ 55Ցn_X̎;>ci 0bυ Yv>}H]S'~rf?(*Ղ(Ȼ (ȫ'M~^F!@SBhA!8 VR%8Bhq&Z0R_;Z OKKg͛7:+}2ˊ+ȀXiPUVMܴ J@&u9HPPJg0Q3)W"""Gt1(K*epJSNm5 4"C#MNPSM 9zΡ#ӧ$_|Vvܹs(HNWPr^j h׮]񐐐̵( 4+<{b&N蝑Ku_S-NC߯_윕FB3!CBBX?L6m"005ݶYf%:J9eʔɓ''O/&~;vݱcԩS&M,Eu+Wvhk +Vp4h+1fΝmٲ:~ige;wQF0_C@U@@AU@@A^=7m*2zz~7߈.<ә"(@e8uSBhCZn6lYpMX?5P %AH`lh@A)8F@ŋN.Ǐ' 401tfonI޽y}rʬ׵ (z-~-Yt)qt:U|c5kL[$x (L>L4eBQ޽{GܲeҩS'. @[f7(@}vE6l{Ϟ=@#TN8Aׯ/UBڵkǪ7g2zhѶ^A뛜! :K.5s(CB4jԈ*T VnYv(HOWPr!Yk (d˖^/YQ ==ݽ&>iӦ`Gpp ݛRFgΜQߔMg ŅzawXB} 2eXpG"E2#h3///޺YPPS{̚5Dݻw#T ƌ0{D:(jذ!+U ^hѷRϽ{/^[W(U R:ZRyWy޴YkPpÇg- 8`A!VI3tP^5c87os~A' jժ :SYƂ ȡmC WT0iM(CFֲt}, ƊP>8Q p'y1p &&_~I97 qqqS{t@ݓ'O ^}p\ (lذS/68 >L6m* BT8 >7u4@>5Cyܾ}[О/ݻWW?žiEz" :O.r(C8@=f/7R2F܂U}FPz٪z<<<'%%93g۶mܐ0a̙3Y^c Pxi˗g% QQQ7|||@%8O6-nĉN,`&MfϞ]xܸqŸXPPS/QFw;wm۶ύCIN:Yn f[S'Od.υ}F0g`Ⱦ1cx̝;yXbիWmP0[[]{Ӧj}|W<=?@@A^PWOM fE@ѣqƼ1פ{\PC%J :gΜYM6LO? K$e ƌc}RNpf d`[.!N @@AWeP1b… ԰aç[n[pp{ٲet{CS q߿W.Я_?5 ʕ+QβzPTVҥKvڥ_~\xGhhhݻx1/'ׯ] .Y&/ 8CBBb6mme˖|]v-ehm@AMn߾\d\-ؿLZXk?s<ϟ\ps;9sݗ/_f+Ǎ.rX>W׮]]·|:t`Yf;vl~QtH(KT@eZ?N'Yj˕+2>>ybbb;&Щ52dHe˖!вx{{QF۷oJ,jժi_vs̙<,xR~ `6Lc'_>G@WIiPvJl"68"##sSs  p2W\)8Pt6A4pl`AUR@چJ@!iB L$J(+DB`l߾=ٱc$l <|˪.]*UD 5kFe<+BhQA(~H"bŊyp%99޿!6#|(PPZa =}s(C?viԨI+ !l 0 ($+[P \S1zA@A'1p~g~L@l'b7n\:<< `,UիWjXr?#"""sK fr 'rhѢX!f[nRV\/e^p4l֭[YX!444fС>̈Z}˖-K>}:n!ªU6oޜJYYf%:d6 ͛7 :^L\|A8!`ƚ hP /z5w3j=/*:oݺt$׭[G< UC5IIZLL ϶ד=zd3VFh,qtoJΟOP &`, /?̘1D mw}G,Y6ڿ-[1_hѽ){j)`E@AL `< j\ǚ s3'n0M0˄ # HgzUTt/_62s HCkTZT(۶mRr)!xY&pJ$&&±󯐥Ff &'P` h " ]R 8M*6#RpaK&5wR^v(ַX5sȕC;GR7i07ngggRX1Rxq*ZDZprri_gϞCm^:\ӰXc: (( 0zu>'8m+{vZΤ$O:*TM2e^A8K9o*I]\\Ӯ]=z4o||sJJS?dz{{g/^W_}jժ/ʯy]-[8qDTG7^^^UT֭C,Wj9O<ȑ#~Ɏ!.]Uɒ%_v5jxiއt9ܹ-[W\9Oci< ±crݻ7]=z'O z[H7jJkժ+Rz-TZ XP0&|} `< 8.*`= |2DIIIԳ,KOXP+`8t@ A[nj 8ZOT@m@aڴidYZWP\h975D@AMq,TiD:cc8PT@PT * b`@@?T* s)a)*V^yYo`+& RhQ"Daa+`MmPP[q@lV`%1FOi(G' *  T0sFO ,T@P[TRp ,ڵ+ٲeK֛EA=h= (̟?Yv֍lܸd6y\L\( "v (`q10zخD@AL!|@PT@P}+ ` @ 0 y@QT@p!6TV1r vƐЧ1{іGP PFOȓ'!,sz}3{ "`@P'x-|i@Y$lK$UPT@PTб ;zLtT@P HuyME,[ؑaP0oFzU('\͛GF{VBIINj(.)v |>JAuPT@PTЯ2 xXh*  HqtoJΟ}()*P0HϞ=۷J96m: ؔ?6lkN7Z>|8pէ/A1l3)7kkcM)`9`)@ɉ$*$ PT@PTЩ2 ?zL~lT@P 9pοBο)("+SG@@^EWBMesx!`QTf0PL#FOPCPT@PT@ X(&ТD  ը* 0QNBHAb*]PP3]* @P0PLl &,! &UQT@PTСf r F  :ɨ*  r'լI6ڊLW5*` md* * PLhFO]$FLQ * *?Lhl&zL}bT@Pq8>$چ7Ʀ`R̽ww(Q{VyQR@PP Ld &6L * *3$ J N :* ryVJA^UPWO @ (g*`E6cSS* * K#`-MEOI!֢* HS-'TЗ( ֢ AdLxEc EYTl~/jqw'* *AɄ->@il3!Mh kl΢ų%߲V3O %toŪGI+*` }Ai 9RgPGG@ xC]Y GV"՝v* V''edx~yG ٪(@@Q4T@PyvzB)XTc,{@P}* ܹh5* k6y"v@o, B v9q* * 4pAocy:Q @@ F^PTuM!q)?ȓ')!j$Cm} I@@oQ4@Rᗩ0X4!m$4@PT@4@?5#;SJ*Z: PTf0 (SVTJHAj,(|Rsձ/T@PT' J Mͦ~#`O+* 8et^QT@ hZ :Q@P'QL*zR0eU.* * ) P++*T3Ӆ *` h݁c9'TBP-) Z-h * Z适bFQ0a P@HŪ* * |T@A)P( -T@P[T@[\9!8* hI_PnA[PT@ ((*`HoB RW* *f trFT( (' @PTк5WsN(6 ZR@7[Tе eIQ$"= 0t䗞i|c5T@PT@l^ Z9@dp* إZw8idBP]) Nh,* hYzv EA>+sCHA cT@PTwdl" *` h݁c7+GBPm) /h * XA aP@HAcT@PT{d,l" vBPTIIU *C Mm4@%FQKzR[aO}:i븸0ť $X"A޽;o6mJs탽y&Zv]x1g5N{葼~8Yt=S@GQ@@Am&gc{#>ޅ~uĈϟ2BBNmݺT`~cǎ\hPUVׯTB]iݺ?>DIJJr={ŋm6mZĉ 9ƗPCE'@ҥK9UƐ7~z[U]y˸Q7o$44#ZP@-Tej>oR~67wwwdz y!ҹsgAPVZJ*ry|k׮M<<}:P{ޫW6m<˙3$'܀’%K ~wbELLLnhr111"!d1roښZa/_^h݂9ܦMǣFJ6jyImӦMn޼)x tүvڻwDž 2pB)Sx?>>&M<6lXJٲe_#mۖ׮]Ɓ1:tW^:XcJ\Bۀc_SύĊ>|>}:0aԩoݺEmFz5^X:Pυj֬iax cLf#M6 Z E*1 ˏ?z6VZllܸqdYz~aƊZZr%p57n`ԩ5]>4"z-ZwUW؍VV@PmɖX,1< c޼yY7c\ns=у4g&SN ? C5 4g3gΰ2IFFwQ]PA)z/ T)%J J!Q.-swfޝy_Sl39"Sŋ8,Wl!U!G:),Ǐf̘!244TXhoaĉ!>7>ߗAӰaCn$x4hS{yQEe-Z YrРA-= r7 3&R8p@zɓ''}/QK .?a„b>ک|=/;vx;BoBBq֭{ol[ @r:RT֯_D1wu@ܹsg zjM;t0>k֬Z!F/ k/ӳgK.Mʜ9Ə_ rmΜ9״n2d?-[sԩS… vP={?|0ST$oڴiGy3k֬Uů:1tS… Wҥ%K|vyQG}O?fˮ˗_Zn}{˖-qZsܹeʔQvӠA`Ϟ=9FQԩS]$ŋ4iY<vܹs礏BUbEmǷg_ Hlꫯ>X~~~Ol>}z &H>Ȝ9sjJG4iR1-c?~<[ݺuSZ?Y/tٮY@/{&GfJ↽Bi_=*kGVZC3#Kڳ:߿ju3 (B˦Ml%&M0#&h5ݻwz9<]!ߋ~J@ e5Q~A\F@$ @ZTت fa@Ɲ%=EN;wPwt[7INO„  O>]"Ƞqn-[m[ dɒ|%s~ XCGoذ|vTcve{H$a ޿ (mZOG}S thܸq3Ȏ=V"'UK XBŋ 0EDkysyDmVح[ZؑE %ơ5k,#N!_˺:Owkזs&B9u @83[- PЗ'7 3gƍgsbt𪖆pܹj.wx@MQ7oڴihFPZ1eu~,P T^N<)ОЅ^{MsN5.}jy:qJ@֭[Bɒ% ?\$s/Ƭh SNUt={@jycy={z-a(=0Q8@>O9U(Pn>JYA($=pу.chܸ%=7eo(<]pƍ ;v윖U:eʔB'Oc8p`r:uR+V͛96mČ0w܄ÇC@yI ߾}[?c9)rJW_}`8 ѹsc3J: t?444z\p!ÇsY&?+:9{qqqJ*8,ٳg'R[oɷlٲru֭S>={,-1dȐtKoƍyNx.]:'OM7of(SLhRJzRZĉَ9cǎ>/^TDt(TK.͞=;F-JOLqEz TX˗3GDDd^%IgQ"Bݻw#>|@գG+Wl}P^= qF%T?666s``"Ù3g*T -_\hѢŝq%/_I|,sn˖-⋂h">gI̙%)<(˗l@{~ @o PЗ'7# ǎWΜԘ1c,7鹟(]>-!Ye޽ @J+&ܻwOx%e$ݼ׺A( TxR.oǏ[h.˗/W֭j*<*P="|φw(+Eغu(=+Q cܹɎƑVjhH,Bkr hݒd[~=`-Fs+22RHLWk{nRƊKǎ%Qjiϙf-+/vC'`x~C4#(PN5J:@jyR ӧF h`zXQi Kw9}$X`=D}FiMRRR,ry_zi-..N P^Cڵ͖@6HR}Oرc3f(nK@P>}zE;ڰxw- m6lwf<'VXW^A%/XUzժU+/G׬Ys)88۷E&&&ɑ#0%P~PNGu)))ϟ?u߾}Dk;:č)^3[sK pҥ]v-qQE#F\3g5Wu՜W^otiӦ͟3gVMaonK@_ubBm耾iӦ4΢ECCCodPƒ[^,Q_:N:R111gS믿.(޼y Æ c k޹s27j( )))ҥK&mۖ`xhm̘1#]Il ?,>O8n8E'OfRKjz(7,w E,YEMԹsׯI\-)))e˦XlY~)F>O6| ٙ&ɓ'clY̙0buGm:tXK:uJYn]o/܌*["P(#ͨ۲Ԑ_^GBm۶U\Ǐ+I@@7Ϗ DΤ[Š@(V\h?k…B֬h߫o߾vdl= ğ[K~ #[΄GvК%/t9.R%%)j}%*Fh?"^+Qx@sFEF ;  ZL @޿ PH6ꁑLCfyxT+`ڪU+ß 4H׍(xv9r$FY!!ڻk׮-:t9E8r5&yjzpHH>( vQ* z5)N/,B1O$6ɔ)+\M(p Mx@ yHG/ZJ .tnq:ڰad7cbb}||,yʦMrmV!R 8f 4-^;(_X1%p!!!i$(D{BBB 6Eu^m|==z4zL13 v횲vZO_~W"bp&gΜ K8wޘ?7]p {Ŋ{:(VK!u=tkϿ*bŊ6 ([(3:h޿$ٻwol"ETRtu*|C"Pxi:__WQ(6nx~UMY[oYx޽>>>UJ3s1cH$O{WY\xkKO8,9 '/K}}E: PC@U P@֖͛ vmXnХKI= G toTB)@L2TB,{v矖 AAAD[E $D H;5PK(`D) &i&P>saP^( 1 ¿Dɓ'VTI5o=P˿~ ;v+n>F;{lI~$Y}Kw  H;v {@Awŋ QoU)P[鱱QEt͹BBBWwӠA@jVX.\?p@P2e$9(nݺu^_m=\z5cѢE%TZly{۶mq6PtRR[cHScǎEPT2e(ni}ر#g?tx([.O.]$!hM$''fE AC޼y+<4oNxxH̽}%$B-{)c.^_ʕ+Çg]$ʇ+VAÑ+InnZ(G}] V2m4%  >ӥ()IhDK!$X9/w Ek\cUǦMHABZҔG)ą8SYk>J3!O@hcܽ{"r/W cb?#_4OD;xp Ppjm9+PТ8&)_&} ,h}wz@z5sOoݺe;*j  K@sF%5k@y$Ņ%%P=AkamTCZ0e=6/O)/_lttDx^D>,aJWrݺu߿^k!`߿< V[ϟ?tPE\%1Zn}{ƍqV\5)S\4ijZ1oE+x$0+5 N<"@@@c{5sƍ\Id hS8wܕoM' rJgϞ={ ,(jϟ={bx vիWK#05wΜ9qPrFEEJqbEE@.~駼bCCC-ZgϞž[Ijƍ PÊ`/=+%I ޽[IO>\K>|ME slR"jܸݟ~Z PJJ[=qr'O0䢵PxݻKSJMhI^]f.h)͚5SDiip~_ўIj2Qzi^9_!.,P2d0{l{ID E(y0"Xf헹Juo(~F9 ZW=J^=@\MZcH|h½{,sqQA r;) j uRSx8 =hBn&A9!ŅB:j^\X +.=x#(7 R$R`jɟީS?$gĉNzݑ8?-h&P{YzZ &\6mZ,Z(.44T5rW(PX[neKJ;wnIh=XYƍ2}tU?i]t)sz7,Yfv)9'NxaÆ~ز?R\9Ez-)$^ڧ{T=zr ۴iSr֭_}W^wcݮAVAs:rHtppj*~)g-Q!Ν0|5.$:QD_az=?Qď>ԩS%)(DDDdYf9Xɓ1$~@A_ތ(P:Jk .>2.._mwa^_ܠT Cի G 3::Z -[jno'  맊[ȣRR[i 䝥 HE:=w܋TnZY5cNy:W (_@: PC@U P@@Aˁ8A';Ǜ@Trp6R:zds5~왐?~E9 H*j" TA+ K@a)1mB\boK% o߾ҥKkz(m(()"t)?%JOHHlCVZݷVznJ:t(o{_8KХK.AxO>εbŊ[8q*U0[) aEPPЃ9s\)S-s`߿ڵkk]Rrdɒkcƌ5k䆽-kԨgDDDKa-[r曒ܝ:uJYn&=t)...3 _sed&[V(-L 6[^TWBM>})%x/joDEEemժYݻi+rzŒ3 ?^# ѹsmB *4UR%ĉ;`tү_?e˖ISZKVw?#IcϿo޼Lkܺ#""rYXQn+99v9@ PЗ'7# \.OvyXbBRRd*ovZ}#P|"8~@Vdu~)SL.-ZTSz8JA{SӧúC֣#E*B||wL7 IDATPxqϨ F ]H9-x@!j{޼y*_c'O"Yoܸ|HHC-9wܹ C\@˗osԩ+W./nC_'A7|}رjb[v =zu֥v- 6mn-7kO[~gEp*Txp̙YkΝ;'}||TSgE*A_!!!6SPM6gq*[֭[Vܖ<ܾ}\soZM{ܻwo~-<刽>~S?KSEާ=;: P/(˓՛iӦ)i kG2M{w}'te0I~a޽G20- ƒR`\~@.wJq)rʚJK[ҵR46lt5JQ%bW  Ϩ iYhxl0 (8ޜ(P>LF XAkYbЫW/f  U#Y#ʗFg H/O`ώ_]_% p#IА-ۋٖXk!P0 PPE K~|9(֬Yypt\k֬[ow@.\P?bE50R i(PwdHm|~/^c@9*R[o=zʕ++t5wΜ9E!pGvZ"ETtO>}zIw X) Zݱc^1cʹ"26l8߮];ZjǏD"42`b̜(8,1ڽ{")] m!@A_ތ(P /.|;8<6m[n_FY$8qBuр'O,̛7ny(PjP;v?T4T#G]-EZf\X@;sP"CU-{cF3^ "qAM,hÅsj։BY_sD ͛7z0tEΝ;3f mFy&)ߤ$''K iy_Z"5 w{!Pˬ"Gf "P~z… K8[QkrB@+Od!#w@Av +Gr={qs s߼ys!谖C(P}-nݺ<ӧOr,~ 3gL3fM}}ꫯ$iٯuJo"P`'-P߿ߗ_~;CǏ/>>Sɒ%_`rrL2*-ZРA%ZqwI= <̞=Q`'!PЗ'7#',[L2mۄ-[:.׫W+ :u^9tD%6eʔ˓&M!֊3r%K[lY+AAA-[&I,OJaV-Zپ}%k[]ԴiXyߔdɒO_ WVa \ҧo߾ u}yy.2t"J*I ^/_CAylll@ɮ{Z s%p@"˗)ܻwoLU}Aʗ//<%w99sf`̙ƍx'/Y䊚,!.EyWz ,Xb^'o-'-kE+cs? df@u#iJ.-PMq/O *(^HO)(m+"*UJT/, K,i+)kߡ ԬYiQZTFe>})5O(Z t+\rBR@GS*eC$.wT(d@}Y?HVj+gϺS8\C {QDڶm+iÌA\^@A&R[ TDВ_;22,+t6zkJЦM[n'G7V\yYn w-~}m߾=WVp$ -)R pk׮w_}j7Կ꫼ҁ}ݹvڕѣ& V)O<9a=>>iDEEeX@ޝJѵkW-ZdWަw7/_\׫Zj`dd$}æMb|MKhVz_Zj=dH*[l9VJ2` 6L-T%8#P`h/_r)ꛃ }yz3B@(̘1C;vC/5xA~*U fJ)/qB&M,B-I& }+%Eݔ5Rh]Zh!On)#E~ʝ#"?@jD] @W` P@uiR^^  |xRDʡg9uEq//iQw" P ,`Fh` 谟{???e4K@Imj*Gh/j)A`.A_f)Tj/?JΝ;NK{MW X#G:{kr-pڽoM@v֭| m?gΜ#FXiٲe)2߽{9-y4bĈ9AJ#n:yf29r$:88:t$?+~`//QO?E)PhҤ"FKjضmے6mHrSYdQM0gΜF%YKݻw&;jԨ!ICח.]E+p$Kzرs0 @ PЗ'7# tHO#)e" ]8~?}ԩS%uf͚%5JPΜ9~ƌ^z ӧ)"l߾]u{{ի%<1֭[6mHɊ+5s(5%6wߵ?}TȒE`%)P0/ 刊@S,@Y gϞD7WVXay{RPZ^a-/7nBBB왤uz3gCNբ1 j Z ۷[o%YF7@ruQPo-]VRчL̓qT4@U1Hu}3Jzjk 6߳gOq'&M:#V^s6ywUxv@ϯP-_R޽6[ +e ԫW_6aƍCBB,/h,aÆڵtumذaE>3Ij@aϞ=9"##Y9P:ZZkР+N!/իWVޟ8ʂ2IޛM6YX7k֬Ν;%Q&Oj~9wܹE6Kpʕ~~~|֬Ys᭷rX4vZ~[~鳬p;HpSi̘1+?8Yͯ_u>}HҏPʏ'OhY 4:N:5Vч{Q P(˓՛xdIi&J{+dȐA$)%;u$[Һuka˖-ǡt+]\(fΜ9W EUu]!OOXM%KEEiBY%>\t…s^RRRTƌU#X߻w/}"E^ C%P>}z &HIr*[lv#_')£\$c{7n,ϖw5j$iE5ޞ(P8qڏc^ӧ@_%yǦM*TAܹS={ORRVy!VL\]5_@uգ P3 @ P@5ƣ@Bmxq3f0sLsULlgT6B,YDo 6mrԘ NEH.iK >Pd h˗ {;/tUQ%` V+Eݻ'h kw2W@c0L@!m2HO>)~8ߡCϏ9^SZti\߾}5*oԨQݻw:t_[0cƌǏW$إϟf,-p XѣիW)zE,Y"9D n޼`(?>a+u.KZ3DjXxqJ /0` p Ǝ+P{E-;#(Fs{+N=@\EZ[< X96ѣGUT!vz+5:Il-@SVSC;v 2B\HcGQe)Y tOnU;"##R )5z QHHΒ.[n>L"L4)Vfh ?!PHx)>|8{ڵ%Ç6w\H@NuMQkV0W_۷"Z ~РA~۷o䗷mժUuvqw =5Brٳ|Bg6lX OXTz+ݾ}E/tfh;wl֬Y  6,#oڋBݚ7oHpرAAA}ر#g6?'| ړXiӦ96S+-K}hٲ+ ԏ-Ϝ9#T\#i%Xb}Q_~\FR]֭ӥKŏ:ZVPBrq ŋ8p}@)~s:uT"<<\ƃpDovZI͛c۴i# Vhu  df@A6==6ի+"LR;j//0T.j>Q')CҊ Fh= H0bS=Qܹ#HZ*"J(g!E 򔤴um!cFO\A-(úhcT( Fsʚ%P`]r'Fu3!P?c J}#H$W jt[C=o^ŞCQ͛hã@ߍ &u4ؓ:Z: P̋ =PR~:=P"8ZU,gCO’ˎjo;_ys #GTAB qn@55$$ a"ucX&Pk֬iI 1"$B:u/!!S j Au@,RxY:JF:t=v9{޶m[֭[KS ?^h޼pzjek׮qRJtn;wdujJ*Ǐ?woo=_W(PҥK?^`A| P(˓՛Mtcʕ 3o9\$SE[ V\h.\ ЧOVF]tD[% sرi/FtIXJCA믿 jRMP8h_M/HWL!!B|J=3Fe]zE*-VLֲ>z!<(l>ϟ/ :TÇ-)IQ6\$H 6(~|Y~~0ER'rfٖ#YxX(xW1'-x~@AeuЕɓ%< HtPhQ^>}*?~\xr7>d=0~wXVCC,EoPruZ|')ݙʧHWЖ@:>=Yb)L޽{M*[l|͖@ڀƩQ*$&&Z) k]a >Li i\e1ųHaÆ{#ejjj$ TN~_~%_}Շe˖}L"ӧOg:D-TӧOQ`Az@y:ܿlRT[ mK`+ Qʕ<}4˗3u;:t" UvT:Pzj~lll*Uc!ԩS>?äɓ'гn[Rj`N IDATjժ=(_̇%O h`ȑWgϞtΝ;_~BhsFMBLH0ҲeKxKDɓt哒g;s>ݻ!666KXXX~竼m ծ]O`Ѯ];f:V["2G?PO(˗/ / `9K) եCJȀ^( %о ٔ/_҃oEիb fߣG*T`TA'T W>SSk1@2eʤ?hTwӣ5p&[' FJ(a&0(P dwӣ &xg=4`$Zضm긤(Rˋ$*Ux޽%wEW6O@A-Isj -c 0{ϙ~Z =4ȩ۷ OPHB)rPڀej{֬Y XMrY@s`N)IB-R_>`mO:(Rjx@vϕ/-%K}4j(.83A(a0@@7AWȫ@Qŋk&Hv0{}X`+U))<]@=Q%22Ң;w M4ڍz:R`녎;Z(|ĉzq sh%P [(#@`t3Յ@LB=ţHիWV=Ğ={4M>3sGLtICˁ7ZWh.Ѕ[thF י|nI䐖j6R  *.j{_'ϟ?_ьo~7(]e˄ǫ7qHH3@}j*KT4ֶ$BXzPbE>~&էBZRn]ݬ< RGE>fҲ2((EF(mU 9Gy̦HP! ^uuT$Vy葅=p$zf[P(XlY iGnO5l'@ xnh y)"DDDDרQ^kyY{ؼyslW^L .hѢO_:uRtrOK㢞Цݖ-[r߿?W\\\˗/gɖ-EyZt';v[JiUDDD={wlO>>ڵk۷/ו+W2|K~Znݺ)SS7wܙYfUc۶mqi3m7ƌv6ؚu削F<{ua z߿?ŋ0>5j` +ļy /<'@I(˓ޢJc@i3^*\vb&噧}4мysZjN_ڠ;vX0(r}[cCaGˮ]'N4g 3gD,Q%ZEZȔ)۔˾uy.`TRQ<>"hF(] -ė.X/^\hժTKOCAW-kБMNSczpĺH ) }:wx(x1=U!/=S'Ps,O sy'.R$ xϞ=oXkf^Ay^1bDq{,Yr9l޼9WHH$ZHH7r/h۶mM6$&&ɑ#ݔ!Ko z}y7>~%Zy}A# A(A Pp@:<BCC.YD3Ν;'}||`p!  I^{#G9-Z(.44':&M_|s32%LZR%K*n駟&=Zi \O}C/O  pd^+ P0`9sx~@95BC0;= N#4\3*UÇ-!ݵ$;(3EO9r%z۷ơ7 bcc3V" ѹsyծ]p ߓ .' =@/O  pd^+ P0`9sx~@95BC0;= N#4\ܹs%;))tlp8e@c iӦ֭[Y'أG+W2z*b I"EŇ))) (PYl~{{wyGXRO(A>( ;X ޿ Ppοh @N cp Rxyjժ:u*uֳgN9rd10 'Zj`dddNEcrk׮O>MWzW\ɴzs)" ^z(~O>Zj_ϛG_;R-P@@lx?1O@7Q+　 PpM!P0CAD] R8zhrVEAP @@@ppp Ɣ)Sȑkpȑ\\'$?&޽{)8ϱc=nئ/ <x?გy@   ` (8 P0HaСE>s_E5@<|0}lf|z ~~~O.\p 'N,Y1hР \1s` Pp(A>( ;X ޿ Ppοh @N Cq[sH!555}ٲe%%%e!{E5A'`K@ 6\Q#gr EhPP$ș3GD=oAG PЗ'z8|P2(w@9A !0|aᒱ;&>~6m[J믿>u< {nBxxx>E.5kė-[{h`T@ڵ_9|pneٳgI&w.]z@g"Jӿ4iҵ 'L!PЗ'z8|P2(w@9A #?HrU8a842 AA`h@A'i"4&  5(uӧܹs'CLr=.Rszu' Do  |J8G7/Z (k1@^A^@@ z}y7>~%Zy}A# A@8X  L} <x?გy@    I |8">+@@@ @W!PЗ'z8|P2(w@9A@ P0@A/` x& Do  |J8G7/Z &](8O ^@A_ @@AɼV@`^rsEk@k>E   `f(=@@ k ,po(8_L Pq)X  f$^@A_ @@AɜV=|M.TAX&?s2@$ :A@@_t/ D @ PЗ'z8|P2$LX0;R8|?÷ !P0/a-@ B}  ! | "@@@  PK(A>( 0j7 Гo(m  P0!P_)#X  <@A_@/O  pįDPח @@_A@\·@H~   #  Do  |JYM@v 0\@\L7\=@\@( %DN>@GU̮.tE@8& / `.(_(_rk!R0`=A})C/O  p+puX [b Pp/+x~@5@LJs9se-D !f  $t!PЗ'z8|P׊#&\ӷcYo}%@9Gx~@S@MssKZ<Ï R@A_ @@Ay+\-An!w<  λ=o(tal@OlYeZ<Ǘ I=i  Do  |JihaR3 A  8 Pp B`'D0 @A_ @@A1+%J[:P/"(8: \AT@@Qm #ezI ³yq/vࢥo&P&@ls^M3]$N.&P8m  ޾ PaUO%Ǟ@c8aD NCSP(X^@@&ߴԭ#Bdf4hP E@8& / `z(pB@caZ \IR$QF_y=V4瓫i@@@LNs  Cks[i`@ # ޷1c@`kG@adjcA@@(859vcj[`v+",X;Po@3 gz0/' !)    @5 X fp:@K@@@@)X   `v(݃@@A i*;c@ w@@D ^lL@@@E PpXt    3,&0'X    ‡   ^O_  .%'"_<.;hF  V(?0D ƱH   FO(  P:Э]&CḬ*  ^(?F0D `   Cq%&  \8zS@|5EQ@z c@@&@@@@D ^pL@@@@(]Hb:r(`qy@`_R@Jt   Y{Y IDAT P 7c   `(Vt@K>ڎ@@NCKSH   @P @@ |ր-N9#28#t0? JO,   t.@@@< DL@@ $`v` Ɉz 3 ,I",@k@@@@+Wka-|z  @G  @w` @z@@<K\WXB^.&ѵOt  ` Q@@@LO"ӻH3Ҍ A@@k 4yW ('xDA< PL@@@ Rp%]    / ,X.mA@@/(X   =w Н #E   1 GU1D@@!> WH܍ɂ(`(\ X/  j P4H!M@@@ P0`4@vBkq Np9v  &A@@K"   F@(@@C`Ha!N0`) "qA@@<D HL@@@<@@@ NzH+J@@@@@@@< _@@!'VpR(x1m @7Q   ,w`Ȟ>4 c &rLD { iV   I&tkBZ4U@@ Pp!\t     RFc    Ptc~   `8aQU@@4@A3*T RJ @@@As V^WF   Plbv   n#c` @;Rt  !н]q^L>  @; !3&w^ fG f8{f @Aw@@@ Rz0?C@@%qP@@@ PBpD NCc@.   `(8!*v`0# ? 34HVh  RPbZ  (hi54 3r @lsY&6 FC  Fo8  `$@ R0`$ &vL7 !@1^   `N(ׄn\BQל  \@+w#9}@G "`(d-R@vzV Bmsv \@Fy  flC @`(n ^D/r6f(  iV  "<0xTs9ւpMk0@".B^px$<ҭ\-7Q@)"(m5M@@Yн]qd @m@!11 @ ) R):/'/L&[ (8A@$¿~Y0;RX0I'fax< P 0LH": & P50(8  |@>W&&g0 P q R8bB &( <5s Ck> x@9!*U  Ap#& xl3Hރ x y5Y'b,X  1 PWb" &=A@ ^@ Pp'}; Ck> x@kBv k!Ԩ˧`@c\ O!xw@1Y@ PpZI 'axۘ+K @RD ^pLt#n(ё@9B?7  /W8cQUt8(xK1!w@]1.x*<ճ N<s@@O&P.\8|M \ @< ] @P(HKin P %:@(8T  |&‚ّ‚' Ns)**(x1YW@t7x3;8JG7@9oC? Ns*V(x1o @;Rt D X @jy'; Ck> x@%N+ kS`@] EHcV)x1op B]o#s@9~h   'O( >|:Vx͘$ P02o'@! Pp(8A@$ څ+k!Ԩ˧C`W@+܌IA#(c AH; (-w(]S--PXhn;~h   UP3Ob{`Q @@@PbAI#o)H 8 Rp*@@}>~h   QPhh#>p_rs? @<Oy@p GAl`*aj"AA.Ie 5sp7Aa4} l y0+d X$i$Tp_m;rd@\/@ @Pp@c @Rح=z,\ * YbMPfrOq sAA5x*W@ znpM\s0k'$A 7S@0%(pM[Q)*@Pзh  J99TY_Zn    (a G f $I<Oe^%o;5( ™EkT"(( ySpa/(_֭+ҥK ׯSE}ՋOn88Oj"(DQ^QEkwRƌ%(BCCe=̒'ON/^@ 89!Fp< \t2eСCdgڹsg7o^@;vg} ڙ@l[1.8GFLS+((FQPAA5T.(Nߑ-úA@܀ np_\ Q9B%K4~pH߿ԩS&Xn$l;X'I'ܑwU("(荢`AA5T,(i/ zRnp/ (׉6h5ÇqY_~4ydFD7Bv*UzL@@$ p7mG# @PGS#EA8c[ (_3JY9rR@܏޽{G7n?F\rQT"##)C C+I,Q]|7}?N=&MP``MbF~0AYp0@@PpZ&AAQQ3W (_YAah)S<=((@N(  GB Y+jժK'jÇ+D.]J͛7wz:~0AEp8@]@Pp:A>Z( X /ZǬ C99TY_Z@L@@@@' t!kޢE ZlhaӧOŋӡCDl:q=J)UT ⠞ (8,!B a@ ES74n#E |fqSӿ5ź<}fQa"WGݻ1cFIPJ6NP @8}(A' 5\XPTǦ4eoƉN|#>>b+uň#~YfMP (.a  @R W'Aww$ }oA!(8Þ\]P,S$&MJ8kmf @Y#SF%Me}c}C~I~X*׋RIL 2Qi(n< W#PD AŤ:¢׷e:ܧO*Z5^__⇘,K…]vԡCL:N>Eܸqiƌ(Q"Uӹs%e.ȑ#%}C9'NT_ <'6hVبQ#kf( `F "'0W/Sќٳ6>+Fm;凨` {vܡ-71W*vb%>`lΔ%,c@|6YtO})٭u}jc!SW Ef3& (Đ_ ( :ebb {tU:~8uؑΜ94 ~tC_`^$Io_['NDRp׮]TJc?ϩ8ŀYυsʕ+ΝMjժю;`˖-n`Zb}Q D/\k3&'&u ɴ%D:r/O[;A\$+ (D2 y:8/wEuLBPpvbRPH<9x NX$K. iѪu"RbE,#UQ|yӵ:a~:"‡Rug͚`<9rq]!Ξ=K C@gr,ˆZq`fQPjߛp5V4_gLjB?ODI7# Ww מEЈqe =wLMFu|G@ĄrKPX1:t萢d!'Iŋё4CQhwB' IDAT$z*ZNISkK1{n?"(!?vil"?8̵Zz5qҴiST( A-\U[ϰr+]YN5) u _X0|IaoBp8ݸfK-5@O(ALNb@/3(kź,IfԿz|`ڧ?Ɨ+,sDyireʙ3#sHh AA,T8mVA JbyU/ZJvjJ4iRSjح[Ҋ+dU)fL |=L2Ttmۊ󝇅Ql$"m6"EPF;Ef$(l=؄ddy''zRkJB>ŵ%( zl|Μ|Dz7?>2Oybva2ZTOO.s]qw<\W%ט#8=񑜰k׮߿ĉ#j7;u$7i7n\{S-zCѱkinɍCM}rq/5AG&rL322:wLeͲ_XkdA.qQy !%K4君uz 3ϟ̩އTہɀGێE$AA%(jZ#'Ӆo5~X]vp MiY8}x>JiVpB:X¨^:.&EPwz(ӟnv`S{:6Ο t ԤenW]Ŗ`AoIVDY+*YZz?̞2BP0`3dYV A6r (Ptiھ};yyy),rvtL ~eƌ79Uĉ%u8[ Ic7bِsO>TRI1`4i) 64'ns 6o,#8?ܲ&(K,-Z\ #V˘1cL$\@Pp\A@@= @Pp}Ū!AAG-Ԋ UAPзhzªU%)YNIPH1)(9'_K,&^~ nݺ:Yۣ Gܧ֍6'OgO_F>!(}IKStQ7z_l %EJ؏PGwx,( ,q4 { (8㮸 (iXRU8ey]8LL !m)?}?VzF N}:Le&mbMS7o"S[MEk4EE~kWQأ2dJJ2&%$~֯3 S7'ο״>^?8Z6+DW{:Ҵﾢ Rʔ DymgA]Ca8ٳ*T z-6G hҤd,_ {jC'O=G-VٳS+ 28rbs_, /+'(|&.j ౄԸq藔ӧO rcs:Kar #_e Ih.nݒ QhFAh@@@@+ Z'o FOWL0 EkN8AEm0?$,UV5Eh,1-(r!K}{jn* mm$1',ZB{l)(fm\w=8}-L{wޕN}|PjI}D'|rOʍ5m LǒTjFӓdlN,U-"(.(ZN"ih?.hA͛(*U~rO3h^G:S-qb1@Kѯ_Tv{I?3kΓߛ4E+wn֍7U/I4h?HP҆E&EïN,R-h-BV\DPqh“'OdôY~;|5=sl'Aعd_E{x R=weWX1Q}27w\zh)k7nܠ,YhG/$-2qN (8,PKZR (u5 F UAPзh:k;F2 ?~4]ܰac/ڵfpA  xjrt dСkA:a| q;| 8$iZ_zVV>[M4𻒊yI~A;Y:"(|eqai$'M^T0ZPhuS<hBYKsؽ6:֩({/jܣ /UP1Gg%}(֢"Wf}Mv}~Yx9+)x\+IG-GaRy{?WAE-7]AP0޲j֬ 6&LtѦMݮYFYqk7oP„?&r=ʐ!-NOsͿ t /cќ9!#Os;9@Ko2U<ֲ:õs}g8J0ga RC^к^#ǯN RdTRɔ&Qi7CRS,ܺX{N"ptZ*.֔S4cuGe3;ueZvo&:j>ҏEKQxZ4S?[J [6iP'H IWBJ([5 } eF_G(Q<*_œjgmq3 3&>ww_ҮG$ynB^Ik=nS =2LWSbJP4W_}E׫"##lٲtoИErxi/USE䊥6mZ fɥEȝ;7])ߍ`j۶%D:t)ǟp)ȉ7o/BoױB`Ǡ   p@@}Ú`+5/o6ZCPp(^ݻr _1pjPc.J׆@G'OV5x<_a"( 2~gui2TA%P#(-*QM:WgO3JDġW._ʛnn*:=fQXR"!Lt\(a[=5aM񱋭eҷ Ŧ֯J|ز:wm@Z8*zM$,-LM(pew\2dG:7=/ʮϚ#w-rE p=( jvP6ZDR>4w4AwK><fۣ&zuF2Ԫ}>u׮R"6I+2l*imL7FmP,8ݲwQT0s;H뭷r^iw%%=}}@7IgT%(d]FE~Ǐ"Xu0w2ԦqQ~Z\%q:m}{E[6ܐym=/wcMp46ic4q_e)~;'y#! 'x8#jۡ[A:TkNFO>=Lkn\|zmAuQn^N5H kowkۧH}9p)e*(ȉOJ)=c-L?  *=o!r  (A#N>ME_>Y#l6QA.7,Fh);wV5r)>|@27cɗ26Q'E˝5qBiEos G4{nZnM .mk10 ((2 N`y& (_PbEڻw(h*w]K$:53Q&)?ƹ#%(#9pZ7(P`0bڇ`|&0G敷?l5xiQ\RT覹RHoMAE}EBxI~X[)¶nRgW: sZJF jR[Qq6YONPHCI3+Ss͢mia5mh&~D iZ"IYh ͕9)+ ,'|?p4D2K ,$N蝗C[#@P0"pWIY_}l AA'@4wRƌZ*Q2y_|]DZ,T@1Z^[_@@uA-AaӦMTvmI;^#G_eԠA5QT0RPP)ɹ`%G u4tt)ofGDNSP2Q]~;pC]k3~9IN$bɜo WE$׿ޣLBŪi &eI;JP`1n8k`$ 쳒[HZO=S8͂pᙔ8M7iW$pQ„NK, 6rQGƈqe$}kqi~*TH="%*J*7C*BP`Aϸ\[nQL_ׯ_?Ya؄Ŗ wS7mڔ/_N}\N~ʕsvre IDATkϮRzcǎ";SKڼy)/6m_Z)ʕ++4i͗/_t3}!!!/%SXFM#Fi„ ѯ9*jX      6RNP`9! (_FzQPP(,]7onx0vZI=kBXXI~4’ŋMgϞ]'?\ueuI05A21!(8|s6XVڳg҃WtKw%ݹ| yznt)ӓ\ն$~T;?n.}= Qk*L+]ONP_yuAo<h>_)(&b%Ӛ+cfmi-'<0Iy~A, 8"0. ZuU=l[W TNP֖NiS,^%w3jcjfdY r,}ϊ*52_*Z2-eɖ\=XD~zbZ|ٲXXf(Rq7a/|2 +V=uTouPH,'dzrg)(-T.3|H8Q7nܠlٲIk.T}/3g=a2D B,@ǐ   "p ={ÇL2JNN4ZR}q,='OC9:(E9pqMbMPh֬qDQ"6{lѣ;<⩟3g\~B~ƛjG뜔I3+SoEF~ ![:u!mZw]VyW EfUS >FǏ{:&(LpfN>)bZTBzk_G_6q$kPRsr(Vo%fԿ.Q߫ԧ?5eM%(pjAo+FPՙJrBS$l9RβP@Q9|t5f]wıj6Du1*UvzZnds*mU}HZw7;4)굲G/ܨϕ@PpACsTaQ[%J${٣xښSsqsaC:gΜW}ҤI#SN j?:ujIu9@IP/s%,Iԋ/֭[KƑj$(p5kS*l7lؐ+Ao%łƕ W=@@܃G{WqӦMKˉ"""Ce̘m…#ڷo֠A]}AA?v~.(9ƌ#(zʒ%2U<+J²e˨E&|}ˇ2z0Y Xr=m8P>NuHt$(l=Į'g$*=-xs3Hg~½ynPGehp7ۛBϟsƏ<,z֔"ſyK+|7e؃8F le(;ޢ?5EGS5H>+FAE"lT(ky?O~o PDhhu)@s2} AAFP0wPdr9ڵk' c\7n8>|= uq=j(5*U?nzo߾Hr,CMy?9݃\bŊѡC(~Oᑴs1uʚ5$uԩC6J̍#.]ڔ2!㽲m7o_&(3gΤΝ;S Dk0z.G߿.N~/۷oolw༂Dml   !«Wt!~.]9tpȐ!郂L;r޼yYTPS]@Pзr=ߋ]A!wW:=+hjՊnl gKעrBŢˈӂ7x>STGr?0,p-x>ҮmiSt.G,+xrp#܈C7\ƫMp0(P@ԭ3 .\0{S*ϏX- ] _|rܖdȑCvFի%E P_r}VP8*޲h" _oժUs%O/_[nr _J˩e%(p}!RLIO<ÇѣGe +W$p&̅e }mOP`1!HJM؄A@@BK>^ʕܹC@ΝKXRNww"$(kŶAA5`~8#3 ,dȐAR2eݻwtqzB^7_;,ҥKeVz3f̠޽{Ku׭[R8q&"(7} S1 {Ԩ:BP ~oY̑,_TYeuY,8ʛ2gIFY|)o~oJ2!U+Ho~oMPAEA;s=%J,$}ӫnTG*gHnϨfE}ΘWJ߃rP (8VPWmr/8 Ȕ%ʓْ 7oםrvs:>] REMR;4Tۭ}΋O{f)+(s)Jˎ-4EkU.MnNLmۖ.\xrOnh r!xI&рǽ>ɓG=GJ}ZPZ/Ѵ"?PݪeCWZGQTQ+Z_Gk P!7% ׾젍G)P(5ڀ]=v %Oa녠XAaʫ44]ߴԽլHAq w^S%(X%)UX\s$( VY@ҳ6I +)8m~m-UYAA8Ǧ.{w!e@{h A)}6pm۶|psBa-U?/|/^L[L#;zβp}6hЀ֮]+Ν;& HOKҥ ͚5K0dӗ{d`Q1a;L"Jg{w(/(X &=N  @PP]j+V,ɓ'ʭK."Ydnݺ?00ȑ#r 8q|ѢE߸ u@PзJucEk 3гgO&S3޽Sz PPA̓+/_&(W8B,@{( fϞ>jÿS]-gORɼ$hnjz\XB.>::t+HCFT Kr刯Y+no߾68pڊH,.<|iھ};={BCC 3sE>A7PIP0aׯׯӍ7L_$ (`_…J*r) Æ 3Q/O6%K*X ϟ49`%ļ`ML0-bd18 γ\9r9s//J矩:u$y3Yft !(nMP;D AU0 ?dX9GL.^sԂYLh (%8JP1HNOX I'PX:(DFھoPEu :?.,щ#/ OKfXt=*e;~cF+O*UkZ 'oTŒ-_?,7ݸLTM6G?h^W8Ҕ2f 'SN*`f/҄1G$k۹}w K?TD8jcJ}hK/ 䕶ܞnXsu)zQD/b{0%(Ė`8l M p>A@@@Ppsxaaa'O!CTRE͛~y,ܹbʕ?]ٔm-Z4ӧEaƍwkСGeNEAPзQV(lG /Z4h3oQEL0p`v\|aQ;C^iw%mnۛ7QԢn(7R#(>^guUSA%u~Zb[~|6oo ={K%HӓXP; \WNPx6j^!]no6964@t[-~ղ աb%cώhƛf͑6Ƶܙ icP $  .!D}h!bT6+@Pp]Ś]sVL0-t&kpGAaLE=<֭[E1\jժԼc%K|5xcƌI{/q8֢ wȑΟ?ZҤI4{=zf͚ϻtmݻoܹWX=sޑ͚5{ܣG |k?)SD1/رcԜ_~f{u)嫢j:v:m-AAӦ (_O% '(ؒr7)AÑBRt 3^[ [xX+/0nڸAPȻH w:akԷjaӈqe='(02P"S~X+R҈F)5Mp?ga RCA8-#wh=Gi^Ov4 ũ~@-J+o%ko?Xf(j 7U7Ml[9AA)gh8}R>pe-?[x`ѧv-"at'm (;NP$&ae   L#F_ Xݻw_1TD<ǏO*v޽ӾjΒ\*?k$I"WXZlhŷ~w}fgmiӦӧϧ4s=zPl#ɓ+1޼p¹yZ#0s:-A{rChQEkTMmtw)(4FiQ\ >F jaNiHJ@|Cł{яvw#X+տB˾(4-Ue̜^xOׯ=u_iy~J1P._91o*'uO_kGv.-;XAa4=נIN*%GC#apTWԼM^J,:u:6G #ʔOO9$!N{(+p5[PlE#(<}򖪔\.](XJwＤ:Wu|SR6\8Gj+CG *}+9s)DsY"_>G:ɑ+eɖ´SeOeM?<@PԝǺcXC[#'8|18) %(9&Ν;gSJ%gÆ ԩ[ ;eze =3f-;i] 6F#h ^QEkTJ]G|No41ˑSO0ݤGCy]o6nLvl4u|7Tb!foBuGd4cߵڵM6SͭH +]VijD3~a9}+Uhò#(pkР>+:G6\_G"{Ծ& Y*(esݐqĉ{SMO+V (v_P+& {İ2IW&8x/ѣG/J%K7?]3ٳ+[lc3Ń冱HеkP??>>>/_No߾ ,H+:<7a„4%Z۷ǒU85}رcE~uٳY|V}o Wx>ȧnPrp#jdl[%qbG޼*%[^Z5بy/s.R<-^PXAwkb{ j`=!F6pGAAҧO'|rvܩxsYm>^^^,ϲeRh" 4_zuC Eb`ML<dF\oӂZAG7pZE A@S %O2h˶@n>ZnIEAiCɒ'uh}la9RPE~O[[y%Ӗ08QNVG5ϽPRg&0@47Ok8r2_==Xt=J߲:Td:ư2؎lШY.vpͳokۭ ^'z? h[8e&< CR9In FPZO{m.p2CqUT^6GYVQnRl$: (^ivAH14[DOкi  nFtCAPԩSa5}ƍ'8:č7DWbuqΜ9+hÇ?>rϟcǎمmʗ/|޽ 8tu!(-( ™ (_O%`RY_*U/'wnEW.=t J2!Ϙ2fNFUD .[7ө㏈M0.}(CƤλ` \ cKOMgH͐|3$B~iڗeoPp.""Sd (oo*^2ŋo^N{w1:_Qԇ%kr)krʕ'S?kKw4 qšLUkf\yĩ.WQȅ'M$%JRJh˝[/h;tC| =~C/^3 '7eeYQ)LA|].WAԫWD󎊊8qѺǏS%DͦLB}$^P0\LorP @@ܖƶuΝRv_?{셅uWD196meŊ+'N9pZ5k7l0Mܹ__t)XK?T"(HFDQؖAA5x** DKԓuI4 X*z]r,Gc{&Qö(1V6ht   V lmz~|>`n"i8UGkԩK٥K]:ym.Qʔުt>}DT1+fuҞ=UÕwoDG߱#'Gs{&Q#SݺU/\8MmTɛ0-Z]S?T'hi.<5[#0+MsU `O*)!A@@1@@Kcw" cz:B Rб)(M6nT1A0~hBԬYgM /lj4J!(n35 2 Ah GDD!=V   1LB p K@l\:awX BcFPȜ9Z%`ΝHsNuӭܙ//^ԩӜF A6LtCL7_ x(ˈ!TePZX6C1 4Üa <     (H)6-O׮]uVPȞ=SjQUԯpuИ1ߊڴn݃5 ; A%I$a[7$j Qx$ X4@,A܇TP]ݜQҁBrX v{~cz?o|-߿/}~V\Ν;(ͺDy?T{Nz<.u~?~x\n$Ik~/Go\r^-2e>tP2aiӦ Ro>N5nٲq^O2Wfذawǎ@K?T7|h"="̹%\i=^w~ΡO 6g:VG1E{x X.SۀIeA: Ew5A^A>+nkl [lIZf<9yyyE|ߣ^zقΝ{K.v=hAA6iO:I'7LkK1\!x X$d.ۂymEuOf   GPpB56y)d9gϞ+X[5'Co>1cjp:VA JbyU/Z;u& Icyن V'  (H ǎ;_x7믩۬bSP*T(s5s=z&~ɓ+V@XթS.iu (9-l UAPзh  J<    (&}  V )* [*,@@4 VZ;vH!|Gm*իؾ}{J^c[P?~|aÆeK`Э[sI'l?|?GΥCPз]Z#'̫o@<Oy@@ 6 @PM@/(1"* [*,@@ բE,˖-\Nn̞=5۶mKZFp+ f,v V' ]Pxg%*fId֭WRԺuկ_?{3f|q˅ zk~-]4ŠA2YwA! U[esިZ+{QQQgϞ$7ϲMPPPH:uF^P &}{FP'z^1* A@S @PԝǺA@bؤ=iyfq=xݻGţ7oPڴi)M4Txq*WS=-xALQQ\`   `wQԩn{yyEQSa||| ˵8@ѢE_rs%Q'g>~HjʾyTrgx/3eŋq<,"""\ ^o Z'%&WAA5u{ÇJ|.N8@ (b  .I VJ$np|C7cƌ.]:*Rծ]J.mBڵk4vXZbx>}/G#j׮H/^Zn-z=004ij,TDqy M(pA믿κjժJ[bgw"|ڴiU`yJ*V\)^Ç˗Bnmaݗ2d+ևol j'-&WAAZ9s&N,Y2zytoRD,;O… W޽iƌ> @&Mw4a{_}_^\ڴiC-qq*VL,q5kF|Goߞϟow†ǏaÆUjUھ}!V' *߸q#˂5%k D7   @ |QOѣG逨DX8q"5Jw4۲={F)SװaCZjdsΥ]^/%E EA6>O8U\|J%'(pݶmf^panrڴiv"(.]^z9CBB]{e˖+iӦ9 AA ֵ%(؊(1}zMŜ`MQQ4 *Awi…)uU.mΝ=tL"*UQF=ztF`qիWNOX8uE'Zj9wؑBX?<<Z/_ӻw im֭[ȑ#C'OqC27X(" k&RJ%WHe&>v{PqP-bJ2)UiΪ"3'_#PYKB\Ҝ@RPХ-\ԫW3jof"ƀav}wr#Zsߜk_K9?'9 l @y P(qPl ((PUP6Q&?/N9PP5-p3֯_w6BCbT @* 6ۃQǎ͓O>zrx~0l|KT?l,X`Rݺu>.YĬ^Ԯ]lf 7 }ͶTO}UɺԩSYc-}R~Wl2ok֬1m]``Ak4q(B6{lӤI!n&s饗 {ouK=V[M6$u 8@XB]/h~KAv; /52mQ` ]믿x=L4r!9?mta[e̟cUڞBUm@ ) (tp'_rf3fu]vOwGe]&^8铖=)hpgUK즊<-\^w͜|ɦZj?^>{Cӝ腻 64[^wǿ3O<3ZdG{:R5ۃ78UVw9-x&'g}s=#PwK@,h֬ӧ?fĈ}^Rڏvo/ϟ˞{# ƫV2Z3Nμ5/vg:8D (bBN  /ڀBͰarDp?n5>|袋̏?hDG룏>j>۫TZq3uTe^iSL1 XiO?ѣ;찃:tiӦuc9Ƽ+ANlo>94_&o9.vSՋM7s.]8;hL%s?s0!Cs9'{JBƍsN$>5Z0H [ؠ!dBQa@(Rrr m (DKU1TU=yB-YV^Y3g:ːmŊg6l3㡝w9A ^9k[Ӽi.VcTCsPv(p  @j //bs*k): (T)(jZ¯ J(K;tǾ^,+)U,_8pꪫ:g[Wx/V@A%ULxR>~Qp䠃l2n8AR (zIUW^n(- co IDATr)YPb@A:>8RȻWV@aڴiFUW_}uNu= ~-ZZ*aMvEJmP(/Uu/ Q7܏*}0}0{ey;#Kx(YP/@@;@RPP̺d٤{9JT}!Qi1-c/*vꩧꦛn2_~ySB&٭W%H9E=YXMjԨQ:N) q .g#s^}՜P"ʾ  T I FB4]U "Rx kӖ-[ ([f-4{NTV6iW^yɓof/9;` sZa憂T r&_@!dC@_ UA}אWW^P% Ӳ*u{{3h -1ak ]s=:WfZA%wqGdgem3f}xRN:Z8G9Kihm8[8q9>0 .t &{'gN:(idTq–Ve Uf͜`à׺6k,Rg~+ݴ^ٳ+z WB\A 74E5TMC-MbkoL;Tf2M6]w(n,4a ߲ E P$HJ цB4]U ׹s]w3ĚP|V++o8pW']lYa5?Tn]hѢu׭yŋ//AUp7T9Vsի[ MjPw~SDsq-Te/YPK  @ r-oq.]2T/^{eO/8G_~i6d ,~p[: sp%UL wK~y~n[SNe#n*_Av6}lveYu]Z=PO;̆~ߕB\Ҝ@P  kךoIK!CXaJlgqyGs~}Ti|mF_VU%w ( 4( ZHdߋyU9ys:̙3qv \(HB3۷l*wna ~4dp 7kӏ?S ůTwŎ1(}r>@(Rr4P6}PXf3fgN[¼y8ve7͗}Cvۜ4}_-PՉ~ZGԩӺMU[ZCW_}g3[@!B(sb+@)BÆ o[]@[A_f⫯$|ʕP6lQ|ͯRïj6püR?u7s0A M^\P$ߜ{v-KP/`aÛ?_~ίTOlBoA $@@9mYP6L}o a/njYT'!G:jA+(l2SNdlUg;x7sĚgӇI -Y`$6+@@@RPʺvm/wnna_zkƍ{ʸ-^Ig7[@7Z-_1ciٲe&pDvzЋSO=uݮJJ+1t|-̙}N ݥîk\kv˞ PM޽sF+bT5ly|'VCaf (9 }(ps  @ "=cժUk>,Ç7Zo-LS^{-gvsA| 1uQW_- !Cx98쳍~ٖ:2 na zh~=]]͚5CuѶv* qbTx5 9 TP"@@!HP (5zieM/R>%!*d7-cꞋ|ղI!Kޠ-e MYO9P\l B4ߪf#S[I´{\p9 qϟ? P@@ ~DǨƅob SO=I(gaKw?@ 3mӦM.n+[@!h H@Z2P7GvU:PЗ{wSWz(IֱcGOBA_=a+o q AwPmN   )D.dPP\Cwy~8O?t[rO HСyg=sWQMJ@3~NB3۲ ZZVD3-h@3oF9'OlCj*K֏?4m4琪R;}01cǎ5ڵ=Y `c_  /ȀoРAh WUSn/x͚5f6 };4;.y<- [yGy-l=\7~9 P4iSTMNڵ#3Z/]#̉`vUn(o (\x殻 DE@!! @ (pP PFI@!_.v@A^|*m/G+:L (KF1ZUW3UP}S߶DmѢźWv蜰ïԨQúĬ>2z'C-(=W7  * +W}׳lEM:uJ*KW{챇={v>: :4 t(#y9 P+o~N(M)n T^=ʡk+[_.[,^.v@!n[@V BQn7 e(@@ .&@@!5h~i߻ƍd7\[X[ۼ8UF[H@ADZ-s=GΩPP_lK~嗦^zN_UVK>[A (ؖռnZB ڵk͆n'SAa3U$0k,{P{, P@@ ~Dx5טn/7xϕtM=kt%lۨdXvKj@An馜>sΡׯoϟ~&eTݢtO(QfךJ)n*WWÆ 3ݻw9 G qPt+3 Ta Ux ݀B4]waz|xgLǭh@A/ȵ\Epc$>`nSL1tP5{,h@A24}t$Ac=fN=Ԝ2]´-m(pw  @* ?EkJVO?uʰ%5`{e]?4믿gT.n}9fmf~P+~C=L0(>͘1crԽ٭ (v   P(TA PLeݐB4]BN93r6w? w/@@;@RPXb]Gs޼yF_g7TE62|I (+nzS0mܹf]wEÄ (؎~f7Œn{1ǘW^ys<`g.=xeb'P۔# @(xpPKPիMz ~/}%>]wu_~ 274p@ mjNuwkӦyr~9!-[;l=cЀͥ"Kx؂^zJEE>zR^UnBgn6*(@@   PtT&Z=XJ-Wv%oӧOPzٞJz[R ZSnw<}gZj-Tu+o]01U ڶ_u=dWtP<05pȑ[nM>h/G:駟n9w} ;?H ;# @ PK/(@@ Q (DKޥ(\w7-5PyZ@K تQ W6M65cn:HnPM-*f7.Z (5t5g-1rGqss=w躂6Fu qϟ;  @ (P5vSYK.$gJ 6 Ј^!Cɹ[R ~@&ny dna ז޽y衇6Ҷg}vadZA{6N4hEw;c݊P۟BnvB@ n(D;(DKޥ(/F.]{,4>,jРgy/~NjPЁ8蠃2 {SlsO5 (ؖ^[[Zdn<ۺ+jXۙgi~@;YγQA @ 6`KN:9}{=?ܹs mln*u{Oj@A%0aB ˖-3u#l@AMsUPBvȮt}l紥3۽;f+՜ϙ3Aʽ>6R'ac@@`n(D;(DKޥ(LU9~i_y;UQ}饗<ҲB2#c:СC PPlfݝnذq (Fx `ʂN`檫Vnn}5Ss[mUsxf̘1l8 v  PF U {bpa=d7Ȟ8q[n^'|dK'90sLӼys} ѲeKCf (\}r 'ѣG[SB.{r5Z-#ȿ>UQPE/mM}P |猖vxs9XQBI(hEv4K϶  @T Q?.h~i߻TRzʜtIiጪi?.ҎZ|úPlls<Q?T"_~ZЀ뮻LϞ== 2'3X_Ki&瘚'q=^0[lڪf6?+xA  @ 6zye)^G-P?>_KChM3w cZ*uX>Ç]/bR]_ﾞ:Hl'O6|pι Q%mꧪtn_nTv@6Ѽne P_lK !p7}<5m4ҿ>^*?4VP?KW> qIs@Hm@A&M3\p饗[n;i\x+\=ܨ4r-Jz@᫯ߴ^WӶrP[̍7m޼yuU}}뎱fZ֎:(gvi''$CNzR(vZ!HS0cM75|Cs8];{R;0bsiY=UP+0{ AvA@R P(..w FB4]/^l5j*!裕ڵk;4gUR C )84 (dX C̳>k ٳg ( :gk:WVL&M ~΢EUƪڸqcgY|Υ*|?~y2 (5Ve@1 EHm@6VPJL5δ֙_Kz@A[+-zR@/*B#}92[n]!!__5~A0ךo[U}U8TA;޿T' gB!Pz' JBd9n(DE Ҿw) bk~ETU=AsZ ,p>kI(0h s?l@A :uT }(cFU}ўycB\g P@@ ~TV-A*ik+ۮB=C}Vhr(V6=#z {Ba[@A*aZ_NU h3U"s) qP5:@'Ne;@L Ϲ.@@!PKPܹs悲U~+.cjbtz[$!O??͙3nt؀93lذ SQ`B 2  h>Y5ԩs|8ς\/ P؈-@(@VZej֬鹦 :e٢1c8j[[rUJ~e逸z픇b- vYו]1@TuP.bsy0E h7(xmzR9 JI+HPPT.mСεyu^L۶mM]S172e3ath=ž}}sDvj5w'p1_+&ׯs?АhJړz:uz20>u @*YB%OhC@!_5=IDAT_ k<>^i׮]Q/]eQ^dϜ93Ա5Aʧmݖצh3f͛|wS`pSN1G*{ji|MZ&!xFb^k.RBAe{/9jHB3W^y3ש%@۸q?+w~LB0'B@P(XzP6meZwLX(Pn]'@q8ƹ8-v_*xfr^+a%2,YtIJ7mIhѢ ̝;y g2 2^U1G= +ˌ4N,?(׃_|a.]꬏HK7(补/􀣥,-W iKg#.Bի{FKph-䃴 ל \.P( i Z@R(T*?'G@c n(D;(Dco@d PH+@t PHru 9 X(pc @@TRr\@ P@ P#u#@(" @H !ؼJ PA!pP  qW  @ F 1bs*@ P@_BB4?FHd BHt/W1 PS! B P ڜB4?FHd BHt/W1 PS! U  PvwP  qW  @ F 1bs*@ =@H !\P  qW  @ F 1bs*@ PA  @ 9. @ =\(@@!FlN )@@!$ks @ 9. @ =\(@@!FlN V*(pc /@@!A@!{#$SB2Dž^![BǗC(Ĉͩ@@!(smN@!{#$SB2Dž^![BǗC(Ĉͩ@@*@n (D;(Dco@d PH+@t PHru 9 P@ ` (Dco@d PH+@t PHru 9 Xhwh~ L z n _b #6B@  ̵9h~ L z n _b #6B@1  ͏@)@@!B@-@@!!@bT  @@{B6'͏@)@@!B@-@@!!@bT  `77 @2($s\ @({|:QB؜ @(p RBH07 @2($s\ @({|:QB؜ @TP@_BB4?FHd BHt/W1 PS! B P ڜB4?FHd BHt/W1 PS! U  PvwP  qW  @ F 1bs*@ =@H !\P  qW  @ F 1bs*@ PA  @ 9. @ =\(@@!FlN )@@!$ks @ 9. @ =\(@@!FlN V*(pc /@@!A@!{#$SB2Dž^![BǗC(Ĉͩ@@!(smN@!{#$SB2Dž^![BǗC(Ĉͩ@@*@n (D;(Dco@d PH+@t PHru 9 P@ ` (Dco@d PH+@t PHru 9 Xhwh~ L z n _b #6B@  ̵9h~ L z n!y@S]A!ss.E%?U_\    QBD@vG@@p(p#        P  P    @(xp4@@@ F 1bs*@@@@(g@@@ y7&@@@HD A@@VBG@@@ 3gA@@.@@!#!   (Ddw@@@G7    @^     P E   XBKC@@b #6B@@@QB9}F@@'@@!ycB@@@@D PHp@@@l(q@@@@  8s@@@ >\    QBD@vG@@p(p#        P  P    @(xp4@@@ F 1bs*@@@@(g@@@ y7&@@@HD A@@VBG@@@ 3gA@@.@@!#!   (Ddw@@@G7    @^     P E   XBKC@@b #6B@@@QB9}F@@'@@!ycB@@@@D PHp@@@l(q@@@@  8s@@@ >\    QBD@vG@@p(p#        P  P    @(xp4@@@ F 1bs*@@@@r   <{{^^E9ʉ@@@@4JQ@@@.@@\?     -   P  P    @ P(   @ݜ- IENDB`mitmproxy_rs-0.12.8/benches/000077500000000000000000000000001511036467100157715ustar00rootroot00000000000000mitmproxy_rs-0.12.8/benches/.gitignore000066400000000000000000000000261511036467100177570ustar00rootroot00000000000000/*.csv /*.png /*.json mitmproxy_rs-0.12.8/benches/dns.py000066400000000000000000000010771511036467100171340ustar00rootroot00000000000000import mitmproxy_rs import asyncio import socket async def main(): resolver = mitmproxy_rs.DnsResolver(use_hosts_file=False, name_servers=['8.8.8.8']) async def lookup(host: str): try: r = await resolver.lookup_ip(host) except socket.gaierror as e: print(f"{host=} {e=}") else: print(f"{host=} {r=}") await lookup("example.com.") await lookup("nxdomain.mitmproxy.org.") await lookup("no-a-records.mitmproxy.org.") print(f"{mitmproxy_rs.get_system_dns_servers()=}") asyncio.run(main()) mitmproxy_rs-0.12.8/benches/local.conf000066400000000000000000000003341511036467100177320ustar00rootroot00000000000000[Interface] PrivateKey = qG8b7LI/s+ezngWpXqj5A7Nj988hbGL+eQ8ePki0iHk= Address = 10.0.0.1/32 MTU = 1420 [Peer] PublicKey = mitmV5Wo7pRJrHNAKhZEI0nzqqeO8u4fXG+zUbZEXA0= AllowedIPs = 10.0.0.0/24 Endpoint = 127.0.0.1:51820 mitmproxy_rs-0.12.8/benches/nonlocal.conf000066400000000000000000000003261511036467100204460ustar00rootroot00000000000000[Interface] PrivateKey = qG8b7LI/s+ezngWpXqj5A7Nj988hbGL+eQ8ePki0iHk= Address = 10.0.0.2/32 [Peer] PublicKey = mitmV5Wo7pRJrHNAKhZEI0nzqqeO8u4fXG+zUbZEXA0= AllowedIPs = 10.0.0.0/24 Endpoint = 192.168.86.134:51820 mitmproxy_rs-0.12.8/benches/openvpnserv.exe000066400000000000000000002034301511036467100210630ustar00rootroot00000000000000MZ@ !L!This program cannot be run in DOS mode. $ zNiNiNiGBiLi(Oi\iDiJiZ]iNiiݍHiݍOiNiOiݍOiRichNiPEdLc" r|v@@|`hT )0p@8.textpr `.rdataWXv@@.data@.pdata@@.rsrc @@.relocp0@BH(ttaxH(H YIAAAAAAuHHH Hta3H(@UVAVH$)oH+HWH3HH LE3H-A$HHH6HHL5  u$HH!HANwL L&H}E3L3APWHHuHH"3HD=tHu D5ttD5H [Ht~u%HH#H$xHMTeLH$L,HcH`H?HHuLHNL$ AH$DW3WHEHD$`D$pEEEEED$P 0@Pu D5cWA;tt{MmD5<H H|`~fD9tD.H+HYHH;IHHHY0HHHfD94AuHH=7I@fff f HIfufD H HHfD94AuHt(E Hf\tf.tHu fDE H HHfD94AuHH=H HfDfD9qHIuoH HffD9pH@umLLÄH H HD$ L ?HLHD$ HH8HDž H(H8L4L<LDLLLTD\Dž0d{tE3H8E3AQ={UD9L Lt$0AED$(@D$ AH |HHD9tAE33H }KHL$pW|D$phEfDu|HL$PH]HL$HHHEHL$pE3HL$@HH]HL$8E3Lt$0HMD$(D$ {{HL$P{HL$X{H{H`H9|H|H 9HRD=OL5XBxHݟH H^ "L HL H HLHD$ LEHUp HϋE{HzL H? H!' vfD LH KH zt>Hă +H H HzH$L$ H$H HtyH H5D5&wuH3H; HH3lYHA^^]HH\$Hl$Ht$H|$ AVH0E3IIHHHtFHt$(LLLt$ HHHb{fDt_Hx HH;ÍArAH\$@Hl$HHt$PH|$XH0A^LD$LL$ H(HtLD$@LL$H;H(3H(LD$LL$ SUWH@3HHHtRHt$8Ht$xLL$pLHt$(HHl$ HzHt$8fl_Hx HH;ÍErH@_][@UWH$HH?H3HL L'HHHD$@AE3HD$ HHut%wLH HL$@HD$HHD$0E3HH$8HD$(3L$E3D$HLt$ ENYut,wLHE3AN؅{LLHMHL$@HD$HHD$0LǁH|$(A3Lt$ D$Ht؃uT$HLEHHt5t1{vL$L mH>؅LH$@LTHMfHL$@HD$HHD$0HHt$(L<ALt$ 3D$H!t؃uT$HLEHHt5t1uLnL HN؅HL$@HD$HHD$0HHt$(LҀALt$ 3D$H s؃uT$HLHHzt5t10uLL zH~؅LLdHM#HL$@HD$HHD$0H0Ht$(LIALt$ 3D$Hr؃uT$HLEHHt5t1tL+L HE~ ؅HL$@HD$HHD$0LHD$`D$HHD$(A3Lt$ Nr؃uT$HLHHL$`7t5t1sLL H}v؅>HL$@HD$HHD$0LHD$PD$HHD$(A3Lt$ q؃uT$HLKHHL$Pt5t1XsLL "H}؅HL$@HD$HHD$0H8Ht$(L-ALt$ 3D$H"q؃uBT$HL~HH t,AHHL$`u#HY~KI{jLz~HHHuH~lHHu#H~H.jL~DLHֹ;t"H~iL~tf|{t HMHIHȐHfmHteHHuGyHD$ HL$0HAFGA^vbA\$@HL$0fDl$0sbuMwEAEωO G A^HL$0'bA\$@HL$0fDd$0$buMwEAEωOGdHHuxHFHHyHNHL$0A^aHL$0fDl$0\$@aOHL$0D}ED}a+A^HL$0AYaHL$0fDd$0\$@\aHL$0E@}NaHJHHHBHqcHHHtdD~ ExGA^HL$0`A\$@HL$0fDl$0`uEEHL$0D}E`D~ExDA^HL$0`A\$@HL$0fDd$0`uED}HL$0Eu`Hct#HL$ Ht8dH?w%HMH3WAH$@HA_A^A]A\_^]LI[ UVWHHH3H$W3D$tHH$ACAACHHD$`ACACACD$phD$P?cHH HD$PE3HD$HE3HD$pHHD$@H3HD$8HD$0D$(D$ `HL$PE`HL$PHT$h8`uH]vH'_D$hiD$h=u/HL$PPD$hP_LHnvLù/LLÅtHvD$ Hv3HL$P_HL$X_!^LHwLÉD$hGH`D$hH$H3j?H$(H_^]Ht$WHHH3H$HD$pD$P' HD$@H HvD$h' HD$HHD$pHD$XHvHD$`HHD$0HHD$8^3u!AHlH 3af5HvL qHD$ LeHL$p HT$0A' E3]ujH$H\$H@fffDCHHKH[HuH WE3C]H$uH@vOHvyH$H3=H$HĐ_@VWATAUAVAWHHH3H$p3MMLLMu)HvA GHf;LBHuL5vvH$H H$<]u!AHCkH _f5H0vL HD$ LdH$`Hf$fHfHfA94NuHfA9tDH@uHhBHHH@H^HHupLt$0LuLd$(MHL|$ H3D$@AHt$LHL$TGH3f$VA$X3ɍP_AH_A H^#D$DLD$HHL$@f$T[t%DHf94_uH+HEuHLE@^A0uH$`HZH$H$H\H$pH3];HĘA_A^A]A\_^@SUWAWHxHH3H$PHMHT$8HY؅HT$0HL$8{Y؅H$LL$h3L$`IE3EDt$(Lt$ JZHcظHI@H\HHu8FL$hH$L$`H$PH3_:HxA__][É\$(ELHt$ 3L$pYMtjMO(MW(IMtQfIALL+fDB +uHuIt MLHuIIIY@[H7[Dd$0H Yu"AHgH p\fD5hH3sL OHD$ L`HL$@f,fD$FHZHsIHH sHDHfD94SuIfD9tNHIuLq!LII@H~ZHHHsHt$(EHD$ LIHA'HL$@HHϋ"ZuHf9tCMt>H[HHtK ZHtIO(HHxIG(HYHYL$pLH\m@SVWAUAWHHrH3H$HL3ɋD fD$0D;DG8Nu  yL$(LFH$3L$IËHL$ L$WHcHI@HXLHu AD$l$(LFELt$ 3ҹVH q L%qE fIMHDE3H pDy3Lf|$0LDMM MtSfffIAML+fDB +uHuIt MLHuIIIYWHWuHe3E~qHcH$HHT$@HfuYYfHpILL$@HDH pM8uumA;|39 ~CIDXHHf|$0OHD(WHtlJL-HHXJD-H@8:t MI3IVL$H$L$H$H3>5HA_A]_^[HVfHoMH %nLDE3INH\$ UVWATAUAVAWHH:H3HD$xIh ILLHtHMHAHwTHELwMtIHAHw TILMtIHAHw TIHtHHAHw SHHwHtHHAHw SHI]2SD$0LLH3ỈD$(D$ nSu!RHEo]I] RD$0LLH3ỈD$(D$ Su!RHn6 HE3E3HD$ )SHD$pHHu$6RHn؍OH|$pI](>RD$0LLH3ỈD$(D$ zRu!QHQniHE3E3HD$ RHHuQHCn؍OQ%I]0Q3D$0Lt$(Mωt$ HIQuIQHm؍NI]8VQD$0MLt$(HӉt$ IQu"PHkmtHD$pLD$@HMA0HD$HlIHD$PIHt$8HD$hHD$pHD$0t$(Ht$ HD$@ HD$X H|$`IRuoPHPm$HL$xH3U1H$HĀA_A^A]A\_^]@USVWATAVAWH$ HHwH3HHP3L|$0MHD$8 LD$@HD$H OALD$Pc;HT$XH;D$`DD$PD$@A@L HADIH8HHL$P(D$HjHH]HHL$PUD$HGH :D$hfuL$lND$HT$lND$HH HHL$PD$HH|$(LmE3ɉ|$ 33TOHtHO|$HND$HHHL$PWD$HH |H 5_Ou!AHf]H Qf=HShL HD$ L3VH?fuPHHu|$HDL$hLiAHAHHyHˋP|$HH@MHL$PID$HH(HMElHfD$hM9PHf}lDljPEpXLD$HHjD$H A LD$0IAInHH3-HA_A^A\_^[]Ð.B.BQBQBCCDDtBBBB2C D.DH\$Ht$H|$ UATAUAVAWH$H HH3H W3LHMWH\$xHH\$p3H]AH]DH]H]ȋH]D󉝴EH]H]H]f8WEWH]HE HE0HU3E(IHHEH]8 0@P`M@MPM`MppE?L{t/SHgJJL0hIHIKISKI2MHL$x'MHMMHMLHM MHHAHw KLHHAHw KLHHAHw fKLHHAHw JLHHAHw JLHMHAHw KL}HMHAHw JL}HMHAHw JL}HMHAHw JL}HGHw HJHMHAHw JL}HMHAHw JL}HMHAHw lJL}ID$Hw ITJHFHw HAJIEHw I.J3H H3)L$ I[8Is@I{HIA_A^A]A\]HLEغHGuHL9fHMHEE3ɉ]E3HD$ AQGuMrHzuwHJMJHD$xHHtDDMHEHMLǺHD$ WGtHGu<HLWf2HL fGLe IFuGLNf[HLME3HȺFuGLSfHMHEE3ɉ]E3HD$ AQFuOfbGzuwIIMIHD$pLHtDDMHEHMMƺHD$ GFtIFu<GLf"FL3fFLeL}HIHHHu&FLYDH(PudHH(ZH]L mHULEHEH LH}HD$(LVH\$ HfHLHVUHIu#L HM+LcN tH; N HbYHfffDJfA;DIuHH JfA;ItHLgWHD$ HLt$pH|$xHCEHULpIL I$III-+ÃwNLHHD$(LUHEHHD$ OdH|$xLt$pHDDžH3HE3H,HH8Dž@HDH\IHhHCu&7DLdI>HIGLME3HBtCLdLEHE3AQFCuCLdHMHEHD$(E3E3D$ BuCLdWH\$0LM\$(H dDD$ @DHD$`HHu&ICLcIPHI\E3LEHUHM|CHME3AP#CeCL LcD$ H"H\$8HA\$0D$(@D$ EABHELHuBLc4H\$0LM\$(HE3D$ CHD$hHHu8BLcI͋?LRE3DžE3HHBu#ALVcI͋I HHfDHfA<_uH뀸HH@H4DHEHu#ALVVI͋IMHt$ LcHHHUHME3mCu#CALcI͋JIY `H!cLELM(HEPHHEȁHE3HEE@hHD$PHE@HD$HHEHD$@HEHD$8L$0HMD$(L|$ E|HH?u#@LbI͋I:?u0HMP@S@LbI͋ZIiPLPOHOE3fHHD$(EAQ!D$ yIHIfD9|AH@uD ILLHtH@Lt$`HMHAHw @LuHtH@Lt$hHuEL|$8LL|$03D|$(L|$  @thAHHtXL|$8EL|$0LƉ|$(3ҹHD$ ?M@IF8<uHMLHL|$ ?HMAE3E3I3et7HUHpHL$0LIDnE3E3I3.uHM?HMHZ?DAuHM>1Et,L`HL I(ALpL5gAI$HzwHcAlVIH;HKI<$B@H9@HHu;@HK>=H;HKI<$ @H@HHHK\=H;HKI<$?H?HH@LCHYE3H CWvH;HKI<$?H?HHLCHXE3H W4H;HKI<$K?HB?HHE@HKH%ME3]H;HKI<$?H>HHDLsIHt@E~ ExXA~H; Hf;u$EHD<;E~ExNA~H;HfD ;uEDH<;H;HKI<$ >H>HHL5٩IjLmILt$pLeHt$hH|$`r9;L \S"T0U`TTTH(ttaxH(H IAAAA AA^9uHk`HsH Ht;3H(H\$WHHH3H$p3@9=HT$@H ],9HT$HH ]9HD$@ @HHD$HHŬcH\H=aH=b=d=nHgH=lH=m=oL L\HL$pH|$8HL$p|$0AD$(AD$ 9HHuH\HHE3HD$`HD$8HHD$PH|$0HD$(AQH|$ EA7t Hy\\LD$PLL$XHV7t H\3HD$XE3H|$0HHD$(H|$ AQEA7t(H\qHt H9HHH$pH3H$HĀ_~@VATAWHHH3HD$`H LN3HHt$8E3E3|7HŪH] :H % %HH$H$HH5 T6uHa]NiH$H Ll$xLt$pHWPE3E33D$@D$P8E3ɍUE3HD$03HD$XL~8H'HME3D37HHu H[yHHܠHu2 HH@HT9HLHuh@L 3HXLH;!H ?HH54uH \K@HT$@I"7u06=t#6=$AE3I׋d6mMHD$(LzD$ 33L}6LHHF8HHLH0HLpHD$8Mu8 HHH@H7HfLLHHl$0cI(;uB ʉLHHH@IH7LHt4$LHHGIH?Hu3I_5tHl$0LYIHT$8Ht*HHL9qt HHHuH 7Ht$8L}HH5kMu8 HHH@H6HELLHI(Hu Ip_k6f;uB ʉ HHH@IHr6LHt&LHҝHGIH?HuђIg5It I4IEHw I4Ht$8IEHw I4H|$XH4tWHD$@D$HH|$XMLd$0I?3lH;MHT$8E3HHL9At HHHuHLqc5Ht$8LלHH5ŜMu4 ޑHHH@H65HLLHtM Hu Ip_i;uB ʉHHH@IH4LHt&XLH2HGIH?Hu1Ht$8IFHI)3HVHmIEHw I2H r23H}EH#WiH 22HHU7I3Lt$pID$Ll$xH$Hw In2H /HAHw W2H=H HAHw 92H=H H-j/H$H$uHgVHoHL$`H3HĀA_A\^HL$HT$LD$LL$ SVWH0HHt$X3HE3Ht$ LHH3H0_^[H\$Ht$H|$ UATAUAVAWH$H0HjH3H HH}3HE H®HT$xHEAHLHEH:HGL$p|AHEMHf~HEHHEHuHuHUHuHuHUHuHuH}$ - G 0  @;AM~MfAIf-fAHH Vq2IH VHT2iHT$xH VDsHH.2MD9t$pHD$xH VHH2I$H V1HMALt$xLEIHLDL$pHLEIAIHII;H}H VZaH ZUH,uHZA艾3H H3L$0I[0Is@I{HIA_A^A]A\]Hx<H VHe<H VVHR<H VH WH [WxD9t$p|%HD$xH vUHcHT0H)tH33A?+HHHAH+HHthE33Hz+t(H wS*HD6+H-+iHH oSH +H+A;HH ySH*AE33A*LHL%DJT&A$I*HHLEAH*}JT&H ,SG-HUH?*t0Eu+H L1,HUH*uЋEJT&H RA;tH SH*tJD&H=SA H=&SHHH)H(HPI)AEDֺHH RgIv)AEAHU"3A+u蒺HH P#A"HM fE I+f9qHIuP3҉3DB )LHu>HH PAHPL%fHCALCIHSHt$`Ht$XHD$PHE Ht$HHt$@HD$8Dl$0D$(D$ h(HHtHSH =PHHW(A蕹HH ;P&H(I;iI((AEH\$UVWATAUAVAWH$HH҇H3HHD$|D$xHD$0LL$xHD$xHHD$(MHELHHD$ L3'3ۅuHfXKƹff]DD$pD$XDD$h`+HHth3LL$XLJ5(t9HD$`HHD$0LL$pHD$h3HD$(LHHD$ &H*t HHWHXX3HD$HHD$hLt$PE3ɉ\$hE3HD$ SHDA'uY(zuNL$h*LHt*HmXsHH\$@fffLlHH]DMtyHED$`DHD$0LL$`HD$pD$pHD$(LEHI3HD$ %t-A<$v$HMHITk&A;$r3HD$@MuHEH\$`HD$8LL$`HEE3HD$0IHD$X3HD$(D$ (t=uR|$Xv"uHL$`I׋H %Ë;\$XrHL$`c(uAAƃd}3it$tm'MHKWu HD$@3HHD$@H#LMLl$ L3H4V迶In(HH3H$@ HA_A^A]A\_^]@SUWAVHXHH3H$@IH$PMHMHL/9HADIfA;DHHH tAIfA;HtIvH9't#LHt$ LN-HL$0觭Ht$0LIfBGuHH(f_ H[uH ^HT'HucMH MYE3HtMEHۃfffML+ffB+uHut7JLIAHu3H$PH$@H3>HXA^_][AtӸLUSVAWIHHHkH3HWI{MsHDHM3E33HAL|$PL|$@WDžLL>E3Ht$ AW 30@P`p/'؅tHTHTL$3HLD$PHW&L%iTuHT3HL$P&WL|$H3WH E3)D$0WHEHD$H3LHD$ AP L$`L$pMMU&؅u6(D$0HT$`HL$HE3)D$`fELd$pLd$xD}&HL$HHt% 2tt H4THS3HA!؋t H2TkHT$@H ً%؋t H4TE`VHH0HE(L)EHU\V5LefPE3HD$@)EqVEE)0VE E0XD@DžHDhDžp Hx$؋t HSUHLE3HU)E$؋t HSPHS3謼}UHLE3E0HU)ED}E @$؋t HSMUHLE3HU)E $؋t HSHS3 THHLE)EHUTE3EE0XE DhDžpHx#؋t HS=THLE3HU)EM#؋t HS AHSL$[L$H$L9|$@t HL$@"tHHt "L>HH3#HĘA_^[]ffH; a}uHfuHB@SH H3/ H HȺ H [H%HL$H8t)H ~HD$8HHD$8HHqHH;~HD$@H?~ ~~HkH ~HHkH a|HL HkH D|HL H "H8@SVWH@H!H3E3HT$`H!Ht9Hd$8HL$hHT$`LHL$0LHL$pHL$(3H\$ !ǃ|H@_^[@SH ^ w _ tsH s6% uR6ut H  83? t uH [ùGH(3H(H(H( H\$Ht$WH06@2@t$ j؋ ~#uJgH H q F t HO H 8  )@@t$ WHH8tHtE3AP3H3HH8tHtH HHLHӋ(QtU@u3ұ>/t;|$ uH\$@Ht$HH0_ù97H([H(jH(t!eH%0HHH;t3H u2H(ð@SH ɻDÈu2u 3H [@SH =ugwjt(u$H uH t.23foHQHZZHc-H [ùfHLMZf9uxHc 8HHʁ9PEu_ f9AuTL+AHQHAH L H$I;tJ L;r BL;rH(3Hu2z$}2 22H@SH 3҅t uHZ~H [@SH =O~tu 6/H [@SH H=*~HuNHH ~73҅HDHH [H(HH(H\$ UHH HvH2-+H;utHeHMHEHEH1EHM H1EE HMH H3E H3EH3HH#H3-+H;HDHMvH\$HHH6vH ]3̸̸@H U}H%6̰HE}H(+H$HH(39uH%HÃ% }H\$UH$@Hٹt)3HMA!HMHHHE3Ht&"@Thl&6DZn|VF4&8Tn."<^v*4>H`zdb@Rv",6$^H.z@z@@@`@`@ u@Pt@u@P30EV0Y@YsPtu uvyz||@`@ @OpenVPNServiceLegacyOpenVPN Legacy Servicetap0901Dhcp.ReportStatusToSCMgr #1 failedopenvpn%s_exit_1CreateEvent failedExit event is already signaled -- we were not shut down properlyReportStatusToSCMgr #2 failed%s\*Cannot get configuration file list using: %sReportStatusToSCMgr #3 failedlogCannot construct logfile name based on: %s%s\%sopenvpn --service "openvpn%s_exit_1" 1 --config "%s"InitializeSecurityDescriptor start_openvpn failedCannot open logfile: %sCannot seek to end of logfile: %sCreateProcess failed, exe='%s' cmdline='%s' dir='%s'CloseHandle failedReportStatusToSCMgr SERVICE_RUNNING failedwait for shutdown signal failedError querying registry value: HKLM\SOFTWARE\OpenVPN%s\%sSOFTWARE\OpenVPN%sCould not open Registry key HKLM\%s not found%s\bin\openvpn.exeexe_path%s\configconfig_dir.ovpnconfig_ext%s\loglog_dirNORMAL_PRIORITY_CLASSpriority0log_appendOpenVPN Administratorsovpn_admin_groupIDLE_PRIORITY_CLASSBELOW_NORMAL_PRIORITY_CLASSABOVE_NORMAL_PRIORITY_CLASSHIGH_PRIORITY_CLASSUnknown priority name: %sLog file append flag (given as '%s') must be '0' or '1'%s (0x%x)openvpnserv error%s%s%s: %sC:\Windows\system32--OpenVPNServiceInteractiveOpenVPN Interactive ServiceProcess ID0x%08x 0x%08x %s0xffffffff FormatMessage failed Could not return result0x%1!08x! %2!s! %3!s!You have specified a config file location (%s relative to %s) that requires admin approval. This error may be avoided by adding your account to the "%s" groupYou have specified an option (%s) that may be used only with admin approval. This error may be avoided by adding your account to the "%s" groupCannot validate options: CommandLineToArgvW failed with error = 0x%08x--configPeekNamedPipeAsync failedPeekNamedPipeAsyncmalformed startup data: 1 byte receivedGetStartupDatamalloc failedmallocReadPipeAsync failedReadPipeAsyncStartup data is not NULL terminatedStartup data ends at working directoryStartup data ends at command line optionsFailed to find interface index for <%s>Unknown Win32 Error%S (status = %lu): %sNo previous block DNS filters to deleteExecCommand: Error getting exit_code:ExecCommand: "%s %s" killed after timeoutExecCommand: "%s %s" exited with status = %luExecCommand: "%s %s" completedExecCommand: could not run "%s %s" :ipconfig /flushdnsipconfig /registerdnsipconfig.exeRegisterDNS: Failed to release regsiter-dns semaphore:RegisterDNS: Failed to lock register-dns semaphoredeleteallnetsh.exenetsh interface %s %s dns "%s" %s validate=nowbem\wmic.exewmic nicconfig where (InterfaceIndex=%ld) call %s (%s)wmic nicconfig where (InterfaceIndex=%ld) call %s "%s"ipv6ipaddSetDNSDomainnetsh interface ipv4 set address name="%d" source=dhcpCould not duplicate handleCould not map shared memoryCould not register ring buffersUnknown message type %dInitializeSecurityDescriptorOpenProcessTokenGetTokenInformation (service token)malloc (service token user)IsValidSid (service token user)ImpersonateNamedPipeClientOpenThreadTokenGetTokenInformation (impersonation token)malloc (impersonation token user)IsValidSid (impersonation token user)SetSecurityDescriptorOwnerSetEntriesInAclSetSecurityDescriptorDaclDuplicateTokenExNULCreateFile for stdoutCreatePipe\\.\pipe\openvpn%s\service_%luCreateNamedPipeCreateFileSetNamedPipeHandleStateopenvpn %s --msg-channel %luCreateEnvironmentBlockwinsta0\defaultCreateProcessAsUserRevertToSelfOpenVPN exited with error: exit code = %luS-1-1-0S-1-5-7\\.\pipe\openvpn%s\serviceCould not create named pipeCould not get pipe security infoCould not set entries in new aclCould not set pipe security infoCould not create eventCould not create semaphore for register-dnsCould not connect pipeInsufficient resources to service new clientsWaitForMultipleObjects failedSetServiceStatusUnable to install service - %s "OpenSCManager failed - %s %s installed. CreateService failed - %s Service Started StartService failed - %s OpenService failed - %s Stopping %s. %s stopped. %s failed to stop. %s removed. DeleteService failed - %s installremovestartinteractiveinstance%s -install to install the services %s -start <name> to start a service ("automatic" or "interactive") %s -remove to remove the services Service run-time parameters: -instance <name> <id> Runs the service as an alternate instance. <name> can be "automatic" or "interactive". The service settings will be loaded from HKLM\Software\OpenVPN<id> registry key, and the interactive service will accept requests on \\.\pipe\openvpn<id>\service named pipe. StartServiceCtrlDispatcher being called. This may take several seconds. Please wait. StartServiceCtrlDispatcher failed.auth-retryconfiglog-appendmanagementmanagement-forget-disconnectmanagement-holdmanagement-query-passwordsmanagement-query-proxymanagement-signalmanagement-up-downmutesetenvserviceverbpull-filterscript-security..LookupAccountSidFailed to get the name of Administrators group. Using the default.AdministratorsAuthorizing user '%s@%s' by virtue of membership in group '%s'GetTokenGroupsGetTokenInformationIn NetLocalGroupGetMembers for group '%s'OpenVPNFwpEngineOpen: open fwp session failedBlock_DNS: WFP engine openedBlock_DNS: Using existing sublayerBlock_DNS: Added a persistent sublayer with pre-defined UUIDadd_sublayer: failed to add persistent sublayerConvert interface index to luid failedGet byte blob for openvpn executable name failedAdd filter to permit IPv4 port 53 traffic from OpenVPN failedAdd filter to permit IPv6 port 53 traffic from OpenVPN failedBlock_DNS: Added permit filters for exe_pathAdd filter to block IPv4 DNS traffic failedAdd filter to block IPv6 DNS traffic failedBlock_DNS: Added block filters for all interfacesAdd filter to permit IPv4 DNS traffic through TAP failedAdd filter to permit IPv6 DNS traffic through TAP failedBlock_DNS: Added permit filters for TAP interface~ f/7jnDN7 qWç3LO@;9rJ1DúTܳI*LYiI(M`Z+NhtgKLcrLc  Lc  LcLc8@ȕ@ؕ@H@u@Е@@@`@RSDS64%VIDbvC:\buildbot\windows-server-2019-static-msbuild\openvpn\x64-Output\Release\openvpnserv.pdb"""GCTL0p.text$mn06.text$mn$00f6.text$x.idata$5ȕ(.00cfg.CRT$XCA.CRT$XCAA.CRT$XCZ.CRT$XIA.CRT$XIAA.CRT$XIAC .CRT$XIZ(.CRT$XPA0.CRT$XPZ8.CRT$XTA@.CRT$XTZHX.gfids1.rdata.rdata$voltmd .rdata$zzzdbg.rtc$IAA.rtc$IZZ.rtc$TAA.rtc$TZZ.xdatah@.idata$2.idata$3.idata$4^.idata$6.dataX.bss.pdata .rsrc$01 `.rsrc$02B+`PD!tm!4m!m!m t d T 4RBr p P 0!d0Nd!0Nd#pPD!4^!d^m!^m!^d 4  pDH0p`P0D`bp ` P 0 p`P0DX p`0D` p`0DX!^^ P Tp((h!p((h! Tp((h! T*+h!*+h'4OJpD@!dN--!--* 4( p`PD#4% p `PD dU RpD!4TP3D4p!P3D4p$s p`Dp!Tq4r4R5!4R5 OpP0DP!LMdW`77!`77!LMdW`77!NN8_84!p`0D!::T ::d!::d!T ::d& 4 p`PDx+  p`0PD8 'tm'dl'4k'dPD  4R PpDp `D`!tT@YYH!4YY\!YY\!@YYHRp`08 't'd'4'PD 0 4( p`PD**dJ KpP0D@'S`0PD!RtZmm$![mdn<!mdn<!mm$  brp`020 d 4R p~eujvfjvvvfjv2P "~wyxyxP  4 2P4P  4 2pd4 p0p (PxP8Px`pXPȓ 8XXzH8p^J:(lN6$xhH, rP>&"@Thl&6DZn|VF4&8Tn."<^v*4>H`zdb@Rv",6$^H. DestroyEnvironmentBlockCreateEnvironmentBlockUSERENV.dllSetIpInterfaceEntry ConvertInterfaceAliasToLuidfGetIpInterfaceEntry<FlushIpNetTable2&CreateIpForwardEntry2;FlushIpNetTableInitializeUnicastIpAddressEntry8DeleteUnicastIpAddressEntryInitializeIpInterfaceEntry2DeleteIpForwardEntry2-CreateUnicastIpAddressEntryConvertInterfaceLuidToIndexConvertInterfaceIndexToLuidIPHLPAPI.DLLRtlIpv4AddressToStringWVerSetConditionMaskRtlIpv6AddressToStringWntdll.dll?FwpmGetAppIdFromFileName0FwpmSubLayerAdd0FwpmSubLayerGetByKey0*FwpmEngineOpen0>FwpmFreeMemory01FwpmFilterAdd0'FwpmEngineClose0fwpuclnt.dllNetLocalGroupGetMembersQNetApiBufferFreeNETAPI32.dlliPathIsRelativeWSHLWAPI.dllGetStartupInfoWFindFirstFileWFindNextFileWGetStdHandle2SetFilePointer~FindCloseWaitForSingleObjectCreateFileWCreateEventWSleep&SetEventCloseHandleCreateProcessWASetLastErrorGetSystemDirectoryWMultiByteToWideCharFormatMessageWjGetLastErrorLocalFreeyReadFilesCancelIoJSetNamedPipeHandleState=SetHandleInformation GetCurrentProcessReleaseSemaphore%WriteFile$DeviceIoControlTerminateProcessCreateNamedPipeWWaitForMultipleObjectsCreatePipe'PeekNamedPipe%GetCurrentThreadIdResumeThreadUnmapViewOfFile2DuplicateHandle)DisconnectNamedPipe$GetCurrentThreadTerminateThreadCreateThreadResetEventGetOverlappedResultCreateSemaphoreWWideCharToMultiByteVerifyVersionInfoWMapViewOfFileConnectNamedPipeFlushFileBuffersFGetExitCodeProcess}GetModuleFileNameWKERNEL32.dllInitializeSecurityDescriptorSetSecurityDescriptorDaclRegisterServiceCtrlHandlerExWReportEventWRegisterEventSourceWRegGetValueWRegOpenKeyExW[RegCloseKeyDeregisterEventSourcepGetTokenInformationcGetSecurityInfoOpenThreadTokenDuplicateTokenExSetSecurityInfoCreateProcessAsUserWImpersonateNamedPipeClientOpenProcessTokenIsValidSidConvertStringSidToSidWSetEntriesInAclWSetSecurityDescriptorOwnerRevertToSelfOpenServiceWStartServiceCtrlDispatcherWStartServiceWjControlServiceDeleteServiceSetServiceStatusOpenSCManagerWeCloseServiceHandlePQueryServiceStatusCreateServiceWLookupAccountNameWLookupAccountSidWCreateWellKnownSidEqualSidADVAPI32.dllCommandLineToArgvWSHELL32.dllEwcsrchrDwcschrFwcsstr__C_specific_handler__current_exception__current_exception_context>memsetVCRUNTIME140.dllJ_wcsicmpwcsncpy__stdio_common_vswprintfmallocwcsncatreallocfreewcsncmp__acrt_iob_func__stdio_common_vfwprintf@_seh_filter_exeB_set_app_type __setusermatherr_configure_wide_argv5_initialize_wide_environment)_get_initial_wide_environment6_initterm7_initterm_eUexit#_exitT_set_fmode__p___argc__p___wargv_cexit_c_exit=_register_thread_local_exe_atexit_callback_configthreadlocale_set_new_mode__p__commode4_initialize_onexit_table<_register_onexit_function_crt_atexitgterminateI_wcsdupapi-ms-win-crt-string-l1-1-0.dllapi-ms-win-crt-stdio-l1-1-0.dllapi-ms-win-crt-heap-l1-1-0.dllapi-ms-win-crt-runtime-l1-1-0.dllapi-ms-win-crt-math-l1-1-0.dllapi-ms-win-crt-locale-l1-1-0.dllRtlCaptureContextRtlLookupFunctionEntry(RtlVirtualUnwindUnhandledExceptionFilterSetUnhandledExceptionFilterIsProcessorFeaturePresentRQueryPerformanceCounter!GetCurrentProcessIdGetSystemTimeAsFileTimeoInitializeSListHeadIsDebuggerPresentGetModuleHandleW;memcmp] f2-+/ @@ @@@0@ @ @ @`@0@H@`@@@@(@P@x@@@@@@vmm $@4PD!\0NdNp^^mm:!:!W!W!p!p!V"`"# #8$(@$%8%&T&i(Dp((h())))**+h+l-l-----H. H.I. P.d10p1I3TP3D4pD44444R5R5(7(7U7`7771818N8$N8_84_8Z:PZ:u:$::d:R=R=q=q===fApA0E0EVVWW*Y0@YYHYY\YQ`tQ``` aaeapa hhkk|mmm$mdn<dn.rT.rLrhLrrxrrrrsssEtPtuu u u9u ȥХإx@X`hp8HPXhx (08@HPX`)0)  *H (0(10  `He0\ +7N0L0 +70 010  `He (PjaqS^+sgP([Y00@`ҜL^ͩ0  *H  0b1 0 UUS10U  DigiCert Inc10U www.digicert.com1!0UDigiCert Trusted Root G40 210429000000Z 360428235959Z0i1 0 UUS10U DigiCert, Inc.1A0?U8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA10"0  *H 0 մ/B(x]9YB3=pŻą&0h\4$KOxCgROẂ>Mp$d}4}LWkC;GZL %Ӌ eI5=Q!xE.,IpB2ehMLHRhW]eO,HV5.7|2t9`ֹ1ܭ#GGnmjg-ҽD; Ǜ2Zj`TI\o&ղ8Αoa4\E(6*f(_s΋&%\Lb^3 +6yue̻HPwPFaX|<(9Է SGu00v[K]taM?v޿Xr)Am&vhAX&+MYxρJ>@G_ɁPs#!Y`dT!8|fx8E0OcOL SA|X=G2 l< VY0U0U00Uh7;_a{eNB0U#0q]dL.g?纘O0U0U% 0 +0w+k0i0$+0http://ocsp.digicert.com0A+05http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0CU<0:08642http://crl3.digicert.com/DigiCertTrustedRootG4.crl0U 00g 0g 0  *H  :#D=v:VH4,tfrʯl0'DK|&7:]Hm?I'EPv~7q"Zj PyH~؀aVv_C>v9=ԙJ(_&XH'?v`\ 98Nn6!SZj>C3O8Tm]@3|╲!usRF4Kov7,?&C p)5\8U7 1.\9qᾜ &gN_zI.t<V+#{pk栺:?ERAHKMD@(V*/ d<3(<ˏ ;{˷w(?/"lA\flņ&3 Kjj@0HK4Q Y mP+JtRH!W;Eanh&`ȯc:VxN0`0H vɽt{0  *H  0i1 0 UUS10U DigiCert, Inc.1A0?U8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA10 221202000000Z 251202235959Z0e1 0 UUS10U California10U Pleasanton10U  OpenVPN Inc.10U OpenVPN Inc.0"0  *H 0 ˄xr[~(ִO8-r^8exolS )RFf< #U͑ȟXJ]"&yYf3u[:{@i (ѝJAUx˚Ȁ5<4TUj _f+cr)-n$^]V^BV[$K}3&_ HrhSvawK 0#}rhޒP"9A*TbFXX. > vułR S[XQ9c3NQZ/V4AHah[PQq 5P700U#0h7;_a{eNB0UFm %7ou0U0U% 0 +0U00SQOMhttp://crl3.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0SQOMhttp://crl4.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crl0>U 70503g 0)0'+http://www.digicert.com/CPS0+00$+0http://ocsp.digicert.com0\+0Phttp://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt0 U00  *H  /zxJQjv \ Tze[ vIkդFn B&idD-bL;yIڬJf2V;;RG12qsy9E798mc2JoǦ&r$V* DT׸' Tv++?m@nzI @[cfNfAg 5udJꕨdWDiXk5XZ(R ,|k)WYÎnus [F71[R8I;iB:8]kjOK~CCfF)fgs@-PMd4ey:;dU|Oe@߁EުsbmlRk_?D'< 03 H~⟙n `EaE Jg~l0lFF ˻l2K"f_W,6Xc4#)u ֌vAkbm$e\ Ks P C(Gskپ7M+l!P8"11g0c0}0i1 0 UUS10U DigiCert, Inc.1A0?U8DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 vɽt{0  `He|0 +7 100 *H  1  +70 +7 10  +70/ *H  1" qZ iQOfW Lu-o7uc&0  *H -<pnWQmk YTC^pg3#DpH3l{(1v^tf.5Zt"it0j] OMPL(K(1(񰾸#/9< N3hukFٱb q;ޞB+|שgM\3;0Z֭ä)]\].O~ ]ef8TvYHu8,0wG#d^ɶ*ddL&& r4<0}| )%u!ě#{\ËcfBlvGjT(J58Xsע~xD3;'v1 X7Ky]qePBkظ?YPKיk[*Aku+'p aL(*%Z1G`SJJ o&F=ekBR[nHVWftdDBq)1n8RQI@:I20221202134149Z00 MirK<*J=)=Z0  *H  0c1 0 UUS10U DigiCert, Inc.1;09U2DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA0 220921000000Z 331121235959Z0F1 0 UUS10U DigiCert1$0"UDigiCert Timestamp 2022 - 20"0  *H 0 &:Ʃk ۡt3&U6mU a w=/kdב81r:U3a(ېc\S:-B&xxzVdS*PHi /};S@rI(LVa:}nf\/MhjyF)>&LfȻP8 匔]Z{@noGy> ^f $ҜOnx(?P75xX9L~M­~-+F9Oq.KO{6DU6|1R{Z~%sj!-cYM/'ҫ8fQkSC9dV mdxs!/. ׁ]Kn1)AeX.)ad lQ` %S;j9bօٍyb{gxƈȰn2y Y,|{dĸS^_U})YN]Es~:w00U0 U00U% 0 +0 U 00g 0  `Hl0U#0mM/s)v/uj o0Uba1 =*R0ZUS0Q0OMKIhttp://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0+00$+0http://ocsp.digicert.com0X+0Lhttp://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0  *H  U*FxW70uOօ#9%rwd6IQ,xcU F9iʛ)?x|Sbaf*EJB+P0 - y }jS` 裸׭Aߝ_J:R I56YTҲ~^ vTtmg+v&8D Yk">D!?|Hؒ OC_jY'b+AS4g&2{\B KJӘE`3#EGθBGA6qwtN.Z"OQ/_'.W`xVj•KȂ|qNzlZȟ\C*bx۽[ p~x]G,c%8?:~,LMrU,'aw0067$T|G(f*^[0  *H  0b1 0 UUS10U  DigiCert Inc10U www.digicert.com1!0UDigiCert Trusted Root G40 220323000000Z 370322235959Z0c1 0 UUS10U DigiCert, Inc.1;09U2DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA0"0  *H 0 Ɔ5I=rIQU%7Q҃ўLm̃ZDB_h} 3P &smW}Cs+"=+>BgQ=V(-ӱue)iِF{DA|jWz7y]dRvGa_T !hn7!@_J}9gcl6 \dt@rźNXMy׏s,9H1W)'.NvU&p&G CCc{un'%:8;["ق*ǒ>sZlR+Xt@(sCJk8)ʪsBhF:^KvQɌ ;["&}_#dc>t? v]Fu`X (T]^0Fvk 3ͱ]0Y0U00UmM/s)v/uj o0U#0q]dL.g?纘O0U0U% 0 +0w+k0i0$+0http://ocsp.digicert.com0A+05http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0CU<0:08642http://crl3.digicert.com/DigiCertTrustedRootG4.crl0 U 00g 0  `Hl0  *H  }YoD"~f!B.M0SοP]K)p )ii>` \[m %41gͶoPLb Vs"%Εi?GwrtO,zC_`Of,d&l|p |屮uOZ](TՊqver#'D'$&*yV Ečrjq Ķ͇$OIwfrKR7~S;I9z%c',=?kfAO@!!@з$x:䞭4q&k8sO?;xLĕ{ _39Axz8#(_+~Fu,',&o{6Yp7 O'`gfU:)+A:1b  Wټ2]# v&evB) G+UT++/DJ78+|00u-P@Z0  *H  0e1 0 UUS10U  DigiCert Inc10U www.digicert.com1$0"UDigiCert Assured ID Root CA0 220801000000Z 311109235959Z0b1 0 UUS10U  DigiCert Inc10U www.digicert.com1!0UDigiCert Trusted Root G40"0  *H 0 sh޻]J<0"0i3§%.!=Y)=Xvͮ{ 08VƗmy_pUA2s*n|!LԼu]xf:1D3@ZI橠gݤ'O9X$\Fdivv=Y]BvizHftKc:=E%D+~am3K}Ï!Ռp,A`cDvb~d3щίCw !T)%lRQGt&Auz_?ɼA[P1r" |Lu?c!_ QkoOE_ ~ &i/-٩:060U00Uq]dL.g?纘O0U#0E뢯˂1-Q!m0U0y+m0k0$+0http://ocsp.digicert.com0C+07http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0EU>0<0:864http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0U  00U 0  *H  pC\U8_t=W,^"iT"wmJz/-8r$RN*-V0z^CDC!rH˝Ow'DY/ 4<LJL@5FjiTV=wZ\ToP=v ho 5` X@cŘ"YUk'lvo#-~qj#k"T-'~:𶇖[\MsW^(⹔1v0r0w0c1 0 UUS10U DigiCert, Inc.1;09U2DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA MirK<*J=)=Z0  `He0 *H  1  *H  0 *H  1 221202134149Z0+ *H   1000"M35|s0/ *H  1" (nCR  a (PwP 1|xyj07 *H  /1(0&0$0" 2( &:Ox-dLuW#0  *H \Չ- !mЭV٣MpK"Im I~IN]c*Ĥשعqklxg/"$f/i|9ʰQjK߶]#7rlzqtƩAҺsھ r6(]56zg?lh;.?"<_P, #4ǫ%m0FA<<fϱft}^/wlhBP'Výp=FPt<،ɐڪ3vK׾6oa ('5yPDHKOx#{n$Gm5&xo*V-DeTQHHODJes)e @yFnt8HgzI1ax]Fvnsߎޓud̄;şscGX` mitmproxy_rs-0.12.8/benches/plot.py000066400000000000000000000236111511036467100173240ustar00rootroot00000000000000import csv import json import pprint import time import matplotlib.pyplot as plt import numpy as np Poly = np.polynomial.polynomial.Polynomial COLORS = ["red", "green", "blue", "orange", "purple", "gray"] def plot_time(data, name, title): xs = data["x"] ys = data["ys"] sizes = data["sizes"] packet_nums = [*sorted(set(xs))] fig, ax = plt.subplots() for i, size in enumerate(sizes): y_means = [] for packet_num in packet_nums: xy = [(x, y) for (x, y) in zip(xs, ys[str(size)]) if x == packet_num] y = np.array([xy[1] for xy in xy]) y_means.append(np.mean(y)) ax.plot(xs, ys[str(size)], "o", color=COLORS[i], alpha=0.3, label="Runtime") ax.plot(packet_nums, y_means, "--", color=COLORS[i], alpha=0.3, linewidth=2, label="Runtime (average)") ax.set_title(title) ax.set_xlim(min(packet_nums) / 2, 2 * max(packet_nums)) ax.set_xlabel("Number of packets") ax.set_ylabel("Execution time /s") ax.set_xscale("log") ax.set_yscale("log") ax.legend() fig.savefig(name, dpi=fig.dpi * 2) def plot_throughput(data, name, title): xs = data["x"] ys = data["ys"] sizes = data["sizes"] packet_nums = [*sorted(set(xs))] fig, ax = plt.subplots() for i, size in enumerate(sizes): pps_means = [] for packet_num in packet_nums: xy = [(x, y) for (x, y) in zip(xs, ys[str(size)]) if x == packet_num] x = np.array([xy[0] for xy in xy]) y = np.array([xy[1] for xy in xy]) pps = x / y pps_means.append(np.mean(pps)) y = np.array(ys[str(size)]) pps = xs / y ax.plot(xs, pps, "o", color=COLORS[i], alpha=0.3, label="Throughput") ax.plot(packet_nums, pps_means, "--", color=COLORS[i], alpha=0.3, linewidth=2, label="Throughput (average)") ax.set_title(title) ax.set_xlim(min(packet_nums) / 2, 2 * max(packet_nums)) ax.set_xlabel("Number of packets") ax.set_ylabel("Throughput /(packets/s)") ax.set_xscale("log") ax.legend() fig.savefig(name, dpi=fig.dpi * 2) def plot2_time(py_data, wg_data, suffix): py_xs = py_data["x"] py_ys = py_data["ys"] py_sizes = py_data["sizes"] wg_xs = wg_data["x"] wg_ys = wg_data["ys"] wg_sizes = wg_data["sizes"] assert py_sizes == wg_sizes packet_nums = [*sorted(set.union(set(py_xs), set(wg_xs)))] fig, ax = plt.subplots() for i, size in enumerate(py_sizes): py_means = [] wg_means = [] for packet_num in packet_nums: py_xy = [(x, y) for (x, y) in zip(py_xs, py_ys[str(size)]) if x == packet_num] py_y = np.array([xy[1] for xy in py_xy]) py_means.append(np.mean(py_y)) wg_xy = [(x, y) for (x, y) in zip(wg_xs, wg_ys[str(size)]) if x == packet_num] wg_y = np.array([xy[1] for xy in wg_xy]) wg_means.append(np.mean(wg_y)) py_color = COLORS[i] ax.plot(py_xs, py_ys[str(size)], "o", color=py_color, alpha=0.3, label="Python asyncio") ax.plot(packet_nums, py_means, "--", color=py_color, alpha=0.3, linewidth=2, label="Python asyncio (average)") wg_color = COLORS[len(COLORS) - i - 1] ax.plot(wg_xs, wg_ys[str(size)], "o", color=wg_color, alpha=0.3, label="mitmproxy_wireguard") ax.plot( packet_nums, wg_means, "--", color=wg_color, alpha=0.3, linewidth=2, label="mitmproxy_wireguard (average)" ) ax.set_title("Echo server runtime comparison") ax.set_xlim(min(packet_nums) / 2, 2 * max(packet_nums)) ax.set_xlabel("Number of packets") ax.set_ylabel("Execution time /s") ax.set_xscale("log") ax.set_yscale("log") ax.legend() fig.savefig(f"comp_data_{suffix}.png", dpi=fig.dpi * 2) def plot2_throughput(py_data, wg_data, suffix): py_xs = py_data["x"] py_ys = py_data["ys"] py_sizes = py_data["sizes"] wg_xs = wg_data["x"] wg_ys = wg_data["ys"] wg_sizes = wg_data["sizes"] assert py_sizes == wg_sizes packet_nums = [*sorted(set.union(set(py_xs), set(wg_xs)))] fig, ax = plt.subplots() for i, size in enumerate(py_sizes): py_means = [] wg_means = [] for packet_num in packet_nums: py_xy = [(x, y) for (x, y) in zip(py_xs, py_ys[str(size)]) if x == packet_num] py_x = np.array([xy[0] for xy in py_xy]) py_y = np.array([xy[1] for xy in py_xy]) py_means.append(np.mean(py_x / py_y)) wg_xy = [(x, y) for (x, y) in zip(wg_xs, wg_ys[str(size)]) if x == packet_num] wg_x = np.array([xy[0] for xy in wg_xy]) wg_y = np.array([xy[1] for xy in wg_xy]) wg_means.append(np.mean(wg_x / wg_y)) py_y = np.array(py_ys[str(size)]) wg_y = np.array(wg_ys[str(size)]) py_pps = py_xs / py_y wg_pps = wg_xs / wg_y py_max = np.max(py_pps) wg_max = np.max(wg_pps) py_color = COLORS[i] ax.plot(py_xs, py_pps, "o", color=py_color, alpha=0.3, label="Python asyncio") ax.plot(packet_nums, py_means, "--", color=py_color, alpha=0.3, linewidth=2, label="Python asyncio (average)") ax.hlines( xmin=1e2, xmax=1e6, y=py_max, linestyles="solid", color=py_color, alpha=0.3, linewidth=2, label="Python asyncio (best)", ) wg_color = COLORS[len(COLORS) - i - 1] ax.plot(wg_xs, wg_pps, "o", color=wg_color, alpha=0.3, label="mitmproxy_wireguard") ax.plot( packet_nums, wg_means, "--", color=wg_color, alpha=0.3, linewidth=2, label="mitmproxy_wireguard (average)" ) ax.hlines( xmin=1e2, xmax=1e6, y=wg_max, linestyles="solid", color=wg_color, alpha=0.3, linewidth=2, label="mitmproxy_wireguard (best)", ) ax.set_title("Echo server throughput comparison") ax.set_xlim(min(packet_nums) / 2, 2 * max(packet_nums)) ax.set_xlabel("Number of packets") ax.set_ylabel("Throughput /(packets/s)") ax.set_xscale("log") ax.legend() fig.savefig(f"comp_tp_{suffix}.png", dpi=fig.dpi * 2) def stats_throughput(py_data, wg_data, suffix): py_xs = py_data["x"] py_ys = py_data["ys"] py_sizes = py_data["sizes"] wg_xs = wg_data["x"] wg_ys = wg_data["ys"] wg_sizes = wg_data["sizes"] assert py_sizes == wg_sizes packet_nums = [*sorted(set.union(set(wg_xs), set(py_xs)))] print(suffix) for size in py_sizes: py_file = open(f"py_{suffix}_{size}B.csv", "w", newline="") wg_file = open(f"wg_{suffix}_{size}B.csv", "w", newline="") columns = ["packets", "tp_avg", "tp_sdv", "tp_min", "tp_max"] py_csv = csv.DictWriter(py_file, columns, delimiter=",") wg_csv = csv.DictWriter(wg_file, columns, delimiter=",") py_csv.writeheader() wg_csv.writeheader() for packet_num in packet_nums: py_xy = [(x, y) for (x, y) in zip(py_xs, py_ys[str(size)]) if x == packet_num] wg_xy = [(x, y) for (x, y) in zip(wg_xs, wg_ys[str(size)]) if x == packet_num] py_x = np.array([xy[0] for xy in py_xy]) py_y = np.array([xy[1] for xy in py_xy]) wg_x = np.array([xy[0] for xy in wg_xy]) wg_y = np.array([xy[1] for xy in wg_xy]) py_pps = py_x / py_y wg_pps = wg_x / wg_y py_mean = np.mean(py_pps) py_sdev = np.std(py_pps) py_min = np.min(py_pps) py_max = np.max(py_pps) wg_mean = np.mean(wg_pps) wg_min = np.min(wg_pps) wg_max = np.max(wg_pps) wg_sdev = np.std(wg_pps) print(" \tnum\tavg\tsdv\tmin\tmax") print(f"py\t{packet_num}\t{py_mean}\t{py_sdev}\t{py_min}\t{py_max}") print(f"wg\t{packet_num}\t{wg_mean}\t{wg_sdev}\t{wg_min}\t{wg_max}") py_csv.writerow(dict(packets=packet_num, tp_avg=py_mean, tp_sdv=py_sdev, tp_min=py_min, tp_max=py_max)) wg_csv.writerow(dict(packets=packet_num, tp_avg=wg_mean, tp_sdv=wg_sdev, tp_min=wg_min, tp_max=wg_max)) py_x = np.array(py_xs) py_y = np.array(py_ys[str(size)]) wg_x = np.array(wg_xs) wg_y = np.array(wg_ys[str(size)]) py_pps = py_x / py_y wg_pps = wg_x / wg_y py_mean = np.mean(py_pps) py_sdev = np.std(py_pps) py_min = np.min(py_pps) py_max = np.max(py_pps) wg_mean = np.mean(wg_pps) wg_min = np.min(wg_pps) wg_max = np.max(wg_pps) wg_sdev = np.std(wg_pps) print(" \ttotal\tavg\tsdv\tmin\tmax") print(f"py\t \t{py_mean}\t{py_sdev}\t{py_min}\t{py_max}") print(f"wg\t \t{wg_mean}\t{wg_sdev}\t{wg_min}\t{wg_max}") py_csv.writerow(dict(packets="total", tp_avg=py_mean, tp_sdv=py_sdev, tp_min=py_min, tp_max=py_max)) wg_csv.writerow(dict(packets="total", tp_avg=wg_mean, tp_sdv=wg_sdev, tp_min=wg_min, tp_max=wg_max)) py_file.close() wg_file.close() def main(): for suffix in ["local", "nonlocal"]: with open(f"py_data_{suffix}.json") as file: py_data = json.load(file) with open(f"wg_data_{suffix}.json") as file: wg_data = json.load(file) # plot raw runtime data plot_time(py_data, f"py_data_{suffix}.png", "Python asyncio") plot_time(wg_data, f"wg_data_{suffix}.png", "mitmproxy_wireguard") # plot throughput data plot_throughput(py_data, f"py_tp_{suffix}.png", "Python asyncio") plot_throughput(wg_data, f"wg_tp_{suffix}.png", "mitmproxy_wireguard") # plot runtime and throughput comparisons plot2_time(py_data, wg_data, suffix) plot2_throughput(py_data, wg_data, suffix) # write throughput statistics stats_throughput(py_data, wg_data, suffix) if __name__ == "__main__": main() mitmproxy_rs-0.12.8/benches/process.rs000077500000000000000000000047001511036467100200210ustar00rootroot00000000000000use criterion::{criterion_group, criterion_main, Criterion}; #[cfg(any(windows, target_os = "macos"))] use mitmproxy::processes; #[allow(unused_variables)] fn criterion_benchmark(c: &mut Criterion) { #[cfg(target_os = "macos")] let test_executable = std::path::PathBuf::from("/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder"); #[cfg(windows)] let test_executable = { let mut test_executable = std::path::PathBuf::from(env!("CARGO_MANIFEST_DIR")); test_executable.push("benches\\openvpnserv.exe"); test_executable }; #[cfg(any(windows, target_os = "macos"))] { c.bench_function("active_executables", |b| { b.iter(processes::active_executables) }); c.bench_function("visible_windows", |b| { b.iter(processes::bench::visible_windows) }); c.bench_function("get_png", |b| { b.iter(|| { processes::bench::IconCache::default() .get_png(test_executable.clone()) .unwrap(); }) }); let mut cache = processes::bench::IconCache::default(); cache.get_png(test_executable.clone()).unwrap(); c.bench_function("get_png (cached)", |b| { b.iter(|| { cache.get_png(test_executable.clone()).unwrap(); }) }); } #[cfg(windows)] { let pid = std::process::id(); c.bench_function("is_critical", |b| { b.iter(|| processes::bench::get_is_critical(pid)) }); c.bench_function("get_process_name", |b| { b.iter(|| processes::bench::get_process_name(pid)) }); c.bench_function("enumerate_pids", |b| { b.iter(processes::bench::enumerate_pids) }); c.bench_function("get_display_name", |b| { b.iter(|| processes::bench::get_display_name(&test_executable)) }); } #[cfg(target_os = "macos")] { c.bench_function("tiff_data_for_executable", |b| { b.iter(|| processes::bench::tiff_data_for_executable(&test_executable).unwrap()) }); let tiff = processes::bench::tiff_data_for_executable(&test_executable).unwrap(); c.bench_function("tiff_to_png", |b| { b.iter(|| { processes::bench::tiff_to_png(&tiff); }) }); } } criterion_group!(benches, criterion_benchmark); criterion_main!(benches); mitmproxy_rs-0.12.8/benches/py_echo_client.py000066400000000000000000000045071511036467100213350ustar00rootroot00000000000000import argparse import asyncio import json import pprint import timeit # generate unique test packets with the given length def gen_data(pnum: int, psize: int) -> list[bytes]: packets = [] for i in range(pnum): packet = (f"{i:04d}".encode() * (psize // 4 + 1))[:psize] assert len(packet) == psize packets.append(packet) return packets async def work(host: str, port: int, packets: list[bytes]): r, w = await asyncio.open_connection(host, port) bytes_back = [] for packet in packets: w.write(packet) await w.drain() recv_len = 0 recv_bytes = [] while recv_len != len(packet): read = await r.read(4096) recv_bytes.extend(read) recv_len += len(read) bytes_back.append(bytes(recv_bytes)) w.close() await w.wait_closed() try: assert packets == bytes_back except AssertionError: bytes_sent = sum(map(len, packets)) bytes_received = sum(map(len, bytes_back)) pprint.pprint(packets) pprint.pprint(bytes_back) print(f"Bytes Sent: {bytes_sent}") print(f"Bytes Received: {bytes_received}") print(f"Difference: {bytes_sent - bytes_received}") raise def main(): parser = argparse.ArgumentParser() parser.add_argument("name", choices=["local", "nonlocal"]) parser.add_argument("host", default="0.0.0.0") parser.add_argument("port", default=51820) args = parser.parse_args() # host = "192.168.86.134" name = args.name host = args.host port = args.port reps = 10 numbs = [1000, 2000, 5000, 10000, 20000, 50000, 100000] sizes = [1000] x = list() ys = dict() for numb in numbs: x.extend([numb] * reps) for size in sizes: ys[size] = list() for numb in numbs: data = gen_data(numb, size) timer = timeit.Timer(lambda: asyncio.run(work(host, port, data), debug=True), "gc.enable()") print(f"Packet number: {numb}") print(f"Packet size: {size} bytes") times = timer.repeat(reps, number=1) ys[size].extend(times) print() with open(f"py_data_{name}.json", "w") as file: json.dump(dict(x=x, ys=ys, sizes=sizes), file, indent=4) if __name__ == "__main__": main() mitmproxy_rs-0.12.8/benches/py_echo_server.py000066400000000000000000000023361511036467100213630ustar00rootroot00000000000000import asyncio import logging import signal import sys import time LOG_FORMAT = "[%(asctime)s %(levelname)-5s %(name)s] %(message)s" TIME_FORMAT = "%Y-%m-%dT%H:%M:%SZ" try: from rich import print from rich.logging import RichHandler logging.basicConfig(format=LOG_FORMAT, datefmt=TIME_FORMAT, handlers=[RichHandler()]) except ImportError: logging.basicConfig(format=LOG_FORMAT, datefmt=TIME_FORMAT) logging.Formatter.convert = time.gmtime logger = logging.getLogger() logger.setLevel(logging.DEBUG) async def main(): server = await asyncio.start_server(handle_connection, "0.0.0.0", 51820) def stop(*_): server.close() signal.signal(signal.SIGINT, lambda *_: sys.exit()) signal.signal(signal.SIGINT, stop) await server.wait_closed() async def handle_connection(r: asyncio.StreamReader, w: asyncio.StreamWriter): logger.debug(f"Connection established: {r} / {w}") while True: data = await r.read(4096) # check if the connection was closed if len(data) == 0: break w.write(data) await w.drain() w.close() logger.debug(f"Connection closed: {r} / {w}") if __name__ == "__main__": asyncio.run(main(), debug=True) mitmproxy_rs-0.12.8/benches/wg_echo_client.py000066400000000000000000000044521511036467100213210ustar00rootroot00000000000000import argparse import asyncio import json import pprint import timeit # generate unique test packets with the given length def gen_data(pnum: int, psize: int) -> list[bytes]: packets = [] for i in range(pnum): packet = (f"{i:04d}".encode() * (psize // 4 + 1))[:psize] assert len(packet) == psize packets.append(packet) return packets async def work(host: str, port: int, packets: list[bytes]): r, w = await asyncio.open_connection(host, port) bytes_back = [] for packet in packets: w.write(packet) await w.drain() recv_len = 0 recv_bytes = [] while recv_len != len(packet): read = await r.read(4096) recv_bytes.extend(read) recv_len += len(read) bytes_back.append(bytes(recv_bytes)) w.close() await w.wait_closed() try: assert packets == bytes_back except AssertionError: bytes_sent = sum(map(len, packets)) bytes_received = sum(map(len, bytes_back)) pprint.pprint(packets) pprint.pprint(bytes_back) print(f"Bytes Sent: {bytes_sent}") print(f"Bytes Received: {bytes_received}") print(f"Difference: {bytes_sent - bytes_received}") raise def main(): parser = argparse.ArgumentParser() parser.add_argument("name", choices=["local", "nonlocal"]) parser.add_argument("host", default="10.0.0.42") parser.add_argument("port", default=1234) args = parser.parse_args() name = args.name host = args.host port = args.port reps = 10 numbs = [1000, 2000, 5000, 10000, 20000, 50000, 100000] sizes = [1000] x = list() ys = dict() for numb in numbs: x.extend([numb] * reps) for size in sizes: ys[size] = list() for numb in numbs: data = gen_data(numb, size) timer = timeit.Timer(lambda: asyncio.run(work(host, port, data), debug=True), "gc.enable()") print(f"Packet number: {numb}") print(f"Packet size: {size} bytes") times = timer.repeat(reps, number=1) ys[size].extend(times) print() with open(f"wg_data_{name}.json", "w") as file: json.dump(dict(x=x, ys=ys, sizes=sizes), file, indent=4) if __name__ == "__main__": main() mitmproxy_rs-0.12.8/benches/wg_echo_server.py000066400000000000000000000037641511036467100213560ustar00rootroot00000000000000import asyncio import logging import signal import sys import time import mitmproxy_rs LOG_FORMAT = "[%(asctime)s %(levelname)-5s %(name)s] %(message)s" TIME_FORMAT = "%Y-%m-%dT%H:%M:%SZ" try: from rich import print from rich.logging import RichHandler logging.basicConfig(format=LOG_FORMAT, datefmt=TIME_FORMAT, handlers=[RichHandler()]) except ImportError: logging.basicConfig(format=LOG_FORMAT, datefmt=TIME_FORMAT) logging.Formatter.convert = time.gmtime logger = logging.getLogger() logger.setLevel(logging.DEBUG) # (private key, public key) server_keypair = ( "EG47ZWjYjr+Y97TQ1A7sVl7Xn3mMWDnvjU/VxU769ls=", "mitmV5Wo7pRJrHNAKhZEI0nzqqeO8u4fXG+zUbZEXA0=", ) client_keypair = ( "qG8b7LI/s+ezngWpXqj5A7Nj988hbGL+eQ8ePki0iHk=", "Test1sbpTFmJULgSlJ5hJ1RdzsXWrl3Mg7k9UTN//jE=", ) async def main(): server = await mitmproxy_rs.start_wireguard_server( "0.0.0.0", 51820, server_keypair[0], [client_keypair[1]], handle_connection, receive_datagram, ) print( f""" ------------------------------------------------------------ [Interface] PrivateKey = {client_keypair[0]} Address = 10.0.0.1/32 MTU = 1420 [Peer] PublicKey = {server_keypair[1]} AllowedIPs = 10.0.0.0/24 Endpoint = 127.0.0.1:51820 ------------------------------------------------------------ """ ) def stop(*_): server.close() signal.signal(signal.SIGINT, lambda *_: sys.exit()) signal.signal(signal.SIGINT, stop) await server.wait_closed() async def handle_connection(rw: mitmproxy_rs.TcpStream): logger.debug(f"Connection established: {rw}") while True: data = await rw.read(4096) # check if the connection was closed if len(data) == 0: break rw.write(data) await rw.drain() rw.close() logger.debug(f"Connection closed: {rw}") def receive_datagram(_data, _src_addr, _dst_addr): pass if __name__ == "__main__": asyncio.run(main(), debug=True) mitmproxy_rs-0.12.8/mitmproxy-contentviews/000077500000000000000000000000001511036467100211605ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-contentviews/Cargo.toml000066400000000000000000000012561511036467100231140ustar00rootroot00000000000000[package] name = "mitmproxy-contentviews" license = "MIT" authors.workspace = true version.workspace = true repository.workspace = true edition.workspace = true rust-version.workspace = true publish.workspace = true [lints] workspace = true [dependencies] anyhow = { version = "1.0.100", features = ["backtrace"] } log = "0.4.28" data-encoding = "2.8.0" pretty-hex = "0.4.1" mitmproxy-highlight = { path = "../mitmproxy-highlight" } serde = { version = "1.0", features = ["derive"] } serde_yaml = "0.9" rmp-serde = "1.1" protobuf = "3.7.2" regex = "1.11.3" flate2 = "1.1" protobuf-parse = "3.7" [dev-dependencies] criterion = "0.7.0" [[bench]] name = "contentviews" harness = false mitmproxy_rs-0.12.8/mitmproxy-contentviews/README.md000066400000000000000000000004541511036467100224420ustar00rootroot00000000000000# mitmproxy-contentviews This crate contains various contentviews for mitmproxy, exposed to Python via [mitmproxy-rs/src/contentviews.rs]. For additional documentation, see https://docs.mitmproxy.org/dev/addons/contentviews/. [mitmproxy-rs/src/contentviews.rs]: ../mitmproxy-rs/src/contentviews.rs mitmproxy_rs-0.12.8/mitmproxy-contentviews/benches/000077500000000000000000000000001511036467100225675ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-contentviews/benches/contentviews.rs000066400000000000000000000041771511036467100256760ustar00rootroot00000000000000use criterion::{criterion_group, criterion_main, Criterion}; use mitmproxy_contentviews::{test::TestMetadata, MsgPack, Prettify, Protobuf, Reencode}; use std::hint::black_box; fn criterion_benchmark(c: &mut Criterion) { c.bench_function("protobuf-prettify", |b| { b.iter(|| { Protobuf.prettify(black_box(b"\n\x13gRPC testing server\x12\x07\n\x05Index\x12\x07\n\x05Empty\x12\x0c\n\nDummyUnary\x12\x0f\n\rSpecificError\x12\r\n\x0bRandomError\x12\x0e\n\x0cHeadersUnary\x12\x11\n\x0fNoResponseUnary"), &TestMetadata::default()).unwrap() }) }); c.bench_function("protobuf-reencode", |b| { b.iter(|| { Protobuf.reencode( black_box("1: gRPC testing server\n2:\n- 1: Index\n- 1: Empty\n- 1: DummyUnary\n- 1: SpecificError\n- 1: RandomError\n- 1: HeadersUnary\n- 1: NoResponseUnary\n"), &TestMetadata::default() ).unwrap() }) }); const TEST_MSGPACK: &[u8] = &[ 0x83, // map with 3 elements 0xa4, 0x6e, 0x61, 0x6d, 0x65, // "name" 0xa8, 0x4a, 0x6f, 0x68, 0x6e, 0x20, 0x44, 0x6f, 0x65, // "John Doe" 0xa3, 0x61, 0x67, 0x65, // "age" 0x1e, // 30 0xa4, 0x74, 0x61, 0x67, 0x73, // "tags" 0x92, // array with 2 elements 0xa9, 0x64, 0x65, 0x76, 0x65, 0x6c, 0x6f, 0x70, 0x65, 0x72, // "developer" 0xa4, 0x72, 0x75, 0x73, 0x74, // "rust" ]; c.bench_function("msgpack-prettify", |b| { b.iter(|| { MsgPack .prettify(black_box(TEST_MSGPACK), &TestMetadata::default()) .unwrap() }) }); c.bench_function("msgpack-reencode", |b| { b.iter(|| { MsgPack .reencode( black_box( "\ name: John Doe\n\ age: 30\n\ tags:\n\ - developer\n\ - rust\n\ ", ), &TestMetadata::default(), ) .unwrap() }) }); } criterion_group!(benches, criterion_benchmark); criterion_main!(benches); mitmproxy_rs-0.12.8/mitmproxy-contentviews/src/000077500000000000000000000000001511036467100217475ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-contentviews/src/hex_dump.rs000066400000000000000000000024301511036467100241250ustar00rootroot00000000000000use crate::hex_stream::is_binary; use crate::{Metadata, Prettify}; use pretty_hex::{HexConfig, PrettyHex}; pub struct HexDump; impl Prettify for HexDump { fn name(&self) -> &'static str { "Hex Dump" } fn prettify(&self, data: &[u8], _metadata: &dyn Metadata) -> anyhow::Result { Ok(format!( "{:?}", data.hex_conf(HexConfig { title: false, ascii: true, width: 16, group: 4, chunk: 1, max_bytes: usize::MAX, display_offset: 0, }) )) } fn render_priority(&self, data: &[u8], _metadata: &dyn Metadata) -> f32 { if is_binary(data) { 0.5 } else { 0.0 } } } #[cfg(test)] mod tests { use super::*; use crate::test::TestMetadata; #[test] fn prettify_simple() { let result = HexDump.prettify(b"abcd", &TestMetadata::default()).unwrap(); assert_eq!( result, "0000: 61 62 63 64 abcd" ); } #[test] fn prettify_empty() { let result = HexDump.prettify(b"", &TestMetadata::default()).unwrap(); assert_eq!(result, ""); } } mitmproxy_rs-0.12.8/mitmproxy-contentviews/src/hex_stream.rs000066400000000000000000000043631511036467100244620ustar00rootroot00000000000000use crate::{Metadata, Prettify, Reencode}; use anyhow::{Context, Result}; pub struct HexStream; pub(crate) fn is_binary(data: &[u8]) -> bool { if data.is_empty() { return false; } let ratio = data .iter() .take(100) .filter(|&&b| b < 9 || (13 < b && b < 32) || b > 126) .count() as f64 / data.len().min(100) as f64; ratio > 0.3 } impl Prettify for HexStream { fn name(&self) -> &'static str { "Hex Stream" } fn prettify(&self, data: &[u8], _metadata: &dyn Metadata) -> Result { Ok(data_encoding::HEXLOWER.encode(data)) } fn render_priority(&self, data: &[u8], _metadata: &dyn Metadata) -> f32 { if is_binary(data) { 0.4 } else { 0.0 } } } impl Reencode for HexStream { fn reencode(&self, data: &str, _metadata: &dyn Metadata) -> Result> { let data = data.trim_end_matches(['\n', '\r']); if data.len() % 2 != 0 { anyhow::bail!("Invalid hex string: uneven number of characters"); } data_encoding::HEXLOWER_PERMISSIVE .decode(data.as_bytes()) .context("Invalid hex string") } } #[cfg(test)] mod tests { use super::*; use crate::test::TestMetadata; #[test] fn test_hex_stream() { let result = HexStream .prettify(b"foo", &TestMetadata::default()) .unwrap(); assert_eq!(result, "666f6f"); } #[test] fn test_hex_stream_empty() { let result = HexStream.prettify(b"", &TestMetadata::default()).unwrap(); assert_eq!(result, ""); } #[test] fn test_hex_stream_reencode() { let data = "666f6f"; let result = HexStream.reencode(data, &TestMetadata::default()).unwrap(); assert_eq!(result, b"foo"); } #[test] fn test_hex_stream_reencode_with_newlines() { let data = "666f6f\r\n"; let result = HexStream.reencode(data, &TestMetadata::default()).unwrap(); assert_eq!(result, b"foo"); } #[test] fn test_hex_stream_reencode_uneven_chars() { let data = "666f6"; let result = HexStream.reencode(data, &TestMetadata::default()); assert!(result.is_err()); } } mitmproxy_rs-0.12.8/mitmproxy-contentviews/src/lib.rs000066400000000000000000000073151511036467100230710ustar00rootroot00000000000000mod hex_dump; mod hex_stream; mod msgpack; mod protobuf; mod test_inspect_metadata; pub use hex_dump::HexDump; pub use hex_stream::HexStream; pub use msgpack::MsgPack; pub use protobuf::Protobuf; pub use protobuf::GRPC; pub use test_inspect_metadata::TestInspectMetadata; use anyhow::Result; use mitmproxy_highlight::Language; use serde::Serialize; use std::path::Path; pub trait Metadata { /// The HTTP `content-type` of this message. fn content_type(&self) -> Option<&str>; /// Get an HTTP header value by name. /// `name` is case-insensitive. fn get_header(&self, name: &str) -> Option; /// Get the path from the flow's request. fn get_path(&self) -> Option<&str> { None } /// Check if this is an HTTP request. fn is_http_request(&self) -> bool { false } /// Get the protobuf definitions for this message. fn protobuf_definitions(&self) -> Option<&Path> { None } } /// See https://docs.mitmproxy.org/dev/api/mitmproxy/contentviews.html /// for API details. pub trait Prettify: Send + Sync { /// The name for this contentview, e.g. `gRPC` or `Protobuf`. /// Favor brevity. fn name(&self) -> &str; fn instance_name(&self) -> String { self.name().to_lowercase().replace(" ", "_") } /// The syntax highlighting that should be applied to the prettified output. /// This is useful for contentviews that prettify to JSON or YAML. fn syntax_highlight(&self) -> Language { Language::None } /// Pretty-print `data`. fn prettify(&self, data: &[u8], metadata: &dyn Metadata) -> Result; /// Render priority - typically a float between 0 and 1 for builtin views. #[allow(unused_variables)] fn render_priority(&self, data: &[u8], metadata: &dyn Metadata) -> f32 { 0.0 } } pub trait Reencode: Send + Sync { fn reencode(&self, data: &str, metadata: &dyn Metadata) -> Result>; } // no cfg(test) gate because it's used in benchmarks as well pub mod test { use super::*; #[derive(Default, Serialize)] pub struct TestMetadata { pub content_type: Option, pub headers: std::collections::HashMap, pub protobuf_definitions: Option, pub path: Option, pub is_http_request: bool, } impl TestMetadata { pub fn with_content_type(mut self, content_type: &str) -> Self { self.content_type = Some(content_type.to_string()); self } pub fn with_header(mut self, name: &str, value: &str) -> Self { self.headers.insert(name.to_lowercase(), value.to_string()); self } pub fn with_path(mut self, path: &str) -> Self { self.path = Some(path.to_string()); self } pub fn with_protobuf_definitions>(mut self, definitions: P) -> Self { self.protobuf_definitions = Some(definitions.as_ref().to_path_buf()); self } pub fn with_is_http_request(mut self, is_http_request: bool) -> Self { self.is_http_request = is_http_request; self } } impl Metadata for TestMetadata { fn content_type(&self) -> Option<&str> { self.content_type.as_deref() } fn get_header(&self, name: &str) -> Option { self.headers.get(name).cloned() } fn get_path(&self) -> Option<&str> { self.path.as_deref() } fn protobuf_definitions(&self) -> Option<&Path> { self.protobuf_definitions.as_deref() } fn is_http_request(&self) -> bool { self.is_http_request } } } mitmproxy_rs-0.12.8/mitmproxy-contentviews/src/msgpack.rs000066400000000000000000000110401511036467100237360ustar00rootroot00000000000000use super::{Metadata, Prettify, Reencode}; use anyhow::{Context, Result}; use mitmproxy_highlight::Language; use rmp_serde::{decode, encode}; pub struct MsgPack; impl Prettify for MsgPack { fn name(&self) -> &'static str { "MsgPack" } fn syntax_highlight(&self) -> Language { Language::Yaml } fn prettify(&self, data: &[u8], _metadata: &dyn Metadata) -> Result { // Deserialize MsgPack to a serde_yaml::Value let value: serde_yaml::Value = decode::from_slice(data).context("Failed to deserialize MsgPack")?; // Convert the Value to prettified YAML serde_yaml::to_string(&value).context("Failed to convert to YAML") } fn render_priority(&self, _data: &[u8], metadata: &dyn Metadata) -> f32 { match metadata.content_type() { Some("application/msgpack") => 1.0, Some("application/x-msgpack") => 1.0, _ => 0.0, } } } impl Reencode for MsgPack { fn reencode(&self, data: &str, _metadata: &dyn Metadata) -> Result> { // Parse the YAML string to a serde_yaml::Value let value: serde_yaml::Value = serde_yaml::from_str(data).context("Invalid YAML")?; // Serialize the Value to MsgPack let mut buf = Vec::new(); encode::write_named(&mut buf, &value).context("Failed to encode to MsgPack")?; Ok(buf) } } #[cfg(test)] mod tests { use super::*; use crate::test::TestMetadata; // Hardcoded MsgPack data for a simple object: // { // "name": "John Doe", // "age": 30, // "tags": ["developer", "rust"] // } const TEST_MSGPACK: &[u8] = &[ 0x83, // map with 3 elements 0xa4, 0x6e, 0x61, 0x6d, 0x65, // "name" 0xa8, 0x4a, 0x6f, 0x68, 0x6e, 0x20, 0x44, 0x6f, 0x65, // "John Doe" 0xa3, 0x61, 0x67, 0x65, // "age" 0x1e, // 30 0xa4, 0x74, 0x61, 0x67, 0x73, // "tags" 0x92, // array with 2 elements 0xa9, 0x64, 0x65, 0x76, 0x65, 0x6c, 0x6f, 0x70, 0x65, 0x72, // "developer" 0xa4, 0x72, 0x75, 0x73, 0x74, // "rust" ]; // Expected YAML representation const TEST_YAML: &str = r#"name: John Doe age: 30 tags: - developer - rust "#; #[test] fn test_msgpack_deserialize() { let result = MsgPack .prettify(TEST_MSGPACK, &TestMetadata::default()) .unwrap(); assert_eq!(result, TEST_YAML); } #[test] fn test_msgpack_serialize() { let result = MsgPack .reencode(TEST_YAML, &TestMetadata::default()) .unwrap(); // Verify the MsgPack data contains the expected values let value: serde_yaml::Value = decode::from_slice(&result).unwrap(); if let serde_yaml::Value::Mapping(map) = value { assert_eq!( map.get(serde_yaml::Value::String("name".to_string())), Some(&serde_yaml::Value::String("John Doe".to_string())) ); assert_eq!( map.get(serde_yaml::Value::String("age".to_string())), Some(&serde_yaml::Value::Number(serde_yaml::Number::from(30))) ); if let Some(serde_yaml::Value::Sequence(tags)) = map.get(serde_yaml::Value::String("tags".to_string())) { assert_eq!(tags.len(), 2); assert_eq!(tags[0], serde_yaml::Value::String("developer".to_string())); assert_eq!(tags[1], serde_yaml::Value::String("rust".to_string())); } else { panic!("tags is not a sequence"); } } else { panic!("value is not a mapping"); } } #[test] fn test_msgpack_roundtrip() { // Deserialize to YAML let yaml_result = MsgPack .prettify(TEST_MSGPACK, &TestMetadata::default()) .unwrap(); // Serialize back to MsgPack let result = MsgPack .reencode(&yaml_result, &TestMetadata::default()) .unwrap(); // Deserialize both the original and the result to Values for comparison let original_value: serde_yaml::Value = decode::from_slice(TEST_MSGPACK).unwrap(); let result_value: serde_yaml::Value = decode::from_slice(&result).unwrap(); // Compare the values assert_eq!(original_value, result_value); } #[test] fn test_invalid_yaml() { let err = MsgPack .reencode("@invalid_yaml", &TestMetadata::default()) .unwrap_err(); assert_eq!(format!("{err}"), "Invalid YAML"); } } mitmproxy_rs-0.12.8/mitmproxy-contentviews/src/protobuf/000077500000000000000000000000001511036467100236075ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-contentviews/src/protobuf/existing_proto_definitions.rs000066400000000000000000000126731511036467100316360ustar00rootroot00000000000000use crate::protobuf::raw_to_proto::new_empty_descriptor; use crate::Metadata; use anyhow::Context; use protobuf::reflect::{FileDescriptor, MessageDescriptor}; use protobuf_parse::Parser; use std::path::Path; pub(super) struct DescriptorWithDeps { pub descriptor: MessageDescriptor, pub dependencies: Vec, } impl Default for DescriptorWithDeps { fn default() -> Self { Self { descriptor: new_empty_descriptor(None, "Unknown"), dependencies: vec![], } } } pub(super) fn find_best_match( metadata: &dyn Metadata, ) -> anyhow::Result> { // Parse existing protobuf definitions if available let Some(file_descriptors) = metadata .protobuf_definitions() .map(parse_file_descriptor_set) .transpose() .context("failed to parse proto file(s)")? else { return Ok(None); }; // Find MessageDescriptor for the RPC. let rpc_info = RpcInfo::from_metadata(metadata); let Some(descriptor) = find_best_message(&file_descriptors, rpc_info, metadata.is_http_request()) else { return Ok(None); }; Ok(Some(DescriptorWithDeps { descriptor, dependencies: file_descriptors, })) } fn find_best_message( fds: &[FileDescriptor], rpc: Option, is_request: bool, ) -> Option { if let Some(rpc) = rpc { for file in fds { if file.proto().package() != rpc.package { continue; } for service in file.services() { if service.proto().name() != rpc.service { continue; } for method in service.methods() { if method.proto().name() != rpc.method { continue; } return Some(if is_request { method.input_type() } else { method.output_type() }); } log::info!( "Found service {} in {}, but no method '{}'.", rpc.service, file.name(), rpc.method ); } for method in file.messages() { if method.proto().name() != rpc.method { continue; } return Some(method); } } log::info!("Did not find {rpc} in protobuf definitions."); } let file = fds.first()?; if let Some(service) = file.services().next() { if let Some(method) = service.methods().next() { log::info!( "Falling back to first defined service in {}: {}", file.name(), service.proto().name() ); return Some(if is_request { method.input_type() } else { method.output_type() }); } } if let Some(method) = file.messages().next() { log::info!( "Falling back to first defined message in {}: {}", file.name(), method.proto().name() ); return Some(method); } None } #[derive(Debug)] struct RpcInfo { package: String, service: String, method: String, } impl RpcInfo { fn from_metadata(metadata: &dyn Metadata) -> Option { let path = metadata.get_path()?; if path.contains('?') { return None; } let mut parts = path.trim_start_matches('/').split('/'); let service_and_package = parts.next()?; let method = parts.next()?; if parts.next().is_some() { return None; } let (package, service) = service_and_package .rsplit_once('.') .unwrap_or(("", service_and_package)); Some(Self { package: package.to_string(), service: service.to_string(), method: method.to_string(), }) } } impl std::fmt::Display for RpcInfo { fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result { if !self.package.is_empty() { write!(f, "{}.", self.package)?; } if !self.service.is_empty() { write!(f, "{}.", self.service)?; } write!(f, "{}", self.method) } } fn parse_file_descriptor_set(definitions_path: &Path) -> anyhow::Result> { let mut parser = Parser::new(); parser.pure(); if definitions_path.is_dir() { walk_proto_directory(definitions_path, &mut parser)?; } else { if let Some(parent) = definitions_path.parent() { parser.include(parent); } parser.input(definitions_path); } let fds = parser.file_descriptor_set()?; FileDescriptor::new_dynamic_fds(fds.file, &[]) .context("failed to create dynamic file descriptors") } fn walk_proto_directory(definitions_path: &Path, parser: &mut Parser) -> anyhow::Result<()> { parser.include(definitions_path); for entry in definitions_path .read_dir() .context("failed to read protobuf directory")? .flatten() { if entry.metadata()?.is_dir() { walk_proto_directory(entry.path().as_path(), parser)?; } else if entry.file_name().to_string_lossy().ends_with(".proto") { parser.input(entry.path()); } } Ok(()) } mitmproxy_rs-0.12.8/mitmproxy-contentviews/src/protobuf/mod.rs000066400000000000000000000003041511036467100247310ustar00rootroot00000000000000mod existing_proto_definitions; mod proto_to_yaml; mod raw_to_proto; mod reencode; mod view_grpc; mod view_protobuf; mod yaml_to_pretty; pub use view_grpc::GRPC; pub use view_protobuf::Protobuf; mitmproxy_rs-0.12.8/mitmproxy-contentviews/src/protobuf/proto_to_yaml.rs000066400000000000000000000077201511036467100270520ustar00rootroot00000000000000use crate::protobuf::view_protobuf::tags; /// Parsed protobuf message => YAML value use protobuf::descriptor::field_descriptor_proto::Type; use protobuf::descriptor::field_descriptor_proto::Type::{ TYPE_BYTES, TYPE_FIXED32, TYPE_FIXED64, TYPE_UINT64, }; use protobuf::reflect::{ReflectFieldRef, ReflectValueRef}; use protobuf::MessageDyn; use serde_yaml::value::TaggedValue; use serde_yaml::{Mapping, Number, Value}; use std::ops::Deref; pub(super) fn message_to_yaml(message: &dyn MessageDyn) -> Value { let mut ret = Mapping::new(); for field in message.descriptor_dyn().fields() { let is_unknown_field = field.name().starts_with("unknown_field_"); let key = if is_unknown_field { Value::from(field.number()) } else { Value::from(field.name()) }; let field_type = field .proto() .type_ .map(|t| t.enum_value_or(TYPE_BYTES)) .unwrap_or(TYPE_BYTES); let value = match field.get_reflect(message) { ReflectFieldRef::Optional(x) => { if let Some(x) = x.value() { value_to_yaml(x, field_type, is_unknown_field) } else { continue; } } ReflectFieldRef::Repeated(x) => { if x.is_empty() { continue; } Value::Sequence( x.into_iter() .map(|x| value_to_yaml(x, field_type, is_unknown_field)) .collect(), ) } ReflectFieldRef::Map(x) => { if x.is_empty() { continue; } Value::Mapping( x.into_iter() .map(|(k, v)| { ( value_to_yaml(k, field_type, is_unknown_field), value_to_yaml(v, field_type, is_unknown_field), ) }) .collect(), ) } }; ret.insert(key, value); } Value::Mapping(ret) } fn value_to_yaml(x: ReflectValueRef, field_type: Type, is_unknown: bool) -> Value { match x { ReflectValueRef::U32(x) => tag_number(Number::from(x), field_type, is_unknown), ReflectValueRef::U64(x) => tag_number(Number::from(x), field_type, is_unknown), ReflectValueRef::I32(x) => Value::Number(Number::from(x)), ReflectValueRef::I64(x) => Value::Number(Number::from(x)), ReflectValueRef::F32(x) => Value::Number(Number::from(x)), ReflectValueRef::F64(x) => Value::Number(Number::from(x)), ReflectValueRef::Bool(x) => Value::from(x), ReflectValueRef::String(x) => Value::from(x), ReflectValueRef::Bytes(x) => Value::Tagged(Box::new(TaggedValue { tag: tags::BINARY.clone(), value: Value::String(data_encoding::HEXLOWER.encode(x)), })), ReflectValueRef::Enum(descriptor, i) => descriptor .value_by_number(i) .map(|v| Value::String(v.name().to_string())) .unwrap_or_else(|| Value::Number(Number::from(i))), ReflectValueRef::Message(m) => message_to_yaml(m.deref()), } } fn tag_number(number: Number, field_type: Type, is_unknown: bool) -> Value { if !is_unknown { return Value::Number(number); } match field_type { TYPE_UINT64 => Value::Tagged(Box::new(TaggedValue { tag: tags::VARINT.clone(), value: Value::Number(number), })), TYPE_FIXED64 => Value::Tagged(Box::new(TaggedValue { tag: tags::FIXED64.clone(), value: Value::Number(number), })), TYPE_FIXED32 => Value::Tagged(Box::new(TaggedValue { tag: tags::FIXED32.clone(), value: Value::Number(number), })), _ => Value::Number(number), } } mitmproxy_rs-0.12.8/mitmproxy-contentviews/src/protobuf/raw_to_proto.rs000066400000000000000000000164371511036467100267060ustar00rootroot00000000000000use crate::protobuf::existing_proto_definitions::DescriptorWithDeps; use anyhow::Context; use protobuf::descriptor::field_descriptor_proto::Label::LABEL_REPEATED; use protobuf::descriptor::field_descriptor_proto::Type; use protobuf::descriptor::field_descriptor_proto::Type::{ TYPE_BYTES, TYPE_FIXED32, TYPE_FIXED64, TYPE_STRING, TYPE_UINT64, }; use protobuf::descriptor::{DescriptorProto, FieldDescriptorProto, FileDescriptorProto}; use protobuf::reflect::{FileDescriptor, MessageDescriptor}; use protobuf::{EnumOrUnknown, MessageDyn, UnknownValueRef}; /// Existing protobuf definition + raw data => merged protobuf definition use std::collections::BTreeMap; enum GuessedFieldType { String, Message(Box), Unknown, } /// Create a "merged" MessageDescriptor. Mostly a wrapper around `create_descriptor_proto`. pub(super) fn merge_proto_and_descriptor( data: &[u8], desc: &DescriptorWithDeps, ) -> anyhow::Result { let new_proto = create_descriptor_proto(data, &desc.descriptor)?; let descriptor = { let mut file_descriptor_proto = desc.descriptor.file_descriptor_proto().clone(); let message_idx = file_descriptor_proto .message_type .iter() .enumerate() .filter_map(|(i, d)| (d.name() == desc.descriptor.name_to_package()).then_some(i)) .next() .context("failed to find existing message descriptor index")?; file_descriptor_proto.message_type[message_idx] = new_proto; /* XXX: Skipping this as it doesn't seem to bring any immediate benefits. let dependencies = dependencies .iter() .cloned() .filter(|d| d != existing.file_descriptor()) .collect::>(); */ FileDescriptor::new_dynamic(file_descriptor_proto, &desc.dependencies) .context("failed to create new dynamic file descriptor")? .message_by_package_relative_name(desc.descriptor.name_to_package()) .with_context(|| { format!( "did not find {} in descriptor", desc.descriptor.name_to_package() ) })? }; Ok(descriptor) } /// Create a new (empty) MessageDescriptor for the given package and name. pub(super) fn new_empty_descriptor(package: Option, name: &str) -> MessageDescriptor { // Create nested descriptor protos. For example, if the name is OuterMessage.InnerMessage, // we create a descriptor for InnerMessage and set it as a nested type of OuterMessage. // This is a bit of a hack, but the best way to get type_name right. let mut parts = name.rsplit("."); let mut head = { let mut descriptor = DescriptorProto::new(); descriptor.set_name(parts.next().unwrap().to_string()); descriptor }; for p in parts { let mut descriptor = DescriptorProto::new(); descriptor.set_name(p.to_string()); descriptor.nested_type.push(head); head = descriptor; } let file_descriptor_proto = { let mut fd = FileDescriptorProto::new(); fd.package = package; fd.message_type.push(head); fd }; FileDescriptor::new_dynamic(file_descriptor_proto, &[]) .unwrap() .message_by_package_relative_name(name) .unwrap() } /// Create a DescriptorProto that combines the `existing` MessageDescriptor with (guessed) /// metadata for all unknown fields in the protobuf `data`. fn create_descriptor_proto( data: &[u8], existing: &MessageDescriptor, ) -> anyhow::Result { let message = existing.parse_from_bytes(data).with_context(|| { if existing.full_name().starts_with("Unknown") { "invalid format".to_string() } else { format!("failed to parse {}", existing.full_name()) } })?; let mut descriptor = existing.proto().clone(); let mut field_groups: BTreeMap> = BTreeMap::new(); for (field_number, value) in message.unknown_fields_dyn().iter() { field_groups.entry(field_number).or_default().push(value); } for (field_index, field_values) in field_groups.into_iter() { let name = Some(format!("unknown_field_{field_index}")); let mut add_int = |name: Option, typ: Type| { descriptor.field.push(FieldDescriptorProto { number: Some(field_index as i32), name, type_: Some(EnumOrUnknown::from(typ)), ..Default::default() }); }; match field_values[0] { // We can't use float/double here because of NaN handling. UnknownValueRef::Fixed32(_) => add_int(name, TYPE_FIXED32), UnknownValueRef::Fixed64(_) => add_int(name, TYPE_FIXED64), UnknownValueRef::Varint(_) => add_int(name, TYPE_UINT64), UnknownValueRef::LengthDelimited(_) => { let field_values = field_values .iter() .map(|x| match x { UnknownValueRef::LengthDelimited(data) => Ok(*data), _ => Err(anyhow::anyhow!("varying types in protobuf")), }) .collect::>>()?; match guess_field_type(existing, field_index, &field_values) { GuessedFieldType::String => add_int(name, TYPE_STRING), GuessedFieldType::Unknown => add_int(name, TYPE_BYTES), GuessedFieldType::Message(m) => { descriptor.field.push(FieldDescriptorProto { name, number: Some(field_index as i32), type_name: Some(format!(".{}.{}", existing.full_name(), m.name())), type_: Some(EnumOrUnknown::from(Type::TYPE_MESSAGE)), ..Default::default() }); descriptor.nested_type.push(*m); } } } } if field_values.len() > 1 { descriptor .field .last_mut() .expect("we just added this field") .set_label(LABEL_REPEATED); } } Ok(descriptor) } /// Given all `values` of a field, guess its type. fn guess_field_type( parent: &MessageDescriptor, field_index: u32, values: &[&[u8]], ) -> GuessedFieldType { if values.iter().all(|data| { std::str::from_utf8(data).is_ok_and(|s| { s.chars() .all(|c| c.is_ascii_graphic() || c.is_ascii_whitespace()) }) }) { return GuessedFieldType::String; } // Try to parse as a nested message let existing = new_empty_descriptor( parent.file_descriptor_proto().package.clone(), &format!("{}.UnknownField{}", parent.name_to_package(), field_index), ); if let Ok(descriptor) = create_descriptor_proto(values[0], &existing) { if values .iter() .skip(1) .all(|data| descriptor.descriptor_dyn().parse_from_bytes(data).is_ok()) { return GuessedFieldType::Message(Box::new(descriptor)); } } GuessedFieldType::Unknown } mitmproxy_rs-0.12.8/mitmproxy-contentviews/src/protobuf/reencode.rs000066400000000000000000000163251511036467100257500ustar00rootroot00000000000000use crate::protobuf::view_protobuf::tags; use anyhow::{bail, Context}; use protobuf::descriptor::field_descriptor_proto::Type; use protobuf::descriptor::field_descriptor_proto::Type::{TYPE_FIXED32, TYPE_FIXED64}; use protobuf::reflect::{FieldDescriptor, MessageDescriptor, RuntimeFieldType, RuntimeType}; use protobuf::well_known_types::empty::Empty; use protobuf::{MessageDyn, MessageFull, UnknownValue}; use serde_yaml::{Number, Value}; use std::num::ParseIntError; use std::str::FromStr; pub(super) fn reencode_yaml( value: Value, descriptor: &MessageDescriptor, ) -> anyhow::Result> { let message = descriptor.new_instance(); merge_yaml_into_message(value, message) } fn merge_yaml_into_message( value: Value, mut message: Box, ) -> anyhow::Result> { let Value::Mapping(mapping) = value else { bail!("YAML is not a mapping"); }; for (key, value) in mapping.into_iter() { let field_num = match key { Value::String(key) => { if let Some(field) = message.descriptor_dyn().field_by_name(&key) { field.number() } else if let Ok(field_num) = i32::from_str(&key) { field_num } else { bail!("Unknown protobuf field key: {key}"); } } Value::Number(key) => { let Some(field_num) = key.as_i64() else { bail!("Invalid protobuf field number: {key}"); }; field_num as i32 } other => { bail!("Unexpected key: {other:?}"); } } as u32; add_field(message.as_mut(), field_num, value)?; } message .write_to_bytes_dyn() .context("Failed to serialize protobuf") } fn add_field(message: &mut dyn MessageDyn, field_num: u32, value: Value) -> anyhow::Result<()> { let value = match value { Value::Null => return Ok(()), Value::Sequence(seq) => { for s in seq.into_iter() { add_field(message, field_num, s)?; } return Ok(()); } Value::Tagged(t) => { // t.tag doesn't work for Match statements if t.tag == *tags::BINARY { let value = match t.value { Value::String(s) => s, _ => bail!("Binary data is not a string"), }; let value = (0..value.len()) .step_by(2) .map(|i| u8::from_str_radix(&value[i..i + 2], 16)) .collect::, ParseIntError>>() .context("Invalid hex string")?; UnknownValue::LengthDelimited(value) } else if t.tag == *tags::FIXED32 { let Value::Number(n) = t.value else { bail!("!fixed32 is not a number"); }; let value = n .as_u64() .map(|n| n as u32) .or_else(|| n.as_i64().map(|s| s as u32)) .or_else(|| n.as_f64().map(|f| (f as f32).to_bits())) .context("Failed to convert !fixed32 value to a valid number")?; UnknownValue::Fixed32(value) } else if t.tag == *tags::FIXED64 { let Value::Number(n) = t.value else { bail!("!fixed64 is not a number"); }; let value = n .as_u64() .or_else(|| n.as_i64().map(|s| s as u64)) .or_else(|| n.as_f64().map(|f| f.to_bits())) .context("Failed to convert !fixed64 value to a valid number")?; UnknownValue::Fixed64(value) } else if t.tag == *tags::ZIGZAG { let Value::Number(n) = t.value else { bail!("!sint is not a number"); }; let Some(n) = n.as_i64() else { bail!("!sint is not an integer"); }; UnknownValue::Varint(encode_zigzag64(n)) } else { log::info!("Unexpected YAML tag {}, discarding.", t.tag); return add_field(message, field_num, t.value); } } Value::Bool(b) => UnknownValue::Varint(b as u64), Value::Number(n) => { let field = message.descriptor_dyn().field_by_number(field_num); int_value(n, field.as_ref()) } Value::String(s) => UnknownValue::LengthDelimited(s.into_bytes()), Value::Mapping(m) => { let mut descriptor = Empty::descriptor(); if let Some(field) = message.descriptor_dyn().field_by_number(field_num) { if let RuntimeFieldType::Singular(RuntimeType::Message(md)) = field.runtime_field_type() { descriptor = md; } else if let RuntimeFieldType::Map(_, _) = field.runtime_field_type() { // TODO: handle maps. } } let child_message = descriptor.new_instance(); let val = merge_yaml_into_message(Value::Mapping(m), child_message)?; UnknownValue::LengthDelimited(val) } }; message.mut_unknown_fields_dyn().add_value(field_num, value); Ok(()) } fn int_value(n: Number, field: Option<&FieldDescriptor>) -> UnknownValue { if let Some(field) = field { if let Some(typ) = field.proto().type_.and_then(|t| t.enum_value().ok()) { match typ { TYPE_FIXED64 | Type::TYPE_SFIXED64 | Type::TYPE_DOUBLE => { return if let Some(n) = n.as_u64() { UnknownValue::Fixed64(n) } else if let Some(n) = n.as_i64() { UnknownValue::sfixed64(n) } else { UnknownValue::double(n.as_f64().expect("as_f64 never fails")) } } TYPE_FIXED32 | Type::TYPE_SFIXED32 | Type::TYPE_FLOAT => { return if let Some(n) = n.as_u64() { UnknownValue::Fixed32(n as u32) } else if let Some(n) = n.as_i64() { UnknownValue::sfixed32(n as i32) } else { UnknownValue::float(n.as_f64().expect("as_f64 never fails") as f32) } } _ => (), } } } if let Some(n) = n.as_u64() { UnknownValue::Varint(n) } else if let Some(n) = n.as_i64() { UnknownValue::int64(n) } else { UnknownValue::double(n.as_f64().expect("as_f64 never fails")) } } // Zigzag-encode a 64-bit integer fn encode_zigzag64(n: i64) -> u64 { ((n << 1) ^ (n >> 63)) as u64 } #[cfg(test)] mod tests { use super::*; #[test] fn test_decode_zigzag64() { assert_eq!(encode_zigzag64(0), 0); assert_eq!(encode_zigzag64(-1), 1); assert_eq!(encode_zigzag64(1), 2); assert_eq!(encode_zigzag64(-2), 3); assert_eq!(encode_zigzag64(0x7fffffff), 0xfffffffe); assert_eq!(encode_zigzag64(-0x80000000), 0xffffffff); } } mitmproxy_rs-0.12.8/mitmproxy-contentviews/src/protobuf/view_grpc.rs000066400000000000000000000213301511036467100261410ustar00rootroot00000000000000use super::{existing_proto_definitions, reencode}; use crate::protobuf::existing_proto_definitions::DescriptorWithDeps; use crate::{Metadata, Prettify, Protobuf, Reencode}; use anyhow::{bail, Context, Result}; use flate2::read::{DeflateDecoder, GzDecoder}; use log::info; use mitmproxy_highlight::Language; use serde::Deserialize; use serde_yaml::Value; use std::io::Read; pub struct GRPC; impl Prettify for GRPC { fn name(&self) -> &'static str { "gRPC" } fn syntax_highlight(&self) -> Language { Language::Yaml } fn prettify(&self, data: &[u8], metadata: &dyn Metadata) -> Result { let encoding = metadata.get_header("grpc-encoding").unwrap_or_default(); let proto_def = existing_proto_definitions::find_best_match(metadata)?; if let Some(descriptor) = &proto_def { if let Ok(ret) = self.prettify_with_descriptor(data, &encoding, descriptor) { return Ok(ret); } } let ret = self.prettify_with_descriptor(data, &encoding, &DescriptorWithDeps::default())?; if proto_def.is_some() { info!("Existing gRPC definition does not match, parsing as unknown proto."); } Ok(ret) } fn render_priority(&self, _data: &[u8], metadata: &dyn Metadata) -> f32 { match metadata.content_type() { Some("application/grpc") => 1.0, Some("application/grpc+proto") => 1.0, Some("application/prpc") => 1.0, _ => 0.0, } } } impl GRPC { fn prettify_with_descriptor( &self, mut data: &[u8], encoding: &str, descriptor: &DescriptorWithDeps, ) -> Result { let mut protos = vec![]; while !data.is_empty() { let compressed = match data[0] { 0 => false, 1 => true, _ => bail!("invalid gRPC: first byte is not a boolean"), }; let len = match data.get(1..5) { Some(x) => u32::from_be_bytes(x.try_into()?) as usize, _ => bail!("invalid gRPC: not enough bytes"), }; let Some(proto) = data.get(5..5 + len) else { bail!("Invalid gRPC: not enough data") }; let mut decompressed = Vec::new(); let proto = if compressed { match encoding { "deflate" => { let mut decoder = DeflateDecoder::new(proto); decoder.read_to_end(&mut decompressed)?; &decompressed } "gzip" => { let mut decoder = GzDecoder::new(proto); decoder.read_to_end(&mut decompressed)?; &decompressed } "identity" => proto, _ => bail!("unsupported compression: {}", encoding), } } else { proto }; protos.push(Protobuf.prettify_with_descriptor(proto, descriptor)?); data = &data[5 + len..]; } Ok(protos.join("\n---\n\n")) } } impl Reencode for GRPC { fn reencode(&self, data: &str, metadata: &dyn Metadata) -> Result> { let descriptor = existing_proto_definitions::find_best_match(metadata)? .unwrap_or_default() .descriptor; let mut ret = vec![]; for document in serde_yaml::Deserializer::from_str(data) { let value = Value::deserialize(document).context("Invalid YAML")?; let proto = reencode::reencode_yaml(value, &descriptor)?; ret.push(0); // uncompressed ret.extend(u32::to_be_bytes(proto.len() as u32)); ret.extend(proto); } Ok(ret) } } #[cfg(test)] mod tests { use super::*; use crate::test::TestMetadata; const TEST_YAML: &str = "1: 150 # !sint: 75\n\n---\n\n1: 150 # !sint: 75\n"; const TEST_GRPC: &[u8] = &[ 0, 0, 0, 0, 3, 8, 150, 1, // first message 0, 0, 0, 0, 3, 8, 150, 1, // second message ]; const TEST_GZIP: &[u8] = &[ 1, 0, 0, 0, 23, // compressed flag and length 31, 139, 8, 0, 0, 0, 0, 0, 0, 255, 227, 152, 198, 8, 0, 160, 149, 78, 161, 3, 0, 0, 0, // gzip data ]; const TEST_DEFLATE: &[u8] = &[ 1, 0, 0, 0, 5, // compressed flag and length 227, 152, 198, 8, 0, // deflate data ]; #[test] fn test_empty() { let res = GRPC.prettify(&[], &TestMetadata::default()).unwrap(); assert_eq!(res, ""); } #[test] fn test_prettify_two_messages() { let res = GRPC.prettify(TEST_GRPC, &TestMetadata::default()).unwrap(); assert_eq!(res, TEST_YAML); } #[test] fn test_prettify_gzip() { let metadata = TestMetadata::default().with_header("grpc-encoding", "gzip"); let res = GRPC.prettify(TEST_GZIP, &metadata).unwrap(); assert_eq!(res, "1: 150 # !sint: 75\n"); } #[test] fn test_prettify_deflate() { let metadata = TestMetadata::default().with_header("grpc-encoding", "deflate"); let res = GRPC.prettify(TEST_DEFLATE, &metadata).unwrap(); assert_eq!(res, "1: 150 # !sint: 75\n"); } #[test] fn test_reencode_two_messages() { let res = GRPC.reencode(TEST_YAML, &TestMetadata::default()).unwrap(); assert_eq!(res, TEST_GRPC); } #[test] fn test_render_priority() { assert_eq!( GRPC.render_priority( b"", &TestMetadata::default().with_content_type("application/grpc") ), 1.0 ); assert_eq!( GRPC.render_priority( b"", &TestMetadata::default().with_content_type("text/plain") ), 0.0 ); } mod existing_definition { use super::*; const TEST_YAML_KNOWN: &str = "example: 150\n\n---\n\nexample: 150\n"; #[test] fn existing_proto() { let metadata = TestMetadata::default().with_protobuf_definitions(concat!( env!("CARGO_MANIFEST_DIR"), "/testdata/protobuf/simple.proto" )); let res = GRPC.prettify(TEST_GRPC, &metadata).unwrap(); assert_eq!(res, TEST_YAML_KNOWN); } #[test] fn existing_service_request() { let metadata = TestMetadata::default() .with_is_http_request(true) .with_path("/Service/Method") .with_protobuf_definitions(concat!( env!("CARGO_MANIFEST_DIR"), "/testdata/protobuf/simple_service.proto" )); let req = GRPC.prettify(TEST_GRPC, &metadata).unwrap(); assert_eq!(req, TEST_YAML); } #[test] fn existing_service_response() { let metadata = TestMetadata::default() .with_is_http_request(false) .with_path("/Service/Method") .with_protobuf_definitions(concat!( env!("CARGO_MANIFEST_DIR"), "/testdata/protobuf/simple_service.proto" )); let req = GRPC.prettify(TEST_GRPC, &metadata).unwrap(); assert_eq!(req, TEST_YAML_KNOWN); } #[test] fn existing_package() { let metadata = TestMetadata::default() .with_path("/example.simple.Service/Method") .with_protobuf_definitions(concat!( env!("CARGO_MANIFEST_DIR"), "/testdata/protobuf/simple_package.proto" )); let req = GRPC.prettify(TEST_GRPC, &metadata).unwrap(); assert_eq!(req, TEST_YAML_KNOWN); } #[test] fn existing_nested() { let metadata = TestMetadata::default() .with_path("/example.nested.Service/Method") .with_protobuf_definitions(concat!( env!("CARGO_MANIFEST_DIR"), "/testdata/protobuf/nested.proto" )); let req = GRPC.prettify(TEST_GRPC, &metadata).unwrap(); assert_eq!(req, TEST_YAML_KNOWN); } /// When the existing proto definition does not match the wire data, /// but the wire data is still valid Protobuf, parse it raw. #[test] fn existing_mismatch() { let metadata = TestMetadata::default().with_protobuf_definitions(concat!( env!("CARGO_MANIFEST_DIR"), "/testdata/protobuf/mismatch.proto" )); let res = GRPC.prettify(TEST_GRPC, &metadata).unwrap(); assert_eq!(res, TEST_YAML); } } } mitmproxy_rs-0.12.8/mitmproxy-contentviews/src/protobuf/view_protobuf.rs000066400000000000000000000217171511036467100270570ustar00rootroot00000000000000use crate::protobuf::existing_proto_definitions::DescriptorWithDeps; use crate::protobuf::{ existing_proto_definitions, proto_to_yaml, raw_to_proto, reencode, yaml_to_pretty, }; use crate::{Metadata, Prettify, Reencode}; use anyhow::{Context, Result}; use log::info; use mitmproxy_highlight::Language; use serde_yaml::Value; pub(super) mod tags { use regex::Regex; use serde_yaml::value::Tag; use std::sync::LazyLock; pub static BINARY: LazyLock = LazyLock::new(|| Tag::new("binary")); pub static VARINT: LazyLock = LazyLock::new(|| Tag::new("varint")); pub static ZIGZAG: LazyLock = LazyLock::new(|| Tag::new("sint")); pub static FIXED32: LazyLock = LazyLock::new(|| Tag::new("fixed32")); pub static FIXED64: LazyLock = LazyLock::new(|| Tag::new("fixed64")); pub static VARINT_RE: LazyLock = LazyLock::new(|| Regex::new(&format!(r"{} (\d+)", *VARINT)).unwrap()); pub static FIXED32_RE: LazyLock = LazyLock::new(|| Regex::new(&format!(r"{} (\d+)", *FIXED32)).unwrap()); pub static FIXED64_RE: LazyLock = LazyLock::new(|| Regex::new(&format!(r"{} (\d+)", *FIXED64)).unwrap()); } pub struct Protobuf; impl Prettify for Protobuf { fn name(&self) -> &str { "Protobuf" } fn syntax_highlight(&self) -> Language { Language::Yaml } fn prettify(&self, data: &[u8], metadata: &dyn Metadata) -> Result { let proto_def = existing_proto_definitions::find_best_match(metadata)?; if let Some(descriptor) = &proto_def { if let Ok(ret) = self.prettify_with_descriptor(data, descriptor) { return Ok(ret); } } let ret = self.prettify_with_descriptor(data, &DescriptorWithDeps::default())?; if proto_def.is_some() { info!("Existing protobuf definition does not match, parsing as unknown proto."); } Ok(ret) } fn render_priority(&self, _data: &[u8], metadata: &dyn Metadata) -> f32 { match metadata.content_type() { Some("application/x-protobuf") => 1.0, Some("application/x-protobuffer") => 1.0, _ => 0.0, } } } impl Reencode for Protobuf { fn reencode(&self, data: &str, metadata: &dyn Metadata) -> Result> { let descriptor = existing_proto_definitions::find_best_match(metadata)? .unwrap_or_default() .descriptor; let value: Value = serde_yaml::from_str(data).context("Invalid YAML")?; reencode::reencode_yaml(value, &descriptor) } } impl Protobuf { pub(super) fn prettify_with_descriptor( &self, data: &[u8], descriptor: &DescriptorWithDeps, ) -> Result { // Check if data is empty first if data.is_empty() { return Ok("{} # empty protobuf message".to_string()); } let descriptor = raw_to_proto::merge_proto_and_descriptor(data, descriptor)?; // Parse protobuf and convert to YAML let message = descriptor .parse_from_bytes(data) .context("Error parsing protobuf")?; let yaml_value = proto_to_yaml::message_to_yaml(message.as_ref()); let yaml_str = serde_yaml::to_string(&yaml_value).context("Failed to convert to YAML")?; yaml_to_pretty::apply_replacements(&yaml_str) } } #[cfg(test)] mod tests { use super::*; use crate::test::TestMetadata; macro_rules! test_roundtrip { ($name:ident,$proto:literal,$yaml:literal) => { mod $name { use super::*; pub(super) const PROTO: &[u8] = $proto; pub(super) const YAML: &str = $yaml; #[test] fn prettify() { let result = Protobuf.prettify(PROTO, &TestMetadata::default()).unwrap(); assert_eq!(result, YAML); } #[test] fn reencode() { let result = Protobuf.reencode(YAML, &TestMetadata::default()).unwrap(); assert_eq!(result, PROTO); } } }; } test_roundtrip!(varint, b"\x08\x96\x01", "1: 150 # !sint: 75\n"); test_roundtrip!(varint_zigzag_negative, b"\x08\x0B", "1: 11 # !sint: -6\n"); test_roundtrip!( varint_int64_negative, b"\x08\xfe\xff\xff\xff\xff\xff\xff\xff\xff\x01", "1: -2 # u64: 18446744073709551614\n" ); test_roundtrip!(binary, b"\x32\x03\x01\x02\x03", "6: !binary '010203'\n"); test_roundtrip!(string, b"\x0A\x05\x68\x65\x6C\x6C\x6F", "1: hello\n"); test_roundtrip!(nested, b"\x2A\x02\x08\x2A", "5:\n 1: 42 # !sint: 21\n"); test_roundtrip!( nested_twice, b"\x2A\x04\x2A\x02\x08\x2A", "5:\n 5:\n 1: 42 # !sint: 21\n" ); test_roundtrip!( fixed64, b"\x19\x00\x00\x00\x00\x00\x00\xF0\xBF", "3: !fixed64 -1.0 # u64: 13830554455654793216, i64: -4616189618054758400\n" ); test_roundtrip!( fixed64_positive, b"\x19\x6E\x86\x1B\xF0\xF9\x21\x09\x40", "3: !fixed64 3.14159 # u64: 4614256650576692846\n" ); test_roundtrip!( fixed64_no_float, b"\x19\xFF\xFF\xFF\xFF\xFF\xFF\xFF\xFF", "3: !fixed64 -1 # u64: 18446744073709551615\n" ); test_roundtrip!( fixed64_positive_no_float, b"\x19\x01\x00\x00\x00\x00\x00\xF8\x7F", "3: !fixed64 9221120237041090561\n" ); test_roundtrip!( fixed32, b"\x15\x00\x00\x80\xBF", "2: !fixed32 -1.0 # u32: 3212836864, i32: -1082130432\n" ); test_roundtrip!( fixed32_positive, b"\x15\xD0\x0F\x49\x40", "2: !fixed32 3.14159 # u32: 1078530000\n" ); test_roundtrip!( fixed32_no_float, b"\x15\xFF\xFF\xFF\xFF", "2: !fixed32 -1 # u32: 4294967295\n" ); test_roundtrip!( fixed32_positive_no_float, b"\x15\x01\x00\xC0\x7F", "2: !fixed32 2143289345\n" ); // From docs: "message Test5 { repeated int32 f = 6 [packed=true]; }" // With values 3, 270, and 86942 test_roundtrip!( repeated_packed, b"\x32\x06\x03\x8E\x02\x9E\xA7\x05", "6: !binary 038e029ea705\n" ); test_roundtrip!( repeated_varint, b"\x08\x01\x08\x02\x08\x03", "1:\n- 1 # !sint: -1\n- 2 # !sint: 1\n- 3 # !sint: -2\n" ); #[test] fn test_invalid_protobuf() { let result = Protobuf.prettify(b"\xFF\xFF", &TestMetadata::default()); assert!(result.is_err()); } #[test] fn test_no_crash() { let result = Protobuf.prettify( b"\n\x13gRPC testing server\x12\x07\n\x05Index\x12\x07\n\x05Empty\x12\x0c\n\nDummyUnary\x12\x0f\n\rSpecificError\x12\r\n\x0bRandomError\x12\x0e\n\x0cHeadersUnary\x12\x11\n\x0fNoResponseUnary", &TestMetadata::default()).unwrap(); assert_eq!(result, "1: gRPC testing server\n2:\n- 1: Index\n- 1: Empty\n- 1: DummyUnary\n- 1: SpecificError\n- 1: RandomError\n- 1: HeadersUnary\n- 1: NoResponseUnary\n"); } #[test] fn test_empty_protobuf() { let result = Protobuf.prettify(b"", &TestMetadata::default()).unwrap(); assert_eq!(result, "{} # empty protobuf message"); } mod existing_definition { use super::*; const VARINT_PRETTY_YAML: &str = "example: 150\n"; #[test] fn prettify() { let metadata = TestMetadata::default().with_protobuf_definitions(concat!( env!("CARGO_MANIFEST_DIR"), "/testdata/protobuf/simple.proto" )); let result = Protobuf.prettify(varint::PROTO, &metadata).unwrap(); assert_eq!(result, VARINT_PRETTY_YAML); } /// When the existing proto definition does not match the wire data, /// but the wire data is still valid Protobuf, parse it raw. #[test] fn prettify_mismatch() { let metadata = TestMetadata::default().with_protobuf_definitions(concat!( env!("CARGO_MANIFEST_DIR"), "/testdata/protobuf/simple.proto" )); let result = Protobuf.prettify(string::PROTO, &metadata).unwrap(); assert_eq!(result, string::YAML); } #[test] fn reencode() { let metadata = TestMetadata::default().with_protobuf_definitions(concat!( env!("CARGO_MANIFEST_DIR"), "/testdata/protobuf/simple.proto" )); let result = Protobuf.reencode(VARINT_PRETTY_YAML, &metadata).unwrap(); assert_eq!(result, varint::PROTO); } #[test] fn reencode_mismatch() { let metadata = TestMetadata::default().with_protobuf_definitions(concat!( env!("CARGO_MANIFEST_DIR"), "/testdata/protobuf/simple.proto" )); let result = Protobuf.reencode("example: hello", &metadata).unwrap(); assert_eq!(result, string::PROTO); } } } mitmproxy_rs-0.12.8/mitmproxy-contentviews/src/protobuf/yaml_to_pretty.rs000066400000000000000000000102211511036467100272240ustar00rootroot00000000000000/// YAML value => prettified text use crate::protobuf::view_protobuf::tags; use regex::Captures; use std::fmt::{Display, Formatter}; /// Collect all representations of a number and output the "best" one as the YAML value /// and the rest as comments. struct NumReprs(Vec<(&'static str, String)>); impl NumReprs { fn new(k: &'static str, v: impl ToString) -> Self { let mut inst = Self(Vec::with_capacity(3)); inst.push(k, v); inst } fn push(&mut self, k: &'static str, v: impl ToString) { self.0.push((k, v.to_string())); } } impl Display for NumReprs { fn fmt(&self, f: &mut Formatter<'_>) -> std::fmt::Result { // We first sort by t.len(), which is a hack to make sure that sint is not used // as the main representation. let (min_typ, min_val) = self .0 .iter() .min_by_key(|(t, v)| (t.len(), v.len())) .unwrap(); let mut i = self.0.iter().filter(|(t, _)| t != min_typ); write!(f, "{min_val}")?; if let Some((t, v)) = i.next() { write!(f, " # {t}: {v}")?; } for (t, v) in i { write!(f, ", {t}: {v}")?; } Ok(()) } } // Helper method to apply regex replacements to the YAML output pub(super) fn apply_replacements(yaml_str: &str) -> anyhow::Result { // Replace !fixed32 tags with comments showing float and i32 interpretations let with_fixed32 = tags::FIXED32_RE.replace_all(yaml_str, |caps: &Captures| { let value = caps[1].parse::().unwrap_or_default(); let mut repr = NumReprs::new("u32", value); let float_value = f32::from_bits(value); if !float_value.is_nan() && float_value.abs() > 0.0000001 { repr.push("f32", format_float(float_value)); } if value.leading_zeros() == 0 { repr.push("i32", value as i32); } format!("{} {}", *tags::FIXED32, repr) }); // Replace !fixed64 tags with comments showing double and i64 interpretations let with_fixed64 = tags::FIXED64_RE.replace_all(&with_fixed32, |caps: &Captures| { let value = caps[1].parse::().unwrap_or_default(); let mut repr = NumReprs::new("u64", value); let double_value = f64::from_bits(value); if !double_value.is_nan() && double_value.abs() > 0.0000001 { repr.push("f64", format_float(double_value)); } if value.leading_zeros() == 0 { repr.push("i64", value as i64); } format!("{} {}", *tags::FIXED64, repr) }); // Replace !varint tags with comments showing signed interpretation if different let with_varint = tags::VARINT_RE.replace_all(&with_fixed64, |caps: &Captures| { let value = caps[1].parse::().unwrap_or_default(); let mut repr = NumReprs::new("u64", value); if value.leading_zeros() == 0 { repr.push("i64", value as i64); // We only show u64 and i64 reprs if the leading bit is a 1. // It could technically be zigzag, but the odds are quite low. } else { repr.push("!sint", decode_zigzag64(value)); } repr.to_string() }); Ok(with_varint.to_string()) } /// Ensure that floating point numbers have a ".0" component so that we roundtrip. fn format_float(val: T) -> String { let mut ret = format!("{val:.}"); if !ret.contains(".") { ret.push_str(".0"); } ret } // Decode a zigzag-encoded 64-bit integer fn decode_zigzag64(n: u64) -> i64 { ((n >> 1) as i64) ^ (-((n & 1) as i64)) } #[cfg(test)] mod tests { use super::*; #[test] fn test_format_float() { assert_eq!(format_float(1.2345), "1.2345"); assert_eq!(format_float(0f32), "0.0"); assert_eq!(format_float(-1f64), "-1.0"); } #[test] fn test_decode_zigzag64() { assert_eq!(decode_zigzag64(0), 0); assert_eq!(decode_zigzag64(1), -1); assert_eq!(decode_zigzag64(2), 1); assert_eq!(decode_zigzag64(3), -2); assert_eq!(decode_zigzag64(0xfffffffe), 0x7fffffff); assert_eq!(decode_zigzag64(0xffffffff), -0x80000000); } } mitmproxy_rs-0.12.8/mitmproxy-contentviews/src/test_inspect_metadata.rs000066400000000000000000000032041511036467100266600ustar00rootroot00000000000000use crate::test::TestMetadata; use crate::{Metadata, Prettify}; use anyhow::Context; use std::collections::HashMap; use std::path::Path; /// Contentview used for internal testing to ensure that the /// Python accessors in mitmproxy-rs all work properly. pub struct TestInspectMetadata; impl Prettify for TestInspectMetadata { fn name(&self) -> &'static str { "Inspect Metadata (test only)" } fn instance_name(&self) -> String { "_test_inspect_metadata".to_string() } fn prettify(&self, _data: &[u8], metadata: &dyn Metadata) -> anyhow::Result { let mut headers = HashMap::new(); if let Some(host) = metadata.get_header("host") { headers.insert("host".to_string(), host); } let meta = TestMetadata { content_type: metadata.content_type().map(str::to_string), headers, path: metadata.get_path().map(str::to_string), is_http_request: metadata.is_http_request(), protobuf_definitions: metadata.protobuf_definitions().map(Path::to_path_buf), }; // JSON would be nicer to consume on the Python side, // but let's not add dependencies for this. serde_yaml::to_string(&meta).context("Failed to convert to YAML") } } #[cfg(test)] mod tests { use super::*; #[test] fn prettify_simple() { let result = TestInspectMetadata .prettify(b"", &TestMetadata::default()) .unwrap(); assert_eq!( result, "content_type: null\nheaders: {}\nprotobuf_definitions: null\npath: null\nis_http_request: false\n" ); } } mitmproxy_rs-0.12.8/mitmproxy-contentviews/testdata/000077500000000000000000000000001511036467100227715ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-contentviews/testdata/protobuf/000077500000000000000000000000001511036467100246315ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-contentviews/testdata/protobuf/mismatch.proto000066400000000000000000000001021511036467100275140ustar00rootroot00000000000000syntax = "proto3"; message TestMessage { string example = 1; } mitmproxy_rs-0.12.8/mitmproxy-contentviews/testdata/protobuf/nested.proto000066400000000000000000000003531511036467100272010ustar00rootroot00000000000000syntax = "proto3"; package example.nested; service Service { rpc Method(Empty) returns (Response) {} } message Empty {} message Response { message Nested { int32 example = 1; } int32 example = 1; Nested nested = 2; } mitmproxy_rs-0.12.8/mitmproxy-contentviews/testdata/protobuf/simple.proto000066400000000000000000000001011511036467100271770ustar00rootroot00000000000000syntax = "proto3"; message TestMessage { int32 example = 1; } mitmproxy_rs-0.12.8/mitmproxy-contentviews/testdata/protobuf/simple_package.proto000066400000000000000000000003701511036467100306620ustar00rootroot00000000000000syntax = "proto3"; package example.simple; service Other { rpc Method(Empty) returns (Response) {} } service Service { // This endpoint rpc Method(Empty) returns (Response) {} } message Empty {} message Response { int32 example = 1; } mitmproxy_rs-0.12.8/mitmproxy-contentviews/testdata/protobuf/simple_service.proto000066400000000000000000000003371511036467100307320ustar00rootroot00000000000000syntax = "proto3"; service Other { rpc Method(Empty) returns (Response) {} } service Service { // This endpoint rpc Method(Empty) returns (Response) {} } message Empty {} message Response { int32 example = 1; } mitmproxy_rs-0.12.8/mitmproxy-highlight/000077500000000000000000000000001511036467100203775ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-highlight/Cargo.toml000066400000000000000000000011031511036467100223220ustar00rootroot00000000000000[package] name = "mitmproxy-highlight" license = "MIT" authors.workspace = true version.workspace = true repository.workspace = true edition.workspace = true rust-version.workspace = true publish.workspace = true [lints] workspace = true [dependencies] anyhow = { version = "1.0.100", features = ["backtrace"] } tree-sitter = "0.25.10" tree-sitter-css = "0.25.0" tree-sitter-highlight = "0.25.10" tree-sitter-javascript = "0.25.0" tree-sitter-xml = "0.7.0" tree-sitter-yaml = "0.7.1" [dev-dependencies] criterion = "0.7.0" [[bench]] name = "syntax_highlight" harness = false mitmproxy_rs-0.12.8/mitmproxy-highlight/README.md000066400000000000000000000005361511036467100216620ustar00rootroot00000000000000# mitmproxy-highlight This crate contains the syntax highlighting backend for mitmproxy and mitmdump, utilizing [tree-sitter]. This functionality is exposed to Python via [mitmproxy-rs/src/syntax_highlight.rs]. [tree-sitter]: https://tree-sitter.github.io/tree-sitter/ [mitmproxy-rs/src/syntax_highlight.rs]: ../mitmproxy-rs/src/syntax_highlight.rsmitmproxy_rs-0.12.8/mitmproxy-highlight/benches/000077500000000000000000000000001511036467100220065ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-highlight/benches/syntax_highlight.rs000066400000000000000000000032401511036467100257300ustar00rootroot00000000000000use criterion::{criterion_group, criterion_main, Criterion}; use mitmproxy_highlight::Language; use std::hint::black_box; fn criterion_benchmark(c: &mut Criterion) { c.bench_function("syntax_highlight small", |b| { b.iter(|| { Language::Xml .highlight(black_box( br#" Bootstrap demo

Hello, world!

"#, )) .unwrap() }) }); let data = "x".repeat(8096); c.bench_function("syntax_highlight xml", |b| { b.iter(|| Language::Xml.highlight(black_box(data.as_bytes())).unwrap()) }); // tree_sitter_html is faster, but not by orders of magnitude. /* let mut config = HighlightConfiguration::new( tree_sitter_html::LANGUAGE.into(), "", tree_sitter_html::HIGHLIGHTS_QUERY, "", "" ).unwrap(); let names = config.names().iter().map(|x| x.to_string()).collect::>(); let tags = names.iter().map(|_| Tag::Text).collect::>(); config.configure(&names); c.bench_function("syntax_highlight html", |b| { b.iter(|| { common::highlight( &config, &tags, data.as_bytes(), ) }) }); */ } criterion_group!(benches, criterion_benchmark); criterion_main!(benches); mitmproxy_rs-0.12.8/mitmproxy-highlight/src/000077500000000000000000000000001511036467100211665ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-highlight/src/common.rs000066400000000000000000000055151511036467100230320ustar00rootroot00000000000000use super::{Chunk, Tag}; use anyhow::{Context, Result}; use tree_sitter_highlight::{HighlightConfiguration, HighlightEvent, Highlighter}; pub fn highlight( config: &HighlightConfiguration, tags: &[Tag], input: &[u8], ) -> Result> { let mut highlighter = Highlighter::new(); let highlights = highlighter .highlight(config, input, None, |_| None) .context("failed to highlight")?; let mut chunks: Vec = Vec::new(); let mut tag: Tag = Tag::Text; for event in highlights { let event = event.context("highlighter failure")?; match event { HighlightEvent::Source { start, end } => { let contents = String::from_utf8_lossy(&input[start..end]); match chunks.last_mut() { Some(x) if x.0 == tag || contents.trim_ascii().is_empty() => { x.1.push_str(&contents); } _ => chunks.push((tag, contents.to_string())), } } HighlightEvent::HighlightStart(s) => { tag = tags[s.0]; } HighlightEvent::HighlightEnd => { tag = Tag::Text; } } } Ok(chunks) } #[cfg(test)] pub(super) fn test_tags_ok( language: tree_sitter::Language, highlights_query: &str, names: &[&str], tags: &[Tag], ) { assert_eq!(names.len(), tags.len()); let config = HighlightConfiguration::new(language, "", highlights_query, "", "").unwrap(); for &tag in names { assert!( config.names().iter().any(|name| name.contains(tag)), "Invalid tag: {},\nAllowed tags: {:?}", tag, config.names() ); } } #[allow(unused)] #[cfg(test)] pub(super) fn debug(language: tree_sitter::Language, highlights_query: &str, input: &[u8]) { let mut highlighter = Highlighter::new(); let mut config = HighlightConfiguration::new(language, "", highlights_query, "", "").unwrap(); let names = config .names() .iter() .map(|name| name.to_string()) .collect::>(); config.configure(&names); let highlights = highlighter .highlight(&config, input, None, |_| None) .unwrap(); let mut tag: &str = ""; for event in highlights { match event.unwrap() { HighlightEvent::Source { start, end } => { let contents = &input[start..end]; println!( "{}: {:?}", tag, String::from_utf8_lossy(contents).to_string().as_str() ); } HighlightEvent::HighlightStart(s) => { tag = &names[s.0]; } HighlightEvent::HighlightEnd => { tag = ""; } } } } mitmproxy_rs-0.12.8/mitmproxy-highlight/src/css.rs000066400000000000000000000051571511036467100223340ustar00rootroot00000000000000use super::{common, Chunk, Tag}; use anyhow::Result; use std::sync::LazyLock; use tree_sitter_css::HIGHLIGHTS_QUERY; use tree_sitter_css::LANGUAGE; use tree_sitter_highlight::HighlightConfiguration; const NAMES: &[&str] = &[ "tag", // body "property", // font-size "variable", // --foo-bar "function", // calc() "number", // 42 "string", // "foo" "comment", // /* comment */ ]; const TAGS: &[Tag] = &[ Tag::Name, Tag::Boolean, // we only have one "Name", so this is a workaround. Tag::Text, Tag::Text, Tag::Number, Tag::String, Tag::Comment, ]; static CONFIG: LazyLock = LazyLock::new(|| { let mut config = HighlightConfiguration::new(LANGUAGE.into(), "", HIGHLIGHTS_QUERY, "", "") .expect("failed to build syntax highlighter"); config.configure(NAMES); config }); pub fn highlight(input: &[u8]) -> Result> { common::highlight(&CONFIG, TAGS, input) } #[cfg(test)] mod tests { use super::*; #[ignore] #[test] fn debug() { common::debug( LANGUAGE.into(), HIGHLIGHTS_QUERY, b"p > span { color: red; font-size: 42px; content: \"foo\"; margin: var(--foo) } /* foo */", ); } #[test] fn test_tags_ok() { common::test_tags_ok(LANGUAGE.into(), HIGHLIGHTS_QUERY, NAMES, TAGS); } #[test] fn test_highlight() { let input = b"\ p > span { \n\ color: red;\n\ font-size: 42px;\n\ content: \"foo\";\n\ margin: var(--foo);\n\ }\n\ /* foo */\n\ "; let chunks = highlight(input).unwrap(); assert_eq!( chunks, vec![ (Tag::Name, "p".to_string()), (Tag::Text, " > ".to_string()), (Tag::Name, "span".to_string()), (Tag::Text, " { \n".to_string()), (Tag::Boolean, "color".to_string()), (Tag::Text, ": red;\n".to_string()), (Tag::Boolean, "font-size".to_string()), (Tag::Text, ": ".to_string()), (Tag::Number, "42px".to_string()), (Tag::Text, ";\n".to_string()), (Tag::Boolean, "content".to_string()), (Tag::Text, ": ".to_string()), (Tag::String, "\"foo\"".to_string()), (Tag::Text, ";\n".to_string()), (Tag::Boolean, "margin".to_string()), (Tag::Text, ": var(--foo);\n}\n".to_string()), (Tag::Comment, "/* foo */\n".to_string()), ] ); } } mitmproxy_rs-0.12.8/mitmproxy-highlight/src/javascript.rs000066400000000000000000000044001511036467100237000ustar00rootroot00000000000000use super::{common, Chunk, Tag}; use anyhow::Result; use std::sync::LazyLock; use tree_sitter_highlight::HighlightConfiguration; use tree_sitter_javascript::HIGHLIGHT_QUERY as HIGHLIGHTS_QUERY; use tree_sitter_javascript::LANGUAGE; const NAMES: &[&str] = &[ "keyword", // let "function", // *function* () { "variable", // let *foo* = ... "property", // foo.*bar* = ... "constant", // *true* "string", // "string" "number", // 42 "comment", // /* comments */ ]; const TAGS: &[Tag] = &[ Tag::Name, Tag::Text, Tag::Text, Tag::Text, Tag::Boolean, Tag::String, Tag::Number, Tag::Comment, ]; static CONFIG: LazyLock = LazyLock::new(|| { let mut config = HighlightConfiguration::new(LANGUAGE.into(), "", HIGHLIGHTS_QUERY, "", "") .expect("failed to build syntax highlighter"); config.configure(NAMES); config }); pub fn highlight(input: &[u8]) -> Result> { common::highlight(&CONFIG, TAGS, input) } #[cfg(test)] mod tests { use super::*; #[ignore] #[test] fn debug() { common::debug( LANGUAGE.into(), HIGHLIGHTS_QUERY, b"function foo() { let bar = true && 42 && 'qux'; foo.bar = 42; } // comment", ); } #[test] fn test_tags_ok() { common::test_tags_ok(LANGUAGE.into(), HIGHLIGHTS_QUERY, NAMES, TAGS); } #[test] fn test_highlight() { let input = b"\ function foo() {\n\ let bar = true && 42 && 'qux';\n\ } // comment\n\ "; let chunks = highlight(input).unwrap(); assert_eq!( chunks, vec![ (Tag::Name, "function ".to_string()), (Tag::Text, "foo() {\n".to_string()), (Tag::Name, "let ".to_string()), (Tag::Text, "bar = ".to_string()), (Tag::Boolean, "true".to_string()), (Tag::Text, " && ".to_string()), (Tag::Number, "42".to_string()), (Tag::Text, " && ".to_string()), (Tag::String, "'qux'".to_string()), (Tag::Text, ";\n} ".to_string()), (Tag::Comment, "// comment\n".to_string()), ] ); } } mitmproxy_rs-0.12.8/mitmproxy-highlight/src/lib.rs000066400000000000000000000051401511036467100223020ustar00rootroot00000000000000use anyhow::bail; use std::str::FromStr; pub mod common; mod css; mod javascript; mod xml; mod yaml; pub type Chunk = (Tag, String); pub enum Language { Css, JavaScript, Xml, Yaml, None, Error, } impl Language { pub fn highlight(&self, input: &[u8]) -> anyhow::Result> { match self { Language::Css => css::highlight(input), Language::JavaScript => javascript::highlight(input), Language::Xml => xml::highlight(input), Language::Yaml => yaml::highlight(input), Language::None => Ok(vec![( Tag::Text, String::from_utf8_lossy(input).to_string(), )]), Language::Error => Ok(vec![( Tag::Error, String::from_utf8_lossy(input).to_string(), )]), } } pub const VALUES: [Self; 6] = [ Self::Css, Self::JavaScript, Self::Xml, Self::Yaml, Self::None, Self::Error, ]; pub const fn as_str(&self) -> &'static str { match self { Self::Css => "css", Self::JavaScript => "javascript", Self::Xml => "xml", Self::Yaml => "yaml", Self::None => "none", Self::Error => "error", } } } impl FromStr for Language { type Err = anyhow::Error; fn from_str(s: &str) -> Result { Ok(match s { "css" => Language::Css, "javascript" => Language::JavaScript, "xml" => Language::Xml, "yaml" => Language::Yaml, "none" => Language::None, "error" => Language::Error, other => bail!("Unsupported language: {other}"), }) } } #[derive(Debug, Eq, PartialEq, Copy, Clone)] pub enum Tag { Text, // Text that shouldn't be emphasized. Name, // A tag, such as an HTML tag or a YAML key. String, // A string value. Number, // A number value. Boolean, // A boolean value. Comment, // A comment. Error, // An error value. } impl Tag { pub const VALUES: [Self; 7] = [ Self::Text, Self::Name, Self::String, Self::Number, Self::Boolean, Self::Comment, Self::Error, ]; pub fn as_str(&self) -> &'static str { match self { Tag::Text => "", Tag::Name => "name", Tag::String => "string", Tag::Number => "number", Tag::Boolean => "boolean", Tag::Comment => "comment", Tag::Error => "error", } } } mitmproxy_rs-0.12.8/mitmproxy-highlight/src/xml.rs000066400000000000000000000037131511036467100223400ustar00rootroot00000000000000use super::common; use super::{Chunk, Tag}; use anyhow::Result; use std::sync::LazyLock; use tree_sitter_highlight::HighlightConfiguration; use tree_sitter_xml::{LANGUAGE_XML as LANGUAGE, XML_HIGHLIGHT_QUERY as HIGHLIGHTS_QUERY}; const NAMES: &[&str] = &[ "tag", //
"property", // class or style "operator", // equal sign between class and value "comment", // "punctuation", "markup", ]; const TAGS: &[Tag] = &[ Tag::Name, //
Tag::Name, // class or style Tag::Name, // equal sign between class and value Tag::Comment, // Tag::Name, // punctuation Tag::Text, // markup ]; static CONFIG: LazyLock = LazyLock::new(|| { let mut config = HighlightConfiguration::new(LANGUAGE.into(), "", HIGHLIGHTS_QUERY, "", "") .expect("failed to build syntax highlighter"); config.configure(NAMES); config }); pub fn highlight(input: &[u8]) -> Result> { common::highlight(&CONFIG, TAGS, input) } #[cfg(test)] mod tests { use super::*; #[ignore] #[test] fn debug() { common::debug( LANGUAGE.into(), HIGHLIGHTS_QUERY, b"
Hello
", ); } #[test] fn test_tags_ok() { common::test_tags_ok(LANGUAGE.into(), HIGHLIGHTS_QUERY, NAMES, TAGS); } #[test] fn test_highlight() { let input = b"
Hello
"; let chunks = highlight(input).unwrap(); assert_eq!( chunks, vec![ (Tag::Name, "
".to_string()), (Tag::Text, "Hello".to_string()), (Tag::Name, "
".to_string()), (Tag::Comment, "".to_string()) ] ); } } mitmproxy_rs-0.12.8/mitmproxy-highlight/src/yaml.rs000066400000000000000000000036361511036467100225060ustar00rootroot00000000000000use super::common; use super::{Chunk, Tag}; use anyhow::Result; use std::sync::LazyLock; use tree_sitter_highlight::HighlightConfiguration; use tree_sitter_yaml::{HIGHLIGHTS_QUERY, LANGUAGE}; const NAMES: &[&str] = &[ "boolean", // YAML booleans "string", // YAML strings "number", // YAML numbers "comment", // # comment "type", // !fixed32 type annotations "property", // key: ]; const TAGS: &[Tag] = &[ Tag::Boolean, Tag::String, Tag::Number, Tag::Comment, Tag::Name, Tag::Name, ]; static CONFIG: LazyLock = LazyLock::new(|| { let mut config = HighlightConfiguration::new(LANGUAGE.into(), "", HIGHLIGHTS_QUERY, "", "") .expect("failed to build syntax highlighter"); config.configure(NAMES); config }); pub fn highlight(input: &[u8]) -> Result> { common::highlight(&CONFIG, TAGS, input) } #[cfg(test)] mod tests { use super::*; #[test] fn test_tags_ok() { common::test_tags_ok(LANGUAGE.into(), HIGHLIGHTS_QUERY, NAMES, TAGS); } #[test] fn test_highlight() { let input = b"\ string: \"value\"\n\ bool: true\n\ number: !fixed32 42 # comment\n\ "; let chunks = highlight(input).unwrap(); assert_eq!( chunks, vec![ (Tag::Name, "string".to_string()), (Tag::Text, ": ".to_string()), (Tag::String, "\"value\"\n".to_string()), (Tag::Name, "bool".to_string()), (Tag::Text, ": ".to_string()), (Tag::Boolean, "true\n".to_string()), (Tag::Name, "number".to_string()), (Tag::Text, ": ".to_string()), (Tag::Name, "!fixed32 ".to_string()), (Tag::Number, "42 ".to_string()), (Tag::Comment, "# comment\n".to_string()), ] ); } } mitmproxy_rs-0.12.8/mitmproxy-linux-ebpf-common/000077500000000000000000000000001511036467100217675ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-linux-ebpf-common/Cargo.toml000066400000000000000000000005741511036467100237250ustar00rootroot00000000000000[package] name = "mitmproxy-linux-ebpf-common" license = "MIT" authors.workspace = true version.workspace = true repository.workspace = true edition.workspace = true rust-version.workspace = true publish.workspace = true # aya-ebpf currently does not compile on Windows. [target.'cfg(target_os = "linux")'.dependencies] aya-ebpf = { workspace = true } [lib] path = "src/lib.rs" mitmproxy_rs-0.12.8/mitmproxy-linux-ebpf-common/src/000077500000000000000000000000001511036467100225565ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-linux-ebpf-common/src/lib.rs000066400000000000000000000042611511036467100236750ustar00rootroot00000000000000#![no_std] // aya-ebpf currently does not compile on Windows. #[cfg(target_os = "linux")] use aya_ebpf::TASK_COMM_LEN; #[cfg(not(target_os = "linux"))] const TASK_COMM_LEN: usize = 16; type Pid = u32; pub const INTERCEPT_CONF_LEN: u32 = 20; #[derive(Copy, Clone, Debug)] #[repr(C)] pub enum Pattern { Pid(Pid), Process([u8; TASK_COMM_LEN]), } #[derive(Copy, Clone, Debug)] #[repr(C)] pub enum Action { None, Include(Pattern), Exclude(Pattern), } impl Pattern { pub fn matches(&self, command: Option<&[u8; TASK_COMM_LEN]>, pid: Pid) -> bool { match self { Pattern::Pid(p) => pid == *p, Pattern::Process(process) => { let Some(command) = command else { return false; }; // `command == process` inexplicably causes BPF verifier errors on Ubuntu 22.04, // (it works on 24.04+), so we do a manual strcmp dance. for i in 0..16 { let curr = command[i]; if curr != process[i] { return false; } if curr == 0 { break; } } true } } } } impl From<&str> for Action { fn from(value: &str) -> Self { let value = value.trim(); if let Some(value) = value.strip_prefix('!') { Action::Exclude(Pattern::from(value)) } else { Action::Include(Pattern::from(value)) } } } impl From<&str> for Pattern { fn from(value: &str) -> Self { let value = value.trim(); match value.parse::() { Ok(pid) => Pattern::Pid(pid), Err(_) => { let mut val = [0u8; TASK_COMM_LEN]; let src = value.as_bytes(); // This silently truncates to TASK_COMM_LEN - 1 bytes, // bpf_get_current_comm always puts a null byte at the end. let len = core::cmp::min(TASK_COMM_LEN - 1, src.len()); val[..len].copy_from_slice(&src[..len]); Pattern::Process(val) } } } } mitmproxy_rs-0.12.8/mitmproxy-linux-ebpf/000077500000000000000000000000001511036467100205015ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-linux-ebpf/.cargo/000077500000000000000000000000001511036467100216525ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-linux-ebpf/.cargo/config.toml000066400000000000000000000007011511036467100240120ustar00rootroot00000000000000# We have this so that one doesn't need to manually pass # --target=bpfel-unknown-none -Z build-std=core when running cargo # check/build/doc etc. # # NB: this file gets loaded only if you run cargo from this directory, it's # ignored if you run from the workspace root. See # https://doc.rust-lang.org/cargo/reference/config.html#hierarchical-structure [build] target = ["bpfeb-unknown-none", "bpfel-unknown-none"] [unstable] build-std = ["core"] mitmproxy_rs-0.12.8/mitmproxy-linux-ebpf/Cargo.toml000066400000000000000000000007221511036467100224320ustar00rootroot00000000000000[package] name = "mitmproxy-linux-ebpf" license = "MIT" authors.workspace = true version.workspace = true repository.workspace = true edition.workspace = true rust-version.workspace = true publish.workspace = true [dependencies] mitmproxy-linux-ebpf-common = { path = "../mitmproxy-linux-ebpf-common" } aya-ebpf = { workspace = true } aya-log-ebpf = { workspace = true } [build-dependencies] which = "8.0.0" [[bin]] name = "mitmproxy-linux" path = "src/main.rs" mitmproxy_rs-0.12.8/mitmproxy-linux-ebpf/build.rs000066400000000000000000000021511511036467100221450ustar00rootroot00000000000000use which::which; /// Building this crate has an undeclared dependency on the `bpf-linker` binary. This would be /// better expressed by [artifact-dependencies][bindeps] but issues such as /// https://github.com/rust-lang/cargo/issues/12385 make their use impractical for the time being. /// /// This file implements an imperfect solution: it causes cargo to rebuild the crate whenever the /// mtime of `which bpf-linker` changes. Note that possibility that a new bpf-linker is added to /// $PATH ahead of the one used as the cache key still exists. Solving this in the general case /// would require rebuild-if-changed-env=PATH *and* rebuild-if-changed={every-directory-in-PATH} /// which would likely mean far too much cache invalidation. /// /// [bindeps]: https://doc.rust-lang.org/nightly/cargo/reference/unstable.html?highlight=feature#artifact-dependencies fn main() { let bpf_linker = which("bpf-linker").expect( "Failed to find `bpf-linker` executable on PATH. \ Run `cargo install --locked bpf-linker` to install.", ); println!("cargo:rerun-if-changed={}", bpf_linker.to_str().unwrap()); } mitmproxy_rs-0.12.8/mitmproxy-linux-ebpf/rust-toolchain.toml000066400000000000000000000000721511036467100243500ustar00rootroot00000000000000[toolchain] channel = "nightly" components = ["rust-src"] mitmproxy_rs-0.12.8/mitmproxy-linux-ebpf/src/000077500000000000000000000000001511036467100212705ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-linux-ebpf/src/lib.rs000066400000000000000000000000761511036467100224070ustar00rootroot00000000000000#![no_std] // This file exists to enable the library target. mitmproxy_rs-0.12.8/mitmproxy-linux-ebpf/src/main.rs000066400000000000000000000027011511036467100225620ustar00rootroot00000000000000#![no_std] #![no_main] use aya_ebpf::macros::{cgroup_sock, map}; use aya_ebpf::maps::Array; use aya_ebpf::programs::SockContext; use aya_ebpf::EbpfContext; use aya_log_ebpf::debug; use mitmproxy_linux_ebpf_common::{Action, INTERCEPT_CONF_LEN}; #[no_mangle] static INTERFACE_ID: u32 = 0; #[map] static INTERCEPT_CONF: Array = Array::with_max_entries(INTERCEPT_CONF_LEN, 0); #[cgroup_sock(sock_create)] pub fn cgroup_sock_create(ctx: SockContext) -> i32 { if should_intercept(&ctx) { debug!(&ctx, "intercepting in sock_create"); let interface_id = unsafe { core::ptr::read_volatile(&INTERFACE_ID) }; unsafe { (*ctx.sock).bound_dev_if = interface_id; } } 1 } pub fn should_intercept(ctx: &SockContext) -> bool { let command = ctx.command().ok(); let pid = ctx.pid(); let mut intercept = matches!(INTERCEPT_CONF.get(0), Some(Action::Exclude(_))); for i in 0..INTERCEPT_CONF_LEN { match INTERCEPT_CONF.get(i) { Some(Action::Include(pattern)) => { intercept = intercept || pattern.matches(command.as_ref(), pid); } Some(Action::Exclude(pattern)) => { intercept = intercept && !pattern.matches(command.as_ref(), pid); } _ => { break; } } } intercept } #[cfg(not(test))] #[panic_handler] fn panic(_info: &core::panic::PanicInfo) -> ! { loop {} } mitmproxy_rs-0.12.8/mitmproxy-linux/000077500000000000000000000000001511036467100175675ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-linux/Cargo.toml000066400000000000000000000022271511036467100215220ustar00rootroot00000000000000[package] name = "mitmproxy-linux" license = "MIT" authors.workspace = true version.workspace = true repository.workspace = true edition.workspace = true rust-version.workspace = true publish.workspace = true [lints] workspace = true [[bin]] name = "mitmproxy-linux-redirector" path = "src/main.rs" [target.'cfg(target_os = "linux")'.dependencies] mitmproxy = { path = "../" } mitmproxy-linux-ebpf-common = { path = "../mitmproxy-linux-ebpf-common"} tun = { workspace = true, features = ["async"] } aya = { workspace = true } aya-log = { workspace = true } tokio = { version = "1.47", features = ["macros", "net", "rt-multi-thread", "sync", "io-util", "signal"] } anyhow = { version = "1.0.100", features = ["backtrace"] } log = "0.4.28" env_logger = "0.11.5" prost = "0.14.1" internet-packet = { version = "0.2.0", features = ["checksums"] } libc = "0.2.176" const-sha1 = "0.3.0" [target.'cfg(target_os = "linux")'.build-dependencies] anyhow = { version = "1.0.100", features = ["backtrace"] } aya-build = "0.1.2" mitmproxy-linux-ebpf = { path = "../mitmproxy-linux-ebpf" } [target.'cfg(target_os = "linux")'.dev-dependencies] hex = "0.4.3" [features] root-tests = [] mitmproxy_rs-0.12.8/mitmproxy-linux/README.md000066400000000000000000000014421511036467100210470ustar00rootroot00000000000000# mitmproxy-linux This package contains the following precompiled binaries for Linux: - `mitmproxy-linux-redirector`: A Rust executable that redirects traffic to mitmproxy via eBPF. ## Build Dependencies This package requires the following software to build (via https://aya-rs.dev/book/start/development/#prerequisites): - Rust nightly. - [bpf-linker]: `cargo install --locked bpf-linker` ## Redirector Development Setup 1. Install build dependencies (see above). 2. Install mitmproxy_linux as editable: `pip install -e .` 3. Remove `$VIRTUAL_ENV/bin/mitmproxy-linux-redirector` 4. Run something along the lines of `mitmdump --mode local:curl`. You should see a `Development mode: Compiling mitmproxy-linux-redirector...` message. [bpf-linker]: https://github.com/aya-rs/bpf-linker mitmproxy_rs-0.12.8/mitmproxy-linux/build.rs000066400000000000000000000013661511036467100212420ustar00rootroot00000000000000#[cfg(target_os = "linux")] use anyhow::{anyhow, Context as _}; #[cfg(target_os = "linux")] use aya_build::cargo_metadata; #[cfg(not(target_os = "linux"))] fn main() {} /// Based on https://github.com/aya-rs/aya-template/blob/main/%7B%7Bproject-name%7D%7D/build.rs #[cfg(target_os = "linux")] fn main() -> anyhow::Result<()> { let cargo_metadata::Metadata { packages, .. } = cargo_metadata::MetadataCommand::new() .no_deps() .exec() .context("MetadataCommand::exec")?; let ebpf_package = packages .into_iter() .find(|cargo_metadata::Package { name, .. }| name == "mitmproxy-linux-ebpf") .ok_or_else(|| anyhow!("mitmproxy-linux-ebpf package not found"))?; aya_build::build_ebpf([ebpf_package]) } mitmproxy_rs-0.12.8/mitmproxy-linux/mitmproxy_linux/000077500000000000000000000000001511036467100230565ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-linux/mitmproxy_linux/__init__.py000066400000000000000000000024751511036467100251770ustar00rootroot00000000000000import sys import sysconfig from pathlib import Path def executable_path() -> Path: """ Return the Path for mitmproxy-linux-redirector. For PyInstaller binaries this is the bundled executable, for wheels this is the file in the package, for development setups this may invoke cargo to build it. """ if getattr(sys, 'frozen', False) and (pyinstaller_dir := getattr(sys, '_MEIPASS')): return Path(pyinstaller_dir) / "mitmproxy-linux-redirector" else: here = Path(__file__).parent.absolute() scripts = Path(sysconfig.get_path("scripts")).absolute() exe = scripts / "mitmproxy-linux-redirector" # Development path: This should never happen with precompiled wheels. if not exe.exists() and (here / "../Cargo.toml").exists(): import logging import subprocess logger = logging.getLogger(__name__) logger.warning("Development mode: Compiling mitmproxy-linux-redirector...") # Build Redirector subprocess.run(["cargo", "build"], cwd=here.parent, check=True) target_debug = here.parent.parent / "target/debug" logger.warning("Development mode: Using target/debug/linux-redirector...") exe = target_debug / "mitmproxy-linux-redirector" return exe mitmproxy_rs-0.12.8/mitmproxy-linux/pyproject.toml000066400000000000000000000005711511036467100225060ustar00rootroot00000000000000[build-system] requires = ["maturin>=1.7,<2.0"] build-backend = "maturin" [project] name = "mitmproxy_linux" requires-python = ">=3.12" classifiers = [ "Programming Language :: Rust", "Programming Language :: Python :: Implementation :: CPython", "Programming Language :: Python :: Implementation :: PyPy", ] dynamic = ["version"] [tool.maturin] bindings = "bin" mitmproxy_rs-0.12.8/mitmproxy-linux/src/000077500000000000000000000000001511036467100203565ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-linux/src/main.rs000066400000000000000000000002371511036467100216520ustar00rootroot00000000000000#[cfg(target_os = "linux")] include!("main2.rs"); #[cfg(not(target_os = "linux"))] pub fn main() { panic!("The Linux redirector works on Linux only."); } mitmproxy_rs-0.12.8/mitmproxy-linux/src/main2.rs000066400000000000000000000174001511036467100217340ustar00rootroot00000000000000use std::{fs, iter}; use std::fs::Permissions; use anyhow::Context; use anyhow::anyhow; use anyhow::Result; use aya::{Ebpf, EbpfLoader}; use aya::maps::Array; use std::os::unix::fs::PermissionsExt; use std::path::PathBuf; use aya::Btf; use aya::programs::{links::CgroupAttachMode, CgroupSock}; use log::{debug, warn, info, error}; use prost::bytes::{Bytes, BytesMut}; use tokio::net::UnixDatagram; use tokio::select; use mitmproxy::packet_sources::tun::create_tun_device; use tun::AbstractDevice; use prost::Message; use tokio::io::AsyncReadExt; use tokio::signal::unix::{signal, SignalKind}; use mitmproxy::ipc::{PacketWithMeta, from_proxy}; use mitmproxy::ipc::FromProxy; use mitmproxy::packet_sources::IPC_BUF_SIZE; use mitmproxy_linux_ebpf_common::{Action, INTERCEPT_CONF_LEN}; // We can't implement aya::Pod in mitmproxy-linux-ebpf-common, so we do it on a newtype. // (see https://github.com/aya-rs/aya/pull/59) #[derive(Copy, Clone)] #[repr(transparent)] struct ActionWrapper(Action); unsafe impl aya::Pod for ActionWrapper {} const BPF_PROG: &[u8] = aya::include_bytes_aligned!(concat!(env!("OUT_DIR"), "/mitmproxy-linux")); const BPF_HASH: [u8; 20] = const_sha1::sha1(BPF_PROG).as_bytes(); fn load_bpf(device_index: u32) -> Result { debug!("Loading BPF program ({:x})...", Bytes::from_static(&BPF_HASH)); let mut ebpf = EbpfLoader::new() .btf(Btf::from_sys_fs().ok().as_ref()) .set_global("INTERFACE_ID", &device_index, true) .load(BPF_PROG) .context("failed to load eBPF program")?; if let Err(e) = aya_log::EbpfLogger::init(&mut ebpf) { // This can happen if you remove all log statements from your eBPF program. warn!("failed to initialize eBPF logger: {}", e); } debug!("Attaching BPF_CGROUP_INET_SOCK_CREATE program..."); let prog: &mut CgroupSock = ebpf.program_mut("cgroup_sock_create").context("failed to get cgroup_sock_create")?.try_into()?; // root cgroup to get all events. let cgroup = fs::File::open("/sys/fs/cgroup/").context("failed to open \"/sys/fs/cgroup/\"")?; prog.load().context("failed to load cgroup_sock_create program")?; prog.attach(&cgroup, CgroupAttachMode::Single).context("failed to attach cgroup_sock_create program")?; Ok(ebpf) } #[tokio::main] async fn main() -> anyhow::Result<()> { env_logger::Builder::from_env( env_logger::Env::default().default_filter_or("info") ) //.format_target(false) .format_timestamp(None) .init(); let args: Vec = std::env::args().collect(); let pipe_dir = args .get(1) .map(PathBuf::from) .with_context(|| format!("usage: {} ", args[0]))?; let mitmproxy_addr = pipe_dir.join("mitmproxy"); let redirector_addr = pipe_dir.join("redirector"); bump_memlock_rlimit(); debug!("Creating tun device..."); let (mut device, name) = create_tun_device(None)?; let device_index = device.tun_index().context("failed to get tun device index")? as u32; debug!("Tun device created: {name} (id={device_index})"); let mut ebpf = load_bpf(device_index).context("eBPF initialization failed")?; debug!("Getting INTERCEPT_CONF map..."); let mut intercept_conf = { let map = ebpf.map_mut("INTERCEPT_CONF") .context("couldn't get INTERCEPT_CONF map")?; Array::<_, ActionWrapper>::try_from(map) .context("Cannot cast INTERCEPT_CONF to Array")? }; debug!("Connecting to {}...", mitmproxy_addr.display()); let ipc = UnixDatagram::bind(&redirector_addr) .with_context(|| format!("failed to bind to {}", redirector_addr.display()))?; ipc.connect(&mitmproxy_addr) .with_context(|| format!("failed to connect to {}", mitmproxy_addr.display()))?; fs::set_permissions(&mitmproxy_addr, Permissions::from_mode(0o777))?; fs::set_permissions(&redirector_addr, Permissions::from_mode(0o777))?; println!("{}", redirector_addr.to_string_lossy()); // Exit cleanly on SIGINT/SIGTERM tokio::spawn(async { let mut sigint = signal(SignalKind::interrupt()).context("failed to register SIGINT listener").unwrap(); let mut sigterm = signal(SignalKind::terminate()).context("failed to register SIGTERM listener").unwrap(); select! { _ = sigint.recv() => (), _ = sigterm.recv() => (), } std::process::exit(0); }); let mut ipc_buf = Vec::with_capacity(IPC_BUF_SIZE); let mut dev_buf = BytesMut::with_capacity(IPC_BUF_SIZE); loop { ipc_buf.clear(); select! { r = ipc.recv_buf(&mut ipc_buf) => { match r { Ok(len) if len > 0 => { let Ok(FromProxy { message: Some(message)}) = FromProxy::decode(ipc_buf.as_slice()) else { return Err(anyhow!("Received invalid IPC message: {:?}", &ipc_buf[..len])); }; // debug!("Received IPC message: {message:?}"); match message { from_proxy::Message::Packet(packet) => { // debug!("Forwarding Packet to device: {}", packet.data.len()); device.send(&packet.data).await.context("failed to send packet")?; } from_proxy::Message::InterceptConf(conf) => { debug!("Updating ebpf intercept conf: {conf:?}"); if conf.actions.len() > INTERCEPT_CONF_LEN as usize { error!("Truncating intercept conf to {INTERCEPT_CONF_LEN} elements."); } let actions = conf.actions .iter() .map(|s| Action::from(s.as_str())) .chain(iter::once(Action::None)) .take(INTERCEPT_CONF_LEN as usize); for (i, action) in actions.enumerate() { intercept_conf.set(i as u32, ActionWrapper(action), 0) .context("failed to update INTERCEPT_CONF")?; } } } } _ => { info!("IPC read failed. Exiting."); std::process::exit(0); } } }, // ... or process incoming packets r = device.read_buf(&mut dev_buf) => { r.context("TUN read() failed")?; let packet = PacketWithMeta { data: dev_buf.split().freeze(), tunnel_info: None, }; packet.encode(&mut ipc_buf)?; // debug!("Sending packet to proxy: {} {:?}", encoded.len(), &encoded); ipc.send(ipc_buf.as_slice()).await?; // Reclaim space in dev_buf. drop(packet); assert!(dev_buf.try_reclaim(IPC_BUF_SIZE)); }, } } } /// Bump the memlock rlimit. This is needed for older kernels that don't use the /// new memcg based accounting, see https://lwn.net/Articles/837122/ fn bump_memlock_rlimit() { let rlim = libc::rlimit { rlim_cur: libc::RLIM_INFINITY, rlim_max: libc::RLIM_INFINITY, }; let ret = unsafe { libc::setrlimit(libc::RLIMIT_MEMLOCK, &rlim) }; if ret != 0 { info!("remove limit on locked memory failed, ret is: {}", ret); } } #[cfg(test)] mod tests { use super::*; #[cfg_attr(not(feature = "root-tests"), ignore)] #[tokio::test] async fn bpf_load() { load_bpf(0).unwrap(); } }mitmproxy_rs-0.12.8/mitmproxy-macos/000077500000000000000000000000001511036467100175325ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/.swift-format000066400000000000000000000001061511036467100221520ustar00rootroot00000000000000{ "version": 1, "indentation": { "spaces": 4 }, } mitmproxy_rs-0.12.8/mitmproxy-macos/.swiftlint.yml000066400000000000000000000003111511036467100223510ustar00rootroot00000000000000excluded: - redirector/ipc/mitmproxy_ipc.pb.swift disabled_rules: - identifier_name - trailing_whitespace - line_length - closure_parameter_position opt_in_rules: - unhandled_throwing_task mitmproxy_rs-0.12.8/mitmproxy-macos/README.md000066400000000000000000000017061511036467100210150ustar00rootroot00000000000000# mitmproxy-macos This package contains the following precompiled binaries for macOS: - `macos-certificate-truster.app`: A helper app written in Rust to mark the mitmproxy CA as trusted. - `Mitmproxy Redirector.app`: The app bundle that sets up and hosts the network extension for redirecting traffic. ## Redirector Development Setup The macOS Network System Extension needs to be signed and notarized during development. You need to reconfigure the XCode project to use your own (paid) Apple Developer Account. - Clicking "Build" in XCode should automatically install `/Applications/Mitmproxy Redirector.app`. - Run mitmproxy with an `MITMPROXY_KEEP_REDIRECTOR=1` env var to keep the development version. mitmproxy should start with "Using existing mitmproxy redirector app." - ⚠️ Bump the network extension version on changes, otherwise existing installations will not be replaced on upgrade, see https://github.com/mitmproxy/mitmproxy_rs/pull/227. mitmproxy_rs-0.12.8/mitmproxy-macos/certificate-truster/000077500000000000000000000000001511036467100235225ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/certificate-truster/Cargo.toml000066400000000000000000000004521511036467100254530ustar00rootroot00000000000000[package] name = "macos-certificate-truster" license = "MIT" authors.workspace = true version.workspace = true repository.workspace = true edition.workspace = true rust-version.workspace = true publish.workspace = true [target.'cfg(target_os = "macos")'.dependencies] security-framework = "3.5.1" mitmproxy_rs-0.12.8/mitmproxy-macos/certificate-truster/README.md000066400000000000000000000012211511036467100247750ustar00rootroot00000000000000# Why we have to create a Bundle App to add and trust the certificate? This minimal bundle app is to overcome the limitations of macOS in automating the mitmproxy certificate trust process. This app will operate without any actual user interaction or window display, except for the possible popup asking for permission to unlock the keychain. By bypassing the GUI restrictions, this solution ensures smoother and automated certificate management on MacOS systems. Read the [Special Consideration](https://developer.apple.com/documentation/security/1399119-sectrustsettingssettrustsettings#1819554) paragraph on official Apple Documentation for more info. mitmproxy_rs-0.12.8/mitmproxy-macos/certificate-truster/src/000077500000000000000000000000001511036467100243115ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/certificate-truster/src/main.rs000066400000000000000000000012731511036467100256060ustar00rootroot00000000000000#[cfg(target_os = "macos")] use security_framework::{ item::{ItemClass, ItemSearchOptions, Reference, SearchResult}, trust_settings::{Domain, TrustSettings}, }; #[cfg(target_os = "macos")] fn main() { if let SearchResult::Ref(Reference::Certificate(cert)) = ItemSearchOptions::new() .class(ItemClass::certificate()) .load_refs(true) .label("mitmproxy") .search() .unwrap() .first() .unwrap() { TrustSettings::new(Domain::Admin) .set_trust_settings_always(cert) .unwrap(); } } #[cfg(not(target_os = "macos"))] fn main() { panic!("The macOS certificate truster works on macOS only."); } mitmproxy_rs-0.12.8/mitmproxy-macos/mitmproxy_macos/000077500000000000000000000000001511036467100227645ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/mitmproxy_macos/__init__.py000066400000000000000000000000001511036467100250630ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/mitmproxy_macos/macos-certificate-truster.app/000077500000000000000000000000001511036467100306335ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/mitmproxy_macos/macos-certificate-truster.app/Contents/000077500000000000000000000000001511036467100324305ustar00rootroot00000000000000Info.plist000066400000000000000000000016751511036467100343320ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/mitmproxy_macos/macos-certificate-truster.app/Contents CFBundleDisplayName mitmproxy-certificate-truster CFBundleIconFile mitmproxy CFBundleExecutable macos-certificate-truster CFBundleIdentifier org.mitmproxy.certificate-truster CFBundleInfoDictionaryVersion 6.0 CFBundleName mitmproxy-certificate-truster CFBundlePackageType APPL CFBundleShortVersionString 1.0 CFBundleVersion 20230512.103042 CSResourcesFileMapped LSRequiresCarbon NSHighResolutionCapable Resources/000077500000000000000000000000001511036467100343235ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/mitmproxy_macos/macos-certificate-truster.app/Contentsmitmproxy.icns000066400000000000000000004557061511036467100372720ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/mitmproxy_macos/macos-certificate-truster.app/Contents/Resourcesicns[info>bplist00 X$versionY$archiverT$topX$objects_NSKeyedArchiver Troot U$null WNS.keysZNS.objectsV$classTname_assetcatalog-referenceTicon  !"Z$classnameX$classes\NSDictionary!#XNSObject$)27ILQS[ahp{$ic09GPNG  IHDRxsRGBDeXIfMM*i @IDATxE/{`frz"A@&tQu>}n*Hs~ojnOtT]]]wjݫZjU=[>-adAW{e˖A<#'v׮]o=Kk6믿^zA|wwygx?pPF|\ Q;wa@@Za>#*~13}5=OuY;&q^B ¶XcO0ݻP' 7| | =OK?ZV={TM@@@1f2x/^v/~OoFU ^|ŪPN>P?2@X; df[J>.D낏3CW,ߌl=ooV/"ڻw4 v@@@n6COnZyң:jY =j``  䞵Eab<qލta>>. /P=/9ŀU͋ Ai gyfw^U9眪P,% L~cq){!~N?OǾxeq+w t t t  LwggA>\pp_K.*6"h߯uDN<=9Y7?9<#U ̚~㥂Z:e{1111q1׹Ogx%6xge W]uU{uqi9Vj Yq{G|p?QO?]< Pcccc```r?L]k+^NrJtzܺS Enϴllc[o8}_>|K_0haDqOu@X37Vg89gl Փ:::::Rd_4rd /Up*eXBp#z8{=SlKRՓ]Mv t t t t ,Kl#[ډ,_W뮻*v"Rr`vCD`3D$~Gp4o-[d ccccc`XLư8eW^9\"`@6_um+k5OY6BhVL?|]߿-}i"ȋ4{111110M Df3r+wk΢i,@1` p@BTϡ:U'?ӟjdD>AT}O;::::! {5o~׿IP%>{am}wygLA8t?sg CdTgkk~l5uG[w D6,صsP-:/9OzY8@Ck8~[ߪѡB 3 MuO#2g~7CdK~cccc`b@ 05e `vA[dAP<[o~AHҨ|ccccc`=a`_Z8 &&)}Zs @x>:Y_ocZVZK$;::::/\sO8ɖ:@L#; Ӹ5Ut?ڌkf_~Ayc}@@@@F@+EVoK~R`2Yε):@g毣<"f'P޿Vv t t t t L mB={ 9ėu\jy=/ t-]:s>W o\hCC@@@@f٘>u?馛”,MiSWL 7]g >::::61dbw{ϝdž"K#[S~Tk^]'z衺cccccp@embL p01kf8b@^fI=eVNMvC7~@Q L@Vf ?-Y; |MMh zgO]L|t2> YgҸmҫ*(h#qcmՙ?+@3zk 3Σ> {K/* ɪ<[lcpܡ~gOVY нl@@@@fXF{b@ sN+dJb@DK?|o f@111111y -vl߾p]d19"@T/8/kWiz cG* u~;@ބ(+R WsufP?Jcccccc`22zNZ8Ӫ3%SN9^|]6g~j ;VCv t t t t t ̏ M`ewu]W&Re+ F*C&zLk)y:::::&c B.;t2=A_~y P̕o9a @i+g+$m뎁JMdc`[d?^շ p ' ;w'ee+0|394@@110sI'׸O3h5kB1`d_vtIL],R&>[X׌P>!k'z1Lyt:i;wvR:eyӎ̽ /p8o*]⤱:ߒR!A/-󟇗^zinK`iኁcl66Km8T0X#f|g W_}uy-c}0`X@bg7 aR޼if@nj\IGeqԎc~{챃AI{Zjo0:S(b` }o>+'m뎁^x/| u)`8 {||Q ?#upc$ICc`a`b]&Y"B'gzE|__}(F=q_}e@JI)"뤞q &yzMLc)U-laz~;%?&+2+${q?QP +w}c  q펁` Cؖ3>};N# q[vfu.mJ_3Y}:ANؙ'L{IǰIϗL!\)EAlׄ=>C1μ7E(}ݚ&  ^:{11E"kܫZe9`"t.mA8QKAdG`n0'U֖ -=gЀ?mL"ad?;?#yzJU<7?O(eg|OzݻϓɳIySV*JaSY|'Q Dqv)@P0f-%y[c``?d3}V%ba?쳵b``},~=c1x)AGz Oq D9,hbMkXu7x233Y - ?뀙eW_)iQ ʏx󅱅 r=_cPc I*&/~uS>b6?O.fIg@ٽ7 t3x-7kŬ/U B0}b5g`?߷~)e3X0_^V^{}x8,SZKA ߋ&B}Xc`-0Lv6ez2 .ysXPxɀ\@x'iD0qibEDy&EffYgUi>!S>ao fiww9cl-r޵|u-%|e7Jo߂]X>'`W^y0I)Y(gMtZ:dyŀqwc,dd5MDێl1;l-c`=aӖO1 0'\Ef5lEJhpMiC]siK>K>y;Mځ,vJ@ |ʀ"`Խω, (Bu~8@hEn;&xg 9@A?sU?G%k?8X 'B4KpyMϯf2O}fmm~!Pȸ[(f|7wW/eVs9 v3$1B&O?tw7 YvE`([-\X+ V&SdlkJG k T"{X/1튓a=:O8ЖS GˀTz\W<W{SņBBo gyfxX(fRoj#b}𿴩ӎ@drd4&z/tD @; - mU>λVv ,DF'80LL9-Kjs;",g,$hs210^ [f!@ eR%ګîp(i3<28oX (hr#A2BY h_}?@,`Bȓ;eόJY?֏՝Y~OIӃ|q_B}杲wq vs}^!$S=-|c`@sh ~e 3Ms[el0` %_Am 蘾֭GV;+񗵰 /0ӈۙ|j+t߆xi7Z~ upSe'(z^{Ȍj)Ғ`뒀 `B^6CsI+@h d8^miNw+Dֹd͆.4 V h/10@ a&C\6tt_gdeFYgBؗ3L1craj+Q޴=.Qc؃` !doe+,0.Wm`}@hߣУEGxLWu-Dvl1үkQ"N1ۋag3ep03gm2;5)LZOg#q4>'=[wig%k:f b>j_,s|/o4K哇fY-M`0meu_'xz1 Rd]~W\Qeu}L vl?X i/%maS|_`Om_^z*ګ#7Ny SgM\}uOP Z :AZ5ӎ0ҦS>s*"5{ꪫ{ 5uh;Q}'zs(C;a ~)ڂ6z\'lKҖ}>S4'c)>b@hx8kV,s f}$ ɒƲ*1BF؉njb +=ExT_җꌟ3>we}䗪Oh3m_`j\`e%m-zÞ{eP\x g^g[x׉ H((q|Oa,Ry2]J?'t1&:sӶ\'mۆ @_r+EYQr*e$ܴuAC2eN)c{ 4Ng3G!X wtv ͌-*4wloUeԑM.>!}k])lg,&u-~Ng%gǏD뻒*$uKp@',2w۱0W3VV$F-7(@K|Yn߶8gQ?*+njM}6Lj}߯; :$YzVV`Lz1 <C ST=3Q~k*M 6hqu&mo C]898;ׄqLggGjc |s-XעݬBuQ !D}s~u-|&o<[ikۄ}8~uY"?3u(pCb x) ɅAIy5~l&jT#\+a`1CH:,A'fV^ykoS2 8YG?/׏8∢W 1k "A#~PQ(ʰ( F [-}޶14p@dœweL&I\.=ڱ @#^U1&'/10c`! Ҙ pe07_r53c?uf001-TOh ȹց1pѱ{fQgߚ3o[Oʬ}e'|vb7փ\'"hAfKDY\bSOQG}7$ ,zӴ:DNvx7{S4xD;;{zxc SVz# sc`xZbS p2f^t0ɤKc3}K: :vYD!ol'틴e;V5y2mq:ĥt`* F ) Ty?j%@bWރ'w,?{Gxܩcܯo~ 1GPf$(7?jzWF m_qi"%_1[8,DAVbY瞉,fԓp1oy3NS98ý"G鲷b)ckܿģ)&#| ?ښuGJCbllnggG Ff6Љ&hcVh}L>/k_WLŚ?UMF^݇b&2Yp$@1 "*+[f=Q[gR$`kgRw{g ]5_/_-2``(fb.Y8G&82{܁=48Mƒ32Ub{oWM&i=ȸ =1YobR3fGKr1@PmW~OOC՘]-@ɓ"aoe@Y)(zm: ݃u[fש{K?-c`w}w]Sev c"tb~)2~ՅbC@D`Z=~m}9&]s͵uv>_Ҷi_k3!?i6G01~ƟoҾtҵ<=,To:yb!0ɉܺ:AWRfJL@q@cm'c|5i[gh+401m?ckɘ;~Wo/1@֛{[ `'tnDkJ5.'x#/YSk+l߯%aImfWL=ױ:') )7Ngһ~?] GI' UJ̔yլ^ϛeUKj`tW%&wk8n gB Ťl~'~vm&zAB3ek6M,aJSY:Vb UrRu ֨ͼ_m֩QB9> p.J _<)mH}כd='%^ as|#S/]0SV01|mT7'&`~f  }?f1kq/AVQgyCxL fa[c 4Va6<X)v XnIȸ"=<hi> `]'œIA1=ۍۂTY?FLi-׎\f1_qyY*$ 諍mi\~\^BZҘ*QS-}zS\X'ָq!_0!fCI9/? H%0Ͷxy62eOg}0ߔ>O[Io=(tDz㏕/]A*0dM+o6Y(-)dARW`m덋4ߨ-eȧ>R< 7Wi^fMh# b^mllom"-L3'em?pNj}|gKfvv3uyb l/*hzƵ*nN u sEbta ?#IL$x]O@![qn׾6r-w鏡ap _ͳhroyv=_?OÝwY({_,k[2Թz'h6Z0.XO.懡L}w!Ѷ29i0u.[ڟ&/ǁs#tA2vk4Z9}^!O0 sz [$vUe)&/V`VӆdNtZ >bf~h_`eV%aw ,ٝ~<Ֆ')~f W_]i9Ѳ ]u{6~Zi\?% 5, q`qn?$)L,F$ cc=Ɠ4%'@!pOZdHv;f7u  ~Nd ͽ:M0G?w!90ㆉ;ˑ~ 7(_@ ʥt$)27n:ffM!4tw J .Cs,hoRU= cW>ud|4ԉ_cA<-ڕr S r7څ0``Hq{p7Q0 q 3hBm-]Cb~w8vwWq<;jtd)S)(/F lԽ8zCtG1xl{WѼz)K`[{VlʇgtfwuȏSLZ_2zƎucXc087jxr|#ڋ0#ƬI%,svp-1tM ^W6gL⬣;4K/Y|g)e"liVx]U6R}u_WsƯL87$M=@ӂ{gjGi}f/8bWN tZO$ % ;Qj~)N=]; t`p5g$߽ÿ}˟!4LM"F`Fof&~}p]e $MӀ11#$guNd8/|K31#uf2g `۰X+t)QXOjpp8  G{~Z+@ddM#s]w /ZkgskC[Gi뎁͊лlQXהjz!2 [FA/}lF_^c02Hit!Km(~{3f1`RGWc`a`<~ K9Gŧ^fx@}o[-.2KkBd}>u(J!A;XX"$ n0`n]WÃZ:9X^xa]7X,sΜ4A:CDwZwub_w b`qA~ P)x!,d/"־> m~PT NNǬYPg+8qɬD#3ʊ=L0=\iM7|/ 7Pazʭ&Cx1V)]?ʉ~>H]lȸ 7͔o ZhT^`0@ԕg+MW]uUMPD`>~gv{JłM@L˺{Ak0D_>{qo` T_#FlzGN}ؤF::|c7˾ @ ƫhf.92~;?sdr#x/rNG>g-Ư\ʞc1 t b:3hZAO~VS`l{Z,QDk+ã>6gOOcc`Ș1D3l4sfR8^Zr)UG,9!z Pvm￿:'~0O~t ]KAiyָRWUU? AB <_MjS,ԙz8_%mx p~11< GJgm4NX(Ў`RWUTU0S"-?Pƒր(Bip/uJ9f~W~  0nOPgffP>׿??`OКܧ=t t A;. |KqրKra<[`\Ϭ1g3|Mq9Y:WpYgUǺiICOu¸p,uLxrc}gd??{ŗA eA'97# ۶90jrʩ. .ܙ}\ CO#a` DaM,>z`0i[Pwm=}L 1'NIjJ3nm'؟pgRVo%g)oW0ޕwO2.f >TU׊0 >X*#J[%J:zˮ.S78''-'K@WAb::ao~:}[ߪ`䉀N[}lXw>}ھwQVzm߷6RQ^ 1!ilv)Vʶ᳊Y0_HWx? , ~W=)ϔ?,O?5Úy¿c;a8ӆpa_{-pT9| MG0-r0h >{yUm0ዡXſ  }}9w]=#Zمd Ft~=\qoTa͗Ng0x4 }ch/oz1q%u=;-{3'E'G,^I];3ֻISa=v9 cp-%( Y ~:w>*?;s/6P vm@{(Gga+_6b]럵:y_ &mPe:56~Kmϳ BIF)XM|BXwtLHE}u<jW_[|X l% COcN QV ¦(3k:1z~q{G}LVR_RBff?E@*5(hȽ"ɫ\Fb^ ~py\d|/%B>A:r>pF7qGop\'1\ra[ N=r8X ˣ)3v^~O}ۻ>vgxW%c۶Y 1!hF_LJt~ůʋ9 +ΚOk5D6&?kEV:]̀swc D-|yBs\uX4Ō v9G ,>ן(zq{׬3ѲmR/W?@ =4ftnK@IDATLAЕ|>ay/m3'/6\A1N>jZMݟ%?^Xdg?^fFLDпq;Ci]~ ʗ~@W>}( qb4[,k PS>\v cH_\ B~[~ lb7.;Id#Yw")w"W7՛~J0W>:\mFG!ȡ01mFX(;N븮~1,}޳?fmP`' 0hDžFma̶v W}8#?Ä-U͆ܓ,V}Ù'Q \ߋ2G_-;affkrb,@CI?Ќ`cc+fo "Di!R׶K#5300u3Mkxff )7 86ZY7 /'aN"%/ϘŘ) i}}(p>@УN\YSD7^/Y 'pɷhg9dlKIPXNJϷ"`Wޭn?bp[^qK<{pʱ8bﯛ%KsaK.[R|.'2_-O^=[_K 9"g ": m E7̡bm/BH1/g]7gw/`| kefV}l#.ʇy3jah '1߈i>f}wCY! @)f,QË~vS>ϖNj}^O<"z(N C)E3koUDbpNpx/D Or=[yM@L,Wj+ubE&=;E~%mn2F0ȶ_ȇCʑ̟21V RZ%aBՆ>Tb'K#8%r\JRP,UOukqh8{ -9QT0mm{ԊSR[l.?kpѬr{:l֚s ,=Eo۶eϼU~oxO5'?=>3 I 4.Y6BXG:L[#X5ЬE?os疁Շ+7{&.fp8 |8I}'N c 4vl|7CA%6nY1r/u[(E@p+{u%cLE xX( еHq$89ErMaE: 06ixIg|PpY_+ל[_jqI/ f{pl̀ >V<|P,DEod^xA ~cca7^5CW3v3~s_ͿFKA[&o߯~W8^%`6bcLc̈vvM1'30-m{Ǡa {}|)<~TuP(ŀR@nC[pI|˵o~Ng{b ,}f6_2{ _?[%Eɲ;/ޚ5#A#/kE@o<\r`ky[0fkr8׏[ִ?vyZ;Ͼ[on4 0l2> f;lI'8]/lx;, h;m&rm_[[ϔ3.($ _+][pXtX|<t>VCj̻)Ex9%>ZPx2?j;S ̟0_++T],Q|!~_Q v%(yQr5f)u8p\9Frh޽!~M2E@c߯g1)SB$\iׄ}E8+jז>3m~YI3 wGp-s'y&W]uUKL[ %1| l ۼz>Kųo ̡q8VW">B#Ɔж|) n5)Po˂2+-S̔Xp, U)m] ,|l ,_[!pwryٿgXUW%Dh5uhFU!C,E2#52{͆/NE@< lWN["-͈333UpYx@~&hBI=larbG0cxH{!4=~35ߟ!kkTc@< }|5lU)~00f33LGu3i]fh7BGv6oOApW23_s|.Gjq6%c z,PwAg #Z"46fLv#4l+#f&e]+Jn?`7l)fy 6  9m+S37p"R?%§`a`+m>; }[eF0h2(Rnrp)lcm{f~8lߖ2 z}W!m$FHӏº˜JSD%pff H),g&Rr 'ɱ>9ŴR$oqo˞"gG{8q,tVgq{ `%D6_>]8+kg f 7*(Ft% ')?q?Ԕ#Tf#GK_gY믯BgRƬ[/l<_wJkNFi-l㾦2u\'m!@(lDNgdRdфzø ^:7ucvI7c2N8s_W~ů[~p6]7/8*+ᗲOJ};`l6] ǁNSYq+`*LNY(LVlY=: Lkp+r&>Feg]-X}r]/񿅾xqlgZ7v[O16# j<`m~88R]'#cx:S{iＳoxgW9MMZ?|P[ Kܫk7/N=Ym3Nz20/KzjDc<ƭ/tMsOvp-&z٦Y0.7[+8qML]99z2x%JBpZo\Ks= ,Mo5CH: O`Tn(w`ۃQ8_~V_}{ 9Cco<98&ݷ]7?+^\#Ku_qͳS W%{G_S){9ÙŁݝ;o(l~,J~ζ @e\d0a ֔yc({pJe435E½ ?Jhgsl/8MΔ'/f;2y%dƯqL{m\;©M*;Ƈ{z[ <] 6w-`iqdZ#懝X#@) `2 .uO_ޯoW+i&eprAO>> /o {ˑE}?s\>Sx_vP FQ],߉8 9mt/߼>>|%?@X-q,Lo喺#_;9°I~!?m_8oQ򷰽 1v ofnrnGH3ze9}q52%u-Zz=)p$R"EYGM#𷩾isRKnˮuImxȘf{,<ȜzB-M%Ӫ;D|#ʍDEJaeg.߇x)Ծӎ;r( _9ޯ0h |oP}e?.c0>pDO3+|SY|xҗ)c ζ`$9?>]~Kߌ> 垲/;]駞>.y|}~c=[?⳵wD!"`i^WY ZgЃrև(&[5OKB\&T\suQoKN郱niL$x [ ' ;wVo}kqz'x}%>P4gojGc#0%vwo0&%M6! wL26bYKf֕}[ CÌ yZg*Z;niη # \]ʚQ0?u[σ64zَ'@ttV:zIX)8D;| +W+;o/J9`(ᡗW>/?~'B8‹+c޸cWM0&kyzz+K*@">uO+ rm"e_kۇ;n*wmF?`#y±%e!oZw`Nڶ)~ff"O[t-9^vl 4P-E}vqSL 0k=sLB $WnSvgόI ]>PDv RZVw0|Y`t Tьwg"[4w,4[LϿwx(Ͼyܛۇ;̜r*>&Ő. 吟}~-qptMu̳ bKnL𮇥a+KSN1*Ffp@!K,aO K| LBEm6 \kB'g{%$$(AR|ibK(VbL-0NXX=e! l!8]3L_?_7~L;JI, C)pۦeuy)IoZiH ~|;rxjɑ]z mУ-~I?eG?g|C}\(wsOi}]ϿSïc+Bc#~U"Yc/_AI0i7Tk}F6,#*`Ƭ$f)kҞyg^ 3R;'?{;yWf~++JG?j]+\_po-Bx36fօyTۡ!5,_oIh:33S5$RH_'R[ſԙ1V 1+%TyUfEuR%8W|~R,0g;1G(E'~_ٿ  Qڎ7,UP8=3u`@b ac@o |a T9+mF[20*!0~#E'>1`8~uEPf}͞2Nl5xoշ3z|0nt*BY2{S (}92mES|ӸV7uJY)wN(uW\*~bu%0zu>ưGqg\_{+^g~%w<'trgZTn8ZndfCzmx >93?4sIC6@Vԣ|4\,o{x7`lir1{if4E Y} F>"# Te Aڝlε>E ߓab͊`9o Bvf~4}woA{%/e2.^|3,{n\l-u[ ()Y}iG1Z0))&DJchK1yp2؄wa0T0D4?$U0nX$o, .6j0bG y9|0txjG#p+XZ16,5KY#KuGhI߹ͷx7`f̙-)tg*?xNh f֟6dK1clQa+*Yi¢"e8n(vY7ZrTº^p8z <_ae`Z2;'z|+ a?&:)F%(It&f^ eNl>[ ' vf@?4M>>\]~(0ID?uK0q* t#Qxԕ񣝌^޴>‘rB8Z#/oeև_0(O K\[ׇJ=`[?y5/c/$Ld͟5wgmV8U"dG,feߦMu6ZH߂OiP?>O_&[N&F陭qJ{̟-)>}LIc`||ˇE @9fY(ŀ॰9P+jԥ^gkuV t͔Mlc<Ք nA_,}Qx)`,b#¾ů~gB^MX"6*+ip/pGBe?auPNʏcu?NCmo߭I>XNR'?kfo24C."1ctkyaG+k3=:s:{: nZ (Os)EN'I=҄iZ:N7LX&, (ȋߴ0zI9r~S\_R3-jw4կ~U?3zN` anRi4Z"BNZ9~I)p^Hz5e?[i l)Iz:] ۥ|äV#X"<ƐYif^M;yT=l%Ɓ 5%P)ɛ+m{x" znѲ +i|0(;xfllf%Yssmd"̏Y[n[Ǚ+!~Y[Əp&cbt C`ޤ o>zvw T~T)F k(=l̼uˋ? !L!H. `81S| -53 zS@-}|GJ٦X{>)1.u:"G 7* ԗ_0ff|`#pKyɟ@4[P_w@W!.&kl ɾKu#bHn»CœZ氬Af}v]}(曫bqg~>х09u2!¯D3~&ai(ozژzz1~4 BǒHX19Ak۶j?!"OqAV`rm@ߔ-hʹ^uoDw~τ~e8?II7x-|򗿬ń?s#fՆ0վ C44PV-Yk{5Se"HeCSgz2^A` bvLa'򾅣><t1hebʎ~\bS@@iW\qe3G#v.ͳ%@xl/c9f|Lgmrn~VL:}al<ٺ*mDfVR7ݷqp:=CIjf,ktkS`Yڠ>uL#G}r;xGK8ïw ~1.ӵa 6 cqe{P))זa'%r)< P09򉙿333s3Y8k<9J$n}O7|[1֔Ʒ.d/, a50Ls0-=]9[ ΠFo4pya1x@Yc6|&d`g vOc-v -y6{n 22p=bfҗ4wf\2QbV$m:Rv b_SOOᦛ[{ ЖɻAtOSN!3|]>1&l-IИ-94A(q+MՓ1ON6{`0}Rk@[N`f!㝼 +ZXM6OB0r͕9Zo3||J~;n ~XVu L@$Z@*֚RGWf#c CfZW&cd%m2/+2-'XaV2Ã׬`fߖYd2m?*%?g,0A߮ [a?x_t ,Gt*n!|Y>'mi `SKI9c`8 'y_C8j^/'U)Yulˀmr8Ty/GcwK/+a\7JEs̲BS|/k0ӎ0As* Kh_{Wq`"!_Bʯf(XXS5=` 8"S&pc`1  ږ5*g s*CHkokf˭{ I6f#Qݕo" 4&~9p 'DAIl*;eW[?͖e VF0h+eVn/{x`PON.'?QY꘭1 Jw#}.8)wI&rU ţzg_Z=[a-c`@cNNS'fN50CW;>7yH=-sPX)8wŝ756`0!5~ТgwO9ˌ51w+`'\`g5} jYɝw~[>_C|=x9%J caX^ 3-G8RD16zX 6@Ra[n*4t,;{)K3:OПmX;J~@0gJd˶l[KW;{z%'ٲ%+Q)9黿j\]d{+޺uSݪZ]~z_Γښp0mmaG_q;~앝CEk+k Ld?q1/V/XKq%RnKO+,m`:'zL,Mu=2W)<l0Wma5kBȸDI4]"GD`mqf<8[ aʐ0:au믿mPū5"+.|`[Z?k~co駟.dw/˗)4N4d 0n(!u bddj91i >`+8׆C%UUGDC,{zI|/۽4'?64~VO_)``ti}V+&0]W&.' y'rxKHytc%{]#`fSSS՗ƒv_x|0J25ѲpΑz~dߩ3MđDh$JAB(aI,MIR8.MaB۵0`~k8m ȱ`Y kYpufۻVVY$s2H S?Ҍ;.́/⑘{+v˫.ɸč|KXx vZB{%N9(.-$(3{B3ny 0BHFt)mR ǐ8iJ2O+s!(FYA |wY@ UO<3!8ˁӌϳ|?Kx -z HB+%8 BM I"v.dSP.tUkl|],Xp7G~Hf6)+ǒᷳL,mf}"#4 RffA` Z/}Km7尟X>?tdqs[֝m;BP N2{!#=; ke)3ǯ,k> .t% I28jؐ1)m8W7 6i|W">|Hb&B~#[i˟?!(2ɸAv7Vf;c</=S,]eAY6LWJؾT}. U]0f |rC&Di2A`,WǝO~r+!A`B.7-]^y2, 4k9FdI5escY';a3 51|s맆?*0L{0ГKo̍ 3!߲HLiُ 1Mz a>^*:^wJ@ Fw~/ƠqfJ4e4 ǿk?;a8Y euij,g",舫qldwK@\4;)kT+Fk@n2bm>S$BA` NH1hA: F/}^}2G7{m$ fd!xNy>A|WaM8;wd@\DƟO]]o|]O+Bj^Y XZ5!ś&lCօԡWZL&>˄lC(`@Amb"N?mLlC2܇?O@)+aخ9Mr / 9@s|/Wn 'U?e_nbjD|緹 qN(qfZmi0|+ 'vpJ/,mPMկ~U%rZ@9MhwVr|};ǼıL9y3s$d:+D4 sLr*`r4 [0)-',{@gT|iSa6hy$2:Vgc-`n-lG2QE19^(8GZmL8',_E~0Sn:,%1.`6 6ZBGq-qV>OϻAKAw!Xe1z?W;K(ӹ2Y.e/$qmo+8 [7p9(3p!yVDJhZD$ۜ$At,b>33]z#$g5b}\` HL}+m݇~~r|bĖVXo 3ʐޅn`% /F'R"3W}߮Ī,ŧö)Dy3trvcs oAf{wZgk&!N~P}HI\|6r>)'c0 q1ul(xp,*3$'\g }2]݇v3^Აw{C SpB>}3&>Lnl_Ksf~ 0K GN8G)Jty&pdO% 4;gВǶ4YOf"H@IDAT^x8_,?a@:%gE1ɛw|wtu ϫS)6n\_ڹ+_e_(Z BҴdy$?:8q`Eᩫڿ}Apt6>i?!E]4Kzy`S4.]U,*x 𖎕ٟFV0p K80q&@H4pb |iƒN׌UckT՟^CL<*~F ,)a3u A >N|)"o>gYyolq7CpΣȠa0Rs>9޿M;-! eMg,X@{M#vϷ@f>l9ض1H?w󝢕+?tzpx9p:ʉ(85P8 ^l/OCY1n !5_y;/~u#V-4ץow͸{޷Kw7~Ͼ4~]c` :fl5 ϼ/4-=Kojtm9Ѷe)$K$ Iʏ?XaMGd~M`gH3OO6dŎ~iqioN8<'7:&ço<ڰvQUbsW7鯮\>xŇT0}.V%0%kV$nه4oG`ט`sLq[/b.38~1%Snzu/v`げ0 П˾wg7]@^g]#4')2얥 \1=ȣw4(s L;r=β-tYe l#YuCyoޡ;2ǯիVW֏W;7voZUݻeMsjۺ8|",鋵ա3ת#gB8^g;3 ˆhPGKr]*O? 7&=ܽc})0dg$gGC 8S O6»?|k@N,>2n1f? O~Ƨq8o'I{,y :_DOiD6bd:7boe,cɆegmO~_3q߳C{ƫU[c>&0s:7s-wr3.WrBPt! =1=2,ɴÙmi6`jMƠ]00t0io>p/r?ˀ7tya.}La!G lO9]T_/SL: ;O`f 0Ƃ:4ď[`0%4yCy/vP/p=ǿ'NUl]]ݳiue!ruµ R! !R_l,}Q_@iC%Abt% 8F^pi`H{?!󧙀0c?'X̞`\`d.8Jkqԫ}ք0~k>&Hks/>f<e' (  AMs`q+둿]$i2CVKݙyB0׿zB־ŧ&>8Q6Y, aM-:;ƪ{6OWx'R!D4FzaZ*]vls޵sl@#nl9Tt8 cEaH_{Ol̝`z2hUۛWƹ`t 9:NLMM%,HƨJ =O2֬Җdؠ@,S:6$4IcG)俐4}B奞Y_+0EWp=g#|Eu"eö`mj;:hPBpe h %Zն=7B碘YJ^1_x-`hDsTa*I0y>h349T85Cz4]$xml ˆh̬}K}`"x74UQ ! +L߽W(g +ՀͪkQ էU=tX(N=[ \4̛ɘfHرc{L\Rv7.{ dڈћX,#:K˼0^ V ˌjknmVmTs U;ҹ.g^0H,E'}0O3J(>g@SbZ08lD$:&%L3{v.gqQHOV~ZN[j`;7~Y{K]QJƏ0 7V<{,WWoFJ03'wvəzر3EPi~^ω+o(>nj>y0) I,8W_{֣WM|aBՃ5 -xn+, ^w sVIEK'.;켘FBHD3 / 0.4:5<1cˣQqhT7cȺ\Fa3 79<0!#ذד"_U1gMpuY8}jbØ! .$|r*V `6m2OKhjԤ <2vEpKL\3P`\sz#Ф̧6?]n駾h>+GJB )RSX觌.p ů:R˲ ~zpۺuu($a&1v o Sg#n\ڿ 9{l9/Rm -e?;%`P `2Bn26c54c׸eʉW \޷r ҞdO׵~q` ~7rG]lO>=hO,EXKX^z饢־-5p˼Vڽ +tm_&) /~M{8@V;5,Iã܀Tgݥ7Ahc]vX}aH,pryh/~瞫o~sۂ>~puv5do߾}eš$-6CMJyn3m8~iYc`EL-xmV~V),t+Z˽4)S7@yftI֟Įe:Yv{П[f}:5͟A`X5󞉝Ndž?/]7~S\ GqUTs6 dǠk֌_W0_;\ڔa1aez_׿>#?_}-Ed~7߻{ xl !eYaZ(_gNS0Jͱ^]hD+ pD: F¸s#N8}Z F73RGZh0KlYfO` A$JH`o'9'9k\ܱW-{C3g||8 >|J8; Ʒ1Anz0i,7BYm۶VO?t0?s' \!&%(a?w&'~!Ě#rfd_ xp -`@h$aP9 T] Ap/2AiF^ םnX xh:%@%)?o.b,S,G1rr0ؼ| G:;^ H0W+-?hn XqU4ۨͶ6C[ #p($>ariĤ~fs7|@+"?sMWA4}@Ԙ:M`39vS>iQ׏ZLl׻ڷcM%  VB9s`lAT8ի뭇b0۷/Rb! z]W3R>?RG oUO1?w w+[7:f>`,;uWF[Bd-e //<[+jx5RM (8y Ï7_8`휽xz?Ǘʾݛbɰ*Db ?\izV00 &Kp)L]~&)'Jm?=XlHԅWY?~P=N錀44M<̼>W„wjC]뷻Bv]>_ !,462Fb#Y/WRH}%NP‹Rr[?7/x Qƽxe;S7 bO;Y ?]~aqiyG)>8ܖj}arjbתpMfrկޝr6lP=45Uγ7uC "n%q~k1Z^_2mcmۿ!fXqTH̻rw/f,ixG?i_2y̔Vps:,oW+^}+Ok_ԕ_$RQMc'ZQ|+w8JpL/oUf3*6@6>1z55q'" @GU3UWQA8l`2ǎ>?th^z?|5~澉rRX PuEj! s6bc6 n>"`9(nWlrz'PxGX6! lp& mI g]T 7M@۲}Y! ?8΅X ҃U;46/oM ާcoSYA,d'Ŵ$R r&!ShoFR9:a>" :4;׳_H3 oD^y-;'ҨO2ҷ~Թ 8=0S ƒ@_{`zpX-/7/W>~R?vN:p>n/UHX\Nz뭷 Sy}RS_K 9k)+gW0Xdh5ʕz{SOŎ*[9)cE"@0݄E!04u%\ތ3zjG6<_xNm63Hׅ f4`\I2vr&n>k1ߍdp#9o71E4G9@DZeyjj:ÅP!ԑsV{ʲgDXp Wok`4hgœ~~rz3ӱ`;vU_4lc'</PE"S"Q{8daQȋ/X,wR2#pc|*ʢb* v1!hcB\$8.AN(-IO@v])K X0I`!-/@ +ss!; 9i!0/@9!D"J ̐D*/]]~˞hai:C^tհ[qLp}8BbwkB-k%`Dh&>&oW\Wߙ0vt G7D(coꌓuބzm߾-V{^u֯coܕ3 7}x\ʧÇ,C;M`䏐2PYX!뗌 ]| 3)\?ˈ3>Xwqg dOh' L`;~?e + @@"X! r *% ,ެo߾',s`rZl ~8\ UUo{b֘ X"Jl#Αgx`orڰ~]1%9b?Kcj99F3XOcpWm<@~! PꍯQR_=_6gv]iecoQ7Ď,U.,l '?SڜBxW[ euiV0ia6#aqF #r31 C};qLMެ6+Bk>6G}e pZ4y x ڏ p<&Ʈ]Rl;^fظqShw_(Lss@2%`,q򗿬~:gT VB ZbO/LSh拱Gǽ^{i?&; ߖfGtl 1\iշ٨giB `= SvZ+BvY$[%goTYX u λ]ġA)(1|K|f: v%}_3N; @ALiB:( @{$eCb`i)eӞ-ި߽U|BOWl пqēk'վ ̔2VE/ d g(e]} u9Տ)۔J↸K|-D#x0,pL-;˶0hT՛8tͥbnc!x^; V>C!TQxЇdx!?8gN7BW!S `"?:f cpjm6nAisLO=Ty?,NcT:X(gǼU?O6f52~s''^x~lq';*FoBZK^kx`d~Jm(o irU,kUkCM6y}<p`g{ s9LBX}t:w>@'T*icı;ejL/(u"X%0ZQկEƜ`5Oq} .B' =qCs WM^3OouOBS\?Vy-Ʒр@̻فw̥HRc+Jg-{%4aE/X@3ա"`g5سwO>\?ofP`d/?? 7. fYzN~x!fkLX$" +y?8H~[h,[|#_ ǖnNƬ]7;{ls:|[vu֍`<,?"?Ώ>Lt}!+s?J-&5v pl2 +0ZHHŒ B:IWąե]o › iF+tH + ܡA  q]0*|fQz:"b̚q}M'z,=slA 1&V^iO $!wVW1G$ș~ꜗ6ha)#%S}:+'A^?G9^Tpliur_-~5ՃT5c{07ӟ Nӻ[Ec-2:z: Wg'4xF{<z*viRH'/uOoEai7?( b0ʾ'' T"ω@.n.IPMG@,C4E(H \9P0h};fH,D)" 14y4RBnWZHxU?W\'?)k+d٣_uJ4\1aﷃí`psd)0w }llM{B$+qδ}:e5V=w}oGo9Ʌ)cqzY@X b ߵ#Q΄iX?{G.б$ޟ AaiÎΓ^0h\ZM]H b!a'C(˿CMa+ @@Hͥ i%L%N.$a92`M֌qowGLwLHV"-?ٞ*O" 45rbf](|>^_W|;!)Ȑ]6`4a[lGӟկ~U1cvraTޙۧ{ǃYL' sW{u%e);cث"Ȱ&28eQEvގ#?M(Zn|˛%h7C[ 4?ܳc~ߔ@ x}4:>^`|ʒЌ[>'n|>l9b=,(q}։$=\0Ju=3ߘ ~RWab}axxL0/37vG+<>]08ma/a莏%ߚ)KIFu "D)5б!,;ByhjkĮ+C!1Sia4>@d!"ՐNlL} >,R%,=AM%rd%=k>B!3fplHNk|s/@@[hסYQ|6JYkԧcc=^MMM7&p"Xǥc^3ݧ v0O}GNޓ414ퟀ$K3n?u'+ݿ9֚d؛Ja>ؽyuԞ>8Qݛ/WXPЉvӧc,׹nf7>E:C)>^[ B\d˚o3%6vq_;V}-Et#q8jX7X->,8HHNo'~@Yȸy^aC I|q/I#Mbʋ%3R@h)2 y?sbdw7åó}Z̝{/\#7@:kJׅ j`8!o̴ X6h߰!"n!=K T>!F*m+ hL6u Swu$d>t?^ YxF ti/L+73qdt9'b e@z2 P!I42 ,XA/䷅sӃ& X'a?Q`MIJBgj\mO_0*8J`?6q<zcĺ}u?6Y i_ VE_8ٹTl2XN}{BpyYB/!uLS Va_]4wLIGh,[CP'V B + ԋE>_8MG`cX/ l a¦Dv$|3E]k? i4IoumSe&z4),MM7#!ܮd mgwNj-8=oڱcF$,͐7-gNs;`9eS`7&Aa0G\qFv755U?p M}Ixg_e$]a.n0[[}}j"b?.҈O`,h3XX N^>?mص/EfAgL#3Fuրɉ>8<ĖukB{!;Xvhl6DxPUꆕ|YR+~oLoկ T5ĚkeIROLMQaO"xB֍Tj1A )A,sKb,7ue音v9Sc%-}$v1aݾ}G!ti0>]K"vIndGwK]եy?`@#d#!s?R/|Zu]0ث>g[OT?xzf0€t*G>c|>6ݸ> Xw;L]*`pb߁G_-OwsBh0;OFBAԸ)N^]s%{ !f-92Q#9Z`)!/9-K| X9BZdM$-$a ƑnzBBs#1/{냻g!ebZms%|mk(f;+6p 0^ ۄ"φHL/zZُ&>/>9Y}W(5g> ^uח}}哙/f``9a?/9:( _/?0^,7,@m3K6Ĺ ջgʴZy ``(:D&Mؗ}Q*y~qeQDu@ 0Vx>Ќ m |qFFh6r}g^L!.~kkDN|=}+W~si!uYʈeΟcfR,W?6X;8rZM;&6 ;M1K6%ao2~'n|]2Mw_ `JФF6MFD3C M5 DB5#>K&ۛv7JzgY|3 | u5K/_q7;Y샹)'U/>5Y4s6@\XaѤ[_~a+-wJE>bEm:p)1[Sw<~,~65iuJ^WEV`h~{^Y~۩򒖲'DꫯU7~6_R b@`a* S +Hn)4 |p<^<ڙj$}5r oHmDmd{_{E;0Km@̟?=1Y}pPQi'cTʗ>KK>;l(BB!<aDqx2]6„Qt + ׅp&wɐKwdQ"p4 >zv& **8 0(hǧwS({5 B`SJeskRy>ycMpL0,h+L, mJ @N;.4a 9>f9B-C?X(}=b e>6>,/oLFbSSSE@+K8LO_] ˱eDEl8 O<̙9pƈZc_bsTpM0_zeL^X!E랸vLQk,Óp]H"PKɹħbm陫ձp$xBY|1 *z)ե%jgbӟx۱ca'y>8K'ZXĽ@!?#Ey~Q渧| yW.Ld[dEh <Ʃ)inuYrf.<wLZ?#ixHa w,OS/WTMyK_Y:o?g*s iX gcnwaϷ.TȒr.`V Dqq_6}l cq!kSp ,!L|t0!Ll!x<Bs'fChH+gCHʑQK;GAGb9`7ob:GYΒ`ni++@ju)8mF>9nK? ˥::17 W?_k wi\0rfHK5 @r$VvNw#*򃀾oKvB)\yӚ+|1t\2+8KqwugɈaXK$6a<峉{D4^}a-፿a/6ZnN~u$(y],s Ÿ :9}3<@="Za?&3yS-Zh3ˈ4XP v؁HZV Pa=Gp@gI`6N!ƴAZ~1K.BuOMN%wWr Y/fcxa`})}b@IDATc7wx5F7Lߎ輣- #vnܪ 826i,S0{k5_.МMM[VOnY[=y<,vh5aߡ@kA@.E䙘?.UnT=rjzd>gfeTh~wy0z+ LQ'ƢA#gW<xG=jki(?} ʹpC~ _Kͳ!s`j8"jn##@OwLow'D陝K!w ̺X|\ E~t.%AyFSBP]=c&>7mzB7/,/RPuc̀]/m[[Mm3̶sB Ï~f?K]J:Ixm+){/nczD|` \+ñ^8=^Xb?X*h_2&жƔ#g ļ0H.3F LI|B͘~"<_3BfuY>?'8X0ȂF-l 0?}u7wm:/r5<+^[^2OISH-.L}2, q C}ŎaBǫ/5 lBQ_c `p&+]*y,|h'H0zOla "XD2kUSSSeWG BC_@; в j ֜4h|nI&1E0e\ C!@ 0m0cO~+O"N7}ʪ| |V|L@`IbDGW7w7bn{ϖ8h)2Gj:sz)99 v2g}0ܽz*LC#g0 կUԦTύT/ɼ4|1-7p '/ ˺Z"ѳW?}!ǔ@8*cUho 4»39*ss7b @/M}L7?؉Pդ-CgEA6̧љOb'\@4rv~~C>婟:tqIjNSi'\w#:ma~6}<|~b /U|bl3&oS pu8ݳ=aW)|R̿d_~ G _[6Ύ$ ѐ@`i!N_ƫ[6mdٻ5,a `7a PHz?>T'?6#1й`g# 82xw=c'`ic$DC["[/-; [->-ss۴&Xɿ|fC$`YGfʁ@/n3)%\pe m`Fh %țy>yxq' ,s-89nk_b'͡ _0J[aA_v[ze@p5C٦{ ~g ep~˱MvšBv;&|PX=L,tl} `Þ<1WZg.ĭrb/7·mL Ӓ,Y[ <>.V mLM(txgi[Dܚqڡﾹ7qvpg;C`8ր2|!=?l 6 |Mpj8YCcoX0,T񞡬BҶꟂ?wꉘsgj/['lO<7/]z :'| ^ _!ÃbGč s-Vܰu}?'7? H@'˜>aɠz]~o߳ l="%n@Σ2 { pc!O8MrB]tfZr!x'.%1cǎw!!,BkV}}&`}DzN>> %~x'jh뗟btW_+#OAAmI@Qil件Mǟ(L0aނCpc7u&C`݅8O H|FxE0KrF:#-)ϧi;> A=vsR%\qi ?ߛ&?Ӄqd\S"a 1^6ytWƷ#o'l}-W>TOT.3^_ݱ_X%8#-zxwd32A]LE:n> + J ,!VmSNL&ŀ L)0B > v₾ Ͷ 7((xj| ?=xóV#ڜpkXbB=UVC 1 6hG>'O/$d}vvaV;&  hoJxc腩-Ts qNvZ<*K6Y$e Φm8ΎcC; Y3̀C;{b? 0tt0oBOʹ|'E̺_8wX70zyF]&O;0*g,Q%LN+RRVs:ܿ{p"eągf;ɓOD,̿d^wW;?,y3mn `TA 3R}9com0J9uKAgF(kjo /N*ԦGm(d=00+0!An]SK9HZ򙎱M0 @o}ئ3f@`?N')%M GeمWk˓Ѧ⬀OT.Vs@'l:[a<؂XF}lE4r>\H_!wb #??8eǤlA,= |IzH'C)NJX2` b xtB:9-.A<} ; ǁYG3u8x(fQm8'icr.k;S7U3H_6l=<,2ʲ0x<ٙcóƀ(!CK>žJ k p&}wʙOhLJ;H+cIyes}oo=۝zߎ=W|%пţ>Z0aP+"oYa5|׺xx;%5us~f?{:x:g݇E v;m*`c p͘eO3Th p;e?߀ rӸvOCu4OneF΄ڒm77w&NZk1^lȖɦPL;` ֦ PĄ^߰Ҹ{}wc^x0pn%!M]~ٮv޷ϕ.罝.=as7vϕ[M255U3m-{ y$LM'⏌`ob"i Y4 \:fu8m}˂DL7FpS>h2>袯H[hX?$c'&֖AsbvsL .6KcVѶw&_?L,w,Њ['j'h^NfY4lt_LoZpNlXʔ ؁!XW>`Ϣ5E\'&H*}:,1a^K\/ XhaXS.fj.9wuoksvYs`M!l C 6-c];Iig0chJbYڦ;`E! ؀Eb`RVy;}g $O>æ!hq M\g `͚UJ`5Bҥ_&p0KR/9IL)Mk5V ~S~m'1q_ Ͷxߝkû=Nñ6\˥eⰟhۣ@Jޔl7YLz9aDXI؊:- !Cd } rmI=4<awe50`/s;8n]5c$͞ ~v Rcxac-ߥ&VG `h2<$Yo,я~Žc yxw%doRkIO3>8`;ܝ=21nh5LD3}P4;oCӆG9|f?Vd^#1 gW>|- 00f n)I Bإ{!@4\s>v:LLKem-P?  ,q&<{2whDz,,.= ۰D֚SWP@CmNKwu|26<Ԣ&)洝 K/`qFZJ O~74pi@P[5a|TM;~bBiE.YVa&幽xJZLV+7w͑h+"ܮD`roEF{!>*aqi|]DX٦\ċDZĝw]AmNK" ը󟫳 l];8WRhLַisY-]Wr(4N\̑>#s{dQq8[r.IB;izI0nq@joadGwğa&./ŒxSU;M`Mo͇o'#Cn* R@ߋUzDWN @0.P[L0&=R\wDp^ "t} Om6΅68`d`ɯVSW +I_u(AiX*߆ǒњ&WK Z\73tm&Tq'B݆ٝLpsq.+!ӷ/`lk86BXJ6L~jRَCβz&M:,|.I߯[4\Н7X50}G nib خ^ ?X ֮jkrH&![]IJKЦXMY6^d6i!+ᔱHxosS;~?;aҏF>r0o6vW@ ^z5h!mrÆ S%t|h&e7իg#7ff-썚lJu|:6 .z՚Hɩf6j+G3i'U'ZxG ./\+@3g} wWvF'~gyC4ai2Z`X@n擝|=w L`~Z Aj3q^ FcŠ9hd-q8Gd2@ F0ejL W`|6`oZ׬aλ}w@o:JcX-}HFmyBQmrƍՖ-[uĜh3m in=ׄvr.͡`^\i)$ҒF 4sE9\}$ p=RU038Tdfӗ/QV7hӦM7YftKmS@^,$,1Nsc-%6,6~o͛{2ANb~71'΅'Qxګ‚O`N3x>Lx2 .0n`FXlå{'mNV&R[0>y>, O֭[K_5|4… ӧ+ BSfhJ~oo2ۮg~osJ7/{O̳{aҨ%TW݀}woէ~Z2TqG#z }BxgW̹])$_o^رi`,G^>?}e5xW|款:ٍq΍kX02k\R}rR-lZmDYfRſM*[ *FhU fmOh;7)+&jhDLO/WG錹dRCG۶mibG(?W|I1&o^ޓe/go=s}oad}oA?}W}_~bMjϙ\3# 0Jadҗ+;jP # ?z嗫zHMLL Aإ 08_ .O?]ݻw0 &>9R|aOA 队0n mֱjצbpuV g?;S=qamilLH}0l:GTcQ3?7S ؀Q.lScaAJ+M>Ͼk3bA_՛oY~tq6g)߿3+ xH,8aoxEx7n0!A ` 巾%?$ĹLS^Oa\vUm aĉ3W)}0O[n>Sw0UնxxXh}p$L=5]=i=ւwmhNwFX1b?LDފKAel+N`UvD ؔ ]=Koa(dߕ#+M:ydGUzk,iyTgϖ8Q^O'#TRy&~^2 a ʐŋ3gΔh=L>|r) , s{v./Gu>&L8XObVaѮ6M3]\N m'LTĒfuf᭓!̔d˟?p#3ƒ+Cu*`z8` 1PH.5kr>J `]o~iΩS .'&\!ʅt!a-}(-X 418BtqHC>vXқ&&q]Ro\{opN;{ru0XgO0ͳ}sgws?^?1]}pRqlwUdj-oP̈́B`d *;"FFk"+Շ#cc{Ofi5Dѣe*`4N,~ ;ʇkp˺5C3^_?5g=r!V1M/Ł6KJO[r?P.I888OEdD H x|X` QFET̓7h]h"ʋ$@?& vLi:|6|Sc4W]}b{xV/Fշ]WK=bcZ|j_e R`rٶ޷cpI|lhֶEլuQV?}xp~pya`ag2z+C9oK[gN<'gi\~$.0Z~W3aB cBjKKv̚P$7 Qxg=TvacB~RIMa_.>IF"Aanيޅ]>UrmSg~֜^g;ٶ뷕G>mԭۆ[߷1N|m׏ ?}G7k -um\m3`ɓNZ_~ =k#ix[}i~{`w4[`B 'ӶDgP]=m  oB8~Ө;/knm[^-rcb8[(v͵ZW uM dUX_ gt8TKr.SZvm򵿿U[Zmv}ЗߴzC,4 o`oDn+(u]7vmmLG0eݨ  @L?5k"!!M8WF\'> '\gɃOƙvϞ=c isnJn3'jp5b#JR6|-eUBĖWh[;RfYMK ,W.{ F u5,u罰l%m?shq]{_:dƑT޼}V @n@f Aұ u 1WimwuWwx1/7f?$g񡽜YȘj< ^YXã0Hebl9xXxo;iC(LZ!CNCCi9P9v޾Xc/V;Smo[-fGRc+u/PurS0 A.ipgP̿ڮ.f  %;'G,McO.%~,JwW~k& !#҄GC yu#$6̟ ZeO[Κ &HPYs/Coq[tNE M㇚W7o!C7mun9|}]oq$Xcb41ߴ&j`Ҝ{Oߘ[GOi-Z n>cw w0hBO%R:VzxsdPVRm,r| !=\NWv3}`/SBff+LL)ilk\I݈M앆Iޱ*hgSCPA r\sdž^]6 W9wv~Ey;w*)g7+fܗPD~ssՎKVM;Fˆwt޻8@OLX+?U?cC6tv$(ƫ6_2]O#*7AAI꨾֑sΎ h 1p1`j 'x8Cpb!hjj5Gg)i@-ȻIA9hnis/U#0n5NObL`u,=RsQa~hpSJV ox[c{A@:Qϗ|T]:|Kڷ@JG/tg~םе -yyV-?"pҺ.@ֽܴ^|Tяvjj[Ddl…|?%H뚇 xTȜ/WO}%I\*pXhf~  $3^yƠt4+L\s,?,،eNpjxcʯ^V@;jˌM-8')Iw=\˙ ZZô:.ؾzgGdp}_Q*6Z!]|~!q59+ttp.ˤ )7 uހũ bcï2\]*OZ|qU|gcJz`] AYx|9o3=>4>*E ~LҩYGB&)B]sX6L`^yVȊgi]VCy&j{?I јh0,JǿTy Χ(Ȁ wԶ"MZc`nM _Z\L2T?}Xo*5uz[4+>[픊+x xGo^3'MLx*O|M}L[k5=:d' l4|D0|5ОK1: 1 .+C}?x3 C>B]g?u`p}9X-ueh*.l*| r/Oj,Q[A bwArtڲfI%?j)?GY[sqdjc,ݴ!e ONVٯ=:|#+u2'Լ]XX>Sv~Mb^xg,Z {y8BOS\D 5A3 ڏ-0!CiVqvAhhY k*s>xhtfjIݤ9}6@ށ 0e Ȗ}  E8+oI`o+稷>QLKrk[\SV0Zd%ʽ].^7@K\rU6.VI*[ж[ꀟǎ6l+c|[ $`;*Wʷg ?~H 7GOo+X)djʗk`(g1̔H:3y&鎝/…A۴2dg"([͞ oKIjYAwOm!;t&[@`ln.&z믵ۥL[J]iOUu~@}tw\)@r Y[!BwtUN+jrwW:[|>v2s~Ё(ʿH_>vT+gvY<@H =ۃ lhПzgϖv#=|6ܵC(+kC>mLK4yVL Vr44.R=f0-&_'șӆ8Et- ڎ8ͥ>^+'Zm[0|VǴvXX5s l-e|t|VӇN 黽4^DgvbBZ*X4GI}P|4?fu`OS:ȉG<%"}ҥ݉ϗߗӗէوSj Z6`L CpMKM^j ]*,ԼMCd5'7;z'?ɶ>x0y h_c{5jOystU>oyvRXOV^i쟹)-uЛSī$@ٹ}—бpVvuvFj(DmmY_?`mӖvFԲ㷾&_c%AEH#4mjڳL'xXY;#e|{}MDH<|xz@|[|o!oפ\M 9  YMH^2A@B mä]7C|\%͖Qn.(Ov>hwk4f~ԩx ח6p[˴PN $șڶgz,UWlȾQ;iVWskC *O]I=\ /3g;N_P.B +ýۈwZign!.j H~Vߖjy,\p2g+sumĠ_10[ V}Ys @XZ;vf2mIxK{|iMYODHſ@"a@IDATՅ_WLה͟ݟPG|ͯMXބWuLiKLJWPeNie7|;:Om$?\pZd,WRυ̣]ԃfek-(#/i;b/K|=~׹^~/5L^|0u$< m.ʼ\; hTrV[ZD {мr|fR$3٭(;ϟъN+8A]Zż{ojTm'^ў9TזiuV:b,;P+~Z[5}*3qz&:6 ڊ?6='t:"v?<X'զj;iW??7?Ks^ Is8~?ܶqJϵ;̥_ᅅᮻjsϞc9V`!!ld&{饗N`#/&oϵ4uG?s-'1>4+̍s]Hy5Ɓ pDZq .)wX>2QD skLT!$W:+z3`K19࠺ *ab[1تܭ_.&~VѶTvJ/Z{n5#UVUuA8sӃ !Lºe'l?}rt|oʦ` d88([,A?xl< S0*6/}K÷3! m/&e V!\ 'C/4^_-f痎 iѺmw֡;R_YQ+ fK[WYt㤩0 y_ m OhMߦiNlbKn&Veӌ4m]4qF!j)"VWcE n+%O $72y?|0/QC6WG\}V0?>͌p#Fݎ­m|vXΞRxw\_Ֆ;+_QN{;jF[xf И={us=oƏ)%X?4B={ptPV?㲂 njҊ1ch5elK֗rV#N#>Nd2Aϖ{8Wrh*8f]v ?O W{%؝ it>4\\e,.c|L8WITz63@Hrv+qO l4;Ěy x8?׿nvU̩'p2a&z\8hK,毬մN jk'b M@G_S[O3PN%`1iބ!ŧ}^VggwZ[P+)?Q`J6 D 2ֱbJSu8v%mޯ~aϞ=뚰 \=s7ѴapB;iOl~=S@biUvdq˛ p&uTib"N~9^9pZaƂ[\,eq$}~+@dOc[D`ĻyxA{<9UĐ H0 %Obysy_vNA`}|,_K@.F|1ݽWN W׾A=x]}wyw_ "̑}sުRR 9ʟSChɡV,PIO{K/dXX־粊̖&ɴEP?ykY g1q~q4)m}>)s5{9X}|Vw\w}@PNjKWpO8,|{pqhK"f]xV|p~F c2hp?>0qo: i?e& ^ݫ1Ӵs,e`n5Xu>coaR %133)PaEI@ym+;m,.< Џ9'vNALʠO\Y)G,r"ȫ6Vv5$7Fn6-~vm+.~{ˁo ABh5]ڢ]vѮ&X8H߁~7ŌVt }zYmY[XXh130a3ѭrp̯ {VT#10GryӂGq[<:QLꍣakµ?-ý5Fg]\7m4gLk? dx!mJ  B> ҏ9pI˜0^Խr/V0f&I CbDfqp< lZ=aT>mD 2їWҩR\"bԒs!@^xᅦ##&g E)}g{?Ƿp{PST ^9Va V+_a^}= LWa~AoU |]ڜ6Mƞ/~J=e)ǒ뇇^cxgƖ@G<аBCłr.oQoAr.pSf5̌# Wlا:~24i?'@p*qV +1<_ B0J*g_Z ߬{ }jM#6gG;ٙNH:``9T`'GjBb1e{`\Hw- ?Aavu]|=S ??89`}VoN\}FAWs=hwު3|+uuvwB"+M c Y4%/{C;hSp=ڜ W,,,4^6JXR8423>,όK"Y@f%&DveRy DB0ym `,Bੳ1U5!2VaVlb/ʋpM8LF?N6{5b庬ئirTS78Fj!ma4Z( 4d+ (5kէ aj@/>řNՇٳ;'^xsWchqu0!6A7"l& Am'pקEտ#2=a&L*@w֛t:?$X JtN< :jYjǯ0e(3) 8*QrNm:+FRכe[/i&DLj5[j`24ơ$ pyCtDHݓq \db{h\}/}}+v3-çnN^W_stL/+R;8ʁ7O~WG6Eߠ9qdixF[8{F b[o`N%P3i?1o.[N7@i dO;DOFMZ<ƃ@p F8DCn47-D)3bB B ^(~k{kV h%P1SW&V͎S?K}& Lwa`{i:}iH@]C|1ma_o:MW;ŒJ"`NKG3'*kkИ1|n׶uo.-rqm82s$Nܹx8y {w7B AE`9-0kA{}_~%1hbYIY3 @׊FJ;!w>@e$ CZԛ2;y{K=ࡓ0=!NpKe[t+f1bjQ ڋ6\q0$RK rY"xAC@='DGHӬw8u~4ոㄌm<_븇 b. !ﵛݟڿ/{g‡_0濣1t*x_xEǫQe6&}OZK,7>4LأivU)S0g-aOp9N\<}2!޳g6tpV9?g7VTd=m2?ɘ] r#vs#Wl{g[1|]zٯ¥*hU>$rbmuΊ:>MeI:^6Jcaʄ|TvP4$d弍r4 g9̌4"tNHڥQ}$Qc w29^?B L)}ILwHu8 m8OrsesZcV6kgsOp/vE9[γqۭ}!+˗v>cv10 dG2<['Q5 z#7m|DaNt˚SpGTLtp[WOxã>oj>8|?Q̭Jy'hg#ev@^pFVvk148,'9!e338\);{ w )5PX-{ 8$X՞*agvs%4.>NK1ԙ%^nMȇ1܆~mOX~ B)$͓8@8a =(HjQYr!Ч`2SǏijoߪlG@z-UJe^aE.d0?oKV>pUGBC~mm35nMM\@1~LԢ>XO7{c+O l>vr>U~3RÆ~1&B8Fz𱛷GϿylx^ֆfGK?jOG/}mtGISdO_ߍiy:#1R'llH@&i;imbyst,7rӭv˩7k[_0wn-߇k;t$J KޥKYgC99 E]Veɿme[,ӵ;0W?( _)SdXR:R-}ٓњ?98Zek@VĮ2',~$MӰLhA[oL`}V-qвALh_/F3'SPkcb p!;K0wj\x7t 8DwfaūKz|8ԯ?O~pl#i2 ?WXܻfY*xڞ 1Hk_Ldo~ 2a||q☖ρbߥ6Ǿ~cR9"՚$/o)aG}CZkR__~?ZEAKhhJ;,#*c(kBǩ3fGoI6'Z.ΜPƱ+ 9^`Cқ-`6-Nd8-9_ͷt]Rˤ'1aK߈A}'??ࡃmed_e2 # 4s¶ڞGHXw}?!q=q#qmÇ\ cgeR4^ߙȟ{Bŕu5%`\VcD9 .F>bf A;DgIa X**L F :*3<;[,m *dud4QѴZ}vsϸ|Mqܴ!Ns ɑ'gv &Ҭ 0^ G`fx/}W*G!y c8yz7{ ',5?r $zQ?p 2>vcw[/1KC?/NQ׻Ry]~f>1}Y9,4$˥N$Юbbui??88׏%) 7sw)|z`"`% Pߧb.Ty3n޼Wz( %uvd{qq,+ M_J 5̿HSZuϜr !lIvxnu @o')G8[[LZveػf?]t|'Fh/裏 l)g}'}ҿK]B*wQE4 6Ӛ3q!7n~>E.+5GL(F6}`3yyxNPt9>Vx[޵ L\ɿY9\=mǵW* eXq討oիm[뼁/k{}z<`L`ƫt}o0S+ ƅa׮]0cx!e'=?VNŹOYgRb.&6 eV+)03j}-Ҏ;y?೥VI#xgL^-?JX{ѩd6J^^y g:?C?1cW"PW|p0տ[IH>uZѼu~$ =1} yB&ZIⲒ<ԁ=tGhc4IgHVy=V<ԑ'sw_jcB<]gfcksFi.IswQUK!20H9qӧP3C1:{z鍓óN {6`g}j;}rc!H['$ރXeۤyѿ.Z>/@G2^}_<}> 6:)i\q҇/ Z*8 y{f =HV6LlSu©|.f7XlTh8 # .,,qRja ?]sիՏ0lL%ޑ Bl?[i/-[=M7}`-8W~nߩW{mk[߉blGUyCq*{ZUD8x3M7ܴ~W- .Zc΅j_|Ƌoau0 '$:']O_m*{=eSmrZB }s'i6^Bez*-;&mr<@0TE2&m$TM@ G}``/'71>+֦kWkAN`| Fv@`Bђ 3IҖI%Q[c?‰S=}[˽+ #%<Ӫ旝݂]QG_uj{c@1zXm}>ݗ*+ o~X]LJg^?1,mbVzhs,JC&d w+? @G|v\SwҬxf  &|&( 5i c;4>ϵb(cTc} }V}YUhۖYBp2/D e^0xr|}:07jb|;v00sx)8%_?/}4 Ήzns7>R]͙}굓å?>\ssH)+.wj5oUWmޖ6SU W' ?|pX;/rذpf5>`fLk (vZ7q_ HG%cNKpK?Ź @3$/*×pksқ\&F`:NH Ӓ.' 5]U2r̵Pͩ_`sYA[)BLڅٻҧ%ј3R0N}=w.5;Xk|M֙5{Z/?vj $ov4_ЃuqN/P8?ztZїDi s-'O}S 8ϴVj1'8c5wPK ԧsST8@| $/"+@@bLj)n5LL$ɘuMC, SZ r]!lB[mE,g08|! ϽU~V!pJbv~8#P*f"``VY`n qevpCP+~44L_=P:G`ojoGKoo׿&x1f4n7E@M~/ިN\8+bWI6.'NĝUisICvqEbJ:#`ϛ)}sz|0:ZBBz&<6m}K_:#Wk}mpV>`B#A1b:L;v賀ϡ16+UdLyX =ԕx<}ژϳg@'LeX'J+5/r}kִ(*L(m@*zB+NOɞV]}:c/g|LuD۴@@vOҒM;vC3Թy5I[.du!ol7!K 6=,_?h RrtԇIkslc/i)9^R1f5Sa*x{ 4n‹u*bXcQ6?m:\QZJn,smHi=_' KxW󷶩Sl '޻boO $g_+I [3u5$2Gq1{}&x[mj pLɳޫy~/w˘9cf.{33Ex+E#]HYˇi򘿹>OiKPvU~270F@5f8f] KCPH`w|Oq `87iBpڊ.v~P7zbQfW|%Ҧ$+7p "J-̕"ͺXN̘>A&KLo6ፇ-b#^yC`#Bc8U??SY~L'/3O̔cקson2e [_r%?x,m>ȳi;Ab̕Z/׭DH^>KH&5G4CHVY1&m-"M&8 &83Vɳ\X=Sө˼#1{+}'-~5'C+zn_[0} PՠF@\hGݏjԳe[ >PO.aaaWT! }~~skuz` &yC`@`cCwo7更3),aGm}+\L'{@ץq;HH`o#H; 'yCge̟oT>H>~ Fbƙ4=^/jw5M:2Jڗ Ob/?m^yC`C f}<@<+:VT?񏛖r?ׇ>Z3I[0Ӗ?p] ܔ ag (xYzoe-~W׵nl[l &Xˤ QOԛf AMI `wSXUBҷ\ {ʁÍ]TX?!v/Q#noy6$vrBpzZ4ffCp chB43Ĺ ?s97~ e.Vgh$RV Jʝ kv.%gn_|+tI<Ci&_=& |- aYy`Nreo}4O CS.&f16ig} go#4{sLu~t XƟ[>XlWbɘ&'},ud.x e?DdﾓʨhI8M2Za9kQ'8g_s!y;fkx^MIbÎ5?яnfMR,7zCk8_$L{9&`,&F' /9ue\or8H$J4ʠ3iLTjM' "@7o{ac#_ v` qg{#mKf5s9!;>shE/'Hm@ķ䙴^% ?WV=-mgɇPv׉xC;6z`6z'[92aBLE&XC^IҽUVQvd0s@Vyك<뛧9YJ{0' @IDATߛiY b.VB~G$}QK^1&6?4LI_i8jk0woV&%'=1F-}4ims/O;e2c9M-\FlۋDV V瘴I]J,.e}Z .#E~'8ӢK%^n_Uv{n[%}$x^ s {eg&a,&tHvaоJꘅ<N[B`v?e+4 AXoX6cm$JbW4|lk&&>m7?LOXL癶 'ׄ[o1''Y;)!yW Swz8[߿_Wq`]>?gG{J,4p(.[6` Zv!lk1%gZⴚ}B4ĜP&&vP[#΄BG-w-f/'{ ='ي0;\/6o]v5!69Y;>3qe>I)hYfp읜OO-6VC.wvaE V4@s]kܼW_,u8 ȓ}U՘b#"4ԊqjRm}wvr@ FrK[kw7|z+{%eX٬ߝ^.mNlc7}߉ S>4 *[:ֵ5q Z ro|}9pd"ZNɓ'Bm V ʧ VߊFx 73& gJDKcBSjW't sC1r.ukwz>A7ϏPpI -NҖuls""dﯾsMq"m}S.2co6[oiUB"Q1'c!(ЇQG`rgmjLa{qm_?8!8d Cr8Υv$1Yޭ4)S;ʊY Ҫ|+_i?0\ |3.=\|'?JroRi 8A |Qm_jedRYI?~ToJ9 sFyܽ[Cɤ!D10[D8s^?2>1w(?pG)+M E a~vKbMYY{n0ݏ`NF,9,bmp:"]:iCl.\B&FKmFm9T@~lFR8@9u `uvhTڙЏC˻y~ 0 hVVl.p$)r˳i9!eSWNk~9Fesфisg R>;ZA}3FE/7%'?i&s;i[FM7`=l.qo0uy!0AR mVumqԦsp2_ sv,,,4-e: SZiv6b"sǰl3_{AH(og xLk|@`.wAk\X [e'3vG='r%Pa{mk|L< aPn?!*jHGy )C@W>k0bB#}HŁ8q&a>; @"@cF^h s\l_zeZqeLMU9" ǫ1뵌 #q! r!8= :?fcO8JZ,0pPBg}̹_"Fx[3ł~W-[F'%mj;Fk￿cs=[gR<8&VWa㹷LNG_(U?\CԳqӭ>PG;9RQSۙqBj۱$vկ_OH$1X\a0%&08ư̟ I *r4Dbe/|g7KmyҚtC Gh܏;V'N+s3&HJAqMPghx)3A}|au 6|}ygCTGexT: \Ǥxۦ-jA>k>3G?L a? p#EvQG`z6j.)F+ Jp'[YqP+{@[okkzx;MCpB2[6+D ;' IJ,[@V{$?|kBK.QFh>deY}tqg2^=.q} sḃ0Gy!}_v=_.N1U*2}IZmXrXwv Ϙ' k͢>Isg{ڒxҺ6j`#jۊG+Bp&sARU8BV3KxI;s&|pՕW5meO+S's~g:bLwm/|mOLN,ֿTٮ7U>ˇ>h#4Vl7!FJ=y<>j)YӬcdΪ8ק]齶^NK|?8 wYY#Oh|=<[@Gw6䝺+LW NK32a`?obHo~!|X4^qpNqUvC 'Hy"jWjZ4Tv,@+9:]]+h=Q@Vs-ՆIc`|Uj (jxQ@@B Myi[n.O7þ[J:XC_!{/8ymi|鬇e:Mi~+ pmg?YÙ0ӳ_c?}xGO\+8񅲃iA\+g 0Pa`"$  ҄`Q:] ҽUX-NIXXU}/@T4+?FʞK3K~ A5裏5@ff-cQXҶ]])sh$]ڍ3iBӤ r͋6/0}/,,X)/Wo%ji:z̉h ,{?ej~&6·CpЯ_hSüOB[זGyJ;\WI aD!g?79O<(/gz$YR4Ann+|IjViOAXe?ɏ^g™sG G:Z HN`+wB{pF"D;A@?VB~<(_}gg`2+5ރ{q~vdL+~BB=_1so\HTe_g_ǴvR{?ƏAQ7Ҿi۱Wj7Yޖ/6|ݥ9x1￯fRP_r[EeY1tB$c>dԣؗ1}|s/L8٤1(j^.i7pwqqepWtqȸF3l_mpvؼ |A@-*.ZyA`l~?zxjc/8+RB m'E(,!l!Y>o?I=vSH.F1Ӏ> 1z osa>WY_ RmOszR7OvosBTڙ) k|wx߂wVO58Qz΅k+mF79&wI՞=D )CnA}gB_زN&dp奛kvndpvo)@᭷G|k^m_3cEʽBXHJáb&~!V&;_ W໏oտw_:;E+d>M Drp?-ǢvjˁGxz XO o> V癴ρ9ergo~i4uLڦ~.`)̟ZRxlڹ?)seڝn:uöa 7^5. k”phwbxjo}|}C J8svcǛkջ렓52YHi)#?f6>iFǾ%L/sm+ց>B!\(rViNXxp' .~yׇ7 1]pi[~O4L[fv-Tp7 A&6}y Ā6fTOLxK~'`J4 ۜ)N?@OK<_n V=siӘUmIfts` B!FDZŘAr*]}j)ɒL7ת˶  ep [[:\wyiJ ygx3mr]]/m'#NF1ZQ]_N$nɄ&D{iqN_n6(;/ s߾2 P$8jTK=hzS>A`ܳL[{#$7nhAxk1>0dybn3 wap31UK1{ԷXjRۧ1.LlRlT|՗^oa 45+Fj\es@R ʅYpb@< !O,af‚@v4Y.p- JK $@ko6HdO s`LskYҵpνYơ1qSCq79 0~WܘLմy 38~ZMY㻝X ʺ "ښ w" \z ?kWn>>DRB?\zla4]lGc) |a0*ώ|_+G>hޮ{![ulMLH׶)rAދ>Nt{v%Ym7F.yVm2񩓴/DrABkgB'xlO[^<=fRS<ֶktUu}:)XC`,OVO ZE~GGڇN(}7_ \ҿ:g,xW1[TbT=]9C.^F;[,;}hλ?[eKuBo"#_L+  gh x˰b,X`$x,yӂT C~U1(AΝō@^q&6w$~A,m]@–fFZTށ$8KՋ5k˘VC8T3DIDYv?^:#ԩis[c5S1s?|)gZ[=m"bNs%rqcu?fߺ?sԯg#:m8Wp!ߺ?ch1n}󙯖/[V}2j6ep aU Dg) _)km+z/^p[|i{Y.h1hPЗ,BU pL{I͋Wo_?xt8TTbګ dy@rNNt A=u|km ذ†($eR41^-Jq) Oށx_y?LBazeL0F@a@i+%{:2і6uZmuҊsa2?;Ӄ4jsk䤶u;:}NᶌՎdu?МF_ݭ 7zAT, sH_܅5vYsۆ˚eQzaq'VOs܀q?_nG`~yn"dKO?U&0c}d +yh;OKYBu_Bw g>}3yf~J/7Gܸ_I{j$K=Z7}Iv \,L5;yso9a;75;+~_Տи/$L^f3@1`#UAkRW'B%Y _bpqY}Q-~*Ncs ?\5K}-0𡗏 )b6A=veuc?N}14eWF4)L@4j^wZwLaC7m;DCmOE`XTV[ąO;qI.^n{ۺxq|ɸN#a #';Iغތ(}mx0{+KxjXI6;Xg Hog;l=^pQG.6Tj> M@[Ի}gB[ܬS:6RNf)}$#ᩀ7<NߦE<$lla~d\K!)U?ҷ$C}ƃO⯝߼Ҷ9>ؖjY#m y%J^*T}UYV/&sE34=h&($ϗ|(}v91Cg5I=gdr#~>D۸ biiHa0DX[ҙkA/8趞I3^$V}%y;- RVů|lfcؖ qޕ|7+ 7/[mm뮻Qj`6\ _FY*R21riO@gNG2x7HDt쨩 {?B7䋵9[q%C9,;UN—^pV9O4S|p@Q_KNj66 B<O09c"ksssu[ hi]OD6zObM>}TO["cBe}9IiA댉#e7z<̳6j+gP[w)\x?pO]u7uŒ +(2-!Ah!SrGy۷$+ɼ[Ro/{ё=.CSWw&+27q<-+nvY!$a& Iiý^Y헴y܇҄ag')̲o,`!{^ivys?*s\8ˋs~ug_p4$ew7t`p "0P3Y[vu~XG*R]Hӱ˼'9àK꒭_&X[ߴc_ ZZ A8Jr3ThP&XHYIõ@BT}1&  _ƏIlw2g)ގecgRma/~11qB3KjȠ} !2Ie 吾DM?xV-h(q&hsF'Mqtx$th|!&:F Y_ b~w!X9->{}٣1 %'C̤ aWNo͟_pВ __q7L  `431>ps|ŲhqusK i*/rrڰS?cm^׶&vm'fFpj8 }Qu"b 2 py|ݭm'##";sGڧ_ o;SNf33N3~[ğuk7Xs[ \bhe_ו1K[{8;t` 4Ӿ3;YE_g{?JiZ1M}zxFc^=e1ۉ i56n.Fz9bƓ m1btU(iFjӶ?-~ ^xn1ũ}U9ߺvI,fR;!0  .~Rx0hot/+9>Yi!) DXH 2E_|pv!>(R޲7rLpa*3W|Jٓn9xUO?%j. , t ҖxNI Qo۾m~b"G}<_>R]~\? ̗P![T\m,hGOM,Z >3VBXB \U MU % @-a[Y_ٸ51:ujw%80whFrR?(_o[8^oZ}e3_Ort` ~.G8!#0~9Ňv,XlϛԌg  ;w]X|9OJ[dDfZU֠~V1&hv̞#îAY _=p凜 bl@&a$=[PZHveXX_u\yUen2Ƙ k%q\^´!m^VbпT>zY۾)NzL:cb_\>+7xV}͢Q[XD JJ㬵#;o/T{~2; V9)Kz@goc`_}I[;JtR,Swm/}4\-T.+X/PgǗ#F)ℰhk!1{#zxxŢү;) ʩvMEsArXMv'm!"{!4wwFj$H cY _^񒭅m^xsO6~oӈ+"+}ofݑ l}giHZ4v/Tiyln8A{9~[9g+Ʊ|9Lɟ~_M=\t`pbd`/UC;C2}krI7 dsq1N ^yP.| \%9Y!CԿO@İgLD}T~%C$X46T|NkiXwՖ Fqz̵oi.Z=o)DwU 7V?B2vS~tnfFSo{?|[ߪK0iƝ~/B=Kyι:hD:C0G De*Ph:x1M/ 868Tʏa.3_yѢg r''s~{T-DVh2[cSY3L_|l{c'_v<<>^x1A"1fwU MRwm7ܶ> +^[Hc0axHSԖQx⫦h}VC3'#a0uXJ ڒqmhxo!%(L@s{okRO.^ < N8?a5'(pi2VUCơ#򗿬!fS.1V/I@gc2dhxj-31!m\6D~?-*aCg'pe-!@PC9>'M&2waqTAkpA` P߾#\/c !$\%hL>cߵ5b&sRr L㥫0.;68|\X_\q'1BV??O`~J X P&uG++K7T RpIې.L~oxO}/S>zJ[X[CEfC'"ϗᯗ;߭*=_JSR䨗 1/sK̽wvOʫߛayB3I j+a/㌔z[=.cc F!Nc r=NepcX|?>տ'm͠CmxW /w/?#'x S%>rU, oHv_E6`/kA OyS$s)T-M AI^&B q,&>YbOư L{Gp7ӾַLm{dd\H0N I~ .Dw!>xjMI}'lL $fҦ=%<ڰEe0r@o6['a2raQͱgo~3?La߼2{@&o'wTn&#vXF\W]uu}~c!Δw[e6|@(d^9go åłwnngo̕uLK?KB3Eҧ?ˊ)7 Y[DOA%6Z&ob }}E2wad ʞVv%r9gWBc% ;K| 8ֵeOzFc׮G}~xB ciRתoZUkf} pci?׺r}S!?urٿ s)7ׯO `p7 hJծR*{ka#༣7ib1!ϕC~;3|Ē&gKu{{[ore4, TǰמStwr \XV[p\9ϟf;3_ᇕI556CF;ߚD.ew; zjuU&"i;$IH-^-#PYG|1 ^yǩ7nX&E@-Ȼ= Is+2(זi_~—tq!γ]Tzj/~Q=Cbx0.82ap}@3L2A .mUpHegBEgrm\2f13 @!`FZM6jt-W|&շX:2xswC7ÿlsWȼLպ(#8c8ҡc98D:\Aθ` Io-G"$zc5.H!|5y{>bp`ݙɫ+@9%93ֽHj,%ezwVN09BUOĥ޹@gf/&F<&}峦Tbn=}k% Q[ysIk`$23f1| 7Dd{`01ʇI{6`FgsZB sϜ3?R-e{ok 0 ak+Ghnk88x 1n zutTgJ+mUbPoqpCam2sv5 3~':0~1MAŸ#$jacIES@n0}pgs 7Sg/OSDߚ_!+`;8T3I^ut(>"=N봵([>C,`yFgŕ͢.=@g8H"H&G>g!TnyQt V@p{/ZzsFNzYx'|b,ZGg񣄽n"sC[ ca`ڵ~lN*/qx!8cgiԩ>YU8$DOɅxRZW J b2aIDAT(#'G VA o9qs)OK#uO]c4h0l]r ( | xjֺ)0jxf@;3^="x/+Kh.B3G}~Jr)ﯦݓnx`nr'J=B.6o$-[ ᅟ_9 +-/%'3WpYYҸH*Vnv qZ s$f̤/#|__}s$t|t.)x*W_1#I%nt$I;FA iGn߾}8\0qK ҦLN׫umPy;7(Z S@#2VܻmfQն!0kK|E?_sKZsN a3q3׫ E-5?; RY^m8E7yV[d@SF]wR c!LepGJ(, 8Z&@}|Ȓ@$m$O0UX"Z'?v=\Gk>p #˓8^{.eo庇`}gB $kBTܳwx@9' ڂGFt ЬHFA${8ѮtP'Z?-?>.$]|7Xv! ̮WJI?o^'`Hpz6޽dvX/9<#6x7. C2}lt@ ;Qyل r\|ș,ԃ!@j05cuU[{> of=ׯg3]I s! wTT?Ϗc?iB;Jg.x M8&1] bLv^_gϲߓW`S?11]Tl?|Z C l<7^oVdL 3^3庶s$~k71椹q^{K o(=g0ϧ|᳾YNzN6>2g g"s7^:;Um`$[tHq>V!:{;|f]ԧ+xnǭ${ｷo:sOKg' }qSk- .Ez@%"L3_u{qA0wz>'j{iɓ| \כŒFd477W1)C|&$Z7a@ `x&܉3[>>eenc3_aGo߮]\pmF0vV9g::o݂ )!"6Gp>i{.Л%B og fxyNŽ\x{p _}:'>>:Ĵ}O^ܤߦ[ik;/h|4Z^c{7>ھE- [p6~3{ 2HFx|ʓa )PTXSǏfoʷ<;/_>X'SW F(In\֤4 03[ qICEM7WmVa䥌ַifOa3c{~;K]@DŽ=ڪ /pM?[ab|kUD$BllXۄLZ1kdzef0+<$LoƟ+mpo.m;(G#cbUkvw9!1֥D!G|]5ch' Z=xꭜ16#?Cu_g^ɣe򬇛 j} rȴL Š>0H3T R˯2*Kiv'ǮkƄ@PV%n߾|_]1|31r4}xP~s_ENi>'|'Z[ j\X@9ڗ7r!D@UyRʀi]W{qwZ6婷KC;Pd ,Ja Dm< ic5P6}7 A1Ҏ"07w]U#1@䗱ַfORVqxKa>O'g_=wez^j}!ɱӡ˩~:gǬ! vɝwY0]r@wy(D6X:q֥զAY8G@#p`m]s\Zشqȅ0=B:N/J;)x5\]TWm;sHr,eE[fʘe k'|?Vɟm{pzs7?1!ʎ-e6?8N I&& v {B#Pl˽YM=*#Zu㣾Dkm쐚l]f@9m=\siU_KL :D'Cz+o+ Νsui ?;2[^mz^pm{}L1ꫯO*Go5|6E]{ h=.X@qOw$%!G,m!N_3#)A\ c'yqOHu,]6BݻwWF-{;Lrz.%ѯWsIw= ,и`wWPcz,cͿ-_f픕v[)6sU?Rg1qޏ{@ƏV?|U`w ;t@"$g;"Q# 9^oYqk2shHG`6 ` D;5!Q q(-x"l+s.܊W>'3꘴Femܱo >Lu6ԷZgk̢n=o1 Eܠ37O{K> "u9cO@_KLȑ ܁1HWvl!&cٸCSnv&.Lm1X|bP|W^QrRy0NRu}#|?ꔲg}B&cJ裏֣|coNZŠU y_Zol]_9@AXsD$y΅"a(KY ճu =Ke7{ZmCy X& "Wu瑾_׋I>RD=3 1ʼzʲ/+}Rڥ/eRqimѦ[Qs=7<#9ͻL%y˭SO!`|`eL!fponֵ&P@ ) YԬr\lNrM է~ iH8bۿ'aaz@1*qt 3Sv'm,o::WÄ%]qz~CFʇ<_9rrNeF}lCh0\Y}~&c.-Qٕ-}ow J|03:1Ăd321xH=DcH(х ,cjQUDS0>uA 'vbj VcHrb%}44'#H58l'flAXWlҽ5JDY"#G#9uP@W`w*6-WqWi[wC`/ټmbApYdl(O{Hm?2JBI(N `te|ŵy@\XҬUؖ3->.[:ąAWm-6Taoi6 B^;.kڵ:K};k}?cB9>/] b #*IH)>|?*LAŸNj3XJI?u>o 3~_M ,d}z!{\h M,CRNϺh 䕁p;&ڹonn7!ӐuR[KHvj3oʤ;|Pz튬͟08 8 !AArIIdlU@`iTlBs-LIa[VO+{vB濩FV@xjޫLKq $@Vd<[ΪmG)PӚk GwC>!1-`ZObqܟyg-u!#?OUOè[Ӷc1̭y WL]]4 TApbCH64cycڋ c~8fy=CSnipƙ0 ӤUH#I?P%_/a$-y [mI3q!zΓh}$xBFm[ʾbp{xqA!1oKOF۴zA2VY't' yy; cnB=fkZC`1EKgAz?D7Wni|huJ>-"?.e S}vX 4h1G?0]!>:Fy$U;pm[˶J1+qi{!n +ϒ?"}'3L|~LҶA.a XHɖ ¨-v7vԛx뜘08sE?_봩-xi R]$z3kz @> FC<2y֖Y ӞoSm]hqT"RgI K-ikjB cɜfSmƛEX#vGr\j= c%N|A,(h1-8ĥ䃐qAq':Ik'K'S`ͻ_/2umj]O>>ɥ>{oBm=}V'DKoigl/O%i8mm\KQ%7E1\e\-8:Zč;NU13FdzC ;!hՖ~hd*gpZ=|YT8uW~2.i8>߶kz\_^~yWet14ތ3͒>e|oID:K_:z!d }mpI;͒UZ)7k=k4rxoP]=KOVFi[O-=aT#ݐwf\:e纇x|1Cv4>sYLY&CZ0Bֳt@;8 [S9 *.@`bm k!C-;2rQZSq~ BIiyƫ?)߸wU/ک2uZA Nhg)\ঁsE]FedV>X- W[!afk0!j?zije7|q!Ў6^R|AcG?}K<)e@h4ml+x$ԣIǟ`28V++V~cN_BEA fύ'@ 85- tpU1^Ų9`3/-l1#MI}r qNuhL77֨I?c++?Ҹ.:f h϶a˥h%Ӝ=ҎͪhomO `ǏϺ= mPD@3>/{\w츤j-5\[k^rɎjҾ!v'{=<hL< ӏa&5vrazGIjP2O?de|{_xo/FW\yEe j|=Nyv-3ue1iyK@ o]96 $yj={__aWw~{HI?'K-4z|A'GM8s% 7dbBA+dy >-X@ε1SveY /~ p252Le/\23ﭙ9Šs6?xj`83%#hJ3Ā'ٿƞ oy6_}-V68YM6Ni9?>pt`pgKĠYuڴ'm14ߩ @a} g c 8eݣBz 4G&!Z ً_Ç& (e HN_Nw*d<|e׿^Z[/q}h8/˕#'RTA`< xu@?Zf7_c > ܤr!3~+r`2nb][˭:}-= :>"n''ms~\q6yM̯~vhy;vmB-C=T'n[)ͬ;N%[8.F0H ywlĂc ~ej^\NغO|ΒΝֶC{^RL2lmZq[3N^1k<^YI9,}LDOy=yƷp\ ;NٌsKse'?Nt_[29$Ɉ&`׮]uk` <68ȀOځ=7~yĂG@ZgBa0%p};htnZ-m̯o,ꋸ|{Dy>*\ }yMru]ugqxx6KB" ƙ&4};&!}"9 ep-+tg̥|3saF[нWOޓ5{!I0=BuX#$X }JyTx2~8-p,r?}'y;6 mH_*63?u"0Feş窎I\O+Xoȸ5]Q8Brp^pnX:4d !vx5iih1A\ !Q#n11"ҠK䥕Ǒ#$b$5n'{! l|L㎺HImHɔIXW^`4k70ul@dUhē|] \L3f` 0a Z [G  z;>봣]G[>B>D=aw?K(!)cqGY{ɫצs98>7̍1j(&f o}Zfc9S@ kxF@ƴpcK!fA,6$(#F{yBmD#:s-$ü43jإuf@Qp=TM@/%e#gq 7TNù˟)ӈMKsp">sn%4ljI!Z]imN I寮S:N'gh.?VI9}1,2cͬ@h 0F,ܟwlsCɷ|&]/'I{3B{}B8~gI9$@ɐ>8}2>`=@ZCC`iX.\\ZM˭lks8=!@}sfZs*a {g*F:}:f>fʞQZ}UҸ5aRH;n&!#d  *ԑU C^wuޢ9?5X /HatM???U53CCCCC`I@c0?chn -N̏%Z6f9ܚӿ,Xnp4I۾'B 4 E9?Ah,h ݫ/Pi)뚀;_uttttL"'?I~ֆA-N泔+0}!U@k[DKuOmL@#`o}*Sh*43 ğ7|sZxj w:#P::::NE .; EKH e7 0͌HeZ5|ܾH/3 CCCC`CIYs=BBZrn9(bk&r x73q` -CH]r%UX\}7hiޝ%HfN <C (-  hcygo0C+1-58քHs$ r|hݻwWCauFHwtttlT,w?O+`[K?uX3@ 9q0 Xp~l@;P::::6(пk!ng߯L_^ywB;[ k@[X1^s5>;Ǎ3]@@@F@7Eιg ߷;0yvDvo-re[1{_ >8׿}Ѻ$๴4IXB|ˌx㍃4cZZ5aYAטW_}<;3CCCC`=@ D<2v и~WA?1*@Z]{@#wyֿ}/ DX:A74*[X-~,ѾdhX@!0⋇.hxꩧ_!)I>#{!!!!!p2 ҡ~Gz\hc&8 '`ܖ0}/7m x' ] $zt(]$|!E~4:kt @N#[ $p饗VH6@NL^'w!!!!!Zi̘PWW^ye%?7 8`"y~+yic`|Uq? / E# vi!ex@@@@R!$Da;r7zovMNKХ"Ç'i}<%CCCCC {=m}mVk[ !L; @tz܉=Oԥ1AZf :CB;::6?KU[!>~կ~k[V[B6_~x駫 }$;#_&6~BCCCC`CB x_s0tPj~[YrK,:z 5@;5gyja׮]FVaRǦq8ҡCCCC`}@`۲<;vTb=Tgf?m641 wRS8pJ>1/V^VѠs&9y{.ޖ|@K  '6t>i}A\! 1a0v).tz0-45>gϞJ14Zؐ"4XvKwtttl,!IT>cae]vSZDG#o,(F4dCķ՞myN>R?7|2 0 </}w|Wo5I6 L1Ҥy @E[3hСCu`޽a 5O3 LC44 8> xhqCCCC`[ۛ߆7)!??K~'=S0ɠەd})l o$#@1l|KL C`F fw@px?KX#;o>>Ⱥ䔾q u?'׻YIENDB`ic05 ARGBKKCn|W%GNG 8g( Gx w5;q4i`(0ͯQeKx׻9Ib: JEs  1N s+2,t no b:4757Ӂ,,AIIHH| Xt-nkln IJ koojG鸼nn鷼ⶻnn鶼ќ joojĂ olln -tY |JKB,,ӷ7564c nn t, 2 +qO 2tEK <dG9xJdR1'`h2r;6u xG )g7 G~MG%V{nBLLKKCn|W%GNG 8g( Gx w5Bq4i`(0͉!QeKss@Ib: JFq  1N r/20r mm b:475={~,,AIIHH| Zv.J<ꫯoiӦٌ3l?… I끖-[ZptպwnK--r +*bֱcGk֬Yc(լ`6yd{^W_}{=?O1|fRe-Z:X=lV_6h#[kw֪U6d`/}gO<}'@`뭷=nݺ[b%.&L`s_f͚UK^@5@ΝmРA{ڐ!Cl~Fl>vmٸq{ØTzkaolС)S#G^5ocr$}́ǥ}wQˢQz#vɵn:}gϞFd.]t# {@HlF:q[e*v#!ވ$C\:kppyusa+2x$P9=жm[#$%W\qE8>HD~_~AnVMB$ sO`O?>sܕ$[yc=fcƌ?|, >co 8qTp[s5mV^W*]>}}{={w|,HA@(]u]KDZ\p&s_tK.(뭷G~9\ybP=4o< %7gbFΜ93+ [/hs_bS`Xw wvZ2H^{]r%d}zS-e$ɿJ ~ĝ1%F+8pCpNfa?upo'Ii/yѼ?RO}"䀃٣sˍ?85z@D27I#!ES| x ;ꨣ-coժ[sݟg!5:ɏT W2*w5׸w1Y{O؇J@":Uj9馛=5 N~D2Drf9%p&6yKpZ_[ri%K @b`o+'hL [p(} ٰC=,8cڛn406%6`Q(ћs$, _˧ٜy7ed풳yK@vbƙ@1$P>ضn;ojKbH fX} :LӅ-?7g 63[R]/(3j{"Ǡdz3]~>e)_ +/-%o7[laÆ 3EKe݇~h] ~E( z!C2UW]17Sαr  āo4I|YT?+'mD:/?IJVDrq cM=+;,.s}C [lS>uC κN礆^ԝ,u^k{MQ{dRI{'I)Y)oI,1 g}]|p>8 R-6l3wI'9̀'xk ȭ'HE}#H5jtLѽ{7Gt2v h@SNucǎrK׽{Ȫ,ɹIxn&'$ȪNUNdkH:clB,%XK+bs`rqvo}܏?V ;$F$v^xa:L9LY󾛒VZd5Z%ǞB=w)z*rC*[`[|B[%@u=ꐽԢyWNN}v+tT B-Y&i[B3pO+_?ܨO9m}X߆] wDGw7mL&TSOu2dˆl;p-p_}"˷J.^|̘"A(SPUnjmC G0 W_~ɶ^{UK!>~" o6 [ _ϻ cWQ,ȏezmVgEGAzkaT7U*V{rP W M`zbaS M>1WQB' '߉b?nM6I.1KRwEShȎ߆ RGfwgx%P=@.;~_*n;0D3Xn PQ jPuL3h H ׿}މd@M~vxըJ,=bbmݶE : /!C,_)ڜ#u]iq:Q/G%v"N/DŽfoI/"ɲ +T@&me*Z;C DtV%Q}Uǡ1hhDmrtB_Na }zz衎R@g&@JlDh0tay<7i[Bynܸq"*{si V?!y+@b >q08hJE'TMii)Õd !93Eܵj!~V4w뭷:CC L,&riyeI~YgUe@I!KrQs,T_JW:GDX&lj@#(vϓ&M!$Y5e ,l*!:mflk[vna?)g-͵7Rf"^D e]fHR~W=Çv)1IRءZfe|M5a3d䏆H^h;5@K,?H'OVjCTgiz|ODĩleZitmVik]57Ykę?٭`=6&N@@sO*J&b/g/SybC+X",M(l'>9 ~mo'>wViY I?NB曶{@me6]Gx>GS_;ی9;f̘The\%}^JjP>m!9+<˲)8I)~ڤ =CU'Bdd"g(LVnrT2Hc  )G6Ž?n6/7"/觿7C_kDC%+b ?$@deS E&!Aw駟Y{ֶ@, ~VW"MS ֨Z7`G aY)@-ٛ|aŬ6VUY3SU/G$)T' Xw֣,92{{i?7,r-Uvq&@846~|,[w 1!jH"]3*Ino.AHVݩn4$)xHghDٱv(+]JGceYUG87HŞz~y!5]qD@^p1dpc? @ېQ??¾\Le8dz=?V"T @^\+?Orz}ݗ\ 5M9Swl HP g9*ӑT HyۇY`ljUA fdW'dQDW*eimbP08 D~$R&jӆ֧S u]^jKW^66ٱǠf^0r@!<9.aR[26W*%_~0r\ŞcVKMѹszo٣gs=I>vz).[d"Jer20j!aAeTi.{tػ-ݵb,-<{%B}JDx=t9~LhyL}..Bϸ y༂e #H9PQ qZ"er/8hwTxHc;Q֔%/;O`]}cs_kV½O>;oKG٦[k]r]P5( @Pbwe"Nw9rL~|8[ު,ާO?aLMZ=cX <"Ճ4sA9ϞQ2r^qN*(B{Y]׽[[ ץL0Rpq9z+LgPt8Q`zz=SYVp4bma& |*49ø &D8YoƚmIGӁеɐ՝b$V,(=80cL7cǹJdP |Zk@D4aE%L5H ׋/(_W>)<7рHRz駻>گlO Lb ŸZTm;4ohȑ%rT4}ϗ݇'_nк6BLڮhw_$DmmP\}JZ'Å#|R䟨,QE ¥N!k>r乃)55VXIV,qɨ*I$\!2Y5:T[D!fn '2=43cY .ǚC]Ml8cee'狫dd.b#xbpmsULNN*jM [5 @r y2pTRb믿^!y^aS]s!$[i,L3Ϯ7qP"%"ND lYs}k߯ {yv _@JP1hbM`D2FaK/rD҇E$vB5/'"?>_eaO%쥗^dCTVf[W@+HF(Py i{R\k:93[ϱ)7U,TH( jW>++Rwtq6DR[ 'EJIz3;̙<Ȃ 2/}ܠ_B3Yז=m Ebi^,,? HK֦'$աy@&Z5BvBLb+8L}r94D [.|2p!߰l;5ftw3YXժ%y~@4'Rap]Us]l;Q(JMئ+~v6c1Ky۩|bﮑCp)G+>y;^yKd| 3yoR#dbqs 3PLK*lˇF>8*xIm I*._3q*cwjr|w ⛏w_;n KRGf/\M7x$RkTs9E:e L!R&zm; ئ T޷{V색 liv۫jg%D>_iiu9ڈdBoYvZf&OZoG"10i;cE*5X#J+٘sҚeL[o'\ Qc.mA⍖!Ҋ>nR[;|m?&ygM^`{Τ*4"}=䑓_;[D̞S\47P#ICbTvc ́5W*j 5؛=|p*gA"N8xuy~q7e܂y##~sme˹:"l6R>i0*N @(,$8<ޤ.h" HŎO\kM *cl-`" s00%KĚ Lnb%w\g: 3._9o bl /L{* "4 teDESt%3Gpɚ:_Bo muIݖɮڶ2-:rZOY?۷nf6dx ߫jr BRZ¢؛;6l3SF$6Ũ$@vU#wZS[\e+`ϡڤm)kL y x.@^-ԁ` KᤓN  )nʿ6 k'%oHop.6tӔ0;/ ]^Ra_4eZ S4g][af99g uB`, HH=J5$H! Ir.^Xv!Ep&{r7%#̎ËM ػw/6>'XYTQQ6j)usK1(C](3垷C9'9ex26 >K;Jh9* 2QE0f-첩E(oκa}O>h2ԲeQ{zO6{Pg BZiu*f 7(A%}]r/^|eeÕ׎?x8"Ƌ_ي{pkvd\rN!0XӤ\ƌ1|B{u< ˷/,Zc5M6(ۛYva{~%Ugf++– X\,~%I!CαAdiSbRB+5@)unͶ G`3yO1PczBg7}:yx͐?R9{ RSۨĆlZk 2:*sX"mp*a Ǩ bd/a>J?ha. 8}n,qsg٩tnOlӶ}{kРu.h౭* ~+Stǻ-h[3Hc>ٔܛbՇguh㩉%MVoNn; `91Fl~wŦT29̸P.jO";z衡sIPK_(Twu@V_mZo.Ya 8Co;iή{,cshkFWzui/8-VBz'w~~#A(-zK?(Ck1q"%[1;1cƄZlQa Xl(Da@ZoQV;{tsXձi۶gP{7G 'm/" @ws}mq~i|+֔I;V SJԵ(gqF&EK$v AhT}ج(&1ἲW2 'äz B+ȶʷD<ӧSs[׸N7n\J6 7e@vA/ESN 5AȤ ?i?0_tR  ^;C,m='MZzw~s5τ[/fXcn}GrϜǽzJ_<{ޯkN*+iZ[LLɻ &SݵxMfͲ]w9 :~x=9nj9$$8#[}*.믾n2Ebe~clqgX}׾]%Sۛ=i]wYK.K΁#P\ 7eyz%4l pʜ,6|O-VSnCoxpQ %g0=蠃LX9CT>@ WU! Z-jT{+ 'vm628EŐ6BBޝώ8Sk,ӹfv]-;y_ZJigSz#Ze-ukm;ζX>F/c0Vh55@'285rJnr~#~zCX n'N ⋠hwM:}b^ԨX0l^w}ͷ7 C a*I׳ o;ֆ͆m.g^3L[HPO^ )my)bvdd0U/EԸrW xXh>CM^?wg*ü$t{kZ]րJ& R:~y=+}2tX*]D#85a vk\c>jp';lN&_nBl"6A}Cakzwna+R! ҪS'g4 `_@l/‚O 2߷ &-|H +ʠƿ{|ꁍxQ^ QՎvT3hcO/cʋPaSu®_:_ٯgٮzb)v& m][7^mZ\KPǯή;;ۊKDm-Q)B蠮l+<̷#WdmuQrVU k # 禛兒a aAHSy/s jSȾv^vJֶtVEC~悟G3+ͱ7͵ii%38W ݺ v ?!ka9H_mgqiv!Uzgzg@H&H0@j+gf 3,"Gp]EE a;aꫦ20a,m;[N-R]?avKy3 :)\ϰ]jZ83wCzMum[\N&Wc:}B*` 6 "* ,eCP})ZX-2~xfPTcmF zT )kn*ĀgUשkwxۢ6m6V]^G; > KWMeЈX xD-a_KQ$A-$T7ak#Is{6)>lѫa+vR:\~P?ΣWUe|22z-ڶFS[{SQkT"62FG@ku"EXwuSqs}?gb`[o b䃊n{]h+w]Ys9ߟ-GT[6@iՃ?Y 5ᛘTQEVG"E ~~?IO'0 5ٌYf=˶ogXuvUCx2zW5Q[hm;P] g oRfߠž@E!֢; ^/jh.̯P(o?fmpquVڅ^hmIKl*9Rjs/ɓo fj(V%XLʋ!@2;W5 @XK\uV}wp$TS OZcG:6vdpxԿWuy"6iSUNޅ2}՗nʩ0 ԑwrQ'HGpƀDmRK&}=.@^kV֩-P@xy}8i2sXUZW#erpiأcks+V|N5p ;(۱LtdHؽLp.\s@|zsz~@{\Ӊ2e”lk:b ^L"BL  [ot/])&`}ڴ^2N%݃1hwcd~43u!Qxh/3-"%7 @p]k\~[a?!)%w0iV&@D[hS:,-q2eJ39 ?[( D։A^nƞ@)lov >D m&P|ST6Qe$Ąmf:b;n&MDw~Yɇ7Ԗ*L7V䮥,yw v߃Jju <3@T}6D_jBR7`P{~g妇?ș/ NSw3`;AtLq$",>lb DZ&*`Ǝ:3~_ƚ[WS{ ]NzS&MvBb7,fԧW$@x6ah*rW_]/[0&8xBǍ- vf`1@]gS_d/LQ>`AX :5Y*=sOuPtկ[?_ml{Rm 5lذ^7h&E"j(!l aG!sm֡!1cS ۪wM៑[we!iEʆsj>=~~O89(9S[o,IJ?S+?fdӒ-!AP> ڦ={ oF4J"lo2 [) t-vac>W}Z;!ƻlZy.AyZ[ vǞ?x&8#G[%'@~8ߟc3* ʓ#,or0 "Hdu`bJ~Z]IY)bmQHrӽe<پaIՓ~/tH/Iyb. ?tVf d_wu%W=zen<&g{vd^{q? R# LPY5@j"BVVBS F2Y~䓳 K/6d ]s5_Ndm(r dXQׄEՔފ%$@Ef2C/|: Pfi;]5btI @ i/}>ώ^ #/ݽAh Mm". @?)}?GG}ƌ#yŴl"yk;v U7ҙۡZjL#!HaD֒-q92߫3X D% .q^{m 0¹뮻UN0n#{G, I!1ߓ >~F>~\D5=Ɋ$G̈́l5GX v$+V2(Um;3  ߯1:S}^c C7)k  u@?!nyVׯm6¼ #s7Z~;Ҡ- زx*}8詢Κx%p묳NQ+V'ۀXXw7ڟ hv[N5ww=sb)}k6Zsg_g)͹.j;-Qww.DT5K;:qNZw衇ooUSpX|_GD(hϒ40߳X_(8: pof~ ܟg;SNשm3׽Cs׫cs'̀55up=8.̧ijsz58=|}Zݽ6tSwJo%oP=K{T{Vi7F4>CZ wqǥGnvX5jӖ!DGj+'No iUuC qJ+ V:m&o> d³%au:uО6}7nmlMqJ?zwzs?qrn~nΈ~KuOk+d$dlw Æ ȴ̫S;/lXӤ#^ ١Cz,ȅÏ>22#&A0t4TEoQڴicbS洨/{ulZIUB%Yd6RVxbwԺR6^ (5J% U%ց,T EFYKɦ; Q$[db%ϱ X9Ո(6>srI}ȑ#=,͆ū>+c8×uJP<zR}!wsr8nE.)*0 .a)`R<Cbo" C 5CޏqZaI'v7C=yV~ao?dFzthnWx2"=O<**` IaG0p+ׂ<̠ y=6 S^TkL2] [᳴vy„ A%?}I5 L}Z6B_{J0`3 E;Ɩk!T.AҜ `G0-̇(@z]d&n$[ENꈱE VFn RT,z5vM6=* |y! B[ "^端:tb_ 7)wY¦Uj1( 'b) n| H Qs>|#/̓ pCب;iw}j^{mUUߌ3o_ U\xuVK|1}Bͫ#)H΄YVp,p[2(?? !X "HX8%quDz.ϻ25 ~mܑp@h =3%o z$Myg)ʐiu}z eE:L:R9` Zyl|)QgqibGZE6zRKVj )mYn*[u!ԑ 4򟦸) H?5-?lܥ!q}tAKt48](ӠHU yf<`6)Q=z( !@vyYa!zDE^Ε>[ǃE(΍v#'wP֩`):x^l5O q u)#[C.AnlRYkBH= FUlJ^PM@r| : A=]X7rt {sa I`=QyT}DD"4Ǔ E8lW\q o馠ʂlK~ u' |"?tĂi~5- ]D_qAՉIԛpRI;q)}"IewI=+d 0No""sY̱Xdd)v}pXg`_V˵RTX E3*\887~p8lN[o=/cH[2MydG&JQX q Mg;a,)"~_G2%$λ3B}9ɸ1`{ <9Sz!*dw. V{6* z*jmZ`i$gQpvz{|;*HR]?D"{\ H:J;3z!JCIJM= Z+@>\qeA%pkч<x;seHd~^pƨ}F:ָqQNȦXvyQÉwQ`aEit`ϛl_XIE6}rg\ ݏ"^b~~< 62;/51=p,ޭbI҆*0//Cy=paAAL߄ƙKr+E)et8=%'{z|Ǘ%0i)D"F Lcd!~I|0 ${d;ߜR /*/U_ D\??溙hwyNK5IN&^{-!AOIZE^ zIr5Qe+w'ΑX^R`|Ĵ||~x+| ׆:t~ jmb`yd'#rLw'tXwVR]Bc(Cnv(I۲|Btcek_Mqu*N#MO# $26QSx g#WTm(8z|`'}YHWr\0 ;B^(%Z)N¤n*I_f}9ޑIȑ# 7ǶSJm:2G+WhdjXRְXAX; 3b.ܭk!_`"Na0,r$s ƃĞb)ҒS%\6ƄzEE0ܪZ)@o̧?(->D@Eԁ<p a/Q%Lx:6 %ŀjH4;Vj݊M//ڧ4/zb(8K.Esꩧz7NtGІ`E=eߞ O;R|X)ro~SNk@*Tޑ (->"y;)6#lY Lcr]XXA HM}Wǂ~(޾'={II{/UICe1Ցb7r?\F>eռz\u~X} r>O޻L&A.27m{gӛToO>;B$EM\$Qxʧ@(To6}_}^b!XޢM@>{\(19c<;4SgoL(nvK5QVX!( `u3,:y'_o~O*c;bgG(OC־j%^P]'pKG*oMCڛɰ׿_2xU^\J4e( "@[b}XaÆy "nEy[Pf?%W+oqezTkvU9LߐZ&R؅ҥ]3<_GNy=N;ޖ=(7dp l9?{: Tgbz}|3X̝Ԕkb`q_jb+$DGO:|n T|zpAG>>wiy˸ ߧp@kGӷr 4A=h P}v#`A83~хnh$=p~|<=)R`X=޸\Z' BAk[j05( :VzFN:$4V-W7d6FfWr goy`&O8ϲ:pK/g9~6x d0#%5ۋ$ɘDpBvlK-sI3P..gdr,=wm]eUL&Fr|@aMъM1J^" =||ԧ6u|zA6qOv-Je,lAv | i c%0 Z)@)>'.$;1y!Z| _Ǚdwu*E}[IA.`] U 0P~ylŌu$8>orf.ڻ7;Xpu?=ٱ*LՒ D=ۍګZ|!uBE1KE?l?O-ӭF;}hJj._v&> 3jС&_1}^O4˘"^WX7Y)T\5j2Hϣe+knB Y,8j(q@֧S l[Sۺt7y&G[ |z".$QPKS*>۴=vį$]v&/7 ߸ Tpw+gU" 7@ͼ/OYh`m[[A<eH,˙Wdd%Y JO~ ;w{1;䓽5@E R=}]謓E@ GhwTH.+'Jp(Nzt{R@a$&)`VWT$4iGPPnW{OZ꯱G`=u:.+@&kr\Ʉ$i7`-9"h[ֳKoʵ`ǏB9҆ϔZ}<0`u(l h?}&:e ۾}׮]{?qWYee'?Ёo!*=6|6Me3 71`~?qDaM&t0a&$U=.zRv_/*)H8qC}d$>5ᱽAIDWX(PrV>CK`xIr-$^@rk.a(ݩ馛6徫~dM$/\Xz ? :`b/GZB$ P|+.<' 8AV8T@(`Ѓ&p RpbH^͈ ;X# 8L9 M\$hA8gOj|vCeMRhQM嫚!ݕNKv9!YB옣\W!gHa'g2Bڣ8[YYG? |7Ǐ 3G*`(YB:ن8wqͻ`UE r΀H2B& RFߐԿ%h,C}0CӳUKvnSpc=6s̓P ˁĭڕ9Ulb̴{;۫/"e(Ės5y{>c.[3NBJ2{. /kH/:䂐瞷(v=Ie<Țx܇҄.UI'Y L$ZkZ "k_VX=ӧvf u3jb& \jpӷx`21sfd+$HDWNq}r"F؏\p>jj񷂟:+u^Jh0[xF~"ux޽jQTТKן'sEWUG 49͆op$(hU\MhT( ӯaZpX>w+[HjRH:Edu'4?E<~ 3#4Uy$ge_*ڀ' !vB_*Ī,8>N4:v%=z:uj9U5b`P^`} ۊ]$CS<2tV95&Dpȷ5.WC*x- (l͜rez,*цw}z$ h\j!T8wԌ|$B&=d@=xTH56'l6BOMPTtU2{ 2c92C'\!U}݄FSCk\_>i#B|=ImذakDh3[0{,>4!$/D<6Ju2Ap;3HwۈI)HsP/SI} VJL {ȹgNZ~rZ*nʬv:7_e|; ՂESB9h=aSܶMk!y7\R۷Ҭ&".ϗ㏛x}\JJ7aΓ5H bn&C$Bܐ5ugEVŸRם(p{2p"kCrd@~=@d;."zR[TMrۧ%f|jDq$Jd7b'tCk)Ay Iu#G9瑙36 .Tn;Hhs4}*Q*'L2՚cPzDa裏6 W?·[ \bl:{p\x:gqY7arzZg)֦4)S?o!l(h__گ"9)͐xH5jTbMZXg.=_{U7sXaǴR _ |.xEX_C$={t5Bhm 6~Q!oF;9H/9xʸ) Ze$M2FAN:N<&=>V:ޘIe}s d% 8*j2^ k) /-]:8zO q\D9@wtaXyd^כV*ccymܸqrQ9>}8(O}ހ+Kn^{&IvUNjmt&R3Xa{>Ny12GfRu ??&M͔)@e#p_A Vd $pނ|R{b,Il!M9"5_`bcIef%@~"k75AdT z.kԬ@~"971>f[oi]w-'4!tzNO'J*8B 5\8 %{d9 P0_$,/šͣV =iCadjXI,Hd(ɽGHI\:/!@eMo%:\'|!o `1ȩ./H8dq SDt"Q$ɊY+fS7xbP0^H !C|2|F9|a o&:I-AO{d;24!ވTJ(9H8 =H|69qDwEDp$@L62(HJ!c:A:5B nIENDB`ic04ARGBDDBTd B+}(mI.*{x n AO X9#es7 JJQ?b+7lb``YY YY``gbl7,c?PJJ 7te#9X P@ n w{*.Hm(~*B dSBDDDDBTd A+}(mK.){x [ EO X9ev,NMQ1J+7led88_YY YX^88ddl7+J1APMM,vd9X PD [ w{*.Km(~*B dSBDDDDBTd A+}(mM.({x D !IO X:dxRQQ -+7khi~]XZ YX]~hgk7+- APQRyd9X PI" D w{).Mm(~*B dSBDDic074PNG  IHDR>asRGBDeXIfMM*iHw4YIDATx_E'ɦ$l=A) BAl@@TxR$tyJH U)PH @ !uٻ ݹ3gNsg̴X|j߾ ,O>dx?+{/̛7/,[,T?OڵkjjjB=k/*| _ݻwwATVz@90fIxꩧѣGǎ;b<_m(t.Əэ ՙ Ԣ(/GqUVpk"Y_DVYrOn9䐈tWҥK .hN:dJO e_HƀN]]tER]f+n 2;=~SWx)oEtH+ @ 1cƸ?WʥRF6x.6Ӿ3/G\sMW+yc.]2fB֡U1FVcG&2-_BT\u辶vq 7߄z 0ŽF╎0ŕ#>=SNna=9Zs csv[ُ;,GSJ ?Rܩ#7wuz-Жrl#D_ŋy)S2x0|_ę2gmxw[oy0cƌ`·a܏ç~op٧OڄJgyGrذaӂ< t HM> 3<qы|QX6tS_{BG{&Q~-g/?;J2G݇wݛ%#M'#^3~{RjeBGX͎_}9IAVr!\/ƣ>:s=ќ`RFh0u"h_+Nh)TFKI{G kȖ,8;-~ߞ ŧBL߳n8Ό<^)XJ,|BɛOJү㎋MpxG{8EGxXgu"mV9d^\xixz6^7hz4xUI^2SA;l?'!5g;SƋS HӧOZۭK =Mh9AM>=p :'U@524/I&e1c@jaԼVȯ_- 7|ǥT>ejbM K_yjU-\}6->`&ٌ m W]u eg?Y~O}\lS-.ajܧ3ĝwi!ojHЕ]%Z[$s]W_} $yġAU[ԥr@3]/G~xi#hYͻ31@suTpb1!%:穖Ae۬k9XΆu7.}O諡Z4 @BݙD @M<蠃2’* L9ew1H]6E(VBKW.^ ߬GOQkΝ;9h ͔)SNTڭ ڂ Gν[}CdM^0< _ Gcì2d !_VҐ`HM2d-ft6l<7#EA$o̍i6̈'Sz l|8󌟇c3,&O].pva2Oq4BiZ%n3jXocqȐ!^Fck=5 g/ߡzR{ _n6CL(:ҸJ_=F?Cuxymu;t]WY5OWWiJ.(ᢉc(3|UFyEí4=em6q &}虦W.:.!T4Eg)|_JOc A<\1gzQq%#⼋FĹK.grx1FW6VEM #2VLYs;m̴j oLОJWI F=0v,;i $ TGT^t$9e56\uUk gv,Ԭi_lke̚Aߣ}ԡ]jmɈ{OYsBв+LdiʪO{*56ʂ:\iVǧ৶sQ{b$T>V9Oo'?I6'S`WƞM6W##|'i68>5PNvAXjjK=M ~~liOXns ԉoZ(L?3[[[>eQ>|LAWO]-ytVx`Zau6 ; 9tDLy!vkc³OM Z {VFE5PCthj 0dW\Us1DS4gx{h4f$gIb>/P{)K/j/V7yq^}㚫x-;!B2ZOynD|)T !l@0E2B81>/ppOdk>ť{o ~^!UyՊQp4LQp[.b9"nɖqͷb=nOFP gR Eef "2epZTo$uct-+eS@>bW鹽SYR[y'8 SX1ŴZ9#|ף:Ҋ*M7 ܤPA927lgGo%C9F(W#xK).q~fd#yJ&?9M3F 3x%M81S~dLY2FĨJUH-T9W#rD'hqRS`-%RSR:xm٠dgƐ'AkVaM3c)6sSzUJSWh1^$T`f4-^x wH}98P PβO!R>iL?=cI9Jkq:|[m&?W:-%<x:DigټvIy\+oh[2j A -|VjBP :4Μ93{WXڟzmLfHJ'RџE/8/@Ơ8F}}}kSs>6m{ f f OeWIc7x;c̴JGz z|>ϲ71GAZdn)4 w`Jpzk KП3N.MWb7VL3=nZf:rn{G[?ϦOQr{N~bϋœeܳ>R-;ߩ,b)zs+?:C]Hf#2^{;sn8n́+am W^qy7npZ5OPl /\v2J`AV/.fi -M~Zr6wVSSK [Р+ax:bY:cVHZCAoֱ_-~s1^FWpTWjع*ֿ񈕣ZWrVҲn4۴< t]BF5F7j!dGI`(B _:ݫ&:3 ,$$nrgbWnO\/?6\P$pHB(~M1)B?Rb'_B񢟡x0W+&|{HF3axeÍIܩp~xÐ^ÀU:K>?\bO=4&lSpht@8餓&> x]"l;R83\YTV=nOiW.oFnr`m_,?veL8FZ/o=Jdz<ڒ%è̹}k‚Oѹ} ,Zޘ<5r6WVb]I qq/[B:%`C,#'|])'Ov*qQ7`hx<57R0?xau?$4<~oӎ$\F.=bMn60˒h(DetѼ󦿺w# -4 oxo^㙀<.lWl.DWR|J_ILN2^(xq ytʗz>8/'v% z;~_\&~J rIh"OlӸZ̽g&j{\eӆs7^G {t~&SQliDSNqښm׶r 9:w qbD487xLUO1gN&x tm,| ꫯƺZza1^k mm|眡ϯ9w?#͌#-㪫&;)q~?-{h鯀-2ƹv X+VK)4w> ~mkvq#+╵c}7Ұڿg{v!-yptV;xY*Ce6TD*,Hle! ({W od}9SUq;aǞf8u\w#d>~q߿S(]`yg!Mk)Cr9F$#[aZ^WBU4`S0w!{V۰LxR~s֗yvi̙#~8{7wY89]jI= 9`ɲf.\ny{n8k{憷?Z.ݯ;\|p駅IW2e;׍=;=M1[*y @1-] JδHIFckm U\n`3l"(82mwF;v7%ܽpB5a)F -uZΘ1R '߇g ʒlZ :R%匇<4)aT AP`5.Eb e[puי޺g4&ti=J,&_<3\PsÆ\o6X2dC-0֐ʠLrD?0HHx^.2p| :pa ag2AF=4S&y`[7g}ݻxe{Z:}j (k$z^)p / k 3[0{>&ܗҐvڞgg{ Lõ\H /קZ{lpwO!<[EP(=0[wY(rPuw  \m B .[IX{9to^|0g 3VX;n{k^x%C:uw Oz33U۾6pL )ESQ@ #QȒ|%*ϠMmԯ5VgYej_J]:=#H  n?V[=)"sO>PA/Κl 2[+QȫAY.6+WXK>ego 7/~c |`8=٫,`e`DN_rFdjoJל/aӝ ml{f. K>Yњ៳? O.LuR4`4L s'* W|y槡c0 ( m`N{I>)L b<ے4O(qrP$>m~ v@B9-o1 }}]wK. v ;tnzcn8z~o|y-5#eps¬E¸1`3^_,ZVWj{Oj~!5 724_FC4{[RYgOکSˎYmBŵ l#dN8ÓtnM{W8q4!y}y[ ')C~iДEpI.8J0}.y @ D8IâLX @z|p8[@K/اOe}O+gKÖu GmJxϚNxzЗ9S:_dz'?XxC^pk7e?ز8_4BS4.}> V94,v7[L)(rb%[R^K挒5w!c66}7p6:f=y^aͻ?\vW- ݬVޯn6&<ۆyyEC^py\9n}yY P3JB4P> @fE6ӳ| .q"`ͽ3I>cABg屸t0+C 4WoW.S:l2(>¦}:xVciNd:Æ osfh.B.hht0B\܋Hy\s2ц_iN'tiR8?:T(-KV!իhAc6țUjpma,:m#9>W)tHwq;{'O=h)ģdc}&-qGX[(Q-镧>)M!g]IW!W!2(_B/$m)WC\h,&Vؾ=ʺn[ORpsinuA HӼ<"Erq/uWx\v#;Ń*2$o[7E7s·+ idE$\]‹- @'Eǔ\¢Ҥ CRR>PB)%?x."xzmjidS Dk)e/#gqsvIdZ,)AT{Y)^ a$VJ%`,a)~ȶ *>Xqp_{5tOۭ/,[,;ž飏ݕp\<TN!!fgq_;Bq"yx@9r4P);K/M( zIUCz7tǙEԝ_5 8*,VFl,s.1?.;iȡP3l(-b*}/i$`,dlŖpn֖Op*F++#`O9ddg+R<.xQv~Xy )&=7z'X}NYdt8%ҧ{0g𺥱(XEPlM5jVYrI(z"ƦxiYd=G喢-5{kQ\f&Е "g7J`,nS 6ƈI+g fqwOmi^g74UV0FWҼE+ BĞl?HPVu@[ikIuvi =K1bg,۾K9 iKOq*T(㻶M=Q Nڶo,FkC;bqcPe(92l 8e 'œ/m)Bj'ްh? hdX(O'1#8SJx򦂰h&s| j6qq6=pҐVx_I`+]Gz|GƃB֣WWZn/|Z$?BZFkyؒ4sqfReT"|&J&^*]g+ǦƝfdkw *|$pM[fmduhh}ښ6Gx⢅S+N)GqDdFO2{ř3mj?_yI|+hu!$pM` P8ݚ;BP+dZziLzSʇ/)RR>J)6Iqm?KHWnh3MMhVYw Ƕi]mjy-O2llB]Wых|k!\0P,\ (MhH+A7:ZWk/ #ez11 -=Gy._l)Yϋ'5Trx=g`bf>~ǔ;vnÍ7 }?~:L9~лG]S|›޷W^x&|wm1E_Qň0!fv`>E-۳ qbJp l5nN&&&= Yj,sOV-iߔcpqdWM.-2afb6@%[ 3!yLExMoG7Vɤy*-#|D ૴ElUIKa2_`-kϽm/^65 &P+^ziXzIŽ~0VAxRB ~V4`:L2\i񤴬64iRSӳO^h,3 )RC\RhG|`4̷Fo`=4e{]m甁Bk9Y C!6Z)IʓA@\O8){BO%A_W}jlf*Hd=ΦyZ``nUfmIiuw7}7Q2'y5jղ&r<úZ chP8SH& 3N Av7ftòҖRZtͶ,j.I.4ȉk7wҹS ޽j5G?S@'yL<>gs#pzTq_3Xx`SJq4Yا Y#0'x"rNЄ!Hy"ş#4ރKrNJq)Y ~HSA1vF0LʖixzbS5 ,\\P,2RC NW0|=?/_K^N+53?|?Yk*%ǦNǚONirT+Ӛ䞼|Ĵq;Sn-V.[ᯄj}cf!Jsjjih4jŖEIRb%!yT%TОb6C7]q|" .tK& ˇ^%TK6˫/qkKyQyBDO-r_w=&d>}zә'[lSm]&`5gLf/l6bG Oey03?wfil>a>CV;Fl6Cp1z&rӌqpϕvۜm5[aef k1U6*M*R,y񒁢h^).MW{BQv T:(;j]kɱX9{,GȠwC̭_q>%x)R 42|Zi*W!M4 6CpU*Gi)?l#ma yLhV|[̄/dq12Ce_X.5*7 rL5 ?j~qw2}ДҸ2K~辝aC^ Kzψgknr#g^z~#>҂ >CҝE,߮dTh2Vhuoԩ4?Bs]]&5fy@X(Adv";x?4<0-keyU_KNQx\+:< ba!ĥi>K%En(mYb2~a1xRtz5 x g4Kw̛LOTe-"dà'pOkw>Cnk@$&C|n ;&C@:ɿZp1*m D:+ R]*NaQ Aaa!0"ߙ-c(\JG :'R>iJciuƑU6g5% :@D{ TgcLeZOcV!ےČPL.4>Ox ث7E櫋rK1GSRL7cBIENDB`mitmproxy_rs-0.12.8/mitmproxy-macos/pyproject.toml000066400000000000000000000013251511036467100224470ustar00rootroot00000000000000[build-system] requires = ["hatchling"] build-backend = "hatchling.build" [project] name = "mitmproxy-macos" dynamic = ["version"] license = "MIT" requires-python = ">=3.12" readme = "README.md" [project.urls] Source = "https://github.com/mitmproxy/mitmproxy-rs" [tool.hatch.build] only-include = ["mitmproxy_macos"] [tool.hatch.version] path = "./version-info.toml" pattern = "version = \"(?P.+?)\"" [tool.hatch.build.force-include] # "../target/release/macos-certificate-truster" = "mitmproxy_macos/macos-certificate-truster.app/Contents/MacOS/macos-certificate-truster" "./redirector/dist/Mitmproxy Redirector.app.tar" = "mitmproxy_macos/Mitmproxy Redirector.app.tar" "../Cargo.toml" = "./version-info.toml" mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/000077500000000000000000000000001511036467100216745ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/.gitignore000066400000000000000000000000221511036467100236560ustar00rootroot00000000000000xcuserdata/ build/mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/ExportOptions.plist000066400000000000000000000013311511036467100256040ustar00rootroot00000000000000 destination export method developer-id provisioningProfiles org.mitmproxy.macos-redirector Mitmproxy Redirector org.mitmproxy.macos-redirector.network-extension Mitmproxy Redirector Network Extension signingCertificate 89AACB17FA34CC93BE764A1024FAB6346155A439 signingStyle manual teamID S8XHQB96PW mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/README.md000066400000000000000000000025151511036467100231560ustar00rootroot00000000000000# Mitmproxy Redirector for macOS - `macos-redirector`: The app bundle that sets up and hosts the network extension. - `network-extension`: The network extension that redirects traffic. - `ipc`: Inter-process protobuf communication between proxy (Rust) and redirector (Swift). ## High-Level Overview When starting transparent interception on macOS, the following things happen: 1. mitmproxy-rs' `start_local_redirector` copies the redirector application into `/Applications`, which is a prerequisite for installing system extensions. 2. mitmproxy-rs opens a unix socket listener. 2. mitmproxy-rs starts the `macos-redirector` app, passing the unix socket as an argument. 3. The macos-redirector app installs system extension and sets up the transparent proxy configuration. 4. As a result the network extension is started by the OS. It immediately opens a unix socket to mitmproxy-rs acting as a control channel. 5. mitmproxy-rs will pass the intercept spec (describing which apps to intercept) to the network extension. 6. The network extension receives all new TCP/UDP flows on the system. If the intercept spec matches, it intercepts the connection, opens a new unix socket to mitmproxy-rs and copies over all message contents. Using a separate unix socket per flow ensure that each connection has its own dedicated buffers + backpressure. mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/ipc/000077500000000000000000000000001511036467100224475ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/ipc/mitmproxy_ipc.pb.swift000066400000000000000000000701641511036467100270400ustar00rootroot00000000000000// DO NOT EDIT. // swift-format-ignore-file // swiftlint:disable all // // Generated by the Swift generator plugin for the protocol buffer compiler. // Source: mitmproxy_ipc.proto // // For information on using the generated types, please see the documentation: // https://github.com/apple/swift-protobuf/ import Foundation import SwiftProtobuf // If the compiler emits an error on this type, it is because this file // was generated by a version of the `protoc` Swift plug-in that is // incompatible with the version of SwiftProtobuf to which you are linking. // Please ensure that you are building against the same version of the API // that was used to generate this file. fileprivate struct _GeneratedWithProtocGenSwiftVersion: SwiftProtobuf.ProtobufAPIVersionCheck { struct _2: SwiftProtobuf.ProtobufAPIVersion_2 {} typealias Version = _2 } /// Packet with associated tunnel info (Windows pipe to mitmproxy) struct MitmproxyIpc_PacketWithMeta: @unchecked Sendable { // SwiftProtobuf.Message conformance is added in an extension below. See the // `Message` and `Message+*Additions` files in the SwiftProtobuf library for // methods supported on all messages. var data: Data = Data() var tunnelInfo: MitmproxyIpc_TunnelInfo { get {return _tunnelInfo ?? MitmproxyIpc_TunnelInfo()} set {_tunnelInfo = newValue} } /// Returns true if `tunnelInfo` has been explicitly set. var hasTunnelInfo: Bool {return self._tunnelInfo != nil} /// Clears the value of `tunnelInfo`. Subsequent reads from it will return its default value. mutating func clearTunnelInfo() {self._tunnelInfo = nil} var unknownFields = SwiftProtobuf.UnknownStorage() init() {} fileprivate var _tunnelInfo: MitmproxyIpc_TunnelInfo? = nil } struct MitmproxyIpc_TunnelInfo: Sendable { // SwiftProtobuf.Message conformance is added in an extension below. See the // `Message` and `Message+*Additions` files in the SwiftProtobuf library for // methods supported on all messages. var pid: UInt32 { get {return _pid ?? 0} set {_pid = newValue} } /// Returns true if `pid` has been explicitly set. var hasPid: Bool {return self._pid != nil} /// Clears the value of `pid`. Subsequent reads from it will return its default value. mutating func clearPid() {self._pid = nil} var processName: String { get {return _processName ?? String()} set {_processName = newValue} } /// Returns true if `processName` has been explicitly set. var hasProcessName: Bool {return self._processName != nil} /// Clears the value of `processName`. Subsequent reads from it will return its default value. mutating func clearProcessName() {self._processName = nil} var unknownFields = SwiftProtobuf.UnknownStorage() init() {} fileprivate var _pid: UInt32? = nil fileprivate var _processName: String? = nil } /// Packet or intercept spec (Windows pipe to redirector) struct MitmproxyIpc_FromProxy: Sendable { // SwiftProtobuf.Message conformance is added in an extension below. See the // `Message` and `Message+*Additions` files in the SwiftProtobuf library for // methods supported on all messages. var message: MitmproxyIpc_FromProxy.OneOf_Message? = nil var packet: MitmproxyIpc_Packet { get { if case .packet(let v)? = message {return v} return MitmproxyIpc_Packet() } set {message = .packet(newValue)} } var interceptConf: MitmproxyIpc_InterceptConf { get { if case .interceptConf(let v)? = message {return v} return MitmproxyIpc_InterceptConf() } set {message = .interceptConf(newValue)} } var unknownFields = SwiftProtobuf.UnknownStorage() enum OneOf_Message: Equatable, Sendable { case packet(MitmproxyIpc_Packet) case interceptConf(MitmproxyIpc_InterceptConf) } init() {} } /// Packet (macOS UDP Stream) /// ⚠️ Bump network extension version on changes, https://github.com/mitmproxy/mitmproxy_rs/pull/227. struct MitmproxyIpc_Packet: @unchecked Sendable { // SwiftProtobuf.Message conformance is added in an extension below. See the // `Message` and `Message+*Additions` files in the SwiftProtobuf library for // methods supported on all messages. var data: Data = Data() var unknownFields = SwiftProtobuf.UnknownStorage() init() {} } /// Intercept conf (macOS Control Stream) /// ⚠️ Bump network extension version on changes, https://github.com/mitmproxy/mitmproxy_rs/pull/227. struct MitmproxyIpc_InterceptConf: Sendable { // SwiftProtobuf.Message conformance is added in an extension below. See the // `Message` and `Message+*Additions` files in the SwiftProtobuf library for // methods supported on all messages. var actions: [String] = [] var unknownFields = SwiftProtobuf.UnknownStorage() init() {} } /// New flow (macOS TCP/UDP Stream) /// ⚠️ Bump network extension version on changes, https://github.com/mitmproxy/mitmproxy_rs/pull/227. struct MitmproxyIpc_NewFlow: Sendable { // SwiftProtobuf.Message conformance is added in an extension below. See the // `Message` and `Message+*Additions` files in the SwiftProtobuf library for // methods supported on all messages. var message: MitmproxyIpc_NewFlow.OneOf_Message? = nil var tcp: MitmproxyIpc_TcpFlow { get { if case .tcp(let v)? = message {return v} return MitmproxyIpc_TcpFlow() } set {message = .tcp(newValue)} } var udp: MitmproxyIpc_UdpFlow { get { if case .udp(let v)? = message {return v} return MitmproxyIpc_UdpFlow() } set {message = .udp(newValue)} } var unknownFields = SwiftProtobuf.UnknownStorage() enum OneOf_Message: Equatable, Sendable { case tcp(MitmproxyIpc_TcpFlow) case udp(MitmproxyIpc_UdpFlow) } init() {} } /// ⚠️ Bump network extension version on changes, https://github.com/mitmproxy/mitmproxy_rs/pull/227. struct MitmproxyIpc_TcpFlow: Sendable { // SwiftProtobuf.Message conformance is added in an extension below. See the // `Message` and `Message+*Additions` files in the SwiftProtobuf library for // methods supported on all messages. var remoteAddress: MitmproxyIpc_Address { get {return _remoteAddress ?? MitmproxyIpc_Address()} set {_remoteAddress = newValue} } /// Returns true if `remoteAddress` has been explicitly set. var hasRemoteAddress: Bool {return self._remoteAddress != nil} /// Clears the value of `remoteAddress`. Subsequent reads from it will return its default value. mutating func clearRemoteAddress() {self._remoteAddress = nil} var tunnelInfo: MitmproxyIpc_TunnelInfo { get {return _tunnelInfo ?? MitmproxyIpc_TunnelInfo()} set {_tunnelInfo = newValue} } /// Returns true if `tunnelInfo` has been explicitly set. var hasTunnelInfo: Bool {return self._tunnelInfo != nil} /// Clears the value of `tunnelInfo`. Subsequent reads from it will return its default value. mutating func clearTunnelInfo() {self._tunnelInfo = nil} var unknownFields = SwiftProtobuf.UnknownStorage() init() {} fileprivate var _remoteAddress: MitmproxyIpc_Address? = nil fileprivate var _tunnelInfo: MitmproxyIpc_TunnelInfo? = nil } /// ⚠️ Bump network extension version on changes, https://github.com/mitmproxy/mitmproxy_rs/pull/227. struct MitmproxyIpc_UdpFlow: Sendable { // SwiftProtobuf.Message conformance is added in an extension below. See the // `Message` and `Message+*Additions` files in the SwiftProtobuf library for // methods supported on all messages. var localAddress: MitmproxyIpc_Address { get {return _localAddress ?? MitmproxyIpc_Address()} set {_localAddress = newValue} } /// Returns true if `localAddress` has been explicitly set. var hasLocalAddress: Bool {return self._localAddress != nil} /// Clears the value of `localAddress`. Subsequent reads from it will return its default value. mutating func clearLocalAddress() {self._localAddress = nil} var tunnelInfo: MitmproxyIpc_TunnelInfo { get {return _tunnelInfo ?? MitmproxyIpc_TunnelInfo()} set {_tunnelInfo = newValue} } /// Returns true if `tunnelInfo` has been explicitly set. var hasTunnelInfo: Bool {return self._tunnelInfo != nil} /// Clears the value of `tunnelInfo`. Subsequent reads from it will return its default value. mutating func clearTunnelInfo() {self._tunnelInfo = nil} var unknownFields = SwiftProtobuf.UnknownStorage() init() {} fileprivate var _localAddress: MitmproxyIpc_Address? = nil fileprivate var _tunnelInfo: MitmproxyIpc_TunnelInfo? = nil } struct MitmproxyIpc_UdpPacket: @unchecked Sendable { // SwiftProtobuf.Message conformance is added in an extension below. See the // `Message` and `Message+*Additions` files in the SwiftProtobuf library for // methods supported on all messages. var data: Data = Data() var remoteAddress: MitmproxyIpc_Address { get {return _remoteAddress ?? MitmproxyIpc_Address()} set {_remoteAddress = newValue} } /// Returns true if `remoteAddress` has been explicitly set. var hasRemoteAddress: Bool {return self._remoteAddress != nil} /// Clears the value of `remoteAddress`. Subsequent reads from it will return its default value. mutating func clearRemoteAddress() {self._remoteAddress = nil} var unknownFields = SwiftProtobuf.UnknownStorage() init() {} fileprivate var _remoteAddress: MitmproxyIpc_Address? = nil } struct MitmproxyIpc_Address: Sendable { // SwiftProtobuf.Message conformance is added in an extension below. See the // `Message` and `Message+*Additions` files in the SwiftProtobuf library for // methods supported on all messages. var host: String = String() var port: UInt32 = 0 var unknownFields = SwiftProtobuf.UnknownStorage() init() {} } // MARK: - Code below here is support for the SwiftProtobuf runtime. fileprivate let _protobuf_package = "mitmproxy_ipc" extension MitmproxyIpc_PacketWithMeta: SwiftProtobuf.Message, SwiftProtobuf._MessageImplementationBase, SwiftProtobuf._ProtoNameProviding { static let protoMessageName: String = _protobuf_package + ".PacketWithMeta" static let _protobuf_nameMap: SwiftProtobuf._NameMap = [ 1: .same(proto: "data"), 2: .standard(proto: "tunnel_info"), ] mutating func decodeMessage(decoder: inout D) throws { while let fieldNumber = try decoder.nextFieldNumber() { // The use of inline closures is to circumvent an issue where the compiler // allocates stack space for every case branch when no optimizations are // enabled. https://github.com/apple/swift-protobuf/issues/1034 switch fieldNumber { case 1: try { try decoder.decodeSingularBytesField(value: &self.data) }() case 2: try { try decoder.decodeSingularMessageField(value: &self._tunnelInfo) }() default: break } } } func traverse(visitor: inout V) throws { // The use of inline closures is to circumvent an issue where the compiler // allocates stack space for every if/case branch local when no optimizations // are enabled. https://github.com/apple/swift-protobuf/issues/1034 and // https://github.com/apple/swift-protobuf/issues/1182 if !self.data.isEmpty { try visitor.visitSingularBytesField(value: self.data, fieldNumber: 1) } try { if let v = self._tunnelInfo { try visitor.visitSingularMessageField(value: v, fieldNumber: 2) } }() try unknownFields.traverse(visitor: &visitor) } static func ==(lhs: MitmproxyIpc_PacketWithMeta, rhs: MitmproxyIpc_PacketWithMeta) -> Bool { if lhs.data != rhs.data {return false} if lhs._tunnelInfo != rhs._tunnelInfo {return false} if lhs.unknownFields != rhs.unknownFields {return false} return true } } extension MitmproxyIpc_TunnelInfo: SwiftProtobuf.Message, SwiftProtobuf._MessageImplementationBase, SwiftProtobuf._ProtoNameProviding { static let protoMessageName: String = _protobuf_package + ".TunnelInfo" static let _protobuf_nameMap: SwiftProtobuf._NameMap = [ 1: .same(proto: "pid"), 2: .standard(proto: "process_name"), ] mutating func decodeMessage(decoder: inout D) throws { while let fieldNumber = try decoder.nextFieldNumber() { // The use of inline closures is to circumvent an issue where the compiler // allocates stack space for every case branch when no optimizations are // enabled. https://github.com/apple/swift-protobuf/issues/1034 switch fieldNumber { case 1: try { try decoder.decodeSingularUInt32Field(value: &self._pid) }() case 2: try { try decoder.decodeSingularStringField(value: &self._processName) }() default: break } } } func traverse(visitor: inout V) throws { // The use of inline closures is to circumvent an issue where the compiler // allocates stack space for every if/case branch local when no optimizations // are enabled. https://github.com/apple/swift-protobuf/issues/1034 and // https://github.com/apple/swift-protobuf/issues/1182 try { if let v = self._pid { try visitor.visitSingularUInt32Field(value: v, fieldNumber: 1) } }() try { if let v = self._processName { try visitor.visitSingularStringField(value: v, fieldNumber: 2) } }() try unknownFields.traverse(visitor: &visitor) } static func ==(lhs: MitmproxyIpc_TunnelInfo, rhs: MitmproxyIpc_TunnelInfo) -> Bool { if lhs._pid != rhs._pid {return false} if lhs._processName != rhs._processName {return false} if lhs.unknownFields != rhs.unknownFields {return false} return true } } extension MitmproxyIpc_FromProxy: SwiftProtobuf.Message, SwiftProtobuf._MessageImplementationBase, SwiftProtobuf._ProtoNameProviding { static let protoMessageName: String = _protobuf_package + ".FromProxy" static let _protobuf_nameMap: SwiftProtobuf._NameMap = [ 1: .same(proto: "packet"), 2: .standard(proto: "intercept_conf"), ] mutating func decodeMessage(decoder: inout D) throws { while let fieldNumber = try decoder.nextFieldNumber() { // The use of inline closures is to circumvent an issue where the compiler // allocates stack space for every case branch when no optimizations are // enabled. https://github.com/apple/swift-protobuf/issues/1034 switch fieldNumber { case 1: try { var v: MitmproxyIpc_Packet? var hadOneofValue = false if let current = self.message { hadOneofValue = true if case .packet(let m) = current {v = m} } try decoder.decodeSingularMessageField(value: &v) if let v = v { if hadOneofValue {try decoder.handleConflictingOneOf()} self.message = .packet(v) } }() case 2: try { var v: MitmproxyIpc_InterceptConf? var hadOneofValue = false if let current = self.message { hadOneofValue = true if case .interceptConf(let m) = current {v = m} } try decoder.decodeSingularMessageField(value: &v) if let v = v { if hadOneofValue {try decoder.handleConflictingOneOf()} self.message = .interceptConf(v) } }() default: break } } } func traverse(visitor: inout V) throws { // The use of inline closures is to circumvent an issue where the compiler // allocates stack space for every if/case branch local when no optimizations // are enabled. https://github.com/apple/swift-protobuf/issues/1034 and // https://github.com/apple/swift-protobuf/issues/1182 switch self.message { case .packet?: try { guard case .packet(let v)? = self.message else { preconditionFailure() } try visitor.visitSingularMessageField(value: v, fieldNumber: 1) }() case .interceptConf?: try { guard case .interceptConf(let v)? = self.message else { preconditionFailure() } try visitor.visitSingularMessageField(value: v, fieldNumber: 2) }() case nil: break } try unknownFields.traverse(visitor: &visitor) } static func ==(lhs: MitmproxyIpc_FromProxy, rhs: MitmproxyIpc_FromProxy) -> Bool { if lhs.message != rhs.message {return false} if lhs.unknownFields != rhs.unknownFields {return false} return true } } extension MitmproxyIpc_Packet: SwiftProtobuf.Message, SwiftProtobuf._MessageImplementationBase, SwiftProtobuf._ProtoNameProviding { static let protoMessageName: String = _protobuf_package + ".Packet" static let _protobuf_nameMap: SwiftProtobuf._NameMap = [ 1: .same(proto: "data"), ] mutating func decodeMessage(decoder: inout D) throws { while let fieldNumber = try decoder.nextFieldNumber() { // The use of inline closures is to circumvent an issue where the compiler // allocates stack space for every case branch when no optimizations are // enabled. https://github.com/apple/swift-protobuf/issues/1034 switch fieldNumber { case 1: try { try decoder.decodeSingularBytesField(value: &self.data) }() default: break } } } func traverse(visitor: inout V) throws { if !self.data.isEmpty { try visitor.visitSingularBytesField(value: self.data, fieldNumber: 1) } try unknownFields.traverse(visitor: &visitor) } static func ==(lhs: MitmproxyIpc_Packet, rhs: MitmproxyIpc_Packet) -> Bool { if lhs.data != rhs.data {return false} if lhs.unknownFields != rhs.unknownFields {return false} return true } } extension MitmproxyIpc_InterceptConf: SwiftProtobuf.Message, SwiftProtobuf._MessageImplementationBase, SwiftProtobuf._ProtoNameProviding { static let protoMessageName: String = _protobuf_package + ".InterceptConf" static let _protobuf_nameMap: SwiftProtobuf._NameMap = [ 1: .same(proto: "actions"), ] mutating func decodeMessage(decoder: inout D) throws { while let fieldNumber = try decoder.nextFieldNumber() { // The use of inline closures is to circumvent an issue where the compiler // allocates stack space for every case branch when no optimizations are // enabled. https://github.com/apple/swift-protobuf/issues/1034 switch fieldNumber { case 1: try { try decoder.decodeRepeatedStringField(value: &self.actions) }() default: break } } } func traverse(visitor: inout V) throws { if !self.actions.isEmpty { try visitor.visitRepeatedStringField(value: self.actions, fieldNumber: 1) } try unknownFields.traverse(visitor: &visitor) } static func ==(lhs: MitmproxyIpc_InterceptConf, rhs: MitmproxyIpc_InterceptConf) -> Bool { if lhs.actions != rhs.actions {return false} if lhs.unknownFields != rhs.unknownFields {return false} return true } } extension MitmproxyIpc_NewFlow: SwiftProtobuf.Message, SwiftProtobuf._MessageImplementationBase, SwiftProtobuf._ProtoNameProviding { static let protoMessageName: String = _protobuf_package + ".NewFlow" static let _protobuf_nameMap: SwiftProtobuf._NameMap = [ 1: .same(proto: "tcp"), 2: .same(proto: "udp"), ] mutating func decodeMessage(decoder: inout D) throws { while let fieldNumber = try decoder.nextFieldNumber() { // The use of inline closures is to circumvent an issue where the compiler // allocates stack space for every case branch when no optimizations are // enabled. https://github.com/apple/swift-protobuf/issues/1034 switch fieldNumber { case 1: try { var v: MitmproxyIpc_TcpFlow? var hadOneofValue = false if let current = self.message { hadOneofValue = true if case .tcp(let m) = current {v = m} } try decoder.decodeSingularMessageField(value: &v) if let v = v { if hadOneofValue {try decoder.handleConflictingOneOf()} self.message = .tcp(v) } }() case 2: try { var v: MitmproxyIpc_UdpFlow? var hadOneofValue = false if let current = self.message { hadOneofValue = true if case .udp(let m) = current {v = m} } try decoder.decodeSingularMessageField(value: &v) if let v = v { if hadOneofValue {try decoder.handleConflictingOneOf()} self.message = .udp(v) } }() default: break } } } func traverse(visitor: inout V) throws { // The use of inline closures is to circumvent an issue where the compiler // allocates stack space for every if/case branch local when no optimizations // are enabled. https://github.com/apple/swift-protobuf/issues/1034 and // https://github.com/apple/swift-protobuf/issues/1182 switch self.message { case .tcp?: try { guard case .tcp(let v)? = self.message else { preconditionFailure() } try visitor.visitSingularMessageField(value: v, fieldNumber: 1) }() case .udp?: try { guard case .udp(let v)? = self.message else { preconditionFailure() } try visitor.visitSingularMessageField(value: v, fieldNumber: 2) }() case nil: break } try unknownFields.traverse(visitor: &visitor) } static func ==(lhs: MitmproxyIpc_NewFlow, rhs: MitmproxyIpc_NewFlow) -> Bool { if lhs.message != rhs.message {return false} if lhs.unknownFields != rhs.unknownFields {return false} return true } } extension MitmproxyIpc_TcpFlow: SwiftProtobuf.Message, SwiftProtobuf._MessageImplementationBase, SwiftProtobuf._ProtoNameProviding { static let protoMessageName: String = _protobuf_package + ".TcpFlow" static let _protobuf_nameMap: SwiftProtobuf._NameMap = [ 1: .standard(proto: "remote_address"), 2: .standard(proto: "tunnel_info"), ] mutating func decodeMessage(decoder: inout D) throws { while let fieldNumber = try decoder.nextFieldNumber() { // The use of inline closures is to circumvent an issue where the compiler // allocates stack space for every case branch when no optimizations are // enabled. https://github.com/apple/swift-protobuf/issues/1034 switch fieldNumber { case 1: try { try decoder.decodeSingularMessageField(value: &self._remoteAddress) }() case 2: try { try decoder.decodeSingularMessageField(value: &self._tunnelInfo) }() default: break } } } func traverse(visitor: inout V) throws { // The use of inline closures is to circumvent an issue where the compiler // allocates stack space for every if/case branch local when no optimizations // are enabled. https://github.com/apple/swift-protobuf/issues/1034 and // https://github.com/apple/swift-protobuf/issues/1182 try { if let v = self._remoteAddress { try visitor.visitSingularMessageField(value: v, fieldNumber: 1) } }() try { if let v = self._tunnelInfo { try visitor.visitSingularMessageField(value: v, fieldNumber: 2) } }() try unknownFields.traverse(visitor: &visitor) } static func ==(lhs: MitmproxyIpc_TcpFlow, rhs: MitmproxyIpc_TcpFlow) -> Bool { if lhs._remoteAddress != rhs._remoteAddress {return false} if lhs._tunnelInfo != rhs._tunnelInfo {return false} if lhs.unknownFields != rhs.unknownFields {return false} return true } } extension MitmproxyIpc_UdpFlow: SwiftProtobuf.Message, SwiftProtobuf._MessageImplementationBase, SwiftProtobuf._ProtoNameProviding { static let protoMessageName: String = _protobuf_package + ".UdpFlow" static let _protobuf_nameMap: SwiftProtobuf._NameMap = [ 1: .standard(proto: "local_address"), 3: .standard(proto: "tunnel_info"), ] mutating func decodeMessage(decoder: inout D) throws { while let fieldNumber = try decoder.nextFieldNumber() { // The use of inline closures is to circumvent an issue where the compiler // allocates stack space for every case branch when no optimizations are // enabled. https://github.com/apple/swift-protobuf/issues/1034 switch fieldNumber { case 1: try { try decoder.decodeSingularMessageField(value: &self._localAddress) }() case 3: try { try decoder.decodeSingularMessageField(value: &self._tunnelInfo) }() default: break } } } func traverse(visitor: inout V) throws { // The use of inline closures is to circumvent an issue where the compiler // allocates stack space for every if/case branch local when no optimizations // are enabled. https://github.com/apple/swift-protobuf/issues/1034 and // https://github.com/apple/swift-protobuf/issues/1182 try { if let v = self._localAddress { try visitor.visitSingularMessageField(value: v, fieldNumber: 1) } }() try { if let v = self._tunnelInfo { try visitor.visitSingularMessageField(value: v, fieldNumber: 3) } }() try unknownFields.traverse(visitor: &visitor) } static func ==(lhs: MitmproxyIpc_UdpFlow, rhs: MitmproxyIpc_UdpFlow) -> Bool { if lhs._localAddress != rhs._localAddress {return false} if lhs._tunnelInfo != rhs._tunnelInfo {return false} if lhs.unknownFields != rhs.unknownFields {return false} return true } } extension MitmproxyIpc_UdpPacket: SwiftProtobuf.Message, SwiftProtobuf._MessageImplementationBase, SwiftProtobuf._ProtoNameProviding { static let protoMessageName: String = _protobuf_package + ".UdpPacket" static let _protobuf_nameMap: SwiftProtobuf._NameMap = [ 1: .same(proto: "data"), 2: .standard(proto: "remote_address"), ] mutating func decodeMessage(decoder: inout D) throws { while let fieldNumber = try decoder.nextFieldNumber() { // The use of inline closures is to circumvent an issue where the compiler // allocates stack space for every case branch when no optimizations are // enabled. https://github.com/apple/swift-protobuf/issues/1034 switch fieldNumber { case 1: try { try decoder.decodeSingularBytesField(value: &self.data) }() case 2: try { try decoder.decodeSingularMessageField(value: &self._remoteAddress) }() default: break } } } func traverse(visitor: inout V) throws { // The use of inline closures is to circumvent an issue where the compiler // allocates stack space for every if/case branch local when no optimizations // are enabled. https://github.com/apple/swift-protobuf/issues/1034 and // https://github.com/apple/swift-protobuf/issues/1182 if !self.data.isEmpty { try visitor.visitSingularBytesField(value: self.data, fieldNumber: 1) } try { if let v = self._remoteAddress { try visitor.visitSingularMessageField(value: v, fieldNumber: 2) } }() try unknownFields.traverse(visitor: &visitor) } static func ==(lhs: MitmproxyIpc_UdpPacket, rhs: MitmproxyIpc_UdpPacket) -> Bool { if lhs.data != rhs.data {return false} if lhs._remoteAddress != rhs._remoteAddress {return false} if lhs.unknownFields != rhs.unknownFields {return false} return true } } extension MitmproxyIpc_Address: SwiftProtobuf.Message, SwiftProtobuf._MessageImplementationBase, SwiftProtobuf._ProtoNameProviding { static let protoMessageName: String = _protobuf_package + ".Address" static let _protobuf_nameMap: SwiftProtobuf._NameMap = [ 1: .same(proto: "host"), 2: .same(proto: "port"), ] mutating func decodeMessage(decoder: inout D) throws { while let fieldNumber = try decoder.nextFieldNumber() { // The use of inline closures is to circumvent an issue where the compiler // allocates stack space for every case branch when no optimizations are // enabled. https://github.com/apple/swift-protobuf/issues/1034 switch fieldNumber { case 1: try { try decoder.decodeSingularStringField(value: &self.host) }() case 2: try { try decoder.decodeSingularUInt32Field(value: &self.port) }() default: break } } } func traverse(visitor: inout V) throws { if !self.host.isEmpty { try visitor.visitSingularStringField(value: self.host, fieldNumber: 1) } if self.port != 0 { try visitor.visitSingularUInt32Field(value: self.port, fieldNumber: 2) } try unknownFields.traverse(visitor: &visitor) } static func ==(lhs: MitmproxyIpc_Address, rhs: MitmproxyIpc_Address) -> Bool { if lhs.host != rhs.host {return false} if lhs.port != rhs.port {return false} if lhs.unknownFields != rhs.unknownFields {return false} return true } } mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/ipc/utils.swift000066400000000000000000000077361511036467100247020ustar00rootroot00000000000000import Foundation import Network import NetworkExtension import SwiftProtobuf extension UInt32 { var data: Data { var int = self return Data(bytes: &int, count: MemoryLayout.size) } } enum IpcError: Error { case incompleteRead case connectionCancelled } extension NWConnection { /// Async wrapper to establish a connection and wait for NWConnection.State.ready func establish() async throws { let orig_handler = self.stateUpdateHandler defer { self.stateUpdateHandler = orig_handler } try await withCheckedThrowingContinuation { continuation in self.stateUpdateHandler = { state in log.info("stateUpdate: \(String(describing: state), privacy: .public)") switch state { case .ready: continuation.resume() case .waiting(let err): continuation.resume(with: .failure(err)) case .failed(let err): continuation.resume(with: .failure(err)) case .cancelled: continuation.resume(with: .failure(IpcError.connectionCancelled)) default: break } } self.start(queue: DispatchQueue.global()) } } func send(ipc message: SwiftProtobuf.Message) async throws { let data = try message.serializedData() var to_send = Data(capacity: data.count + 4) to_send.append(UInt32(data.count).bigEndian.data) to_send.append(data) assert(to_send.count == data.count + 4) try await withCheckedThrowingContinuation { (continuation: CheckedContinuation) -> Void in self.send( content: to_send, completion: .contentProcessed({ error in if let err = error { continuation.resume(throwing: err) } else { continuation.resume() } })) } } func receive(ipc: T.Type) async throws -> T? { return try await withCheckedThrowingContinuation { (continuation: CheckedContinuation) -> Void in receive( minimumIncompleteLength: 4, maximumLength: 4, completion: { len_buf, _, _, _ in guard let len_buf = len_buf, len_buf.count == 4 else { if len_buf == nil { return continuation.resume(returning: nil) } else { return continuation.resume(throwing: IpcError.incompleteRead) } } let len = len_buf[...].reduce(Int(0)) { $0 << 8 + Int($1) } self.receive(minimumIncompleteLength: len, maximumLength: len) { data, _, _, _ in guard let data = data, data.count == len else { return continuation.resume(throwing: IpcError.incompleteRead) } do { let message = try T(contiguousBytes: data) continuation.resume(returning: message) } catch { continuation.resume(throwing: error) } } }) } } } extension MitmproxyIpc_Address { init(endpoint: NWHostEndpoint) { self.init() self.host = endpoint.hostname self.port = UInt32(endpoint.port)! } } extension NWHostEndpoint { convenience init(address: MitmproxyIpc_Address) { self.init(hostname: address.host, port: String(address.port)) } } mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/macos-redirector.xcodeproj/000077500000000000000000000000001511036467100271325ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/macos-redirector.xcodeproj/project.pbxproj000066400000000000000000000635101511036467100322130ustar00rootroot00000000000000// !$*UTF8*$! { archiveVersion = 1; classes = { }; objectVersion = 56; objects = { /* Begin PBXBuildFile section */ CE08B8BC2ABD10EB00251C1C /* FlowExtensions.swift in Sources */ = {isa = PBXBuildFile; fileRef = CE08B8BB2ABD10EB00251C1C /* FlowExtensions.swift */; }; CE08B8C02ABFB51900251C1C /* mitmproxy_ipc.pb.swift in Sources */ = {isa = PBXBuildFile; fileRef = CE08B8BF2ABFB51900251C1C /* mitmproxy_ipc.pb.swift */; }; CE3FDD7B2AAF1765007B7A3F /* ProcessInfoCache.swift in Sources */ = {isa = PBXBuildFile; fileRef = CE3FDD7A2AAF1765007B7A3F /* ProcessInfoCache.swift */; }; CE415DF32AB33C6A0038F901 /* InterceptConf.swift in Sources */ = {isa = PBXBuildFile; fileRef = CE415DF22AB33C6A0038F901 /* InterceptConf.swift */; }; CE7A86AF2A8CFB87009E0B82 /* Assets.xcassets in Resources */ = {isa = PBXBuildFile; fileRef = CE7A86AE2A8CFB87009E0B82 /* Assets.xcassets */; }; CE7A86C02A8CFBAD009E0B82 /* NetworkExtension.framework in Frameworks */ = {isa = PBXBuildFile; fileRef = CE7A86BF2A8CFBAD009E0B82 /* NetworkExtension.framework */; }; CE7A86C32A8CFBAD009E0B82 /* TransparentProxyProvider.swift in Sources */ = {isa = PBXBuildFile; fileRef = CE7A86C22A8CFBAD009E0B82 /* TransparentProxyProvider.swift */; }; CE7A86C52A8CFBAD009E0B82 /* main.swift in Sources */ = {isa = PBXBuildFile; fileRef = CE7A86C42A8CFBAD009E0B82 /* main.swift */; }; CE7A86CA2A8CFBAD009E0B82 /* org.mitmproxy.macos-redirector.network-extension.systemextension in Embed System Extensions */ = {isa = PBXBuildFile; fileRef = CE7A86BD2A8CFBAD009E0B82 /* org.mitmproxy.macos-redirector.network-extension.systemextension */; settings = {ATTRIBUTES = (RemoveHeadersOnCopy, ); }; }; CE870C102AAD2B4C00510CD1 /* libbsm.tbd in Frameworks */ = {isa = PBXBuildFile; fileRef = CE870C0B2AAD29B000510CD1 /* libbsm.tbd */; }; CE904BCE2A8E9B2600A7DF8A /* app.swift in Sources */ = {isa = PBXBuildFile; fileRef = CEC7D6762A8E2B2300E1A6E9 /* app.swift */; }; CE904BD22A8E9B6A00A7DF8A /* SwiftProtobuf in Frameworks */ = {isa = PBXBuildFile; productRef = CE904BD12A8E9B6A00A7DF8A /* SwiftProtobuf */; }; CE904BD42A8E9BD500A7DF8A /* SwiftProtobuf in Frameworks */ = {isa = PBXBuildFile; productRef = CE904BD32A8E9BD500A7DF8A /* SwiftProtobuf */; }; CE904BD92A8EA0C600A7DF8A /* utils.swift in Sources */ = {isa = PBXBuildFile; fileRef = CE904BD72A8EA0C600A7DF8A /* utils.swift */; }; /* End PBXBuildFile section */ /* Begin PBXContainerItemProxy section */ CE7A86C82A8CFBAD009E0B82 /* PBXContainerItemProxy */ = { isa = PBXContainerItemProxy; containerPortal = CE7A869F2A8CFB86009E0B82 /* Project object */; proxyType = 1; remoteGlobalIDString = CE7A86BC2A8CFBAD009E0B82; remoteInfo = "network-extension"; }; /* End PBXContainerItemProxy section */ /* Begin PBXCopyFilesBuildPhase section */ CE7A86CE2A8CFBAD009E0B82 /* Embed System Extensions */ = { isa = PBXCopyFilesBuildPhase; buildActionMask = 2147483647; dstPath = "$(SYSTEM_EXTENSIONS_FOLDER_PATH)"; dstSubfolderSpec = 16; files = ( CE7A86CA2A8CFBAD009E0B82 /* org.mitmproxy.macos-redirector.network-extension.systemextension in Embed System Extensions */, ); name = "Embed System Extensions"; runOnlyForDeploymentPostprocessing = 0; }; /* End PBXCopyFilesBuildPhase section */ /* Begin PBXFileReference section */ CE08B8BB2ABD10EB00251C1C /* FlowExtensions.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = FlowExtensions.swift; sourceTree = ""; }; CE08B8BF2ABFB51900251C1C /* mitmproxy_ipc.pb.swift */ = {isa = PBXFileReference; fileEncoding = 4; lastKnownFileType = sourcecode.swift; path = mitmproxy_ipc.pb.swift; sourceTree = ""; }; CE3FDD7A2AAF1765007B7A3F /* ProcessInfoCache.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = ProcessInfoCache.swift; sourceTree = ""; }; CE415DF22AB33C6A0038F901 /* InterceptConf.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = InterceptConf.swift; sourceTree = ""; }; CE7A86A72A8CFB86009E0B82 /* Mitmproxy Redirector.app */ = {isa = PBXFileReference; explicitFileType = wrapper.application; includeInIndex = 0; path = "Mitmproxy Redirector.app"; sourceTree = BUILT_PRODUCTS_DIR; }; CE7A86AE2A8CFB87009E0B82 /* Assets.xcassets */ = {isa = PBXFileReference; lastKnownFileType = folder.assetcatalog; path = Assets.xcassets; sourceTree = ""; }; CE7A86B32A8CFB87009E0B82 /* macos_redirector.entitlements */ = {isa = PBXFileReference; lastKnownFileType = text.plist.entitlements; path = macos_redirector.entitlements; sourceTree = ""; }; CE7A86BD2A8CFBAD009E0B82 /* org.mitmproxy.macos-redirector.network-extension.systemextension */ = {isa = PBXFileReference; explicitFileType = "wrapper.system-extension"; includeInIndex = 0; path = "org.mitmproxy.macos-redirector.network-extension.systemextension"; sourceTree = BUILT_PRODUCTS_DIR; }; CE7A86BF2A8CFBAD009E0B82 /* NetworkExtension.framework */ = {isa = PBXFileReference; lastKnownFileType = wrapper.framework; name = NetworkExtension.framework; path = System/Library/Frameworks/NetworkExtension.framework; sourceTree = SDKROOT; }; CE7A86C22A8CFBAD009E0B82 /* TransparentProxyProvider.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = TransparentProxyProvider.swift; sourceTree = ""; }; CE7A86C42A8CFBAD009E0B82 /* main.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = main.swift; sourceTree = ""; }; CE7A86C62A8CFBAD009E0B82 /* Info.plist */ = {isa = PBXFileReference; lastKnownFileType = text.plist.xml; path = Info.plist; sourceTree = ""; }; CE7A86C72A8CFBAD009E0B82 /* network_extension.entitlements */ = {isa = PBXFileReference; lastKnownFileType = text.plist.entitlements; path = network_extension.entitlements; sourceTree = ""; }; CE870C0B2AAD29B000510CD1 /* libbsm.tbd */ = {isa = PBXFileReference; lastKnownFileType = "sourcecode.text-based-dylib-definition"; name = libbsm.tbd; path = usr/lib/libbsm.tbd; sourceTree = SDKROOT; }; CE870C0C2AAD29BD00510CD1 /* libbsm.0.tbd */ = {isa = PBXFileReference; lastKnownFileType = "sourcecode.text-based-dylib-definition"; name = libbsm.0.tbd; path = usr/lib/libbsm.0.tbd; sourceTree = SDKROOT; }; CE870C0E2AAD2B3B00510CD1 /* libproc.tbd */ = {isa = PBXFileReference; lastKnownFileType = "sourcecode.text-based-dylib-definition"; name = libproc.tbd; path = usr/lib/libproc.tbd; sourceTree = SDKROOT; }; CE870C122AAD2D7F00510CD1 /* libproc-Bridging-Header.h */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.c.h; path = "libproc-Bridging-Header.h"; sourceTree = ""; }; CE904BD72A8EA0C600A7DF8A /* utils.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = utils.swift; sourceTree = ""; }; CEC7D6762A8E2B2300E1A6E9 /* app.swift */ = {isa = PBXFileReference; lastKnownFileType = sourcecode.swift; path = app.swift; sourceTree = ""; }; CEC7D6792A8E444600E1A6E9 /* README.md */ = {isa = PBXFileReference; lastKnownFileType = net.daringfireball.markdown; path = README.md; sourceTree = ""; }; /* End PBXFileReference section */ /* Begin PBXFrameworksBuildPhase section */ CE7A86A42A8CFB86009E0B82 /* Frameworks */ = { isa = PBXFrameworksBuildPhase; buildActionMask = 2147483647; files = ( CE904BD22A8E9B6A00A7DF8A /* SwiftProtobuf in Frameworks */, ); runOnlyForDeploymentPostprocessing = 0; }; CE7A86BA2A8CFBAD009E0B82 /* Frameworks */ = { isa = PBXFrameworksBuildPhase; buildActionMask = 2147483647; files = ( CE7A86C02A8CFBAD009E0B82 /* NetworkExtension.framework in Frameworks */, CE904BD42A8E9BD500A7DF8A /* SwiftProtobuf in Frameworks */, CE870C102AAD2B4C00510CD1 /* libbsm.tbd in Frameworks */, ); runOnlyForDeploymentPostprocessing = 0; }; /* End PBXFrameworksBuildPhase section */ /* Begin PBXGroup section */ CE7A869E2A8CFB86009E0B82 = { isa = PBXGroup; children = ( CE904BD62A8EA0B300A7DF8A /* ipc */, CEC7D6792A8E444600E1A6E9 /* README.md */, CE7A86A92A8CFB86009E0B82 /* macos-redirector */, CE7A86C12A8CFBAD009E0B82 /* network-extension */, CE7A86BE2A8CFBAD009E0B82 /* Frameworks */, CE7A86A82A8CFB86009E0B82 /* Products */, ); sourceTree = ""; }; CE7A86A82A8CFB86009E0B82 /* Products */ = { isa = PBXGroup; children = ( CE7A86A72A8CFB86009E0B82 /* Mitmproxy Redirector.app */, CE7A86BD2A8CFBAD009E0B82 /* org.mitmproxy.macos-redirector.network-extension.systemextension */, ); name = Products; sourceTree = ""; }; CE7A86A92A8CFB86009E0B82 /* macos-redirector */ = { isa = PBXGroup; children = ( CE7A86AE2A8CFB87009E0B82 /* Assets.xcassets */, CE7A86B32A8CFB87009E0B82 /* macos_redirector.entitlements */, CEC7D6762A8E2B2300E1A6E9 /* app.swift */, ); path = "macos-redirector"; sourceTree = ""; }; CE7A86BE2A8CFBAD009E0B82 /* Frameworks */ = { isa = PBXGroup; children = ( CE870C0E2AAD2B3B00510CD1 /* libproc.tbd */, CE870C0C2AAD29BD00510CD1 /* libbsm.0.tbd */, CE870C0B2AAD29B000510CD1 /* libbsm.tbd */, CE7A86BF2A8CFBAD009E0B82 /* NetworkExtension.framework */, ); name = Frameworks; sourceTree = ""; }; CE7A86C12A8CFBAD009E0B82 /* network-extension */ = { isa = PBXGroup; children = ( CE7A86C42A8CFBAD009E0B82 /* main.swift */, CE7A86C22A8CFBAD009E0B82 /* TransparentProxyProvider.swift */, CE3FDD7A2AAF1765007B7A3F /* ProcessInfoCache.swift */, CE415DF22AB33C6A0038F901 /* InterceptConf.swift */, CE870C122AAD2D7F00510CD1 /* libproc-Bridging-Header.h */, CE7A86C62A8CFBAD009E0B82 /* Info.plist */, CE7A86C72A8CFBAD009E0B82 /* network_extension.entitlements */, CE08B8BB2ABD10EB00251C1C /* FlowExtensions.swift */, ); path = "network-extension"; sourceTree = ""; }; CE904BD62A8EA0B300A7DF8A /* ipc */ = { isa = PBXGroup; children = ( CE08B8BF2ABFB51900251C1C /* mitmproxy_ipc.pb.swift */, CE904BD72A8EA0C600A7DF8A /* utils.swift */, ); path = ipc; sourceTree = ""; }; /* End PBXGroup section */ /* Begin PBXNativeTarget section */ CE7A86A62A8CFB86009E0B82 /* macos-redirector */ = { isa = PBXNativeTarget; buildConfigurationList = CE7A86B62A8CFB87009E0B82 /* Build configuration list for PBXNativeTarget "macos-redirector" */; buildPhases = ( CE7A86A32A8CFB86009E0B82 /* Sources */, CE7A86A42A8CFB86009E0B82 /* Frameworks */, CE7A86A52A8CFB86009E0B82 /* Resources */, CE7A86CE2A8CFBAD009E0B82 /* Embed System Extensions */, ); buildRules = ( ); dependencies = ( CE7A86C92A8CFBAD009E0B82 /* PBXTargetDependency */, ); name = "macos-redirector"; packageProductDependencies = ( CE904BD12A8E9B6A00A7DF8A /* SwiftProtobuf */, ); productName = "macos-redirector"; productReference = CE7A86A72A8CFB86009E0B82 /* Mitmproxy Redirector.app */; productType = "com.apple.product-type.application"; }; CE7A86BC2A8CFBAD009E0B82 /* network-extension */ = { isa = PBXNativeTarget; buildConfigurationList = CE7A86CB2A8CFBAD009E0B82 /* Build configuration list for PBXNativeTarget "network-extension" */; buildPhases = ( CE7A86B92A8CFBAD009E0B82 /* Sources */, CE7A86BA2A8CFBAD009E0B82 /* Frameworks */, CE7A86BB2A8CFBAD009E0B82 /* Resources */, ); buildRules = ( ); dependencies = ( ); name = "network-extension"; packageProductDependencies = ( CE904BD32A8E9BD500A7DF8A /* SwiftProtobuf */, ); productName = "network-extension"; productReference = CE7A86BD2A8CFBAD009E0B82 /* org.mitmproxy.macos-redirector.network-extension.systemextension */; productType = "com.apple.product-type.system-extension"; }; /* End PBXNativeTarget section */ /* Begin PBXProject section */ CE7A869F2A8CFB86009E0B82 /* Project object */ = { isa = PBXProject; attributes = { BuildIndependentTargetsInParallel = 1; LastSwiftUpdateCheck = 1430; LastUpgradeCheck = 1500; TargetAttributes = { CE7A86A62A8CFB86009E0B82 = { CreatedOnToolsVersion = 14.3.1; }; CE7A86BC2A8CFBAD009E0B82 = { CreatedOnToolsVersion = 14.3.1; }; }; }; buildConfigurationList = CE7A86A22A8CFB86009E0B82 /* Build configuration list for PBXProject "macos-redirector" */; compatibilityVersion = "Xcode 14.0"; developmentRegion = en; hasScannedForEncodings = 0; knownRegions = ( en, Base, ); mainGroup = CE7A869E2A8CFB86009E0B82; packageReferences = ( CE904BD02A8E9B6A00A7DF8A /* XCRemoteSwiftPackageReference "swift-protobuf" */, ); productRefGroup = CE7A86A82A8CFB86009E0B82 /* Products */; projectDirPath = ""; projectRoot = ""; targets = ( CE7A86A62A8CFB86009E0B82 /* macos-redirector */, CE7A86BC2A8CFBAD009E0B82 /* network-extension */, ); }; /* End PBXProject section */ /* Begin PBXResourcesBuildPhase section */ CE7A86A52A8CFB86009E0B82 /* Resources */ = { isa = PBXResourcesBuildPhase; buildActionMask = 2147483647; files = ( CE7A86AF2A8CFB87009E0B82 /* Assets.xcassets in Resources */, ); runOnlyForDeploymentPostprocessing = 0; }; CE7A86BB2A8CFBAD009E0B82 /* Resources */ = { isa = PBXResourcesBuildPhase; buildActionMask = 2147483647; files = ( ); runOnlyForDeploymentPostprocessing = 0; }; /* End PBXResourcesBuildPhase section */ /* Begin PBXSourcesBuildPhase section */ CE7A86A32A8CFB86009E0B82 /* Sources */ = { isa = PBXSourcesBuildPhase; buildActionMask = 2147483647; files = ( CE904BCE2A8E9B2600A7DF8A /* app.swift in Sources */, ); runOnlyForDeploymentPostprocessing = 0; }; CE7A86B92A8CFBAD009E0B82 /* Sources */ = { isa = PBXSourcesBuildPhase; buildActionMask = 2147483647; files = ( CE7A86C52A8CFBAD009E0B82 /* main.swift in Sources */, CE3FDD7B2AAF1765007B7A3F /* ProcessInfoCache.swift in Sources */, CE415DF32AB33C6A0038F901 /* InterceptConf.swift in Sources */, CE08B8BC2ABD10EB00251C1C /* FlowExtensions.swift in Sources */, CE08B8C02ABFB51900251C1C /* mitmproxy_ipc.pb.swift in Sources */, CE7A86C32A8CFBAD009E0B82 /* TransparentProxyProvider.swift in Sources */, CE904BD92A8EA0C600A7DF8A /* utils.swift in Sources */, ); runOnlyForDeploymentPostprocessing = 0; }; /* End PBXSourcesBuildPhase section */ /* Begin PBXTargetDependency section */ CE7A86C92A8CFBAD009E0B82 /* PBXTargetDependency */ = { isa = PBXTargetDependency; target = CE7A86BC2A8CFBAD009E0B82 /* network-extension */; targetProxy = CE7A86C82A8CFBAD009E0B82 /* PBXContainerItemProxy */; }; /* End PBXTargetDependency section */ /* Begin XCBuildConfiguration section */ CE7A86B42A8CFB87009E0B82 /* Debug */ = { isa = XCBuildConfiguration; buildSettings = { ALWAYS_SEARCH_USER_PATHS = NO; CLANG_ANALYZER_NONNULL = YES; CLANG_ANALYZER_NUMBER_OBJECT_CONVERSION = YES_AGGRESSIVE; CLANG_CXX_LANGUAGE_STANDARD = "gnu++20"; CLANG_ENABLE_MODULES = YES; CLANG_ENABLE_OBJC_ARC = YES; CLANG_ENABLE_OBJC_WEAK = YES; CLANG_WARN_BLOCK_CAPTURE_AUTORELEASING = YES; CLANG_WARN_BOOL_CONVERSION = YES; CLANG_WARN_COMMA = YES; CLANG_WARN_CONSTANT_CONVERSION = YES; CLANG_WARN_DEPRECATED_OBJC_IMPLEMENTATIONS = YES; CLANG_WARN_DIRECT_OBJC_ISA_USAGE = YES_ERROR; CLANG_WARN_DOCUMENTATION_COMMENTS = YES; CLANG_WARN_EMPTY_BODY = YES; CLANG_WARN_ENUM_CONVERSION = YES; CLANG_WARN_INFINITE_RECURSION = YES; CLANG_WARN_INT_CONVERSION = YES; CLANG_WARN_NON_LITERAL_NULL_CONVERSION = YES; CLANG_WARN_OBJC_IMPLICIT_RETAIN_SELF = YES; CLANG_WARN_OBJC_LITERAL_CONVERSION = YES; CLANG_WARN_OBJC_ROOT_CLASS = YES_ERROR; CLANG_WARN_QUOTED_INCLUDE_IN_FRAMEWORK_HEADER = YES; CLANG_WARN_RANGE_LOOP_ANALYSIS = YES; CLANG_WARN_STRICT_PROTOTYPES = YES; CLANG_WARN_SUSPICIOUS_MOVE = YES; CLANG_WARN_UNGUARDED_AVAILABILITY = YES_AGGRESSIVE; CLANG_WARN_UNREACHABLE_CODE = YES; CLANG_WARN__DUPLICATE_METHOD_MATCH = YES; COPY_PHASE_STRIP = NO; DEAD_CODE_STRIPPING = YES; DEBUG_INFORMATION_FORMAT = dwarf; ENABLE_STRICT_OBJC_MSGSEND = YES; ENABLE_TESTABILITY = YES; ENABLE_USER_SCRIPT_SANDBOXING = YES; GCC_C_LANGUAGE_STANDARD = gnu11; GCC_DYNAMIC_NO_PIC = NO; GCC_NO_COMMON_BLOCKS = YES; GCC_OPTIMIZATION_LEVEL = 0; GCC_PREPROCESSOR_DEFINITIONS = ( "DEBUG=1", "$(inherited)", ); GCC_WARN_64_TO_32_BIT_CONVERSION = YES; GCC_WARN_ABOUT_RETURN_TYPE = YES_ERROR; GCC_WARN_UNDECLARED_SELECTOR = YES; GCC_WARN_UNINITIALIZED_AUTOS = YES_AGGRESSIVE; GCC_WARN_UNUSED_FUNCTION = YES; GCC_WARN_UNUSED_VARIABLE = YES; MACOSX_DEPLOYMENT_TARGET = 12.0; MTL_ENABLE_DEBUG_INFO = INCLUDE_SOURCE; MTL_FAST_MATH = YES; ONLY_ACTIVE_ARCH = YES; SDKROOT = macosx; SWIFT_ACTIVE_COMPILATION_CONDITIONS = DEBUG; SWIFT_OPTIMIZATION_LEVEL = "-Onone"; }; name = Debug; }; CE7A86B52A8CFB87009E0B82 /* Release */ = { isa = XCBuildConfiguration; buildSettings = { ALWAYS_SEARCH_USER_PATHS = NO; CLANG_ANALYZER_NONNULL = YES; CLANG_ANALYZER_NUMBER_OBJECT_CONVERSION = YES_AGGRESSIVE; CLANG_CXX_LANGUAGE_STANDARD = "gnu++20"; CLANG_ENABLE_MODULES = YES; CLANG_ENABLE_OBJC_ARC = YES; CLANG_ENABLE_OBJC_WEAK = YES; CLANG_WARN_BLOCK_CAPTURE_AUTORELEASING = YES; CLANG_WARN_BOOL_CONVERSION = YES; CLANG_WARN_COMMA = YES; CLANG_WARN_CONSTANT_CONVERSION = YES; CLANG_WARN_DEPRECATED_OBJC_IMPLEMENTATIONS = YES; CLANG_WARN_DIRECT_OBJC_ISA_USAGE = YES_ERROR; CLANG_WARN_DOCUMENTATION_COMMENTS = YES; CLANG_WARN_EMPTY_BODY = YES; CLANG_WARN_ENUM_CONVERSION = YES; CLANG_WARN_INFINITE_RECURSION = YES; CLANG_WARN_INT_CONVERSION = YES; CLANG_WARN_NON_LITERAL_NULL_CONVERSION = YES; CLANG_WARN_OBJC_IMPLICIT_RETAIN_SELF = YES; CLANG_WARN_OBJC_LITERAL_CONVERSION = YES; CLANG_WARN_OBJC_ROOT_CLASS = YES_ERROR; CLANG_WARN_QUOTED_INCLUDE_IN_FRAMEWORK_HEADER = YES; CLANG_WARN_RANGE_LOOP_ANALYSIS = YES; CLANG_WARN_STRICT_PROTOTYPES = YES; CLANG_WARN_SUSPICIOUS_MOVE = YES; CLANG_WARN_UNGUARDED_AVAILABILITY = YES_AGGRESSIVE; CLANG_WARN_UNREACHABLE_CODE = YES; CLANG_WARN__DUPLICATE_METHOD_MATCH = YES; COPY_PHASE_STRIP = NO; DEAD_CODE_STRIPPING = YES; DEBUG_INFORMATION_FORMAT = "dwarf-with-dsym"; ENABLE_NS_ASSERTIONS = NO; ENABLE_STRICT_OBJC_MSGSEND = YES; ENABLE_USER_SCRIPT_SANDBOXING = YES; GCC_C_LANGUAGE_STANDARD = gnu11; GCC_NO_COMMON_BLOCKS = YES; GCC_WARN_64_TO_32_BIT_CONVERSION = YES; GCC_WARN_ABOUT_RETURN_TYPE = YES_ERROR; GCC_WARN_UNDECLARED_SELECTOR = YES; GCC_WARN_UNINITIALIZED_AUTOS = YES_AGGRESSIVE; GCC_WARN_UNUSED_FUNCTION = YES; GCC_WARN_UNUSED_VARIABLE = YES; MACOSX_DEPLOYMENT_TARGET = 12.0; MTL_ENABLE_DEBUG_INFO = NO; MTL_FAST_MATH = YES; SDKROOT = macosx; SWIFT_COMPILATION_MODE = wholemodule; SWIFT_OPTIMIZATION_LEVEL = "-O"; }; name = Release; }; CE7A86B72A8CFB87009E0B82 /* Debug */ = { isa = XCBuildConfiguration; buildSettings = { ALWAYS_EMBED_SWIFT_STANDARD_LIBRARIES = YES; ASSETCATALOG_COMPILER_APPICON_NAME = AppIcon; ASSETCATALOG_COMPILER_GLOBAL_ACCENT_COLOR_NAME = ""; CODE_SIGN_ENTITLEMENTS = "macos-redirector/macos_redirector.entitlements"; "CODE_SIGN_IDENTITY[sdk=macosx*]" = "Developer ID Application"; CODE_SIGN_STYLE = Manual; COMBINE_HIDPI_IMAGES = YES; CURRENT_PROJECT_VERSION = 1; DEAD_CODE_STRIPPING = YES; DEVELOPMENT_ASSET_PATHS = ""; DEVELOPMENT_TEAM = ""; "DEVELOPMENT_TEAM[sdk=macosx*]" = S8XHQB96PW; ENABLE_HARDENED_RUNTIME = YES; ENABLE_PREVIEWS = YES; GENERATE_INFOPLIST_FILE = YES; INFOPLIST_KEY_CFBundleDisplayName = "Mitmproxy Redirector"; INFOPLIST_KEY_LSUIElement = YES; INFOPLIST_KEY_NSHumanReadableCopyright = ""; LD_RUNPATH_SEARCH_PATHS = ( "$(inherited)", "@executable_path/../Frameworks", ); MARKETING_VERSION = 2.0; PRODUCT_BUNDLE_IDENTIFIER = "org.mitmproxy.macos-redirector"; PRODUCT_NAME = "Mitmproxy Redirector"; PROVISIONING_PROFILE_SPECIFIER = ""; "PROVISIONING_PROFILE_SPECIFIER[sdk=macosx*]" = "Mitmproxy Redirector"; SWIFT_EMIT_LOC_STRINGS = YES; SWIFT_VERSION = 5.0; }; name = Debug; }; CE7A86B82A8CFB87009E0B82 /* Release */ = { isa = XCBuildConfiguration; buildSettings = { ALWAYS_EMBED_SWIFT_STANDARD_LIBRARIES = YES; ASSETCATALOG_COMPILER_APPICON_NAME = AppIcon; ASSETCATALOG_COMPILER_GLOBAL_ACCENT_COLOR_NAME = ""; CODE_SIGN_ENTITLEMENTS = "macos-redirector/macos_redirector.entitlements"; "CODE_SIGN_IDENTITY[sdk=macosx*]" = "Developer ID Application"; CODE_SIGN_STYLE = Manual; COMBINE_HIDPI_IMAGES = YES; CURRENT_PROJECT_VERSION = 1; DEAD_CODE_STRIPPING = YES; DEVELOPMENT_ASSET_PATHS = ""; DEVELOPMENT_TEAM = ""; "DEVELOPMENT_TEAM[sdk=macosx*]" = S8XHQB96PW; ENABLE_HARDENED_RUNTIME = YES; ENABLE_PREVIEWS = YES; GENERATE_INFOPLIST_FILE = YES; INFOPLIST_KEY_CFBundleDisplayName = "Mitmproxy Redirector"; INFOPLIST_KEY_LSUIElement = YES; INFOPLIST_KEY_NSHumanReadableCopyright = ""; LD_RUNPATH_SEARCH_PATHS = ( "$(inherited)", "@executable_path/../Frameworks", ); MARKETING_VERSION = 2.0; PRODUCT_BUNDLE_IDENTIFIER = "org.mitmproxy.macos-redirector"; PRODUCT_NAME = "Mitmproxy Redirector"; PROVISIONING_PROFILE_SPECIFIER = ""; "PROVISIONING_PROFILE_SPECIFIER[sdk=macosx*]" = "Mitmproxy Redirector"; SWIFT_EMIT_LOC_STRINGS = YES; SWIFT_VERSION = 5.0; }; name = Release; }; CE7A86CC2A8CFBAD009E0B82 /* Debug */ = { isa = XCBuildConfiguration; buildSettings = { CODE_SIGN_ENTITLEMENTS = "network-extension/network_extension.entitlements"; "CODE_SIGN_IDENTITY[sdk=macosx*]" = "Developer ID Application"; CODE_SIGN_STYLE = Manual; CURRENT_PROJECT_VERSION = 1; DEAD_CODE_STRIPPING = YES; DEVELOPMENT_TEAM = ""; "DEVELOPMENT_TEAM[sdk=macosx*]" = S8XHQB96PW; ENABLE_HARDENED_RUNTIME = YES; GENERATE_INFOPLIST_FILE = YES; INFOPLIST_FILE = "network-extension/Info.plist"; INFOPLIST_KEY_CFBundleDisplayName = "network-extension"; INFOPLIST_KEY_NSHumanReadableCopyright = ""; LD_RUNPATH_SEARCH_PATHS = ( "$(inherited)", "@executable_path/../Frameworks", "@executable_path/../../../../Frameworks", ); MARKETING_VERSION = 2.0; PRODUCT_BUNDLE_IDENTIFIER = "org.mitmproxy.macos-redirector.network-extension"; PRODUCT_NAME = "$(inherited)"; PROVISIONING_PROFILE_SPECIFIER = ""; "PROVISIONING_PROFILE_SPECIFIER[sdk=macosx*]" = "Mitmproxy Redirector Network Extension"; SKIP_INSTALL = YES; SWIFT_EMIT_LOC_STRINGS = YES; SWIFT_OBJC_BRIDGING_HEADER = "network-extension/libproc-Bridging-Header.h"; SWIFT_VERSION = 5.0; }; name = Debug; }; CE7A86CD2A8CFBAD009E0B82 /* Release */ = { isa = XCBuildConfiguration; buildSettings = { CODE_SIGN_ENTITLEMENTS = "network-extension/network_extension.entitlements"; "CODE_SIGN_IDENTITY[sdk=macosx*]" = "Developer ID Application"; CODE_SIGN_STYLE = Manual; CURRENT_PROJECT_VERSION = 1; DEAD_CODE_STRIPPING = YES; DEVELOPMENT_TEAM = ""; "DEVELOPMENT_TEAM[sdk=macosx*]" = S8XHQB96PW; ENABLE_HARDENED_RUNTIME = YES; GENERATE_INFOPLIST_FILE = YES; INFOPLIST_FILE = "network-extension/Info.plist"; INFOPLIST_KEY_CFBundleDisplayName = "network-extension"; INFOPLIST_KEY_NSHumanReadableCopyright = ""; LD_RUNPATH_SEARCH_PATHS = ( "$(inherited)", "@executable_path/../Frameworks", "@executable_path/../../../../Frameworks", ); MARKETING_VERSION = 2.0; PRODUCT_BUNDLE_IDENTIFIER = "org.mitmproxy.macos-redirector.network-extension"; PRODUCT_NAME = "$(inherited)"; PROVISIONING_PROFILE_SPECIFIER = ""; "PROVISIONING_PROFILE_SPECIFIER[sdk=macosx*]" = "Mitmproxy Redirector Network Extension"; SKIP_INSTALL = YES; SWIFT_EMIT_LOC_STRINGS = YES; SWIFT_OBJC_BRIDGING_HEADER = "network-extension/libproc-Bridging-Header.h"; SWIFT_VERSION = 5.0; }; name = Release; }; /* End XCBuildConfiguration section */ /* Begin XCConfigurationList section */ CE7A86A22A8CFB86009E0B82 /* Build configuration list for PBXProject "macos-redirector" */ = { isa = XCConfigurationList; buildConfigurations = ( CE7A86B42A8CFB87009E0B82 /* Debug */, CE7A86B52A8CFB87009E0B82 /* Release */, ); defaultConfigurationIsVisible = 0; defaultConfigurationName = Release; }; CE7A86B62A8CFB87009E0B82 /* Build configuration list for PBXNativeTarget "macos-redirector" */ = { isa = XCConfigurationList; buildConfigurations = ( CE7A86B72A8CFB87009E0B82 /* Debug */, CE7A86B82A8CFB87009E0B82 /* Release */, ); defaultConfigurationIsVisible = 0; defaultConfigurationName = Release; }; CE7A86CB2A8CFBAD009E0B82 /* Build configuration list for PBXNativeTarget "network-extension" */ = { isa = XCConfigurationList; buildConfigurations = ( CE7A86CC2A8CFBAD009E0B82 /* Debug */, CE7A86CD2A8CFBAD009E0B82 /* Release */, ); defaultConfigurationIsVisible = 0; defaultConfigurationName = Release; }; /* End XCConfigurationList section */ /* Begin XCRemoteSwiftPackageReference section */ CE904BD02A8E9B6A00A7DF8A /* XCRemoteSwiftPackageReference "swift-protobuf" */ = { isa = XCRemoteSwiftPackageReference; repositoryURL = "https://github.com/apple/swift-protobuf.git"; requirement = { kind = upToNextMajorVersion; minimumVersion = 1.0.0; }; }; /* End XCRemoteSwiftPackageReference section */ /* Begin XCSwiftPackageProductDependency section */ CE904BD12A8E9B6A00A7DF8A /* SwiftProtobuf */ = { isa = XCSwiftPackageProductDependency; package = CE904BD02A8E9B6A00A7DF8A /* XCRemoteSwiftPackageReference "swift-protobuf" */; productName = SwiftProtobuf; }; CE904BD32A8E9BD500A7DF8A /* SwiftProtobuf */ = { isa = XCSwiftPackageProductDependency; package = CE904BD02A8E9B6A00A7DF8A /* XCRemoteSwiftPackageReference "swift-protobuf" */; productName = SwiftProtobuf; }; /* End XCSwiftPackageProductDependency section */ }; rootObject = CE7A869F2A8CFB86009E0B82 /* Project object */; } mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/macos-redirector.xcodeproj/project.xcworkspace/000077500000000000000000000000001511036467100331305ustar00rootroot00000000000000contents.xcworkspacedata000066400000000000000000000002071511036467100400120ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/macos-redirector.xcodeproj/project.xcworkspace xcshareddata/000077500000000000000000000000001511036467100355045ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/macos-redirector.xcodeproj/project.xcworkspaceIDEWorkspaceChecks.plist000066400000000000000000000003561511036467100421660ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/macos-redirector.xcodeproj/project.xcworkspace/xcshareddata IDEDidComputeMac32BitWarning swiftpm/000077500000000000000000000000001511036467100371755ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/macos-redirector.xcodeproj/project.xcworkspace/xcshareddataPackage.resolved000066400000000000000000000004671511036467100423040ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/macos-redirector.xcodeproj/project.xcworkspace/xcshareddata/swiftpm{ "pins" : [ { "identity" : "swift-protobuf", "kind" : "remoteSourceControl", "location" : "https://github.com/apple/swift-protobuf.git", "state" : { "revision" : "ce20dc083ee485524b802669890291c0d8090170", "version" : "1.22.1" } } ], "version" : 2 } mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/macos-redirector.xcodeproj/xcshareddata/000077500000000000000000000000001511036467100315655ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/macos-redirector.xcodeproj/xcshareddata/xcschemes/000077500000000000000000000000001511036467100335475ustar00rootroot00000000000000macos-redirector.xcscheme000066400000000000000000000076341511036467100404650ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/macos-redirector.xcodeproj/xcshareddata/xcschemes mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/macos-redirector/000077500000000000000000000000001511036467100251365ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/macos-redirector/Assets.xcassets/000077500000000000000000000000001511036467100302345ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/macos-redirector/Assets.xcassets/AppIcon.appiconset/000077500000000000000000000000001511036467100337315ustar00rootroot00000000000000Contents.json000066400000000000000000000024511511036467100363440ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/macos-redirector/Assets.xcassets/AppIcon.appiconset{ "images" : [ { "filename" : "logo-circle-16.png", "idiom" : "mac", "scale" : "1x", "size" : "16x16" }, { "filename" : "logo-circle-32.png", "idiom" : "mac", "scale" : "2x", "size" : "16x16" }, { "filename" : "logo-circle-32.png", "idiom" : "mac", "scale" : "1x", "size" : "32x32" }, { "filename" : "logo-circle-64.png", "idiom" : "mac", "scale" : "2x", "size" : "32x32" }, { "filename" : "logo-circle-128.png", "idiom" : "mac", "scale" : "1x", "size" : "128x128" }, { "filename" : "logo-circle-256.png", "idiom" : "mac", "scale" : "2x", "size" : "128x128" }, { "filename" : "logo-circle-256.png", "idiom" : "mac", "scale" : "1x", "size" : "256x256" }, { "filename" : "logo-circle-512.png", "idiom" : "mac", "scale" : "2x", "size" : "256x256" }, { "filename" : "logo-circle-512.png", "idiom" : "mac", "scale" : "1x", "size" : "512x512" }, { "filename" : "logo-circle-1024.png", "idiom" : "mac", "scale" : "2x", "size" : "512x512" } ], "info" : { "author" : "xcode", "version" : 1 } } logo-circle-1024.png000066400000000000000000011357621511036467100371620ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/macos-redirector/Assets.xcassets/AppIcon.appiconsetPNG  IHDR/ cHRMz&u0`:pQ<bKGDC pHYsVtIME *wIDATxw|SUIR:Sl,_eR٢D"CQAJeʦBt6sĆ|}&ɽc""""""gFVy_FJԮl}6Eu㩢oMu}]vlqy:U$+?#XW~llIYOӲr;MYyE#9^~#dǺ~s?NT/2²ьt|Gy?_Dmedufk[jhJ9Yh뢉&MM< ~gȏoɯ_v( """"""ʎMbM5D]  rHm89#ClQ V4\ѻ߉FGDEK_d9""""""8(w'GDTz~.?% )O{)=TĦWr x[y5kf"j&F31eFE# geOO-ADDDDDD9DDDDDDrpuQ9uyD%rRE} hQOybE8[e3u&˙ ۉF%>K Dș;ԓ=!~HohlM9cAPH"""""B#vQ{EƉ'E h"j#Sی3%)h$HDǣn K$L x9ӈBL """""WrBrmEeMlg-mE}^D]Fj/kgHDtTH\ J "2DoȁNDo^/4=)_~ lr<(.*L'#Zhâ ~/yeRQf_(8icsMT]IMQlK_"#H.=pkвW"EoʥPQ(%*/&PZ3D )v^}k?#"|$W'n(zUuTΧ1+D^;"""""g%m HdrUʋV -+W{$W}|?EDbwr/S􊜢Dozʙ\R׈;""""")OʖWh/ZE&o"%&j7O(M q>2^K\ɮ% 7Lq[Eܬĉ8^0)MD+}$ZqhD{ZQ3 Lq D#fʥf˿O{^+hX`*Ǚq=#:9žGhD+$V!ZA(4) '"\(W8w-yi'DɿQE' qQ7#ZhݝCD6-UATéybM3FB KD/U(DDDDDwfhJEw&OW*ZbnI+""""""""zY%<_k1VezjY'"""(5O{ EݼL0u:4EIOVSTl"""""ʗ, EEC/}B}D(w""")+m)<2\Y gsWqDOlrWtO7EoY6|("""A=oEk$7ъE,_=[,%{Ltc9?EZ6 (""")+} ;D{om|XcD?ыLIrS#E7v aDDDDGpQޖ͉~5v h%.yŸ(f\"艭qYؿ:""""S8(oEƋ' EzZ s/EO/P[E f˦[ ѓqQfᄿNЫ*_ڿna(fGE,i>ϥr """\6\%7H9o;6lo|/9†,QFDDDDYG6WGD_u """"|#[EϾ"{5M}E9݌0P+k$"""*(8ȪE+7UIT*Em#%"""""En,gXB4XHha{.@DDDpѳ́,Ggz}N,Zdmf(yJt=#@DDDdƥ<2J,7kDDDDDD)JPm{D7? """x@ds¿xKї^DwmDDDDDd=~A΀vڏE7E*DDDD9DDDDO5>~MU2=/}m![ `u9Szy]+sDk  """zNVͶDW}K]D-ij?K * K&$zbh˙"""*߬{(Z[I?\#,O8:6OG[ZtJUD[/QDDDTX8^W\E;}9PEDDDDDDO$ cEĊ.+hv """8; S;]myYtBїڋ9EDDDDDDϘz9c?oݽN4ыDDDXߥh+gAm[_6}Z\XSџF 4V`'FDDD_@6uvHMAD[ɩ]-'='>4Af8ȦY=-&""”.ѢV./B?Q%zb¢:Fn7P"""܇(ȚehWEhf1폈 џn  r s%.qʌqr 9%Ե9𑈈`3n+KhEMwZ?w RE[5lm7Syڌ홈( vf7Sß:Yg ""E0}U&>o((4l?~BDDDDDD/Yh.g;r)]EZQDDDSn(ca/l?HbweWd"""Yp &PoKԧS%u & HEtGG|}OQv̏K .MqEՉm?uf @DDd<1@DDd=βɏ\OEul{?ѳfC&-;E;1N`aC"""z8ű5<~ ѾDGoHROkψ.b@""ONg3AHpP`pfKus7ѣr@;'lDDD pѳNqg|"Cƈc:C-r7 .m]y\t<.r|C '""ˆuUrEN&.ko'BDDDOZ`ff@EE455'O͵ د_e i?~&`7n0w/_/_baî`nnh{i{i{Z?+ۯ===ms怮HHHqtFgtt!]iii y.Pi4I$}`aa}>z~~~`7G _njnjǀ~2 M(Q.dxexex mȨQ/2eFK =8=8=H??I%` 07MoLCMCMCZe?LDDDJ7_FYK4i?""OBe!QmE=u/o:]"""zv**>>>6IM].Ltup[m}ۧHב#gggm >}n]tpC/\pp;vr2 jWծ* 蠃.Rl۞=x].Y RuT@w@w@wFLLLi_Ӿh>|@ @ k#&}L uw@ǁ 夗^&VM $M0H*T:4?:~th ..Hܙ3q'#Gb Db@ۉƉR 8880MF?}爈 3!̲=̶7?DDD9DDD9gaj݇~hf[ODDG6(p+++؎g; %Jz-Z x{{< yz |t>:e^<2<2<2Ͼ}=:^8\˹s-adɀ '9s:~-TSkE3i' %%%i.]6mLyyy@lֱ7o#GNx4 j@\q=n1bbvbJǔ) ~m@z&M72nF`F<' UoHtYuf[2""YxY0ѾE+mЂ(7zF'm6m ;bwc?~ lll-[ (T$H={_S@k[oOOO(P8p|xi2e+N88 Nq@z>Q_Dy)S.R6lJ$Mx8̇3|px[#<h Fo>>>F> $K8H?~& 6(mP ZhӫS "Oa(ѯAffRDDDY! ""pPѾ?^`Zv!"J 4L05S]gv̱c3S g9r_@U+^!C~bk-(Zh7ppy#_s888kӈ4XXXH+28ep` yne˄ /<A{;s.b ~d@jR#)GR⮸DDd(]0FE1N6O(7""o4щ D{Luh툈xpiܥ9PxW]wzZhhVYf@7JQ [o>S}Fxqm:&x |3fM ye@ő{u>6|,psagΆRRR4zH;7kkkXFDDyKYqY7pf""*8 2Dٵ D_$&BzYQFyafYh&Ƴg(=s"E/_~ 5W狟BBB?wNNNχS~4^zz@')|'''w]u{;7߀[nu ƍ7n ~5+,Y|3TTT)g "+9"RtQ=хͶWADDT D\M@Qy?=N~@*xxzxzxEmPP^zU\WqP޿yTRMJ5M/6t /\;whhkkDd?`mm M]93jثaaaa[-[BWm\6{a3 fÂ@Jߔ)}pQ^fafq-F3(D(hA$]Kt ˀn﻽z̀\7=\?@dʑfI͒ >-""& inwDgm}9!"A6+pFaҟ-l` ۄMOr> (Slzͪ7UFeڗi_=PjO=^:xu?`36c<Qcee}QG@MM ppp\w~N\8\tp;ӀxpHm8q  &f0~&gEEf:ɦX=K@DDz^^):ah՗Ͷ4v 58q*ս{UjVYf5_.2_ƿO7n9s!""OS)S*6pop[p 'N8=SNq ꕨW^q8c Y}ˢs+.-$h$ "@MeڈTN.Ͷ0bm~pm'Pߕ(^&L8PsRI5'bjԊʮ( ’ K.\"]"]"j!"g n\wu}@WWpٺg޽ww:iii~DD$S)EW eӭ "ƬJ*D?Kԩl}eC];Z]K:Ygn+ ꏀzͪ7 ںj몭 /}.lWۮ}""FZri{+ﭼ1ƨS[Nm98SL3}Ba=z:$uH(KRk? "C`D~uXte[!fsf""S8u 7U}OH9l{^OD6mn(\pr{;@e]e]eW/k.^]6-lZشx0#-uBDDD1[ؚO0ݦ? nz~f'\\ppͭon}$LH0Pf(3~DDEꇢv,z(r!"I߈~$oLS;ҟ(@1W~^y@RuJ)4X`u@#~%Jx nnOx&`kS(@2,,, 555[sN:1 |-pӳz'N `/bwNGDDYpL%O?ݲO԰l{ @DDQn1;TOt1qEOlaj7""znr~ˮ]/%WPH" >jQw (NwJx[c1?aΟw;{챳^* DEEO9eEE5h:,"""zxr+mv"M̶Ku "wrxEa®]N/;hخa&o2Z׵+P=V=:p۩nNڞ=i i{흶@}Cu@:@`PO=~탢3@e&/3۞KUYъ%:Sf#" ~]9]9]9.6P˻w-oɧM>m)P+W~sCFhzѶ5:I0(K9>>@HTHTHݾvFuhp[ 101010v2uDDy,w_8Xb{.!""oxb% k5ho'eu~DDy!CEkYhݒvKVK[-mR1bg 9稟!CN>;١πC#.F\OƟ?iMDXX<.0+EW,,IDDt8 |0@)_lj҈/Q7}}TөfVYmf-+ԲP`僕ΉΉΉ~DDDD܌s8W\sC: ؗ/m_p׹^z~DD.cqaE㪛moc""""7,QVs O.$>DTe7uݧOwvZi@7[MM6ڴ*4(i*UY S6QQQEsw=س}=ہ ".DI%{ŽrKu1VݰD#d5fYXj(k<$HDDOJU0dDOU.sQ~n*Uj̪1,ݶvm:<[+o N'C;PU%"""ʫL0@MVE58L3 ]wUU8`K/M4H:8uQ.ig~$m}$jRIQ/у 8rlx7 Fm+(dSONT:Qƿc:vjW_x~;C=tߔ hm}pA;2gu:@@DbYX3ѯ &<2۞KQ8ba-&8#"ôB cV/}(ۡlk[m0ø{ﭿ(ҽH"ݟu8?Qֲ)@qR' |I%@oo/F7n@Y,Qdu80l=D]vf$"(3uo%YYїj;p"?rxe^߽{M]v]u)2eL///4:MVW ԁDDDD`-l: Iߧ\OvܵsN`w۱co[!M\):)F{f9mODDbuzC/UmDwf\~r'ͪ7:uԥSKG.@ՆUVm8$8$8$dlHsJ   @Ȱa!Àmnwv~3Jҕ+I@ó63DG,fC~VNtYy3.!" &I ׋'^(#"Ų_{T{T{(uRGkڮiڻk﮽[ 8@=n_8Ȃ# ~x; 90uID%/}t!"ͮ-"Lk)n:٠QvW l7>3W\^qyZk +TP!""""Zzg&'~ԶSNW_h(KuQnKL3\ 2qF""+8(oS2XѯE;+" @iͧ5:INZUmUUU]"vYl^!^1EDDDDaZ\&l&;,vy \8vcWmIےelQ'OCѢ!4Ng=@D72d'tX#hfdmT6~6~6~@sK;/xѫ^}MX7p{3mhjDDDD'fύ mxц^kzc"F4h~9 fa;GD?'RDDqQޢ^/_D+l; /l8޶m{껀>}u(ף\@SESES%ӆ@;.(0UGGr3&䚒kJ6;mvz?@iW[IQ^X$a'Dtḷ\"( " jc* w0{ODSSqi(Qrd¾ .:UTS5ؼbbŸ@XrO776W\qsE`:u~w }{Y3^/7x. {,,MJDDDD%^t_~.`9P,U05ҳgKW6^@}W]j{'Nد:@P@DDDDD@ȟ" ?Xb͊5@kJz+f3=9_3ٵGaͶS'2r "],`06c̶3NDfJD*t֥[nS_T+~u,͚DDDDD Mp!pxgG.|$oʾ)1{cb@TP͆&~;ѽMͶM "*x(wP'xv5En+Zmv^:LFm~Y˲_\+ׁ[zꕪWLD?uys8sRCL&o7`ll &[x op؟E\T.JRP+ƀ<`K6/Mu6M&DgЬ׬׬l>MMM#"ʇz4hQ=+뿾666(QD,L`DC̆)J.`\.L "*r "kDp-a~ſDDd͟6W^;7oJ޷zǔ)ؔ)gS.B";@zՁ%3J2e 2*3&gL&M $f$f$f@ԛ7TTT7 ՘jL5@jljlj, M2ȸq5*`ddFFF7 077 CUCUCUưưP(k5 ,=a(+ `k5JMMM444Y hii6]MlWخ]hjjP].dɾ0aPpqq:u 8tppwwBBB.]\۹\ r8::vC tuuvvv5ױ9is椵^ZZZ ǐC~V_5~x`㬍6v ەņ@TP(fʈ~JZL "Ŀ ёE' -bDDO  k,^w*֫rZdc1$k5 SrN@!ِlǝ;DO=#=%zJ c^b?>>cccoݝ;ww{}eח]_ r/~+_ _-|U' O-pⵊ*G83m% H4OtNOwFS_"'^,T ѩkDi j(燐e}e”FFF@]u~/{@ח%OqY"z2f͘ $J8p 9 QGD?~ D6lxaۇmp &!&!&;$v,Yl3 nRܤI@bZbZbgp p^6lz5?k~۵۵###Aǃ{{{{===p/^ҽ$\s߷?PnE)[,w׻7tn:KWVh߼Y'~ZjՁW_~'+L/v!(Ku1]Pt\(QA÷|DDVQrWE_3h*;&"z - 0dyx@y՛5!o Zkig(QY' ))$N<NNNbFƌ D܍q/^,p̽2w7|w3G1_|5>}t{ OR>$`ii ʠ=Q9hsFkр]vw 7}pm-Zb+ZUe>!kXװ5k\__.^ (]JLQKDyzDlDG&zVs=#q>q>qDOdee]ǻw;wtkp)Rp tjЩ~u za@qc14ݸ/Q/Oo_>} TlPɦM%RPJA@i~@^E{8q8}%ۗqs"+ o.ᲇKC.p p+\2(P! !]zJ.'JE8Q^ŷJDDlSE'Z(!Ni<5Ok\N:|oGߎ3ȉr2}eJ w|u-jϫ=.vK']typs%7 #F.Fߍ O>)/lٮb<EN9QPXcUZUiUPޫWy/ +Wد0]_YkկUV]%\K(O㩉D*.:hʗ~i~DDy ;f'?~StjsQ~5tv974;Pd@ENv@J|U,D/Sޥ/I_H1DŽۗn_} ? \@hвeHHHG 淘b~ s s s䉈2'9LsxyyvUlPxUNU9UP!Brd|-ʷ. qRкiݴn9ٜ$@}Q]5\$^I,--uon߻}/q@Q^^/O#[eq"!DD!a"Nq?VtQJ~f#[큪җJ_*} /_/_p`̔2SLb0S15< Md5DC!A b?78| 8z+:8tp` 㨏>RƦMkgAD< = 6l* rO̊3+j|PA@{Unanana9x\|=F顇.`jj _ |X(bQq=c/^̴u@:rtY{E67T+fq @D5 / /YyuM*9Ґy:#(}m!Cv-~o{VZ $7On<~,/#\Gθy[%:Zsav@Ddr<9vydv Y;k?R""{@:)))paVh٢f!vCd(#zz9 | 33vffGDNvjf۩3p5x|AD$X)Z'omiZVD޶cv(Q@`DmF:u ظظd~+Ĉr.3bļFɷO?=8Zhŀ3 4<f㛍K|P^V^V^$")~b'G:uJ+ZZk)а]v 5jDՈJ\,qE999 ;ODYmm-G?X^}zՀU٪lʹnV|#%E-z`v@DQAgiDT  _kz꽫F v.]ʻ4Q+"SRRo=8쎳;9As=O{B. ]Ď;0N2N2N$"["*,mVZxIDK:t. L204bЈA#g%ʹJ<*\wz(pGZzuq,X1=^DDdEc8JJR#FZkM \4p.+2y wMTLΙΙΙŋ/ZXњ|D=:-$"p\;k<ݿw^z&F];w-Wn5jzM5t`DEFj dOe+CaKÖ-N9}СCN:T+ȫ#ܭ6m^gx*FV 4xo@=ڦjm:uhiiYR\333=8`ޔySM H["~,O$"Q؋<.:A!=DP4#=X':hI!'*HA!;@1-bѯ~u@+m888d_%"$I\ |%<x.p/9 =|{v000?Y""|šC+V@ѥ3l0hk_[ 9^x@fn/_jڏ(1[5A8DDD{` 7YPgATSOLDSbpF)"YY$V:%VtIAl8[Dfċ]tV!Ѣ웈lT T%pa >^}xx~M;kCkEd={ΥK/:"O~:pqŁoD+TO\W,^xEVZjuZ'Nl4 m(x銧ב#]G>q&+*H,~ <e~(Cvo&, H~Ltl  |/(2I+tcgz5y~mGDEjUf7۾84ph P6lP٠L۫k?kA@tS)xx釧S"OEG&xd"p(Ptʅ+\C^9EDDe30p#ŧO#*ںum ݪw@=UT (P( _3^QAk8u&L0}Cׇ/%^J^f6 WEgT7("oԱi"eEߖS?}Gz͡1&wy80o~ hܧq}AALPes_LV&K"D.N=Z`Ϧ=lV+6ؼ"PcG5v>\P~dai=zl0wܡsA=z@c`Y9$=M^M/F&?3;LDw6f/to"\㩐 @"9XӥKM`d@}u:63 vk!JBÌG":Et,~X>}0v:yujk?)"""Wrx"ҽ{.@AUYfUU@}mTXb{QE8T"ͬttt~_&N.:$pkۭmeڞE?./K3Y(Ko"̦h(:jGrPD/'G뿯>`XamJKK3mz:蠳!rx=jNԜ9gf l{_\~@)xE?QӁ@-5nhk?j٪e\qc'EXzݝD$!+CVmmo}s gS}?JDϛzeLDZ@"ʳ8*JqE'Vu~Wޏ'Jffɮ] @mG ?m>X@={͕D)IU n n nE׋]u]ѻKA.s$y~""+jz ԝZwjݩK/E vZi@?YO?p@.e^LoqwwgW]8Zh٣ee2Oi?|M 0.&M4b6eC5я,U[%%cer^qƕ+[E[3OJ-zE-:%:%:%ZQB 9(f{R6mۄ+GUUs\{β,˲lZh-ަM]Rt_}E)J=+(K~\ b'2*FhcDO{-LQrZKE)X4hbGpc.=gߴ?6]G<DDyg B=/w.:PQ~fk;QdaJDn-Z}mkk1Ǵp… JW_3Ψ;C:tظ}ہA <Vf+:\{l^ghohohoe^f8rE-W/zy˫o0IIIb_`DJ T?>0vgo}6+}WLwM]LRe1Ig//0K&"}xr;u~9 щu-D )HhÆ?0tnҹ `_ʾ}L۫F%DQ6S5k~5W- 2co=ůZ///!"""*SL21c"ɷo'_j  ;v*8 Sn&L ٻfesY\t9(p3d$%=K'/_~8K4QŗD[r$:yr,OiZډ V[qoӇO3moF@LEj'Cd###@h`h`h 랮{444鋧/$NOZ:ohv÷ t}f@mW]QFfafeڐ(/0 ʐ+C 损7~x`UUW2DϋzdVD(\.h~@DQnc~_@}~|k?p"z i?~hs͉6'UW_hyɖ'͞L>E7n8ѷX>ؿk_W*2*[lٶ*ԪPB-;RK-v j7\woGKCd5rk$W_'vb[%1%2Y1ʡddQtA@_+7VVV,W\Ms@@=ZCk 5pXñFM̖0t1t1tv,ر``FČlg{@S┸Lp "ʖ@J'ƬS_>p| KDb~⿈臿N#*ǩ gF}7 /d_(^OY+B+ֈ[#nv4|Gs`]uUN= xxxg=!"""z>,8+fGivUW^5փ[n=(_Կaut /:ܒsKZ?j(z~QAiүDǟMDDD "O}̲lnhyv}(=zHSZ埒d%Y!bT?1ucFEs̟c(㛌o2T\Wq]uy[,~/la \ɲ,˲,[PkX]"vEvtъٸ}6NQ:.Eooo~HbRL~1K$)>(jت؄؄؄<˲6 -s E1HQu:.'g #\N;}t`NZnk3m+̦4E8|ǁWo\8P@G^ye_ 3_Q.*( TRJ@wե.h8 yXYWIEP՟k)"8"8",l&@TbQ2m1DD~ɢ#f%"""{ж@¢L6eT Wֽ{[Qz6٨g#E9zk$d(J'un׹]GQ[ݪV)JWEq;O}0˲,˲,ǚM/t+߭|򊲪(JCC^a*茵eǔSvLQśoZ\Q ϻZhs#ݦ=բ8^FD g E'+kZHCH_N-?$O` ///`L1=xj)B δ=0&7 z1b(Xd}M#.GƉƉƉY6@b'IDDDDM6VZj5^{Uˣ.<J-=XIHBR -N%z.,ݽ~?9O`鬥ǝ;i{u4u5")9@] 7}ѯ_Sԍ툈rɔmON!$YM5FsHsHsHQ:i:i:i%hIВ%Y]b5Չ) WVKOQq;(}U"En}8`Yeٮg dڀ(?PgVSgZ9sX4o84~Aぎt'DωгdrU\~y˃_?<||Xl ʢJnfv 鉈ƗD/U)4M^/"z,-2Ȑ"CWG_}xg;r+V kJo2elC>0L6 """"*))%{{{ԆSNXd`s:{.8 }L^{#:XZzi饥m3lDQǗIrݟ"#TfeGDDkkI7nܸ103o&`SĦM)HA '8ONw^ᲆgmz)`1|2m`J(""""€MMMᦆntb ˽.y:8 36gl=Zh#9lp╋W.fq "J-=v@DxDdz|)g+}hfW_`z''';&\peWO'ZF6'*w //69lc淧<DDDDD={@:ґͺպպ@!rtӉN'ݷg?BTB> ,3`jͦ6~xa#GovR08R\8—tDdQ6Uko{&Y űpԨRJ&FLoW]CCClyl~n"GMl~G{L3tLLL2m5!; s;ٴfӚMj*pɭ<930gs j/6_4h|Ls"s.;xDD_%""]ۊ~"_x(zY}=3}D$*Kn/(=wJQR1)&ϛcl٪(+ꮨ4 h4@Qlclclcr˲,˲,ZxT©S Eyy_(m춱$I4&iJf7#gdddEYsM5=RIe pY߾h1}ɍgl$""""ʳ N+|=_ M[offf@ ,LN% ?/+WF=yov׷qgڞ7T@y@[D`d~Л웈(SE&)הBf,<'8M&+#vG처ZS30*FŘ?2(^9ʱW߭~RBm )&~,˲,˲,jX|qnennNQ.^H#ʒA1(Ll 6互J*JŞ{Vϧ:rZG%Eu'97(Qk +E}({W~"Uڏ@p )C %~'wru)WK6/y::#ѓX+K,ڱjǪ /ܿ~xQcaUen :6ؠc@~q‒J+9,STpQ%ʖw}z70g$`ׁ]v0c1|?oD̽I䜍UyD(LDV3O\"?!˩'zUN^bыE/1Lr:jҫex⟞D]+_?/B ?`C:HLL̴.%ADDDD5{;?v~|AB+L)3cWǮ dKPE-S ж|m"""N:p`O*+咾və..yQfUSD>UZvukU][wmݵUQu:e]ҕt%QW7={@Q/ ^(u&MRM3M3M eYeYeX 4v;O;O;OEyiKc_([ZliK/-fSe8Hǩ~( ,RlJ)99eT%}ö yNXDBe V`? T7zyCQ...gVډE*cU*E}yݗsm:Q~HXeYeY}-ly{!Bߑ~GQ㥎:^JQLMMųx_cRL)w?TP)iJZW)Ugݞu{)JFoO-@x{Dkك#D+j,[0j j.s]*x=%jDԈYJ6?%KVw{QãG,~>a\{²,˲,˲l#ۋ((';OvV[on߿Œw_ 7PQ}}}3Ze nV- DDDTND5h1˲Ϣ[oǏd(Q2;$%IIikO(3f͘5c*U:*KgYeYeYEҒbQ귫Vg]|VQbv.@Y0@$&*&*&JQ&{N(esmMԻ gv!Yj?0D4cѿ>fYYˆ5׬_SQ7{,޸*J=ScʆՓ+ak(Mš5 SMgMgM8Ʋ,˲,˲,ja*vv+J:}E'hOOOOf>(+J CAQ~^+C~RxlESǥ@.~-TY}5ZsSsSsSQ۲oKE6ژkcxd(~L).(C!r_RQ[o]Eq /yr˲,˲,˲:k@2o?EZjf XޞRFujd%؂W BD'Ǚ]HDy=5Vyv;DH=gtNF'6"mD0>q|D7v (2O.ĉo~A~N9 X|eW;\s=v~ }>LqFl{7Ÿh}P`|eWJO*=4k(e2 # H z!dDDGw M~DDD@XsԏGl}O=( -SLCS%)װ0jԆ e]u&4CQlmmyT,˲,˲,ZX*@ ׅ+Jo;~[E'lO ~,wb?: 3E<yTQƸq(W8^sga M{mD&""gKWTMngY<3e+6POS2xHWҕtkۥ\Ù3g"ek^𚢸ĺĺeYeYeY6 I^&)xE V+Vֆl@~jpjpj|߶PE>|esh={OfKQÑ:D:y¿no{3:DMjݢu-YYYv`ځ00zZ.]t;k\~?fݭr!KK 0   4ҸK@t;8UpT!0@ -~Rd5fוߕߕ߁Mޛ7y^҇kî 6,vh`L}{R(:]w 4QDٚ:vME?z_t|GQ[uA 5ߴ'> __Sl6#IDATo`Qp? S)8(P;# 3π>(Q2mk'vڇ>llJJs7;|b|b|bI|'WP"DP wzm zcUǪ3gMOMOMOuAc4@鿦 ħħħѭ[G{ݶwm DDD+?2<+yV,p ~pf3>.h$"k\gEHXe썍?8x?y@w]w]w/ .@X0#`Fp1==DDDDDDϋm6nk6`O~~63lf̀ťܨ~?rpg?YGr@9nW]6PJ+5GYs$_ѿE؀b \s;@F6m۔_w077RO<'>mf+ ,N9q\sϵ_$&&Zr BED8X~(r5shiT:v9/ef@O><1@O=6m' : S^mN:z^i{'"""""z}",O>i$`ș!g|J|eM}?GR?#3gLOo)Rmmm3MzxtљGg3.gr8p> =~@kqŽfGMVfvA}_с7DZ8dSDh~D댨3ILfмh͋fڎWLLk>=~_U0p;gpd$[ @j-Lqҏ~Z?p8siHC8uVfym ό?8l-z`熝vnBBB111k?)zf(\ыՙSs["zRzSr s7/%?z2ozŶzλw;ooqܪrʭLqdajW]|=_Vm[m6 @0Єr 3x_}x߮ /4B@b"3m (?4{|;\s uw]wW^98~׀imfڎI rⷖ>|]~H""T?*򄿢7eٜcmWmWmWE鷭߶~N;?bR0*FϛS+VL(ݯ!3G81,˲,˲,˲:cF(M4)`+y3bP ?BgS<ŧ.c4x D맬~ Q2eHD~gAQ9ʦ)oe2c$4XD&WsrJ_[.\dh9L'4#Q}L"7Do{[J)ԛl_2 9''''''''''''gڤ*o~[>sssr"[c ˒O@@@?Îy߸%+^#6Tnj"niXq;嚦9Y&DAhX9淙f~`tFWrK%8! Lxoo:u`ԛQoF\puUaއy5x~G<{ec1c2  U*9sN;Ϫ>:Z#Fh wtTP0J-_9̛f5jc׎];vPKKKkr{/җxW9g6C$e_-lK=2]ꪌ̋jsnț> u֥Ƃ@_y-ZO?uT^D>"HnY/`B )nnn ?!CRF^ c1cF"***@kԯL5y]@U^Wym~P+8Y"(  !`e}V^qzi sx74,`ѱYIA/uO(2p RLCjs&{Z>/7Ŏ;^8#+5l j/j/j\񟵩_]L 2 kK&.xYe ޯ=3c1c%~d7/.2p驦ҞҞҞ@q%ƕȌdF2#7=JyLd&25GYs$P(=0ꧫO߀d&i9K*&"f1h͏eNxcNN$̹ϊ*VX$c*R*'Bc.b(qGH.9_rLT7nH"q5q5q5HD9''''''''''''gD+{0AeA]=]t߹U}sXKJ r+srߤB{ΟɄoǞ77b,XѷP-uSۋky} 6؏$2ė~>X(U«ιDzVѭ[kgvӋOC5x8g1c1Z---u|M5CCCbX0/~6cM"xjWw\]`gw5I_7Fcte%T;!l> c~(v:M7}9d⒉K&ߛx輬M_p/Hyy]wߝ~sx=Ww91c1XЗOCnXݰ 0|pss1gé"r):E /M#F4Fw ľ} o:5999FL^5 2e~ cSǦ`'@JJ*6 >tA`ҲI&-6$lHؐ///d 7kSm{B_Kd1ƒCзXVJjSSU_Q srrH>D2C;$ HPa,xPePYӛ===;ۓ`kNNNNNNNNNNNNNN&0XTATAT)SDs]u9Q  )~eD7z3Iד'][/^lMסC_"@@@#JG4.h\И(gur!m6 +/NC?Gs5wk֜ٚgk%ꖣ[n9fΎK;wXg{}HIX iH޿&)HAÏ ?B4l`3"%%%KPșs{_mZ&P1SOKmF{j ,N𘓓0q8י^gz! ~i"*#鷝"eH|]wqy%ZXaanfOXXXjR:1C1_F,XH;S)4X1g3))0X&mJ[<+cT%a|O_N`ǜi c},UIURQG E ӄigYͱ7KB .bw03'''''''''''''Ϥ" RD/ӿ /^s##S>&|Ll?k&2O<-DsZWH'qDDGr$G"j,Yf>}>8|p+CV FYg]`J3)qXmc, Om]t?QrrfCƛ7o&l\q͈gY[\`\`\ ѦٛfoMTk -'''''''''''''gDWXmcDk}6 !4FD~000~[>X`D[Mn/A"yyyQGD6џ~;r€5(ՠTRwLN|6KƷLc3&U6)RF𘓓;7fu%$=gYD"-ŃF I4˨.YYY}g;ܜY9Bwe?Ѳ˞/{N4iLwߗHyD\q 94.888&Lt%*T.\Ѻu"5m_i%b)Ç>{}Z#ęsimڕ6cdI1儔 x " ^^^Ds_}9%QܥKqgY{ۗY#FfDPC CsrrrrrrrrrrrrfLIE&z/R'^x};<2V"=+Q/KdjնdADȶʶʶ5|~DWWWDtVA RߟQ6DN%J:4X$IIAKumuĔ·`1~ۇ'hmm~9! srrSoqyEmZ(~Ziv¬Y v9o`1~ۇzim&v?V3fZ$Z{i諒j%JepHKlI%2}}G4iᤅY)Vl?|#ə 9999999S:>whܡD&nQ\q n̳ˈrëMs$* ͨHylllQE=\D&orSSFX2b%QEEE81>~U-S0ƾ`,R \Nu'8e,C2 1Ma67gޜy_UUUqCcMY@h[Gtl>>u_ޗĺ/^$ɥ/ӗFmɢ&>T۫~Mi^{mZoov,2}Ga'%e7`,Q[ism=&K\3|;G;G;G`ll uם^wA sgX0)L p 9s<7~ @ 5fW1XdL1ڙڙ2S 0}` ((c?e˖ֳgVfVfVfN;7f-Z,YԳ5{k===---YAYAYA@]]0l4h0 Hc?'''8 )()() (( ///ǥǥu?u?u?@EE@0 OP?U?U?*'TN $D " 99HP3&8q|c@yHyHyPTTmmmSbOKD/GϏD]u=-zDxDxDx1.1.1.4W+́XXX cl؎\a0#}ob1ҕhhhh_}fy܋s/fDgr]9K/-+8Xc ^j$6S΢`ZT6ET0:$,5Lt@A@j?-'@5\SÒ]:v))=eC ]6VZjESͻwQhl^S ҍ0]g7`?'JG6]WM͌Œc,$w;`0W+V]VVVU V%{'{'{')))p2q2q2>8}po ,g[ζ XnlbŢ `^y@~S~S~I$f8V+A )tTQ=@SCSCSTTTԷշշc9s4GmDvF D,r㓏O>>GMDDD7"oDFW wwwcD*d- j?@A̓CCC>?~ExgmzSTW,u8pXkX< p=f_RjP()t07v(``2h {,@B?uE ⮨PY HyRS]=x㬄R%<NVA +j*Iwqkf T \-8M6㛎oOn<1 K #nD~=V d,#,;WAk6f]{f u? Z&Z&Zߒi%2DۇYgU0| |moc,{{7xHHHVYl/ .w{\yݒw r ]"p26elVX7GGG,P@~~~ ==|0!?~4ӰOÀw@}}=~?!C Fh@ǡq3f^{c,T/_f ;`쀱A}0a,%P0 L{%Cm6^ fwe o]U~H>5P?1zǂƍFUG8RH ΃:";Fv9j~6; ͺ%\òn#Ae ]q1{`hƲ)a-Zv}9砞Q(B*-n` {'?^x}}}s1X6!z+z+z 2ye pݩ;sC 97.]<[&o]׻@ym8UrT jմ XYYHq82גeԙ:Sg@MM  BBB@7o;/> P[7kc,ݓݓz}]?prQ6GYI%{ 0ӐNC:oS"CŘEcJ]+u7o2`9d 2m+Hq@%I2R~Yhk@l$ B-,XHc`۳cx* R M6= (ط`߂}z OۯrrrGGGl뽭ީ,lUȧZ'%1cWh2هfM{B0 cٔ߶m ^{_{q!;PJC___`bʼn'V~RIm\z1R(((? {+{+{ Xnhi";2wdH \u+UVZq>UMtzcCFFE"e@hо}7ՀW^ >v} [v|mG x@;XC1C{ce9 V}L↋.5yZjUC}B?kBׄ)aS€y5 @S $BGEK PIk|9K'F  tIF,q3q/45i!tBlcvSA@J*zM 6-zS ={hSM69BsGȜst?isGm.TDi+vYh|W] f0kp¹ @$XoX}/[l0A,uzQ'{x93g@A91sb${qUUUO:~I$vJtTPLSLSLo`>`s=6HTKB08f 㬯. Kz "_*t8$5EQzܠW?'u8 fB-G}*#(GP "=c,]d˘1cJ|<S[;o;h~}sČ32 ߇`hD?=xuRk1cy繞瀘1c*kC9}ù /!.@߫0xnr35(wkTH9`ⶫQ~`?3fy|' ׍о/ pQ(3g0$1SY[gm`ДASM555g)I0samA歹_ԔOW,{>;;mCܑ_ &0J4i~^QGu>>>=u=544}+ܷa‡ ~Woc,HbXc#c#c#sY粀MSy*OYngRJ*5 pթ+`iiC22<.(((kx on澙fnI'՞T (~W c1X?~d8X`e5k#h,/dTȨQ@mm\ |1AAUL4Эjf y;Z,l_#vNמٍ!@-?( VOEF9sok aE \\\'8x(uԵRא#W^UzU hp9_|1kЏa*#mͧ{uK㩋eڜ>T?jS4IP0e%+++`B '&pj)qYN7~q]+r*0kꬩ1ƾRۥKʂʂJ*Oھj{l\ٸq9.sl+bbbP{jO@dLƚkn|{X%Yq{5׌ *YDYi;CPp@v@SbE`M<@L{|)!gr`AtSo5ձXu,^{<6xlHm9T)X0ki.ڴ{^0 cل~wpviiiRt N1#0wܱs{EEE=c,QXy<',OP_~UUU@#e=?QDu=z\,\h~@¨Q _溛뀋/Xf@PD`@12SgN94eҔISu@),eː@7\\\{C TdIp >~P98P״.2ٷt#HʊZ#"[%$ pʄd,_0eyf ߇J=-S}SF04dOK.tw?>K! }ݖ2zn_0 c)Oe,+r)zbm{^KŒ)AŮ8R):%^XY?J]w&Nr l뵭׶^#|a.JV:Yu *\p)k-J(p^y`2Rq*s s>7p?7]t}pO9D5:u0-ﴼ("(z*Uث0C jDo68__ Xf&Drkm(_t%(\E@/^,7Xp111lAK"-{z9+g*U~W]@r  .TPiI%Jc,^i(Ww\{_+5@ @i>OocJJ`a> 30>GP1/j^Լ(`xVXB_W1NgEl]^"B E,;r..:Sv_@x~@cD , q/^kHJJSqgΟ9hr&e1bׯR_?h6;yo,s&},]ſYmwfɂs?^5k ?'...Jc_7tzzz'曛FL1i" lmḿ2e[-yUجbLMMMMMa*c'O@)B)|_5y8w=z}7G?| M2Ʋ9+lW*X"h]>v=pn @) ʥ+\ j?+_D|@><3k͠}te3ne&ov ׶uKBeK*\2={4k ׊\PB &05k ,_|&3lDEE0)L"c ,[vw_ӲN:-:S(DVF,G<4+c,st۲۲@IDI|^,{YO|>Nu'6pbp Q.F]DM01M8VuXk$otz=Wx\=AA@iƟm$_tE8݈ TBp =f9РP5d4x+z+z+xPA r!W*iNz8tyggg @WQ5+0XfPCyOn>&!߇|uUKΊ=1ht_rcEVHh.9A5 E#N&-.. D+R2\-[>ߊߊߦT Bx:途[|Fy<45)7RWd:%`lPfd$gߞẀQ陧gdddyPM9~MII.g ߂H]zsksLmwyގY |b 0̂3 m3x%5ˠi‹ /.0 vlرaq^ XW z۰nú fQ͢E={|'|c1RCbMuY=Y=Y=[=zoѾEԹRJ`l;6mȅ\`(c7Akβ9,6m[}7KƂt=ϡѮEYN 8-5. :::҅V7ƄOmϩ c}KAW2*heQx+ubX.,:(0lҢҢҢ__\"j|1A}矝ve#6lٌ85qjl赡׆^aaa9+}B?cz(z颧a6lwbk ȶ#ێ8,pX`Dcb'yeD"G.L!9:@R߸aUڣ/&ↀR>7~)R_ST=7{nPC^k>g&<?ܢܢ@]w 58 z뙮gsY`9|b1 ΃v+VحZWl]uE`Kܖ-qAAA0ȣ#Pp "9cLUUHSUUb m5(j>6*) &׃}`!KU nWݮ:6-%OtSݰw ס:S90 M87zv٩g'`߶}mO>i$6{lt@ %R1.>-F[lҲIK`˰-ö |lrpi IDU6tD_ 62>n1=hN%cy`LdXk7W#k|@|l|l|lz,KhS ~,M%>K ]_chZПB%IZ*c@EWa,** ^ W; @THTHT_+YtP{jOW6_|u[={C9-c,s6,,,|U*_3UV HC?.1c,IA AF-+XEí: f\qm׶m]_ C˶M|yyyfffрeY˲eg@лșAV>5DgP |fzkii Xzo>C1R1R1={.\t%2m[% ^]1X,-*E^WW+3M/X~s{ w1b_{d`MѴӴӴ6oC?`tG7>Xc=|`e1!aASM97?l8XRqI% m*vvv+ce] H@ v;J+yh΢9CN9c>:wFyg_?7`,PvPvPvEʗgekeke ڦ@jTM+LT ۥj )ׂ(9\T)4X~,QQQ_3!fB?/OcYbpGm{ }W1nRXj2a5ݠsojS4VςͲ&5XWc0[3[3[ؚښښA b=23*a`u ƾrK T* P\KpjAA{J* ?8x#X:`W ,, g1WF0c]QQQIJJ,朙sfos7ތz.\re6F Mp6y3mg;.v\r}p]@DP9( %@ 4HIibbo]ںui:W';;mVYߓ [nܺuLMMSa ^_}}UF?"jco){KY,% 6):ZiSAϲ}A 6SLi4 l4Y`W9fƛq]um$ ހ+cٗ;q 0+iayu՝W+֮X֪Zj|)+c1Z tڒڒ@Y߲e}ooo`ﴽN::xk-\|S1in@tttttt[inV/^&cA 7y^O<4ÜkCRQT 6/\wK7$ccFb[fohhhc*nuUuUuUż^Kߔe55[}3I>屔o?h6fHy5!_ :DQ0⃊nxڂT>1. h[o>+|s^ +cُ\w>]]]<<<Àͱc7[ou0PQGOrc1Ҋ~U @* 5W#>x}``[me4oмAs888  L$}ZkW(PxpЬB JƂht2xGh3ʤdWHR6+j*G}VvZ_ N2e0昚cj->Z|+᜗C8ǭ!PI'ky[[[~}t ޯ21c,JQ(w~j'`狝/vVYTd[+ m@-be!B ^y<r+TP v =#^)nhHRP7QG+ӯq\H2+(G-Ro:W+TSoiDza}ڿ8W:.f Xrn;,kmUzcYMY6lll`~2|-࡛3} knn5#׌\k?g,/wU*\泚jy1Ǡ[[[Áۄ\cJp]ccGEzvY`QE%+z？8t '4++@=i=i=) / / /_rQ 1D/b '1LQh@~=ѿp> `KkcQ[ݨu2c kXu+խT`jj #XXX 7~V-Kt[l6f%%*SmV_T/T\wrab5,Vf,F< ())Wl^y@%nNjՀ9v7:ĔȗJ% *'>$ b '=) dbyB.B@uY`DJ?k}WeًVL7 Q4_)q) nksLuO%,kW &50kxZ۲n˺- ^C:g,TnaÇ k廖Zxħg aW+laN`÷V\sEOm!}_e1C6 _.|e`ov{ ,ֲXbIW&]<ciUV^2eT̩S1وf#0xBxTRm݇z /7/G s9O/NF5 08,tًѳnmdէVZ}b~|tn֫A:Jk^G*SSb߸6f)GzEc姮_|Dl({Q~~)[+Vl- 22H07a.^^^ΩΩmmm:^444MUMUMU@I$FA f0zGzbk@YYmmm$K$K$KFFF@UTx]w|@ФIAMA6AO= n|@dPdPd (7*7*7qqq@|zBOIzY|ˍrI_qcƍ&Mv>>>SGN>}'9N9"rD9]str 1( ///L1ȢeѲ_0#Ӌ3Ϙ?}G~ -Hb%(@ R$:GJԁ:SLN1fggllIƂM`%@]WrZ,-3} @;0#^h\?:0'06e S;TPC` րIӓ' 6'tbfJ)m?;vNoI6`Q=#xl[pbNЂkntgMK=Ҁ@6P6P6u{YQFUU yE&1offf@{ Yqdő!zckwkwkwwG!nC܀bŬY%/Gq E* x7ݐwCuy[  <w@с( 揘?bqXZj],w9̟3?RޥKy |O=> u5@y شie oQߢ> --X% owW]ö: ;|Nd%Iϓ>+,W$CC?nD7/߼|hͣ6[-o߿Uf9[EHJmh?|0@rWWrx @YU ֣Q}9.,|UUjX@&"sl\fpmo{~xTTR+ =ߣ5kp?cII7[;m;{ʊ*6`j,KiӢ}ymHX")La |z駧VZ kl_[rOƲD򈻊= {Ȁw1X`1?Yh|ˑ#/J( ꋫ +<<+|^(++ުުL JIIr0o|?J*9b\w)S(ܴpM]67ln`+ #D 'q',p\bM&Tc8e -Z4v 5`a6C;`wϕ>W\;Dw_$*3 fÁX.za~ Z,Q" 'Ri/,Q HT!=|F|}4?y4%$$i3͘6h:t) j*j*j +8|fΔPB &0GO;<ꫫ $Es32Dzx؝cw* >ԇ __ / btcяkׂ~V~V~Vz=X4viH7v{FҮxtl0v~}JkF:r]C)qk? .O^('@xؖh"k"k"6TnS9+H?d`J)-/">_ z[9J[jsK,c $n,m6{Bpa,W*s=j*`EEE`z镧Wʾceb[@FuiL4h4...DEE ',;KbY\x\x\8"EP m۸qG !C/// 1\=zpu@1S1S133Cfr> ~u;=87o\111g [do@٥g vp]u%9s.I.?Aeg\Q P pok?=pᑆG %r|Xٟ?iQ(}@՛Vo @p=>úu=l,,?=ۿ+a/C9PE-Zv~ylٲe˖E5\/@M[4m<xADYFohۺ#m˒ {G`}KGm7>_d f:tH`%痜{?誽/|K`Ʃn///s<2$Ҁ'ǖ[rl\lp1_~y !,;I7;nvl?z~! ~wy<|@={xxC3R`cc>\3^Խ{QŽ ;*,J OR\(!M:EݝؚmjN/Rn*k4qt t~P,7/a1 :&2AE@S%pԛ-'%<m`bQ6`yQTjpAG,)Skք Zyn*ͮGJ)}4nnn_SL0Rmeʶ{wݹRץ |ã:< /}?=ΓMW}[!nzDS;@A+Z^l\ڇJՀ( wh׀f#4G:ľt[5n +zc]K4>\_2/pcBLgqJi糚i/bC PPP`ޒyK--pB@+"c !|vMEM[4?~ Be&iEm޷=/%wcO7kSTDY)kհaG1c@G*)XzӐ4~9t^j cv )98H4ڳk}ާz9^IM>h16WWW -7ϯ?h9D/6"Q>u>u>5\f.39''glllQ~6mTjPA%) 4Ґؚck!6"RWWOci$7oB͓͓͓ui;b?̈tI%MEN9w)?/ŴhvD>8|0&0I*8 M+(yDԬ;`c":Wn9(`.;"N.iQtEy˽(kEn_r?w6'r$9f nKj6DW,afDT4h vva S~},o'o'oG4K1K1KA`KJM I勪D#80@7)kiMc_ZM-rQ srf\纕V[D?R’+%Rua_̼)uuu 7S"D{{{X>*1>W\sU{hs67#{ؖ-cKdjՒ$o" =''ge+&:uGyzg{{{ .]>ѐT>gǽ7&KK/H|D|D|ϯ?MJ0)Aʆ*~,8CU[Wm]EdDVZqhخ899S츬OǶmM;ї(fH͐9>HE>H1BQ3jF:5tjTϟ?h9FDu?Pב0~q''DFѧ3QN^9~[rM^5yUD'8?BtN١١ّSRH"=OCBBϝ>w\"N ':3[`/q-r*(.c;P@SקO] ,P;?Ć)9߹%Zw/Q܉q' >ݰ_P~'gip&}89S>c}MOvX6 hS6?5F3cg"G{ϑ# d$b(w[mya@ÀI;srrfL¡܌r3 m̷qA 4 T]Q]Q]!7ѱ2+C4Vc[USiN9D֛7[oN )I83L)MFtj穝vU]; P%[oQ"Vakv9\"S{^tpсʈ*#AYn&`Jkݻvkkk!RǿLsGsGshttH)D|o._̲8ͮ1mZrrH<̔YiVYf;w+2EEQ\rukVmə2hT.KzծW;_92SPޫޫKNgϖh@T *Uʫl}?LLqHEESINDl>9юJ;*D*U`"UnUnUgSkhƒ#o]vu{]".f]̺|g?W씂esM%Z>t}w3/z 1@"&M*u888Q6 lnlƶOS`:{&L,Q9kgo_=- cY]mvt?@qrZ Z:E;E;Exrɉ'ip~_Y[Y[Yh̭1"d?CrrrfLDŽ њkJ)I7oLeICLCLCL:+!RdEJ!m6Io3QJ+D'Oxp= 3]w 5 ҌььIqB1s-[7ɜY2hWѵ׎^;{W|ѪYfETȿ!WvnO!)NS*xU@6miu?jV'gM6GF1e ZgCsf }ۉ444“}&Z&{3ߗ J893~ xJR$j4фF[]nAjXRG|3g<ƎKTB /2e+쇜$=-K6.ٸdc}އSO%TSOՒf,U%2b՝wީJtVYMgggg əUmVD%J0q0>.Q߅}]Hdaaʪ ciiI̡C3Η:_Hw<-~G/^Nsbω='f'S'OYh/eXV_7H>IDAT m3EUV=[$ _$|a"s4ȅO> ]]] &0IoODnYG4˓.}sl):X'aڼ/ϙR3B &nM dõn^IT3+''gDϢFEܰs D =z&Ύ=XZJCw;|ͷ6|M|6D9vؕcʠ `{NNNe^^^D4jҨ ѺV[Iޯ_{"==y7׹]222>Pt5J#pf($Xyb剕777 DFHu7bzItKu;\sD.\KwsϷ+W jܵ+A;DZ.\h$Ҋ>BDk+2eI˒% O0b!'g6LHYn%c,QQL'ϥiii FHz%\/sEqǩ =qrr4̾>MMM%jωTSNӟSJtg,5RD%K &2c4hL?=r\*'*TPBUKtE<yD:"m1bj)_rg˝-g;vmr!='g5iLGmL_vxA N̕ x0 /_/2Qm涙r7. /_ jtѭ/^,5%6OEQ}_[|mq뎯;%KI|ə)222ξ:#]ӻ&ѿǿikkC%Е+CWM>0D#,GX0خ"gVNSc K K K%;\(WB^;L,Rlz_:Z&}'EXAԯxU[oվDG\!ttt&].{\E"W"gs}˿'rˑ.G]]].rOsaq,$RgZ".y]&}qrr~IA=ڬe)nڜ6.Io/1)L"@ŅV\g? @ %vِ *o2L &UTqRE`I%&B4@_lN $PC]\\^n;Ywdf23$ ]+Gq<p pсG?8|MMMY"kc#P`@6*V[mo>\3 /$/$/+ò AyVevug`TשKK}3ˊ`31A `WS5/7ߌ×/MџQhccc|` 4>h<bbb ćć#NGbT @?`]ֺuYSNN9|)`r@)xx@;!{9 sğ# ,hG8ĥg,3ZT=?q cۇeok3J_Z993f ;cw ᝇwޙZfw_Nr-ﺼDr\%W%wL9Z Pvjw#u%Jwzb3 >x="OOO:؏.G"vEԲRJ-+{߻&TSO~p"My 6D@4M6M6MFTҦMI"pplӃ39yD4_4_4p½ "={7wW]AgOe FQǨcDKw,ݱtXNc~ə)Sp|#j԰QF >?\>HEw37oL$W_C0b''gJen$s˨hs9m'Sd_aÚ/2"XMlLP0IīW qrr~MС_>剶f"FQmC1]w'o$quW\VwX8U'''''gJi^z 8pD|.\!RUU`Bx^*Se"ߦM}-[,629.hUUVDCv!!w#>f/%$² ˈjl&0I.99^mķx$y_mU{sfXttt#=~4K5K5KQ%PׇъъDN;=4(((U 1`̎)hPOSC 8p.`4)L3vəSp<544$xj⩉Cs3KDԌ={<8 ''k aO8P\X@mZG]Wq[U[@ZZ e)3D)j?ב#y\Y'1mo2frOtC0g~LLLkwݍv7O?{6mܗ\S4JiشjLs+%e\z[DZDZD26P2P2PXx\x\xc%kZ~{E M. <4yh)S<c~G'\BIg)!@ urQ/*gJJ=KN pWXk֚9c *~4˜dɞu',,F-ckkk|Y6B^.SA1v0`Aƺt -[JIIIIIŸ?t|t+ӕ/&=,%|[oݾuOOO^gr\¹s ƦNbؽ{?OLgϟ=%՗T_R1k=2X~|GzV괟BH3xu%WevXRTRTRԗX|¹<rAIIL=3!l:S/&%%g2 .3K1b.HkqRWWglL˙EѢhI7 () .C?s._||!\n(mJ[Ʈ`;v-c{XI_;iq5z0a.g˜b.Zk宕cᭆ~lĦ\3()D~A@ej cGj}6cqqq_+*/?Go1vqu161{bl*yUŘ0nNtB3:y? PR~:9'|6?1֋b>%\{.c,OYٞt;a}G} {0c>\|TK` q~ǝ1ƴӎҡCK~:%%%%%%(eQʂa\2v鍦72l-xexk?)u>MY3_ &L.0Ю]C;Ʀvh!έ>jƒ%UK+|añ5|[#*2grZluAƬZޫۑSUf_˫Ku"fr)):[o9p^{5<3M^#Fx *>CG7() .97~~~3gXܜ9qs>}DW.C?yЇf>188׸OTOIIIIIYSNN16uԝSw2'~c+W`LtNtNtNg3{AI_mZubՅ1c06.0澚j2￾2jjj˜Wկ_h1v}gƎ$I:ةSckvf}ecQRRT2>^ ߤVmԹe:-. !$B*]vUU h8q(߅,Ʋl@]$IPBCC.$!Ō! a Y  C0#oSL3e`bB2   Ox}칺ꞫU7@B< ~SBtDGtvڵjW`@€ @gv J.\*Yg}P.<]&2 + R'f͛5o4tiP sVຄ! my}rM*7 P9rPJ+N:Q`=ztvi%JYYY@l$6pQ(\YYY 66HD@oo/0?a~|#G@$R)EU<#<w#F V[|:(KD> /ҞHu}Riviviv2QL}?B'i4g7w}u>Ѯo#I[%4KʪӸ/$8>---222!Pqwgw}:u+̛2oA%P]JB(Nccc`摙Gf lPqˍ{}e#+迢? R6y/F!BH᡽~^Ok,;XvF;Q+ԮP ))< x\(((l{ 0䳓G?($}<|ڪα\%"2k#n %gR?R!96m:tf,dKȖ-|OxE)2gFU]yw:0Ѓ(f.sݶmw6[m0RF)uv`,ፂ)??dғI,ce'PvG;˕f.69lblʺ)리cѱGy›lͲ?t'Ɯ;:wt,nzz:}Դ ~:lRS<6xl`]]]t$C1,&vK؍=:zBIY2dNr'?16 eCuܐ#Eə?GGG3뻮361AIAIA/())))))`?#11O7O7O76tc ޘ1}c!evlڱiUVq[ma,⩸eB0٠$uEL956\c3cO=<ΕcbY|_#ՊՊՌ͈?#1QSQSQS22UZkU#>gE 1~)1;;o4 %%%%%%6s9/0t5t5tesU;We/gLuBuBu⿟"&됿~U V5#5,. $uH<]kR6չ_f/лقhhFY/^f|hjwݡv#$$$?\ЄDPB eΟk j j e5^uOIѦ=j^z)EEE#cGƎ1P@=$B\r/`蕡W^$H ηo;_s9o!ET.%W]v0uWo~=9!B "D#չjj:yoCI~K7O7O7i*N= g?[o:ۏzRR}AH!+˝))>x|cCdf'dLDD3JJJJJJJf.=Xcn 2#dcuuu9!|cÍ 760ְI& |Kw$[/m͐>xFF5_ =!k4i`_ZtE@$ zInRI퀰aúd}BȷB!>^5Jk( X:juPr*gIѤ1㪏s;/0wtwzzzl!gUB+vcǀGI%CB7MXWf] 9=3L䜯E硚ev5jK/]4C< Av:%B8[Mf9$4W'-u(),i4acOgE(wtʗ+_2fnn讳%>%ee.ߧ/k;qw} J#S bƼ>\9}؎;8XfzfzfG}X6m??QCJJJJJ"Gi ?jzWYT gNξξ:K3W2KXby l{|"F;%gwm~XnbP}{ K (8ǻV l9 HIIսOr!B!|y_sM@iӀV:[ pq9Ns<J(37<)Śdggg`y彖 vB9LB!EO:RQ9"Ł`:VT'-q()sI $,Tn*쾳n`qzPvtmeKg!X#Jœo冖.]:SLAUnSnSnc,tJ)Ywdݑُa c=؟)))))))):s9ǫc:סߐߐyP4qΛ HgJJJJJJ<4 RE|n}WzJ J2 eeeaaaBGYzld#ϳ:<6n@bFJ5N?#?#?#`e-Vŕ+QԓhPlߤ`^ּyY@ѽ./Lg}~ df!Bn)0jѣF?y끘 1b*gvB!>YX % % 5׀_ؿc[[!~6mۀe]Xvhp>>g!B?;:ǩf|:4uֽ[ǙpzTi[mˣj.I!oCYcf._|rG/^i8#B!As+O<z޿.^x)3}gNF0yz~5jXհ5[lY3===X8K!85nёĸ:]OYpu3=gu`SͲYvbyy9c5RcerJJ/HΈ'兌nq^3 `|!χ06b̈1#0f,2>МwI$rƞ> |>Hzeyj䩑[no:G.#HPRRRRRRm_Na L-^ӂ'̝fx-`ll =uקK;H O`>7VX !_NSH!!!|4)$IX03kp(㌔reW׫j˫ e `<ԣB!`pϻB doޞXo`u׽^/d_Y_3\{H hҦK%]t](SL2#BB!D_qjjEg=&LtUkZ] %gR/K/e,55555U5|ŁʘA %eJΜ6i6i6iܑ#sSϡB.ElllƶvqkG\3\3\3>񕒒R?34tttƶmǘyaKci|uYOOc:1a+%%%%%%2&4k %Eʢ5y~qzZ>k}22ed `nnnnn@9䠞ӲI̓'1' ,xL}9=XPBw )$4#jhl735353ffqw:k熧9% '1a iᛆ]r`CuwB!I{ƹ?#`DGTmyf 1=1=1 L`ЈNT.#t)եTR` 2 ЈBؠ& 8јHOA>4,S.]B>ϋ>/Z~hy@@@ LVYKYKY M7 @aA=~i*'''IK&-P3& ''@dpwߴE`vW Lt4 Xb/E2!B!N^߲e2/e^bbbZ'juiӺT_v;i[WtEWZvjـ-py{@yNyNy9 ©/!46I5ShC H26TPq)) 6B#nvfԲX{'4343416Gml71CIYsnnnbltMF7a,# # #@狗2YW~i LjV`c?$@)%%%%%%%%ef.u]_w=c%Kye6f|ܒLLщAIIIIIIo\SZtl^H_/S\|a()OA+A+A+c B﫷b3]Xc>}tUTQR~y ÿ8x%I_|9wܝs:?S>soo/cGŏgLUUUg0`ԯ'Jc1Ɔ^wx]^{DOqMw7Xݎu;"#())))))Nuv)H&ܤR \.>]|0jͯ6~D}ͮ7,,;]xRR~y&9ˮ\˹cL34ř"Ea-`?c•••QRRRRRRRRR~4獓1ѳ'cQ6FmTgrui՗V3VQQQQQ> %%%%%SCiiB gʄ|VA()K_~1%gwG,/և]ʘ OJϧ1a\ba%2w {7| G 93ģOKhJJJJJJJJʯIÿ{+JƮO>*)>y&uᙇgX鎥; aC=/)))))))96Z}InŊqtߟ| ҜW_m~h=ctΕFG,x @{{;r1HHǵ d 0nhи!0mӶvy4c 2b!m{{{g΄ ?D?!B!rȑs^qVtVtVM785ԀStO~^*2mo}n3f&* 9o$Pu!OL˩Eu5/D J?ٱ %!@N6 X,aY:m贡f& O4y<X*^*^*n{i(@ѡ9 {{{k9&08A  (!=`khW 7i7n_.7!B*Jÿ]j`@Tb_ es\@=z^qlTC5T6۴oS I'Jl%Bu ]OB!|tl@#9뉾 Ω_z^N |?{Xfbfbf"#5>j̘U V%t OI{躣뎮;KLLel|VbY9 BP0цF1f[Ӷm/()))))))))4s9,9䜒s[YmeBe:,}M>3fʔ))Sݸwލ`-Os N2u'Bsp u.th.ř 0!3!3!vlQg{!XJBmַe,00P{Dpn:::1xUW1fdd%%%%%%%%%%/i#,06ws0iiisK  4r||A_h|O%|gi EhPO !Q:e]0Bu9sthN: 4Y_wܱrJ셳^YO;D9!Cڡ45\3\3\3GYx(Y./gxg2L%SfNO~`ܩsRtM銜)8kB!B{>k#iii܇s}1kĬ@ڃi:G L`wgv(ۡl`ᎅ;*Y "D] !R85Zvq+,ig}Q)wH1ǩpvlֱ-ܿs@ J%``SHqww"VE@s)ڊ|܌-k[涙fnAYk-ok&0Ȭ#g{Ҟ=O{xJ!B^Vkf:uX};0}w % % %t~[Xp߭~K-4g ȹ4l&B_Ip(%"eI?y: A,SRcJ)9$c|V pT---cl؉a',RQ\N\N\3g3&OufNA gDDDƆ~j)333u?gHUJJJJJJJJJB0Aβ\d.2gGe,acƄ:JdJOɗRʕrߏ~cI.K.K.lD~HIIIIIY|3=NODZ}kz\ɹs%_} <$<$<@ +HLpiw`wOYz;PbtFM&bF6>8=e^VFUjT)`U[Wm333sF%B!f2f777o~0@|F}L?i BP #IG@RxRxR45!߾~ٞ=g{k-ZENRH.4@wCp|cTQ=miSffefddd5k.tΝIv.S[6n-{'z'r֤9P !BHQÙSGg [辁~^j8p*TwuyWNN:>!B ˫{:GM44;[# F9mȆ#ltqr>h/5oMM 0t8Ss_ENW `-[2e:|;!_APϷ>|+8q@c`} pp9۝B!@;@c}9v=/?[l1?xB!R2"GӁ}G}4ѐE{]O?y,Ymmm3%u!B X8uVYy"@sݸ:+Dp֣ϋ,mŋfL1=czn"7 KG8_|m0m˶-۶G?!|j^y)`ҕIW&]Di"Ld"=7]XO>i)0b爝#v?#頊B!Bt hT`ppx >l@Mv*ld#666&L4hEE=!fWSs_d:wP'T]0%g2S9[TlQc>.!gr&g$r3S3S3S뽺ޫ`41s]]]/=`,/;@bY9O:<cힶ{Gb`Aчo]~X؍s?/'zɌUZ^iy:0Ѓ˚IfKAUgczs"Msְ֮[;Ig=1?8Cr+n즳 FH휇@`2dP`4i@:>u|t7.4yG;RH9qsc9\p=a!B!aK{q#yc <d䓑xw^<Hw,kYֲfTQiF%Aș !g8` Žꊽغ:mw]0B;쾳N@ݳAFGoo/,xY`7ixACC{#Aw^{ݻwY7E`C K1Yc/:ko`!B!g-ɇ'FgOƟ?@?h;pk;?c`pr7 !B򌦞׸:;Qx[qoQLmjp* «nM6PO .+wA<@=^ U&.M\ &\p CN9C?ho j%Gk !!4|B!BS1|.O<2hhh jo׵YB`oo3z=@yM5)BH4kb;.<j~^v:#G3gFjY,Q!!HrYgM5/o_޾)loZScNvD ~CN?5|"B!$iGh+#`>I'MCﮗJ+4;(̺2됳9фBkNVlVWp4-A6SATJxwtJWu~{UW"E4h⌐L{cJd7o߀q]whs> f{i2e4h3~9[oYPVVF΍)'B!$iGa̛ylh 0+xV` ^{iNxm8H# 댯3 ++2Bk;K& |/żf7]yXI;wr ٶg۞m^`_8kddddd$1lc05d YC|p!GHƙ밋{./:hC}zAS/yɼc=Xza酥E"],SB!Ҍ0[a u[lll[䜿S?낮 .YB!ySSM_]0‹թP'c|c^y͘#DeQ06qGJJLD,{鱓{eWV %c2&[MəTPm4<8[6mm!φ< 444Dm4!8Y'zE~ȿA ͛֊bJSfKײ^z-?H/ f  dR} G=zFcmH$YB_IpIB M/4Ɨ_b| >5>5>H@B!FxMdž-_|Wr\q%gO~ ~!!!!?y8qlX9uBj0Lv:5ByH\iӢN:&M^t֣a#=2{dVw_}uw J+ȹ00 -j/j/j3ggnN?5֬Z*0̒3Ke'Pv|b3R;wQFFQfEY_B!RHe#[{[bbb€ѢѢ"V[:ҌvvvTNS?l98 !q~I; VPzPTu4Y΃!4?wIdVǬY`wuvZ/iKUi+4=_CCCn]vxSM7A HO'J\/quiYӲ@Eˊ- +,pppͱ:Yd@s3s3s3 y}QmO<= 0`ـe|t|#B!<X_ 8q4\Gƹf̖&k"0#lF،0@U!<WgV&||]4LLY̟@Ir)moK-HIsKsKsc㭎:҃+ܴkUת.cYmV16r)#0SSS^_Xww7cPY,H ` XbY9C$aע^z-~"B=؏)))))))))))/s9ﺨ뢮{uWu+Y:K\W'$$$$$0TS-NDIIIIIYtRe"Nw Fl֥x;Mt~ N:`ggw኏'O:'>>1c2vdG2%S2e΢cˮ/:cs>3b%%%%%%%%%%e1H(q 1y"gƔCCCs sJTy26{쵳2&'']?ss P9xu/\GԹO|X5la6cO.?$WOРAA3aø 'ʂo*WIU&UTOß2&_$_$_C>41[VwO)~NIIIIIIIIII?iC,[ofݱcw}uCޑ39,r]5{qzQRRRRRГ'CO瞜{r ߅#g.?<<<Ov`؁a||~~~ȩVkQld~z鑧G &ԚPK_* !B!z;0ěofff:kKHvlhZi?"P?!lKBѯXM|%AYl3ķcu1ugδSɧO1QG~AYZo sI z^iߧ_EEX0~aOn4$pzfPvB @H|H|H~8hNS;Յ Tb\[nWǹN|/N89$g*@,Ņ}| =&3L@@@`w %_G[q500oqF`l㱍6i4qΥgbbb.9:rthDN79n}@B. ]@%PY B!+=VoRK.-~т?2e|tMSJwFvmB鈦#fwqvGk,RH!-ri(pş/|jվ=w{7SSNE܌y L`v=6mc@^tzs+'WN,f{VVVj4xNg=qB!B0 .5ּ[t@2.4!4ipg2|Ryi/l 4E>14wHRѬYE3E[4y[D?*"*޺{+sS G NE~rA傀ߢ-pḻrXnżfx`͓5O<:﴾z`ͼ5}}}?RLd"9#:˚O?L=@oގ[.n@Aݰڑ`4""" 5pY＾Ng}ɄB!RXp*#EN>;H22e$5xB~'ǻw@`']8g4]Ȅ&f4w@D_ur(4-/H!h5Vc'C'C ,8s*=j~+hH9%_PmsJO++K$+bМއ{F.tR`(QZ?hӎPP\i?GMZi 9y䑓@Į]69@$I$ANC*32CK/ r6 (B!B C=>Xk!rH!. Z7hݠ5`k G lt~YOk KY:b>!yD3D+VWK:,tL 8vq`:unE(]8/b@w֝u{K7ߜ{~od:u }\>|,0fTW{_&묨 k'k'kdGgGgGYmf^J/}B x-0 Lq/ǽ\ir%`wen&M@9甞Wr_}QVG=,{aaaYYY6`3tMÛ7@.LBP&qqq5M؄M0@{¶-$@uKuKu `%v PS'PY,U*QȮɮɮiii@iぴ3igR%KnLRxuեW/M_@|t|t|4\7nr]7cߌtxM >> nOB!yK{ai,W_~5аbÊ +'R8aTM5sk wrjNϾ|w>0r:j"0:tv  ttt㻐EmHr!7M@OO߅$zsسgϞ={f^ͼyპH#m\kp- nnܸș@;ŷ2Tgj*7Twu>>ը1VO(9FqD%`kYe ,1vxD($ *03l -P '3xdv]b)@|Rj28(׷ne]=HVeDuޟ1$Ȁ,OnkLakk ,*Ģ#ȿ#)"4;w{cGaCNmB!_??%%%K.qkf/Pvyenkֺ\nw8Nw8&M X_d} K%Yghhh?({({({6}lB!jU@v *$IIYIYI4`B +xݷw}ӦMOI Cc_-zm,,_.|,-ʦ9" *w&m`wt / ? 18|O,`S-߮.>y`- iFƑ8=Z;3wfziYB~ ΅GTQn;x !1;;;sρ e+P_;v3̢̢̀[n5 ~7.\g>x&.]Z;!!-kkk`-ڎh; I!})gggTSRAnCKBiunkNM(,l0(S`2dCf 9#;Z[?t ,l@܄;?r_^oV8H ޜʚkFR@u^yzRh)"{0鴦Ӛs1s'&R"%`7nDJ*׬_~Mg=۟neZ*`x!KO__:u(Ns,,,ݽw]GK-e:w !ths :tj)rS\rHHH뱞B׀`y%ڵjת]h tҵJxxx@`"0zRh~5v]֭]vZf71TO!@UW^mcƶ/_]*'8g$)5]". o|yuZ|M !_̰a2cێm;|JLL:|tӭN#,sYL`0ajSO??0o&HCҾM @:Ӏ6t]!H` MP 0KїÎ7r#@߻w lBYDZDZD5\kpZ4lѰECI&՚T* Jb%Do40_5B @ss3pfʙ)g N6_Irˡ < 9J)fZMl5D`{巗X: R I%ノ:>N > Rg-+%󪂉[iPG?87Tj4ѼFs VHZ@痞w!̐̐LGяE@4M&Tq_ka®n}E( 2H p9r.ϼy?ߨj*V= ?v*ѫc:6Мn * JPu2aLOP0iiiDzGzGz'bNĜBBBe"YYY|B))ؖ/Zh=o|BB)n^{}u`Zi4D(4aNP͟ܫכL8P870[k90럖|-*P?6 4Ӱ@^Wh*e7\V_V 5T 7c:0ʡYU@ߥr3Uٺ Xc&?@LFiڸY8cS#%hVoZivI@E鋐oZ%h^9+/ro'IgqoǽÉ':8#sϡTs*Iaߍ5knM5 [[[cD:Vu O.%V)`Yenܶma>!6kجa3g-~4Dψ_ܩ-ٍq%S:<@H Zk}9wNս;ܻ_r|%: _t6l 1ؓ/Vow~?x~vU_ѡo!bp`:c=^* " Ǹږ&~W\(8CU 97NG8\s΅;8dMM?0`>dBHƭ8wLMMF 5h__; 쯰_s}(Vʭq~Gߡ>Rpw@&MEU^T8z轣5\sh&M:`޺u{6NaD!E6)zS&`q1@ a6!.2---zQ].=Da%!E熈ggg4Psm͵5]"scSO+C[mn1c@^G" Y<Og 5x^W;7__ĵ[JgOL6TXE\/.4 #X#^ n @@ffђy:Wo6f{]w ' yCSa 2WJKB0t79KۗzݪwѡIDAT+`杛wnf8K/@Wl0(aPH% 0 ( riYӲ@={8F~z\|r񀠒hQ!? 222Bׅ ]^2wa !U6l&Lꖭ[nY-f:8~'DQG4c'yK{C11z{foޚpEB4!4!4!8КCkt֣N%87?c:Sxy<^^|xyz2 c0F@+S%%UWʳ6FlYi$T@8䙓gN*AFd#6۬nl !OS(8)8)8 T ^1pq هgۻn/оy:í! v"I&I&I@UV5Z,jբV@GG`₉ &oB{~aoEoEoE@"P^f| 0F# B!@LL 7z%%%|Жg; +S EnXk>\8P KǗlڲiKhN(;W\se?:'gUϪU;;|x=΍.o [nݻuu{=m .4 ) ;h!Ґf,"V㫚 f3*O6l-O~fpʩ+謗O QDDDk7MMM-OR(p+5@ 5\A !Bʅמ=_C'4B{« }8t8pn;髦mmmd":ϧH#}t,?}RJm+4D!$U (. 3+,wMe)87Pꪀ *ԫPOg=ddd~73ofT2r5r5rjѫF/Fp  VVZ u)Er zNn"J`"#aָwCړ9ڳrl %& O+5VLaXV89+2V۫ڶj->_r߻~o`EWT/=R`kƯ\]]G€{ޖ__/Glۀ___`RޤIy|86@rWX?p[x[x[8lj@O!$9pp}fe%rFs:_\.RTinVVV~V.\¹#Gd6߅#7oS+O9/~.PQG+쳲|3fM`p8ql AHrז,Yubj6ym{Zi044ć#ДmpFY4f)Ȋ#+ R K!1>h| PJ+tG$fO0Pg[|HS8f0k5r"̨2ʌ|fTȈ!#Vϭ[]8RؕXf`@ E E(?f<_Ti'j"ph>MfF `dR^h jY51 'E|}M_2|4YYY*PPC~⎐=K8K8 Y;v$"pE@A&؁cR7J(uCŸ3kf]lw[oe:x͎p6:nB 縳ޓ{O枛{nzr!绰B^׽|ΕQm͝a w ;`3. )O{:5s8po>jǀ@ ‘ZA|D6/3o4JMY{n7q'bOK_5{w{w{w@zYzYz@?IBȷΩ976ol跥ߖ~[C 5<7oPnap#GM7w7`|Q:=. QBH^7eάYX"kEKݞBHԒԒݨw @PAPAP6')D٠5Y{ _bS/:\xn(SL2.\Q(3ό?;D 2.)   v+tXϧӞO{>O8-P207P%>+HdDJ|`w9 UTtGBf ̀MMMIGG܊0M}H,>}J[Kn-$jĪFm%ҧb{?y޶z*߇5`8p=B'h+97V }k~_;|E-Z:O=c !U.Sr: Xp;O5> t ݐ3U MZǎi;ҀO>;>!_ۋۋF%p:4c nk(2.Vg-ozB>C-x-[4D"r߆sc:tbЉשSu ,MMMz ɎˎˎʧʧʧJJ}m5h  E[Kh7VGHtdˢ&C KTUU'YO`$ O!DvHlmf~:fu= {4ƴrLK[e"HTkGJ!].S"H~jܽr]w$G:=.RrBp`+W$H˪˪#HTBȗnԺ_~t;vo~R$yu&+4@DuVyyT穀^;t/-Qc$ҍL=E 5OYIz6akaka=Bct000֞]{vY`ԩUB:gl؞fle`w|||"ȩw !s8 Y!K!EMs=)\"\"\wr~iK_V+qmCKqX^{y嵁$U*I'ݷ"5###kή9f1]qxdVF y}R1(cPh~ѯ_E+՘#sd@Ȳe!ˀa2ZR|:::~(1_-[([-˪YElt " 2?hhh>`˸q4U* # eddd U*`ŦVl*n7?!O;W7tr1sl껩料@5^x >)f!zs|9L3-?Zg=E!+vvv2ߥ"I$vfYMUO_^`ߨayuVVK=N{uՉyn'{8u댗ԂUUU dZɴz!!!={dx;mr3@Rj"s*]ˊˊu-Z:{uj sEz 0!5444|}}?y````qk P&O'5]qqq;lTSaO'۟l$K%ld#;N֫Zj BBH6nc;//AKu{XTQ@".SUY:);JytoUպNӻ(ݫtҽ:::CR!vp+]R\___qy 0-gZu`-UBq0cX1lm1\ˀpHBT7y4e0J~y\\.{^q 纞|āzalŁ% m IoD \V?YԁߙJ]Lxg)O.M]<*ࣂ&qM⚴=I7- TS-,z}߃-K$I=g\_ [7lݰ5Z" >IO:@Etޗ$%{K16TCxQGA0,%YYYP|jŧxkg%OXzNƘfcZcˆ1 JU%; y}b+<]wEk''oB l4` gϟbK&K~j u9)m(L @mϑh?ἇ].\v<?=I{IRfxX__:TPC5X:xृRJ*2{$ $Ie*[>-BOa^yAvзrI$IK~_!_x~N.)uRa"EFJg,KYOwz{âWN;5]v=\_k2(IX$a 윰s lMp]!vVYi?ff7_}Hu8I A)l #Ӕ!BuE"\҇lN^7ꆶIa6(VXbuASS3 7.ܽzݫi$)C3|ׅ.]v}zV[n0d,d}Zi0i_Lwh^pvwvwv'y0$I10Nբ+++RtKE<y_}͞'zI$Ixg|fX6^#ׅv6R>5i[קU[eō|;^OzRJ+PxgᝅwZ;L,Z=jkU]w=={ŸkÜo) q+Pf\Oi?v_o0Ө9bKL3[0"'(r6l`@N&L8 Ǘ_z|r6}bꙙH":::UUU0㳏Cyik~BN9gם]wVP7ƞЫdJK~X]Ż /r6I$ ^Lbp8q29L3qDp9!$I$Iaaa**wܩr<1ٱ-qVͭXcFJߜ{F"ZgHh?-2ʣʣUUUՠnnnj2;?Opω>'X;Ip׃4`?áÊ3{LskR 1]D_qpyƣooK>HcDRx!#kOyKgp߰ίs~khc[h@OĜ9zdIΒ%r>O$I^Ƣ!MMM lqËi$I$IԕzW]vvᲁ3e.7(5J k''3;JXt\jT QDgl/0Iz3ͽ{72G-sd^GGyxHi$\:iݞv"fE̊y___h]vAu_u_uP!QG[[FOĸ;ꨒxzgQ~&7O,e }~mFُ~P$oE=F PRzJ NR:RfQaw [9l尕0;wϋ9eaFz-a K@P +(/ʋ >@TD%. p[;yIMcMcMc|s? M6xDxDxD𢡙$I$) A"H@Hǐ!M&`q?bNj[{[{[{k''3wr}ʼJi"~$_28 +w:i>o$3I'NO?^^^J#{fpEoD%*۟b}x~'pТE $LX)Kc3M_V:m* c5{҃S[kRj%EKNH Ji/+犙fs /Sc|SqgQEyA'~@ )4ox;c`!@qSox"IE!a|z !B >">">4\GtS Eymh3B)C7/.>V](omNt49Bs :=&d*HNBI GkMSdWeWez (oobqͳ7ROԃ)R: ,5R쓳O!a$I$IR:+Wr/c-iIKr}# X;))r3Nn\0wjazI|_ic9hV9w8*تb+09l2SO /`l$LC+Xz[m__!;i>@3L4ٶfۚūZN2N `ٟP0cAb^dXȚ9H  Y&괚3EPT ў + {/){# F7/ c啕WV^  t,б^4R[30f`@5_3 :^ IJ,zNjx᭠}?~===,KoiWMbq7o\_[2l%]tL2dRKꉫ'M4y"F.\"DCCC99Ι!3f2 u;%wJ"FM=bu:e8rn Ͳ7^K/PB 5.] @Aς=ЃB =J|+c=z! aϒw,J(ЮTRJ, l16"lDr)I$I^]xi⥉+6Wl.p(PġlllOA>;󻵓)HԸO{Ot.D[(K!WOPZSt[nToX1HZ/M-8%B<ɯudQe˒%Cz)RVvz-rTSo$¿NgauV4zh)kS֦,/P+~Dh[og]pvC =SxvgG!qT!wUOo,n[v[)2506 3L1;.v\ >3 >7 I$I4,O3=m _<~*86o߼}A=N8b*Z;I)0266UeqjT95&|x lֆ}귫߮~;8syoTJEϜUW^6\papppa?,zA\qf?8BQލ5a^io% ʶ)`evp@glPKr8!Fv^1!ϲF08>N$oGL 5  >z; $>$>_iY<K RF`,+jE +lrí緞zn,KEAgM7l*[d,鳤ϒwwޠx+ފY{CT؊koM=V __~; ֣Ok/t .pa`ȱ '"@K=¿i- S>y睞w 亮b(c͏5?vfݙugo$e\P¿:::/|q0C[Ms(¿dUץ߯O[?m5}{~نf h\qhSO >5l*覢pɝ'wOv!iB҄ ʃ+ѻF cVY1fHh"o軽aí 6܂'|pw;N#HE^U.U.U.躽a䩑Fm"I$In5k_9kgd+@{Akg#o>_w5jn9GFjHkCg~f;8w(P9sHd- /:ԯVZj~y4e3f004`h^6PsCM^^s(ܿWnEܧIX]qG@A's-_ %W鲂KNU R_] q\D|d&6|KvPTl)<>%7zBhRJΙqpgkX oJ_0`C 0>Cׇ_\~۴hB aA4pppodR)c3Pg9Y9p3|Na>^u=gj eX1b6ls99qXps7!M75kB}Q_P<|Ip$I$I-mi 7_|y3ςxW'g}2Ə7~vVR/5-5^|5駏RSRf;3R&Wr.Ρ; n6mvVGt@t@t4xPAp١f!248883g|Nwz/lqCt ˺ϼG6d*^iuо ɕzg }6췲lV7ҠjZ,#@[l"q pPȏ КrN"OSgC/CgxQF?NyJ f]ս=5QD_ 0݂+k1k1eǔ6W0 k#v˳-϶V?y4/h^ҷ ٭1R26cv=l'~~~ޔAONN5koe|h 6/o7֦[>I"I$峗^>+D*PF-WWP_N%BT*'Gn{|C[d9/ډxb~&Ѡ!K qЛ8`ajB8:)d!~գgS6pQ^)59Em?",mДWc_k({G~$ā#8˷F/BawSmNfya]:\([êU[#oXJg,·&1cNǜbݓvO3"=r￟e?':t={mnuplñ DŽ3,iu!oka O#?|u U:<(2(m̺<˅r }1L;OӲN:-(2(2tӅX|ͮg[s;w as 2xJ }ϯH;H}+ą3\8ct擴8iqb!>-iOKM- Pn}b /0 $dW\(ߎs;F?B(e=ά3jԢE׿WQ}GBy~/yҺ'D܋?_rO=Qt-[~ bni2{q 1[VXb劕iqxQUUUÅwwwb8qB\s}1Bb^:s(QÍ7:wKޗoG6l\[Lo1=?e|h`QB,ͳ4LAc~Q׉ZNNN!<pC!RʦM)kyHWw Bh0B,^xBrrrxJ'S(cZ\bV[!C>$ĭv3)yHSK ,)NANANA(2(2Z/|RI'B^ zO̧e>˘bJ;Dmڴi+Īo~|s2gZw]qW! C$J-n:q0Gs]0%wubHx .&a `p08P nnnM6)ۤ:v됻 /+Q[F kR=dH睎!fE͊ev'D>wһrQ:GuB\ qB8-߇0!+X>!TRuJU!~4|dCŢA\դIW2}<+>-g>Q]DuJ*t-4b}߷B~k_{]p}Eq& ck QukխU 7ۙYb;Q"JEbyG""6"6"%bwb.O?1Y1j?VڏB "u?5RұcIDŽ~W]h4F ~CǫգW*B(Ci$z<D"Y(Qg'BBF !\?nwhȨ:::,D@\@\@^z}c}5[b1Y*Bu[Oǫ2(2E6ml&rMH X}xՇPMSMSM-czFyM>1[j9/5V'[BX?FFF= r2If|| 7:0Z;+I2;(~*SJC1b^ż0<_H /SaM7mtp雧oBڄ k_>5jԀ=z+W444?nЦ~mC-<9|r1{BI$AjnG"$6`$?Hz v `$k{{v-o*U ݟ/jϫ=fϛ=V^qxa^1?ϋʸ lͦg9YDe*>djP YC{wSpk:.=m*y]8ն\]Zo nD~'B|ɿG\IEty)PI 2̅ Dv_ohQ'jATW!;}u[p$$|KA}b:ޗoEuȡC}xn﻽v(+A VGw38n޿y}gu? v<^$I$I޶{ðG {dl2ccc:h\qe!XcJJn}~_? ]!r.2/~yˣ0蔢S8l2EsY4^zEs1YI;kuם;w4X?na1} ~pᣇ£*<cfzi]w)TZ1kŬ̡C3wzG![lŲ{ 0@Zibq6|D/}]_v}uML B )q2qƙú:3[^2&m/_T?X9tЕCaz}%ɬ o;k;~o2 \I |V@͞g5U sv([u8~Wރ]֪4$Un)@7P]E 9O%QnxN" L8)@Oy#=/Q8 w`.a$o_!ʯ$]קwJ( 3P'D/:? < ܽ^> ܮ4o {ٍ_v DMovk60h$٫d t=Z.]ʻRJ?OSNhy$I$Io>U`SLm9m9m9k'upիW^=_oj)|jjj<]ޒUj455:[{Hvvv,\(ڵo׾]{Wd   K@.{od!JzoYf`fÙ g6}c?%\K7,r`?}UUW:\. q:Ͱƞ=Cr+UVT[=oPH"%CCCKVd14fQvvv!r |q043434/TIHa@0tuuٱQz=#N :1{OI$ 0{~za-S u>E\bZ(w<}n_i9FSܖVRU[ Wr2*1G ڰg ps9H,F&Xi@!D~Ax-1eZ+eq8i+( h;B;(MV$CҤQb풺uwՐwN;UHKBk$u`ͳn)YBT^3$3o, ^q}UVYXe!|_%k]444,0!0=lz088qp"$.O\;^$I4SqPAqm:Wl`bccC -8YI0voYj?I~%f]"el^cz_jWP\S\S\R=x? 8ٯ~e$),`elؖ0%zJh}7= }/{&4IhB.\ ]wy\9rȕ#p+Iw&ݙw>x' 7&M )>)>)> ETi њњѠvvvxj +r t* L,2D(:蘢c/// r:tۛ,hj*?20gsCʑ#)GCJEO:ܫsMX6a:3̬3y%R:Q~Q~Q~ƒ ´rO }mf9P=dRKJUi -C^q|67lnuu#-Eَg;vBۅ mA_Q_Q_ol)s; x!knܮbҊI+&A:W?ҷW_皝kv5ָZy雧C7͞Q{РIk?UCif LlOC7m @ٟ鶁`7NH9jE΂h,fV@WLZP: |(} A`9!HJ( Vǎ3+B&=$}~ʓY?^gx5 >C5 xxAUFV :j(UsW]TR*)Xbp##n]uuhOK$I$!G(ګPp fPW_=~5h=ּw#ISgR~}k~D5ƶ>Ǧ٬ /T0ĬJg8kgY:vX7ߨ~$sϵ3L^7yuyKZ$/={a/C~ Yf`XhXhXH!+_, v:;UVuZU躻Y###`eW~AМ9As̞ɦ,Ejrs uκLTW:Yh-P` x]pҪ7 :7E3n3G g<ǀ,5(=(*OA`0~ .|x=[w: ډpiéɳ!DR%ѦxōBvAGw߭?4pìvvY1cŇŇ#?%I$Iz{*QJ03C{g2նmWBmJJNMnƨYp15mM2u:Y FYj$/ Qzc!.]J;8hy$e{i=th֡Yfަ{89^LCbWF߳b̲3,k:ꬪcV7 +oJuW끭lg#͖v(܏rà:fkK ^WFɪ}ܷT;{[Xx]{EÄc-g?{KrI䆔F#LC; o=ÉwȴHFX)bpP:7 %~*.jFm Ksؐ󖞾@1c.u:z&-kH2Be=^&zqTUUן$I$9Qrnl6_[;#{ų,׳\oFJcYFXBJ? ĩS[P|}כ={f!kCֆKO/='IӍUg[;l9!sB@œ9 sx1,e,|444X>x}0ֶ[n﮿=}z oPA0ҐJC*}UUyQX 'SIǓ~aŒ3N8 cs/޲<*tb|v{ .1˳,{hs{2uePy2_) ᄨuxHwM) Jq<(Ca_ppUn juul `¸_f*Fm6턐0}~#xO)RV[=n8hSM6uaǸvq__,/,JL߻%˿/]vŭ$I$I[o/f2c|[Nn9yN>w3_05z\KC]9w~rv6MMM5_ |HReY1``/p7n@Z(=˞s6`O<|s\]#FՄ W_6FʈL# N-Z:ÃCFldeXJL 35伖>KC| &(0rz-(nQ"k''Iiq]yyyjhMkZզ iMҚ5ae" eCTQQT⃋.vulWx\a(Q2${J,,v|tZiM-^{L|ϗ„&|4#8&ܚpk,zwy5Ծ_mKXأXS[zU5osW> p7t`-'sK7c9\\ɠ.v :qCY1+hcNz\_~<#Z-]޾8﷽0[ouk#`!0D Qɘ'cŔFZd]#Tv^zeȑ{$I$Izc3gτGu}Td6gmڜ%rQHܤԐ}k6W GvvvLC>K)RN۝;mg$)#8r#O'~:tXaQEoffu͞o9ՉlvYްzCbc)Zj٪%:ஃ`hhȋk퍒7dAhTPPԶmSW  ?sdГAO븯㾎û87j\8պO9s۶utqZe+~x|D_ *"@)OVQpQ4&l@aŜ`Avz-=G%'\6yf3}[uvA¸q `fϙ=gn=n俑F~百ujbj5LW;_|jQ_-^$I$e8>>>\+Vp-nnns]yEzSj}8}>v6sw =CvѝH?#8L㭽RyM?<|n3gϰv61\,n^oy0N;AM7/!xhf뱼Al~g,E,Ld2}wh5՜Vs{S[Om=լo1j*¿Xl«4 j,IVbz,k cCN;-5RSA/ҿE?@u2|ոK7XuH>о^)ScAu'3g9NzD%EGrpbsQ.QXzc0r[{(dg~o=¿+ K.wN9ye!9}^rʑ*Gˉ.'VK,$I$XXz& Y;#ldzs.I^+x* Z{S!O*UX;L4TљNg:'>|V7`YwwwKKK Mz7ݤ7L7~DAi i??-*|lvбs;is$OF0!O<_~5```^\GXNM"[xt<@G,X4(Y~df3-zs>U #Dn.,VI.8.KC mϪuuΎM`ܮ=`zCosTա1n( _vmڵiЭeZhPI^ 'I$ъL:VQ@wUwUw|pS2[^6p$I$X܇ *T<8$''[;''' 97snfl1|R6ko9n\q^}xn O?mz2KL(EGG#G<`薡[nƾ}B=n {=O?%Iް23SAԂ~=zAɾ%kEC3,އvFu]lwLﳵ zЎRAu`^k䉟Z J|7Yw"++I<2GZQ`p9yx4CN=AEnMb~Hg[羟z꽫.XRbI%%00`ޠR^WYAQكa⁋.َg-/I$I/|b -hl2pe7ǘԘ}QԸA5=_Rgs}]tu/Zo#G Ap`8}$_1~^QwLrLrLe )\jտV9樚H"-7:H9ߚx~MESLx2p=z~hξ;yg杙# Fo˜$5s]37cr^YxޑW6ۼsi<8x51S|T]㔊c{jyfB_ݢ5O?@SE/en)cX(_R gPR.Y@4qZ -#D<2FS _%.?\QJ~lV8&DYD p}b9'sۧԱ,Lz 3y՜Cy*,8v=2.쌟ܽ3q[6kجaͰͰ >ϟ]vG6qJv B'}yK/"I$IR],Xt1x}Sltuu!..sNJJr&050UTr%O?-8Sjڛ(el\\p1b?1]*$Gu{ ,.hϠmb#~RWSC'J'p]hF TdKnK>V2vpnnBu P5'ݠVnPk|/E5nl"w}=*PCh@}m0Ax3_͞o:k[k&wcCS9K,M4*}WJЭJ*ݪ"Mo9Db)6ؘb0&aL˜WqI$II:$uHd2'< 8㰎ݎv|}Wzؔ?KI3_KWRVoQEc~ vVGr ͺ7략$)#QVтjjj4?ph1D%*( p0771QLuY@O`㥍6^WJ_)}#Z^bGw4=z7n *cݐ7u hT+oGF%$сIQSTC;O($KXz~zR =] BDW6gs³χ~kh0$#c@E&&C{URTJej*𡮲?p(**a9)^ 7(4{9NdsȒC |g)RNc00<7c&15PR)-hYgB &rۄ p=8€;g* nnn0qiAntJRW6ҘE{W>Qgݎ:K$IMo} F>`k'y?sлFkX;)}mL^1Ը͸2D)c[o%`깩禞v6GTѨQEYfՃ}SM7YI$INe! Y`x烱-ǶA e{pyA.]"ЛCoSdyla\Ѧ$CyRl@&w<tG-ZPC\@RՕ@opH2RëG=l'™%=Gkw"5bۭo_qXQtX}=ni@:hC?r偢Y}@upf *.GxNb cAE ALU p/j}Se*;ؔI`$>c5$޼k#xyy3h .#I1zݷw_Ht)қW$I̫O'N>0ּ[nNcvVڸqkmLۘ1mXhjʦrOuD)cR^у|B#B#B#՛Woq:$I$`1woE=oPi+眗ҘEON?^zn:t` D]VRvAs:l5>q-= _06 (zxuW(Q; [i*dSem,Ty:Ez`Xk.;x" &.p砷1b/[Df-4ѭ5%&^=$I$I&ws7$/O^4]4]4]UƗumֵYׂC"EewܳFZ6c'ko9q\ .n`Xd20^o{-e  NvZ;II$IҔ S ː.C .̻l9Y,Ǝ;b_\z1ŬN= [ߧNG`U@&k[WM X |Sc.c3)*dG J}@ܡvJtG;q7%4ݿ^}0.zP:&(({I' mYL;[&#o=±c" 6)6)Vq$I$%W\qu=$TI WvqԷUƍ?d8P0Xst4cxR5MEPef3w]nx{9\r+f˛樗 [l}ߺV[jW]v5C+I$I#㉏'>hl2pn7u\jweBnqIz%sY3kOkgy$5Hj.\rbl$I$Iz'(((蚳kή9o{_|7L,cÌwxF=`~o;ka*ZZ^4+`v6}?Y+F:N e"ֈ2\da,0+i+/R>5⨐?f۟FGfW}-t{l\x&:ސ%ђlfvYOd8 {_+\%b |tfN3`j6-Y=2$JY!r&A9 8U()'4N G|p-?̞gjpSnN67x<3-ZA@z7':Nu 9.\4z$I$IItxtxt8Ï>4[Nn`0+++az8zqh` kXb?HkEO҆¼gmO/FS<QSL ӽ 8ԧUh Sp$>c0l;OV¸D= ?OI hC[Rx^7N HN­Ol&-p_OJ|M (Ӥ޳+9I,"#P14mmDՠP[ےf3m505pR2ŭ![Ccz 111~#=~9'͖$I$;{𙵳$I$)M{Hj[i[i[Ass3x,Y ,1ڒkK- ?'!yRIr]L=}- e]f?jsʽ7&?VB99s]u Uɏ {pkŠj9O}u9IDATWL^NN$I4aZޤ\`ra[Iibh?0j#ADhDhD(@ $LPyٔ-Ttktڂaa:@>ɤ!эW]ˊ7'ĠKCC/W77iMX wy~ Y`hdQz~K}:[ Ng݇v?, _Y,2|+!1 = %nhHI)3|F۫LGhvd]#Sz8?PƞIII0섲–R[Jm)enX\7T]ytPeZ-gj!I$IԠAm1Vc\mmmk Vz%%ǫy.R{*g+,n\)uԕR0aRCk''I$IR0Ӵִִ;TP<=={T7Bt! 0° 4iSc%䥼|J?u)3n %l$9nl $#@YI<@W56C~{o>00k1/- cYC7*԰bV2lӤHoɘ@P&)aUNey8d m\q-b;\rʥ+f˿xٮ]S :7DN I$IҟVxXaПППv6g1b@hm.mRˮW-?NWTڛ"el+Wxxx7_*a^¼yp-Z5!wdO I$I<,zܕQ"GФL2Mʘ-'[-VģG1ߏ~ 콶kf˿1ӫXe\ S\:]6L _D(1o,+Nآ#3 ~ 6:w8khhPdsRdnf,dʂ Ѿ8xO{h|~!ڑ!~BV×BKP ᝮG0b {,Y~eLF(_ p)FU~Ty?~(/FRSܤ-*wܩr?3HC$I 9d3$nHܐd/_6mZ;)}3%G7ES*O)p|̖ Ӗ5]9b刕#`b)Nq?F|gcR|vvvL߲k(o00 `gbtw$]L%n\T 7 =y<n]Z-5<;{z{k-E@/Oqtyɇo"~/| L O: ^$)ԯ9>t?5XmoM fշon*;,,'N8v߷`njdC I$Il4)Dld; rH$IVY\OZ]hu^{-' !i+D_Lؙ3a0>`|+/ Ss#4Ӽi~#fƳD(o_Fd)w >DZz`sn0 ҆qI= ')\sHXϖ?)CީQ#Kc񩺣S,~_+vصb4i_$I$IE!fǛ܆܆fYI)` DEEo AzDڢES{{WuBu,2ˇ?oNg00d `PƫYŗ,AHJmx$J.[z\_1*g_=T ( ( J_*(WHSPa 5@sȁzb< [|~{V$ ܰnQnuxDGqhhr+PSrRǎwG6 e#>[ &Ŵ"]c>׻;9Z16+V |3̅E-/{ ב#]GBkN@mP^|OJ$Iމn>= d7:n.s]Z;)cmu}Iz \9s8[;L 7!SRNNN$I}olg hyـTe4bٸ5A 2[l)cfǼy&:|o|6_ "HT$?8D2o,8*ciJP>VN{-%xlbiFa!>u]!mˎV;8W~n^mQ7l{moMiK\}uuUrt-U*T1\*BHC)CreH)CT'.q(UK\2'óW 31Wh؛חdP"@vl흘,?8K4!+,ݓ ׃lbiwTTSDN1?IL-Zz u|?}EE?q1?)))*iҦI@YY}V,k> |"k\""}$I$)MMMkgyg|<шF*Kj<9G7?6MВ$I$>O+>489,tlj'vN_8}!$&&@Z4xOFz A;_e>wJE@ yL0TrWwO?1Ŷ7?Ryci]h|[LrUsqv*+[[ w r֦|ͦ 6evpm cJ2B9A٧T6(#(d3 TSOp &Ҙ@Ak`. =S4WrH!ᐸߓsCQ+BPJ̊0;@<+?o |hurDsN iҹdM@np8C E2x1ƑB?zErѝ]n{#nBZ16`HI=/T8q~ӾA5M5M5 4@~7o8hovVQGO> nӺo*Xxoax{UlN @wKU ;pnmƑ Tg/> `f5c.Ԓ{4 qNa>R) "W]OUG%<6XvV@σ T[?ƐVۺjnbKt{A΀$( ns$ h%`_26%5aܕ CpjaSȑa6<4|NUyu?6 XT7*vajxt,n 5f:ZY?Q7e1& _4 dE8IƆ.;њ;z]Rc9N]`7P-e ɗ'_|N*[+v6$I$BE9 65eZ8ߘ~`P$K< f9p@o}k|Z5f¿ @9 TڟM&&7k?@ &!\?^Μ=w9G j", 3[yg)?ϯ'*XjS+{zBrwЌPj(!^X[.Fj0iB=/RS =-v|u>_œ J /~\uv$J_ e*deAS獖|6 t31}@OQlF#b5AGU+`s\W}ݼ(ۤyb'OxܓsO QAQAQAf4U9K,@Żjň$I$e^aKÖ-$$$okgYru'hNkNkN[;9)}.LYuY;t1t9reR 7n Nr$IY [L2@eyYfvY\?oȾ!䪓N-0mN:h2ƀ n50=jJ+EyVn ? {O08QkfI;McqtW=W_(LZwya<8ƩZ>@-,1k<#;c}hHMK>e?h3֌={,x:}4"~Ykl,~ $Y _V 57V%4erRf =ՁSk8bXoPka^+v>j  m>?f4q]h4ѨF /$I$}5jU.]"<\Ns...FJ4ERlG^S(k^%Zܖ-s[&9n3}cfȹ$I$)ók׾/4٤gkR7&릨Q3f[Oo SçO5[4E@Z9<ڥ[ D.*Ay }{~TM\Y|z\^Ky3r՟C[(3gkf/tչW6:XuaҬ?Anl{UH )%H`1Xc YS4wHb"+*Pp6`b1zX}Z4'~LtsφjGUs7L(?O@^C?5SJzr(_cWltH8Ta Pߓ}e<1QDcu{7=Jn~)yj'{M b kM`o|z2 {vL8Vbb*J<Ѐ՚G0em>a]Aޓ?j-S$H=p\"G6q -|Yh6$I$]Zkgy^tz1x0Iy&NYʘr>0Cj7nأLM]a25K-ݖG ߿QK!?nN? ML= vb nPzQ; lr} ’/t:VX)4O777wvuxކ$%II r߅B/_~?!iB}}} ԍS4d-|IMwDž&U0*$II1)Rrj O˟?4B!viڥihؼak+SGO2z?~Xb cbPgR+Ake{zNWTNx/WvwD%we5eKWxuhʥ۽*Lmg{]Lf3h:*J86uZ?+k ,\ZVLf7`Gv~ ghGΪ;oH 8 B/~dDgDgD*tXXX@watQ2e>;/_aOatTQ2YwXwXw@%KN:Y,m{|d/C!j@@]w1cǬ7:T;i`W]w…+{/n}^'"A;e;h21埞Qs /s>پmn8h,5^ڲmB2CqV{Zy>-YA\:_|4M{qoZRl0MP0t.).-V~`Ƭȱ;[ES> υ3|o26z]RM'%%nW011~,S-S-S'BiZ .&\L0:T1cF q /}د<'ʮ>}& V[nF    pvGW\!Ċ1n#t*ߩ|d\P|z nµp-0cāMVY"<\O lRڻ`ĴR8LTFSGo"?!} .l0A7'*0X~1v|ԹwAeeڄM3f>Y Ե8EiZ+Aݻc;5Z'c"JOVd9O]]TTb\>Z;6;5 Ҿ>ZI[W._?Z!B9q0:L0?g~Dy[mF%C@/27訢d) Ƅn4:MOL<14B!wB]rɖnWQP~`k^ZyASRr3=9m+ABGo-tMO$ 7/ܘdNqTb0(S [Q>/<}Aᵆ]4T<Ͳ kL8@o](5:ŔOؠfUφ7H.;jo\޳Ae7u@ ^f.Ie *xm;~,*e.M49=9=9ծvN$I4Zj.!Bmۦֳlx,O[< ]#Fv5:( c6}X@'*JFAjtБ24ehPx⹋N#B+; ؈؈ӄ .]RWKZRw;__L+Y_<42]@[>X)OUػ ^Sìp ]<@w貽M`bf-˝[!f~XY7Y0 ^8u{ѬdݿW4v+;EF'^kB9?6#w x1uAswz(|^h[hk5 }ntGXuQ /MWμ *pByYp :LkMkMk'B`J,@:^2225֨[N#JRR lᣑDInһIiBّgG 9s:t6:B!.GTQep=EO֯~;79*izFZ NJY[+SR}^Z>5{1,`3VD^¸gf˿ ~Q{, \~6"4 ;qhYqP&ЂUqmx`KO_n=YO)@=}ؽ^ן{?ŃZWY@M w\5i5ah.(#uoǻr 4NU `!`C>H+BLYe=hjj" 3"gB Ǹ{RWk'LT:5:\#i.iBq9jo6{p@~A2رCnN`9 wuwuwutoܦ~]뮆/֗àoĊS%0PPTy>|Rz݆\ 10AbIDTT>׬ <(Ơ5eGcV+T~ ݦ=orw[OX~e ,$**{ؿx6 |so$&AD-GK%@mվeB >ܷ`'p7 lܗkDՑUGV ld'N#B`?:4ZZZ&tDd(jqYꃢ/xb_|Fq+RbtѠRf)ӊK%O<|||N#BbE-V@_~ӄ"WaGk?ZQy^x%A)os r-i5=ϴFE靅tçRGk7A͐{)dZWhrC*vc (p ĵ]<[U#h^x[0Wv bo=q+fpw~Ɲno/8V:q3M{BB?ͶYPd8E=\ާ>iXuqŁ{&=///5l_D%*N!q>pssWLEiVN#n fKO(ڵ] c6MflF to7N;Yd9!r2d :^--d+zE66#=кkn6NO{)?8eY[ Ξy=.|NE-݅wB{U70oZφ4К A{\)C`'oVe2oq\x_gFe obg}@WE^XXY~oVڦM56DC;gs ws̘X8#b[ͭo؈؈ !"I$G8W;W;W&tDZLMMR EUGtE\sAeϗ=otiii 'Of6:B!.Gѷmm{[y(P֡,Xwcľ9Oj먈T |;FEojZv|̼鵞e/>aQ;?6zL EѳDc5p?Z aB91A nn:* [e~?;a}kd}lmSt^KІi TՋ6oH \<*<&(Hd3Հ7$oHo}~UuֵZC!50C!q:pqq1:M#j4?h~4dԨد1FG%Sx~쮲2:MȋˋˋqgF!suTn[mF !ʥË]GOLab׫ :Wh]5пeA%];.}9.:HjLPtx:E}F #WT} wNGІsȊqu**Nyp6G.5vk-i @ѫ37]y!>{\G *{و{u8/ ޙ3{[~ DNWXK\chA~p@ BmmmF F+L ӈ! N>?DQ+VD-(_&LiBGj6m 3-3-34B![M oac"+ +C -<ZVE禗R< ]y'.kMkґZ@{^}jSR1xv 'j:M(pGcc܇}Oio[Q'd91yR&2 p0Xؒ[ܲ8TS]!ߡGi4WCmW] du:I!!ZZZdt^&LxPVV6:(>Z[ zMLWzDN94#JuW]YwF!n>xn߻}/lܒ%S8bZJCϝgn>%Yh @n]= 3\gʍXQ~BZoVC2 -}=D.,Vo!/?$k`mun-UΨ|6:=|V{pYX;Ⱦ@GWߚf{AqmQ&25]ON!W3gLpJ+GQ}.ĵ *V@B *tfլz qi= 4i4B!'*T̩~K_NBL0E#\42gnܮ5>*.,u9ռl?*}4Oc|rpt񅍞'?q-hlxr#`jN|5bV4ϪȜ!/|UA S>*&iu81??=~'x٢~ې߆kkk#Ң ꊪ+{U߫iBq%+4:M[8l1:::F QF_el5,FG%SBń mF&ts:mm땽Bfj6݉w&R].Xmi(_~Vj*plXP+Vķn}j>zO= CG_ 8/+Y8qgaTȯCâ7O'Ot!|5Fgl-3 Ja`8EwéerneDsP±zwh9 Ծj˿`Y}Iݗ^[emUXc5>\#b ;78lB!Dxw{w{wCIN:lo޴ >>& nELP %5YMVN2p™ g*F!Kj6٬&UjXtǧ߱߱p xkUv3k,Xo~(@8˹o`֎ ' 81+={I+àUc*)c> +>֞ۮ #>!j=Ẉ[wY0?3|zz݂Ɛ19o(QNІk1l77cyIݗN~?aͺ5֬\JC!ޢ{*J,Z!ju?;vlӄK% 6nF a ßi1:EVh(쾲N:;;;L3}5:B!<`aa6xѡBH/."}vA\p]?{ ^R-[=t,~zuקZ}u_o~[V˂V!Wm6G3Berxn.8!(즲fMj61:MI[ӭ꣫i:/[`9jd6Re'Ol+qu97ߚ.XsEW(loY]֩]j5 K &[2ŐX8s?tG\Ur r~|_[qЉη7ߠqrX,h~lC'xwnu㯐,{^qUSTMىeBFZ#?4444N#Js~_"|ϞP\o߰F \S ҞO{>y!⟨hhhʙ3+g&oH9r 忟wإG,(UL ShK ax>~߳Q+`$++Z˜pk|j-,9]u$N>ցӂu"0`A 7D/VgRpױ􂪠6Vnw|2 *t/M'?̷gͶͶ6]5!/| FB!шF4ǫW&tǚǚǂiD`1@mDb{e9N:ҧOM ?eiBOW_~zQg[ٿC?g鲈)ro`.>sҐD,7_`~s[V(ǛmeLM 6b7YMsħ4@{ݤ8<汸SP}QTsk|:m =Q޻E0ppR@F'=7UEH] 1&Gjjj蚣k /?YzZzZzBFG!%Go俑iBI1)&KLQ- t5:(Y ^(%WLzrzrz2d.]4B!KK87oAAAF 9Or[3'+}fM1m D{qQ6Ù3k{OGw&8/حP!ofK/óVǧ]dR|ud&V-Xa};agntZQB'oUP3le4-n r0Xo8b㈍# (4Zgh`z W:!%&6 1GaBjRM ,S,S,SN#JsǨ6Ee M@-+u_ ,),),4#swݐ;!wB!/ [XX@탵>htsn޹yI&p XMu|VS(3?ih1NxQ@^xy8|cUvveýqeʴPivrdݿ8AyLDs{7AqN4v;ܹY{S᷂iűrD2{*+ɆJеQ]VPjM{^q?Su\qUAQFet!B\ ݮݮFu:N#J at4Q~#k5ۚmtБNwy&MFB!Qz|C 'TBWlegw#G#3:)Xcv0ߪNUq~9at& ܨ} ?޹%:{'2ŠSut24;gZ>CÅ(Vm0@ңɖ4kVu1҄O;{qw#.`B!J⟋###Nm&~1* 3FwTe|F֠_?z7u`Cʱ?O_!~pKi(t#X:nh38HwDO;H.`Rhp]gm N VyO=<6>>P#t@(6@ve@-?^r^pm)%,Q[F{{{.wW;v\mddd7:B!O'ѓhtСnWdN2KnD-*PhzHd)SL2JK:5ujŠBQb$F=?z~>Q(L15akք*,tӖI[}PuNk8 cAM0g/HUab?~qPz̷_b1T<>ۙ1zݨA*1\caHPu+GQvuTkl 8ߒm)s;Cưatg#1Ơ!rww7:EPw;՝`ff~BFnt$Qĭ[X"]Cʄ )2X!(}P]sUU5WuuuBDž 6\FYg:|3]wtuԛ՛՛5oy{Y!BXF:u6l3:(YŽ5gt$Qb}QUpֹZjF!I.BP([-F+C:t .B_b*qZםMf= VN أZ'eϿAe]Ni+ϖ~4qx]0Y/ĕoKz0jz.'1<<&G4L}&ldWR<4'xv-|^&?XX$c _^J+3fFB!eq>|)B^Yl7˖Io _:<(d444cb-iIKS|>Bg0Ly` !~066f6{ٻlf3p%X {ｿ7)SZ^ejU:h|?&r6&kjiO5'(/ ]Td)ao5!L~Jm硊Q; =RXP03Z8}psc35xuQ}( Bo{ ׍nu:fu3xӈ%xQ@ bccӍN:Tk*X/Vm6X $@e?B!+] ֆֆֆF žZ3 )We+Z_QߠtG F Z7{~հ~zgohU^k -#`K>t_,DH3}ZwſV}RꬽL%?/ `ɐ>-)ω|thvmt#oȀ8bkd= wpe{ 8;;C8p: OOM4M#tB!KnvnMd2gϦ/ĵ$| ,(d444Lӄ7x7+0PB![NqS9qP4Q-GeGeGeؿl\?F+>f} Z(ɷ,`>ׯlWN3v lbڦAcbJW@B\q&֛A8r@1z=R<ˡ]Ũ{LsAY:܇mʷ %V Hƞ('Ɲwb'''Bx?n;$*J"X?~jPB!W7(s\È%(~QDb)c)c)gbĞ1:B!UH&iB2$8n$[KPߙЗ&DvjGe%ua_8mNѩ\]>MX1lD&4rq-. l#6B&&~92/Ons-Q{GT׍iklZn_zj~,9I!VGGm(d=j{(4B!"T8q:2x>yƍ ;.j\z |zVO*loS:f}M*?q4})~ggU6ǗVBUݬ AtLh0"qsaK ]DPsW NA_gS1cVG8TS:+B!QI$t ]#J@5,"DyQ^'7B!O7?Y,˖+dm#4SwЮ%72fDs{;%pG>-T%YsK цT SuL+;)/ykr'~:އ{ADcbuT\fC A.dy!޻ݧ7XTA_æf&i/JZijOi +Y~/F;GڥL-<} iǸ9fP=|/TSOuM77B!Ɣ<e?Eg"J7#ߌ|͌N#B!BUϫWUq-M*ů2JSZ Yxˡ=7wF7CƯ<=buTe%h_i/ B(K%f~{F|Iy o|:Bc,J>㊨ss97<-O!BqI 5imtQlh%⥈"^scscsc!BPSyC)׶ 45:2}o?'ҴO셃|h~Vfat/h_<_XY1Ws➴C|<}ojҌJXt p13.foAѱP,灜rfeAB!R_F%yJQ]FG%KK/EFB!&mFی,Y,͖OPIy.7҅:H KsDcc%zV9o%OB/CR2AF]`Z<H8d?ೂ|A5 U'(vd{ӝ39grdXbW!B\[U*mhQ(ӈf|ID11bbDP+FB!&pÐ2oeJƍ'|q3=J=}N~+)ʛTڭN#OY DW}J t :Da*Dn<u祝2>Ϳgs,`x)a--$(1&S~Mț72vfةu !Bk=x}^gtQu d<y,)B!Dʺ>!Q~|.{q`yVIF8Jdvj]UPP }J):^B!ƃgggiDIc?7:(TQ=EJ!B$9#rFW[W[W[ƍIT7NS '<`,a5}C _ȓ?|)m1ˬ1 rBI$Cx)KeW6Wo|Z_9szc@.׿d\`JScLъ_CCf<W,B!EltQu,QkkkCdJdJdiB!Dʹ5֜[P2Ȣ(32K-x߳d\7ė :PznpdLo峃@j/=Զ4 LG DЎKJq*Rʦۻ(Me19 նZ(UdqB슰 10Qo)ϙ3=g:FFFpB!"={Ox>atQ F%&`ϳu U!B\[ccc7jk \iF>do㳂/][Jo7 ̧U BBToyAijo^|b#i{`W~oQ.B!B:x|4) dPuպ`kkkt!Br1i|mU:`gL9 &׿B;r){$0n"@lkPV+ݩb !2e =qܬ#>LLLU:*+*x5 |_vL<^C:^HaCt<_oŠ RUV:nX |X4f?PR\ J'~~{xx1xB!y}^꺤#[ԊjE"F!B__;;;^avJĘ.3F!ΐܻuQjR ,Ս=e7&.S:Pz)ޝ(=l ;_@.^v0Y JeƂ6Go\!BqmWί_F4"JS9S9S9E٢lQFB! $hCu7߸{7`up}$R!T"Q3/YXu~_2'A¥,`C+B!([0`iDI/6D /Z_ !Bӛ+WL7ov GSېa@<K1rQqO9F:hD`ipB)C; f7kw WԙKD`-'{_ݭVwrrr~ !BkQT0 drm`2L&iB!DzZ=oXm֖#Z==%ʈ%8L`an*~=\l-XY~!`A=uW7S< vr_hTpo Z37j]]:^B!&xyysύN#JGZ"J/_,ZJ-2:B!5belmlmlmW[uc;w{Uz 4\X`6ݭL+I}> ~!_7A~}o_>☣3Mu2=;PHLj]A[. eBYu !Bk (hQ4)AD` Pg3FB!!g2 aaa Ou< $km!=Uyx.D0BɁ̚.o(Y\/+'!{W!~^F #vX+zH9hе@91IժeXjXjX*(Ju !BkBAJ;;;4)* d0}ft!BPQG8|ܐku~{BNOOs9N Og*xB͊ڣpB!"ȭ[GGGN#J{AD`kk Le24B!"TE9,,,7+۹w;{q0PiNR:Fm!E/+h܏y>xBIy)NW s~Ψ+ ż"7פ,+dh5cK;fffwB!ڒ2weJ1:(iEF%iii4///F!BRѥKAa=߸Y Y ճ@pb>YJm6o$ϋ5o(y&/ߔ )dwV k aoog)P [ LgDcGk"}X#}v-։&_B!5%g^μy]]]ntQD o!BPZk1AW_߸)ss^V^,:RJ5;qڿR@)Yu~g,vۃ2*7S)/.r>u,,oR1k_]ZmYMVbqkAszu,13bf7B!>L3ӈkQ(uiB!D$O "="="]qwގjn] "'8ƫܨpMˎvs{BII$ W57~^g@Ḏ7` w'=p>:5S#FT q}-B!)9krͪY5iDI/pKK}>ep/riB!D*5RS!Ψ;o\nYY3`2}>Ae TP 7fC_Ai@ 6s!Gs;`pu~1kv4eT+h'84$r9󍅴y':nQYgQA|l|l|~ !BkK^*yUN!JUE:&J AFB!7P/qb)gex)WPǔԇ:CʽbY*%݇C6]#f,-_񟔧Oip⭯}{f.xP5=iy/*k@`2x8=[u]M 񲡦B!.]rBL(G5+X 49mt!B,XWj^~^V#Z~3XQ\Dc/꟦e?՟-ͩ-gg/y q$:7?)w  pؒ]`~{k=vjaRiXI^%N}~lBل TSO7B!6x{{Cnܞ=N#Jz\"JmL[!B2-2-2-G+دLE Dr^yNQ(-C7~m։Ð:$Ťt:k\3$x AQS+3&p4&{ms2j~W&"(F~+ZS^ Yw5^I& jQ-: !Bkggg$;4dr/(X:g9B!ڔtgҝIwMt|Ƅv1ۅtK+]/(uzhN6BͱOB2 Ѱ!²[5ŧhqFe='p֖8^yzviQyFlHz:.Ӈت}Āvn-_WԉXYg>[Y0'͉:^B!&ƸƸ@eˌN#JYְ8F!BJq*AѷG߮߸zet _Eky 'ڴq'MVmHM &}Znh3wy*BP3:[ 8v蟣֢XAMQ1}far?W` Kkp$3IVW[]m~-B!-!!!55kjTӈhntQB,c@;d !BdI*%Uڱck7nMZp"NOmP(K N)s#4-d&9B+W$Gi r368mMQ e}}9>W<ڔ񱳎[.-5jz1IfYSeh;IƭP1DH{;wCHvet111PieV7B!q=z2;fvhtQ2TT0(d6h B!Be疝[v.TV[7.8'jaeS/uR~FMHHX)Nkj&&*_!Iv|<&̰oJ~3 KJێ)@*c~&&/7RSi 9ܝ}rOŭ[*zB!gSgSgSٝ;g?X9"Je,5:Lct!BE. _,|Ygd|!ݍ$Ow=witsۧ lO0=*miŊƤ.W|#*P&(VBAW|Šfm9oNՎaud/N;C5` <`ϩ/ׂ#/GI'e6Xf~,FB!ŋ%_f .wN#J&Ǎ/gtQ2x |miB3fߞ)_n&P+ &C !-h A0BcWcWcJ>wcp'Wp? 9?:@ަA{SOv_:r!U6׳Uߪ? tCbvhU5֕K+ jU՘[6~ }-|EnkF}gl~%P-<LZuQsI-Ӻ .u y] 䓮Z-@`Qߛz -~ %`Mawy|'|-rQ!B &.<#=J*TJ_Lo7 dw;4d/[TP(d$y~-'> <<povovo6:(mM3E vvviBM4FB!8ˁXb5:M7Ťo}`g@=*%X Jh;V(opNYޑu[_6e(\,,zGT}^UkExQ@+Іp&Q*hv+p^}z.]l;7ޤz++{tꧫCʂ+N#B#coQC&tdVϬYN#J }I\m|4;<}wiAR"Q**o[| gq}pbV[ZX$M,.h4[uu)|oX <Lv^/Gy{y{y;l[mͶ5BMӦ#1Gbm B^鳥ϖ> nnnF  {qctQ2w,awёS)Hf9k9k9 c*B!J=O<>,3ӄȞ=#{BfͲkf O~5L~ׯRjSfnzמq-j؊qɟԃ#ⲀB]L󴆔nO3;Ċ=a_.|[Λ^7X`fVst//s [ 2l؂=Pu?M@7аC88pm B^ 6j&tOdo_RHqx\i333 W+:B!ĕ#mG8ldzNB9uݿXm O<}agV~ҋ.l4~FU*bX5b+xNߟ;zҙw3 vF"(c%S:xs5>&E{'kuhڤT Z[NӲEg*N‰w.}-܁,~Ue.w=2{dH888){ !%Re e24%~F%[@NGN# 8iBq9K'guriBO*M4e疝[v~8  c ._RҘu3.SWy}i@ݬ]7h1,|p[A-Pq @? EBʽ=ekoA*S>*=> *k6[k~n 7,g6/G_F V5[lU%pk^;ޑzGFB!_RSR7˽YMCW+ە iV"ߩǜ*EGq{ܠiN:,;,;,;@yQyQy4B!phԡQF&T:VXcP7տ)@ .2vŦNg%?V*)k9[hoi]s–b˼`~gsȜo\sdO .PD~EH@8f`raA9e|GN5OF|>>m1 8ixt1ppTwra< Aݼ^@ƤI~m.P 1'cNřg^it!B%NIj/ ʼT2/*tl._8~iDWYQAeFGW7vvv7:M|lP6(R#BL&nݻuV{BGdf֫͠[8=Źn}Ex0uQ;6G]SU*,նܰKGp' ͗~xnV*؝jse7C?Pf8M2{V5hDƤ n8OIDO[|S(=Cׂ:p v?L BqE\;w`t iSӦM5:(>L/*X?hXo74#|[m64B!G_}!ϙs.oiO~ QG~1;JONp`J,zN\h+8M˕ᶛ}ʾx?NX'3// :{{J>(LME"o6Yv8^P1DWKha/Z+uaоs">۔1=dxcQo)8֫ NwX_ h6mǛǛxBqy\olB>!B\qâEI'&tϭ[?8cӈ_s&#zmpziBGҰaKAVgF!WNp8KN lƝ5qgyj\Y:P۹ .&}HWޡŷ۷e8bеZN]ީO7IN 7${ Q 'ն^/uGl L sW[/}E6O::<_3Zkix,QЌ0o䪡E;?_֕yEwrrrvhJWZ_+2{dhxiBODW] ? ӄ .&iD1{GhFGW7 pwwJcmdmdmcsoE!B租G={iBO#e=7 {iA.{|gp/uwwSҎN½x|G=oԂ;4b~G9pb:ONv\;VŦp2!YNP)?җ?&@D:v-lݧ^LsIΞu*loe,DG#vA_As6S}ʝ w<* 8O;wBaUU=_z|pf™ g&F!DlBlBlŸʸhhhםG  rM\ݼ 4:::^5:B!. &puvuvu]zxF !^xAyRyRy:'vNaúua| ԼTףS{_L(E&Ծaͬq+x_W^ 8/؅ K'润\Lu67\_zgj@ )*%h0fF K; 4^ym,pYX Z:AK!=/gfj{1:e:NCx|x|xqttiݛviBO$ K0 xt\‡>111ӈӮ1}QҜT|}&&&F iii`YmViBqYExxxAF "׏~cFN9k+b+PW4;hw*pdejtPcmZks"[+}({ B-pbp#d˒_)ʿiO[ q5p_ .)Lox p?;E`r[X2d}tMp_6DLIDAT6Sk>1PWSRg~68A[ڛ@D[_ <,*X?h[[[F ѶѶ`mvY(B3f̐J+yJ[+mp܃!Kb-k^k5|ۗG `U*(*it6}{UޱQx; 8]9g9Lye_kovM8D UPh+?=>k6t'@XLkSk5t]7>SR^0:iB5 ;v4B!"Moa܆q;(WFי^gz '\ͅSyI3Cf>_-PҔITa.}Vϕp[m_L+mp =%p{X`TFr]6Qe4(a B-R@I޳=Cn`{]'s)CLfj6Ӡw[Q6e|xӈ-'"Y=&n^ūx.ﻼN:5k,BPg{F&nbtRԊЯפ^zM~KM=Nȴ~`US 4qm1ˡe:{p_^QR ^[Ì z:+[wU M~<&P^Uޥ-(I )W1:Ziye7ۚtsٞ_ NAke@ xm۔ȋbH!=|YwyE> &O#&FL~~~6022ܸqx_B\Ƒ#G`˪- 8/ B!D#Gl(܎r;N:ҳҳҳ [VekqY>&+Ȩ^`tDquҶh[-qHaϷ!,<,+ XyAQVr'(͈ǎC,Lާd(f ~U>etf?7u6_rկCmڕ Hf\oҟDEomlӘptf,4ެzкN:`Puۣ>r𑃏F!\rOJzSsy,Y>zN/? S3 g@΀/(A_3N+"WF!P*p`M5t 8 ?G]Pvvvp[jV-[ſx V{˂fz?[Nis 넍Q]{ꇥ+koiE ѣsNC[oSuPBa,NRCYK\ɛ:_6wMs:[nAW Ycf&n_3- ~q.G1]tOm_~)a?c nWܮ]:ޏPW¦7}s8⬋z!ʩ=< %)տ F?|55|?XS-%3WoA- )Y 5뵷Rߗ,1O1(7=+{rߕ$w8}?wRK.{C 7\2t܏w?+r h˵r !o)sܤIspΟ222ӈhoR;D[܅ EF)s9Dn4B!}UW9ӄ >|Pjx᥆@@@k5?M tÊLS):o,v-f·O4X(nkơJ<V>8&P(+ "ȄRl1Q~X3ۀWccG_jD~gsQ2t#hcG:u$(/(R'8}U湶7>8:|7kt'.ϩ:Ꜫm}iB\zԃIf*,d! O N D(F>f|Zw>m)ŵ)b܋ӄ&4 D׌-sB"EF X3jͨ5{+N}v [oy_ >&r q9yur7ɿ% 4DW'DYaeB7gZ#6ZWrD oС ѠlRp3llqac- _1yX}4eQ~wĿ^|;z*`OJ=mZsSwyt|wiE:'lTEJikk~ 碲zO]r~pׄQ Ff je/{/^o[?8v2dBq9"## '+4:Mp5s5s5KO.=4@.T?by)|̓5[!Bn5:M舫W))BTsX^^ᆼFy!+b1iMҚ50P Ԁ%wXoη`mQV0pރ,)e[kGh@1K!st'n|;og68_2fB ©{e Kޜ;=Գ`s4LSu/Z ">xf1՝Noe~D,wFmu)9ю:?/X#?Ygqиy捛g„o?(Ό3hZK;--nbt8!B\1cCĉN:\)W rʩ*F%?PW8O8dtTqu9s80w~4#>)>)> 8IN"B!Dh{C/W^ w{5g֜Ysfyr?0cÚչx6#{x?]ӛkx+z -(W)pCȱ0hẗuT[7&#@ګxYSvJ+]t9{y0h!ƍۀxxxaݒuK-1:B!q.Bń N:>,3H-H-H-0:( >f/J' 3U\rNɝ={^7:M舯_#nխVB!DK}%W`cW5:M*VHY~N&=]trk{61t%ڐ{qrp_b?o< fMj=+w.nj 3?>7V F?yp] tr@jn"@QM 60MT[9<0ɩ]r({43ag.>[N*>6$ s[' ~y纂ŊAz-W\rUy,W[n9 G'ptBq%T>X`(QD#ӄ#G@ed~T]W8^(|1:eM&p]F QF}!رc7:B!J ׆ÒK. y})*lBwfܙ5_R͗ v hw، f pgxX@gyzOj5I90CobR_&hBR~UE- s7}n7,~zbNx^Ֆk:Y -\[ J4Ch1†^{K/>{sln[Y;^U@Rl[5xe\gc[A١QMsQ\ ޕ6i+M9a;A{YT… J/]tyx 偔RDŽLhբUVSO'BX۪o l [B!uNF%[9+;|?Q#鈄.9]r&tD<y"G8ot!BaÛ0x^ 8 bjO==9|ɗ| x b}RGk .].1y׍p6(4^;ܚ> 8_@_E4}s+_VLS< JsJƟ[ h¿aAݣ̧/~ O m:$z\ʝJ}o otuq\2^SplRDu2i4vHmm)`w6)%΄;<-`UU![\kέ;غcp2G'Q!(j ?qȿWĩ:b2I?fl˷҅hjtdqurz6dސyC F ;#wFk#F!AU4?LEO/zzӐtәO.+^5j: yk[C ([ч$Fx>(rb6->bpP ߹>}+\w֣,5r*^)ZF†>>rC;lz8K =Y\ܳܳܳ ㅌ2^0:M,Y6,D4B!brn˅Z/<٫*vvǴ;AIm&p p qf'ab/@J웽7rF1;:Z2xfP<5<T=K%_w't-(YߵwuhWpGN읒1wYPr@=H_PG c>^-4Fa揇eT;?[ ^35m=yu-72z ^?='c%|hOhs8 ~aӈpk/( e[atdqurOqOqOQ2 >1|"D=4B!Sv=`ᘅciiid+؄Dٙeg !bn܈7nbȒo?| xzi/2NDa Gm;q/Bjh߯f'0;]Kl,0vퟺ4]x7„S;^xV\r!LUpڒW]$A%G@A]V V Jw* Ee`\\|i9fp5O3>3?\e*,:n9 >c8/R7h [ap03`0`݋@BK%h曍`M[?J..>yVS'gp0R(!!;j>oƔz^ShAU*p׏آ,,,?TtSMFˋ)d}xчjɯ;A!sý8lqܭ<. \0wkMW9)4y@;b@Gr%GAhЊݚC5O5O5 e088W՟Fˉ)d6)ԤPB|EW-=G qV={9j$ [\-P+*Q4Ma1C!qy]_L/ky(gWl`[=$a„n0f?U>A0}!?GTh8*J?uCFaKI$OPH9rmN~F'^??:U=u ~up>>pC H$;S09|u,,rm{d2Aͯ*3HD\ŏ4q/"wGF< =5)RI!WU˙.g1ZNOU߆-? 7M=A!#3/]8p4Xb=܍<wm<[#dl}wM@@-//1cBǘQBRH '{sFA4axr'GqvFˉ)˰?6%mJڔ!/r:kjJ}-xMv`];N1&@ fMh{"GyHoK׵];::*_[1z! 6sB41JJkO󄕌?}|{WV0|յ_tz!hm@ o$W&C)ӪYLnȇ pMҷ` 'Ohod;d[! 9]p䍓7N= CrJ9гm϶=BՖW3GFځw=ck,w4{ =PGZОr P=۵/2􎪶Ю5Xĩ*i?r6Fִҽ 7ǜkܽ ==U--9Aq_iJK?pR{ktG59^MKNOxW0 ,_$(8LhUT)0Cpl"y!wB]v&G3 I% ɊмKW]NeJ7\ /r!f?I ?ʹ.\gx+Pih$ϊ*TMWljŦ?`,Y4h FIi&={VY98rȍ#7]A2 ;wݚCWGWGWzL ]IQL,Kqn|>lݨL!u$fM̚ܭA!-. ]vfWVZj@qJqJqܭ˄L1#-9ؒp_{_{_ `e nHl,a図F(Kcgv@F.iŐOi&/08j4(jk=ޟIo.ٚ& p@b~s5ZO\lէ ,<+X>M b2+=|0! A( B&kW]vk2eݚ#~PAGu g!gbGG{I7AH ,4@8;쬳 ]v/݅n_ Mz5Pu:45A!0h+[/*P4hp`ow)dj'h'h'Dljag|N>\'>C%TKm:sGK&XWl]Hw}A4nn|~s0iܾa_\o&'R9јN(K )u vUl ,Us 6Kn6BܰȦN-S 9MP v&./LX 4| SzkEC^]ʻ0Qoo@ VU$Ѝ]M9Чwh WO=? zL;)ƅ+'ܛ"/no޸SO?U/oVe|=X`4ZhAw}sJAT¬Ƴj cʍ)7H  ,ⷋ.u:XN{vkL6HmAc~~NXԉI|R3i@z@+ⶴN.@-G3G#e`91F#ꤩH?wֵ ?5#+Y\Ɂ r{dB_Hx<ݭCjھSͲFdORlC 6~-_yZH]Fnm${A!R`J)`dɾnMq'@&M!Zpjnْ{w6}_G{ܛ"/5k׀ W(BQ@Yg {ygA\ =&3ɰoN?fͺ5-v[1@j1$m A0I1I1I?Zh=ǻ]HOk#s m\w> ;sRJ;M:QP1 [\sW7vd- T>~!7ZĿatm*oH{ބ q 2$M9ibL5._T),l6+CUەjgpQJ s,ea>?o}= O8Ŀhvaq'ǝύ=7-/i"pt°ҶK.AKK  dB,YEwR_9r~ C4wk_Ro j*{)b\Ÿ,YP3s&p)d^zn  farCΔ;SL_WFˉdWs_}0|zzz7WZ&qe0?C#iTaJc,OOlja/4.8,* o碆!%Y t~4B-š]-Ge9 +^V}g|^vq2+olsK4yUruP(&Jc@NVpB.CO\TЪ1uW`ҙ}a^j~#!*z75QG,YxK,Fi,z󿞇<y"U  ܥs].]p`d;wNDa_iz%7_~2E'`'so>BAݚCYUYUYr]u-5sFA2qwW111wixR椎!ppspsp)/)[l孱: eHЙ$.+(~ʦR~ G<ψE$ .>7軻y# Eo+dNe_횕oh3ץrsjldXJǘ~wR?'WW ;=l<|rtGc@@F! I}O|Ye͗f\q}u-߃iu^R܀ڃk1- I"%,R9s*feO#FHդjR5ȝ;! AA`VXaqSM 6۰"EdȆ/`ME*Pc̏1=8{p`{U0$'5 /xx5d({*ш75)}j1& sr6W9%4.yz$f+6ZFLĶ&tF}]9SPVaU-劎v*5=nZKTte.\x^Ϻ/FuSׄՂU66@f N?"wj{?aK^\ BشAk̯ o )sI G5 gV 4uI^)R%J/^J/O;W\G; zׇ}a-' A!ӲfyXbFS7vo P "ޟK\_ ( 7ޜ{s%q"9IN{ɽd~R!T! fk2" [ATn %<IX?[ mQ]v+{ZhQ6c4X;g|SbucpJt{ P:R_a=ET +xXdnUӰݧwmץ]*B]/h c9䑼"oJ?NrbM.Z_+{X}X_t5eh(o8_$[mov5oԼQb*U$KB 4 5 5 a}m׷ -' i9phP?= SSO!slΈ\!_]?G{9so> 0bUXN1];v 5  9 X:ck}R>qbHXYZoW_q|EhѶEm7$FaDя&=w6 VwiKEZSn.ϥOKɉr/^6 SskGch65aÌ5֛nm*] 99>QO|5nU:0o2f"74W2z;環ǹ̅Ͽ.ad*7st+<9xtkvK9pD ͊E'H V%lZ*Z mҪǿq{^䀘_$̲e7\rtIH7-mtʕ*W+{b/ ^9RLFXza݁`b+!gKW?IZ[^DZ jed\q_Acc=b=b=`땯W!CTfHX{j]ZO~*}*T1Z>{R&C_MZ|pHu}l<hҮ2l0+AGW`*-nc= k k)/9Ln^I _5)p XP_ לއϨ>Tpar*p_?4߇ vZo+lSuQ]|ӠQ] '#Hm) H_GԄ .]L $8XaU  y5՘W +ԯP//2V__z׫kjԨ=A P̪U1+r=,ݚL@Q &4&4&zTQ)s7J\YxRLxaMҧͣC@bݚñc6+W6/sFAt0y.]`^Fe>ܙX$YeZ/~K/(ޣx=7 VC&< 8i zmr6.j$'bC oK"2e浮 b(ֶQcUq -lsKs~x.nT$ʴ$EO_pڨ8/PptT 2ux\%?Z+ A[@W͠{""$ b>wR4< 1Y_K|''=ϰi=!{o^y(`N[5>\ch\"$  k\(QDʩʩiFeV[nt'wyߖ`zܛ&O1^1^1^84phPs&g!_|3wkAAH V ZRJ*owvIsC+i$UdœO‚ ./ ym!Cצ6/;hw uY|^BFw]4$9Qv)sHNM /_2wk!aKR|ۿ-}MB&(WB`B`B nnM桚o濙F  &s]qֲ[oK6 -~{Xa?0H;H;H eċ~*4c5Dlk/9G,#z_häMtwVQwp@29( #t Y%r%R ykg=*ڗto@p}e pWiPy"x&B~v]m9;̽թGPB}<(|v`)3̄.ӺL2 pW:}7~a~GA133cNnM1bNŜ2wk!YR|ߖȟZ]bvI#7QH'L*K=/sR7nP4w#3睞wz iiip 7wAAHW7\y.o onn<1Cjjj\O}3I>02zdhxYg=I.S2KLbR1())Apuu:^gsC3TZTiQEУVZ=jBe!RzZk7wkW?]'>}0q+k0& 7o8@ć'KN.`ccQDeF  RK굫׮^ ?Yd5(s*s*ŀ^iϐX1$~'~~]A&^[B> }F |}г˦na`LNkDB'evEOmȷyM H?W)Oş?69jt_%eC(%/oAvh?Aؐ1: #k(WskmZGKº9Bد1u9&~nh~6c8$uv .):3T , "6Z2fWAՎJȡ2Z[W\5 Ҷ",F(JA*2 !xt}8|U~m͓]  3h{rԀ+ u෾Wc*ܦGm#JuH#m+or^`9rZ?j0l谡Æ SILFw[m}ⱋ.3Z. !30/\\\KX/l-ʶrrr ۀl }`΃i A` pppu5u5u5иh\4.0$aH ۡCoCHLHLH m﷽oZ{[b)FM%M%M>C( Lxu;K;K;qb¢¢I'ݟt7wk%%)-7a'g7QHjQFQ8 m66w2;O<oTQqk5^AA2!u={d?iOPu[#`67CB_H;VXƷj|+9t3+0eq2@yLQQаg}0`#KGK(=v 'j];=2 ^l|x ǃz<tN7w{wBıcVVV$PܾsI\'_*>/|^@N :5.>좹[%d낒bCK~G㢤kϤ1 KXG8TS[WnU:ukuk} ~~~n  IKN-`c6v%K𷡁4fMMM53X3N;i$29d2C{sCnl?ŗn;̶y7!'y 'PeȃP 7$M ޼%k!`((D6T(%5.ĴK(?Uyَ %= $ &X =+kGkGkGYjd`1oǼ'O1`kLnkFjFjFbË /z.깨)f//oUߪ\ֹsYCe֕VZ}jJ,*Y@|S-Zfܞ*U(zpKٲg˞- /tv_ſ+2D!p2etPFQFQF2K1g_pQ(]ȀK$,Iރ{\Z.-6w#Mߥ^Rܲߞ"6{S)buo_5eeexxa\i+AC =7-[ K,ihys't&=luuuễ-n!,ٵdג];wo~$o +JFw·߬m?:14 RWtB$ .2H * Utn9X\`\zͫ`ݭtw:t05c׌]0j(+OwL! B4y罟(o Bff:ŕ#_|u>[doر`ǂ mo޶PثWa/ y^>~RPP쀼[7iߤ}Xwm޵y~?;Lz8ᤇ9spPj?%  ^:yu6.m\ژ5{#/ܾpH ))\R|ѿ>$>4 S̒%1Kͥ7\2wk2%%%(Qڣb-AA ;Gs\RsIMTTT#G0/C!=qڨۨۨa哕OV>3(:ywZ3L `RlVY灯OA5AWJ_!]l8 (^=HǤđ(G!I@ Rj`(y@|nݿ7'6m gVw}]Az{2i>-[n_{~a~ՉDG.Yoき638n}!:qm2}? cY2f 7_ %zV v 7ZuqfGLEI%t5J׀ŦZ :p-aΆ9īJ)U { dbNNNPYf{)$66={$pR{I1`>jf'E~T!1p{Yeݨ'7g-Κ5  d(&76Eo slrfFa)er#a6u^*N8$7ti>ѩ-/\["nĘ\oWV[nqơBsucSNMYA(a˱sӉA7-W7+ S*Rtř!%R +PWD =OW0a}j ac oH;o`(29g_= 64 ivg~gP{A=u%JSjN9]FˋH?bzzz 4+ӬL2{^͜7sL5kH~=?iд `keM\{6ٰghڣi`Ȯ]#14>~ -ZZxkιG3=V{n7dAAT{at_ݿuM CbOijԦ) 6jC%`,xs&PY,U}V[-AA29;?~Xpj@cؓ|N\wOD""" 4tN95lk0hʩ(((ϐ\ؑnQ"Atj8v{twhKbޯqxzx7şE%=@9G1 M N eV?Ղ' }"t&()ivEVY Y`wGF֯VT 7m ^;9);D[q>yڐ+KYB u u 5l %z=8Xhb!ɉb1rf{7쪸⮊^N2V}gFyf⡋. SsN95'8t^!e/>ofr;(vP,o&P*TD C,.3|VYgnMЋC/7^o!s }>'礸hRlrܻ@H' `0L1L1L\w&C/lŦM3n) BfHo:v*T_{|qhʹ)| (tQ"Xz`遥`ᚅk|A=>SokYU6O^P>*!Ps.eY(U`bV*-J\[ OG5CT4' (6J4</7T w}#yqCJ)ߥEYx]x$>v5|0r]>񀑆0ӹ02@RKE.nH}<5ktx^y^ze1zB>0w; C;t,:u8fE#&Szmj諾G#1w#3> }PCA%sUBp㗤Xﻤ5'¼Iq[~"ZcG{V_Z}iuPX)n{PDO@`H`H`[% B` 6գʒ+Koܾ^(z h[l5we~~ z> 3fD͈ .캰yCIܽ .8*P&gYP_hJPKMUphXN ;2W0y _ėx/OQ/08\I.PIte5!*O|'x V[ ~9/~Ӹpu1}Յ1Ѡ=)۰^Wt"ݟ0a*0؊c+B{""" H  T}P6l@Y2˨.Xcu dDAH>p}UW_ÒK/"E3If Aā!n3~gNжԶԶ nr;XZe pu8X̳g1Էշշͽu/_XjP󇚰{=O) gX?ݫvڽ* FkAϼ= 7zo6wewXRl77)jf~3lHc,ĩB?+QRr.͹4R>, psn  PwsL7mߴ}RZ)^eP> 5 %hhhh@y>}{|^yˏ/7Z^$jݯv5]tYSJC)u|7 o/Xb!sX| ?6lXXZgiub%~vqS! e˗-_|P}= )"菠?'{Q |O$EM3?ߜH{r$E3BY˳g-8r4h伝vnU{0`AܱsawmhAAB=Q=Q=~ˆJ#*Ti40R&&&7y`䁑0r+W&42L!``SߢTsW‰NVCɎOY,_.ŖY[8@c #`\6n@QWBck `PwB%{&%dC t2v ͑Z, -Olz # 8b!!lѺ^:No&zp?_Jo?+a/9vQ "gƽ;cR_ch +C4I],w0"xD`h{m66Z8/g jn&m߷}/_D?>8 K^2*caՁUVϻw===T?t-Co_}W]yv}vgp%wx!`H;1wborrr.dn7o_tҵJנڕjW]* ,3# PRRӐ~L^ 4tPؽoϨ#X B*VZj@5֛UǕWZ\i c4cBUB&q3)|8)+̯bIp뤘d/dpBrݪcXN0;|vpsFALK,xX_e}UwcƢ=z!jcp-MLp#,66[acC\ZAcJ@r@0yVq2rZSrR^(96UtǤi" -p7# hD~+$glQأaȁ# jPK:#yBB{}pN!f>D[!W,䭦5N ʢy Xo4e?45!hVwbBb3#W^A;CCCPtO=_ȒoQFipÕWSVmAȈʬ( X[vmٵeL2T0Z\ gCqCOrgo]c~wwӂO Blf>u\@i΢E;,Ϡ:{셖M[6mUaCB~KB_WʟW~ I| 64oPT7w#3SOY>r`KЕ֕֕6w!R?VO5ITO]g~U;O$ ̽KECCvYdghvfݪ Bwݾu>l4{4{4{HAA2%T)R|am͇b-.䄄!A!d,yܨs΍[8=^/_>zX `TDl[Su+9;Wy*Br6yqJIplmLNow(|~PiXtU.z,J*ݤm,N ?wtK[r{H<}!XmAԐxg8?sCWAol\Š.YAඈځLlm݉NV Uw됰X\Y졨lllUVZe+ 4lӰMhdFEEEzeHj!3݈w#ލ/$I<ϣBf(,v/^]wm_9КCO gs6O>=W\7&|||_$t=[l`B &]#4 QGՆn -Z'I!sQVVa[öAmynVeZVB?~N`uQnNHaiस/)ʲ",'xH{vn͹5Ȳ+W."("~qV[ݗnA݂]ʱrϖ ' pppY^6`m,Yvgٝ,5JMxQ@alQBJMYdYb+3erj4d*A=P!6-*JudvE4P|-OJKd.DmoXʲLRY'esD˲*L2Yʱ"x?d(!!}¶m A?$9re(' |x9^O3flؚseٽ{kFcV`(b d/]7|q4<~!~,UWao3c<î5Ic^~}'˺ۺۺ>=g~*UeE=}QDEQDhrP1@1@1@G1{lY0`@Y`>p_iҲ<3 Ȳw:8^E1=DD!euU '?C!0M%u>[l3Yi]ӺbBDu4)TQVVǶ999itkdIG߄ y"O>,uv/>N r}/ˏ?:?*⦕VnZ)nnn|*M>M_6},ǵk2 >_O>Q]zp3a\;/)*[b^mG&cLjbM5e9kt>=g#GF.iݳKH]z?CP9Txdϓ=eFkeTJ*%O>uK4+ѬD3Yvcۍm7d9į6QrI!I eyTQFuei4I"a?/,+**13I*IOǎ1V [ɲr>}z|~8Ñ}QDEQDh!gdPCy у5s@RZZZon&Yn軡d9</+~xz"뉬'dNO_=}UY#Fy9').MF:3,pF~Z c[%,/XjB.]r!>Qᨐ_HC )`~Ո`&%ٿ:̮3ۨbJ3qR7K,uelζKFsGsGsG|>ߘ13ƸIyC6IDLo>>>\^:{%s3C=W{eZem[DEQDEɐKXOϤ$bzRuT]\s}Os3s/ν8W;w1sƮ]ûr̐!1C>5fͲ%_|]ɲQ{M)O[^Q ɲ_ў1fY(<YVRf,*F3Y[ ~?0eIݑuG)>?oi42,O6ڤk,VH+~QĔ&# 9(砜lR陜.\pEY:1Ĭ/b&V%ES& ֥&bz#,2 ]o^w~ugY.֦Xbm>("(_p@m϶=U]ȈB/ӿ|~uyeyҵK.& 4hnD)mv&նVZm,/8؂cSoYewd2eF!>C|Ȳq&z Iao{σP).QN?,߾v QG&.kIn\u,7IqZI {v>)NOiW [o~rnT&`}a(֪Xb`/{kF e3hȓ_˯װꋫ/BVY[emM6XY[Y[Y# TH#6mCuS>ՠW^ ?pdGy>}op-----o!I{H"ي@ŪV f5hԮ^z½{ P)T 0p$$s9`rr 3tPH8p,`5@,ĚԨQ$o]6tݵv@MjR+2==z:Lq><` 8n%:E|}ߣe>w)<OR<ю2 8r#lu1w20N[nn&xe*Ub+s7RA+XWɓ'O</|rPPP@$f*16161yy8>>ğpk? gy`#~~~^2{%B m*گkjhkhkh悛 nolVdHOp^^: }5W<7xn\lb1w(G*G*G‚ /?(*/pyaB E&q Ƒ|hTX+͠T~hךij9`Y*IDATU>OA,E|'9|)(Aj#ݠ(|TpG|>XNpd)?w;2i7 ;料[fnk=z.W@bryN:m "oFތ& q A<ݨL|q\}\}\ [;v`s7R\$FNIf]c _tmN>] dNaYòe'O|5%8=W{ǥKq  F ==c^?^ڏ`Wݟ?u7nC"XmV[CA^o{ 7Pg?xvu# X;`-]wސ%(KP ſ'E! Le ^{܆+V8\Gr[l= ?J ($ D_0Ԟ{z 6:Q[l!c3-uԽR[O7Z.F1u(Ppi>]jVakmxOj]_G}jek]h]o B:j٫u}f|qkׯĿ*'E_e⃷I15'{2"M&Nwiz) m_{'u.\ҽ{K:t"脹[% `0mȩSa&O1Vc@z76J߿$-m,m,m7otz+ĄĄяG? 7hwܶmwnjnnn7> Og:S5j}mB;:TPQ>GsJprrf#ٌ6_?H}po?ooK?hxALv!;ܾ3\smεF˥dHxS|OԠAS hUЪU|||-wM:B}@1FB}+vC4ve#Yf-8( Y|]J+[<{Gn>8pDģaD8q\c=qL2|ʇ󧡐*.]n:tG5G5G5!vCsY&^Mz5B (Th9q}"5k\zsb8ACbdM*ҩ#IADRkU6AԃġC[9t\.޻xoUQ  Ĥ $6$6$ IBd=|`jjj?ƨ1>?H#aPA~%Jk{^I1~fJ@*~ w:#dT|>Cy?r;(7$͠+KEr܍AAAAA0*屮rrrtW].sˈB!uVWWW\q%9V2y{%_ [tn;.v\8H$-[\El)S지^mlf6۷oXaAb/8\0}M7oC 6kkk0X?~d W+ǿo#ǫ @w|yGS˂tiХAppp7Z.ϳH{x!lF =$'=\nM_U,?BmYr(Onn A>߆O #5 꺱r;TPրG7 v-gK5aIS"Bb[Fz>qDyVw߅m;ܶ7LR.o`rf5Z4mѴES8oy%r,B:q:cf6I/͗7_| o{ݛ\䢹[%d.q$Ňbtm{R呗G^' 6>L9vy ~&;wB@? Gst ?俉fKZτz rvtyu&K,}~\)2W &UX9Xrl(u 'dޫW+V7{sRK?3I>z  2={o 虌RaB &C"eBnd хB`p!BK !RYI>ޏL5]~=/&s_Ȼw#F`Fe"䯓乐B 7"/ B`2kk`D񠽮=|{](2eOeOeVXa899A! Q )N> {޲71rr3 Mn=IOoX:Nwd)YJ &&RQT(~Q,` Ԥ&0IL2jW7p;'BZ@bC=A- |7n!3c kk˧f0Ժ>!|⁋.™3gΜ9c\ _uUz'Z7r r5wC%Ŀ-p 7Y+$pQ~v?n.|zd_6v[tgҝIwRT nI邪*%.) tdDj5լV\ڸqi,d! ń(B! r9!uLo )_Sjͩ4H\BR|0/I0 woݚ'{m"E$5  I!@}}=1{,X$' G@DD###A5Y5Y5eee@}K}K} ԉDu"xPQQu=u=u=PUUPLTLTLo7!S2$ B?1EW"EC _Gu/׽ YneV*> ?gߖ!d<J4Kp: aU%@{_> O?]gYMpwVI7| .["x4c`+[ <+ijF˥RmMoj}S TWTWTWn7 ǰo[߶>Զm]%PDb:=!GW!e~# OKbܦn9xO=bV-Zv %.sɟ(AA`(r1bEwl߱}a^yu^{! AH"pv5akPu@U//y /q8pTo[mFtwz]weݍ33_T'MoYLU07P,[[A{Ka`n)lSaBF- -E*ir\=)~^{RuTRJp-KeA_&#aSN:PnA-' SUnW >>'FL󓢦ۧҧKbhhJ7\|<|<|< pfnM&`E_B /'  C "WD\SFM88qcD!  F5jԠ+Xb aC~v6`>HX\`1xue|[:f_ſ/} vQE^; jW`{aRA~?b͏& β%7[}VU+J̉5' F{n=h;`-@ 1Ę` T(Ps&֣!<gvsi\VuWLA}jo N lby@# BFXU9IDZ6ePsF˫P|+#2.)f5Pl= FȦMIPRo7>2zE^{U3z@|UR|)vr@~v{Su*itp{ 7= RDnVh2wkAARI!@bn`Ye喕A b7oxYˢ/ 1ǐax0i_M "GOrh6w<`i0^zQ(}R7~b'ûe[5I4jQb|}k$)x _/~z _R!e`-4>g_G?~;|1;˝5K1}PƳgO-l[ض9vE39?RJ+PH"-D܍8̽ f0Iܼ{ͻc]u=-[AwPwPwK Ay-~qT+WpƊ{l-A,.R>/$H.@YMU^b-$wVnһ凗K)/_:=#oshQȞW&\peb? ).ahR[קQo&*'''$Ix`d>EZiY%䚒kJ)n  B*2@7Iyo佑sz=ڐ!kC 66 +DOAd$<8 躬벮ԶSNm3z,xͽpoo9r /`?!0<0<03֫MC(;4Y8\Tg. wF^Y@XYV =Wٲ4 /_|TѡCGqjZEgr<:QDPaYeF=?Нcw9> > >"?%0}i&$iTH2ý6kc􀘛5EYgM5PbE*5  i:R_ka{ ?!RhJ$lJ=AdHqAϪ= V>X` 7E.AHfp?=vBۅzw$I7tXՎcYU"A"RgLE\5-n@ٞ-{CbĮ]Sos8)N .: ~*QD3"gDs7.1:ԋS/ ::ΚRA|&w|$7RӨ GR?m^Oh&M *t&=OH"`5j`WjԨHAA4`(_D}]w0wsCM6O= 7U v.]zףъъ (P" L>j("TL8%Jh '|jnJ9ab O^Or}~gfPZgj㉁?dOfC$Dژkc>>s iv6mpz '9IDc <)x\(qąFgrqoZR /کU  f§JȔL.#"GD0w2jTق |yD ;;;ۋB}YP> w+VT*19b2z샳>s皻qBy0)H76Y Hކ?{x@ržȗ#_|0!bBĄ ?ɏ @g KXcFvIyOg~ѣG%J01|A_|I q-Z%Jso BdZPO4h4^xAcX"jE7 o牡q?SSSNVmiK{? "D~gQr|SQ3k3~O'e+֩1؍)5 kz]fO;awXc#,qvva= S>"E 83{(vR|V[w~Kt/VUA׃)Mi "Lre 쳲> Xt`Q{!yL$ps ``jZxJP'԰Mlr˩/QFUU+++ qFgbŘ10%`J8~A#6`C,zN>jjj-շoW?_/..4[5[5[?}T 1d?,rh ]eyi68uU">kfċ/B7So;,ZX 6~6~6~+eʸq%}K= ~WW\nnn)4q?,)+UJtYRV*s&_`7oFߌ7s7NApLn7l86 mAbzڤf5nր1cd.] ^{F˛  $1yEj.waMdm$( {ݵV캋`^V}U" M鐐zI$;·`2IdfN6pf^<HNBH1qLֿ_Ɣ)u5u5u=c2X !_F `(z/X?Bj!CYY#y[歚j&)nyQ zdL1]#DTj6?ɦ'ƎS*Uī㫏>pBrN2` G/?j> MiL 1[<phN; @aFa|}|GJ Ӱɗ'_Fq}`3&B;v 턯4!YFKK 0/l YDD`c_O,0 x:\˲K(++aaBhT5jR5ߏM8Z-orhdL|.\9Fmn01R-y6rǚ=<:"jus~ޟ1QcnBTO|z{i%|+}S]T6 fkˮ- {ž%cY2n. UtM%%%zy8q8~asy!وc>bح?AMAMAM4Y,,4d6` ^^ŹLx]̆c ` BY( ͆#ygLk0 ⾊.\.¹/p(P!w5j| -)ߙ)CH^R/cx#=m&I&I&I:#댬\Zriɥ뇔%A~?0{G pKpKpKhziziz 5t%tN87}.\8㈎}7{sy7dOl+ (Q%OHHSRmcJPP ?Hڡ$z(fʫYX(FgG}*[ tj֩Yfddd4I&z­ .яGg3W!?mwTN>jSA-NKRg3߅#cqn@W]vC 9<P\BC 1q8h```O>fݙug hPéHt!_`;$v#84CCSq *hnjnjnY~V^V^V^hhhϿ*Z '4-B-d$}h+@a $ g7)oR7_|}PUUP9@2Y˥/ 4i֤YfpϏOI2%e p}ח,TKEr7vFOhSG^Gdw%n*LO}?~>#>]6B!9~(jjm h[mш3T}X`邥 ~=zGy|$ {.{.{oP$BXb3ŪŪ5551QGS M-44 h@Q'B>a}?m(q8_/5V_1 Y  =@zBĶM~/+)) o? eTʨQY~$ӝ75wk (ާx}.\.iPVVVxYzYzY]87$TR?[)|]rci/;#BȏPAG{4 ((ۜ !$PuUuUuⳡj8q@x'<1TF?U]ҝ 3l1tr87{fP(@‚ E"IGr9IrKǎBh,ܡ]nṛ̣.K޺t@I$7Y ]B2 :nnn,悚@gή]M673:f4 $ 2!9GL)㟎: 燞ILg?_*~ (S)QJBrr(r@d>CQgzVE,$BQ{%= 2OL#rP^ۆVq?.s]֟?Yʂs~"""Ŏl IұgǞ{ psSTO:?wHkAmjewIdv7|'%!FsS dJȔ)|BHbj-[unչztU] ca, x>Sqaƅ+pr'Ƀ%`seHsjB~d=ݜEEEunN߀ۥo]PWW4?!9^YY888u#((_ȴBLʺp@4tU 8gD弟xA+W,8 BeӇHr-NE44|)qK_D‘!U[8$F B7˓ҟ{[}㧎M7. !\GMb'~~~@"E !Y[q V+o,?wFEv]d@mm-15d"p/!U}T}T};xueԕQW^{8ړkO"* uU~W]e TʩSY~U?ToDFŇڲ57SZ^84̲ɳ` p p@@X?@+ծT: : :!s l4In;k&#ˏ,?^ E&<{6l >#mm$|7hhCjjj'hܣqҚҚ|BHWkc6 mosoS!$q+t҂҂҂ \E_pmnw@jd|k빪###)0ǣ]uv}} ]wABNa a a 禟~nSbO=|oEk_q {Dum@Xpd ?( $.T5o7nHZ;k4|㬩K,X<8={PlInqIOɟ@O]?u{{{]\s;>@MM 5xk` juLa S)Es/_,:O(ԸPBھ}kq2&pm_JY@`%؃Mtߒ~ 98ܹO.<(iQҢE[?B\ GrΈIU*VШy捚]\3g};qw]87ݴytۘFvW. 1Nowi!:ޥ˗._<0ѿ777'd,F4IMMN.?r>kL3H#@l m@C{b|%gMR92w1C? 0Х{][m>Y}dd܄+SʧO*/b@fZUmUUU@\\\\\'^"H}n$bn&gQ_5 I b0Yc5 .uH9S 64l`dd嶗^n?(U8#&uqXa߅˽>|QspO=9 |ݴ,5lM?9r2eKie4Br-΍޲޲2EZt0XO $|B !`Yװ);;x⑋G]w>S嶖Zm(gxgF @HVsv>Gt>\s}l{V:X`%s ?74x9`6o^h3%3S!{\ݯHr B!$/Rf*UjMնmW@*Rv#ɫ! ;;V[֮0׹xVYgey /r tDs xT9T>tB8xg< Y i}7*ҨH"@W2*zyyy<(+G gmRI&*~hذzg*֛f+<HHHT$㌙@7V&jYpN|t|HЦ#|^{68 bp;.BHf%,%4Khfoր<P!$yޣޣH>}M5t5kdH㦏>s`P~N??Γ:Og )tpҕJW*A{vppi=juCkSE?!GEzGzGzO{>'P P*+HZeXpfߛ}oQ;vBix{U=H(e/Ai9i jt~Mh +@@sv^zP0H"?+$y.y.y'0iӼ'gV*5kp=%ȼyu@=)f4d9ՏW?^@qF O7lm>:y\wd&h6L$8> }5kߥ!zК6mpǽPx 49.,!| w=NEb}(>s3 7 tکj)zO`Y,;ޏ ^)G(G(G~F_W|]q7нiݛm<nɻ%l1[!i?#d999'nj7[8V=mvzb!=J.j f:,==A { pUN֭Pxf0_ϩЯ?sZjq*~nֿYf} 777?gCqcW+_<ФhMG I2gDۇo}x6mzTO\pm$\F ER~8:4u9L}}}[o5` Bɵt?zVz0n6fs 2Ѐ; xZ'NjG=Zεk tH! 1cԎR;JoەەuEwBr*u=º.@Xða >:}Ӂ6mBۄ'8Np\$VKXTOl;ẃpppk2"K7Rxxx04ih$  ([*]9Z%d NeAgc1~z#~x-yFq5[|~ zoruDA@S**$u%u%uaô1qiO:4uU[>|n<@Ss]TBSBSBtܡsQO9?~] ֣d]ﵩwK>A. 1Noߚ5^yKC!$]Yzi0a\ĹstJB1vqKUUxۀ`ЖA[mZ6km 487vo,k@,s9#zTJ.q8e<'xNO,F 5l0M[6@}{l޶ymoSߦML. ^zBxU럮> k-k-kohh!Cp-Z̵zH חAix+ 0FzD|w$ 6 lo(ٞS:b@tZxgz(cv9[x Jn8̏z{F~d?~0~gk毙fY;ڳ=p9g W|^铜s]Ԧme,X4X/ȫ8ǁSN:p$o;zwI2b`tT5Y7;t̫t?'''K .5-hڂB8NK8-&ĂX>!$4_/&ME܋qb狝/sz1QwGD΍9tttv4 Xnnttt$]|gv}f7&tMP`tt+pW xgQ7nFT!U y!$Tl}Z@㹍6 W<_|? PڡCiLLLoooiO4}7 \ZlZ 0I >.iCt`# W$7H-w?!n2O`,5OGcr^U\Ƙ1c }1#2BGWݼλ:&yL!7xRG?uN~-M4;ػhhhn*(NYvg퀷o޾yk8,^kWΈ:#0xO?t0SOhu8M,fʓ)^ l*c,zRSN;7_|q3PH"B!? @_|ǻHѡ }B!Ҁ'OJV*Y 6jSjw pu/P"DT(0]nt9**JR 5j$BBB777I' 4|||%AKD$U'U'U' B1>ERt pªU CZ隊Tː /HbŧOEsm|/L܇ЬLe`\櫬M=]_KIq#KEA BP M] l .FĵپI*gX R1bƅj\_}ߙ?y@ޝ{w x{{w1M6M6MmUvVR^,`I'L_3}tKEvPj]<1Mm'ПH$a\?sL`FCZK;B 1k. 횷k.@VV6m=Q@!?[o挵k׶/PīW/ko@*ULr˹.]λ9Wsppp|f{ wH/#lG $&$&$^,z"-@kk+#zG@UآDqvSVN2L(˾Zj!冔R8q *?J?Ŀj6g.@5L-\J,k;[LJ@] iH."*F Ԁ3N @A@Zʲl4S3p8)u?>›ŽT/0x=!D!|RKֶ^zmk`!w͒OZv۵o%'XИhL49ju!?;P(P|xK{ !ڽnk_E|-iuGm~Zw2CMg. 1 z8Ȧ#AAA I!$4<#q>>C1XM&P9TN|1?w QG@PŠAoߚ@ԁQ+>PVVP?!|kEJ) :mu ]ǻ77R`=z덯$N(P9a@2aB[.h$8c*'u껜2[8ʷT0%rTKbxwX R3T>!j6@I8@mAq;1U),e"seyE7׋WJ/W>30Axxx 0ꬫӋM/6`t>d}_}eb篟 b ('&l財ˆS.U.C72NdHϑ#=ukukuk Ir9o>}6Ml co66f|.]WDWDWD@ٳeϖ=w!uw{w|}J~($hhAB.]4X~e oz?`{(\p5~ {; + j3)lSئ0`ee/DmEmEmH$a!a!a!@h"4'˱ACACAC5bX#GqG ͋!55K%hAZtڜϪ---@cǀ n[ox57ol_ӨO>>|0`|`D"d2 zx@[[ Ab@f+~YC@BIo~<`[mddd?,[rkkk7&oLf^ya 55?*ͧ(1D);I=f 2ti%*X@l*h;vFtN`gYUn/{l* Qk:o>*B-C"+Q.S\3WߤI]1c[n]lo޲=4` by 5X};Y$4*g?K \vڥk@e}kȒIMRSפ^zM..rCHQ@om}wj9zGIڬ7h Y,..x醧(WBHj<ӁG]aN9Д—ohD#i$DTFeT$JRʘ1+HfIfIffZdf23OOO XuhW5_|U)ŞRRR `jj .6]l"u:F0S1 (S HuLuLuRRRԽ{S'$O6$mH$Htߓߓy}@`yM7B ) X"7?dꓩVZ3:3a>6E7tzi\qQ4|D*[|`ͻ6ڼ0O[wލz7 v#uQ*KeYxy}UUUcXŮNC 'W_rhьv>۝I|_),db*J[L*T*c={:t42Ggl#G, ;%S2enyfmfl)߇)La@S# )~"Eڤrc{ V[|BH...h梙'/'/'/sB!B #G` K7,ԕԕԕ6{V™k^\\p3pxŇxxx#,|m>WyqzD -Z(XxYg='_|}=9{sύ>7`̞N::-[F^zi#IL*Uh+K/N=ILr6.طi t|h38_S/24$!>p.iK_$$$}vnDB!Br }kETDE`[me>wazhl}CP 7:p(ߡ|+2ڱck|55΀HUxⵋ{{{(G!@XX@*R4HyxxVYqf@>[>[>i MG9|m跡@LL _L?^\tsEe.ɛ>Ꚛ<yh Iʥru֩[ 9x!I#'z'0C1@.ݻtb݈ B! a]縍q6/6SέΩt*w:7phݡu-cZƴ0[_QWq{4뾷|-ʷY|dŁ7; hڵ+z 0>~ ̫<@+ ֧ [-8ݍw7 4nl:O/gggS1bNɪɪɠ3$;l69Z~[m)wqzp7?B7PRu 3G?X`[|B!BgHm̮2 QǨV!܊"]C]]]yeT\P(RH")9N꿯{`w<xO%S2e6~*b*mff=cmac OJt_7oc,**ƊcVYYY>ceڬc:瘂/6$8w:u4BrAu5rY```=j M!B!FK 444_|]|] @ 4۠nkm@kUkUk`u-|5AA*I Vm^yfkί&Ξ8{l_a~Ϯz3R)S֧C? BbOBn6d2d0݀v $HmOs_Xb5.c4^|\oc=ӦY| 4f,%)%)%vlB)"mۏo?eV#[wӃ/%~) c7|3_ ԯ̘PϡC[~l:ꌪ33555?Łu뺗!+ӱcO2O?QCL~ۿ2VL3%f07eKȋ5jc,PdB|yZk32Უm^6x`͈n,w3g{TB)La/s:v,XX vA,x;vm IP&H3#B! }l]ZS,N3|;-`TQ F]o`3, .a]ºrG-w-;вY*Td)ٗg_IIIppp ''0ôYkYkYk@S@9c=&&&L`&8^q*U* zͪ7Z@j&MΛ$$$uPu^!gP[n} ;&vL,%KHts]t#/ ;PC?]/686868UTSUM&UC/j`.RKcF]aVR{;b2d0`[mUU>|.Wzvb;`&s;w itB!],` RH!J (,鰤Ò?*v f iſ~D;w^^{g}0àNWU {ko4>|G\um׵] ΀oƒgڼVK}.|{!I <Ļw3>qqq sa.|Bvl'`9r0`Zi:_n|C~h, XW_)97TB!`3|>ngκ0u7X_ߣu׽q>q>q>^ҺJ@?Ҷ;9䐃*73>S2220A2\˓/O>|p`X?C7z-L͗t׍8*s`[hSZQ4 L9,nfRD)Kb*b$hik.]v ?3퇒2BӖE"c32s cJK!1~UUW빷ޞ{mmm4as#)sGr J{.؛ozmair&Mp*Vpj L3mNt;`=}Os=ߋNZtjL*1Ĥ 3#'B!BHf\@0)dRȤ$$$t=Bt#}!@+B zqn]vG2 !uoրkkkz*H|~?o=n+i@^h\KB!(!t7jd.2 t t t5X_cdnD `G|ygN4d!B!Gl֩^;v8pY gKm.EZE~v7)_5ys7qƝw rTQ-Ͼ} c׽!$3pǒJn* W_~%}U@g6P1Eb?X@SESES`tm<22VTT׆m6w=<B!9\:0}h!N詢9{o@h|h|h<0ԠRJ7coތ廐B!Iwp>|垖{Z7,?߅$\}y}aÖ-MB7o&. JQGM,iŒߥ 8r+V H5I5I5%U/uMPrS{]0B!$G=>>.z,666e˗-_,.4!B!Ĩ{*v=== ħSIr9niuiGGptG'=K_t*=d%n*% `=ڠzg) H#5Ԡb =<8;ܹGn{|Bɑ8@}Xa ;;`}p7 ^{8tKW; R|pB!BMfC`b߉}' 5@j*Tc.\QQQUUUb .*uԭR?[8%KT^q{Yc.޺wim ]7tP@5[5[5i7?8{tA~<1`ll!Ma S M!BU=ۄ&^Lx1`dZ#97^Nj' ..X;d퐵C.ӻL2l>|9peʕ)WClBÚd#lprIE,#KSTT;RH= i\Ӹ|q>ĥ|(A68GU.!3+b!;\s=HHH tB't_V0V0V0fDm{aTTTDc1AZKw!C!BHޡ~nii]pw]uc22)HƹnWRR"\"\"\Sb pm ..`̗~o' ($yX?`=ZݵkuH7,_^^{y5㋏/>6XOD$En?x]"S6eJJJJJJoI$m#ޏx?Q1S1)2ibﱿXw{*B#ؾ())))))))))=諭.^}YeY 㗆i_F__>\ldž뷮ߺ^xrM(71q?q?q݈ 햒_) *L0wxw0!Lɔ|ܹfM:F]P{`mZX!mt&ڼM{ڴB!9gL1գ+{roi 0&09)l7nYzg j{׆_؄B!>uJ)QXYheJ+OCs-?'?'?ȯȯȯ===@ee%q"^Eux]7|]}]}]ppp o?6IS)41F[[[@ˁ-J.+`=8n {ɾ$~AY>m^Mn1|4񼢠pX{c!87l4i쮼@]wYw! ,Kӗ/Mbn܊>>>|B!%8C۟?cPpC {]`}}ajdK'OW_1 $J Hz:5)S' NR:rrr7a!98;nUmW]vso"$k,^tҙK T$o fۻ|Ӊ,6 ,SRRRRRR~OJ $mvTQ_|`0939-oْK/{C l_?5Kf,c|6laLCCgYYYFoľ8CSR`lŵ^{g{BP!cT~SÙJ23g4<"͸ys BF*RO ۭn,,,h+ZgϿgSϦUѫ888 (` X]hB!Bw_L#L#L#)C 2{DPPPL>hۣm4;`In?u^ݽw ӏhB2gĐg:GH60Նr6/8jSUHx?+ߜSgcՆ:B! ΍;8UTS% aH̹yZiK*."{B ) =I!B1b |]0~({`&LMM֠SFnj=^{X,tY( -&-&-*4 r322FumT7Q(sGSd (RTJ^M'M'M'P2bziIJ=%uY?%B! }%,a $J!yBͺ6 t:xYCHK/]z~kHlqi3O hk*0jD!d %mWw_,Y$;&;&;"mhyNOtt7 r@iD`́1TRqJEYUi}y!B!?NN{;Xye /@2 oI}aaΠA;3O<=`}LH]+ߧ>ȯ̯̯D&4e5sssطc@YOYOYtIWߛxHi=`-x rC!$΅e~uuu`; Kx](XXXu$IR{=㆏HIZB!}[_ׇƏ?n8H뱩s|MW`O'?7o߈'-!i#:tufיDω=~L*!L3ϔ6N8}t@%ST2%-NO6W?fC Hx6奴%%%%%%e&)La\ԤIQnϼ=LFTLň2)-& B(G? 1&t g!FIIIIIIIIIS_FW]e7<78,dJL[ _.|cM85q2틒sܳ_g~c? /939;yw-Z5~W[&01텒SF4 6/Gh  >'B!$S{Zj777lr C FsQ}O!oĘ1cB!Aum*TlwaWG%ZZZ`4i7⻰?񀩕ߥ#zuZ[QnEYYY ID^f=|vf DfBLnX1tCmCmUs' pvpvpvVZ 7肂_ o݈k Pr.@i  CsÒB!dP_u_[{n'PDu qяp@{"}"}"F |ri slBT .M4ӼyOsQAǻoX|/]xXyXyX|qu\_n]0bT)/sF(9˔b!N[.yݒw{㇏ьTRSSSknnNAlwƜY}e3vV7[s~fj"|^4Oksͅ6`;44ҖkտVBBB 3:e 0Mbk`S{%m:Ŀ٦A4($wԴ=`w!\IiA5f͌DX`} a\`3| Y fz}JS:G B!ɠǿ:uM{6ٴhwӿm<˸{tKUѫc;`}LHcv) @r+g>t7 *|8{gڌˍШ9Dyfp[3:uxpJʯS_#H_t0\BJ2 K[f  |`T"BpFh(Ă |7]t}CaB!dcJ*嫔mܶqF`i߸(_zKHH.h,pM IXjsͥ6cZi5 ##ރOy|[^ny%pgȝ!wd!وS/v6G[(*iSL|l#Aw XV0Sl|߲K### oSCJJJJJJJJJʟ kWG< vM7VXbU v2e} CJJ#NQeQeQe*WɿJ!Y˜1 k.m.m.8WԦ`HhGFе(U7B +l7zqTn*O[OB!bCs*[>j#`v@FUodf<`߅$L߳_ )@,xY)S555}H B!p{|.( tnҹI&6mۜr|7N|]Cm?aW;^x`}Oۛnoںuiz$q~oL83G 7Xgh Lw8?1W6K廀BH*U+???hڪi[[[)HA *q(}O@G 5|0yaxRI'W 0GڐB!ANwaC!M87AZ o8ם)S f 1|p#/}TqI8Gk]m(6bzg H3"E.]vqE l^ؼyHOlę/I k3a'\t] id mDBHR~!Lۙ3mq%, B '݈%%%4i^ӼJIDATSOY>pѡ#>!BN)tSV3g2`d )kS֦E^d8T"47U뫬 O؊ (#[$$$`瑟G~jԮQFmh꿬Źor#xi ֣)L8w.,fzΆV6_&m`LY̎BaڲP. Mu:ՕԡCS4 ` FI4mQHHc>VC@IIIIIIIIIi-{{{3gҟI&12eKd̒>&I4L-9l.]nH GJJcNsY&B?~WN^9y%>> G!B 9COW_S}M5׻_~ m=րVL&9K#4\uyYAMĵki܆oֲB -+C -6X(م0㷏noo8GgKM/n^|ZNdOI=$BH:8ハ>>/_0ٿfL4LC,ߓ]wv݁Zj PU/[[:B!ĸ{*sssζm;"6ElꮬJqG#9s~W~W~W.twލT!Fȷ4wq; T8^xut7TӍt2=dzt`d@[[Dq#Vjm.hut ?FCm^kYOwA !i:6جcWG^ye‰ZL)HA `?~<`%l;w< B1n܊&ݜ3,fX9sl(U'9gqu Ʀ Kߠ0# 6ڸTќ=t 2[vUkW-yUW1X_}2o4GĨp. :,fr~m2FIIIIIIH[v4i,cg}e_S35S3Sɘɾ%w]/~)Kt3WJJJJJJJʼ" G:el['c%SK48Kf,Qk&h"#n))sp6 m(]"wJdJyəSN;ߗB^()N73$ ]_k*EB!L $RTUIV[omoZ|m\YOwA ! PCěoJcčyZgG8ϙ=u#@'zOv۝ow>֕ZWj]1X_{"B&0 :.¯WL_1X6nm3럧3!VQnE&\~ryL3-ϴ4X_}s!߀sm[{cDpQ8Ph8DZXXX'_&~4 1-16O`5[y4KB!$'\>+h-߇}>5SAnlk k kG;v: d=0;iv$nPB!c XPAe؍A4o?`1G,NY8èb*gO٠k`[/^l=`C;RH1CsB74rhܡ90̾3EjQb!yɇn滙`=#ƇS}6_"C/AΡ mM&mA!p.χ?{h0aPEZ.r %{-P@_~ 5(ૂW_}~HLJLJL2x jO!o9 husN[of1b&zMhO?01iT!;H!_$''3 (<0ӻNl[ૹ !?@w*++ L*3̤2MC6   ܹI~_ Lj8ᤆ5|Z@+6g{7 Qs E'r֣BHNߠԹ擛O1fcƘG1x]]?2vہF=8ໃ#GsimB!y~$rBe -lhX&lMPA<]8ܳs= l/R&NU8fO@Cgܦr~=z0XF!}$َsSM7eޔalf2F4$է6cg6x&cWߕS=R=R=28!Դĕ+W26zDkL3=fQJKEif ظ㦎j %wb6!Lni2K2Ō *T(+ z\"7enܔxSO>FSRRRRRRR&0_|Y%csK-9$c/#_FL<8sބ {h\q3nrvDYn 1ci4`ً0ˇ.b@ 442DIi1mҍ]]|N︔Y\rs͌safjd z;wF91k+k+kt nSRRRRRRRtf0hhhc-N8$c|^eL}G}G}[8w+++`̤Iښ2kӠ֚Zkja]wU0_9$q1j#c-- ? X#JLRc]ACڬ]]"B!dho-] tx.y.y.jxjTQFvhUh1X&)La @ 5W`_UW5PXca " G( 7x=N!L`w/^0=`z(UV (.(.(@H;!zGD@GG033[mީީ h+!K+ LXczo5X_'C?( IH6>l3`w^@(.]ſӫmڜ;$r'ل\0*'6S]"B!d!}EOު{rKqgsn\FwT"0jլ+-[jTq3 , 8tv-Zص@Zrh ҃҃҃p^ýCk9BM8=_hcm軴P%P6 @;ifw! 2hPfDeFk&Ml{aOo7e={8Ǝc {7jիUV:lwB2ab`ుEf|TܑHAT7o_zW+iHkB2aMv Yvdّe@ՀUKׁM6=ۀ躜$=1KB.!ƌk7TjLY̍)^|M50v';ə!-`[6&k. -hvgsOIIIIIIi|wkkk:ܺsknqT*[m:'jfjnH0 |g20adt;DOIs\iӺ'cZrhɷ$Ș'N X5q5q5h SDIqjf6KÿQP#! HߕtFG!\/A@mf̀mVoz5Ьs:XQ(_Oc 8Ӄ+< }0"/b!$Gq}`` 0gH/{4X_}H岇~Heqeqeq`M55))NB#9r٫HС>GpXal Ki222D H|={,--- ((hkk$u: P( )d H24e( s9˜֗e}o i6l&Lf=d}F %,aw o27I$M^zqNNN L3`OB!:.U\TZnjEStO:CCEmy=`ܪqƭ;c<šl׺RJ+{w,8qp|KG‹-N8\kp +V ?!Fq96;Ҧ% :u7n}]EMӃ谢Ê^9rzQF@  +V, (إ`]Vc,Y$$$VVV@TFTFTTTTTTTҦ...'O:|nf@؞=a{[f@,\.o $UIT,,?LB%y=zq=sXYY!g9aw =L`b؜4414148}0`4111ϧBszVn[#G }jkUתJ4JU m$1*Jw L]:uԥϾ?wa cKJ.)8 :::2/Sa&a&a&@S=O<t]OlTmSb/%"CbYh)~jGHdnnhW]v@Ր!UCvՄՄՄ@?KYOPB U,zY a303SQZGBf za x0ag= 5h+5kjW?}BB_WoRդIU``сE]Xta0 0e%Ƈ{ÁsC_v5|WsPCM5>PCt^ndB!Y/[7,n~ï?RH#hԹ3 n-n-nm:TAD q*͔͔̀B`ne>oV @CW8#Z:nuPcC 5%XBaSuQuQuQO?Z׺X%Xwa &;-!⠏ڔj1JJ\ q>+3ᝇwػkʘoaoX/|12va36Řc^0Vi妕2&n*n*n/%eH3`yac;wg,$$ĸHHH}4X˘Ma6KIIIII:c-6b3c;pcI'Ow^L1:*b$$$_Wt^Q>_{42/$/P TcS7OEAd%g6.&l@*vy622%%1TXXX0ֶeۖm[2e[03nnn4Lɔ|`)JҌ 6CM59ԄB۟?>!v@Ii|F5kԌ1^:~G ~ORkNؕ+IWx㡎3O1O1O?JJJJJJJcČj֌ńĄĄ;RX 'dく>`տ}5c7Lo0-` #?()pvB'tcQQQ;ɘKĹ^Xc%kԷ/ %oYF@Ǝ"${qZmh%%pa?cnB7+<򀱤I6fNNN=z`G3Vԯ_QPܘlUUU]xՋH, >3vk2zz魧3fccc%%%%%1g 8XW)cg"DIwz'_XOt>alH 12/%g]*v؅_L~1`^4RTTdlcL!'5yyT' jMm~1i$JJcJS(^x⌹2v[s[s[Ø}:'\ nt*JʘccccRK.|_x̍YzE3̮20xxxjII޹ˠ!Z|v;vckVKgXy)3NaC%J-]t \ӔNQ0S|Gu~ԙkp۷SJJ,L~vsatӕOW`B2yE n(:RT{n Ro'@"@AI3ʘ1+XSʧ+n9Rܟ <<<>s***jrk:'5imm9s<KOOOg#~gДCSMaשNu*clC27b V+eҌJ3*`lŔSVLa,vwn"߂s_ASYSYSߌ(kQ6!ijJO'((([|l1 o>|d>}k&;`;4]BMڼ|D_vXNJJ, s:uc[oe:csIjZPMr=:cCeVZj2G'gV&[4dАAC ]0ta:HBܐ{+c8z(c-z٢'cE-Z?-5 A?[[[ƪYUf+gXHÐ! *UOqKqKqclJ~dγ()"3 XBtBtBA8׷9ϩNeLOO92^~Fߨ?!Zɓep)))33dtf7ocfj6g+T`#`llϱ=d/()sdr賅1/?/?/t !,,Ό_usόYZZ~1%%%%e *MMMݱv[=`{k&UN|8~>7e!4XH! vh1jʵ(ע\t"27es )R;cUXV`2)3?$H<+)WR0SO?1fsQRRRRRfIfp+W5 i,]EwUK>,.u"~q7k%\%5))())1aR>|J0pg}p!_pFl z!c?TW)strz?"coBBE ڌ/;4@I3 z90vs7;A9K7P|l|l|lk[m鶥&l&:ѧ̥AccccF1&Eɢ v@~4HU*R+wܽr2+9=tzlPg?Fd{ct? c'_|qcWc^?{4+JK/ 4*ԮR;6 ٘7lll;RH#:dE"UؤN?2ɵoF# "&v[zccwvv{8v'zL,@Q0A ERzy=/ɜ̤>ݻWw\+%o,NCڃ Clՙ;J\zǁN:Ԋs_}ԃ#w3P 2eKf+++u~/H [JʌLBIQIQIQF4i; *H&GˣьL3fy+1^*/`[cWc\q]]yuՕ%I^.:/"!%RߥclC 7f̮]1b~i$JO㋠>c%KfLQߩX;n}yїYYY|԰2oF3g󟐜A:?R?R6%%ezWA  soc?A$y 'tglg\gLrHrHrHc c1%eF{D0|H!͇0vwCHfzw۶bۊm+kܵ+cMV#JJJJ\777UWq\q2e2˄1000 G<"Elcl춱ncL& ijJʜAŷoBN#f/V^xy ƪTRJQo Jܗ)< 9:h*d+ ra0E.4B 63l&/M^HE*RuXvoS(m6@}}=1>b|x Ft@kk++~W. ~bbbm߀7`VެYy lֵ X8hq{^A2 {ꝫw ̝3w9@? $HB{ <ʴK$H,̍77ҼK.SSS%ɝ===ۖ-o[vhp)R@ 4"4"4+BHftӽNw.SLlN~dzC}PRk!/|$|$|TϩS=Kt#;#())1عZkB 붢ۊn+ڲjsi?cJ 1AaAaAa/x1718Ό?l.| cKfmیUP9:؊gO >17M4yӄ1RRP//$/$/ت}ǘpu~_45e^N ;-vZdC!1/B~IuuuẹGU_[}mM7n4=())))-39GƑqd_cÒ%Kfk4i%o_d&g~=c%Wb_:L]AII ܴe/\2c|G{X߫}ʘVǭ[.®?RRRRRb~;w5+ҬH"yzzzzz2|q1|||΁!4&y36vt[RRR2WޔvkحaNHg?@ ˲u}souWD%oXg|Ʋ"$|yL{u|mJz-qC36C36~mZ70bbbc~{altt +1ffo.(N^/Xzh>}p+VcEEE|^z=&^Ciiif˜``@G)HSCU_W}]5cgϞ={,cSSS:#m(ߙ=cbŶm2Vk2f!y%?d\ruel\q]?uS}8.М$+hēOJ0ab&23t9HIIu1)bRo71P5F^0z!c햵[nY=QR~E_QMNe:}GDI#㺎:c,uD:'Y]o@uEuEuGmzFQ1H4 9is$coԿc7xs ciii?yft:OLLdl3` ptޗ~CJʼ~6l6l`l~M7a,fG̎9Kc) z`职 ?~&ņ^^ez1&--5v~#H8 Q0N;0ޏ{?2R-ZH5T UBvT0POO#;#cSק)%eMEyGyGyGiꧩdf:|/{3(C!Io#o#oKoy&7P!y^ ":?h$zBV e39!ZglL9w0\ЙFo@Z8pƦrKƬZ5jJJlHU}&Md,&&FOSHmۜa&&&Rm()R/:+-ǗD UoSz[پcԛ{3 dr/3M\\\Ǝ>kj]uUp'p" ~5/׼\svlc,H#|5#GFXbtaAO@}J)݇3v=1i}i}ibwɍFxi҂&[M0ye畝W2VaE2 5 8V+c4zc -c{9%''gΟdCkҽ;cܮܮܮ:.̵ٔ5eMc!!!:D{D;xƃ5kFg2r:W'"@ɳ_޴ܾTBw 2۔;*[Yce5c:N06#626md7,Zx/@5c_ :t.1)%%eN/W^{1Ld###UnTQءTA$'1{L|*c뤌9vj:]SR;U]yvٌ=.:;.gk5ikV{Pt_2OS6|IBH7%@ՙIپ...aO?7|B T?}ėjۋ1V 菥zY3vkdlzB*7ܨr0%eNAdab/c̃y0WVOB S6dy}ac.],fL0A0A0Ot@IIY~nnn_ۿXVa[lɳ%?oXܾ}q~`?J$'3P/3ֿW^{1&ExMIS $i:uصn׺];#ak&cFkצTǩL= !x:PFmJܕB!91?|4ct 9 :Ux"B2BM^6y |p@z@TB }~<ʴ/:|`lg?kf>}y~ NeRˤw <2{d oK[ xc-DKVU`{ !YIAA(T̩PE[_?P9r`@ْgK,Zt `8c7VwKH$r@sPPP.VXbU`A=n[X `zDB2 7A)/h)h)h L]=ufN  T{Jy M,4ӚNk:؀ ؐH5)R!3ylvo ^t F|>5HV ?uy\Ij1Dr&73L+ho޲eo֍7)S/^:t_fœu;P]Ai{yFVCB % TZkծ@5J+m?~6ʻʻo,f"/|}ڎk;l޼y@ѳu:u ,ƒIIIP){㉾#w1(}_G[6/uvޠΛڒ.#MfA 7eu"B~Fzt켶k=2"W۴T<@ }߷?`#*r ϊVzݯXVp-MULS` `קN-D\;NS45VAǝ -K+8]\Mܮ WGC7A# RH.]g?:^udaER)euc׍]xI5 6=)>`xx]w%wwwќDDDAF i|s-׶m_Q(iq˸I$n`lclclRJ+@Y&eMjܫUwUUuPSN;v'N؝BG7^z\i4W_Zi=,㛏"X@2oKׁBzX&hM`|.?\DqWyWyW ex&M$DHޱr:'hC{H@pDQĩ&(y\ohB^Rl)=Zـf 7ot_JUplܱqe5SzVFCu7}Z ,ymΌ>!\Б*|?\LN(*Q}TK##-O66q}~B كO>:YqP7nR$`ϕ=W\9sjk;mηVƭ[ dijEȷH:t `?ܬrMjQɏ~w_P]2v%9sxg vۀooo23W_3zg$&&&&&J?4!pssP6C⭊* (X6l"P^{c-ZBI %x!g- [fΚ9VVV9VF觞~-<뛯V;FZű"d/Xa>}軣䫓N$$CjƮ`4M+*$kQإ}{ aK–-@ʧO)RN?j8?d===@dP@EY [PlA@1b6l?((٢d-vE'-OZ,l,l,lNYNYN:.}K/<{Yg|+< + >|j"_ߟq֝\wrI`|wRۥKmDSѯKӴ"uF<$[E y4BE 5`p1KUKBz-M?|`tm[m7h/Xԫ8,VqZ3{ "@ w[=)>?JU 8_:`ZqSʌhBL;럮 uב^@jL/x u[HU` ಽe{0{;wtH9 uxܔ/_ąŅŅ!Bv.tx.]$z7n] T* 111@Ŕ)?SLPtQtQtI 2G&}PN('4A2`֢E[};viCRdH!Au- {\qǀh֣ @QQ'6@OeB00Et<X-]-]-}VYQ]z.]߲~}C:p9q~- ɅFξĻ@ѡuzhg<0'ow;Xo0[c]v-L;2ȴ#$~R⿓G ,xŲ7/[1/d@z"b.S9 wBD?n(`lbX#y" "# GUfT`em 2}U0Xw`݁u@~"\\, { 95ռW0̄3mZDkDkDkt!! xYإإ$M\H~81 xxxޟ~ioz& B!#F 1r?~}@^^HEdvxǛDTQ*`$2#s#s#s@( hS `Ǯ]PB U u+ԭP7Nn'EyVar!CEI$@SE!fYmoO_>|pluC]z< -|Q` 7ܶmsۦ<$#$@:ԫS@I& p/B ,7O:PgOEGhh.RJz@8@CSMsύ?7pmµ2]'`eʀ[ynW^5{ >Ĕ-ڝ7iww FnYPE8>h4p;@tT\I  lضmtӑN@L/ Z-mRq}/u}z ny@,J%b*TČ3qqqb6l&&&qqq@lئMq @ʑ#)G888@PPPLULUL E Fa(O+O+Orrrs1rm'hhhוו}}}G (A 0jlب1`qub5EM5'O,,X̟?7Xonb;`ںuk IkIkIk@xDxDxEoooo|'$)p[&nlIޒ%1\w$("$Tk+m9ª o,O#,zM>,7LW:;WC힋*7%* }4H.SV$d^z]xw݅Uyְ5l 0ԆS*,oP[\ʙ(ldz]+Zz;@ukߊ}چ #l/;{`B`h>_կzM6l6WWW3}6A4FM5m4g&+B2;7wn ~8@*Xb:9drjjj (k(k(k)Tj $}J Hޒ%y O}Hٟ?e? ȆȆȆ€M&w@.[[[Vbeieiei@TT_=舎f f f<[-WWWxxxA9A9A9@,L&`a0DDDEEE@CC$%%%%%q q q @pOpOpx }>|;;;,!T^*8cq|w=v6lz!y1a IH,[Yl,--?1q@#4z 1TTT{Yhܣ9 @u:꜡;?^@2;Х- }͡?u(.ų{Is\o70(aP2ŮHϛ?o9Цzm^z2l V6 lQ +gL?n"mH{% Ɯk( /LMTF<8=v*?cz6.6.6.q-:ܯs?ޗ^gi tuc׍@J)%'$0P===ZQkE#8w6ll8S!Bȏ14օuwA` [0H@tCC7jZմ*`ԂQ F{+ׇ>i 68`3@YYiifkw ,u&>j1߬P: ~?;^W"_4-e.|*."y)Yo$Dܾ{1cAAAJnɀJH+XhB!iz_ 4x鏁;++؛^ſwiG\T3bf̈uN9~nݐ!tttNſ{w׻=QXu~עCzf]Ν4w$͖D2UO?8Ms4-_/*0*0*8y'11 f8b]x_j^sz$\F@$ E8X 6a]71Cyyy%T,XP{v[mrhZB~A8\%Jr`o:\sM`Wg\ަM}Q!B+mEfƱc[*mavf @auGC?F0>O&""Ll;9uԑS~"?.Y|;I&L&_yY^AHWO{:O鐟B WmTI|TJo9}dU&M&L׻}7xM7<'}Ӏ~,& +bB` ! \qunFuّVVV]^wy z666uuuoXo_BH?h*l[k;oSMQk⫹lL!b#n˻-ҿ$NK8 TM!C: --WSi)))^z1,$ԛs0u>衷yA~ vC2_b騑:[/SUe aee|W]wl`{gFn񮭠P6Go*8!4@xy `9|fʴ7TZV.tT\oS>zQ3mUVZ@Ʌ' !qBҧ-<)++^{6k۬-0ep,]]]t֣drC#B!=6^7J}z'`{ݶw;@? l:L$$! _ MGڊbbb2 /̞6{il&yJ!87|-?4VC%EMMmE4wФv4dKsJt^+3NoL'E_>PвeA ͍77y7[6VQPI>Pq#\GZE4Ppo@q9@gu+~߀w5xW_ɿR濟.\ 9#dk͜ɽ{%N0?atoؽa{&M{uPy pppLN1 HUTz#vzn;v-W-Z\5}TOmٳL=u.?[*o$#|y~9un\N#W;;;1_Y*fO"s{OxAs:D (Nzd4mpO?yT1'|&|&|zTQG>BH6Y_-f[6`vV@}uL)2Ȕ"@kY8nKB!$}}IҫJ* -t[lVỲ׋^/zH143!D 0tC's_}5`kk拴CH '_юȠ8~o澙kxyBN4%!̠d:/Qz%g]ȴ VNNN'<pq=Sp|hA0Pe YAZuWR x%!8;+ɦ'lˑiCtsppW^V _ЭWnnn,鼤@mk ̜9s̙w> zHԢBU9On2%ҎK;.xxx1ٿgy dDҫ^^^tk-`rr0`|*SEo*Q=zMZ6ipw,0&;EQ@5碵tˍ!eCwFSxSM7z,߳N7Fs;[ny3l<|󉆟O !b~^LD*쮲@块w^ <4###J_/н~B>ܧܧ1 ,t\iq&D$"TSiTNiwgޝywc厕;VNgym.C.:d=չJs;`rٽ$o$3U^O!!@&nᧇm۾͠r  :gh(1*+rX r%;VFgAOo )0j2dj}_PG8/_s̝2w mrx"Er:עwBH (a0JE,:W\sU`pr]/ri[BH`#U˸2 \apEM5Y|n9*M`xu"S ^.ظm㶍֜5g͑@GI%SܿVo9#~X$3i/!kFXx4&ϋXEYEYEeE=z 7ol|na\o p{r hOE<˛ SXqc^ʼy)h z@A=^^^f7 hwݩvIs&;S:7~B!ߩx㩏ھ 8㤎 +!iH:맊Bh+ST߁߁p} xBcr H*s&qE!C ;,HIIsj F0mſ,:Sgh1Lhl)҉dN5;IL٨y@I쇤˨Qoހ_ɁɁɁ>Hg0`fQ!<)`>(WOٟ@Qѣ2}6m0Zjhi!$/h{GpxE=Y,gYmv 0ʳ*J>+$>! f!Kj! -[xwq:0qPG漛nd3d3d;4C :"X`d `'UP9qFn***1 c"vB.Mſ:7n)咲{CIF HVҫOv >HC" r^ʼ3(@?C0P0P0B \:tpi`ǕW~q מ]{v:*uT(B]?!B~?̬2*6>l#QˣG-M6Fma+W)x5GGG`qf]uqEii}~ə°a: +<0pUTU={fڛios-ε8Bgy4`}IԱ:/[ $KQwkF8[ˑJyIyIy PSS~\?OBAlirȀ!/*ʱP VE@:Ej9#8#8#)ߔooC WRRR>BLSs+V-БCGz4ѰGC.O<vQG} +++7B#3O±c ǀ e.P4tAC~W^zdx=a#i*Mf04kЬA)ASISISIӴ>7 9rMz! {FghG uu5P>@no}>P~g V;2}$ L0IݤnYBumE(;;^w{uû>ݤvM{h&;5 bD1pGwpss~{ݑ*sC3S !$K-Z,zYgMoovݠQPbS]v0%uJT V+@ d$#97,mZiA+5ʚihRL7j@r9S>s@i,<_v*ފIޠ\\\ D.]<_Ϻu&Kf/|'|./C?T1<P  GBѧ?ǣG )OB>iSx 5pЪeZ@%Jv7oLmBNi+ 12e G DBɷ˷˷Vp_E@.Q]u]^wx5ՈW#UUU !d>>8!;!;! j[mFcmX{c퍵ߨohG!M_;vյ+ǛTki(QB[_Fb q@:S4 7T'}VDSJmTqsau^ү*>l Eȋ:g܆@YgX?+`Zr?ɕ{#B, V@Tgxp_RAUWmj0av U*=BmFz&ń GYhզVGNƝ;>+TaB!|#yj===QѣGE[:;J(vo'3:OsBrmytm݁/vh$Is4BWq(zPn ܋w/Ngy,B>4#U/wV&T@rj@r2%"Zsꨝ |Y)K . + *Upssn Y!pJqNJ걘U8x< xQ8bˊ+֯X;Nȴ*1oƼ"!d$C&De筟~ХUV]Zti҂K .:>tRSSap(fB! 5Y@ҠAK5wY_bv~dz~ xKR r:ӯ@yI!Fc_oҹsKg`v@u}u=Ϥ9C!0q}jt70!yBD3q:'`BCmI.tCWz:IɣY; :):): (B(WniuX"XT/My)@\9vj~ @e_Д@ i7֫577=Нt,;&;&;<|j !$/`қ8rˀaÀ#PV[5n_6%xtэG.]t}}}y]mE $I{|ѯמ:u <`ރy9sL:^uo*"hhhz}B)`#HE*tFKJ.) 8Lv0Yy$gVK /IDATZfjcYqOo[36QKɑHScs3u}ζӠDyTOO1#bF PtBљz%땬WK tH+0k^H^Q4/RP*Usp.23? PʀsvMfm/9qN\Ͳ7TBSHB,xx.pҧJg؟د_W_~@뭭 ԋ_/(Zh͢5&&o>pBH֫9!r'燝v~%xI^\xqH}81؋?Si*~?TjPAs^^^HAK;? ;h|ɓ'%O왳g`W]EvAZmLђLۓ_3`u.ӔK)f-&AZ5;K'Vgt ,'Ӥ07dE"FQ=9~Ey?#;z(xS#M|?mp%A_1u2(&8{(S Wk/x5KU/UPĦM[? +!0U* )pp;xUW!C4i<ֻZj";(9yn!4Mththt({B -׷\_HvKvKv~!8!d;mMſ 0Oc?ON<9$`ll d͐$B )>okkk^Kz-k_%%%6MMCmMMӧ\7zS?ɍT6U]\QBP9;;; {0 d^yy@&M"7Z_7/y 8u@7Yջ@ꅆNJjG-8?/(K+K( Lq@ʡ xxvn߹}vsPhԹ3PB *N'wC!fiGW_=~\jqr 4i` aQ¢E:+>#/D\J[nk f g g : ~iQ.# 2" k׺.. ;/;/;:iKnϪc[}uZF*%ͱbYJ@=osx͏7̂͂͂3UtXay_o k!;^7k:p=9S6c$NQX`6`? Vİ8_@Y@use_qٵ3pvgk9ʼn޻ye\D!;C]E]St PPCU4ӼP;vP MBHޣ VxQG=^WzoY߲^}9P dē鬈z:B:kS xBcng8 N*Ҹ ӪӪ&M6l))SF6 $IѤJ>O.W;$7"QGuSgE%| |vڹjgF4P|5O>U```p+p+p+|c{2ij#B6?_K N N -ZxyyW/\pp W US?!$2а*V8pZ4ihPw Cm2U.㙦g}`ww^}zu*%@S@iǺTGiW#MR+QQOkS@ԗ[H~זk˵< {, 3'^Ho( M6ڴv؁ ARHءפ@oM@ysD;CIT{KDN֧t뵜?S3O<5UիW&/c[m9Ygi{i{i !$_ΈZV̊Y11ƔSzW]wʇ*ׁ SBHN'E"ADFF xᒇK[soͽ5w2$IX@e2SB˜6}M7=+Q~F:ӞjoI`{;PC [GlXcxB U5Kssqٽd**"yّӳ:>$ho޸1;===D$0wys333VaVbzgeRX|w1  SDq : ꝳ Xù*jOzw]`͓5O<2m2g̜UݫAh ~n@h'PZj/TPPϥK=6j6J6+ Z-l5 dܿ? x*U z qqq E& i~BǾf~kkkǡz^8x`Jyz^H.a{;TS̀K7Bo b)H<9!9(}73tIr5* "yޜ,5mZLTg52MҠV\!U!U!pﹾvW]i72BFe^wn|Fz_ uuЗo{3%f՛2|TY  6{s|93`{l]qCm`㊸G@__/;2j+DWv@O> X6B!ŪUqEJ<*y*UTPiDF%#JFXݱdBrJ(P$.'~xPA5{UW x,Y)FJU*\B^ſK%~rI`ҼI&$V+ ʩ$w1Ptͥ6C̆ 1:j0GHm͐o5={qm=KHFzIz:RNM7!@.g&M**߂YoH+h1wsPVVXi*J*pyoB'dhM6$NP-fCi 9r P-S-a{[dxi m|.4 ~;2ʈ*#tW]^QE, !d-)b^Ǽy )S + 8bqPdѓEO*Uvکj'j@Հ@oX[[?=#Kb+VdždžO?:pgѾѾ@WEыSk14b UBȗ˙4 4fzfk`gDD;׻vw>3#GxAAA:ϣBi*\߻TOPUD/!]<sIb+4i3лe[˶-p maz#DFF{2.PB x H 0vntFݤ`fMqmқK@-&rlQF(Y%`&:sbOw ~Vu__=DA@ )@5j&LM7 (**BUx^y ğğR6Nm F0TfB!$`BnAnAnA1c@[m@rQ墀 q*O:?Y3[g $R f\̸q@hz???#GǏ^N~9d nVܬY4D" { .ֲ[EC Y4h6m8rl)+^Y X_ڄ@6F6_M/f-Z[Cl wGہ÷>8q#,HzBESxn݀K6/숲#ʎ{*T R1(ҨH"@@@@ZZ'^ ~b_e2VэG7"Fl c/SO^~|G h[жm@7::ŏ4OB7zaE-[T9TPC:ϣs7ͷz+0D1D1D?\yt<&DK[/PCuhQ[c5y:Uh4%@. j&WM" bX eO?> //ߏ?i*Zu Lֺy4Рhio._@}@<9|߯>/9 - 瀅W? PYf8`r ؀ ؽc ,ܷp}A t@ <숳#Ύ&=|s)S:ϣ!---Y@E=_P¯_ ?l%ʖ\jv ,QDYg?z#-'uYpbCcCcCJ"+AZt{I7i^|K  )SЧ @FF_*!$i 9|гI&= +8 qN;＾2~!'ǟr\yt&DK[؏]΁L0p1bxqASBTxxx.PةSa'(ޡxRK,Up:u0aXf^Yg~E~E~~Wd ֈ5bOB?|, Q.\D9uU^W7nܜS?ehЖ@H^!1cznnnc:g#Ӵf3fcΏ9?<0fcF3tG#-Iwx<|s_: P?!Zfs9urR"FԯKH.A$?қERLaݲ{Ih݊v+E[0jմ+2H2[R;PC@\Kt-)_@RG ^?ɸ?e|ceAހp gZĜ Oh(4z>M=f (p?rJ>:15[7Iy~S>5T*ԨPB `.]&@+TsAm`;>n|9 k'k'k@ 1Rl~B!'|'@)EJm[۶]v · .|p~R٥Kei`%K-[V Z5LLLP &l,7RobĜ9XXX|\q vUoWA5^}Zw:u |K@jԦMU#U#U~B2H;\0QϣG=gǞ{vwwwH$w2PуF#G |||{c MQg?M4hr$:gSd͐Ňsf.5 #oߒmwvǣzjix``Lx]~}}8 8?n/ 4+h;f\M@ER7PhY3^ ,9p GKΘPٱIBEcxdPb3a1g !`,7a7D6K\<^[\z#ep郔1W06GuO:SA3=5=:u lllM6dl&|OM )DA$KtX;}Ӂ%NK81[bly' 1`^ʼy)MY~"*rpi78@ t,[NYYYA W$;8 nnnsss@ b/bŞb^ļyTa* ~P@[[ ]0:} 8F GpeC #%?9q=Ti GWX- - ҳlq:h```` 5Zkp q q Y !UUU#G+N8"< !f -,\,\,\s\ XYYc B ]*t (++LLLs/s/s/|2ef 0aZ0v3v3v|K%έέpppwww&a&e",BT!@SSH%ɒd@0Q($nI$Lx?:~43?f~| %%p'U"VV|Xa6m[ p|@qR3 <!\C#+++I'=sO=5ki(jG 0pW+ݕYf=mEf[^s@Br\AHVHsK9:\?0W6W6WL<Gprw[[[|`Xa_I~%u YB :+&Ź>T8 FwpnHU2d#[X 9^>MI9Oq᫧B3@F3pTl[mŶ.vAeq cGT>SiuՙV8?Y * Br%C*===x=9s&&&@QQDH"$EEE(`rfrr8qfӚ5Mkfk֚LG6 6m0kt. Z,Z,Z -6ZlDXQ, |iii??? yyy$< Op{r{r{HB55'X)VWUp_(((ggglll ])])] nnn^^^@3gf&J)R(48ip` adȄ@?39frd vN9@(V+U$K~Hi.pR8) y@ )+!<@yM71Ǽ|;fw mdH$w3ЀU變k>}<* 8uqT='IHAћSꩳG@ QOE4ӠNd~E>}zl}vHy!?Ux̨,CUPTPTP+<иg㞍{Q}X939<*b~cocl?pܴۜUUUڦk=x|? `L[ Ka)i7SgHئjlC2e}iٌ-x)UjW5#@[[[36vd["FhMw1PpuսW2Vb͋5/~ 2_^m1c|~tzG@W_X*e*)) ۩^ !W3;420u~> )nSԫ, ;Xcݲ!Դy{{3֢W^-z1ooo~|* H`'j`GeL^W^W^Wr ë1ƼX?I?I? c™™™p*%%%%%%%%%%%%e~LK);ѹ6PALr9 9.ROJ$H(U()27U1'q%_޴0WO1avԲSNeg=:gY=ɘ뻣FՍ˘gažszc0~B4w/R̥ csz1c|R&e,>s # $TNP^+Vz1fwt2HqgN;]tI纛#&+:u`ݦiiĻgOϞE5V>h"nv0篟3ЪB 1VEW0fϴi_sOWXu=47incO?eLHH(υ.3AAA :011BߔFVt?V{[mK R\OSGIoPe2DخZjXj))4z'i B!$ qn~RDSuLw2vNsm׊k`~sss9Ϯ0=g\ژ1k?/؄OXfjX&< -,-,-,jZմ)c#F؍cdɰaExGxGx eM7/c+=Wzdp• WN{m#PPRRRRRRRRRRRRۜۜۜ7[ly{W>fS:<"%䴛roܛ 6\p= ,SwD#$RRhnkU<5=zK\B~WAHӤRNԌ"52X<J777 puuϋgRTF0Q6n7=y|?c?{8payݟwg 3xœOK?,MMMN%J8JRx'xp---Qӣ K*U2d_X~a@ /XZZnnn~IAk~ R~B!BH4mvcڏiTfSMgATP%ٽ$i/4EEES&M/_P7 d$g]?GMʳ{ Mꄐߧwr=6ꬻ17$>P@ 8h㠍5/ 65Q5SգGWbx1_3f|M@H K K +++ @]]XJ,%`j:@ TNsNsN~݇ Xmٶeۀm -ضW+:66 B!B!׭NPB ŀҙҙR===C!B @D&HS4Li,鼤VKZ-i$H.\ၐjU^Pg/Mә5k/䐐_@ 4_s0u:^}f|Xá5N8]r,r5AysBȏ+NQ ߬y@SBMkḤm$,y:PgO괫YF-r!B࿰ {i@"ENNNtG$/!q8F@QE-[D666W^={$G&G&G꬇F B!Uj+[%ZuXձVǭ[ܿrʀ 3t>:hm[;SwO=s?~ ;g+ҟQy%實 #GMDה=i:WqM8u,)⪸*j~c ʶ+ۮL1MOi{ ڡ\ k0!*lUت0`닭/q8jO!B!y:Qojl b1bf~m:70;ɣRb!X%VU&q q qy}>2"Oȿq$gr&eRe.'C#x=;mwڎ:^ux11suW0qSRRRRRRRRRRRR@m-36ۣo38xqts{5B. ]؟2Ʒu~_B!{JܟI_~7@1:u΢VR4)5“ Oj8p xE@f5hsY0;avDvox'xyy՜n$Q@.0J; ۭ6t} pT:>OB!B!YF0TON\;d2d b닭/NNN:Ѯ*C*pU*`\qyg睝<'$jR3YuH%ٽ4tDHuTz\_qqq6~6~6~@Y߲e}kN9o㢮8;([$W#so23s5LjY#3ܹWj#^7DTp‹x?y=~?5&՘Tc2,dX0>Jו+III#1#_>c8Iz'nZ.=^ᣇ*i+i+iOV|WWW\@Ѧz@ d`wƽ1qo~&&æln?GDDDDDDli|n|yM}g-0h蠡%)Momof8fܗ/8l ѓ2_p^T_C>xdG؈,H?բw5WԺ|`i4a0G~]J\?K/^x9e늯\p iR]v^^^...@ڌk R'I'n[1GbrѵkEnx[?qҳҳ}V X5:ΟK/e{fFSa@ǿ.;:ܨvڍjٶ7s`kA4;Xc?mikATTR'! Y*ږk[m 8"mDϊqpٯ~U4e_lεADDtYTyGָ6[ԫ bqEXc{OQJ)qE H H HT.](_5j~s6m()))Oͬ X}+ʡyÚp\ EQ2 %#P%T U^{)Jy]u(v6v6v9 |̲,˲,˲,k+X+d%!+!+!+oYJzTxIߚ5}Ls8f*J?ř(sY,˲,˲,/(^6E9r#s\)iHgP wpgÝ 2L;L;L(dQ7G81lﱁ8G 3~fE}A53oOߞ23pf@E؝;cwO3s)Zĵk2ۃo+ϡ)XeYeYe m ߃=أ(5jxRKݗ+JjXjXjXEQtNȀȀE#~|ߎ,d2r%Ɖ3P(j6vvHpHpHP5GQSQz'NM3#̩1s!k+Jj5(? `YeYeY-l{ooo|˖_Tf͢+]IW- 335ۿoRgkue٧n÷/9S93`{WCp-=jjj(tҹ\{ž9|]d#qG(ʔ?}E 29dr?eYeYeق^3klOEiohohoP=SL3UQs|W(0O*={OE Yy5D?'q""rFIl! l`k 5`Eٵ]s +(\f8[lݰw S]+XeYeY57lUUeffFQA)KR,aRK)(?X`xsɲWmiѩ/a """zli^t]x-53B<W\~sEQ}0MURTK:|Rח}חt^yM):]N%˲,˲,˲ ɒz^{MQ>IO*ʕW^؟27>B b3fʹl?ְu>`"ו D=a """3(젨Hjfĸ˯.(_jW%Xc>Jp*Leygw*ʏcuE)a}% `YeYeYE V+J<qJ߻ÿ .;Eirɉ&'sdYyw-0;QcŢ.ZZ&Khhh(J:(W]tuPd͌`"."]#FtUpçO~.a|,˲,˲lꀢ;Yd+++J)s`(&3)ti4EYk宕̲33j÷ODDDTZR?ot&YhuPu(;쾳{l3 %ҟ)2s%sϟ{TOQ9s!,˲,˲,>Ú |76h_о}2i'E|skxŸBh7F'N(cK-9ov9O335,̛3@Dh z$Q~!CSPѢ *`n`ԖQ[Fm,f7KulLd-l-"(C= N{wZhZhZ(aVL3)>>>c+XP@"""""|yCqqqt  5`րY@TlۛBqqzmk`I% ;@29HDS\2`wѕ~DqQ!N5/A *b' ~GkGkGk=>4m6`D910Ɵ? ,l^/]|K9.3ٝ:u fw{ >_|&X ζ~B -kX߻nڻi&˟˟+Dܙ\*}^Ut@11#KD/o&:Yv&.ko'Ndp4! o5j<Ъsέ:c_ؗU&gێWN03 ''Xu+䢒J1;bva?@DDDDTx9o}EAb`큖'&MOȚ9Kϕff݁œOZ< [o׭gy23#=7ZY.:N<6L4|FVg'NDDDώ)IfȁareVͬX!BfLEY:uu&Zx\3^+mdd(%KT_r[Ȳ,˲,˲jVwXQ꣪>JQf/dE~t%]I*0Ǹ||æ6U.f5 jmp.guq_"D 8V:U}GE5MFYBs l8>|<0(sPL6~̬G?UVVP ^@2=(l7v&Mޛyʓ3_WL\9]x[ߪFY+WtF:ƈrd8etx͇7_r;~@9C9=t3(ƿ&Vz~(b<d\7 DTdp "2N/ߪ&W[~=NSf<"p׸h\4.@?,fPqYee86a8D2s@&m\ڸq6m<3gw'N2> l@ t荈BLoT:tD=%'OP e(Cszƥ4`W)Mo寳mϕDba/*`)oI&0!P"""Mo*I fg٢YTP{[WWWQ:TS]E9uԥSJWҕt7币q*ʯF(//}yKE[96eYeYes`+_9sƛo=㊒5$kH֐޸ * A1Ӈ+ʜVsZi(^VzY?ְu>bYV4F}3^GDDD2SUD-Few|pR!B}EҪl̳,%G 3s-['OZE֥Zj]EOO/g`YeYesnE[oeffFQ222};Q8(mU-Z@e_X@MqKpD̔A ΕW1NNgO(_1Dk.]w^{=!z,{'N`mڰa g/ >}< ζ5a @ -~qDDDDDϙM=z6Zm]uY퐷CxmO 4!  v\qi%`W 'dێS7"wD|\y`聣}{{m`f Qd|l|,y:u hՂV o}@CC`fͪl}7ѳ̭2*&5-O~Sz-9D%P7[N"z\ft=$ b/\$ 9";оCIN&e۞Ym@ww7Vk[[q~S""""" 3sI@m-ާ{@wjSMO6 n<7^/}vw]%`V+ Y;TyȊ?"#YQSDL:"D=m ;@2؜9os5k/|еB ]m:;Sѳd8s2~eJ`c5郧[Jor9JDDDD\~4[@n@:5wޭ{’’’M&Xm3YUfUG?}w}\y3K@****`ԹQF:duXZZf۞3Ld*$%%lﳽ(aQ¢`ש]v6&mLژtY6l6 |H@v]uip\rՒl?=Of~<<_+KR`on߻}liO~m9iLhO^As&ӃK֢YJbYiT^<`˃ݯ~MQ S S S-:d*^,W濜>-}Z4Exex݆wS *ԪPKQ_Ph'˲,˲lQo.kt)RRQZ\oquEl~oDUd;NQ[wl]EoC?ְu>dY6|aB8Yl踹NUǙNDDԙ~>ޔ7x{mkl)LNdI\e2Ϯwmo{[pñ@)s!"""zd;%˗,_<мi͛]E/::\<\<\-f[ m{~!*hY{_thј~DDDDbM껊3RkreǩTTTwSފ[O(~~~HKҔ4%җUMbĺue⍋7.V~^Q/_&,˲,a i/O{y=0r&Lƙ E~߇\f`Y6֐%8DDg dF٢DU 3=2+g$[-; z>l^OT`cM4l):Ѩ~DDF@DlWʷZZm@gI 4tAnWƿ2?o hآaMq˶}.'`K.8y'fš k&[m3.f\8@\cgKDDD n7m.nlmmm@ń և[ss6mL[`F5gO?a >->->- !|̉Njj$zqI(G=fYiMEVa36;GTSD}*'dDϒ ivECX~a|@AHHl0.9@}r+WWW[֯ȫW#~1DDDDǩ]u= pPhii^}W!Cn4m4m4mmș 1z)RP`J)% yxٶDf7C^-`<Q>÷DTPg$QQ񔣜6~D@#`x 7Qm?< HA.? r-WWW _.ػ}ہGG808P}m۷nʻ4/Ӽ кe떭[ZVkY%rvZְp|goQɣG}變)_Nrʗ^zm{G8@*RQ5`IѡEq^"""*rr7od[mnk^["QF%JO+=4@ ф3WJff;-fwtyG[/zٶd 㟣JDTYBv.̵%"zR@D(YޢC~!' $@Dϔ l` Y,e=^zٻgo`pM7W(_|å 311]7q x!&mMK("""z򸶸WWW8P[nջ-ڴhӢ ФeMZ.w9D?fNK;vX6qm"0uiS—/r-QaezяO~e'JDx( N⑻D?<"j[G>r=(2iȤ!3z9HHH@+0 \+**qSM@Իw=8`8 )6"Zѥ&zQDTؘ, LsFoxQ8y~DE@F"?vh2&CfO&*PrwuZ-V[={W]^uyV*TZG|?^DDDDww(4kެy@ +vp.\ֹ#7SaLd-lX`n0泛7_|}s,aGDɉ"sC>2QDTX ":=Dq %9~}s{0dC&VWX]ausYs(044-7h6ؾc`w"S"S"SG VS~uN:D&7W_~uҞJ{*N8p:T?eVʬY:::50}ӗv`ffm?b`ǝwvN\;q5 QlF!f&""ʟV;vX  <1#sm:ƒKK_,}gSϦ5Q>cf@wq9 3XT}QEՁ3qgd۞V4Y΢?+j\41"‡1٩$:ᘨO;8"\T©S iH!ڿ/*Kʶ^1E72nW]$I<잰{ 'l\.vb@JՔ)U-/ V6z*uԭR7\:J+dVTZQiϯ_?@LLϞ(2!w,l3\ \sυ>ٶ ԛ㮊N%!/3gQCDTTWӊX&GN~[Dv'%2}6Z|k֫пc;e[mQE<322wy~ޖ{[m {pg+ ĝ;w%uɖ~DDDycwy]iv@T;4 ?R!=CzzgN-N7Rڅ i 7/ܼ1=cz˞.{rDTܗW?7?N+|OQCDT'73 Q-d; O (߮|w~w~z}^fYlf2sTU(((o'8k^/ٓgO.E_ $.O\P*]~DDT`=@֓'>>>@JɕjԫQަz+%Δ8S ^^^yfG:NЇ>>p@`Ä 6LR,Jf kXBk$\_;r yrfW})8%a&"LHQVhO"(3S@}>j:,޳{=;w6ހk , 4Gs4,b+,9|gv \xՎ@.Yp p/,1O𫷪nn+W\1Fkt۫n/ 46464h*4iGTD=v!Ce/@|ݳ=tMT+Gt+GrQDD3~D5Y=|9mh&&6^{f ]tye /]m?Foŷ"\"\"\ë>8:脣;{Yf͛5)Sve/~~wq)R,:$tHFk4UVZ p|gcƞ|8#Q ,]hXhᢅ_9S`悫+r֏Vd;=_ QΌ>|\NtZh&' Y*u @kέATZj#zzy q5jUN;%p?Nj/vpc899bZƴi TFeTζ{IDE NG~^tJDTtqѣD7_Lxj/rˉb -,ֳ[n=w>yw>W  X l58@<敗YYYF\g?N>9hԅSN]|x3]w}p2&dLzXDDr˩g^|-ʷL2 tF@UV9 ۀ{/^<LB\B\B\r<=?9@@_U_U_H%t*?N;v<|z@āq3fD]@{G<8p8"Dd `NY(em o| i;#K7od_g8pզW J%߽]@TnrDU*1cccc T~SM@١ *0({ղWf.\.\[ZnoS0s?nf̺vz+^zvY Gj(o2d8c1qY""2ŏRDDO8ſߡG߈~Ui|g *Ⱥ TnYe[V?{|$IrlYz@z5 .vڙkg.VX 8|6l2pȹ# Ywgݝpaa!/W O^j{Uϫ{@/W ;VXc@-[ߕw n7ql= "D&26…Wh_zsZi5'~JDdrvѢ倀&?cG-"gxB_^){KAqfֶ"́vתU_U;TPּ֚6nc_7ԗQ( @Fn݀ fE̊un݀/#nG"E.\N;O{ MDTa0555|m2⒊Kv(tttu:i10NoxwKmKmKȻG=.0Xxm㵍# G? Ǔ*+Ok*c)a)O>6Y~DD=[&3X|RjZ3duׁkTQ7ߘ~csm;7@T)))Mn7݀x;@kQE\)qĕ嵗^^ |;7/_ $k¯@҄ IQq4NID]v\jt x^{26hmZ $6$6$n"oŵŵŵ@bRvWXU*ү+C%$]5]5]5 oxy.u|vDd' UE):M>/qԴwMDDDDχ~w7Z(|d;?(#J+5:pV̭[1]vwHX"a'cO <}DEaa@mV[7:n<x.\x^jR\)J.=h p`g~}VlZiOOO0`_׾}]@QiTWh3yAWNWNW;wW_@|h|h|h "zt&T!d"UUN]/tL$ O 4teT;P@oFDWaCUiUZ80q`@ ۄo*&TL={:u"*s̭2@ıc epp?~ kZP•p%/T*@V{uZƺu xp۽7Pkźp0`A V`Z ?ymf@p}"z 4m6 8:裣 '~Xúbe6,NMDOMPLgD5s=-2&"҇D\orD,,L23 @uFuFu6*l>mo;} , X,q"2y^07 [շoݡCwz;v:9trZ^jy9'i=F2f^ͼ Jە H{;iZI}&K.; ~new]?v$MI4H!*UR+ yE@J)5iku><<<000п_>`ii (s9K(@j6jV{ZA uU~ZVͷ8.q\p0a>lppߥ?G7<z8xDyDyDg'NLLLcs^ǽ{ǃO?Y ;0=\ƤƤ&o2ۅ.5dkmNODχK|5#*jjjm<AD/^4J4>c}z ̏3?2>8c sYe@?ddTY* 헴_~d=\IrHIIR>>Oٟ?8r\ pZi-RեKU[o_ds`}yvbŀ$Iv;XGYGYGj" I5j&vzGk`nn1|Á$$$D|ɔKκ!mѻYu{j_lgfM/"*r)s5@鍦7tF@~{o'N9(?3s_9s\?c3X}nmϷ=a&"zA'M>GE<-;Q}Y "n$6Z>||_DD倥8q6PPPw+_ ~K-Ǘ,b-ito e˖-[7RoH$"3C}{lg H@DT$ThvU9#坹KK4J@mx-_m twj}KG~DDDDTh~--- 蟢6͟7oHMM!"zl!P9+&ۙ  "*܌oD췉Elgfj0"2S:u:3̨3u| 4[li@VZ XYY\=Jg~s=zX]luŀY6g#GmC;@286cO&SL3q E&"狇P{t$֋Ed; @DOθqMUIVV(XƱ#rC -7m&f2PQF5!!!~DDDDovele2`CVY:u0 v/^Z7(˪z'omD\0DDD -5Z_t\kEZ<DDOְ_!p2ePcE5V:yu^կ^ (қ՟% PK9r"pq_`aa{7uvLVDDTw}Ntwd9 Q!DDEԘịmw*-倫PڪUi+EMZ4:L04FMk4<==}QzjMcJҫˆˆ`C6PjC)߇>7po۽m\&}EG?/bqfOmBDTD(nh_L3TcDDO!WO8p> ]hղUV-I-Z&"+DV5~""""z180Nҝ;IaU*U^o{= zFaaaA;DT833q9?;loe""*"83 [Zl\UZM0ٞ<m_ǿ?jDFM5]t6m`[@ R.!@DDDl22R?{8ld?p; MZ698cq"RKEG%;8?""ʙc~!K> MDD[.|5/k^ּ <hr&VVV*ڗj_ym%-YFg~~6ڴka]vΊG|^ODq5y۟_=rd;,K""xTa.1C~$G{`嵴Do8rX 2ʘ*c^{}e١Cg݇aYBs(e$Hi\vnF w_Wf_}e{b9|^ODEE㻋hqINKIDD""zƩqܮ7DlgSeDJ1hhh lN؜9@}+f6{PM6;r`fym^Q~G k7ݰ=iݓ]G_Qajjj> p """*` qoƽ&pz陧g[fmm D4h H #)h˔}}#K>+`{={"vO= Xb444vdB;""߽h9˚\PCDDt8'3S(~yQ&s@\y\+++(߬|̀+믬h7$lIu׽_u#oO Q>ǿ癋2e.Dn/^YmgՀ;Pp9#sFv:x)QY2]~b[XRƢ1cMDD\ Hrm*:KlgDD *`xJNF;V Z iW]v@㍍76^s{ ؜9isߟ,'2 ")'8{UWG|t0pč7Jbbb9'3WG'_$̨#`B""g,#:jh=&ۛaMDTq `t@5,UwTQ@ 57{ܫ^sXXX=jg ""z8Oyq]uNr򕓯_)of\,s  &%L8S=f3 vy~DDDqGfFHAㆢ|#d{)0^JDEWOX}hՇ맮~ EEEc/k_~{߁%@ PtttNp# " ' }?1~bD _#U=TPU ||ƞ n HONONO$""3,5 h-DDDCpDDY"Z^ӡȉMDDOIq׸\gʮ( Śk^쮳nU+ 8oy @DD/Bg133+WD:u86ذcÀ#G=r8d瓝.W]'{xy^3KKFSESM/41DD$ff(wT [nv8#Q^= Z/|) Th^y@坕wV h_}@eU^6668?pE^ϋ\+uԵRu'֝X ?~8SL3uWݯ% -b)\0b 5JtJу{M3s\(!4""* #Ojc# ѳq8jʞ=+e8qz1VZju*[UlvۀgxxxK ""*(2f.\Zrkɭ%xG8;?B ]/tκ:, }rJi "g̅! rrj鿋ޙoq_Q^pd>|wEK$@"" STT}4<$yH<|C5PC 3th,:V. ]Q|% 6""n-]d{_x>FQ|yY6@Ԛ5QkEqS&N0c0&|ϟ2;w|-Dvr-GLͰ !""z8"|yb_-?06>'e*93QA *LɉZcp?x8q(9䈒#-˶,(_|ŁuK-](}ҷ |;~1`fKG B)O+ J HƑ#@j:uCo9񵏯} \ry-hƆnlmfK^z}؇}yx3ifN,:aE3Y YO\QQf#ݾD lϙ t[ۯ7 <(YdՒU|;@Iߒ%}O?pPš 0a gpg qI"KVziii@7qQ!Q!Q!iצ]\ r%y5j$ ]pw@bĦMYg=DD]?Yt뢑LDDT$PѿM&UmrH H3OxŪuV>N}N]8u|N9ZZji@)u)u)54,hX0 pTQ@ŀe˼9;+;+gWܳYXK>H#6qmZ V[@L61m'nq??p-ZԵ( jjԨ>wW_@өyq*~""zK8j( SEפq*G-CDDED%Y&!""z2c1c$$$} IN'_WUrTQ[m6ln>|NNN΀?8vpPZ_4{ eFʌ@鷁Y3f>DDdyfN';.SO33^~d{[LK""373@Eo~^LS|Lw{ ^zOOO$P2}dH mf̴@rFrFr.]|; f؛ě7[n]u7n/?7~n\ w\zwݭdؕ :Et~|Vy?Q8(#uyOb!T38'1V}-[Z_~C>G7n<~ p^ݽ:½{ 333ߧ?ٻwgwWﮀO:>uW_W_W_nhр`Ͼ}?]iҀ]ev?XN6Em|z&Mқ3&fLۥKodXH=z4(ڃj }$_o& p݋w/%K܋q/x? dmڞMd*DDDV]mϧDnlom"""A>NDDT`?L&nژ쏈PRWW_Rh~c8w>|p\߹>|w~poؽ1mlp6NӜ9Mccc'G'G'G 7l{666]dv`˺u/@'u?~888=455V#FXgcchii:::^kʹʹm6X hkhkhk999@fjՀ-[2iKӖ-$/I^$fқ@rII$ux>{كπד_O~HZV ҽ{ 0mxJ&D( C9&J""DDDOQoD_//[~!DDDJmFm@UiUZj"E/_Vښښڀ]1bvppp}Mi ={ %KMMM$`n~:utv6=lzfff3[[[֙֙֙Slllw*+ Жіі 5Mˑ|Oiii@VVV8k]_]_]_ KQ2dFI 룬>2g.\d\>s=5.k\8 s~@3gd TZR@; 022VJ+Pv(;,CGDDDy%kݷFchi9p@SdGDDDDDDDLg$5=0H٢?5mz8`q3"""'y]c2Z=XtT=D?+ZS>@ef@DDDDDDDO̕׵.."z3 r""'3K):hzloQocBDDDDDDDC.p7DrMC """"""&Sx^H>!.+ExW򏈈3ӛܽD^l$j~#MGQgf?}=ѽNME3JW`@DDThQCj8=6}qޢKw4^%+  ""*畜\bEo@R~ADDDDDDDdE*kM ''DDDTqQaJ9AGE%z4yV/0~4ߦ=?'-5O@DDTtoImBwT:Brj DSDDDTq>|r蠆ډhy|Y1E8<޸t_:"""2N6ị}w:Vhh """"""q&>3c6&,("""M.kW.ڻhɡfˁ""""""xUEg=!+ &r3=rcz_+EGə:A4' , """"""*9ߝ|I]oI="ωk?+iDhM&Z7Nt|\&њ쏈 ɒyafHtXѴ&1$Q85ぎY`㚝_g;?fNkUOt\ d?ƙ@DDDw@DDDϛT.E_E_n0%d5mX#zܙ3|^&"""zr@DDD/J.6'X[ї[Z1ـKd"_Əg6Mw903 """z8,%ށ׊$Z]Nv0̕DDDDDDDyb|jz|7%-E}(5TK0"""*:8\o*ک[Dui XT """"""/s'ȞKDW1?'""""""ʯrAFѷ5U2 ;DDDDDDT貿e^pdNODDDQAc &l8Po bsd'""|3s&`hE{lD-ĉ2wO$rѢ-1َSQDDDTXd@k 7VXTs/Jh}rD`K kLDDDTqV umDkk@DDDDDD1Wܽ@l9E'2ԲzK0"""ge@Qіoi+Zg沦$=!3t~'Nj.RtUmUfDDDT@5ULvMl>r-ƍEٯ+RȌ\Vg_]*_U?9@DDD$2CS'Lm!6_&5NѽE:W3 """*8(g m)Zha~df:Y_  Liwn%$LtOfnDDDDE=cUvZba_3ڦKk2P83CMCVk'jd; """"&K E#j'_.z./"""g++R|&6)x夨W~DDDDDDZ?|wNDW]]Z~DDDD=_ pr"zhfkܻ){I;ޭcgHDDDT1ed ߭9"ZCюe*+af@DDDDDZ)kD79Y\DѳDDDDFV#E[~.CN}3"""""2)'յE$4lh#eHDDDTT@0Q˕2Z ޢ-f\*890YˈFth(3e~DDDD$/Q`d`hѶ]E}i.37S *cFbэr݉f)9 """*rbM5D;|+P\ϙ\&*+o.2V6/.+} 9ٶhOD~(hsv3x\ٯ'//sA_# %"""DDDDEC.Su^a=.DO6_@DDDDOkrk~]SQ ʟZ"""x>/۽'Zkb+UDv.,ΰ/6[>ngG;T7\QaDDDD [uDʵA-5]p""""*ʴ9Hu-3J>0ye?QDDDD(5F 9Y%R_D6CEknof~DDDDDP.'SDOnV֢Ƌf0'"""q=ECg&PjhE8@""""+}%yB, r#D{}xŸ*+ZK.JmL4uYK?S""""SRX7}D&oߖ_\>~1N@DDDD*%pX^h>vGV7-fGWdwFT;ϔ """"K0No+ECΈ6!j)їuE,@e~ɢnSo],zhH3;SCgLDDDDEQ~b-r @D_[ԫF.'|g(?E4fZQDDDDTr.J DɵV}!RUQpA/38# DDDDT}\RwѳEwZ|yw_ѓ""""*Ȍg|[BIƩMG$g)7x˪-<PQܷ;meE*zwV./DDDDD Qaαm xm8B{HTq"""8(zS;ʋ,z7+g|?gQDDDDT񀮃<0\\\õZp|,QˀJE/'z]{mD$gt҃H""""*8cmhE_NPD=s@DDDEEhDoFt?+#ESf}yE?Iy{?M/_0"""""^8UuEkTmxOWAE\%"""zRH-[^客)- """"7E=sD_-ZErQ-̉џ{Wqg[*&Ϝ("""":C4@*}jWD˩u[[Q~MSG=$3rj+DZy@DDDDe~[Сo8*"pU@""HF x6]:#„CZVkHDDDDDwDDDDD> 'Z'8ѐVneDU}8@QF(}RL㎢^K4N^o70=W@DDDDD^*Yãf%WSX&ZmhEoHRкAyx""1&O=%zlekۉ Y? =;@DDDDTtqirUE_*.ZOfy|>A ;T4eѫYg䀹cF}$ ?7 ~"""""ֈȜ< `%KhUzV'6/ۍřEzj;EbE/!zftSDoxP԰"o)?8cU#H4D^Xyhq,41g " S^h]ѳ߉({OnI<~#'""""aDDDDD< KD!Zel iD=?@""{KlѸDƈ^h'zQ.ysh=yw(wNc- Q-J'Qy"Y-+xvk{jd UuKavc;se.?);]T}LvhAdy?9YVOM3e<0E{31ۢ"o o͜uՊ:˯ Ηd: \e c{yeq+~ye<m+(ɥl@ۊ rz=~/gLy=3SV5/C޾&HV.)&O'J~hl$m}r1Y9AheDT9{%@?k̀ %tEXtdate:create2023-08-17T09:57:38+00:00dV%tEXtdate:modify2023-08-17T09:57:38+00:009(tEXtdate:timestamp2023-08-17T10:01:42+00:00JIENDB`logo-circle-128.png000066400000000000000000000656571511036467100371120ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/macos-redirector/Assets.xcassets/AppIcon.appiconsetPNG  IHDR cHRMz&u0`:pQ<bKGDC pHYsVtIME )I~ZjzIDATx]u@T>% 5(b ,vؽbv-kb``Pҝfŷ ͻy=sO|KXFWwfhb?2\m?U3l;˰VeEVbXMH!|%I b8Sp 2m{58Ji_1BgY^c:[p=V`n} aXak %lʜpB7ߧ0† ?0n1i$ `YK?AYЕa <:V0Wc81ae8 N:p 7ևa?]م^a`X\v|; 9ವODɠ ;cxyMkk)J;r1" dm M?Q"=0|*UVڡ'ǔZ Lgu-:v7 ZkZTLo 8]2*ۅP~a_62:k {2}YI(d7z1!QPO~ Z~k玷a8ǎa%nWd][dO_?o;?$/YUo۰+1ܘ YeY1|z4^DQ(H={PPP{DW\i0 /tuuiӪG$j-j-jM$$$DD/%$EɢdQDЂ/W)m7v@۳ M[5"R8=k@,g1$`g3 7zBZO|E uׅȬY DUW]_u=u?~ܮrm"000"#k#k#k"zOijjuS֍H8D8D8G%Dd2$D" !={0 Q?Qff&Q\Fq"gGΎMGHчG}iЧAD...%7T^Ό`Xփ}@~2-ƈ ֈ'~M6PI^I^I888SO>;pp ')))@‚ pY:g5%DIο;;w0BuU---KP<[o?fKKiß((inz?:K/3u_4 vMMMh#oj^+zU}I1Sqx8C222((ylDQ1Q1Q1D b. 1#QJxJxJ8Q3grssdeeljh&ͤD*U\'RVV&ҹsK9sLLL҈`3W3f^ D)))D^^^%geA1Cee%K;Dg9_RzLY"r)o_gw:aO8tdv)L9__N444>#|F8RO_ ڮ`>}Ǟ={_444 __qk㿙]PWX/^jh5ՠV_~ 5 #dG(QУ 5)5)5 C>_Hvvv8qtмyABiJk=Xϣ^;F+/  FFF:0i'qǩEtXd\mmmSSS}m4iPgEuV5+kV594?9sL?e^8ąDžDžQJ_y)y)y)M7ߪ~/K.?! IXQXWOJ/h?*>IޡC9朚_39w bċ)S4VVV߉wa%̧ j3`j穝vn{doޖ+4\"_'L~XrM5-KXKTIV/Taљu#pF; 01g :V1$|I`W{7n ڪڪ~Fb:t&L:ԦS`m'NO^HK ﳑ~<,xX0k?)-".I/U2˱╬z irə&/EbQ37)SfRk|c%@* %KA| $ (+3d,X \20e˨WEk^^-7gwr2\}jѧfffXH) ;wD_~z3OVJp/ao@CD&2W\m4|iço°eO9g$Y-Z$p{7"5+pVVˣ(%޺u{vqvqvq@!C?;Ny;<ox.],bY2kצǡC룮> 8{/dВAKC 7dqsOʓ_/ߌ9Fa* T㖍[6n"IHT/y]\00;@zBMKgf.m0nE_hh`͵6ܿ~?ߏ8`̙#g?zPS k[r{Pq8yg!_x㥎@5Xf2ehM,XtѫFo|  H1# oh@ZbZbZ"#ϏN;0vH[Zsk///Q)+sn~~~@/Gxt0[WYP)`6ix ~' Hd26 ݦzb}`j%ݫΩh1=p;Y|o`ϾK'߃= )ׇFaFaFaYdzg|v^ bU&W SJ<4Wj\ ݶwހC7o ɒɒPˊ@ff&pñ:usrBrBrBgV]=2#|v~ 0,u51WcUWտ++'3^\Bp \+Or~ HHH.sJ:U+9Tؿcc]r;v\p! uZ@uu5pȥ#}>ޙ{g` vдiCӀAW]tsH!=W^{9qę.]ֻ'Nmmm %hJ}_E_={Z@= Yutt? *&*#ԝ[w~EFMD́-4+5:dICz@vCU|G[ROM<y6PSSSS+Ƒ$] (r2Xj* bAĂ: ׁA^^^(FZO]O]O] l賅dPÑ2¯_ c>v: 0a2PݥKuWS'wlllGn^y!10pl%Bf@f@f9ks,۲0r]eؖa[8BsjPxa8/h]8{U5k=uTk>y~'!#ݲeu*rt⤄l?e8mS!zR=s1bL3%ǗCLJMo6 {PjV+P}EW,Yddd STe3JLJLJ p:t\###g5jd%Jo*٣m~~~_1 (q z,кf뚭kAt_t_tpiå lF{`ߍ,~J,YvmzYǀ1a3Vҕe '̟2̊E \*Զܠê׆p23??hhZHΉz.dddY~oV;ЪSN:!3Bf(+eD~v{ťZ\ԌՌՌ~@f\777\+V2k |iŷ2'O~QF]u+iW3gπwߙ~ @"xI$^Lj&5G8o0~8{@MGMGM#ù_~a [pFw.[򷖿GǏ. !r]s]s]Gvٱ:{ᾇhhh"f4%ܦMsGUUi|TlbTmXeb2eBꑻ4,we1oǼhhht5jzf<o>90s;e,Y^V{#d %j3m޵9)yCGEGEG닯8;w<Z3#VoX= SҧO;2 tOZT~MceqYSoހK~/hA ZE/g'** ڱjǪF>}ʠfm8rw#:f =K5sWAƬvZ@-z"5㩏> nb+uXI 4)R_?h`ffVHohVkϜ?sL **ͪ 3&j j%j%jUa*yFދ'oUPe)p.YDV"+b/ FtQ*U+555{M)'/t3wL13bfHcƢ6C y|׹^z"EL\Z@*|/e~{׃sؑE5~{U%1lo o ocrh՛7W|"f|SqN={Lx:<9d4iF xqEt533TQ}SNp%JW`g3ękzoFPa쇿~@]:uӪQņbC!p :p8wmھ'+a%]v= *b >uSUVZUSDZuZTs!Zj_P1Ũ|j=vS0!aB;_O.yyy/bd<XYYo 3l[aIͯg$g=z8qx $gq^, Fi-sNi][亓N I:t$ +hTlCqNfjcĎ;x~rp?O AăM6]t www(1}Uz>З;1;|*n+-[s\\\[Ϸ_9o)vYg}Q'N|/Iԉ(2)HQDSfM5eѯmks"ƻwddXe.δȴ$Gʶʶʶe*e/#ߵ{-hzD;x1h:]Y2q!"##BnNķ[w5D2?̏(w`D)*)*)%=P:ue=xMdX[g8{ J J *x'7/_yfq͢cWZլլլug֝Yw>0Twzqڶl^}\׺z "5"5"Yճ,n¯+ dLa\^3ϙ x%{%{%%g K%ɒ0 _/˗}Jl%@ļy? wKa)՞ln ڷ_O~@ޙ3ygP,%KP~-Ddzŀy*K;EdXpX7Vz>Wtunmoxf{LUrvzW[@vCvMvӳwbh7n]?~4s6gy浛{g gڞi{c6ldɘ 6`؀a@CjH NNN(}ʝ9UJ+5,Сq(ѱޔ$<^Vvuk8/cޖ{[mYDJNjjjζζΥiDDD//%]7]mvr H7|Oi+]hվ?PU8x=G'xz0̯dby@=z 9s3ogH.].r i]w=yi\1m!U{7o&,X2QNx=Kf.}upv*:_fOj˪- 0 )g _uUA3A3Aҧ[YgUb<=;\ ; -+$OW9Iֈ-MkŖ@~Kޛwj1,Xﰡ@4[-noױlv^ 3$$]wPoC 6}^TvRH,v;T@%E P ϖg˳%ҋՋՋ%j rqq! Jx56X/ 0 > Qf훵oFe>Ea6l\}_) deexxxUv3ā(phidK*ɵs p"0›͋zDi9͉>u˘#D+w 4%JWMWM/SךI-DL 0!.ȵȵ%Z}UU݉hܣq)3RfEGG]ʡrU V'D5Ik$"C}7'n]\!RImkFԚZS"~XXXHPC"IcIcIM] Ba/[ujm,aaa:cxG^{|r4xVömk`VsT QQӀtOOq +wh8`VwkeWۀg~v1t#`jjZD*vvvzRӆJTGR/^H>s\smεrW_RKɶӔ+W.fqze9/Vtyl9xhj5@/P4nR`i2{ Hu:RBȗ@_,m,m,mG#{9,,q!n@3fVͬʚ k(t&1{9ᛯF^~anUݪ_4fivqz^MVh[]u29rkQHM`۬cc:n wqxyFa<ݺwޭEݓW ^Uatу .~m"锪T;\׸vv7Wjz;Vx 4\5O%DM|7U0͈K_+ldgd:X`-K-K-2Zֵk w_XXE7H=&5ݷv` Sm XŪMU6ǜ9bq^yM@juX zt_}Mw fzGqzqՀXX ~~`~-[nW`ﴽN,S-S- dt$IjP!3>W_%^'7\{rP_j66тסntoAcfvHJ\"{* W.' "B yx\Yz gZ&Atlz\;xlFc4JI6C6C6=%zJ7 nB"B"B"||aEX)>}2999_y횷+ T;擛O.]tRx-N8 `eʈ@%%t)seu?0ÜXsgP"lǣ05#WH"`0mu_,W_ ȕon(v޾Xj,3A*X/¢2nؔ&nP[p1`Rxz"@H7:v눭 ` .D"GޏUW]***9sz􊗛3;HҦ+vN 5[l.M^,q8=c7b'''l~6?//zn[|+pr?Nzz+:;^/4hdo2ȽYG\10]3?͓@-HPy(B]_ty†4Zh!h \>qO\Ⱦ126p:@-:tuc:ԏ (G#bk-/ߋ7lT걫ǮDDDeaxdiϕcB+~St?=޲'PEʚϿR 00H .}U=D=^<}:`; !LT;jcl Xb%ʧ$Sqq1аoþ *:<8̃!CƇʚy3*#lmmx"WDp71ob} ) /!!!#]Yv*B*D555Dkkt֘- ]]hXP< Di/姈8ibOv@^n, ‰ZViOdXp:j8_גvDSŮ˞,=CtsDs_mO^N}D4i*kF@Oi_EdaaQ=>z| J%_?*v k?3?ǓIR,O LˑM~Dw[ '/&1LCnãʣ^HlZJ$υ&-#3?@M$B{:F$#%jͰ/wFde^e mیDrY߭RhF4NyZmJu!:D/oͩ5֜Jdcmcm#ܕ+s?fTnnn5U}gv ePWhїRZJiDRǜ9s!=ׄP:4ӜH3gO;v4(un ҋu:eH2^fN5<ӗ(M{XMeeMZ3yDFȤDH\EdSH|524!ZAZ%_qCܟU)zQ QuEoUDD7nvS(%4%4% d5kN壗^z@w#V M$K%?.<$<$8qtc.U3YқH[KM|{hӴDM5RvkN!B3%_"EqoF Cu=F D )DUUr&vxu;q(z~tpm뷭3Klʦl"{{{"{'{""ԜdNDԈQ&+J QsQsQs"zT;i^"OK< ,%7D[s$-h.E=]*TGx"a S2|?='yY ON%$dM&_P"kKpAΓ< J:?u~ hL"LSYT)檕 &?QFweRْ9*"C !"VT4HcE:Ɍ>HW6KDo-~ VVVm"{x~h 4DD4М(Se_Q@7F7F7?Zh(yxuE"YҪHeОEu^/"#ׁψA >$gM`ODښH&P.DF hBiDIY[xr~"]G ݢ'K{M (%b(ZnjeNm6;H|+>@DJ|RRR"ŹĹĹ:::| Zj-KC.ʟ7m|7nNi9D5srO"kJ;Dft_DOrbgO'_҅@;:Fe4)vfx{x۩ѧ58IŜODt U[n4U(& *k$MtM,YhCDaFa_aI'M4%zio,o,onŊfafU?^xDk5ոóóÉ˚t;dX_qEzEzH>H>H^c2ⶋ.nKt} 7UhW../Ho־YfxBq,3-3-3\1ѫw=MO0$%z'Q'UwZLt7j{фJf4 Q$l/5IH|"tZE.DGe!ؖN'!\Db=a%IQ諘{jD$n((nXF@}'}c׎];hϲ=,#ޭX`ˍxD3VX9c%Qw4ޡgK3f,%rrr& t.6.կ1#Zj--C\\H]+\ZE^t#J1L1L1$2 *lG7X7X7n+VU?@DWiKdaZhp4Ոtn|ۍh "jtp}4/+㼡(B DnNM#񼈆Ln:]k6ZG"zBٷh1_܉ѫ#*Yk[["zo(bhB+#Y6ɢDc{9kj!x>[Mrh }Dbs x6w܈x ɠ0ۃb;N=-y(]܋Do i^Y!DݝB91B] R5fiЍ%׃^׋/ʯ+Lv=oK8O'+ñcvۥ\p)L5j6xVjFǍO_}/r˹/'ieieie`$oHϿ$lH{6}m+\ ^kUKǩ48 XhB-m)g׺dz Q{ tk@K=\Vh$rS3Qe`|Z 4@lLv熊m HjHjHj_>ߚ~]wQG5,Y2gɜJ?]DR"FDi/y&M5.;?ƟhxFD&L*TEt[A VK4)3L'ɿ9?wDW"ޢ.Ѫޑ"?t$DM2ZM|4,n ϝו5heTdMdT*#3$j*mK|#7(bDR"m[Qo.v uDDӨX=a ~wݍȼL3 MyFyH t6%|ʧ|^('NP^oU6mrȬYco}Q__ bF=DM&P~c-~wy]}v-${{,S@gn5=>g! $-{& ;ic-b+I0> 8Q 6$X]s?% Qg~`80`Fp9ӀћZ>Nzt7@:a=+pna //_\u߼^ /mmm(=*;t={DyeggN:,*~93fgD4bʪU+f uUotF#>F|, NI u֭[7:muI= 2"&붩xbaM@nAl.i l!pP^a {҇.8mAS@M}(q~QY 0cۗڙpu[{O@,O'2qBEW]hصa׆]A8!&]u ,dȒ!_ranΟ 4}]w9NfM5i֤&b^ļyeeehY!a/Ɂ}ܱs-lܳqTRi ߙw@,s,(XcNǚ83vTe_A>xwJzɳ-*g){n4$1ީb_|G<j|@&_`i <7)@{7?Suggn;nTD6 dr'ӦO>mz9#'FYKf-mO=큸иl %[ @AAH6 SDX$hIPy^f0^.: tN[ ** ZkA?@~/(AAA׎^;ZHs1h  `ahEHי/SQZ0^ k{@'XI?h߯~@b&1aΛ;oįįį C94cʌ)3|Nou]CM@]T/;GÏ5dRD {3ͰR_˭|ݥ ooo\^O? (hmX_ Vyz镧\^rAXdv lrc،o3ڃk 8\JR 9&9&9.4B~6:t>C@rvh歛njqơ|###YgퟵB_ijXa)O!a tI@zg t%˺Nu>։db-olJUzzz~!(9s^XzQ8r<\>x%>8.q\8W4^iդT[nѻEo>Hr]r]rs㹕4 6Fۈҳҳ҉ҢҢ҈h͢Y\[olyfqߋ{Vj p. 777/x[s{jOCv)vpTRNUR%U" hģDkO=6G!r%ZZZj5jD$"~ycdD#;7Hu`$Gd MSU0o0ѯ>]hiDwixWB*%H"4447ޔ!F[m!ry}(ṡ3E.˼ gxp 0)HJJ=.D=(-C[]r}-MvIS-E]u]]]@×b-F;ŋQ2FѶGm#~?Ddnn^TPQle#..Ǝhu׭&uuu  \N&DD11αD&9[!H_\{OduI`LWUYv(|cl h8ሆ#_7;| kW֮] zjg .,SţMkŖ@NҦ5bK@{xΜG'W_..^axټl^6s;WH_QQQ@5;P^=WKEc% d%MTTTu u u[ p iQҢEuZLEEEeCˆp= 94949c%as eq? ,={ASASABVRQãG_ L%**2,`vW5wi!,=>CŧA@b"Dz*՛č-npٵfך 4h4(ͨVZk"G>|\H}svy=>c@.H~8rY!猘Ò_0555x.-e@6J&//Fcs1w5R<<<=^{[^ny%p`V8vnV;`At/pBMc6nݺ׷odGdeٻz̆L0z]R9l_{X紮nN¾|TtZg~פפWKKK]R63mf 45I'I'I'M_Q/Ӏ*p/\i )KuKgxnแ瀼ȼȼH@.u`T(uuuZ Y*e< O`<xxx.Aq\tymymym^g^g^hW̹Q(o[mfwǵm[^k'N{VpxPm+k3g8 e2K_/M}:iAG9Ŷ.#GFO=)`o?B*Q0|>Rgp/QbNj/v$UW^uY,a23/;yctۡR>2Cac N48SZn=ȹsDR 7 K,QҼIՈ,QYBƊ+jjjjPee%nFFFRs=JP?~BRGN3q}ge?va Kث>J0}Ǚ+www!fCQk d w{Whv٩f9aaaǥǥh/_&KSSNM95vwiwjx +NIʟ*'O\Pg[qcj14-rݹKӔ b';Q!-Y4hZZZ(|!((;jwP+ntZ~je}.]4n1x4i`_i妕ʻ^92l>ʆ߽#T:եKW 6 6 6@ e"00>0>0sss6V"]Xw"DvRҐF6@hأa|kuED"*w"qw~oȏBu+8TJpV'M=NQȭ# dݿ@C 9M&5M*ZóiF~~~| nLݘ*<HW9''_~- x;x;x;?+tKǗw=f+9B5;9 }S^qccc s&I$@1}.rWv!MB6+GGǒ/Q~xVbLl2D`}O=dWɮRO'?9.:utd3O hT@Ry)up 1@lOUTp~_!AV#Z(.J:XC!,,¶!99 6b k?~@:9ur=w=w=w@/藟U*bҎJ;*/_Y3=qo_}I$ECSY3g t׭_ϰawK'/TDy86>8 p١`das\UEZZ2| Æ+NxQSSœß"j/n_5Q ]'wA&>NѦ'-nKl:Ѭ?NNHOt)oAWɯ+Q{tD:u#JOO/i& {Q7a7a7!ь3ϘNADI~ω7^]&W%$$EFEFEF3zgΈcD?E&J%嗔_rn|g~Vq(Е寸N# < GSX#s"Dl `V`NiL>Mb 'm:% , Ѭ3PMR2U}kܶ ##hܼq+@%VD0nmڸ5sJ 4'4'"+!O'(((}Wl~i4i+}cM 1wWy7*0m}q- }VY?K@)Ӕit\[D%5lll L?;@Ԑ!S"w7 s9b挛3nM6i$a3fUܘ>}Z4i妕VfUd?r#ڗ/?!9raEYK PÙ8*6P[5nո$E"PCI@JsU f@po58 '}z%iX 5K2hb`"Y˲y k8Ʋb֨&&&R-N8m6-GxG%2j6K@0B!Glt ) t vl/W]w;\qN*M.70u2u2u*NBq$ }6p䮤5^ܫ};{jT} i)^"gNo@3n9Ou&<IO>X` XljUyǨp.f@P2Fe PG^=`Fo48h/<<)l fr3 ŷŷŀuuu%E&_#hU8[k)Xfq={ ߼[{=`B#Z׊InFǁS*fwU 0zևٻc ue㖍[obָ%%%f&fͲeÇ:|(CG"D?4ޏ{Ox?xFx-\\sM7}teˀ].}CY5Y|J-,ZXссх.FZjUnR8 \AˏN 3#\Ϲs0 0 +޻`oD>dsڀkYYYIl\\\U`?LLLc-҈ğ˟˟ h4h0fp`fofofXZZU&W\e2 ##T>[l峀uzѯ_EN}1'###dddٝ-?(tŅ^\XZZG%_~k&g_5X5-EN|6~pgj N;a_}^{AI'NJqSMfי]gvp %x?Y&bbb sx| {@,w;{ٶgPWW&S>Z*f7~Tc_!.+G͊ %h5jzNjjjo_}ek=AGtDG'@]v PiҢ;2eˀ؁g5j^H{sU{΄y'N`ALZ3 6,%+B_߮_~a+kK{'{'{'.bi2{5jj;v %blbS6Wm㇏>`WҮz0pwҭЛYY+>GN{c-v{̸g FZjVB;wޯ_y61lb^\debebeL;mKV/\=)_~i8`;}B/5~ĆkJ_Bq jpH,P\PMPMP pk̭bbb[$ai҄^{=s:0)b)\%\%\ԏY?X4{ES^Oy5JyxaʟU蛔]:~q6VXenj>,]|T|T|X;z赣q)RѸ3⬸8???b>|9`¶m @iљg3-:ZtyȔ#SL.]+vdNj+]vabO=-P/-dO@ ?h?*ė ⨞@A\v! 'O!Q-O{s]u99)rR$&6[XoԲz%JꕀGjqhw<xSM7Y\sbB<;M6h=|N`z(?'Z~GH|_<+1ij{`n^^Hl@(᝔;)wRv?`7w[c ;_wTUeVY[$$3*g72ǻw,^W{]D_}͗͗YDFFsu,-- q(w-uSF(FV ëٛgߘeŭmſZ 80e0`Q=xL49vXHu AOqnG/j[J=8{p`6mn(귨ߢ~#Y,fQ\X\X\QRI-LHK$##CDJDAAAD DZZZD?$2Zkh-Vf[}}}O6?MdggG]Nw"~u~u~" ,Bvseʰa+ۿn:a>E]l6"l&wIg@Z:L`س%f%nnn0KF/ D‰ @RˤI-X%>WNnnn@QQI$FT_/|9_/{z%F13{FFLn>UUUw3r|\^ךaݜ~gկhpGUށp9 @㣍6> ,谠Ân> dn wG !JR)[o'm}PC]zn|cx|J?.~%2( }j2ܼwe_"piqŁ-+Q[ӶmM/8_p@T+VB"@@\9s1 btQC>J>J>JUJυ~؉?m7p~XO|(?5ccp!+P3Pp t*T֩ /_luzQmu y/^$s&L wM5{Z/d##$ Yg-Ƕ̈7#h=LLL׈׈רz0 obUV @#6; Q9e1FIPҙ NOd:tt*o%KDvvvD-[,&2YfdkԴԴԈD" O#OOO".ԅ//4Z-&SSS%5>kΰtL_PLܔbCRiЈ<{*TmyxxV;L$2D"W+hhh5*kmC"hhh"y<@@$##CW;v^mh 9r.dn2oV+ %b f-JOl(X,'++F\v߹ > 06} j_( ,ku6yZ \ϰd6? +x)cXCGo%k~] ֣&kpI]ArzgObC ag|Bi"m??񯂒;tBvӫNa+'te{Ne9ji ^0;NԂvbEF~5SnɶvTƍlf3vb4c cXh\L:}Z\ \pv/ph%/(~BZ( ~j\2vjSgA] Ppv@ ͺg Q򾟇mJ@@}$+1=[wd ׮eXVQIaME{KHY+|6{8&XGl`-N*&O?o E}dkgdVPݥfp'Yʰ&z ٵ3$8!)䲎/졗TVXf; Y `J֗~~]?%tEXtdate:create2023-08-17T09:57:38+00:00dV%tEXtdate:modify2023-08-17T09:57:38+00:009(tEXtdate:timestamp2023-08-17T10:01:41+00:000dIENDB`logo-circle-16.png000066400000000000000000000037161511036467100370120ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/macos-redirector/Assets.xcassets/AppIcon.appiconsetPNG  IHDROc#" cHRMz&u0`:pQ<bKGDC pHYsVtIME )I~ZIDATHu{PcoA6@@DF pPСF0 :޹N2Mt-Cc4#m&vfkm"3 mP l\`\V[Xڙss9꿆`,Ee?ϿpT-UKՎ=ˊˊˎ}$Hd<ԬD!Qf8xa>eOWHKHKHKPHLL```:϶϶ 5C |k͖֧֧ ~K<~o'ᩍ[W^,r9ahޡ̶[F1ݘnLg3NS$C!lHƼkp{)6]p[N;mA|w3'Ɖq2.PTT\EjZЭЭЭeS65RVoVoV/g9Y09L Rno?Uo5^Eu4D3?id^w{Ȟ \8p񅺊Uf]^\g[ ٧QfAÅ/D_/VkA=UBPP\{I/G.fMF#> ,OܭcȦf4/&''G[[nF\~3^HښtzM$ :JbCyMEm姠6u~k]sP~b>ß̾1v)ðF\5WէS`ZPN8 Vt.!ÿ@\|+dn27].o+͕J}{?4ڮSihŎ;ZWuXcǎ8l mQ&~'s:-"9~tW;zvĜ,L(`$h$h$^ iH[-Be2tჇּ'bOIfa&`aҿT$K.LcԾY]zٶ%K&WWW3x Srf/-^Zt.\޹<xyMx[` XizxJUoNު***>|6F[БߑߑխխՖik_[5/F*L Blz"aLXfڨxxxh&ϼ~}%`}_wz%tEXtdate:create2023-08-17T09:57:38+00:00dV%tEXtdate:modify2023-08-17T09:57:38+00:009(tEXtdate:timestamp2023-08-17T10:01:40+00:00IENDB`logo-circle-256.png000066400000000000000000001712651511036467100371050ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/macos-redirector/Assets.xcassets/AppIcon.appiconsetPNG  IHDR t% cHRMz&u0`:pQ<bKGDC pHYsVtIME *wIDATx]g@K=Bwޟ{^w{wW!B 1J4@vwvfvf;w0Oe,[tbٶ&,;ei,df:V7X6W/N"%, ,ϩC)Ke:_ K3r>SֳT6,dS Y?KGr,t?d9٘é N_7&R w(KP)w3g,[WQ?FPoC@Zr ܚտb92_"NApSo3̲ mYee,R<loP/U| fn,=eߪ-0IrIS 8V1XvUrT+OdKmہe惡sG.`9wYYj_1,g7t9p޿_6>ϲzyhgveXP;ª_*ޗc,P[ʯ`Y} C@9'd:)sl,`x5=cz.{2M\砉%\θ,?_/eSH@ݎ0t9  \R X.ol5p>(^˧Ի;nNJ3:| 8pAm{Y~_edqlwjý] XWoՉ\ 8?s/SkXNgY瀪:ΥfwJG{|'CU{o]/jSe\s׳~* o!g p V˟-ԑ|<ПJYMJsi%@ȖY^EsH}hR\V::=~g^$>˲Z_b9C}z۷:5q1?uCڒw6l2 9S9p èmY僋XNS 4:~cX2#SNY{˼qq?fy,gHt1:,xg쥶eq :㛩_&s>X S/X A"&L<LԜX4*Z!( zz ^F{FEF-D=E=E=#H !!!(((`Z0-<<e2P(((MMM|||?>-}Z4@EE;@F$,:r@՚cUdZ' c9'_&kB{_Zngy:W,z^Fy[' 000y2MQ6EtttiDrN 666,,,ST39fr sssWWW]]]0 0 ;;ȏU*Q(*)*)*3ggJJv VVVV'NZ /_III>N8 nݨ@TۨQm0ӝOw>ďHRTګګC2` =WhO΄,7T\a.kՖVa/Y~-dΥjVkulX6 U_wWs. rh@F x(jRԤ Pd@Esc1 ]:!cRƤI/_ҿ G? >@`5#Gޙ3>E}[[[~ŋ9[^*>cZ_P/Pq3s,OS{Xmۦ\D.D "jtF&t}Bw=|aD3>f| + 8|/$&1Qqq1QGEtݹw-yDw'>}e)R0`XqOY>˶rgac^qg]Y&)cme"rQ:4@4팷3~xDoooDeee2Js#2+f@T\reS raNG,n/)aiS}3Y֨ECv6|(2eaaaعb犝q4hO=@89.#s?@RcScScÃ]wpnֹYfnݻuiէUVPZ>m;ʲ4tC~o|2+eoX~3gNC&4~k~/o7lJߗs0-Z\KԼ^zma0[a]úZCkeDJ18rQ&wMJt5wsF9qDyv,|~,";{,I~mh5hSilES?<5 VDET$*_(PWWw^Dm)ڻ\Xw傺 r>kzWg,vsڑ~? @:?0jά9Lא^Cz Wk\q5M{" `p_tBuuu@!E;Rwg&L $I~Hj2%>e}z dJɔ@ZǴii3g k5@VdEVa> ##?6~lLRS)`>|,0I$2`\Ƹq'Bh]U6V6V6}|G`:. b_ľ}9{2ʌu -tiN2C]\so ~# vvvڣk_+*U6Czy iNŝ;"7p@? #}x$E$E$EJd~2? HF"rrr=<f1ǘc h.h.hZZZ+++9fsKKK]%J96mX >;wt8u.\bŮ `|J+2ۉ l罞z ؖ-q["v^[}WZ``MfBaCsF.+AG6WزP̮怖9e|CpCpժVZ\hBhv d `} ]( |`>x-ף_g-x,X2$9sHaRP.S.S.3t` ΀e=z ;X#PE%^˗._˺o0q=x8ChࢁE^>+}/B|2sV[oȝɝz0ʼncFlF"k&k"VZjeFuo=?D諾wWx+DDDDDN4;pppKg]SG , %H %$S&kn>|AeTe-^uL$IhІh)DշUV}EEEJ>;b%<*<*mi?2#0V\ݸqu旟_~~y"CmEAdso/7( ~?+VXhӗN' -Z.ܿHIJ?7$Sϧ>kO $Gg`Y ᫠,^`7::rgԞAtMۯ8RRR88 &ך\kr/Lfs){9x9x9M_7}uD~BC%f єSOOdҢE__i)O,O(2O[3🂎{ϰ.ܠ~]>}NbG4e?@~ʬY):p!?H.rPƩj*}vDSzO=7Q/GP hnjj:qmJ)uԙǕ|Z6,eJR/~jczt @~#ooo$  F~3G@95YBq= 7pHRRR(A=;DgzqQfUjwSՊAvB/Z',OSP"M4)BCѷOk[|||5![lB9sϭsL[K4i4WP^ADovx\\9[[[S"Nݚ|kD'x|"'OS|O<ADpC 70 &j_-𓡵c45;YkYG(;}= (I_IПՊY+2|~{YxVD" >}mmm쓈 )"DDD"1c\t)RI$vَc;b(QD׌_#LLL!,`k>ߖumSLD gBVZNՑKh3!h,S5Cbf}$22Ҍ/cW@lj5kC~^&.,.,.LTvFegլȷZT+Vk*/Q(u"k-k\VA5hP#^{-if!ЕӠfƟgB[ m-h0a:.AE=5^8nq3dgaeإ`#,aOMIMIMGGGv(l~? PĪ `22N  1I}ӚA,$I:=r>EQEZipaCSY蟖D~3Jo )L7pPk971> ~V^̖-3j1X*0tO?Q/_T4~wӧBM;>s| VqXa:;8aㄍAui~9)?A{d 5 ^.xe`aK-N;}9`s7|)^ ^ ^#lO92e(wJ}}ߥ;nOד[!{T*ҪI^tJtJt BwQRR2.g\θFYC>J' eG¬5˓Vle˅! i%KF3}g}N׸?3㗏_>~pi "* "T2l - 2x-RgJ)<@g埕 ~-h+Z A6lݗu_}pLxLxLl)Ė@u φgIg F/^ fL3y V*-[8Ei9|: 06yȀzLd3 |'?Wވb)²nsí`nn{ZPZPZS?~L}Ucҵzdb`9>3j6xK2x]Ԃ7e9|:)0kܟyu8nvfރ{ DYGYGY#Rom, 2888,,,NH9ʢ,`G h;`xa-[ztx 7.w/TsLo`q8X $Hj!-[ַTnQEe ~o*8ƋC?)H E#BĚ)LnѣF=.s{T^Q?Cצn.,(uR0eGcRO=cJLM6m۴-]]]c-0.!k^dYy92Tcԫ:W(7kmppp%:2#s'C94 hJTnoƁ{"2טk5ƱcpÝ9WQOڒ'uJ]{:m 5j4Ԉޚ{k%r|>}>ȼfffDw-Z%*V,Xocn l/EDD)++K*HA |_&I0hq)DNf9ʡ^toXk{l"QEBF ܡC'Tӱ}#|DܨDvL:# m7oћs9nDv7klQ.4~h^{IwfϥM6]Ddmm3gV}BOiOtρ=ˇlY\a6/cX1VDӯN:*jjj׷ ?#Q=z\ _~S6 \\\9QB* U`k]su=D3J(1Q^Kd_˾}-"f<3@,~(~(~HTGE{umjD[ny)QAӉ2B3B3B{@N;#j`IBk7|}Dr]/w5p^Ü⋔R[ ^DlՉ,zWffN(D})ߧ*$ƈ&fUSvDoz=Q)SrVVVDN>:(Y,]΁SKtҐ b!' zXa凕5Zd^ &#=#=#hbDL/+/æ0iDiQs\fyF.3>|>Ӌ淚"`]'̹k~=~=~=u-^h\q#;ໃooorpZ`0h D{ｿ>QϣG?,%J:$:0Crw޵z׊hDSMY6eQ?~,pBD^pzQ̸q1tQ)RF%E,Y`|Z6%^ޡڷ2sZpppѺn뺭Ǒ7^xȸq_㾿lu`1oeʼ 0@FW]Ht]t]t]#Z!MV4[ЪU~:L=zReuQK]rʵ*DN7n8x>w}ho۽m%R]R]R]Ҩm1@^?{DE9Z返';weccC\\\Etr'J;v( t(g~&QݺvJla0[4a czd-E@IIV['TRKՉRSS^m z'&obQf՛UoC~qQK=Rs-AZi5z9`×;ϬCWkRI&DO?i}z΄ ތ{3*+*+*+XVnVnVnDCz 5QcshG:SZ|ғғғ^x{,6A}js.K&I&I&ID8PQڅkMTȽ{!w"DoW~3֒ײ}0/c Z>YYWd––BWɯ_it\= ܈BO/,xtz#$ 666ϡ=1`?)䓒D]|v%!CGL7P ˉĬYCCҷeITTT$Zug՝Uw333~E 9=Jm),o^*gZ˾}qD.z2ݹ~D>TF~v{nnfPPPWzзB*""?OETpfg_9hwיQG}]p>)i:M'ڸb㊍+,[\tzya-xOV?Ckb; T_͓M6iݡ;tG[kpm}4t~:?Q:JG6zck"?jWX'%i&WO?*:|#>B/r"==C7,b>\zs͏JONNH#D_[|ma[ WF^E(Q<%-qgMIDjc&5M 8ֲ\RbVZI,x x~oۦ8=XwMDֶRX9??&Dg?c2^gxрer>LII!zᮇApz[`~e{t mۚcjiz"qF>~҄H*Dk1zWpURTRT) 7ؐeooo$qfǙd2oF֗Oi~?ZKk-c- Y~B+Z ݉.xA'SZa&?_*:訢9W;v$Rlpg>}dp1c>XZF=lԓ(`L˭/*wܭrD[_l}>9Z'uiԥQ54fIKKkcEeg,\QQss]tYt0=| @&jJoY)IDxxx/ߗIq⚇{j$8mɑhq;$ y@jYҔeeeswc-z/±0 }0TP_H*}U*=H,-]wUUH&L\,F.] q٤gM"*T֩F~ ǿk)DZj1FA Lj#z륑_m3x_;40TDv6Yld1Ҵc,YFTV[n?sv&rwtwtw$ڳjψLwB$['['[ }a*U eQˢ Pֲ3 "dddKhsk̭1D9ׯW8\{|VݸVZkIJJCvMe@:5 4*Јw%:QDB G2$eH"u_ѮF߮p/Z΂VY#:4ЌC3?>ic!Y1|P煵Z#cI|f888]wM5Y?X *j1Fmsg/!!Akh=qyąHJQkg&Z2Jf(I4|Xs"DK?km8qcw=я[@˲FT\szؠ4%b;D3x Sy=xTPATHP!8{셳vl!}uY?{AwtPRR2@asIHB`?vn۹m)=Sza0Aw2@?ZZZOOO5559<( 25qN&M>C fffP8p0$DA Hju9`ӽO>:ug:Tx(Qpfʙ)gfkCW/[&ԄC |yd ggnF9g?A/0u(B]&  n,6b;vLTէOUlou-S][vmz:/de2aćDsW]9w%QOT9r\8+5i h1DΧO#ld6[3gNɹs'kB9,xb'oL۲\h%c5X{ђWlXo莢.}]%z2e^%vN9H0Q0Q0Z#uuu ZXX/y",",",F5w\"Y3}% %QF]umH=ob ^)055א^CA e>pʭ[)iXa؋wwD2L%Ay)x)x) YOE wD"KO4DԺiWt(ftrÌ sϱ>ouՉD*ըQDl#*_Ŀ?QU*VH԰TR K~UWDvXa)Q-tB[·o n*/$5k2ߎo'2:et 蝵qDO|-}Z4')Sܸs΍;D&Im>i,)*)*)JT}]u?sDW#F\ x受TP#uI3*fT(nq诀 xLdzW3>և_n3eΖ9[HNN(B-;;s3h3<{9pZx ^Do�v?|DhX~s{E8w$Z6(-o+QZۿpr7WtUU|"gfͲ;ŻR[Km-=!.!.!.Dn=z4|}4E;w<#h~9Qbbž4|{']ONteWV 7dܐqDn=z,:Y+X=ECkM߀FD͉5ӊfllc=zMVB+ t]q(ОB{ W? q 24/-_ZZj )N; .\"`|_Jtڷ_Yɘ@QߢE}Ygm8{쑳GQ#F5fͦgB!.Ow߉ ;\ָOOO:N ΄3@5׸qВβl+І{A%|4j ].r{%z%z%K/m=pX|X|X 4|jBCuݡ}~p1EXEj=z(P\ru!n&l=?s@f!Y k53I`*1JY,01 _%_@U Z2M" 7 p=f4!x@RR*SrIII<#sF)HA `'`DFt>k,M;H,s&5g]n`j05Z5jըU(3̠2U5W\UXvaمeq h%uHi=z#;8#̲2ԏQ?P^V㮌2 Ȫ\rJJJy>\5 Xʔg!rZ~*VRK.RՊ[u[u[͟o~(,1vcƬ%%%ʶ* 8ঃ7c1C*r9дEmU" |/N/++i @({-`Wܮ].  ؛coQtXjQ+;찲PƼysd̙~mȬLӬZAhҾI&E݋#>4p;dzDOH}Qe1a:h.]*hߑP:s8T[all?Z# ͧ4;㣓z_?-˹$$$3Gs{+V-i=٦gm ())!߭Fߋ}x$I uS&֍ )XƍU@޴ *Ƙ2Tȿj?`` 5n1զ ۛ:7un KKKhYe@2@,*Bgw9ۗo_}9Pfhej<L?vlv ܐ)ȵS`Cfff pfiŀ3ΊS5lV2SeU=h1#fpS2P P X2_cx'жYfmE,bwڷkA Ywܱru^d/!k V$ԤIS;|-D]uo:5 ɂzL1 V=zNNN;;e=z\\\-fKyhJtdS_j>}F;h=}iw!tH!@qq1` KX!]OOO)S@BbRZE>r {nﹽQuNaǫvQ F- 77vwpwpw l4i ,XK4 mB΋*2 %=q|cĿVvmG$^jqDҐڸ=i&X ,dk>|;8/{~:uJDv-ok'ֱ_׷owD},X"%RPK?xDN#qeĕWVZjU"{_{_{_"a1a1a׋2Vf+#Q?@4=|)D6o/7CDFFFFF5\puՆ'ko8ۣ?l~/6Y^rVl2Rѣ%"]lAn`,!;|p+P>N"HTI&阦c!Jߗ/}_ڟbqG×X֯ OuwG*uԽRw#GuU+VV _ίf $8UбB #Λ;uW\\ڜxㅎ"ۻ7QZkIuB"'oQEDں+Ѻ6ڬkC=#G'jf+A}b-m-m-mU>VXeqH4JwRڤIDn:(Q&śo`ArQC"`X_ :):NItʸ0H{xo*2!ԵD-ON$?̼Q9%NjNY6_"E"DvD"'9\ =z&ȦMO3.6ؤb2q["DlbrFDQ{KS Q-Ig}}FDLyZڊk+h֊5ūW38S+4Q\6qmޖ|[mI1c^}҇JDǹ.]`;;l3oxVawOMDdKM^]&BBBzѮG;"#c#c#k1$j1D룻O~5+"Ym6HQj6;CVex6H~cuqDkk#p]=m&QՁn~Drk\ݶw.6(q׊:Qhs?T!mZquG ^/X)X)XIy^9[^tk@ļa0oA8_eee,уq=v/C_9D:D:D2ubLV?p$׸q_㮿YQtS_TnujmfͶmG ieieie3v=$C1ZS:ubbcc5 vg杙wfU~Ye嗹bq#&e$R+ѣ*%]՗(#buZ"yUndBJeP'[VHf͝Hffg_Φ#­$m^DS%mYuAc';'seDV7Lvb颜u___ z%JERK/i'-MqSPCU83gLOҷJ*}dy`ڠ12465mj8{5k=ݸ q&__=(Q£CVȌJlBل @.t4 k( ߳?`jj 0;=YY,PDZEZEZZj}5{9W ]! ~zЬZXI$zn!{oown0ox8S Ա/nki^uHh& !0cJDA<cef4)/K9nddlblfzPxzو *x;OVv!61$E/6(-[@a-qVow9挛3| 1c ]?gYxx|H JJJ@VAIg&=ݼa屩8'=2o3Oq>E6 m ~yd 6{{x}|Y`ŻxUx9يlEߏ'nOA~n@PicȌMy*Y~Oi]uIX'Q㾼FΝ;ww~ǁwuz ,` H3W2o X[l&uT^(.! `ߜ!=mv}j*-By-W{lhQ} 5G$,,?lfG-m}_Y~SnNxB4gsߝwiO;X,V3v.FIҕҧւ(R7,S|j{DL`7YZ[ Tx/mk D欗ɼLW4$%)ɫOT[ Zt&;hR35Dҧ4s}M$߲("N7|\ۭ1QZb7g#re3^kXBunc]qmĵM 烻wNThc6+ 7yQGD;fYͲ2|XcɲmXmi 7 0|C+^cK-1OKtvIgؠ" 4o M9vپ>|jWD~nӅHíQU=̘jThg"^|_'D 6Hto$r@^{U'DU|4[q"yn.ecCTTSo Kye#F ըw=o9+r864]vDVVVk_M7n7N_a}(5+dhM5hFˣ_z thҡI×aaaD/vbF^'36,mX0zQJw>\V[';dC$W6HwحQ%n.Dr֝(n2KъY&*dHrAЋQY}4:7!61ķ$2Y;27]X5El[WD1qD$/*ҭQG\2;nD%WpMtjTS{){>N㧎:~"JMMø݃.N~)÷W  Z" :5tm?wsD(A Jԫj~MA v 5.1x\׸q]7}yc8ph7|n@q=uj.<垗{^fݼx sXԷ,CĥUQU3o!k5ÉՔ?+:aAJ<"Z;s7 ?,Ͷ 9F[gptZnANpETs%`҉#mu[9ޔ4m紆cs3r0m 3SVq֊o+hd}<,",61`5d$=ky8l/B ~9|&M: ķoNnlooo6t)%Xv䩝ՑD"Cg͢EoހKKKҍ?r?aᇅ~8\֒֒@{:S~GV}[mU`Iܒ%q\)W5bp '7o /UFڣ@q o9|7c֍?0C6"|uy"9;XXJYL{yC42!hJ9i Hp|#UP t8:hٱl} `rbeOS/M4$ @(T% vSfh'/֤btDZw^M)`آ!$Iԣhhh`2d\C.v]&dydg=1,c%KxCς;wJ+OBMZi=p-GgP;<h.! M@sOT''U1M#װ́͵ ]좵 ei$C}3LbnhƞsjUݥd{ۦߎEqEɗm Wx[xxT@xΨt*`дoblulֱY@TQ-W<[ o5@r0(I$qɄ0B!Lt7uYDFRϤI=DKRCςm޷6um!!-  /-rQ4(έkV^>A ({hɍ'00eAdoi `dl>B¼/kF>*x j3bK-\ΙiZ6W+_wMdtPl!mTp(SpPǶ(_Spee%pڭjn (((ܥri/)R_zqcƢdU[:+|_W8_I*&UblRrY(;츲s9/b@(wkXx<"j-y6t7h2"u D '*i'ӫXmTr?`efԃ &c8.#~m1;Ї36iAgJ4i#gxsy%@q) Q-֔f<?5w.޹x@ ԙ0 0PI'powi/=~U~U~U@l+t0kV$P!R"%`;vPė/_Х[nq͙gnI#F$AAu:n1T+YWPbACDS Yb29{:m6'62 (0 3+2<(b|~wRݞtH] 2C4X<@C\l8+>ß=;tFYfњ].t7trYH6"m !(1^L/@8D8D8$&&Կ*+ /,VXXt*JZ'Nn }L`&1nojI-%`zMDjK]w}zM J*ZXpa%S >ufiUՁ #^.mwhEO@=i2=S?1_͛@lt?F@]_#jVE%MB( 4 _Z.\h9 hѰuUU^G)z)))g'N 0aLfZo(vJ;*LOqa\@QQХ̄q 2W&L6lLw0ݡtz* l޲y-`#˱ ]jzC20ja/7߬~777Xf]/&!kPmqZͺ/iZ^F8yy Fl;u!Jy1M1Pi\T|_>yk@ c18f0=z3%c 0Nj(:+&MDEE S9g#FX (0@ԖFAofx zpɺ7f<0(y2E`j`<*7dG( tbH9c!,WU(E>5@]ib[,:]-Q8| B[h 7jY1e| ʁDB˄ -.x2/xbbY? = znR+S1B ]ZZ+` ;I e1@5^5 bjH1b.#|Z5t9p`APUUe[VgI|\|\|///{z8KKY 2DX h+n#`L`P &S<hS獊1fD,t4eBC Kn ^d=mi#l Fg" G#dddDsO@"]D!1tn,nSEEEIIIC5CP8Sxם`>A|i!*ך LP V=wDfJF ,{!REMd֫l sJG: ]hXT*J:7YP+t Ӊt2tn8pPc b C_VQɀ# TAo)KtyPutB0Qe T#GQeu6BLMqH @oԀ) p@F#UithR8E0ɌCs(3 @. ==}A(E  &`2 UoVD [Ґxr i TΩ{1 ]Z(DwN+P JUهxy $aA'1v@  +шL?oii `*bḰ6m2ᩆW> ;yxxf378p`$u:pDJEHib_SԅYuf 6H'tAìt#ib%b X cJ +֢ B+N^eU ?;&ݤS:c.\`# 2m]JP !TGvKKKX@P]j3CoSUv.X牀8W?'m Wh 򻲜/FIS#7*`os()^ ꫹h[?(C\G<8&jfޓ ]Lϫty]fߟVA6 tL<$[wnݹu'p㗏sss+&h0Nn'N{=G{FX|'|ҸzJ | ! P xVtu<%|F>j&ą]&4O_Tbk<P#$z3w^W& 5cY8c ߴ' _X'iV0d-xr"؛8qe -\VW HHH`f@RXRXRC!!h&MZjYfq=(ҧҧҧ@ykzWR2#2g\ϸHI#1鎧;p UJ?EEE@sYsYs7!]444GK矞zu4ri=@vGZ &yUňXk ?O>Ie MM j0 @7g``<`!8 + |*nzE*}6vT:tPi ᷆LV3Y6lf/ݸq .e& @7w߀Xe2{z0imڤKC˷$jXoc}a4GOd`FT~%8 4.pGXhf+u=dr`D  Q 6_ @$`ً 7"x#]]TUcq`:$@*rN?PLWP@}f,R,EзB<hȣ!s`UêU E}Kc>VMMM ]L$_VwƄyK(}}}  z **jqO$=IFōtj=(Z̵kۯw x|ۅg`bp-h5T5Fn`AE@-Ө*5X45~,pt],IӵXɊey@h@<h#mୀ/b䔌55d9 (2ȸ"〚jnMBOJ&H#GN4My$qp8p,`z=&M.pK{.YIuNuNu^&/_4hqY d/5MyVGZiu$Umw<y[zj0PjhjFsuz|K&=Q B`EX@X` Ҕ"iki- d cnskbqh$g=,B C.N1M7t+hTPPAi0.l??ǔGycUh»7Ϲs?/** >|4ꗃAe@.N1v۽otXZdSKM?\-YT`7vcKg!==qp=-t|QG9s9*9\2 po{NҀ^5 ڿ8d@tR+S`fu>KfSHh vLQb?.p~@cXEIU`_cM8 HiQpvB _5lbC:;pRs rйQF}3k}kAׂ %!5!### J|sssw7xwХǡj :߱ Lmeee U:? Z|I@yquJl٪UW.S]ĽKTQ obo30gsKUHP Uof~gYd3ml' 3 o߭d (H0 `ŁLsY `_TxHiQ@Q)`~s5M.YWq'](jk<%[NUMM@H(@5wQ-m7TJPV bw\;ݭ׼v`aw}b*&6XHH> ]<8˞3s;3w"z%dDA6 DfGMLtTL4=}䬿h%[xu̥0NԱOz>Dut*֙L3e H+D>YGȵh]N9 ? ? ?s2΅s EL\wKFG%O(PX^j2eˈJ/寺놟 ?~*'f( 1^ ~D,L&wXhDhDhpuxL@ yuU>̷CsiBy:lBK=|dVW2ZQ!R2zGƦہsLg}T:,,t+DWeZ{Bg' h$ *I@FOvc?lR@ !;Gu$&& ^ (2(tH@_K%.K\)1)1)1?;v#}'Oe^ĐJcyN.]Tw;%vJ\gs.xl>}TWzm@Ͷ5ldJ9彭Ok[~2zLHR@ ]C= p{ߴCg ~9vD`pSwtkIe Ɔל|dOg+ҤVk6ZoF*+_.]PHFn'ӱa>| VNN;9 Ndh?J`'ۢ1cG]Oo:uDQQQ.{&L݋w/)|OF2*ȫ'}'}"ʠ r0aњk:@Tڼyis"DBDfdJD/;D>'kZR[/t"aoCD$A &!F{کDt+H-Ko鉭̌6ȴ AeGb!/dJd"x@TrinI4Ig=haȳaO.Dwj&CJ#_@#zN$%8Gh;#:f'wyOlqxJE"2&c2&$TJњk.HTYf}7 2(@7aGsY;8?M_鑳jpuuu$ 2 2 2SwffkL\,] Z;vhm"$K$(0RRRD>^s맋,,nݐD6m#ZuhաU~wIs n4`w_ߝha$8ȜLɐ팘YDkK,Ѱc%*6JP'QV5- j(NDaDKnOTRrY{5ؐW䟈GM jRFQnE͉ҬD)`+=$%O(p#1,Eb Mksp,npOL$Cp#8QV)/% ,Ȉm4(vD[_J$Z~4!QA|1"#b "Bj!%Zs'_8ևlDJD6_|e㗍_6V^o4Fp~N:ZGJĔ)CT6l`@"lll"#GLr{1c iҊM7u%c.7N˨Q2DUVyX!5Ԙ~{,X1׶m_:p?p!;5)?/y @j`j`jbZsk-uOT9S~fJ|b|b|q[JIxxቇO'SNP8jwڦ\.=e**Y?6 ) HH*ik%TYRop421D2 Y{K%Xג*@maw\/#ot@VT,1Y2HP[ܷH~uIE #ģdV]_"Mm5 h.h ~;~6omGd|5W,?Y~RH$Ԁʥ$9e5jx83p&\9rre@NN.l6-_"D| {ߐUV[n.0$C2ԀP8q\DhJUW^{%ӹsM?_re.r:ԕ'+xU 9u5Ck uj.nq +4UWUtY6wuᵇ5ըW^-~ˠ%0tJSke@'$& =a m~KI% -ej{II@j~PRo|y,_Tҟlt2<%svڞn]ֲD`.mĀEG y;+.R\ʱ584qhPC;v_tHtHGg68:88m_#F| յb֭s9?<`6lQ!\9usNNN@qJwߩ k@(w1R'+ۛ'?N~B'o0i^ӼoOM```8@@@ qS`t^rtoؽaJ>2p 5'.. |7$ٯ=nȴ,*xZJv =NIV=ZHxKFC=$# $̙%kx'E+ox帠6`A== X2">x}UZTiQoOSH+ⳋθq=㪺z2kcX@ٚekЕ&v}FbvC̪z)Հf'K]| 5~aٗgf? ܝ1=REkk2 w(| /^UO]]]*tZS I$H\wȴȴTH6ilr^A\.7ߘ32f$WWW\sUU@gW eƔSf PTSOî 2 pܙrgmRۤQ;_v(ۡltWw ^׽;ar@7گ|~H6cG]Mz)욲4md.\t\qA<5Yef3g~*P"B/F _5~UO'?ڕO> W۵{ Z iԶkUªU `QSGME@Qn-jqK~/SjL1E DF ߱cq)j{O~O~bRIEaF1pXa D! Q{~7|s@BBBۍӷ5uaM)SV];qxQG٢٢!<5Jѹ999111 Il.|]:páv ȬY#(Nũ8BP.x L3V  >5SN8v QJexxx+>7}VE$"Q_I%$F&F&F~su>0?`+<2:]ݘ}za-U@6ltҫo q>n[{K;Hʫazx>ti`ͥ75|\s~=ܶmu Mt67ߠ~;Xoɾ%]v=~MO>m HHk7o v4 q4)7Fa a a `[m_g7jZԴi@RJֳQ0ou .zF^[V d*H۹K*iYҀ7IJђ@he@եmEdNuQ+A ~1.cm_yҗJ_{M?UǸeqck՟/)İKIʟʱwŽ+ѺѺq]7([ ^%{!uKκl t6 ʥʉ-/w<@n*7r]\<ü\ =WQJ}G?MivQ()#)#)[[[m^ׂ&lѽD 8i.1 6xJƭ<\,оj@Y9clZӴpፇ7~_?н{_39zsn2WLξ*ܪp`RӤƭ2bc;' gc=MjBj! zQG!5.KTéS/(=#=u'mFEW B6;XAC WT6p"A NG$H ҈_- ;d.7{?^ zD4wDЂ}P*xUET2dFɌ333N29eB( "fbD&gԏM"HDM"y3"Iz  soldȠ- {;/Gdf uHoɖ'[$]]]G6!(! ! !@ݙ*ăa?J6LfpÆ9fTxQ6\\\ yP( d0͂7 &oοݣ{t,Ȃ, -wE_ $xlj"GNNĬ&")IIDP$б ʅ A6X×_>gKϖcR)R)g^rq9rӓOO>MCß-{^HIΧc[ĶmAv_;dK6GmHu8"IrW+0EDRуZj=ELeeeHTfo9bs 7.TIII5j lov$}lDW&]tekűӏ'!᫔p;//pa?!_?<@5klW"c̏ຜSƶK2e "zG}ӝח!: 0`Hcs짖O-ZMxC$rʝ)I ˅\ȅzEH] Dԙ:Sg""DMTB&1 .S"%||| 4*wnM"I3i >~^Zzu!H%zs_EqhnpIɣ eAt=/P>@*)҉hўC4VX}"u,Q] Zb. <x.ӠN: "tjҩI^*[NEtqfB4iN43uXaQED'~r;e/1cIIIQ[nђL?K&hH$hNT#6QiNi}h0kiVB+!v;w ba 9111цFmP^A233Ξ?{ykTf>׫}#&fxQ&Fޘ}cDY~Y~Y~W!9ψ{Miv%iŧV^iҚemZ!C+_ 0itNo-:D-[lݲ5ʼnDQ(}U>oM7DiΥl@D+;Vv΄Q} g gS;"J'YF)N ]nDw͘C^ޜ9wwܝHPP0_a|ϫLz.]|x" :/tn{_ǎ*}8+۴؝rrC )7Z-O\v+wqciƀ{GhT^vzcZ|S}S}S >eݔMכgL8s(PFf#/:'`O@'-R3¯0 H>nY ]oC]I -}u~r_)2*l >Y5zԱB@sms-spwSgO=uбֱֱVym2d { *z^VL]1uT3wf0gDDww`Ԗ1f8īTCyF^^^1cZFEq?%K7obwpq[w;Gvwi(ԊR\?Dj"5_)S)R#G<|]@SqSQSrқu\P Xڣs;#@bZw@f'"@zg@j_Rڻ8Rن@fGdqlR0F> vq 4GB,#2bˏW]wdtQu|Ŷm5鑞wH```K\9s:4vmhvρzQ 7oOOOcRI@4Nl8<ʃ˭z[m)|֧O[qvvv:t:-S'1{ͣgҭ:F:?~._?×_rDzl(h(h(UؾV <*X-T8Y ueh A׫^n+/mot2u2uaOMix4%E)l۶mmw"D܉P|=9ГC@:=t=OMAcit` wsrIA?~FP!/0a$ /24ú)P$@^3l&򓼒|@ԀPI)B)Dd@dP9{rNtRwKyy~4eݻ+{$>>͞(-3-3Mqu w+MmiܧaDgdgdgdDO< Q/La& 3 6fm,XYۓH|V|V|d|~DӮL2 QJHJHJ*/ڸj㪍:tеCW"Ku.|Y'>ɧ---B'}hy]{ VmiՖ'Hx^x^xr"q&#j4iQVH?6;$0.Hđ#D=xB> )g]/oc1q r˝ƽj+R!#!#!]vu";wM34 4J!sX~T>链Z~=6mԴQF@̩S1؟>Oβuڽje RHˁ'Ou:&&&ҼӼӼ hU/K, >f#G4y:tݩ;ЇC2^ǽ{:t\Ӏz+6hI_f}/V$(s̳P`%Xޏ7 yc7)n2 O?-[ڷ"F )?# !A ?~rˍ 'pg~_.Քs AY+g)cz@.]9j"kwl]ttt|ݫDpF-%=r @O'Sܷ]tIWʇ'OUc@jM54緞Rx0D=o3g_v}NS:@QQ?@o[9V~{ʻSZ^k 7)oR^79Uf< @ԬYQ=l{Y++++++ ̧4q8C= _W*8Tpn_}%HU:#[- Zh@y(a0 iIKK ?sJVctWsG9̤3 Oʏ.B QQQ`J)ݦt777"NΔ}y偫WzQ$$!)y]w*Vr<]KL`#bO!*}ހ-fXNYȔ}y?ڮY>wsqRP< Jݞv{ByǙr5jU`|Ǘ7p\y9#*vUwVYyg“J'eO`d.B <LLLO/> ?g&.??-m  )nLsx Nf4if4 _cGI,#ҜR`tаai 1<ύ *LC݇:oR2 =z,08bp@Qހ=?vivivin+TDU(1aFZElKN)?Pn(7TAq$#"":fu)f9}Xi4\I/vRt вC-sݹƓn ].B`qSa9r:dR3 qǙgLi.ñא q2YTT(~[/[/[/miҶ)S݅ uwFNGXzz饧 Q(ChU4[JI' 066%n2sUWlm֖@\ꑊϕl 2pzV;0E]Bt O&LPE9T`եեե)S58^xd) @;.^xX:vإc] +I{0a5L^$JS5RW\seqVYgzj%?f3tKwx oUL}pw$UW^eΐ:C ?ܮr;xC=g?Kp.fd8*"X,W1x]VoVYf[^oEQx2"eDB .ڕmW]Y@\S\S\S!dLP>z{{ˁWB_B !uUUl޳֥Zj] [No] BbS{l&ם\wr] dߨUߔt(N:.\FrPc眞sz ˛s~ƨQ%ZB̀?bؼ/UG\4 .,, 68 xoUu~:whɃ&QU; rċ;JJ*#:tu(6ؠb nxbbb@ g}x#7j6~Ǯ ۚۚ|r%ZKVwX!Qqk75kXT:R G/*NU4 r+xkZYnfiMҚ5Q^A&M8 )S X`傕 qO=ct=C=pppnVZ THmdJӡC>g|ȅr\A-4)pIߓ?0~={mmm?<9̣666VjZi%333x?3q_U.+%##-GZh~5r%#RC@~]?Ƿ'hNМ9@ bҡ!ӿ<='}"?Jn5Jgs pѳFwwwe3fU=TPU&<  4l*j**ɁZ 4O?;cw " " h| 6 ̨5֌Z@nnn\+v,۱l2.lmm:I'0#2:/t^UgW]u60ՄW^>K|,bbbq~VPlS3 Q{Fɟ&P ?[%_H|pVŭ}̸$YgKߕ8 (s~rw3kd y%4;;7dܐqp!__@! *Z~if! LO bl1-FANʥ-0~ 'h@m޷y_8 p)Ò 49vs,Vޭ[y!!!)ʡ\UDS/S/SmwO=q7pfԙQgFQQQ?tK Xc}=6/m^_g}]u׊SF 1 Z$Z$R SvΞQUͤK9A ?gdS%E'ũ/VZZy#捘% &]6\8y6W{l9ܔM[U?LUd%Wimz &7`<2+dVȬTYS K6m,Y|@„ riT(cYHHx>}pW`n.k2r H A!##X]t-7#nF B!̻<~ߔěěěk<ƣ[&oMw1b]ӻw-@FmR2#s\ /ph־YfHH\ >&Zoj=={wnN?z_9iUUmSM6i@y䏜e~o[2tzF_kLYH999sy3zgh@%F%U;;2{;$vRb dx*Y\Y>U9FŠ9|zy<^$$$OAl/OQI`eN˜@1nhxfcfQG%o>S㧹â|O9߼ySAZ<eeeL63 ,,,UH_hɏ0Ԅ4LJYË;8KSWXCTrZi%}_~Вln:^ԗM|0DhCE(J"y`H:$ ZDu6ڟV}읲w.]XC UxRI'*B$%bF^9?lʳ)D;j/Q'txB~~{DDDW"fFAzr*ʢ,R8ԛ _.|hڻi尿#juV7sKOʉ+1I̩PdLDHHdllLkD2etȥ\9o@ b#s>9z蝣V]JDLKR ZTaL/#Sd``@dKG[ꙵY/7i'!ȓ6 ~lm'f ';}OPdGM5(B̅ 'Zkvq 7@GGG]v}mDo.QjuF/c_ƾ q]㺒Mq sK}/Q A f:tL¸q cvK/^Z|Q#(#2"#lo6Mn̺1J+ 6|2^{žD3͸6sE8v[}.rb;jty|2Ƚ?}?dZ˵ |U!BV"i#i#i 4 W y $#H#wY(Xyf6mOH?y۵ko٥qv?fnDmYf9 0Hzl$v3zfItkӭM64zMD]4w!ZtEގ};X]3G?.}'}"J$J"*q'<{8NԳO>=(|_Uӑz A,јcvIq#F 阤P cOfxiWijtUn=kZ]60b] ;AicƤ! e8}ZmmmsED$/ - A1""LHH@$O?E'%[o~D"`)=Rzvii2(,YÐI_ƿ[LoښD|:t!Nω߯~}"-[t;3 me`Έ{ Ad"*>U|;w0GGG(N?N?N?g_'w~TJTK,}hC ]7t%j#m#m8pQg;نM7D6;k܅Jl]PY\s666_L>q9/^S?RXqq@@ZZmU:HSKv,w}' qp 4YY@J=*n dYL^3B+Y۳gmEU_T2g.\Vw_Kt&6-L6eڔi@ɕVVo"DB*©S 5kzy* H9xᏇ}ZiG7ħ})lqJ.BGF_ ~IdMdoih %bR7+ŐlZ%G0Q9N%1 ?Mtw`h уd㟎DFQFQFQ9m(H$q9#&Mtκu;FTʧO);YLf1D 70'i?~$a>ҡl){78O?=}ؗꮫ"~9r:ѓ'qO−$/I^BDKh -Q$&"H1ʯ:ϕ7pZiDܟ?#Z- [vVu.={$x~>nsgb4S9ͽ~~#cئC{dcs̥c!C.ƣu n;O`(ᵤ?dž.f@Zv@: 3ԑxw/q4zV߱N|m{DS *ŴVB+hzͦ7f= 8TS-; mUڪU?kXҁt8887l{m J:(:ܪs}o}o}o E7wI\↨,>'Ov΁UVXϗf0cz җؑQ]0aO8SWu}|3`ǬY, wG rR̵$YIOv S!ld%$;k/.N FZ\:s]`"EvPG_\\uK>e?lh^{qǁ M'4~}ׁc>xϻ$J4 Ț55kvJ~/̧3 .;[l1`EƊ@k8[;[;[W (+(+(O Df̀%qK(0U1>>>a2 `R H$[md)MK]«4ё9a   cǮͥ<-<-<-Û>s%@^eu `*Mjg~8⟛u n tWc`R\PZ!=5g $ I4D!58p ;v;Pw. ))y[mn5PߠA}n'&FLڵjת]s{=vnڹi f/˾,,*dU*% jjj@sAՃr #H㳎:> kl\f3f DN-?Z~h_о}pWNVCX <#<#<##G2(ޤs={#,FX]] "@_Vx?-(]vKa!TNE-s2WG;x q-8q8_E~B'jh 4ML3a1b:uBk=oezzz+(8`جYc.̎}L1000035353mmm$$$^h/eV`ff)S:(e[ʶ-`r:iGӎ zqqqZk=siTIO8}/_ĿJJJAAA"gpX3g鿻8ldƥp NTo7[ vK2eK`J)@AU^61R5 x/ ]/ݽ>}XW\s5.k\8=oR2wn̹15ZhYe.Vr'Oj y 7?*[vO;?꿪*v.Ud җ0H_W8 xG@ɈݻvڽBL s2edKFGvڡjꗫ_ͯlll}.lo)x7k?Vܯ>{?3ϣڴi ]Hݘ1u-R|% >e9 җ4[mbJj]v)|mηe*W+-NG"m۴:lR OG R lUUV /yVSU_iZXlaK󈯡aēd8|*U/3 q'A%#aS+S+S+`/' Fҍ*x STwq݇1c]Mt5_QD.()j/˼UC΀=-]vShK'Ƶ '>hNj;UZkDO&%J8*q둯GIO4R4R4RDTƣGUu%!mS+VJD'zOh]xR7Ha0ŢZ,"i8p!Q 6Xp~vlMrT]6uIts>>r:t xv^}zէS͆0P. SkvHg 777$ʥ:-uZ4`SMm7J_,}\k~`j?/;B_j0s?"P2R.qđGM6]k&5`ي<y2$ZǵL7Hd<5'Tz0V[&^xm"=m{v5>/Raн^zZ h- ~6ӿt|MŦbӂxbcfp2e vEkjmhC;XN{\)`$''7os3bWy3D_Jx7ay+: rd`ggL9CnSLy4a0yqzy ԑԑO^!|mD P-Z`@`&o5Z ia¤ߨ+Õp-B-o!@yyybA˧3cbC}w?oy8xs=Ts*#wWݺuw)S~\hՁ!۝;owW^{%}{ Bb>ߠA'N@5^x 7n޸yYݳguoY3]ʤd!BSN);,`Ǽy\ʡhGSF+]>oyTWZl)4djn@!eTӫ| 5bVZj˶m-:u ׀)h h h6mmdȶPj}mJJJ3gx;3r'NuWR' 8;̳3vەoW_.ky+#ǹ/ ~ ӗP|C(;ˏ[1\7aќ}LcO{N9o#r\q].דdD̲Eug.}v2ơ(MB6D#G^' z;6soϽ=Gvo'}ۇnD'~q"Qt6mccchi4Qfdee[[[(")R}JO)8>@:>}@dp^bYzYzYz٬Ymt}K%kjԮ)%vKJJJJJJ3Gdំ kߏ.%Yj#]z뵮Doo6E_Dp!"JAe ;̾9=/;O3PTNQV!qM[2lЈs^v.zzzu-ӵL2D}קQj2pa !PN(lԳDFFFD V%"J&JD%>"J^6y-Q#222Rg3,B! V > > >iޫHw D7o&2lhа!?M77OdkkKL~3"Z>TƍvG$qRDW\sz^뉮BD)CS U800q;l 2Oqٛ uQvrLa TXfSQW5k,ԚzCTZjw%INr"ݧ3Sӏw>x鳧Ϟ&pw nVk"L**j6iQeP3.㾳p\ï]UPlx `8&^u{r_ț5a_þ}hp%^yVYD666\WӧyMQdddVYqߋ :hߣ} |G$%%pi.&62__paS{5o2CR&~g_ ظp+y){$= *p͔6SL!1cQ?YO"\EYEĄVw&yiفl>=ȣG#Zj9/DJG1 vfلԝ^ CJV]dxkïcN2]1_'a'O<oHno^|?>~P}şJS%^~#)~b Ì ??P_lP.[] tAló π5xZH6=m / U>_[[pM|M|M 6۬n@5u]7xoߔ2vDgC{]Ŀ,e;Ű#} =-p^(DV.V.V.D'TO rr"Q [7lM۱co"RfJQ'DA Q(\."zѵ%ז\[BWܯ_qQϣG%?O~\ݩ.r({);Ⱥd?0Mf4=.,e~=U>; '*Q6lY,%j<#";';';'"S}S}S}"A;h3K^^(Z-{ҏ"ir ѣZ>jIa㇍6eY)mg/e8uvsvw4[J dz]`} LpWC ߆=)⻊"*2ԪRJ- j4р*l$d|]777%VMX͏7?$z*U8ѣz>Iȃ#TTToo "%Nȉl n>pe7ܒk@Rv 3llϻ^yJ4 zzzDDv'*wܙrg*&WLLPݡCu"@",--L1CF"AAAuq!Bi4EJ75njT?^x۷o߾%z*U n/܈^O:$tHױc_e|>?zUHI\{|6V S9G.P4$f vW1 1_#lР%bXBdpBk-rrDD6m,&neʺe},[TNdllLdS"7mۚHNcDDD a0HZZК)‰>ݧDDDD2e#J)Qilj$I>CX6lbY@hhhoHHH={}qyDI(:8:8:(>9>9>(evDK/Q|C/6 ær1_Cg7vNMgC.3v圯d./uKtKtKtH{,YD:t< #Y3wNH_Zu ; ; ;#zD{H^G^G^H-Ӗiexdxdxeee_L~(>>ݞ(c]ƺuD111D;;;.-^)%=a؞%=gxq %%Va1]|W|l`['|~^.` ~1ɓgbz'gՎae&e}x*RpHȰ'Ytv %Ss/ϰH]`8~.ׇ/^_I A> a}3 jWpb-%E+cH vY& b(cgO$k"À UdX}Tj/^xhHe؏v Pi'/9#rXN taؙ=nЪ[gV>gex3bx Xɉ|=^*e;o +-Lư,}[|ǀ*zĮx } @6V (0$) [7Va;7c!6~^!o7W>EK);Bl NIk\ z΋ Ȑbԋacvԟ eX9n|WX3x1 Ӈg? T2Ų'?XgD{;;~؀V첺{lG:kd/_ ="%7)51#a f+';忉 87X6$e3 fWfx3wxNqX,~+d}Lّ? 7a< 1|>a& #gN5WY9 /`<0 e v2$0=a u4!Ï& y$&jøu)xY¹x""?BaJ%tEXtdate:create2023-08-17T09:57:38+00:00dV%tEXtdate:modify2023-08-17T09:57:38+00:009(tEXtdate:timestamp2023-08-17T10:01:41+00:000dIENDB`logo-circle-32.png000066400000000000000000000115251511036467100370050ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/macos-redirector/Assets.xcassets/AppIcon.appiconsetPNG  IHDR #ꦷ cHRMz&u0`:pQ<bKGDC pHYsVtIME )I~Z IDAThޭY{\SW^ ACcE(z/ Ъ@ ѱPB`8 ~k""2"!*)(HGQ q ۱ϗ}ko>'x1,W(aѡE 8ub,V-dū{Xg"̯?N/aqK\6.`۪kGߡ'C 14OG(?SBx?:šZhǷO^M*Rjn> q%\ WeeeeE,ڽhD>}>}>}D T-"Hs9DD2mD} } } FR֮L kJ׳#n.=S|g6m x@]j:::())MMMʪʪ*h ۄ@[[m[c)hϊWKO?g>7K x{z{z{B(ݔnJ7 ??G8̚3kά9YYY:``c`c`|)^^^llllll_#_#_# u^y@ 7nMMMP o o oNy,r_"2 2Xu:V ttt".E\^/3^g6JJJؙ3ug*:wy;⤴hsL~i!bs!ѷk_׾.QG@KK ;q]usss@DBDBD#ۏnnnUYNǝzǼ< 1óg QQQ@;\z@ss3P/P---Ȼw92x a;pNO(lhޮ= ^q7sbɖ/ɀb8666PwݹF c/_ :d^^^xzz'M4q`pPe2T@@`@`@ O'ɓNiS ij@tDtDtd?|LӅ,ƒ - /@> 3߬Y_XZZ8}"D6[[[<Q@XY/C/C/Cd,WyόgMMMހ||| `xz;>NJ1FO5Iicgm~4u3"zmVL Ì'Rr+{{#{? [-rrrU*EHL$&NiSՒՒՀD)QJTTTs\5*YGOYT Äa㷏>;btivj.u%>yk*bFmX'vO"EFeǖG< Zi}4 ~[,~y """ЮЮPEEExPA0O5<<<,{Xܠ)$W  ePw;|@DDd Җ-w\nJ]17_mz4 4]n6jnߓa~T+д~|Q1K7}лwAdB`%NM~7?S?S?S`yq@}O}O}+ŊFׄLMM3^*b 033v߮k%,s| p8{Č?xc4k(^w5H\πR@|[ƃ@vX׎}(Oğ6o'OFa|1Q٫U*@|"Kw.QoܿJtl09_*y;1e5 -N%ظA"&ψ'D??w!j.ǙmT(,@`=et]"Fc~mfz`A"sSsSsS"-[ (?GhS&OwMEt*TX"FH)LQ1HQ7=gDHHEXED.Y..DuO7)&z3shkD^̾7 ".q!"QxP=#Dlh'J9#'"-"-z@:!r:tу28I$N  pB8!D:U:U:UD!!!DJf%1gs"FĈ#fČ0FBĘ2)cX0DHL"P##"u4@02CuCj{DN&~>2\"Ɛ1d G<7fc"""""u>onܾD㤭toP'I:::MoAx0{D؀ @~ jC6Q-sn%NL!XyD$l7iD\>Qyjz"ʉKD6~|=h?dq#J 嫔_q895DHbS9e1L,'ʼn"???"z'}\*L 8iqZ2k/>bO(Une_ȫ= 6e>ˀxM q{V--k<HP-sķŷ%zgܘqy'KwGgFW_TyTyTy[mlsj, hEkk+ S6Le?ZZZooo6ggg ,_ @_4}ؔl\oZzi3pjܚ>m?y݋GsufG17Vnn6mp:lG^1 2[d3O3O3CCC 0ae7M WUh]h]h͙Aw={ְ&61VcE߯߯OmmmGtѡQRQ ђ7DiDN9;?!bɖ<Go1`ʰ@U:I!1@ Dݟu;.&"Z4ti(QY,#* ( ( *uiCܒxxxgzveڕiWiӜ9IJJ%@JKJKJ C[-[aIU ym)}r뽀>goMk[@3$lIؒ0Z}Mh` 2ǚ M{*hVhld< a@I$A*>6<ysv@tBtBtH>%} ȭVr+ȿȿLLL 0 | ˁo HMMګ۫۫z={c"rE |ۙog9"Hi>K.:74U-ԽȈ^'Jod lmy T^*/2 2 2Z_j mrow(nԚךךEEE?f K|Ee#?gv2eֵk[P,/ˁ666i@[[PSSkZk=ܷow @@U}y#ޭs5^=T>V>aaa"0ɬ'@" ܘܘ\3Ϭ?ҁ n6>>>乓N 5wwwׯ$cɅ(/Qı8ZFM9T=B5 }v7i?_.72/ֲ`Qʢg߱hqGgz4E5Ū ,h_,r7@v%tEXtdate:create2023-08-17T09:57:38+00:00dV%tEXtdate:modify2023-08-17T09:57:38+00:009(tEXtdate:timestamp2023-08-17T10:01:41+00:000dIENDB`logo-circle-512.png000066400000000000000000004174161511036467100371010ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/macos-redirector/Assets.xcassets/AppIcon.appiconsetPNG  IHDR cHRMz&u0`:pQ<bKGDC pHYsVtIME *wIDATxg\W KE`ǎ{7hQbX;_Q޻wEPw2a,){=Waa2AW8fmD;;gBnq`{'5llSE`3{(_ R\4,Q ڿmxuOnⶣy_N:Wpxm'D S&8:VtI(WxME?\֞k0 0FEO0 0XwlDty {Rp]ψ۩,IlB[-GOfka5w~+zd/?Gp\"WbB_ LjMLpJ3꘏n0`a50 ØgY"`- b{%ч(#8T6VG62j)8Et=j^V{OmA8^xqBsJaaa9b]"^7 ԭOgU[?x"X*xb]]  S`= 0 cDx0 >rh9>/"'E."/u0VI 6D\l 'NK?>.8|x83<ay/0 \q0,88D_b2bPl0ه^8~"YZoP Z <  0n`|``7^Rx啽*]6o+QC,~/M|{$*W)3Xđ,~70 p0 At|Ϫh_˯U`?} B-Ny#6=W;\]F>g&00 Ca"qƂuKW(Z>qtƾ@a>ZqK]L{W<-.oy@0 c"p0IW \M#\`wq=ue-cca+jq@X/G >NPp+Aqxd0 0y "nױwȬst!ALo|Vc\ nm ca@al`ӂ\o{ 6 0% y&L)k>R0 !0̧E!Z|k5P\Enya YA $ 8B߹.8Pz  0n`82ok#x gbF%p?|P'Bm f1@0 ~2yW L WY-pEaNӹ1ɹ$!^8 ~(N1PZ4ˡ2 >0 L*vTpKqڣ{o,/b 0 y@7A/đǧ Lr/a& V2!*-X0m~IpSkc[X8nj 0ǐIZQu SS'~7pLr1 <aB&=oqyW;66p^3 |Y2Iwņ ej"Oquec_0 0 dhk8dZ'Dl6,]MKxt S1aLL@sEX$T Pyy>0iI:|nmⲬ;~vy Pa>n`0P' .! m'.N_`T( 0)=n W V2 c2pAaŪʣw?,֍20 2)!6p0Oh&8>y3YUa d2)(9AܽZ+*q>0 !do$%>Qo༙>0 10"8-!=VI*93 0#4bثт7.g2 aTn_@pK,έ00 |y M)[$莯oy"^q0n`sI^WgEwd2GaaJ&㽂^v댸 0'TdRZpׂ_ ?0 cd25y{[ ^QB%p0n`c$hoew\~a&'Ipo(x7o3p>*0 dL*w/&+ + 0Ln&go\#xV;8/;0Lp0 JnC#6 ?0 & gUqd0 ѩ-?H\|}2kyx?0 |<4SFom+P0 0Ln2zV [Q_!Hbl6Vgwm>g '2F ar-<ar &&c4Hjyt= a 0K)@wdxXyxuEptu?.[`1uC-0 0Lv#M?bE_g<Lar009s.۫ ݔo 0 0 "2_(x8/HeS0 \ su-P>ѷ&xa} v Gwa1Utdu{翎 ~-Xk|) 0 |I /5!f\lSf . *Cңp caLݐ[Jp_w<%0 0L.@W(#x8Cr>]؅]_W"("Kw.ݫݫ ҪҪҀ,yyyduH K K  [bnDODSO@tltlt,3gdO TdR@uu5S?~L} vz@ww7|,X1@[B[B[o Ø4 =B݂/H7PaK c| &80NݯHer0 dn27rDˉf^`;Q٣Gem |wKwKwK m^:tz ;fw nZݴ 2e זז6՛777%H89q2Dt xu׭}a'CO; 쏁r%MW.J |>d-;M/III뽯
, #[prost(message, optional, tag = "2")] pub tunnel_info: ::core::option::Option, } /// ⚠️ Bump network extension version on changes, #[derive(Clone, PartialEq, ::prost::Message)] pub struct UdpFlow { #[prost(message, optional, tag = "1")] pub local_address: ::core::option::Option
, #[prost(message, optional, tag = "3")] pub tunnel_info: ::core::option::Option, } #[derive(Clone, PartialEq, ::prost::Message)] pub struct UdpPacket { #[prost(bytes = "bytes", tag = "1")] pub data: ::prost::bytes::Bytes, #[prost(message, optional, tag = "2")] pub remote_address: ::core::option::Option
, } #[derive(Clone, PartialEq, ::prost::Message)] pub struct Address { #[prost(string, tag = "1")] pub host: ::prost::alloc::string::String, #[prost(uint32, tag = "2")] pub port: u32, } // @@protoc_insertion_point(module) mitmproxy_rs-0.12.8/src/ipc/mod.rs000066400000000000000000000034711511036467100170560ustar00rootroot00000000000000mod mitmproxy_ipc; pub use mitmproxy_ipc::*; use crate::intercept_conf; use std::net::{AddrParseError, IpAddr, SocketAddr}; use std::str::FromStr; impl TryFrom<&Address> for SocketAddr { type Error = AddrParseError; fn try_from(address: &Address) -> Result { // The macOS network system extension may return IP addresses with scope string. let host = address.host.split('%').next().unwrap(); let ip = IpAddr::from_str(host)?; Ok(SocketAddr::from((ip, address.port as u16))) } } impl From for Address { fn from(val: SocketAddr) -> Self { Address { host: val.ip().to_string(), port: val.port() as u32, } } } impl From for InterceptConf { fn from(conf: intercept_conf::InterceptConf) -> Self { InterceptConf { actions: conf.actions(), } } } impl TryFrom for intercept_conf::InterceptConf { type Error = anyhow::Error; fn try_from(conf: InterceptConf) -> Result { intercept_conf::InterceptConf::try_from(conf.actions) } } #[cfg(test)] mod tests { use super::*; #[test] fn test_socketaddr_from_address() { let a = Address { host: "fe80::f0ff:88ff:febc:3df5".to_string(), port: 8080, }; assert!(SocketAddr::try_from(&a).is_ok()); let b = Address { host: "invalid".to_string(), port: 8080, }; assert!(SocketAddr::try_from(&b).is_err()); let c = Address { host: "fe80::f0ff:88ff:febc:3df5%awdl0".to_string(), port: 8080, }; assert!(SocketAddr::try_from(&c).is_ok()); assert_eq!(SocketAddr::try_from(&a), SocketAddr::try_from(&c)); } } mitmproxy_rs-0.12.8/src/lib.rs000077500000000000000000000003541511036467100162720ustar00rootroot00000000000000pub use network::MAX_PACKET_SIZE; pub mod certificates; pub mod dns; pub mod intercept_conf; pub mod ipc; pub mod messages; pub mod network; pub mod packet_sources; pub mod processes; pub mod shutdown; #[cfg(windows)] pub mod windows; mitmproxy_rs-0.12.8/src/messages.rs000077500000000000000000000152211511036467100173320ustar00rootroot00000000000000use std::fmt; use std::fmt::Formatter; use std::net::{IpAddr, SocketAddr}; use anyhow::{anyhow, Result}; use internet_packet::{InternetPacket, TransportProtocol}; use smoltcp::wire::{IpProtocol, Ipv4Packet, Ipv6Packet}; use tokio::sync::{mpsc, oneshot}; #[derive(Debug, Clone)] pub enum TunnelInfo { WireGuard { src_addr: SocketAddr, dst_addr: SocketAddr, }, LocalRedirector { pid: Option, process_name: Option, /// macOS TCP connections may not have a valid sockname, but /// an unresolved remote_endpoint instead. remote_endpoint: Option<(String, u16)>, }, None, } /// Events that are sent by WireGuard to the TCP stack. #[derive(Debug)] pub enum NetworkEvent { ReceivePacket { packet: SmolPacket, tunnel_info: TunnelInfo, }, } /// Commands that are sent by the TCP stack to WireGuard. #[derive(Debug)] pub enum NetworkCommand { SendPacket(SmolPacket), } pub struct ConnectionIdGenerator(usize); impl ConnectionIdGenerator { pub const fn tcp() -> Self { Self(2) } pub const fn udp() -> Self { Self(3) } pub fn next_id(&mut self) -> ConnectionId { let ret = ConnectionId(self.0); self.0 += 2; ret } } #[derive(Clone, Copy, Eq, Ord, PartialEq, PartialOrd, Hash)] pub struct ConnectionId(usize); impl ConnectionId { pub fn is_tcp(&self) -> bool { self.0 & 1 == 0 } pub const fn unassigned_udp() -> Self { ConnectionId(1) } } impl fmt::Display for ConnectionId { fn fmt(&self, f: &mut fmt::Formatter) -> fmt::Result { write!(f, "{}", self.0) } } impl fmt::Debug for ConnectionId { fn fmt(&self, f: &mut fmt::Formatter) -> fmt::Result { if self.is_tcp() { write!(f, "{}#TCP", self.0) } else { write!(f, "{}#UDP", self.0) } } } /// Events that are sent by the TCP stack to Python. #[derive(Debug)] pub enum TransportEvent { ConnectionEstablished { connection_id: ConnectionId, src_addr: SocketAddr, dst_addr: SocketAddr, tunnel_info: TunnelInfo, // Channel over which the stream should emit commands. // If command_tx is None, the main channel is used. command_tx: Option>, }, } /// Commands that are sent by the Python side to the TCP stack. #[derive(Debug)] pub enum TransportCommand { ReadData(ConnectionId, u32, oneshot::Sender>), WriteData(ConnectionId, Vec), DrainWriter(ConnectionId, oneshot::Sender<()>), CloseConnection(ConnectionId, bool), } impl TransportCommand { pub fn connection_id(&self) -> &ConnectionId { match self { TransportCommand::ReadData(id, _, _) => id, TransportCommand::WriteData(id, _) => id, TransportCommand::DrainWriter(id, _) => id, TransportCommand::CloseConnection(id, _) => id, } } } /// Generic IPv4/IPv6 packet type that wraps smoltcp's IPv4 and IPv6 packet buffers #[derive(Clone)] pub enum SmolPacket { V4(Ipv4Packet>), V6(Ipv6Packet>), } impl fmt::Debug for SmolPacket { fn fmt(&self, f: &mut Formatter<'_>) -> fmt::Result { let mut f = f.debug_struct("SmolPacket"); match TryInto::::try_into(self.clone()) { Ok(p) => { f.field("src", &p.src()); f.field("dst", &p.dst()); f.field("protocol", &p.protocol()); if matches!(p.protocol(), TransportProtocol::Tcp) { f.field("tcp_flags_str", &p.tcp_flag_str()); } f.field("payload", &String::from_utf8_lossy(p.payload())); f.finish() } Err(_) => f .field("src_ip", &self.src_ip()) .field("dst_ip", &self.dst_ip()) .field("transport_protocol", &self.transport_protocol()) .finish(), } } } impl From>> for SmolPacket { fn from(packet: Ipv4Packet>) -> Self { SmolPacket::V4(packet) } } impl From>> for SmolPacket { fn from(packet: Ipv6Packet>) -> Self { SmolPacket::V6(packet) } } impl TryInto for SmolPacket { type Error = internet_packet::ParseError; fn try_into(self) -> std::result::Result { match self { SmolPacket::V4(packet) => InternetPacket::try_from(packet), SmolPacket::V6(packet) => InternetPacket::try_from(packet), } } } impl TryFrom> for SmolPacket { type Error = anyhow::Error; fn try_from(value: Vec) -> Result { if value.is_empty() { return Err(anyhow!("Empty packet.")); } match value[0] >> 4 { 4 => Ok(SmolPacket::V4(Ipv4Packet::new_checked(value)?)), 6 => Ok(SmolPacket::V6(Ipv6Packet::new_checked(value)?)), _ => Err(anyhow!("Not an IP packet: {:?}", value)), } } } impl SmolPacket { pub fn src_ip(&self) -> IpAddr { match self { SmolPacket::V4(packet) => IpAddr::V4(packet.src_addr()), SmolPacket::V6(packet) => IpAddr::V6(packet.src_addr()), } } pub fn dst_ip(&self) -> IpAddr { match self { SmolPacket::V4(packet) => IpAddr::V4(packet.dst_addr()), SmolPacket::V6(packet) => IpAddr::V6(packet.dst_addr()), } } pub fn transport_protocol(&self) -> IpProtocol { match self { SmolPacket::V4(packet) => packet.next_header(), SmolPacket::V6(packet) => match packet.next_header() { IpProtocol::Tcp => IpProtocol::Tcp, IpProtocol::Udp => IpProtocol::Udp, IpProtocol::Icmp => IpProtocol::Icmp, IpProtocol::Icmpv6 => IpProtocol::Icmpv6, other => { log::debug!("TODO: Implement IPv6 next_header logic: {other}"); other } }, } } pub fn payload_mut(&mut self) -> &mut [u8] { match self { SmolPacket::V4(packet) => packet.payload_mut(), SmolPacket::V6(packet) => packet.payload_mut(), } } pub fn into_inner(self) -> Vec { match self { SmolPacket::V4(packet) => packet.into_inner(), SmolPacket::V6(packet) => packet.into_inner(), } } pub fn fill_ip_checksum(&mut self) { match self { SmolPacket::V4(packet) => packet.fill_checksum(), SmolPacket::V6(_) => (), } } } mitmproxy_rs-0.12.8/src/network/000077500000000000000000000000001511036467100166425ustar00rootroot00000000000000mitmproxy_rs-0.12.8/src/network/core.rs000066400000000000000000000101731511036467100201420ustar00rootroot00000000000000use std::cmp::min; use std::fmt; use std::time::Duration; use anyhow::Result; use smoltcp::wire::IpProtocol; use tokio::sync::mpsc::{Permit, Sender}; use crate::messages::{NetworkCommand, NetworkEvent, SmolPacket, TransportCommand, TransportEvent}; use crate::network::icmp::{handle_icmpv4_echo_request, handle_icmpv6_echo_request}; use crate::network::tcp::TcpHandler; use crate::network::udp::{UdpHandler, UdpPacket}; pub struct NetworkStack<'a> { tcp: TcpHandler<'a>, udp: UdpHandler, net_tx: Sender, } impl NetworkStack<'_> { pub fn new(net_tx: Sender) -> Self { Self { tcp: TcpHandler::new(net_tx.clone()), udp: UdpHandler::new(), net_tx, } } pub fn handle_network_event( &mut self, event: NetworkEvent, permit: Permit<'_, TransportEvent>, ) -> Result<()> { let (packet, tunnel_info) = match event { NetworkEvent::ReceivePacket { packet, tunnel_info, } => (packet, tunnel_info), }; if let SmolPacket::V4(p) = &packet { if !p.verify_checksum() { log::warn!("Received invalid IP packet (checksum error)."); return Ok(()); } } match packet.transport_protocol() { IpProtocol::Tcp => self.tcp.receive_packet(packet, tunnel_info, permit), IpProtocol::Udp => { match UdpPacket::try_from(packet) { Ok(packet) => self.udp.receive_data(packet, tunnel_info, permit), Err(e) => log::debug!("Received invalid UDP packet: {e}"), }; Ok(()) } IpProtocol::Icmp => self.receive_packet_icmp(packet), IpProtocol::Icmpv6 => self.receive_packet_icmp(packet), _ => { log::debug!( "Received IP packet for unknown protocol: {}", packet.transport_protocol() ); Ok(()) } } } fn receive_packet_icmp(&mut self, packet: SmolPacket) -> Result<()> { // Some apps check network connectivity by sending ICMP pings. ICMP traffic is currently // swallowed by mitmproxy_rs, which makes them believe that there is no network connectivity. // Generating fake ICMP replies as a simple workaround. if let Ok(permit) = self.net_tx.try_reserve() { // Generating and sending fake replies for ICMP echo requests. Ignoring all other ICMP types. let response_packet = match packet { SmolPacket::V4(packet) => handle_icmpv4_echo_request(packet), SmolPacket::V6(packet) => handle_icmpv6_echo_request(packet), }; if let Some(response_packet) = response_packet { permit.send(NetworkCommand::SendPacket(response_packet)); } } else { log::debug!("Channel full, discarding ICMP packet."); } Ok(()) } pub fn handle_transport_command(&mut self, command: TransportCommand) { if command.connection_id().is_tcp() { self.tcp.handle_transport_command(command); } else if let Some(packet) = self.udp.handle_transport_command(command) { if self .net_tx .try_send(NetworkCommand::SendPacket(SmolPacket::from(packet))) .is_err() { log::debug!("Channel unavailable, discarding UDP packet."); } } } pub fn poll_delay(&mut self) -> Option { match (self.tcp.poll_delay(), self.udp.poll_delay()) { (Some(a), Some(b)) => Some(min(a, b)), (Some(a), None) => Some(a), (None, Some(b)) => Some(b), (None, None) => None, } } pub fn poll(&mut self) -> Result<()> { self.udp.poll(); self.tcp.poll() } } impl fmt::Debug for NetworkStack<'_> { fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result { f.debug_struct("NetworkIO").field("tcp", &self.tcp).finish() } } mitmproxy_rs-0.12.8/src/network/icmp.rs000066400000000000000000000074751511036467100201550ustar00rootroot00000000000000use crate::messages::SmolPacket; use smoltcp::phy::ChecksumCapabilities; use smoltcp::wire::{ Icmpv4Message, Icmpv4Packet, Icmpv4Repr, Icmpv6Message, Icmpv6Packet, Icmpv6Repr, IpProtocol, Ipv4Packet, Ipv4Repr, Ipv6Packet, Ipv6Repr, }; pub(super) fn handle_icmpv4_echo_request( mut input_packet: Ipv4Packet>, ) -> Option { let src_addr = input_packet.src_addr(); let dst_addr = input_packet.dst_addr(); // Parsing ICMP Packet let mut input_icmpv4_packet = match Icmpv4Packet::new_checked(input_packet.payload_mut()) { Ok(p) => p, Err(e) => { log::debug!("Received invalid ICMPv4 packet: {e}"); return None; } }; // Checking that it is an ICMP Echo Request. if input_icmpv4_packet.msg_type() != Icmpv4Message::EchoRequest { log::debug!( "Unsupported ICMPv4 packet of type: {}", input_icmpv4_packet.msg_type() ); return None; } // Creating fake response packet. let icmp_repr = Icmpv4Repr::EchoReply { ident: input_icmpv4_packet.echo_ident(), seq_no: input_icmpv4_packet.echo_seq_no(), data: input_icmpv4_packet.data_mut(), }; let ip_repr = Ipv4Repr { // Directing fake reply back to the original source address. src_addr: dst_addr, dst_addr: src_addr, next_header: IpProtocol::Icmp, payload_len: icmp_repr.buffer_len(), hop_limit: 255, }; let buf = vec![0u8; ip_repr.buffer_len() + icmp_repr.buffer_len()]; let mut output_ipv4_packet = Ipv4Packet::new_unchecked(buf); ip_repr.emit(&mut output_ipv4_packet, &ChecksumCapabilities::default()); let mut output_ip_packet = SmolPacket::from(output_ipv4_packet); icmp_repr.emit( &mut Icmpv4Packet::new_unchecked(output_ip_packet.payload_mut()), &ChecksumCapabilities::default(), ); Some(output_ip_packet) } pub(super) fn handle_icmpv6_echo_request( mut input_packet: Ipv6Packet>, ) -> Option { let src_addr = input_packet.src_addr(); let dst_addr = input_packet.dst_addr(); // Parsing ICMP Packet let mut input_icmpv6_packet = match Icmpv6Packet::new_checked(input_packet.payload_mut()) { Ok(p) => p, Err(e) => { log::debug!("Received invalid ICMPv6 packet: {e}"); return None; } }; match input_icmpv6_packet.msg_type() { Icmpv6Message::EchoRequest => (), Icmpv6Message::RouterSolicit => { // These happen in Linux local redirect mode, not investigated any further. log::debug!("Ignoring ICMPv6 router solicitation."); return None; } other => { log::debug!("Unsupported ICMPv6 packet of type: {other}"); return None; } } // Creating fake response packet. let icmp_repr = Icmpv6Repr::EchoReply { ident: input_icmpv6_packet.echo_ident(), seq_no: input_icmpv6_packet.echo_seq_no(), data: input_icmpv6_packet.payload_mut(), }; let ip_repr = Ipv6Repr { // Directing fake reply back to the original source address. src_addr: dst_addr, dst_addr: src_addr, next_header: IpProtocol::Icmp, payload_len: icmp_repr.buffer_len(), hop_limit: 255, }; let buf = vec![0u8; ip_repr.buffer_len() + icmp_repr.buffer_len()]; let mut output_ipv6_packet = Ipv6Packet::new_unchecked(buf); ip_repr.emit(&mut output_ipv6_packet); let mut output_ip_packet = SmolPacket::from(output_ipv6_packet); icmp_repr.emit( // Directing fake reply back to the original source address. &dst_addr, &src_addr, &mut Icmpv6Packet::new_unchecked(output_ip_packet.payload_mut()), &ChecksumCapabilities::default(), ); Some(output_ip_packet) } mitmproxy_rs-0.12.8/src/network/mod.rs000077500000000000000000000003201511036467100177650ustar00rootroot00000000000000mod task; pub use task::add_network_layer; pub use task::NetworkTask; mod virtual_device; mod core; mod icmp; mod tcp; #[cfg(test)] mod tests; pub(crate) mod udp; pub const MAX_PACKET_SIZE: usize = 65535; mitmproxy_rs-0.12.8/src/network/task.rs000077500000000000000000000121601511036467100201550ustar00rootroot00000000000000use std::fmt; use anyhow::Result; use std::time::Duration; use tokio::sync::{ mpsc, mpsc::{Permit, Receiver, Sender, UnboundedReceiver}, }; use tokio::task::JoinHandle; use crate::messages::{NetworkCommand, NetworkEvent, TransportCommand, TransportEvent}; use crate::network::core::NetworkStack; use crate::shutdown; pub struct NetworkTask<'a> { net_tx: Sender, net_rx: Receiver, py_tx: Sender, py_rx: UnboundedReceiver, shutdown: shutdown::Receiver, io: NetworkStack<'a>, } #[allow(clippy::type_complexity)] pub fn add_network_layer( transport_events_tx: Sender, transport_commands_rx: UnboundedReceiver, shutdown: shutdown::Receiver, ) -> ( JoinHandle>, Sender, Receiver, ) { // initialize channels between the WireGuard server and the virtual network device let (network_events_tx, network_events_rx) = mpsc::channel(256); let (network_commands_tx, network_commands_rx) = mpsc::channel(256); let task = NetworkTask::new( network_commands_tx, network_events_rx, transport_events_tx, transport_commands_rx, shutdown, ); let h = tokio::spawn(Box::pin(async move { task.run().await })); (h, network_events_tx, network_commands_rx) } impl NetworkTask<'_> { pub fn new( net_tx: Sender, net_rx: Receiver, py_tx: Sender, py_rx: UnboundedReceiver, shutdown: shutdown::Receiver, ) -> Self { let io = NetworkStack::new(net_tx.clone()); Self { net_tx, net_rx, py_tx, py_rx, shutdown, io, } } pub async fn run(mut self) -> Result<()> { let mut py_tx_permit: Option> = None; let mut delay: Option = None; 'task: loop { // On a high level, we do three things in our main loop: // 1. Wait for an event from either side and handle it, or wait until the next smoltcp timeout. // 2. `.poll()` the smoltcp interface until it's finished with everything for now. // 3. Check if we can wake up any waiters, move more data in the send buffer, or clean up sockets. #[cfg(debug_assertions)] if let Some(d) = delay { log::debug!("Waiting for device timeout: {d:?} ..."); } #[cfg(debug_assertions)] log::debug!("Waiting for events ..."); let py_tx_available = py_tx_permit.is_some(); let net_tx_available = self.net_tx.capacity() > 0; tokio::select! { // wait for graceful shutdown _ = self.shutdown.recv() => break 'task, // wait for timeouts when the device is idle _ = async { tokio::time::sleep(delay.unwrap()).await }, if delay.is_some() => {}, // wait for py_tx channel capacity... Ok(permit) = self.py_tx.reserve(), if !py_tx_available => { py_tx_permit = Some(permit); continue 'task; }, // ...or process incoming packets Some(e) = self.net_rx.recv(), if py_tx_available => { // handle pending network events until channel is full self.io.handle_network_event(e, py_tx_permit.take().unwrap())?; while let Ok(p) = self.py_tx.try_reserve() { if let Ok(e) = self.net_rx.try_recv() { self.io.handle_network_event(e, p)?; } else { break; } } }, // wait for net_tx capacity... Ok(permit) = self.net_tx.reserve(), if !net_tx_available => { drop(permit); // smoltcp's device stuff is not permit-based. continue 'task; }, // ...or process outgoing packets Some(c) = self.py_rx.recv(), if net_tx_available => { // handle pending transport commands until channel is full self.io.handle_transport_command(c); while self.net_tx.capacity() > 0 { if let Ok(c) = self.py_rx.try_recv() { self.io.handle_transport_command(c); } else { break; } } }, } self.io.poll()?; delay = self.io.poll_delay(); } // TODO: process remaining pending data after the shutdown request was received? log::debug!("Virtual Network device task shutting down."); Ok(()) } } impl fmt::Debug for NetworkTask<'_> { fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result { f.debug_struct("NetworkTask").field("io", &self.io).finish() } } mitmproxy_rs-0.12.8/src/network/tcp.rs000066400000000000000000000314461511036467100200060ustar00rootroot00000000000000use std::collections::{HashMap, HashSet, VecDeque}; use std::net::SocketAddr; use std::{cmp, fmt}; use anyhow::Result; use pretty_hex::pretty_hex; use smoltcp::iface::{Config, SocketSet}; use smoltcp::socket::{tcp, Socket}; use smoltcp::wire::{HardwareAddress, Ipv6Address}; use smoltcp::{ iface::{Interface, SocketHandle}, time::Instant, wire::{IpAddress, IpCidr, Ipv4Address, TcpPacket}, }; use std::time::Duration; use tokio::sync::{ mpsc::{Permit, Sender}, oneshot, }; use crate::messages::{ ConnectionId, ConnectionIdGenerator, NetworkCommand, SmolPacket, TransportCommand, TransportEvent, TunnelInfo, }; use super::virtual_device::VirtualDevice; /// Associated data for a smoltcp socket. #[derive(Debug)] struct SocketData { handle: SocketHandle, /// smoltcp can only operate with fixed-size buffers, but Python's stream implementation assumes /// an infinite buffer. So we have a second send buffer here, plus a boolean to indicate that /// we want to send a FIN. send_buffer: VecDeque, write_eof: bool, // Gets notified once there's data to be read. recv_waiter: Option<(u32, oneshot::Sender>)>, // Gets notified once there is enough space in the write buffer. drain_waiter: Vec>, addr_tuple: (SocketAddr, SocketAddr), } pub struct TcpHandler<'a> { connection_id_generator: ConnectionIdGenerator, iface: Interface, device: VirtualDevice, sockets: SocketSet<'a>, socket_data: HashMap, remove_conns: Vec, active_connections: HashSet<(SocketAddr, SocketAddr)>, } impl TcpHandler<'_> { pub fn new(net_tx: Sender) -> Self { let mut device = VirtualDevice::new(net_tx); let config = Config::new(HardwareAddress::Ip); let mut iface = Interface::new(config, &mut device, Instant::now()); iface.set_any_ip(true); iface.update_ip_addrs(|ip_address| { ip_address .push(IpCidr::new(IpAddress::v4(0, 0, 0, 1), 0)) .unwrap(); ip_address .push(IpCidr::new(IpAddress::v6(0, 0, 0, 0, 0, 0, 0, 1), 0)) .unwrap(); }); iface .routes_mut() .add_default_ipv4_route(Ipv4Address::new(0, 0, 0, 1)) .unwrap(); iface .routes_mut() .add_default_ipv6_route(Ipv6Address::new(0, 0, 0, 0, 0, 0, 0, 1)) .unwrap(); TcpHandler { iface, device, sockets: SocketSet::new(Vec::new()), socket_data: HashMap::new(), active_connections: HashSet::new(), connection_id_generator: ConnectionIdGenerator::tcp(), remove_conns: Vec::new(), } } pub fn receive_packet( &mut self, mut packet: SmolPacket, tunnel_info: TunnelInfo, permit: Permit<'_, TransportEvent>, ) -> Result<()> { let src_ip = packet.src_ip(); let dst_ip = packet.dst_ip(); let tcp_packet = match TcpPacket::new_checked(packet.payload_mut()) { // packet with correct length Ok(p) => { // packet with correct checksum if p.verify_checksum(&src_ip.into(), &dst_ip.into()) { p } else { // packet with incorrect checksum log::warn!("Received invalid TCP packet (checksum error)."); return Ok(()); } } // packet with incorrect length Err(e) => { log::debug!("Received invalid TCP packet ({e}) with payload:"); log::debug!("{}", pretty_hex(&packet.payload_mut())); return Ok(()); } }; let src_addr = SocketAddr::new(src_ip, tcp_packet.src_port()); let dst_addr = SocketAddr::new(dst_ip, tcp_packet.dst_port()); if tcp_packet.syn() && !tcp_packet.ack() && !self.active_connections.contains(&(src_addr, dst_addr)) { let mut socket = tcp::Socket::new( tcp::SocketBuffer::new(vec![0u8; 64 * 1024]), tcp::SocketBuffer::new(vec![0u8; 64 * 1024]), ); socket.listen(dst_addr)?; socket.set_timeout(Some(smoltcp::time::Duration::from_secs(60))); socket.set_keep_alive(Some(smoltcp::time::Duration::from_secs(28))); let handle = self.sockets.add(socket); let connection_id = self.connection_id_generator.next_id(); let data = SocketData { handle, send_buffer: VecDeque::new(), write_eof: false, recv_waiter: None, drain_waiter: Vec::new(), addr_tuple: (src_addr, dst_addr), }; self.socket_data.insert(connection_id, data); self.active_connections.insert((src_addr, dst_addr)); let event = TransportEvent::ConnectionEstablished { connection_id, src_addr, dst_addr, tunnel_info, command_tx: None, }; permit.send(event); } self.device.receive_packet(packet); Ok(()) } pub fn poll_delay(&mut self) -> Option { self.iface .poll_delay(Instant::now(), &self.sockets) .map(Duration::from) } pub fn handle_transport_command(&mut self, command: TransportCommand) { match command { TransportCommand::ReadData(id, n, tx) => self.read_data(id, n, tx), TransportCommand::WriteData(id, buf) => self.write_data(id, buf), TransportCommand::DrainWriter(id, tx) => self.drain_writer(id, tx), TransportCommand::CloseConnection(id, half_close) => { self.close_connection(id, half_close) } }; } pub fn read_data(&mut self, id: ConnectionId, n: u32, tx: oneshot::Sender>) { if let Some(data) = self.socket_data.get_mut(&id) { assert!(data.recv_waiter.is_none()); data.recv_waiter = Some((n, tx)); } else { // connection is has already been removed because the connection is closed, // so we just drop the tx. } } pub fn write_data(&mut self, id: ConnectionId, buf: Vec) { if let Some(data) = self.socket_data.get_mut(&id) { data.send_buffer.extend(buf); } else { // connection is has already been removed because the connection is closed, // so we just ignore the write. } } pub fn drain_writer(&mut self, id: ConnectionId, tx: oneshot::Sender<()>) { if let Some(data) = self.socket_data.get_mut(&id) { data.drain_waiter.push(tx); } else { // connection is has already been removed because the connection is closed, // so we just drop the tx. } } pub fn close_connection(&mut self, id: ConnectionId, _half_close: bool) { if let Some(data) = self.socket_data.get_mut(&id) { // smoltcp does not have a good way to do a full close ("SHUT_RDWR"). We can't call // .abort() here because that sends a RST instead of a FIN (and breaks // retransmissions of the connection close packet). Alternatively, we could manually // set a timer on .close() and then forcibly .abort() once the timer expires (see // tcp-abort branch). This incurs a bit of unnecessary complexity, so we try something // dumber here: We simply close our end and then hope that either the client sends a FIN // or times out via the keepalive mechanism. data.write_eof = true; } else { // connection is already dead. } } pub fn poll(&mut self) -> Result<()> { // poll virtual network device #[cfg(debug_assertions)] log::debug!("Polling virtual network device ..."); self.iface .poll(Instant::now(), &mut self.device, &mut self.sockets); // Process TCP socket I/O #[cfg(debug_assertions)] log::debug!("Processing TCP connections ..."); self.process_tcp()?; // poll again. we may have new stuff to do. #[cfg(debug_assertions)] log::debug!("Polling virtual network device ..."); self.iface .poll(Instant::now(), &mut self.device, &mut self.sockets); Ok(()) } fn process_tcp(&mut self) -> Result<()> { for (connection_id, data) in self.socket_data.iter_mut() { let socket = self.sockets.get_mut::(data.handle); // receive data over the socket if data.recv_waiter.is_some() { if socket.can_recv() { let (n, tx) = data.recv_waiter.take().unwrap(); let bytes_available = socket.recv_queue(); let mut buf = vec![0u8; cmp::min(bytes_available, n as usize)]; let bytes_read = socket.recv_slice(&mut buf)?; buf.truncate(bytes_read); if tx.send(buf).is_err() { log::debug!("Cannot send received data, channel was already closed."); } } else { // We can't use .may_recv() here as it returns false during establishment. use tcp::State::*; match socket.state() { // can we still receive something in the future? CloseWait | LastAck | Closed | Closing | TimeWait => { let (_, tx) = data.recv_waiter.take().unwrap(); if tx.send(Vec::new()).is_err() { log::debug!("Cannot send close, channel was already closed."); } } _ => {} } } } // send data over the socket if !data.send_buffer.is_empty() && socket.can_send() { let (a, b) = data.send_buffer.as_slices(); let sent = socket.send_slice(a)? + socket.send_slice(b)?; data.send_buffer.drain(..sent); } // if necessary, drain write buffers: // either when drain has been requested explicitly, or when socket is being closed // TODO: benchmark different variants here. (e.g. only return on half capacity) if (!data.drain_waiter.is_empty() || data.write_eof) && socket.send_queue() < socket.send_capacity() { for waiter in data.drain_waiter.drain(..) { if waiter.send(()).is_err() { log::debug!("TcpStream already closed, cannot send notification about drained buffers.") } } } #[cfg(debug_assertions)] log::debug!( "TCP connection {}: socket state {} for {:?}", connection_id, socket.state(), data.addr_tuple, ); // if requested, close socket if data.write_eof && data.send_buffer.is_empty() { socket.close(); data.write_eof = false; } // if socket is closed, mark connection for removal if socket.state() == tcp::State::Closed { self.remove_conns.push(*connection_id); } } for connection_id in self.remove_conns.drain(..) { let data = self.socket_data.remove(&connection_id).unwrap(); self.sockets.remove(data.handle); self.active_connections.remove(&data.addr_tuple); } Ok(()) } } impl fmt::Debug for TcpHandler<'_> { fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result { let sockets: Vec = self .sockets .iter() .filter_map(|(_h, s)| match s { Socket::Tcp(s) => Some(s), _ => None, }) .map(|sock| { format!( "TCP {:<21} {:<21} {}", sock.remote_endpoint() .map(|e| e.to_string()) .as_ref() .map_or("not connected", String::as_str), sock.local_endpoint() .map(|e| e.to_string()) .as_ref() .map_or("not connected", String::as_str), sock.state() ) }) .collect(); f.debug_struct("NetworkIO") .field("sockets", &sockets) .finish() } } mitmproxy_rs-0.12.8/src/network/tests.rs000077500000000000000000000574401511036467100203670ustar00rootroot00000000000000use std::net::SocketAddr; use super::task::NetworkTask; use crate::messages::{ NetworkCommand, NetworkEvent, SmolPacket, TransportCommand, TransportEvent, TunnelInfo, }; use crate::shutdown; use anyhow::{anyhow, Result}; use core::net::Ipv4Addr; use core::net::Ipv6Addr; use internet_packet::InternetPacket; use smoltcp::{phy::ChecksumCapabilities, wire::*}; use tokio::sync::watch; use tokio::{ sync::{ mpsc::{channel, unbounded_channel, Receiver, Sender, UnboundedSender}, oneshot, }, task::JoinHandle, }; struct MockNetwork { wg_to_smol_tx: Sender, smol_to_wg_rx: Receiver, py_to_smol_tx: UnboundedSender, smol_to_py_rx: Receiver, sd_trigger: watch::Sender<()>, handle: JoinHandle>, } impl MockNetwork { async fn init() -> Result { let (wg_to_smol_tx, wg_to_smol_rx) = channel(16); let (smol_to_wg_tx, smol_to_wg_rx) = channel(16); let (py_to_smol_tx, py_to_smol_rx) = unbounded_channel(); let (smol_to_py_tx, smol_to_py_rx) = channel(64); let (sd_trigger, sd_watcher) = shutdown::channel(); let task = NetworkTask::new( smol_to_wg_tx, wg_to_smol_rx, smol_to_py_tx, py_to_smol_rx, sd_watcher, ); let handle = tokio::spawn(task.run()); Ok(Self { wg_to_smol_tx, smol_to_wg_rx, py_to_smol_tx, smol_to_py_rx, sd_trigger, handle, }) } async fn stop(self) -> Result<()> { self.sd_trigger.send(())?; self.handle.await? } async fn push_smol_packet(&self, packet: SmolPacket) -> Result<()> { let tunnel_info = TunnelInfo::WireGuard { src_addr: "192.168.86.134:12345".parse()?, dst_addr: "0.0.0.0:0".parse()?, }; let event = NetworkEvent::ReceivePacket { packet, tunnel_info, }; self.wg_to_smol_tx.send(event).await?; Ok(()) } async fn pull_smol_packet(&mut self) -> SmolPacket { let NetworkCommand::SendPacket(packet) = self.smol_to_wg_rx.recv().await.expect("No packet received"); packet } async fn pull_packet(&mut self) -> InternetPacket { let packet = self.pull_smol_packet().await; packet.try_into().unwrap() } async fn push_py_command(&self, command: TransportCommand) -> Result<()> { self.py_to_smol_tx.send(command)?; Ok(()) } async fn pull_py_event(&mut self) -> Option { self.smol_to_py_rx.recv().await } } #[allow(clippy::too_many_arguments)] fn build_ipv4_tcp_packet( src_addr: Ipv4Addr, dst_addr: Ipv4Addr, src_port: u16, dst_port: u16, control: TcpControl, seq_number: TcpSeqNumber, ack_number: Option, payload: &[u8], ) -> Ipv4Packet> { let tcp_repr = TcpRepr { src_port, dst_port, control, seq_number, ack_number, window_len: 64240, window_scale: Some(8), max_seg_size: Some(1380), sack_permitted: true, sack_ranges: [None, None, None], timestamp: None, payload, }; let ip_repr = Ipv4Repr { src_addr, dst_addr, next_header: IpProtocol::Tcp, payload_len: tcp_repr.header_len() + payload.len(), hop_limit: 255, }; let buf = vec![0u8; IpRepr::Ipv4(ip_repr).buffer_len()]; let mut ip_packet = Ipv4Packet::new_unchecked(buf); ip_repr.emit(&mut ip_packet, &ChecksumCapabilities::default()); tcp_repr.emit( &mut TcpPacket::new_unchecked(ip_packet.payload_mut()), &ip_repr.src_addr.into(), &ip_repr.dst_addr.into(), &ChecksumCapabilities::default(), ); ip_packet } #[allow(clippy::too_many_arguments)] fn build_ipv6_tcp_packet( src_addr: Ipv6Addr, dst_addr: Ipv6Addr, src_port: u16, dst_port: u16, control: TcpControl, seq_number: TcpSeqNumber, ack_number: Option, payload: &[u8], ) -> Ipv6Packet> { let tcp_repr = TcpRepr { src_port, dst_port, control, seq_number, ack_number, window_len: 64240, window_scale: Some(8), max_seg_size: Some(1380), sack_permitted: true, sack_ranges: [None, None, None], timestamp: None, payload, }; let ip_repr = Ipv6Repr { src_addr, dst_addr, next_header: IpProtocol::Tcp, payload_len: tcp_repr.header_len() + payload.len(), hop_limit: 255, }; let buf = vec![0u8; IpRepr::Ipv6(ip_repr).buffer_len()]; let mut ip_packet = Ipv6Packet::new_unchecked(buf); ip_repr.emit(&mut ip_packet); tcp_repr.emit( &mut TcpPacket::new_unchecked(ip_packet.payload_mut()), &ip_repr.src_addr.into(), &ip_repr.dst_addr.into(), &ChecksumCapabilities::default(), ); ip_packet } fn build_ipv4_udp_packet( src_addr: Ipv4Addr, dst_addr: Ipv4Addr, src_port: u16, dst_port: u16, payload: &[u8], ) -> Ipv4Packet> { let udp_repr = UdpRepr { src_port, dst_port }; let ip_repr = Ipv4Repr { src_addr, dst_addr, next_header: IpProtocol::Udp, payload_len: udp_repr.header_len() + payload.len(), hop_limit: 255, }; let buf = vec![0u8; IpRepr::Ipv4(ip_repr).buffer_len()]; let mut ip_packet = Ipv4Packet::new_unchecked(buf); ip_repr.emit(&mut ip_packet, &ChecksumCapabilities::default()); udp_repr.emit( &mut UdpPacket::new_unchecked(ip_packet.payload_mut()), &ip_repr.src_addr.into(), &ip_repr.dst_addr.into(), payload.len(), |buf| buf.copy_from_slice(payload), &ChecksumCapabilities::default(), ); ip_packet } fn build_ipv6_udp_packet( src_addr: Ipv6Addr, dst_addr: Ipv6Addr, src_port: u16, dst_port: u16, payload: &[u8], ) -> Ipv6Packet> { let udp_repr = UdpRepr { src_port, dst_port }; let ip_repr = Ipv6Repr { src_addr, dst_addr, next_header: IpProtocol::Udp, payload_len: udp_repr.header_len() + payload.len(), hop_limit: 255, }; let buf = vec![0u8; IpRepr::Ipv6(ip_repr).buffer_len()]; let mut ip_packet = Ipv6Packet::new_unchecked(buf); ip_repr.emit(&mut ip_packet); udp_repr.emit( &mut UdpPacket::new_unchecked(ip_packet.payload_mut()), &ip_repr.src_addr.into(), &ip_repr.dst_addr.into(), payload.len(), |buf| buf.copy_from_slice(payload), &ChecksumCapabilities::default(), ); ip_packet } fn build_icmp4_echo_packet( src_addr: Ipv4Addr, dst_addr: Ipv4Addr, ident: u16, seq_no: u16, data: &[u8], ) -> Ipv4Packet> { let icmp_repr = Icmpv4Repr::EchoRequest { ident, seq_no, data, }; let ip_repr = Ipv4Repr { src_addr, dst_addr, next_header: IpProtocol::Icmp, payload_len: icmp_repr.buffer_len(), hop_limit: 255, }; let buf = vec![0u8; ip_repr.buffer_len() + icmp_repr.buffer_len()]; let mut output_ipv4_packet = Ipv4Packet::new_unchecked(buf); ip_repr.emit(&mut output_ipv4_packet, &ChecksumCapabilities::default()); icmp_repr.emit( &mut Icmpv4Packet::new_unchecked(output_ipv4_packet.payload_mut()), &ChecksumCapabilities::default(), ); output_ipv4_packet } fn build_icmp6_echo_packet( src_addr: Ipv6Addr, dst_addr: Ipv6Addr, ident: u16, seq_no: u16, data: &[u8], ) -> Ipv6Packet> { let icmp_repr = Icmpv6Repr::EchoRequest { ident, seq_no, data, }; let ip_repr = Ipv6Repr { src_addr, dst_addr, next_header: IpProtocol::Icmp, payload_len: icmp_repr.buffer_len(), hop_limit: 255, }; let buf = vec![0u8; ip_repr.buffer_len() + icmp_repr.buffer_len()]; let mut output_ipv6_packet = Ipv6Packet::new_unchecked(buf); ip_repr.emit(&mut output_ipv6_packet); icmp_repr.emit( &src_addr, &dst_addr, &mut Icmpv6Packet::new_unchecked(output_ipv6_packet.payload_mut()), &ChecksumCapabilities::default(), ); output_ipv6_packet } fn init_logger() { let _ = env_logger::builder() .filter_level(log::LevelFilter::Debug) .is_test(true) .try_init(); } #[tokio::test] async fn do_nothing() -> Result<()> { init_logger(); let mock = MockNetwork::init().await?; mock.stop().await } async fn udp_read_write( packet: SmolPacket, src_addr: SocketAddr, dst_addr: SocketAddr, ) -> Result<()> { let mut mock = MockNetwork::init().await?; mock.push_smol_packet(packet.clone()).await?; let event = mock.pull_py_event().await.unwrap(); let TransportEvent::ConnectionEstablished { connection_id, src_addr: recv_src_addr, dst_addr: recv_dst_addr, .. } = event; assert_eq!(src_addr, recv_src_addr); assert_eq!(dst_addr, recv_dst_addr); let (tx, rx) = oneshot::channel(); mock.push_py_command(TransportCommand::ReadData(connection_id, 0, tx)) .await?; assert_eq!(rx.await?, b"hello world!"); mock.push_py_command(TransportCommand::WriteData( connection_id, b"HELLO WORLD!".to_vec(), )) .await?; let response = mock.pull_packet().await; assert_eq!(response.payload(), b"HELLO WORLD!"); assert_eq!(response.src(), dst_addr); assert_eq!(response.dst(), src_addr); mock.push_py_command(TransportCommand::CloseConnection(connection_id, false)) .await?; mock.push_smol_packet(packet.clone()).await?; let (tx, rx) = oneshot::channel(); mock.push_py_command(TransportCommand::ReadData(connection_id, 0, tx)) .await?; assert!(rx.await.is_err()); mock.stop().await } #[tokio::test] async fn ipv4_udp() -> Result<()> { init_logger(); let src_addr = "10.0.0.1".parse()?; let dst_addr = "10.0.0.42".parse()?; let data = "hello world!".as_bytes(); let udp_ip_packet = build_ipv4_udp_packet(src_addr, dst_addr, 1234, 31337, data); udp_read_write( udp_ip_packet.into(), "10.0.0.1:1234".parse()?, "10.0.0.42:31337".parse()?, ) .await } #[tokio::test] async fn ipv6_udp() -> Result<()> { init_logger(); let src_addr: Ipv6Addr = "ca:fe:ca:fe:ca:fe:00:01".parse()?; let dst_addr: Ipv6Addr = "ca:fe:ca:fe:ca:fe:00:02".parse()?; let data = "hello world!".as_bytes(); let udp_ip_packet = build_ipv6_udp_packet(src_addr, dst_addr, 1234, 31337, data); udp_read_write( udp_ip_packet.into(), SocketAddr::from((src_addr, 1234)), SocketAddr::from((dst_addr, 31337)), ) .await } #[tokio::test] async fn tcp_ipv4_connection() -> Result<()> { init_logger(); let mut mock = MockNetwork::init().await?; let mut seq = TcpSeqNumber(rand::random::()); let src_addr = "10.0.0.1".parse()?; let dst_addr = "10.0.0.42".parse()?; let data = "hello world!".as_bytes(); // send TCP SYN log::debug!("Sending TCP SYN"); let tcp_ip_syn_packet = build_ipv4_tcp_packet( src_addr, dst_addr, 1234, 31337, TcpControl::Syn, seq, None, &[], ); mock.push_smol_packet(tcp_ip_syn_packet.into()).await?; // expect TCP SYN/ACK let mut tcp_synack_ip_packet = match mock.pull_smol_packet().await { SmolPacket::V4(packet) => packet, SmolPacket::V6(_) => return Err(anyhow!("Received unexpected IPv6 packet!")), }; let synack_src_addr = tcp_synack_ip_packet.src_addr(); let synack_dst_addr = tcp_synack_ip_packet.dst_addr(); let tcp_synack_repr = TcpRepr::parse( &TcpPacket::new_unchecked(tcp_synack_ip_packet.payload_mut()), &synack_src_addr.into(), &synack_dst_addr.into(), &ChecksumCapabilities::default(), ) .unwrap(); assert_eq!(tcp_synack_repr.control, TcpControl::Syn); assert_eq!(tcp_synack_repr.ack_number.unwrap(), seq + 1); let ack = tcp_synack_repr.seq_number + 1; // send TCP ACK log::debug!("Sending TCP ACK"); seq += 1; let tcp_ip_ack_packet = build_ipv4_tcp_packet( src_addr, dst_addr, 1234, 31337, TcpControl::None, seq, Some(ack), data, ); mock.push_smol_packet(tcp_ip_ack_packet.into()).await?; // expect ConnectionEstablished event let event = mock.pull_py_event().await.unwrap(); let TransportEvent::ConnectionEstablished { connection_id: tcp_conn_id, src_addr: tcp_src_sock, dst_addr: tcp_dst_sock, .. } = event; assert_eq!(IpAddress::Ipv4(src_addr), tcp_src_sock.ip().into()); assert_eq!(IpAddress::Ipv4(dst_addr), tcp_dst_sock.ip().into()); // expect TCP data log::debug!("Reading from TCP stream"); let (chan_tx, chan_rx) = oneshot::channel(); mock.push_py_command(TransportCommand::ReadData(tcp_conn_id, 4096, chan_tx)) .await?; let tcp_recv_data = chan_rx.await?; assert_eq!(tcp_recv_data, data); // send response log::debug!("Writing to TCP stream"); let data_upper = data.to_ascii_uppercase(); mock.push_py_command(TransportCommand::WriteData(tcp_conn_id, data_upper.clone())) .await?; // drain channels log::debug!("Draining TCP stream"); let (drain_tx, drain_rx) = oneshot::channel(); mock.push_py_command(TransportCommand::DrainWriter(tcp_conn_id, drain_tx)) .await?; drain_rx.await?; // expect TCP/IP packets mock.pull_smol_packet().await; mock.pull_smol_packet().await; let mut tcp_resp_ip_packet = match mock.pull_smol_packet().await { SmolPacket::V4(packet) => packet, SmolPacket::V6(_) => return Err(anyhow!("Received unexpected IPv6 packet!")), }; let tcp_ip_resp_src_addr = tcp_resp_ip_packet.src_addr(); let tcp_ip_resp_dst_addr = tcp_resp_ip_packet.dst_addr(); assert_eq!( IpAddress::Ipv4(tcp_ip_resp_src_addr), tcp_dst_sock.ip().into() ); assert_eq!( IpAddress::Ipv4(tcp_ip_resp_dst_addr), tcp_src_sock.ip().into() ); let tcp_resp_repr = TcpRepr::parse( &TcpPacket::new_unchecked(tcp_resp_ip_packet.payload_mut()), &tcp_ip_resp_src_addr.into(), &tcp_ip_resp_dst_addr.into(), &ChecksumCapabilities::default(), ) .unwrap(); assert_eq!(tcp_resp_repr.payload, data_upper); // close TCP connection log::debug!("Closing TCP stream"); mock.push_py_command(TransportCommand::CloseConnection(tcp_conn_id, false)) .await?; // expect TCP FIN let mut tcp_fin_ip_packet = match mock.pull_smol_packet().await { SmolPacket::V4(packet) => packet, SmolPacket::V6(_) => return Err(anyhow!("Received unexpected IPv6 packet!")), }; let tcp_ip_fin_src_addr = tcp_fin_ip_packet.src_addr(); let tcp_ip_fin_dst_addr = tcp_fin_ip_packet.dst_addr(); assert_eq!( IpAddress::Ipv4(tcp_ip_fin_src_addr), tcp_dst_sock.ip().into() ); assert_eq!( IpAddress::Ipv4(tcp_ip_fin_dst_addr), tcp_src_sock.ip().into() ); let tcp_fin_repr = TcpRepr::parse( &TcpPacket::new_unchecked(tcp_fin_ip_packet.payload_mut()), &tcp_ip_fin_src_addr.into(), &tcp_ip_fin_dst_addr.into(), &ChecksumCapabilities::default(), ) .unwrap(); assert_eq!(tcp_fin_repr.control, TcpControl::Fin); let ack = tcp_fin_repr.seq_number + 1; // send TCP FIN/ACK log::debug!("Sending TCP FIN/ACK"); seq += 12; // FIXME: no idea why this requires incrementing by 12 instead of 1 let tcp_ip_syn_packet = build_ipv4_tcp_packet( src_addr, dst_addr, 1234, 31337, TcpControl::Fin, seq, Some(ack), &[], ); mock.push_smol_packet(tcp_ip_syn_packet.into()).await?; mock.stop().await } #[tokio::test] async fn tcp_ipv6_connection() -> Result<()> { init_logger(); let mut mock = MockNetwork::init().await?; let mut seq = TcpSeqNumber(rand::random::()); let src_addr: Ipv6Addr = "ca:fe:ca:fe:ca:fe:00:01".parse()?; let dst_addr: Ipv6Addr = "ca:fe:ca:fe:ca:fe:00:02".parse()?; let data = "hello world!".as_bytes(); // send TCP SYN log::debug!("Sending TCP SYN"); let tcp_ip_syn_packet = build_ipv6_tcp_packet( src_addr, dst_addr, 1234, 31337, TcpControl::Syn, seq, None, &[], ); mock.push_smol_packet(tcp_ip_syn_packet.into()).await?; // expect TCP SYN/ACK let mut tcp_synack_ip_packet = match mock.pull_smol_packet().await { SmolPacket::V6(packet) => packet, SmolPacket::V4(_) => return Err(anyhow!("Received unexpected IPv4 packet!")), }; let synack_src_addr = tcp_synack_ip_packet.src_addr(); let synack_dst_addr = tcp_synack_ip_packet.dst_addr(); let tcp_synack_repr = TcpRepr::parse( &TcpPacket::new_unchecked(tcp_synack_ip_packet.payload_mut()), &synack_src_addr.into(), &synack_dst_addr.into(), &ChecksumCapabilities::default(), ) .unwrap(); assert_eq!(tcp_synack_repr.control, TcpControl::Syn); assert_eq!(tcp_synack_repr.ack_number.unwrap(), seq + 1); let ack = tcp_synack_repr.seq_number + 1; // send TCP ACK log::debug!("Sending TCP ACK"); seq += 1; let tcp_ip_ack_packet = build_ipv6_tcp_packet( src_addr, dst_addr, 1234, 31337, TcpControl::None, seq, Some(ack), data, ); mock.push_smol_packet(tcp_ip_ack_packet.into()).await?; // expect ConnectionEstablished event let event = mock.pull_py_event().await.unwrap(); let TransportEvent::ConnectionEstablished { connection_id: tcp_conn_id, src_addr: tcp_src_sock, dst_addr: tcp_dst_sock, .. } = event; assert_eq!(IpAddress::Ipv6(src_addr), tcp_src_sock.ip().into()); assert_eq!(IpAddress::Ipv6(dst_addr), tcp_dst_sock.ip().into()); // expect TCP data log::debug!("Reading from TCP stream"); let (chan_tx, chan_rx) = oneshot::channel(); mock.push_py_command(TransportCommand::ReadData(tcp_conn_id, 4096, chan_tx)) .await?; let tcp_recv_data = chan_rx.await?; assert_eq!(tcp_recv_data, data); // send response log::debug!("Writing to TCP stream"); let data_upper = data.to_ascii_uppercase(); mock.push_py_command(TransportCommand::WriteData(tcp_conn_id, data_upper.clone())) .await?; // drain channels log::debug!("Draining TCP stream"); let (drain_tx, drain_rx) = oneshot::channel(); mock.push_py_command(TransportCommand::DrainWriter(tcp_conn_id, drain_tx)) .await?; drain_rx.await?; // expect TCP/IP packets mock.pull_smol_packet().await; mock.pull_smol_packet().await; let mut tcp_resp_ip_packet = match mock.pull_smol_packet().await { SmolPacket::V6(packet) => packet, SmolPacket::V4(_) => return Err(anyhow!("Received unexpected IPv4 packet!")), }; let tcp_ip_resp_src_addr = tcp_resp_ip_packet.src_addr(); let tcp_ip_resp_dst_addr = tcp_resp_ip_packet.dst_addr(); assert_eq!( IpAddress::Ipv6(tcp_ip_resp_src_addr), tcp_dst_sock.ip().into() ); assert_eq!( IpAddress::Ipv6(tcp_ip_resp_dst_addr), tcp_src_sock.ip().into() ); let tcp_resp_repr = TcpRepr::parse( &TcpPacket::new_unchecked(tcp_resp_ip_packet.payload_mut()), &tcp_ip_resp_src_addr.into(), &tcp_ip_resp_dst_addr.into(), &ChecksumCapabilities::default(), ) .unwrap(); assert_eq!(tcp_resp_repr.payload, data_upper); // close TCP connection log::debug!("Closing TCP stream"); mock.push_py_command(TransportCommand::CloseConnection(tcp_conn_id, true)) .await?; // expect TCP FIN let mut tcp_fin_ip_packet = match mock.pull_smol_packet().await { SmolPacket::V6(packet) => packet, SmolPacket::V4(_) => return Err(anyhow!("Received unexpected IPv4 packet!")), }; let tcp_ip_fin_src_addr = tcp_fin_ip_packet.src_addr(); let tcp_ip_fin_dst_addr = tcp_fin_ip_packet.dst_addr(); assert_eq!( IpAddress::Ipv6(tcp_ip_fin_src_addr), tcp_dst_sock.ip().into() ); assert_eq!( IpAddress::Ipv6(tcp_ip_fin_dst_addr), tcp_src_sock.ip().into() ); let tcp_fin_repr = TcpRepr::parse( &TcpPacket::new_unchecked(tcp_fin_ip_packet.payload_mut()), &tcp_ip_fin_src_addr.into(), &tcp_ip_fin_dst_addr.into(), &ChecksumCapabilities::default(), ) .unwrap(); assert_eq!(tcp_fin_repr.control, TcpControl::Fin); let ack = tcp_fin_repr.seq_number + 1; // send TCP FIN/ACK log::debug!("Sending TCP FIN/ACK"); seq += 12; // FIXME: no idea why this requires incrementing by 12 instead of 1 let tcp_ip_syn_packet = build_ipv6_tcp_packet( src_addr, dst_addr, 1234, 31337, TcpControl::Fin, seq, Some(ack), &[], ); mock.push_smol_packet(tcp_ip_syn_packet.into()).await?; mock.stop().await } #[tokio::test] async fn receive_icmp4_echo() -> Result<()> { init_logger(); let mut mock = MockNetwork::init().await?; let src_addr = "10.0.0.1".parse()?; let dst_addr = "10.0.0.42".parse()?; let data = "hello world!".as_bytes(); let icmp_echo_ip_packet = build_icmp4_echo_packet(src_addr, dst_addr, 42, 31337, data); mock.push_smol_packet(icmp_echo_ip_packet.into()).await?; let response = mock.pull_smol_packet().await; if let SmolPacket::V4(mut response) = response { // Checking that source and destination addresses were flipped and data was the same. assert_eq!(src_addr, response.dst_addr()); assert_eq!(dst_addr, response.src_addr()); let mut input_icmpv4_packet = match Icmpv4Packet::new_checked(response.payload_mut()) { Ok(p) => p, Err(e) => { return Err(anyhow!("Invalid ICMPv4 packet emitted: {}", e)); } }; assert_eq!(input_icmpv4_packet.msg_type(), Icmpv4Message::EchoReply); assert_eq!(42, input_icmpv4_packet.echo_ident()); assert_eq!(31337, input_icmpv4_packet.echo_seq_no()); assert_eq!(data, input_icmpv4_packet.data_mut()); } else { return Err(anyhow!("Wrong packet IP type emitted!")); } mock.stop().await } #[tokio::test] async fn receive_icmp6_echo() -> Result<()> { init_logger(); let mut mock = MockNetwork::init().await?; let src_addr: Ipv6Addr = "ca:fe:ca:fe:ca:fe:00:01".parse()?; let dst_addr: Ipv6Addr = "ca:fe:ca:fe:ca:fe:00:02".parse()?; let data = "hello world!".as_bytes(); let icmp_echo_ip_packet = build_icmp6_echo_packet(src_addr, dst_addr, 42, 31337, data); mock.push_smol_packet(icmp_echo_ip_packet.into()).await?; let response = mock.pull_smol_packet().await; if let SmolPacket::V6(mut response) = response { // Checking that source and destination addresses were flipped and data was the same. assert_eq!(src_addr, response.dst_addr()); assert_eq!(dst_addr, response.src_addr()); let mut input_icmpv6_packet = match Icmpv6Packet::new_checked(response.payload_mut()) { Ok(p) => p, Err(e) => { return Err(anyhow!("Invalid ICMPv6 packet emitted: {}", e)); } }; assert_eq!(input_icmpv6_packet.msg_type(), Icmpv6Message::EchoReply); assert_eq!(42, input_icmpv6_packet.echo_ident()); assert_eq!(31337, input_icmpv6_packet.echo_seq_no()); assert_eq!(data, input_icmpv6_packet.payload_mut()); } else { return Err(anyhow!("Wrong packet IP type emitted!")); } mock.stop().await } mitmproxy_rs-0.12.8/src/network/udp.rs000066400000000000000000000264061511036467100200100ustar00rootroot00000000000000use std::collections::VecDeque; use std::net::SocketAddr; use std::time::Duration; use lru_time_cache::LruCache; use tokio::sync::mpsc::Permit; use tokio::sync::oneshot; use crate::messages::{ ConnectionId, ConnectionIdGenerator, SmolPacket, TransportCommand, TransportEvent, TunnelInfo, }; use internet_packet::InternetPacket; use smoltcp::phy::ChecksumCapabilities; use smoltcp::wire::{IpProtocol, IpRepr, Ipv4Packet, Ipv4Repr, Ipv6Packet, Ipv6Repr, UdpRepr}; #[derive(Default)] pub struct ConnectionState { closed: bool, packets: VecDeque>, read_tx: Option>>, } impl ConnectionState { pub fn add_packet(&mut self, data: Vec) { if self.closed { drop(data); } else if let Some(tx) = self.read_tx.take() { tx.send(data).ok(); } else { self.packets.push_back(data); } } #[allow(dead_code)] pub fn packet_queue_len(&self) -> usize { self.packets.len() } pub fn add_reader(&mut self, tx: oneshot::Sender>) { assert!(self.read_tx.is_none()); if self.closed { drop(tx); } else if let Some(data) = self.packets.pop_front() { tx.send(data).ok(); } else { self.read_tx = Some(tx); } } pub fn close(&mut self) { if self.closed { // already closed. } else if let Some(tx) = self.read_tx.take() { drop(tx); } else { self.packets.clear(); } self.closed = true; } } pub const UDP_TIMEOUT: Duration = Duration::from_secs(60); type FourTuple = (SocketAddr, SocketAddr); pub struct UdpHandler { connection_id_generator: ConnectionIdGenerator, id_lookup: LruCache, connections: LruCache, } impl UdpHandler { pub fn new() -> Self { // This implementation is largely based on the fact that LruCache eventually // drops the state, which closes the respective channels. Self { connections: LruCache::with_expiry_duration(UDP_TIMEOUT), id_lookup: LruCache::with_expiry_duration(UDP_TIMEOUT), connection_id_generator: ConnectionIdGenerator::udp(), } } pub(crate) fn handle_transport_command( &mut self, command: TransportCommand, ) -> Option { match command { TransportCommand::ReadData(id, _, tx) => { self.read_data(id, tx); None } TransportCommand::WriteData(id, data) => self.write_data(id, data), TransportCommand::DrainWriter(id, tx) => { self.drain_writer(id, tx); None } TransportCommand::CloseConnection(id, _) => { self.close_connection(id); None } } } pub fn read_data(&mut self, id: ConnectionId, tx: oneshot::Sender>) { if let Some((state, _)) = self.connections.get_mut(&id) { state.add_reader(tx); } } pub(crate) fn write_data(&mut self, id: ConnectionId, data: Vec) -> Option { let (state, addrs) = self.connections.get(&id)?; // Refresh id lookup. self.id_lookup.insert(*addrs, id); if state.closed { return None; } Some(UdpPacket { src_addr: addrs.1, dst_addr: addrs.0, payload: data, }) } pub fn drain_writer(&mut self, _id: ConnectionId, tx: oneshot::Sender<()>) { tx.send(()).ok(); } pub fn close_connection(&mut self, id: ConnectionId) { if let Some((state, _)) = self.connections.get_mut(&id) { state.close(); } } pub(crate) fn receive_data( &mut self, packet: UdpPacket, tunnel_info: TunnelInfo, permit: Permit<'_, TransportEvent>, ) { let potential_cid = self .id_lookup .get(&(packet.src_addr, packet.dst_addr)) .cloned() .unwrap_or(ConnectionId::unassigned_udp()); match self.connections.get_mut(&potential_cid) { Some((state, _)) => { state.add_packet(packet.payload); } None => { let mut state = ConnectionState::default(); state.add_packet(packet.payload); let connection_id = self.connection_id_generator.next_id(); self.id_lookup .insert((packet.src_addr, packet.dst_addr), connection_id); self.connections .insert(connection_id, (state, (packet.src_addr, packet.dst_addr))); permit.send(TransportEvent::ConnectionEstablished { connection_id, src_addr: packet.src_addr, dst_addr: packet.dst_addr, tunnel_info, command_tx: None, }); } }; } pub fn poll_delay(&mut self) -> Option { if self.connections.is_empty() { None } else { Some(Duration::from_secs(5)) } } pub fn poll(&mut self) { // Creating an iterator removes expired entries. self.connections.iter(); self.id_lookup.iter(); } } pub(crate) struct UdpPacket { pub src_addr: SocketAddr, pub dst_addr: SocketAddr, pub payload: Vec, } impl TryFrom for UdpPacket { type Error = internet_packet::ParseError; fn try_from(value: SmolPacket) -> Result { let packet: InternetPacket = value.try_into()?; Ok(UdpPacket { src_addr: packet.src(), dst_addr: packet.dst(), payload: packet.payload().to_vec(), }) } } impl From for SmolPacket { fn from(value: UdpPacket) -> Self { let UdpPacket { src_addr, dst_addr, payload, } = value; let udp_repr = UdpRepr { src_port: src_addr.port(), dst_port: dst_addr.port(), }; let ip_repr: IpRepr = match (src_addr, dst_addr) { (SocketAddr::V4(src_addr), SocketAddr::V4(dst_addr)) => IpRepr::Ipv4(Ipv4Repr { src_addr: (*src_addr.ip()), dst_addr: (*dst_addr.ip()), next_header: IpProtocol::Udp, payload_len: udp_repr.header_len() + payload.len(), hop_limit: 255, }), (SocketAddr::V6(src_addr), SocketAddr::V6(dst_addr)) => IpRepr::Ipv6(Ipv6Repr { src_addr: (*src_addr.ip()), dst_addr: (*dst_addr.ip()), next_header: IpProtocol::Udp, payload_len: udp_repr.header_len() + payload.len(), hop_limit: 255, }), _ => unreachable!("Mismatched IP address versions"), }; let buf = vec![0u8; ip_repr.buffer_len()]; let mut smol_packet = match ip_repr { IpRepr::Ipv4(repr) => { let mut packet = Ipv4Packet::new_unchecked(buf); repr.emit(&mut packet, &ChecksumCapabilities::default()); SmolPacket::from(packet) } IpRepr::Ipv6(repr) => { let mut packet = Ipv6Packet::new_unchecked(buf); repr.emit(&mut packet); SmolPacket::from(packet) } }; udp_repr.emit( &mut smoltcp::wire::UdpPacket::new_unchecked(smol_packet.payload_mut()), &ip_repr.src_addr(), &ip_repr.dst_addr(), payload.len(), |buf| buf.copy_from_slice(payload.as_slice()), &ChecksumCapabilities::default(), ); smol_packet } } #[cfg(test)] mod tests { use super::*; use crate::packet_sources::udp::UdpConf; use crate::packet_sources::{PacketSourceConf, PacketSourceTask}; use crate::shutdown; use std::net::{IpAddr, Ipv4Addr}; use std::str::FromStr; use tokio::net::UdpSocket; #[test] fn test_connection_state_recv_recv_read_read() { let mut state = ConnectionState::default(); state.add_packet(vec![1, 2, 3]); state.add_packet(vec![4, 5, 6]); assert_eq!(state.packet_queue_len(), 2); let (tx, rx) = oneshot::channel(); state.add_reader(tx); assert_eq!(vec![1, 2, 3], rx.blocking_recv().unwrap()); let (tx, rx) = oneshot::channel(); state.add_reader(tx); assert_eq!(vec![4, 5, 6], rx.blocking_recv().unwrap()); } #[test] fn test_connection_state_read_recv_recv() { let mut state = ConnectionState::default(); let (tx, rx) = oneshot::channel(); state.add_reader(tx); state.add_packet(vec![1, 2, 3]); state.add_packet(vec![4, 5, 6]); assert_eq!(vec![1, 2, 3], rx.blocking_recv().unwrap()); } #[test] fn test_connection_state_close_recv_read() { let mut state = ConnectionState::default(); let (tx, rx) = oneshot::channel(); state.close(); state.add_packet(vec![1, 2, 3]); state.add_reader(tx); assert!(rx.blocking_recv().is_err()); } #[test] fn test_connection_state_read_close_recv() { let mut state = ConnectionState::default(); let (tx, rx) = oneshot::channel(); state.add_reader(tx); state.close(); state.add_packet(vec![1, 2, 3]); assert!(rx.blocking_recv().is_err()); } #[tokio::test] async fn test_udp_server_echo() -> anyhow::Result<()> { let (commands_tx, commands_rx) = tokio::sync::mpsc::unbounded_channel(); let (events_tx, mut events_rx) = tokio::sync::mpsc::channel(1); let (shutdown_tx, shutdown_rx) = shutdown::channel(); let (task, addr) = UdpConf { listen_addr: SocketAddr::from_str("127.0.0.1:0").unwrap(), } .build(events_tx, commands_rx, shutdown_rx) .await?; let handle = tokio::spawn(task.run()); let client = UdpSocket::bind(SocketAddr::new(IpAddr::V4(Ipv4Addr::UNSPECIFIED), 0)).await?; client.connect(addr).await?; client.send(b"Hello World!").await?; let TransportEvent::ConnectionEstablished { connection_id, command_tx: None, .. } = events_rx.recv().await.unwrap() else { panic!("unexpected command tx needs test adjustment"); }; let (data_tx, data_rx) = oneshot::channel(); commands_tx.send(TransportCommand::ReadData(connection_id, 0, data_tx))?; assert_eq!(data_rx.await.unwrap(), b"Hello World!"); commands_tx.send(TransportCommand::WriteData( connection_id, b"Hello back!".to_vec(), ))?; let mut recv_buf = [0u8; 20]; let n = client.recv(&mut recv_buf).await?; assert_eq!(&recv_buf[..n], b"Hello back!"); commands_tx.send(TransportCommand::CloseConnection(connection_id, false))?; let (data_tx, data_rx) = oneshot::channel(); commands_tx.send(TransportCommand::ReadData(connection_id, 0, data_tx))?; assert!(data_rx.await.is_err()); shutdown_tx.send(())?; handle.await??; Ok(()) } } mitmproxy_rs-0.12.8/src/network/virtual_device.rs000077500000000000000000000052551511036467100222270ustar00rootroot00000000000000use std::collections::VecDeque; use smoltcp::{ phy::{Device, DeviceCapabilities, Medium, RxToken, TxToken}, time::Instant, }; use tokio::sync::mpsc::{Permit, Sender}; use crate::messages::{NetworkCommand, SmolPacket}; /// A virtual smoltcp device into which we manually feed packets using /// [VirtualDevice::receive_packet] and which send outgoing packets to a channel. pub struct VirtualDevice { rx_buffer: VecDeque>, tx_channel: Sender, } impl VirtualDevice { pub fn new(tx_channel: Sender) -> Self { VirtualDevice { rx_buffer: VecDeque::new(), tx_channel, } } pub fn receive_packet(&mut self, packet: SmolPacket) { self.rx_buffer.push_back(packet.into_inner()); } } impl Device for VirtualDevice { type RxToken<'a> = VirtualRxToken where Self: 'a; type TxToken<'a> = VirtualTxToken<'a> where Self: 'a; fn receive(&mut self, _timestamp: Instant) -> Option<(Self::RxToken<'_>, Self::TxToken<'_>)> { if self.rx_buffer.is_empty() { return None; } if let Ok(permit) = self.tx_channel.try_reserve() { if let Some(buffer) = self.rx_buffer.pop_front() { let rx = Self::RxToken { buffer }; let tx = VirtualTxToken { permit }; return Some((rx, tx)); } } None } fn transmit(&mut self, _timestamp: Instant) -> Option> { match self.tx_channel.try_reserve() { Ok(permit) => Some(VirtualTxToken { permit }), Err(_) => None, } } fn capabilities(&self) -> DeviceCapabilities { let mut capabilities = DeviceCapabilities::default(); capabilities.medium = Medium::Ip; capabilities.max_transmission_unit = 1420; capabilities } } pub struct VirtualTxToken<'a> { permit: Permit<'a, NetworkCommand>, } impl TxToken for VirtualTxToken<'_> { fn consume(self, len: usize, f: F) -> R where F: FnOnce(&mut [u8]) -> R, { let mut buffer = vec![0; len]; let result = f(&mut buffer); match SmolPacket::try_from(buffer) { Ok(packet) => { self.permit.send(NetworkCommand::SendPacket(packet)); } Err(err) => { log::error!("Failed to parse packet from smol: {err:?}") } } result } } pub struct VirtualRxToken { buffer: Vec, } impl RxToken for VirtualRxToken { fn consume(self, f: F) -> R where F: FnOnce(&[u8]) -> R, { f(&self.buffer[..]) } } mitmproxy_rs-0.12.8/src/packet_sources/000077500000000000000000000000001511036467100201635ustar00rootroot00000000000000mitmproxy_rs-0.12.8/src/packet_sources/linux.rs000077500000000000000000000153411511036467100216770ustar00rootroot00000000000000use anyhow::{bail, Context, Result}; use log::{debug, error, log, Level}; use std::io::Error; use std::net::Shutdown; use std::path::{Path, PathBuf}; use std::pin::Pin; use std::process::Stdio; use std::str::FromStr; use std::task::Poll; use std::time::Duration; use tokio::io::{AsyncBufReadExt, AsyncRead, AsyncWrite, BufReader, ReadBuf}; use tokio::sync::mpsc::Sender; use tokio::sync::mpsc::{unbounded_channel, UnboundedReceiver, UnboundedSender}; use crate::intercept_conf::InterceptConf; use crate::messages::{TransportCommand, TransportEvent}; use crate::packet_sources::{forward_packets, PacketSourceConf, PacketSourceTask}; use crate::shutdown; use tempfile::{tempdir, TempDir}; use tokio::net::UnixDatagram; use tokio::process::Command; use tokio::time::timeout; async fn start_redirector( executable: &Path, listener_addr: &Path, shutdown: shutdown::Receiver, ) -> Result { debug!("Elevating privileges..."); // Try to elevate privileges using a dummy sudo invocation. // The idea here is to block execution and give the user time to enter their password. // For now, we naively assume that all systems 1) have sudo and 2) timestamp_timeout > 0. let mut sudo = Command::new("sudo") .arg("echo") .arg("-n") .spawn() .context("Failed to run sudo.")?; sudo.stdin.take(); if !sudo.wait().await.is_ok_and(|x| x.success()) { bail!("Failed to elevate privileges"); } debug!("Starting mitmproxy-linux-redirector..."); let mut redirector_process = Command::new("sudo") .arg("--non-interactive") .arg("--preserve-env") .arg(executable) .arg(listener_addr) .stdin(Stdio::null()) .stdout(Stdio::piped()) .stderr(Stdio::piped()) .spawn() .context("Failed to launch mitmproxy-linux-redirector.")?; let stdout = redirector_process.stdout.take().unwrap(); let stderr = redirector_process.stderr.take().unwrap(); let shutdown2 = shutdown.clone(); tokio::spawn(async move { let mut stderr = BufReader::new(stderr).lines(); let mut level = Level::Error; while let Ok(Some(line)) = stderr.next_line().await { if shutdown2.is_shutting_down() { // We don't want to log during exit, https://github.com/vorner/pyo3-log/issues/30 eprintln!("{}", line); continue; } let new_level = line .strip_prefix("[") .and_then(|s| s.split_once(" ")) .and_then(|(level, line)| { Level::from_str(level) .ok() .map(|l| (l, line.trim_ascii_start())) }); if let Some((l, line)) = new_level { level = l; log!(level, "[{line}"); } else { log!(level, "{line}"); } } }); tokio::spawn(async move { match redirector_process.wait().await { Ok(status) if status.success() => { if shutdown.is_shutting_down() { // We don't want to log during exit, https://github.com/vorner/pyo3-log/issues/30 } else { debug!("[linux-redirector] exited successfully.") } } other => { if shutdown.is_shutting_down() { eprintln!("[linux-redirector] exited during shutdown: {:?}", other) } else { error!("[linux-redirector] exited: {:?}", other) } } } }); timeout( Duration::from_secs(5), BufReader::new(stdout).lines().next_line(), ) .await .context("failed to establish connection to Linux redirector")? .context("failed to read redirector stdout")? .map(PathBuf::from) .context("redirector did not produce stdout") } pub struct LinuxConf { pub executable_path: PathBuf, } // We implement AsyncRead/AsyncWrite for UnixDatagram to have a common interface // with Windows' NamedPipeServer. pub struct AsyncUnixDatagram(UnixDatagram); impl AsyncRead for AsyncUnixDatagram { fn poll_read( self: Pin<&mut Self>, cx: &mut std::task::Context<'_>, buf: &mut ReadBuf<'_>, ) -> Poll> { self.0.poll_recv(cx, buf) } } impl AsyncWrite for AsyncUnixDatagram { fn poll_write( self: Pin<&mut Self>, cx: &mut std::task::Context<'_>, buf: &[u8], ) -> Poll> { self.0.poll_send(cx, buf) } fn poll_flush( self: Pin<&mut Self>, cx: &mut std::task::Context<'_>, ) -> Poll> { self.0.poll_send_ready(cx) } fn poll_shutdown( self: Pin<&mut Self>, _cx: &mut std::task::Context<'_>, ) -> Poll> { Poll::Ready(self.0.shutdown(Shutdown::Write)) } } impl PacketSourceConf for LinuxConf { type Task = LinuxTask; type Data = UnboundedSender; fn name(&self) -> &'static str { "Linux proxy" } async fn build( self, transport_events_tx: Sender, transport_commands_rx: UnboundedReceiver, shutdown: shutdown::Receiver, ) -> Result<(Self::Task, Self::Data)> { let datagram_dir = tempdir().context("failed to create temp dir")?; let channel = UnixDatagram::bind(datagram_dir.path().join("mitmproxy"))?; let dst = start_redirector(&self.executable_path, datagram_dir.path(), shutdown.clone()).await?; channel .connect(&dst) .with_context(|| format!("Failed to connect to redirector at {}", dst.display()))?; let (conf_tx, conf_rx) = unbounded_channel(); Ok(( LinuxTask { datagram_dir, channel: AsyncUnixDatagram(channel), transport_events_tx, transport_commands_rx, conf_rx, shutdown, }, conf_tx, )) } } pub struct LinuxTask { datagram_dir: TempDir, channel: AsyncUnixDatagram, transport_events_tx: Sender, transport_commands_rx: UnboundedReceiver, conf_rx: UnboundedReceiver, shutdown: shutdown::Receiver, } impl PacketSourceTask for LinuxTask { async fn run(self) -> Result<()> { forward_packets( self.channel, self.transport_events_tx, self.transport_commands_rx, self.conf_rx, self.shutdown, ) .await?; drop(self.datagram_dir); Ok(()) } } mitmproxy_rs-0.12.8/src/packet_sources/macos.rs000066400000000000000000000344361511036467100216450ustar00rootroot00000000000000use std::net::{IpAddr, Ipv4Addr, SocketAddr}; use crate::messages::{ConnectionIdGenerator, TransportCommand, TransportEvent, TunnelInfo}; use crate::intercept_conf::InterceptConf; use crate::ipc; use crate::ipc::{NewFlow, TcpFlow, UdpFlow}; use crate::packet_sources::{PacketSourceConf, PacketSourceTask}; use crate::shutdown; use anyhow::{bail, Context, Result}; use futures_util::SinkExt; use futures_util::StreamExt; use prost::bytes::Bytes; use prost::bytes::BytesMut; use prost::Message; use std::process::Stdio; use std::time::Duration; use tokio::io::{AsyncReadExt, AsyncWriteExt}; use tokio::net::{UnixListener, UnixStream}; use crate::network::udp::ConnectionState; use tokio::process::Command; use tokio::sync::mpsc::Sender; use tokio::sync::mpsc::{unbounded_channel, UnboundedReceiver, UnboundedSender}; use tokio::sync::oneshot; use tokio::task::JoinSet; use tokio::time::timeout; use tokio_util::codec::{Framed, LengthDelimitedCodec}; pub struct MacosConf; async fn start_redirector(listener_addr: String) -> Result<()> { log::debug!("Starting redirector app..."); let redirector_process = Command::new("/Applications/Mitmproxy Redirector.app/Contents/MacOS/Mitmproxy Redirector") .arg(listener_addr) .stdin(Stdio::piped()) .stdout(Stdio::piped()) .stderr(Stdio::piped()) .spawn() .context("Failed to launch macos-redirector app.")?; let output = redirector_process.wait_with_output().await?; if !output.stdout.is_empty() { log::info!( "[macos-redirector] {}", String::from_utf8_lossy(&output.stdout).trim() ); } if !output.stderr.is_empty() { log::error!( "[macos-redirector] {}", String::from_utf8_lossy(&output.stderr).trim() ); } if !output.status.success() { bail!( "macos-redirector exited with status {:?}", output.status.code() ); } log::debug!("Redirector app exited successfully."); Ok(()) } impl PacketSourceConf for MacosConf { type Task = MacOsTask; type Data = UnboundedSender; fn name(&self) -> &'static str { "macOS proxy" } async fn build( self, transport_events_tx: Sender, _transport_commands_rx: UnboundedReceiver, shutdown: shutdown::Receiver, ) -> Result<(Self::Task, Self::Data)> { let listener_addr = format!("/tmp/mitmproxy-{}", std::process::id()); let listener = UnixListener::bind(&listener_addr)?; start_redirector(listener_addr).await?; log::debug!("Waiting for control channel..."); // XXX: Saw some hangs here during development, not sure why. let control_channel = timeout(Duration::new(5, 0), listener.accept()) .await .context("failed to establish connection to macOS system extension")?? .0; log::debug!("Control channel connected."); let (conf_tx, conf_rx) = unbounded_channel(); Ok(( MacOsTask { control_channel, listener, connections: JoinSet::new(), transport_events_tx, conf_rx, shutdown, }, conf_tx, )) } } pub struct MacOsTask { control_channel: UnixStream, listener: UnixListener, connections: JoinSet>, transport_events_tx: Sender, conf_rx: UnboundedReceiver, shutdown: shutdown::Receiver, } impl PacketSourceTask for MacOsTask { async fn run(mut self) -> Result<()> { let mut control_channel = Framed::new(self.control_channel, LengthDelimitedCodec::new()); loop { tokio::select! { // wait for graceful shutdown _ = self.shutdown.recv() => break, _ = control_channel.next() => { // No messages expected here at the moment. bail!("macOS System Extension shut down.") }, Some(task) = self.connections.join_next() => { match task { Ok(Ok(())) => (), Ok(Err(e)) => log::error!("Connection task failure: {e:?}"), Err(e) => log::error!("Connection task panic: {e:?}"), } }, l = self.listener.accept() => { match l { Ok((stream, _)) => { let task = ConnectionTask::new( stream, self.transport_events_tx.clone(), self.shutdown.clone(), ); self.connections.spawn(task.run()); }, Err(e) => log::error!("Error accepting connection from macos-redirector: {e}") } }, // pipe through changes to the intercept list Some(conf) = self.conf_rx.recv() => { let msg = ipc::InterceptConf::from(conf).encode_to_vec(); control_channel.send(Bytes::from(msg)).await.context("Failed to write to control channel")?; }, } } log::info!("Macos OS proxy task shutting down."); Ok(()) } } struct ConnectionTask { stream: UnixStream, events: Sender, shutdown: shutdown::Receiver, } impl ConnectionTask { pub fn new( stream: UnixStream, events: Sender, shutdown: shutdown::Receiver, ) -> Self { Self { stream, events, shutdown, } } async fn run(mut self) -> Result<()> { let new_flow = { let len = self .stream .read_u32() .await .context("Failed to read handshake.")? as usize; let mut buf = vec![0; len]; self.stream .read_exact(&mut buf) .await .context("Failed to read handshake contents.")?; NewFlow::decode(buf.as_slice()).context("Invalid handshake IPC")? }; match new_flow { NewFlow { message: Some(ipc::new_flow::Message::Tcp(tcp_flow)), } => self .handle_tcp(tcp_flow) .await .context("failed to handle TCP stream"), NewFlow { message: Some(ipc::new_flow::Message::Udp(udp_flow)), } => self .handle_udp(udp_flow) .await .context("failed to handle UDP stream"), _ => bail!("Received invalid IPC message: {:?}", new_flow), } } async fn handle_udp(mut self, flow: UdpFlow) -> Result<()> { // For UDP connections, we pass length-delimited protobuf messages over the unix socket // in both directions. let mut write_buf = BytesMut::new(); let mut stream = Framed::new(self.stream, LengthDelimitedCodec::new()); let tunnel_info = { let Some(tun) = flow.tunnel_info else { bail!("no tunnel info") }; TunnelInfo::LocalRedirector { pid: tun.pid, process_name: tun.process_name, remote_endpoint: None, } }; let local_address = { let Some(addr) = &flow.local_address else { bail!("no local address") }; SocketAddr::try_from(addr) .with_context(|| format!("invalid local_address: {addr:?}"))? }; let mut remote_address = SocketAddr::new(IpAddr::V4(Ipv4Addr::UNSPECIFIED), 0); let (command_tx, mut command_rx) = unbounded_channel(); let mut first_packet = Some((tunnel_info, local_address, command_tx)); let mut state = ConnectionState::default(); loop { tokio::select! { _ = self.shutdown.recv() => break, Some(packet) = stream.next(), if state.packet_queue_len() < 10 => { let packet = ipc::UdpPacket::decode( packet.context("IPC read error")? ).context("invalid IPC message")?; let dst_addr = { let Some(dst_addr) = &packet.remote_address else { bail!("no remote addr") }; SocketAddr::try_from(dst_addr).with_context(|| format!("invalid remote_address: {dst_addr:?}"))? }; // We can only send ConnectionEstablished once we know the destination address. if let Some((tunnel_info, local_address, command_tx)) = first_packet.take() { remote_address = dst_addr; self.events.send(TransportEvent::ConnectionEstablished { connection_id: ConnectionIdGenerator::udp().next_id(), src_addr: local_address, dst_addr, tunnel_info, command_tx: Some(command_tx), }).await?; } else if remote_address != dst_addr { bail!("UDP packet destinations do not match: {remote_address} -> {dst_addr}") } // TODO: Make ConnectionState accept Bytes, not Vec state.add_packet(packet.data.to_vec()); }, Some(command) = command_rx.recv() => { match command { TransportCommand::ReadData(_, _, tx) => { state.add_reader(tx); }, TransportCommand::WriteData(_, data) => { assert!(first_packet.is_none()); let packet = ipc::UdpPacket { data: Bytes::from(data), remote_address: Some(remote_address.into()), }; write_buf.reserve(packet.encoded_len()); packet.encode(&mut write_buf)?; // Awaiting here isn't ideal because it blocks reading, but what to do. stream.send(write_buf.split().freeze()).await.ok(); }, TransportCommand::DrainWriter(_, tx) => { tx.send(()).ok(); }, TransportCommand::CloseConnection(_, half_close) => { if !half_close { state.close(); break; } } } } } } Ok(()) } async fn handle_tcp(mut self, flow: TcpFlow) -> Result<()> { let mut write_buf = BytesMut::new(); let mut drain_tx: Option> = None; let mut read_tx: Option<(usize, oneshot::Sender>)> = None; let (command_tx, mut command_rx) = unbounded_channel(); let remote = flow.remote_address.expect("no remote address"); let src_addr = SocketAddr::from((Ipv4Addr::LOCALHOST, 0)); let dst_addr = SocketAddr::try_from(&remote) .unwrap_or_else(|_| SocketAddr::from((Ipv4Addr::UNSPECIFIED, 0))); let tunnel_info = TunnelInfo::LocalRedirector { pid: flow.tunnel_info.as_ref().and_then(|t| t.pid), process_name: flow.tunnel_info.and_then(|t| t.process_name), remote_endpoint: Some((remote.host, remote.port as u16)), }; self.events .send(TransportEvent::ConnectionEstablished { connection_id: ConnectionIdGenerator::tcp().next_id(), src_addr, dst_addr, tunnel_info, command_tx: Some(command_tx), }) .await?; loop { tokio::select! { _ = self.shutdown.recv() => break, Ok(()) = self.stream.writable(), if !write_buf.is_empty() => { let Ok(_) = self.stream.write_buf(&mut write_buf).await else { break; // Client has disconnected. }; if write_buf.is_empty() { if let Some(tx) = drain_tx.take() { tx.send(()).ok(); } } }, Ok(()) = self.stream.readable(), if read_tx.is_some() => { let (n, tx) = read_tx.take().unwrap(); let mut data = Vec::with_capacity(n); self.stream.read_buf(&mut data).await.context("failed to read from socket")?; tx.send(data).ok(); }, Some(command) = command_rx.recv() => { match command { TransportCommand::ReadData(_, n, tx) => { assert!(read_tx.is_none()); read_tx = Some((n as usize, tx)); }, TransportCommand::WriteData(_, data) => { write_buf.extend_from_slice(data.as_slice()); }, TransportCommand::DrainWriter(_, tx) => { assert!(drain_tx.is_none()); if write_buf.is_empty() { tx.send(()).ok(); } else { drain_tx = Some(tx); } }, TransportCommand::CloseConnection(_, half_close) => { self.stream.flush().await.ok(); // supposedly this is a no-op on unix sockets. self.stream.shutdown().await.ok(); if !half_close { break; } } } }, } } Ok(()) } } mitmproxy_rs-0.12.8/src/packet_sources/mod.rs000077500000000000000000000126571511036467100213260ustar00rootroot00000000000000use crate::intercept_conf::InterceptConf; use crate::ipc::PacketWithMeta; use crate::messages::{ NetworkCommand, NetworkEvent, SmolPacket, TransportCommand, TransportEvent, TunnelInfo, }; use crate::network::add_network_layer; use crate::{ipc, shutdown, MAX_PACKET_SIZE}; use anyhow::{anyhow, Context, Result}; use prost::bytes::Bytes; use prost::Message; use std::future::Future; use tokio::io::{AsyncRead, AsyncReadExt, AsyncWrite, AsyncWriteExt}; use tokio::sync::mpsc; use tokio::sync::mpsc::{Sender, UnboundedReceiver}; #[cfg(target_os = "linux")] pub mod linux; #[cfg(target_os = "macos")] pub mod macos; #[cfg(target_os = "linux")] pub mod tun; pub mod udp; #[cfg(windows)] pub mod windows; pub mod wireguard; pub trait PacketSourceConf { type Task: PacketSourceTask + Send + 'static; type Data: Send + 'static; fn name(&self) -> &'static str; fn build( self, transport_events_tx: mpsc::Sender, transport_commands_rx: mpsc::UnboundedReceiver, shutdown: shutdown::Receiver, ) -> impl Future> + Send; } pub trait PacketSourceTask: Send { fn run(self) -> impl Future> + Send; } pub const IPC_BUF_SIZE: usize = MAX_PACKET_SIZE + 1024; /// Feed packets from a socket into smol, and the other way around. #[allow(dead_code)] async fn forward_packets( mut channel: T, transport_events_tx: Sender, transport_commands_rx: UnboundedReceiver, mut conf_rx: UnboundedReceiver, shutdown: shutdown::Receiver, ) -> Result<()> { let mut buf = Vec::with_capacity(IPC_BUF_SIZE); let (mut network_task_handle, net_tx, mut net_rx) = add_network_layer(transport_events_tx, transport_commands_rx, shutdown); loop { buf.clear(); tokio::select! { // Monitor the network task for errors or planned shutdown. // This way we implicitly monitor the shutdown channel. exit = &mut network_task_handle => break exit.context("network task panic")?.context("network task error")?, // pipe through changes to the intercept list Some(conf) = conf_rx.recv() => { let msg = ipc::FromProxy { message: Some(ipc::from_proxy::Message::InterceptConf(conf.into())), }; msg.encode(&mut buf)?; channel.write_all(&buf).await.context("failed to propagate interception config update")?; }, // read packets from the IPC pipe into our network stack. _ = channel.read_buf(&mut buf) => { if buf.is_empty() { // https://learn.microsoft.com/en-us/windows/win32/ipc/named-pipe-client // Because the client is reading from the pipe in message-read mode, it is // possible for the ReadFile operation to return zero after reading a partial // message. This happens when the message is larger than the read buffer. // // We don't support messages larger than the buffer, so this cannot happen. // Instead, empty reads indicate that the IPC client has disconnected. return Err(anyhow!("redirect daemon exited prematurely.")); } let Ok(PacketWithMeta { data, tunnel_info}) = PacketWithMeta::decode(buf.as_slice()) else { return Err(anyhow!("Received invalid IPC message from redirector: {:?}", &buf)); }; // TODO: Use Bytes in SmolPacket to avoid copy let data = data.to_vec(); let Ok(mut packet) = SmolPacket::try_from(data) else { log::error!("Skipping invalid packet: {:?}", &buf); continue; }; // debug!("Receiving packet: {:?}", &packet); // WinDivert packets do not have correct IP checksums yet, we need fix that here // otherwise smoltcp will be unhappy with us. packet.fill_ip_checksum(); let event = NetworkEvent::ReceivePacket { packet, tunnel_info: TunnelInfo::LocalRedirector { pid: tunnel_info.as_ref().and_then(|t| t.pid), process_name: tunnel_info.and_then(|t| t.process_name), remote_endpoint: None, }, }; if net_tx.try_send(event).is_err() { log::warn!("Dropping incoming packet, TCP channel is full.") }; }, // write packets from the network stack to the IPC pipe to be reinjected. Some(e) = net_rx.recv() => { match e { NetworkCommand::SendPacket(packet) => { let packet = ipc::FromProxy { message: Some(ipc::from_proxy::Message::Packet( ipc::Packet { data: Bytes::from(packet.into_inner()) }))}; packet.encode(&mut buf)?; // debug!("Sending packet: {} {:?}", buf.len(), &packet.message.as_ref().unwrap()); channel.write_all(&buf).await.context("failed to send packet")?; } } } } } log::info!("Redirector shutting down."); Ok(()) } mitmproxy_rs-0.12.8/src/packet_sources/tun.rs000066400000000000000000000202541511036467100213420ustar00rootroot00000000000000use crate::messages::{ NetworkCommand, NetworkEvent, SmolPacket, TransportCommand, TransportEvent, TunnelInfo, }; use crate::network::{add_network_layer, MAX_PACKET_SIZE}; use crate::packet_sources::{PacketSourceConf, PacketSourceTask}; use crate::shutdown; use anyhow::{Context, Result}; use std::cmp::max; use std::{fs, io::ErrorKind}; use tokio::sync::mpsc::Sender; use tokio::sync::mpsc::{Permit, Receiver, UnboundedReceiver}; use tun::AbstractDevice; pub struct TunConf { pub tun_name: Option, } impl PacketSourceConf for TunConf { type Task = TunTask; type Data = String; fn name(&self) -> &'static str { "TUN interface" } async fn build( self, transport_events_tx: Sender, transport_commands_rx: UnboundedReceiver, shutdown: shutdown::Receiver, ) -> Result<(Self::Task, Self::Data)> { let (device, tun_name) = create_tun_device(self.tun_name)?; let (network_task_handle, net_tx, net_rx) = add_network_layer(transport_events_tx, transport_commands_rx, shutdown); Ok(( TunTask { device, net_tx, net_rx, network_task_handle, }, tun_name, )) } } pub fn create_tun_device(tun_name: Option) -> Result<(tun::AsyncDevice, String)> { let mut config = tun::Configuration::default(); config.mtu(MAX_PACKET_SIZE as u16); // Setting a local address and a destination is required on Linux. config.address("169.254.0.1"); // config.netmask("0.0.0.0"); // config.destination("169.254.0.1"); config.up(); if let Some(tun_name) = &tun_name { config.tun_name(tun_name); } match tun::create_as_async(&config) { Ok(device) => { let tun_name = device.tun_name().context("Failed to get TUN name")?; configure_device(&tun_name); Ok((device, tun_name)) } Err(tun::Error::Io(e)) if e.kind() == ErrorKind::PermissionDenied => { // If we are instructed to create a tun device with a specific name, it is possible that the // user wants us to reuse an existing persistent tun interface. A persistent tun interface // is usually pre-configured, so that mitmproxy does not need to perform configuration, and // therefore does not need CAP_NET_ADMIN or sudo. // // The default `config` will set MTU and address etc which *do* require CAP_NET_ADMIN, which // will result in PermissionDenied in the non-privileged context. To deal with the case of // pre-configured persistent interface, we retry `create_as_async` without the MTU/address // settings. if let Some(tun_name) = tun_name { tun::create_as_async(tun::Configuration::default().tun_name(&tun_name)) .map(|d| (d, tun_name)) } else { Err(tun::Error::Io(e)) } } Err(e) => Err(e), } .context("Failed to create TUN device") } fn configure_device(tun_name: &str) { if let Err(e) = disable_rp_filter(tun_name) { log::error!("failed to set rp_filter: {e}"); } if let Err(e) = fs::write( format!("/proc/sys/net/ipv4/conf/{tun_name}/route_localnet"), "1", ) { log::error!("Failed to enable route_localnet: {e}"); } // Update accept_local so that injected packets with a local address (e.g. 127.0.0.1) // as source address are accepted. if let Err(e) = fs::write( format!("/proc/sys/net/ipv4/conf/{tun_name}/accept_local"), "1", ) { log::error!("Failed to enable accept_local: {e}"); } } pub struct TunTask { device: tun::AsyncDevice, net_tx: Sender, net_rx: Receiver, network_task_handle: tokio::task::JoinHandle>, } impl PacketSourceTask for TunTask { async fn run(mut self) -> Result<()> { let size = self.device.mtu()? as usize + tun::PACKET_INFORMATION_LENGTH; let mut buf = vec![0; size]; let mut packet_to_send = Vec::new(); let mut permit: Option> = None; // Required on macOS, but currently crashes on Linux with tokio. //let (mut writer, mut reader) = self.device.split().context("failed to split device")?; loop { tokio::select! { // Monitor the network task for errors or planned shutdown. // This way we implicitly monitor the shutdown channel. exit = &mut self.network_task_handle => break exit.context("network task panic")?.context("network task error")?, // wait for transport_events_tx channel capacity... Ok(p) = self.net_tx.reserve(), if permit.is_none() => { permit = Some(p); }, // ... or process incoming packets r = self.device.recv(buf.as_mut_slice()), if permit.is_some() => { let len = r.context("TUN read() failed")?; let Ok(packet) = SmolPacket::try_from(buf[..len].to_vec()) else { log::error!("Skipping invalid packet from tun interface: {:?}", &buf[..len]); continue; }; permit.take().unwrap().send(NetworkEvent::ReceivePacket { packet, tunnel_info: TunnelInfo::None, }); }, // send_to is cancel safe, so we can use that for backpressure. r = self.device.send(&packet_to_send), if !packet_to_send.is_empty() => { let sent = r.context("TUN write() failed")?; if sent != packet_to_send.len() { log::debug!("device.send: {} of {} bytes sent.", sent, packet_to_send.len()); } packet_to_send.clear(); }, Some(command) = self.net_rx.recv(), if packet_to_send.is_empty() => { match command { NetworkCommand::SendPacket(packet) => { packet_to_send = packet.into_inner(); } } } } } log::debug!("TUN interface task shutting down."); Ok(()) } } /// Disable reverse path filtering for our tun interface. /// This is necessary so that the kernel does not drop our injected packets. fn disable_rp_filter(tun_name: &str) -> Result<()> { fs::write(format!("/proc/sys/net/ipv4/conf/{tun_name}/rp_filter"), "0") .context("failed to disable rp_filter on the interface")?; // The max value from conf/{all,interface}/rp_filter is used // when doing source validation on the {interface}. // So we do a relatively elaborate dance where we upgrade all interfaces to max(all, if) // so that we can safely downgrade out interface. let all_rp_filter = fs::read_to_string("/proc/sys/net/ipv4/conf/all/rp_filter") .context("failed to read /proc/sys/net/ipv4/conf/all/rp_filter")?; if all_rp_filter == "0" { return Ok(()); } let paths = fs::read_dir("/proc/sys/net/ipv4/conf") .context("failed to read /proc/sys/net/ipv4/conf")?; for dir_entry in paths { let mut path = dir_entry .context("failed to iterate /proc/sys/net/ipv4/conf")? .path(); if path.ends_with(tun_name) { continue; } path.push("rp_filter"); let interface_rp_filter = fs::read_to_string(&path).unwrap_or_default(); let combined = max(&all_rp_filter, &interface_rp_filter); if *combined != interface_rp_filter { fs::write(&path, combined) .with_context(|| format!("failed to set {}", path.display()))?; } } // We've successfully upgraded all individual interfaces, so we can now downgrade `all`. fs::write("/proc/sys/net/ipv4/conf/all/rp_filter", "0") .context("failed to disable /proc/sys/net/ipv4/conf/all/rp_filter")?; log::debug!("Successfully updated rp_filter."); Ok(()) } mitmproxy_rs-0.12.8/src/packet_sources/udp.rs000066400000000000000000000127161511036467100213300ustar00rootroot00000000000000use std::net::{Ipv4Addr, SocketAddr}; use anyhow::{Context, Result}; use crate::messages::{TransportCommand, TransportEvent, TunnelInfo}; use crate::network::udp::{UdpHandler, UdpPacket}; use crate::network::MAX_PACKET_SIZE; use crate::packet_sources::{PacketSourceConf, PacketSourceTask}; use crate::shutdown; use socket2::{Domain, Protocol, Socket, Type}; use tokio::net::UdpSocket; use tokio::sync::mpsc::{Permit, Sender, UnboundedReceiver}; pub fn remote_host_closed_conn(_res: &Result) -> bool { #[cfg(windows)] if let Err(e) = _res { // Workaround for https://stackoverflow.com/a/73792103: // We get random errors here on Windows if a previous send() failed. const REMOTE_HOST_CLOSED_CONN_ERR: i32 = 10054; return matches!(e.raw_os_error(), Some(REMOTE_HOST_CLOSED_CONN_ERR)); } false } /// Creates a nonblocking UDP socket bound to the specified address, restricted to either IPv4 or IPv6 only. pub(crate) fn create_and_bind_udp_socket(addr: SocketAddr) -> Result { let domain = if addr.is_ipv4() { Domain::IPV4 } else { Domain::IPV6 }; // We use socket2::Socket to set IPV6_V6ONLY and convert back to std::net::UdpSocket let sock2 = Socket::new(domain, Type::DGRAM, Some(Protocol::UDP))?; // Ensure that IPv6 sockets listen on IPv6 only if addr.is_ipv6() { sock2 .set_only_v6(true) .context("Failed to set IPV6_V6ONLY flag")?; } sock2 .bind(&addr.into()) .context(format!("Failed to bind UDP socket to {addr}"))?; let std_sock: std::net::UdpSocket = sock2.into(); std_sock .set_nonblocking(true) .context("Failed to make UDP socket non-blocking")?; let socket = UdpSocket::from_std(std_sock)?; Ok(socket) } pub struct UdpConf { pub listen_addr: SocketAddr, } impl PacketSourceConf for UdpConf { type Task = UdpTask; type Data = SocketAddr; fn name(&self) -> &'static str { "UDP server" } async fn build( self, transport_events_tx: Sender, transport_commands_rx: UnboundedReceiver, shutdown: shutdown::Receiver, ) -> Result<(Self::Task, Self::Data)> { let socket = create_and_bind_udp_socket(self.listen_addr)?; let local_addr: SocketAddr = socket.local_addr()?; log::debug!("UDP server listening on {local_addr} ..."); Ok(( UdpTask { socket, local_addr, handler: UdpHandler::new(), transport_events_tx, transport_commands_rx, shutdown, }, local_addr, )) } } pub struct UdpTask { socket: UdpSocket, local_addr: SocketAddr, handler: UdpHandler, transport_events_tx: Sender, transport_commands_rx: UnboundedReceiver, shutdown: shutdown::Receiver, } impl PacketSourceTask for UdpTask { async fn run(mut self) -> Result<()> { let transport_events_tx = self.transport_events_tx.clone(); let mut udp_buf = vec![0; MAX_PACKET_SIZE]; let mut packet_needs_sending = false; let mut packet_payload = Vec::new(); let mut packet_dst = SocketAddr::from((Ipv4Addr::UNSPECIFIED, 0)); let mut permit: Option> = None; loop { let py_tx_available = permit.is_some(); tokio::select! { // wait for graceful shutdown _ = self.shutdown.recv() => break, // wait for transport_events_tx channel capacity... Ok(p) = transport_events_tx.reserve(), if !py_tx_available => { permit = Some(p); }, // ... or process incoming packets r = self.socket.recv_from(udp_buf.as_mut_slice()), if py_tx_available => { if remote_host_closed_conn(&r) { continue; } let (len, src_addr) = r.context("UDP recv() failed")?; self.handler.receive_data( UdpPacket { src_addr, dst_addr: self.local_addr, payload: udp_buf[..len].to_vec(), }, TunnelInfo::None {}, permit.take().unwrap() ); }, // send_to is cancel safe, so we can use that for backpressure. r = self.socket.send_to(&packet_payload, packet_dst), if packet_needs_sending => { let sent = r.context("UDP send_to() failed")?; if sent != packet_payload.len() { log::debug!("socket.send_to: {} of {} bytes sent.", sent, packet_payload.len()); } packet_needs_sending = false; }, Some(command) = self.transport_commands_rx.recv(), if !packet_needs_sending => { if let Some(UdpPacket { payload, dst_addr, .. }) = self.handler.handle_transport_command(command) { packet_payload = payload; packet_dst = dst_addr; packet_needs_sending = true; } } } } log::debug!("UDP server task shutting down."); Ok(()) } } mitmproxy_rs-0.12.8/src/packet_sources/windows.rs000077500000000000000000000077741511036467100222450ustar00rootroot00000000000000use std::iter; use std::os::windows::ffi::OsStrExt; use std::path::PathBuf; use anyhow::{anyhow, Result}; use tokio::net::windows::named_pipe::{NamedPipeServer, PipeMode, ServerOptions}; use tokio::sync::mpsc::Sender; use tokio::sync::mpsc::{unbounded_channel, UnboundedReceiver, UnboundedSender}; use windows::core::w; use windows::core::PCWSTR; use windows::Win32::UI::Shell::ShellExecuteW; use windows::Win32::UI::Shell::SE_ERR_ACCESSDENIED; use windows::Win32::UI::WindowsAndMessaging::{SW_HIDE, SW_SHOWNORMAL}; use crate::intercept_conf::InterceptConf; use crate::messages::{TransportCommand, TransportEvent}; use crate::packet_sources::{forward_packets, PacketSourceConf, PacketSourceTask, IPC_BUF_SIZE}; use crate::shutdown; pub struct WindowsConf { pub executable_path: PathBuf, } impl PacketSourceConf for WindowsConf { type Task = WindowsTask; type Data = UnboundedSender; fn name(&self) -> &'static str { "Windows proxy" } async fn build( self, transport_events_tx: Sender, transport_commands_rx: UnboundedReceiver, shutdown: shutdown::Receiver, ) -> Result<(Self::Task, Self::Data)> { let pipe_name = format!( r"\\.\pipe\mitmproxy-transparent-proxy-{}", std::process::id() ); let ipc_server = ServerOptions::new() .pipe_mode(PipeMode::Message) .first_pipe_instance(true) .max_instances(1) .in_buffer_size(IPC_BUF_SIZE as u32) .out_buffer_size(IPC_BUF_SIZE as u32) .reject_remote_clients(true) .create(&pipe_name)?; log::debug!("starting {} {}", self.executable_path.display(), pipe_name); let pipe_name = pipe_name .encode_utf16() .chain(iter::once(0)) .collect::>(); let executable_path = self .executable_path .as_os_str() .encode_wide() .chain(iter::once(0)) .collect::>(); let result = unsafe { ShellExecuteW( None, w!("runas"), PCWSTR::from_raw(executable_path.as_ptr()), PCWSTR::from_raw(pipe_name.as_ptr()), None, if cfg!(debug_assertions) { SW_SHOWNORMAL } else { SW_HIDE }, ) }; if cfg!(debug_assertions) { if result.0 as u32 <= 32 { let err = windows::core::Error::from_win32(); log::warn!("Failed to start child process: {}", err); } } else if result.0 as u32 == SE_ERR_ACCESSDENIED { return Err(anyhow!( "Failed to start the interception process as administrator." )); } else if result.0 as u32 <= 32 { let err = windows::core::Error::from_win32(); return Err(anyhow!("Failed to start the executable: {}", err)); } let (conf_tx, conf_rx) = unbounded_channel(); Ok(( WindowsTask { ipc_server, transport_events_tx, transport_commands_rx, conf_rx, shutdown, }, conf_tx, )) } } pub struct WindowsTask { ipc_server: NamedPipeServer, transport_events_tx: Sender, transport_commands_rx: UnboundedReceiver, conf_rx: UnboundedReceiver, shutdown: shutdown::Receiver, } impl PacketSourceTask for WindowsTask { async fn run(self) -> Result<()> { log::debug!("Waiting for IPC connection..."); self.ipc_server.connect().await?; log::debug!("IPC connected!"); forward_packets( self.ipc_server, self.transport_events_tx, self.transport_commands_rx, self.conf_rx, self.shutdown, ) .await } } mitmproxy_rs-0.12.8/src/packet_sources/wireguard.rs000077500000000000000000000324161511036467100225330ustar00rootroot00000000000000use std::collections::HashMap; use std::net::{IpAddr, SocketAddr}; use std::sync::Arc; use crate::messages::{ NetworkCommand, NetworkEvent, SmolPacket, TransportCommand, TransportEvent, TunnelInfo, }; use crate::network::{add_network_layer, MAX_PACKET_SIZE}; use crate::packet_sources::{PacketSourceConf, PacketSourceTask}; use anyhow::{anyhow, Context, Result}; use boringtun::noise::{ errors::WireGuardError, handshake::parse_handshake_anon, Packet, Tunn, TunnResult, }; use boringtun::x25519::{PublicKey, StaticSecret}; use pretty_hex::pretty_hex; use smoltcp::wire::{Ipv4Packet, Ipv6Packet}; use tokio::sync::mpsc::UnboundedReceiver; use tokio::{ net::UdpSocket, sync::{ mpsc::{Receiver, Sender}, Mutex, }, }; use crate::packet_sources::udp::{create_and_bind_udp_socket, remote_host_closed_conn}; use crate::shutdown; // WireGuard headers are 60 bytes for IPv4 and 80 bytes for IPv6 const WG_HEADER_SIZE: usize = 80; /// A WireGuard peer. We keep track of the tunnel state and the peer address. pub struct WireGuardPeer { tunnel: Tunn, endpoint: Option, } pub struct WireGuardConf { pub listen_addr: SocketAddr, pub private_key: StaticSecret, pub peer_public_keys: Vec, } impl PacketSourceConf for WireGuardConf { type Task = WireGuardTask; type Data = SocketAddr; fn name(&self) -> &'static str { "WireGuard server" } async fn build( self, transport_events_tx: Sender, transport_commands_rx: UnboundedReceiver, shutdown: shutdown::Receiver, ) -> Result<(Self::Task, Self::Data)> { let (network_task_handle, net_tx, net_rx) = add_network_layer(transport_events_tx, transport_commands_rx, shutdown); // initialize WireGuard server let mut peers_by_idx = HashMap::new(); let mut peers_by_key = HashMap::new(); for public_key in self.peer_public_keys { let index = peers_by_idx.len() as u32; let tunnel = Tunn::new( self.private_key.clone(), public_key, None, Some(25), index, None, ); let peer = Arc::new(Mutex::new(WireGuardPeer { tunnel, endpoint: None, })); peers_by_idx.insert(index, peer.clone()); peers_by_key.insert(public_key, peer); } let socket = create_and_bind_udp_socket(self.listen_addr)?; let local_addr = socket.local_addr()?; log::debug!("WireGuard server listening for UDP connections on {local_addr} ..."); let public_key = PublicKey::from(&self.private_key); Ok(( WireGuardTask { socket, private_key: self.private_key, public_key, peers_by_idx, peers_by_key, peers_by_ip: HashMap::new(), wg_buf: vec![0u8; MAX_PACKET_SIZE], net_tx, net_rx, network_task_handle, }, local_addr, )) } } pub struct WireGuardTask { socket: UdpSocket, private_key: StaticSecret, public_key: PublicKey, peers_by_idx: HashMap>>, peers_by_key: HashMap>>, peers_by_ip: HashMap>>, net_tx: Sender, net_rx: Receiver, wg_buf: Vec, network_task_handle: tokio::task::JoinHandle>, } impl PacketSourceTask for WireGuardTask { async fn run(mut self) -> Result<()> { if self.peers_by_idx.is_empty() { return Err(anyhow!("No WireGuard peers were configured.")); } let mut udp_buf = vec![0; MAX_PACKET_SIZE]; loop { tokio::select! { exit = &mut self.network_task_handle => break exit.context("network task panic")?.context("network task error")?, // wait for WireGuard packets incoming on the UDP socket r = self.socket.recv_from(udp_buf.as_mut_slice()) => { if remote_host_closed_conn(&r) { continue; } let (len, src_orig) = r.context("UDP recv() failed")?; self.process_incoming_datagram(&udp_buf[..len], src_orig).await?; }, // wait for outgoing IP packets Some(e) = self.net_rx.recv() => { match e { NetworkCommand::SendPacket(packet) => { self.process_outgoing_packet(packet).await?; } } } } } // flush outgoing packet queue before shutdown while let Some(e) = self.net_rx.recv().await { match e { NetworkCommand::SendPacket(packet) => { self.process_outgoing_packet(packet).await?; } } } log::debug!("WireGuard server task shutting down."); Ok(()) } } impl WireGuardTask { fn find_peer_for_datagram(&self, data: &[u8]) -> Option>> { let packet = match Tunn::parse_incoming_packet(data) { Ok(p) => p, Err(error) => { log::error!("Received invalid WireGuard packet: {error:?}"); return None; } }; let peer = match packet { Packet::HandshakeInit(p) => { let parsed = parse_handshake_anon(&self.private_key, &self.public_key, &p); let handshake = match parsed { Ok(hs) => hs, Err(error) => { log::info!("Failed to process a WireGuard handshake packet: {error:?}"); return None; } }; let peer_public_key = PublicKey::from(handshake.peer_static_public); self.peers_by_key.get(&peer_public_key) } Packet::HandshakeResponse(p) => self.peers_by_idx.get(&(p.receiver_idx >> 8)), Packet::PacketCookieReply(p) => self.peers_by_idx.get(&(p.receiver_idx >> 8)), Packet::PacketData(p) => self.peers_by_idx.get(&(p.receiver_idx >> 8)), }; if let Some(p) = peer { Some(p.clone()) } else { log::error!("Received WireGuard packet from unknown peer."); None } } /// process WireGuard datagrams and forward the decrypted packets. async fn process_incoming_datagram( &mut self, data: &[u8], sender_addr: SocketAddr, ) -> Result<()> { let peer = match self.find_peer_for_datagram(data) { Some(p) => p, None => return Ok(()), }; let mut result = { let mut peer = peer.lock().await; peer.endpoint = Some(sender_addr); peer.tunnel .decapsulate(Some(sender_addr.ip()), data, &mut self.wg_buf) }; while let TunnResult::WriteToNetwork(b) = result { log::trace!("WG::process_incoming_datagram: WriteToNetwork"); self.socket.send_to(b, sender_addr).await?; // check if there are more things to be handled result = peer .lock() .await .tunnel .decapsulate(None, &[0; 0], &mut self.wg_buf); } match result { TunnResult::Done => { log::trace!("WG::process_incoming_datagram: Done"); } TunnResult::Err(error) => { if matches!(error, WireGuardError::NoCurrentSession) { log::info!( "No current session for incoming WireGuard packet: \ Wait for the next session handshake or reconnect your client." ); } else { log::debug!("WG::process_incoming_datagram: Err: {error:?}"); } } TunnResult::WriteToTunnelV4(buf, src_addr) => { match Ipv4Packet::new_checked(buf.to_vec()) { Ok(packet) => { log::trace!( "WG::process_incoming_datagram: WriteToTunnelV4 src_addr: {}, dst_addr: {}, origin: {} {}", packet.src_addr(), packet.dst_addr(), src_addr, pretty_hex(&buf), ); self.peers_by_ip.insert(packet.src_addr().into(), peer); let event = NetworkEvent::ReceivePacket { packet: SmolPacket::from(packet), tunnel_info: TunnelInfo::WireGuard { src_addr: sender_addr, dst_addr: self.socket.local_addr()?, }, }; if self.net_tx.try_send(event).is_err() { log::warn!("Dropping incoming packet, TCP channel is full.") }; } Err(error) => { log::warn!("Invalid IPv4 packet: {error}"); } } } TunnResult::WriteToTunnelV6(buf, src_addr) => { match Ipv6Packet::new_checked(buf.to_vec()) { Ok(packet) => { log::trace!( "WG::process_incoming_datagram: WriteToTunnelV6 src_addr: {}, dst_addr: {}, origin: {} {}", packet.src_addr(), packet.dst_addr(), src_addr, pretty_hex(&buf), ); self.peers_by_ip.insert(packet.src_addr().into(), peer); let event = NetworkEvent::ReceivePacket { packet: SmolPacket::from(packet), tunnel_info: TunnelInfo::WireGuard { src_addr: sender_addr, dst_addr: self.socket.local_addr()?, }, }; if self.net_tx.try_send(event).is_err() { log::warn!("Dropping incoming packet, TCP channel is full.") }; } Err(error) => { log::warn!("Invalid IPv6 packet: {error}"); } } } TunnResult::WriteToNetwork(_) => unreachable!(), } Ok(()) } /// process packets and send the encrypted WireGuard datagrams to the peer. async fn process_outgoing_packet(&mut self, packet: SmolPacket) -> Result<()> { let peer = self .peers_by_ip .get(&packet.dst_ip()) .or_else(|| { log::warn!( "No peer found for IP {}, falling back to first peer.", packet.dst_ip() ); self.peers_by_idx.values().next() }) .unwrap(); let src_ip = packet.src_ip(); let dst_ip = packet.dst_ip(); let packet_bytes = packet.into_inner(); // Tunn.encapsulate panics if the packet is too big for the buffer if packet_bytes.len() > MAX_PACKET_SIZE - WG_HEADER_SIZE { log::error!( "Unable to send packet ({} -> {}), payload too large ({} bytes > {}).", src_ip, dst_ip, packet_bytes.len(), MAX_PACKET_SIZE - WG_HEADER_SIZE, ); return Ok(()); } let mut peer = peer.lock().await; match peer.tunnel.encapsulate(&packet_bytes, &mut self.wg_buf) { TunnResult::Done => { log::trace!("WG::process_outgoing_packet: Done"); } TunnResult::Err(error) => { log::error!("WG::process_outgoing_packet: Err: {error:?}"); } TunnResult::WriteToNetwork(buf) => { let dst_addr = peer.endpoint.unwrap(); drop(peer); log::trace!( "WG::process_outgoing_packet: WriteToNetwork src_ip: {}, dst_ip: {}, dst_addr: {} {}", src_ip, dst_ip, dst_addr, pretty_hex(&buf), ); self.socket.send_to(buf, dst_addr).await?; } // IPv4 packet TunnResult::WriteToTunnelV4(_, _) => { log::warn!("WG::process_outgoing_packet: WriteToTunnelV4: unexpected event"); } // IPv6 packet TunnResult::WriteToTunnelV6(_, _) => { log::warn!("WG::process_outgoing_packet: WriteToTunnelV6: unexpected event"); } } Ok(()) } } mitmproxy_rs-0.12.8/src/processes/000077500000000000000000000000001511036467100171575ustar00rootroot00000000000000mitmproxy_rs-0.12.8/src/processes/macos_icons.rs000066400000000000000000000100361511036467100220220ustar00rootroot00000000000000use anyhow::{bail, Result}; use cocoa::base::id; use objc::{class, msg_send, sel, sel_impl}; use std::collections::hash_map::DefaultHasher; use std::collections::hash_map::Entry; use std::collections::HashMap; use std::hash::{Hash, Hasher}; use std::io::Cursor; use std::path::Path; use std::path::PathBuf; use sysinfo::{ProcessRefreshKind, ProcessesToUpdate, System, UpdateKind}; #[derive(Default)] pub struct IconCache { /// executable name -> icon hash executables: HashMap, /// icon hash -> png bytes icons: HashMap>, } impl IconCache { pub fn get_png(&mut self, executable: PathBuf) -> Result<&Vec> { match self.executables.entry(executable) { Entry::Occupied(e) => { // Guaranteed to exist because we never clear the cache. Ok(self.icons.get(e.get()).unwrap()) } Entry::Vacant(e) => { let tiff = tiff_data_for_executable(e.key())?; let mut hasher = DefaultHasher::new(); tiff.hash(&mut hasher); let tiff_hash = hasher.finish(); let icon = match self.icons.entry(tiff_hash) { Entry::Occupied(e) => e.into_mut(), Entry::Vacant(e) => { let png = tiff_to_png(&tiff)?; e.insert(png) } }; e.insert(tiff_hash); Ok(icon) } } } } pub fn tiff_to_png(tiff: &[u8]) -> Result> { let mut c = Cursor::new(Vec::new()); let tiff_image = image::load_from_memory_with_format(tiff, image::ImageFormat::Tiff)?.resize( 32, 32, image::imageops::FilterType::Triangle, ); tiff_image.write_to(&mut c, image::ImageFormat::Png)?; Ok(c.into_inner()) } pub fn tiff_data_for_executable(executable: &Path) -> Result> { let mut sys = System::new(); sys.refresh_processes_specifics( ProcessesToUpdate::All, true, ProcessRefreshKind::nothing().with_exe(UpdateKind::OnlyIfNotSet), ); for (pid, process) in sys.processes() { // process.exe() will return empty path if there was an error while trying to read /proc//exe. if let Some(path) = process.exe() { if executable == path.to_path_buf() { let pid = pid.as_u32(); unsafe { #[allow(unexpected_cfgs)] let app: id = msg_send![ class!(NSRunningApplication), runningApplicationWithProcessIdentifier: pid ]; if !app.is_null() { #[allow(unexpected_cfgs)] let img: id = msg_send![app, icon]; #[allow(unexpected_cfgs)] let tiff: id = msg_send![img, TIFFRepresentation]; #[allow(unexpected_cfgs)] let length: usize = msg_send![tiff, length]; #[allow(unexpected_cfgs)] let bytes: *const u8 = msg_send![tiff, bytes]; let data = std::slice::from_raw_parts(bytes, length).to_vec(); return Ok(data); } } } } } bail!("unable to extract icon"); } #[cfg(test)] mod tests { use super::*; use data_encoding::BASE64; #[test] fn png() { let path = PathBuf::from("/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder"); let mut icon_cache = IconCache::default(); let vec = icon_cache.get_png(path).unwrap(); assert!(!vec.is_empty()); dbg!(vec.len()); let base64_png = BASE64.encode(vec); dbg!(base64_png); } #[ignore] #[test] fn memory_leak() { let path = PathBuf::from("/System/Library/CoreServices/Finder.app/Contents/MacOS/Finder"); for _ in 0..500 { _ = &tiff_data_for_executable(&path); } } } mitmproxy_rs-0.12.8/src/processes/mod.rs000066400000000000000000000027541511036467100203140ustar00rootroot00000000000000pub use image; use std::path::PathBuf; #[cfg(any(target_os = "linux", target_os = "macos"))] mod nix_list; #[cfg(any(target_os = "linux", target_os = "macos"))] pub use self::nix_list::active_executables; #[cfg(windows)] mod windows_list; #[cfg(windows)] pub use self::windows_list::active_executables; #[cfg(windows)] pub use self::windows_list::get_process_name; #[cfg(target_os = "macos")] mod macos_icons; #[cfg(target_os = "macos")] use self::macos_icons::IconCache; #[cfg(windows)] mod windows_icons; #[cfg(windows)] use self::windows_icons::IconCache; #[derive(Debug, Clone)] pub struct ProcessInfo { pub executable: PathBuf, pub display_name: String, pub is_visible: bool, pub is_system: bool, } pub type ProcessList = Vec; #[cfg(any(windows, target_os = "macos"))] pub static ICON_CACHE: std::sync::LazyLock> = std::sync::LazyLock::new(|| std::sync::Mutex::new(IconCache::default())); pub mod bench { #[cfg(target_os = "macos")] pub use super::nix_list::visible_windows; #[cfg(windows)] pub use super::windows_list::visible_windows; #[cfg(target_os = "macos")] pub use super::macos_icons::IconCache; #[cfg(windows)] pub use super::windows_icons::IconCache; #[cfg(target_os = "macos")] pub use super::macos_icons::{tiff_data_for_executable, tiff_to_png}; #[cfg(windows)] pub use super::windows_list::{ enumerate_pids, get_display_name, get_is_critical, get_process_name, }; } mitmproxy_rs-0.12.8/src/processes/nix_list.rs000066400000000000000000000125461511036467100213660ustar00rootroot00000000000000use crate::intercept_conf::PID; use crate::processes::{ProcessInfo, ProcessList}; use anyhow::Result; use std::collections::hash_map::Entry; use std::collections::{HashMap, HashSet}; use std::path::PathBuf; use sysinfo::{Process, ProcessRefreshKind, ProcessesToUpdate, System, UpdateKind}; #[cfg(target_os = "linux")] use std::ops::Deref; #[cfg(target_os = "macos")] use macos_visible_windows::macos_visible_windows; pub fn active_executables() -> Result { let mut executables: HashMap = HashMap::new(); let visible = visible_windows()?; let mut sys = System::new(); sys.refresh_processes_specifics( ProcessesToUpdate::All, true, ProcessRefreshKind::nothing() .with_exe(UpdateKind::OnlyIfNotSet) .with_user(UpdateKind::OnlyIfNotSet), ); for (pid, process) in sys.processes() { // process.exe() will return empty path if there was an error while trying to read /proc//exe. if let Some(path) = process.exe() { let pid = pid.as_u32(); let executable = path.to_path_buf(); match executables.entry(executable) { Entry::Occupied(mut e) => { let process_info = e.get(); if !process_info.is_visible && visible.contains(&pid) { e.get_mut().is_visible = true; } } Entry::Vacant(e) => { let executable = e.key().clone(); // .file_name() returns `None` if the path terminates in `..` // We use the absolute path in such a case. let display_name = path .file_name() .unwrap_or(path.as_os_str()) .to_string_lossy() .to_string(); let is_system = is_system(process); let is_visible = visible.contains(&pid); e.insert(ProcessInfo { executable, display_name, is_visible, is_system, }); } } } } Ok(executables.into_values().collect()) } pub fn visible_windows() -> Result> { #[cfg(target_os = "macos")] return macos_visible_windows(); #[cfg(target_os = "linux")] // Finding visible windows is less useful on Linux, where more applications tend to be CLI-based. // So we skip all the X11/Wayland complexity. return Ok(HashSet::new()); } fn is_system(process: &Process) -> bool { #[cfg(target_os = "macos")] return process .exe() .map(|path| path.starts_with("/System/")) .unwrap_or(false); #[cfg(target_os = "linux")] return process .user_id() .map(|uid| *uid.deref() < 1000) .unwrap_or(false); } #[cfg(target_os = "macos")] mod macos_visible_windows { use crate::intercept_conf::PID; use anyhow::Result; use cocoa::base::nil; use cocoa::foundation::NSString; use core_foundation::number::{kCFNumberSInt32Type, CFNumberGetValue, CFNumberRef}; use core_graphics::display::{ CFArrayGetCount, CFArrayGetValueAtIndex, CFDictionaryGetValueIfPresent, CFDictionaryRef, CGWindowListCopyWindowInfo, }; use core_graphics::window::{ kCGNullWindowID, kCGWindowListExcludeDesktopElements, kCGWindowListOptionOnScreenOnly, }; use std::collections::HashSet; use std::ffi::c_void; pub fn macos_visible_windows() -> Result> { let mut pids: HashSet = HashSet::new(); unsafe { let windows_info_list = CGWindowListCopyWindowInfo( kCGWindowListOptionOnScreenOnly + kCGWindowListExcludeDesktopElements, kCGNullWindowID, ); let count = CFArrayGetCount(windows_info_list); for i in 0..count - 1 { let dic_ref = CFArrayGetValueAtIndex(windows_info_list, i); let key = NSString::alloc(nil).init_str("kCGWindowOwnerPID"); let mut pid: *const c_void = std::ptr::null_mut(); if CFDictionaryGetValueIfPresent( dic_ref as CFDictionaryRef, key as *const c_void, &mut pid, ) != 0 { let pid_cf_ref = pid as CFNumberRef; let mut pid: i32 = 0; if CFNumberGetValue( pid_cf_ref, kCFNumberSInt32Type, &mut pid as *mut i32 as *mut c_void, ) { pids.insert(pid as u32); } } } Ok(pids) } } } #[cfg(test)] mod tests { use super::*; #[test] fn process_list() { let lst = active_executables().unwrap(); assert!(!lst.is_empty()); for proc in &lst { if !proc.is_visible { dbg!(&proc.display_name); } } dbg!(lst.len()); } #[cfg(target_os = "macos")] #[test] fn visible_windows_list() { let open_windows_pids = visible_windows().unwrap(); assert!(!open_windows_pids.is_empty()); dbg!(open_windows_pids.len()); } } mitmproxy_rs-0.12.8/src/processes/windows_icons.rs000066400000000000000000000134401511036467100224140ustar00rootroot00000000000000use std::collections::hash_map::{DefaultHasher, Entry}; use std::collections::HashMap; use std::hash::{Hash, Hasher}; use std::io::Cursor; use std::mem::MaybeUninit; use std::os::windows::prelude::OsStrExt; use std::path::{Path, PathBuf}; use std::ptr::addr_of_mut; use std::{iter, mem}; use anyhow::{bail, Result}; use image::RgbaImage; use windows::Win32::Foundation::HMODULE; use windows::Win32::Graphics::Gdi::{ DeleteObject, GetDC, GetDIBits, GetObjectW, ReleaseDC, BITMAP, BITMAPINFOHEADER, BI_RGB, DIB_RGB_COLORS, HDC, }; use windows::Win32::System::LibraryLoader::GetModuleHandleW; use windows::Win32::UI::Shell::ExtractAssociatedIconW; use windows::Win32::UI::WindowsAndMessaging::{DestroyIcon, GetIconInfo, HICON}; #[derive(Default)] pub struct IconCache { /// executable name -> icon hash executables: HashMap, /// icon hash -> png bytes icons: HashMap>, } impl IconCache { pub fn get_png(&mut self, executable: PathBuf) -> Result<&Vec> { match self.executables.entry(executable) { Entry::Occupied(e) => { // Guaranteed to exist because we never clear the cache. Ok(self.icons.get(e.get()).unwrap()) } Entry::Vacant(e) => { if !e.key().exists() { // ExtractAssociatedIconW always returns a placeholder icon for invalid paths. // We want unknown paths to raise on all platforms. bail!("Executable does not exist."); } let pixels = unsafe { let hinst = GetModuleHandleW(None)?; icon_for_executable(e.key(), hinst)? }; let pixel_hash = pixels.hash(); e.insert(pixel_hash); let icon = self.icons.entry(pixel_hash).or_insert_with(|| { let mut c = Cursor::new(Vec::new()); pixels .to_image() .write_to(&mut c, image::ImageFormat::Png) .unwrap(); c.into_inner() }); Ok(icon) } } } } struct PixelData { bgra: Vec, width: u32, height: u32, } impl PixelData { fn to_image(&self) -> RgbaImage { RgbaImage::from_fn(self.width, self.height, |x, y| { let idx = y * self.width + x; let [b, g, r, a] = self.bgra[idx as usize].to_le_bytes(); [r, g, b, a].into() }) } fn hash(&self) -> u64 { let mut hasher = DefaultHasher::new(); self.bgra.hash(&mut hasher); hasher.finish() } } unsafe fn icon_for_executable(executable: &Path, hinst: HMODULE) -> Result { let mut icon_path_u16: [u16; 128] = executable .as_os_str() .encode_wide() .chain(iter::repeat(0)) .take(128) .collect::>() .try_into() .unwrap(); let mut icon_idx = 0; let icon = ExtractAssociatedIconW( Some(hinst.into()), &mut icon_path_u16, // XXX: [u16; 128] is weird. &mut icon_idx, ); if icon.is_invalid() { bail!("unable to extract icon"); } let pixels = icon_to_pixels(icon); DestroyIcon(icon)?; Ok(pixels) } /// adapted from https://users.rust-lang.org/t/how-to-convert-hicon-to-png/90975/10 unsafe fn icon_to_pixels(icon: HICON) -> PixelData { let bitmap_size_i32 = i32::try_from(mem::size_of::()).unwrap(); let biheader_size_u32 = u32::try_from(mem::size_of::()).unwrap(); let mut info = MaybeUninit::uninit(); GetIconInfo(icon, info.as_mut_ptr()).unwrap(); let info = info.assume_init_ref(); DeleteObject(info.hbmMask.into()).unwrap(); let mut bitmap: MaybeUninit = MaybeUninit::uninit(); let result = GetObjectW( info.hbmColor.into(), bitmap_size_i32, Some(bitmap.as_mut_ptr().cast()), ); assert!(result == bitmap_size_i32); let bitmap = bitmap.assume_init_ref(); let width_u32 = u32::try_from(bitmap.bmWidth).unwrap(); let height_u32 = u32::try_from(bitmap.bmHeight).unwrap(); let width_usize = usize::try_from(bitmap.bmWidth).unwrap(); let height_usize = usize::try_from(bitmap.bmHeight).unwrap(); let buf_size = width_usize.checked_mul(height_usize).unwrap(); let mut buf: Vec = Vec::with_capacity(buf_size); let dc = GetDC(None); assert!(dc != HDC(std::ptr::null_mut())); let mut bitmap_info = BITMAPINFOHEADER { biSize: biheader_size_u32, biWidth: bitmap.bmWidth, biHeight: -bitmap.bmHeight, biPlanes: 1, biBitCount: 32, biCompression: BI_RGB.0, biSizeImage: 0, biXPelsPerMeter: 0, biYPelsPerMeter: 0, biClrUsed: 0, biClrImportant: 0, }; let result = GetDIBits( dc, info.hbmColor, 0, height_u32, Some(buf.as_mut_ptr().cast()), addr_of_mut!(bitmap_info).cast(), DIB_RGB_COLORS, ); assert!(result == bitmap.bmHeight); buf.set_len(buf.capacity()); let result = ReleaseDC(None, dc); assert!(result == 1); DeleteObject(info.hbmColor.into()).unwrap(); PixelData { bgra: buf, width: width_u32, height: height_u32, } } #[cfg(test)] mod tests { use super::*; #[test] fn png() { let path = PathBuf::from("C:\\Windows\\System32\\calc.exe"); let mut icon_cache = IconCache::default(); let vec = icon_cache.get_png(path).unwrap(); assert!(!vec.is_empty()); } #[test] fn no_icon_found() { let path = PathBuf::from("invalid path"); let mut icon_cache = IconCache::default(); assert!(icon_cache.get_png(path).is_err()); } } mitmproxy_rs-0.12.8/src/processes/windows_list.rs000066400000000000000000000251431511036467100222570ustar00rootroot00000000000000use std::collections::hash_map::Entry; use std::collections::{HashMap, HashSet}; use std::ffi::OsString; use std::iter; use std::mem::size_of; use std::os::windows::prelude::{OsStrExt, OsStringExt}; use std::path::{Path, PathBuf}; use std::sync::{LazyLock, Mutex}; use anyhow::{anyhow, Result}; use windows::core::w; use windows::core::{BOOL, PCWSTR, PWSTR}; use windows::Win32::Foundation::{CloseHandle, HANDLE, HWND, LPARAM, MAX_PATH}; use windows::Win32::Graphics::Dwm::{DwmGetWindowAttribute, DWMWA_CLOAKED}; use windows::Win32::Storage::FileSystem::{ GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueW, }; use windows::Win32::System::ProcessStatus::EnumProcesses; use windows::Win32::System::Threading::{ IsProcessCritical, OpenProcess, QueryFullProcessImageNameW, PROCESS_NAME_NATIVE, PROCESS_NAME_WIN32, PROCESS_QUERY_LIMITED_INFORMATION, }; use windows::Win32::UI::WindowsAndMessaging::{ EnumWindows, GetWindowThreadProcessId, IsIconic, IsWindowVisible, }; use crate::intercept_conf::PID; use crate::processes::{ProcessInfo, ProcessList}; pub fn get_process_name(pid: PID) -> Result { unsafe { let handle = OpenProcess(PROCESS_QUERY_LIMITED_INFORMATION, false, pid)?; let path = process_name(handle); CloseHandle(handle)?; path } } unsafe fn process_name(handle: HANDLE) -> Result { let mut buffer = Vec::with_capacity(MAX_PATH as usize); let path = PWSTR(buffer.as_mut_ptr()); let mut len = buffer.capacity() as u32; QueryFullProcessImageNameW(handle, PROCESS_NAME_WIN32, path, &mut len).or_else(|_| // WSL wants PROCESS_NAME_NATIVE, see https://github.com/microsoft/WSL/issues/3478 QueryFullProcessImageNameW( handle, PROCESS_NAME_NATIVE, path, &mut len, ))?; Ok(PathBuf::from(OsString::from_wide(path.as_wide()))) } pub fn get_is_critical(pid: PID) -> Result { unsafe { let handle = OpenProcess(PROCESS_QUERY_LIMITED_INFORMATION, false, pid)?; let critical = is_critical(handle); CloseHandle(handle)?; critical } } unsafe fn is_critical(handle: HANDLE) -> Result { let mut is_critical = BOOL::default(); IsProcessCritical(handle, &mut is_critical)?; // we're ok if this fails. Ok(is_critical.as_bool()) } pub fn enumerate_pids() -> Result> { let mut pids: Vec = Vec::with_capacity(1024); loop { let bytes_available = (size_of::() * pids.capacity()) as u32; let mut bytes_needed = 0; unsafe { EnumProcesses(pids.as_mut_ptr(), bytes_available, &mut bytes_needed)?; } if bytes_needed < bytes_available { unsafe { pids.set_len((bytes_needed / 4) as usize) } break; } pids.reserve(2 * pids.capacity()); } Ok(pids) } pub static DISPLAY_NAME_CACHE: LazyLock> = LazyLock::new(|| Mutex::new(DisplayNameCache::default())); #[derive(Default)] pub struct DisplayNameCache(HashMap>); impl DisplayNameCache { pub fn get(&mut self, executable: PathBuf) -> &Result { self.0 .entry(executable) .or_insert_with_key(|path| get_display_name(path)) } } pub fn get_display_name(executable: &Path) -> Result { unsafe { let executable_path = executable .as_os_str() .encode_wide() .chain(iter::once(0)) .collect::>(); let version_info_size = { let size = GetFileVersionInfoSizeW(PCWSTR::from_raw(executable_path.as_ptr()), None); if size == 0 { return Err(windows::core::Error::from_win32().into()); } size }; let mut version_info_buf = vec![0u8; version_info_size as usize]; GetFileVersionInfoW( PCWSTR::from_raw(executable_path.as_ptr()), None, version_info_size, version_info_buf.as_mut_ptr() as _, )?; // this is a pointer to an array of lang/codepage word pairs, // but in practice almost all apps only ship with one language. // we just treat it as a single thing for simplicity. let mut lang_ptr: *const (u16, u16) = std::ptr::null_mut(); let mut len = 0; VerQueryValueW( version_info_buf.as_mut_ptr() as _, w!("\\VarFileInfo\\Translation"), &mut lang_ptr as *const _ as _, &mut len, ) .ok()?; if len == 0 { return Err(anyhow!("no translation info")); } let sub_block = format!( "\\StringFileInfo\\{:04x}{:04x}\\FileDescription\0", (*lang_ptr).0, (*lang_ptr).1 ) .encode_utf16() .collect::>(); let mut file_description_ptr: *const u16 = std::ptr::null(); VerQueryValueW( version_info_buf.as_mut_ptr() as _, PCWSTR::from_raw(sub_block.as_ptr()), &mut file_description_ptr as *const _ as _, &mut len, ) .ok()?; if len == 0 { return Err(anyhow!("no file description")); } let file_description = std::slice::from_raw_parts(file_description_ptr, len as usize - 1); let file_description = String::from_utf16_lossy(file_description); Ok(file_description) } } pub fn active_executables() -> Result { let mut executables: HashMap = HashMap::new(); let visible = visible_windows()?; for pid in enumerate_pids()? { let (executable, is_critical) = unsafe { let Ok(handle) = OpenProcess(PROCESS_QUERY_LIMITED_INFORMATION, false, pid) else { continue; }; let path = process_name(handle); let is_critical = is_critical(handle); CloseHandle(handle)?; (path?, is_critical?) }; match executables.entry(executable) { Entry::Occupied(mut e) => { let process_info = e.get(); if !process_info.is_visible && visible.contains(&pid) { let mut display_name_cache = DISPLAY_NAME_CACHE.lock().unwrap(); if let Ok(d) = display_name_cache.get(e.key().clone()) { e.get_mut().display_name.clone_from(d); } e.get_mut().is_visible = true; } } Entry::Vacant(e) => { let executable = e.key().clone(); let is_visible = visible.contains(&pid); let display_name = { let dn = if is_visible { let mut display_name_cache = DISPLAY_NAME_CACHE.lock().unwrap(); if let Ok(d) = display_name_cache.get(executable.clone()) { Some(d.clone()) } else { None } } else { None }; dn.unwrap_or_else(|| { executable .to_string_lossy() .rsplit('\\') .next() .unwrap() .to_string() }) }; e.insert(ProcessInfo { executable, display_name, is_visible, is_system: is_critical, }); } } } Ok(executables.into_values().collect()) } pub fn visible_windows() -> Result> { let mut pids: HashSet = HashSet::new(); enum_windows(|window| { unsafe { let mut pid: u32 = 0; if GetWindowThreadProcessId(window, Some(&mut pid)) == 0 { return true; // If the window handle is invalid, the return value is zero. } let is_visible = IsWindowVisible(window).as_bool(); let is_iconic = IsIconic(window).as_bool(); let is_cloaked = { let mut cloaked = BOOL::default(); if let Err(e) = DwmGetWindowAttribute( window, DWMWA_CLOAKED, &mut cloaked as *mut BOOL as *mut _, size_of::() as u32, ) { log::debug!("DwmGetWindowAttribute failed: {:#}", e); false } else { cloaked.as_bool() } }; if is_visible && !is_iconic && !is_cloaked { pids.insert(pid); /* let procname = get_process_name(pid).unwrap_or("unknown".to_string()); dbg!("================", procname, pid, is_visible, is_iconic, is_cloaked); */ } true } })?; Ok(pids) } pub fn enum_windows(func: F) -> Result<()> where F: FnMut(HWND) -> bool, { unsafe { EnumWindows( Some(enum_windows_proc:: as _), LPARAM(&func as *const _ as _), )? } Ok(()) } extern "system" fn enum_windows_proc(hwnd: HWND, lparam: LPARAM) -> BOOL where F: FnMut(HWND) -> bool, { let func = unsafe { &mut *(lparam.0 as *mut F) }; func(hwnd).into() } #[cfg(test)] mod tests { use std::env; use std::path::PathBuf; #[test] fn visible_windows() { let pids = super::visible_windows().unwrap(); // no asserts here because tests should work on headless systems. for pid in pids { let procname = super::get_process_name(pid) .map(|p| p.display().to_string()) .unwrap_or_else(|e| format!("<{:?}>", e)); println!("{: >6} {}", pid, procname); } } #[test] fn get_process_name() { let name = super::get_process_name(std::process::id()).unwrap(); assert!(name.as_os_str().to_string_lossy().contains("mitmproxy")); } #[test] fn get_executable_name() { let mut d = PathBuf::from(env!("CARGO_MANIFEST_DIR")); d.push("benches\\openvpnserv.exe"); assert_eq!(super::get_display_name(&d).unwrap(), "OpenVPN Service"); } #[test] fn process_list() { let lst = super::active_executables().unwrap(); assert!(!lst.is_empty()); for proc in &lst { if proc.is_visible { dbg!(proc); } } dbg!(lst.len()); } } mitmproxy_rs-0.12.8/src/shutdown.rs000077500000000000000000000036441511036467100174040ustar00rootroot00000000000000use anyhow::Result; use std::fmt::{Debug, Formatter}; use tokio::sync::watch; use tokio::task::JoinSet; #[derive(Clone)] pub struct Receiver(watch::Receiver<()>); impl Receiver { pub async fn recv(&mut self) { self.0.changed().await.ok(); self.0.mark_changed(); } pub fn is_shutting_down(&self) -> bool { self.0.has_changed().unwrap_or(true) } } impl Debug for Receiver { fn fmt(&self, f: &mut Formatter<'_>) -> std::fmt::Result { f.debug_tuple("Shutdown") .field(&self.is_shutting_down()) .finish() } } pub fn channel() -> (watch::Sender<()>, Receiver) { let (tx, rx) = watch::channel(()); (tx, Receiver(rx)) } pub async fn shutdown_task(mut tasks: JoinSet>, shutdown_done: watch::Sender<()>) { while let Some(task) = tasks.join_next().await { match task { Ok(Ok(())) => (), Ok(Err(error)) => { log::error!("Task failed: {:?}\n{}", error, error.backtrace()); tasks.shutdown().await; } Err(error) => { if error.is_cancelled() { log::error!("Task cancelled: {error}"); } else { log::error!("Task panicked: {error}"); } tasks.shutdown().await; } } } shutdown_done.send(()).ok(); } #[cfg(test)] mod tests { use super::*; #[tokio::test] async fn shutdown_channel() { let (tx, mut rx1) = channel(); let rx2 = rx1.clone(); assert!(!rx1.is_shutting_down()); assert!(!rx2.is_shutting_down()); tx.send(()).unwrap(); rx1.recv().await; assert!(rx1.is_shutting_down()); assert!(rx2.is_shutting_down()); assert!(rx1.is_shutting_down()); assert!(rx2.is_shutting_down()); rx1.recv().await; assert!(rx1.is_shutting_down()); } } mitmproxy_rs-0.12.8/src/windows/000077500000000000000000000000001511036467100166435ustar00rootroot00000000000000mitmproxy_rs-0.12.8/src/windows/mod.rs000066400000000000000000000000211511036467100177610ustar00rootroot00000000000000pub mod network; mitmproxy_rs-0.12.8/src/windows/network.rs000066400000000000000000000146301511036467100207060ustar00rootroot00000000000000use anyhow::{anyhow, Result}; use std::net::{Ipv4Addr, Ipv6Addr, SocketAddr}; use windows::Win32::Foundation::{ERROR_INSUFFICIENT_BUFFER, NO_ERROR}; use windows::Win32::NetworkManagement::IpHelper::{ GetExtendedTcpTable, GetExtendedUdpTable, MIB_TCP6TABLE_OWNER_PID, MIB_TCPTABLE_OWNER_PID, MIB_UDP6TABLE_OWNER_PID, MIB_UDPTABLE_OWNER_PID, TCP_TABLE_OWNER_PID_ALL, UDP_TABLE_OWNER_PID, }; use windows::Win32::Networking::WinSock::{AF_INET, AF_INET6}; #[derive(Debug, Clone)] pub struct NetworkTableEntry { pub protocol: u8, pub local_addr: SocketAddr, pub remote_addr: SocketAddr, pub pid: u32, } /// Return _all_ active listeners/connections for {TCP, UDP} x {IPv4, IPv6}. pub fn network_table() -> Result> { let mut entries = Vec::new(); let mut buf = Vec::with_capacity(16384); let mut buf_size = 0; /* TCP IPv4 */ loop { let res = unsafe { GetExtendedTcpTable( Some(buf.as_mut_ptr() as *mut _), &mut buf_size, false, AF_INET.0.into(), TCP_TABLE_OWNER_PID_ALL, 0, ) }; if res == ERROR_INSUFFICIENT_BUFFER.0 { buf.reserve(buf.capacity() + buf_size as usize); } else if res == NO_ERROR.0 { break; } else { return Err(anyhow!("failed to get tcp table")); } } let table = unsafe { &*(buf.as_ptr() as *const MIB_TCPTABLE_OWNER_PID) }; for i in 0..table.dwNumEntries { let row = unsafe { &*(table.table.as_ptr().add(i as usize)) }; let local_addr = SocketAddr::new( Ipv4Addr::from(row.dwLocalAddr.to_be()).into(), (row.dwLocalPort as u16).to_be(), ); let remote_addr = SocketAddr::new( Ipv4Addr::from(row.dwRemoteAddr.to_be()).into(), (row.dwRemotePort as u16).to_be(), ); entries.push(NetworkTableEntry { protocol: 0x06, pid: row.dwOwningPid, local_addr, remote_addr, }); } /* TCP IPv6 */ loop { let res = unsafe { GetExtendedTcpTable( Some(buf.as_mut_ptr() as *mut _), &mut buf_size, false, AF_INET6.0.into(), TCP_TABLE_OWNER_PID_ALL, 0, ) }; if res == ERROR_INSUFFICIENT_BUFFER.0 { buf.reserve(buf.capacity() + buf_size as usize); } else if res == NO_ERROR.0 { break; } else { return Err(anyhow!("failed to get tcp6 table")); } } let table = unsafe { &*(buf.as_ptr() as *const MIB_TCP6TABLE_OWNER_PID) }; for i in 0..table.dwNumEntries { let row = unsafe { &*(table.table.as_ptr().add(i as usize)) }; let local_addr = SocketAddr::new( Ipv6Addr::from(row.ucLocalAddr).into(), (row.dwLocalPort as u16).to_be(), ); let remote_addr = SocketAddr::new( Ipv6Addr::from(row.ucRemoteAddr).into(), (row.dwRemotePort as u16).to_be(), ); entries.push(NetworkTableEntry { protocol: 0x06, pid: row.dwOwningPid, local_addr, remote_addr, }); } /* UDP IPv4 */ loop { let res = unsafe { GetExtendedUdpTable( Some(buf.as_mut_ptr() as *mut _), &mut buf_size, false, AF_INET.0.into(), UDP_TABLE_OWNER_PID, 0, ) }; if res == ERROR_INSUFFICIENT_BUFFER.0 { buf.reserve(buf.capacity() + buf_size as usize); } else if res == NO_ERROR.0 { break; } else { return Err(anyhow!("failed to get udp table")); } } let table = unsafe { &*(buf.as_ptr() as *const MIB_UDPTABLE_OWNER_PID) }; for i in 0..table.dwNumEntries { let row = unsafe { &*(table.table.as_ptr().add(i as usize)) }; let local_addr = SocketAddr::new( Ipv4Addr::from(row.dwLocalAddr.to_be()).into(), (row.dwLocalPort as u16).to_be(), ); let remote_addr = SocketAddr::new(Ipv4Addr::UNSPECIFIED.into(), 0); entries.push(NetworkTableEntry { protocol: 0x11, pid: row.dwOwningPid, local_addr, remote_addr, }); } /* UDP IPv6 */ loop { let res = unsafe { GetExtendedUdpTable( Some(buf.as_mut_ptr() as *mut _), &mut buf_size, false, AF_INET6.0.into(), UDP_TABLE_OWNER_PID, 0, ) }; if res == ERROR_INSUFFICIENT_BUFFER.0 { buf.reserve(buf.capacity() + buf_size as usize); } else if res == NO_ERROR.0 { break; } else { return Err(anyhow!("failed to get udp6 table")); } } let table = unsafe { &*(buf.as_ptr() as *const MIB_UDP6TABLE_OWNER_PID) }; for i in 0..table.dwNumEntries { let row = unsafe { &*(table.table.as_ptr().add(i as usize)) }; let local_addr = SocketAddr::new( Ipv6Addr::from(row.ucLocalAddr).into(), (row.dwLocalPort as u16).to_be(), ); let remote_addr = SocketAddr::new(Ipv6Addr::UNSPECIFIED.into(), 0); entries.push(NetworkTableEntry { protocol: 0x11, pid: row.dwOwningPid, local_addr, remote_addr, }); } Ok(entries) } #[cfg(test)] mod tests { use std::net::{TcpListener, UdpSocket}; #[test] fn network_table() { let tcp_listener = TcpListener::bind("127.0.0.1:0").unwrap(); let udp_socket = UdpSocket::bind("127.0.0.1:0").unwrap(); let table = super::network_table().unwrap(); println!("{table:#?}"); let tcp_port = tcp_listener.local_addr().unwrap().port(); let tcp_pid = table .iter() .find(|conn| conn.local_addr.port() == tcp_port) .unwrap() .pid; assert_eq!(tcp_pid, std::process::id()); let udp_port = udp_socket.local_addr().unwrap().port(); let udp_pid = table .iter() .find(|conn| conn.local_addr.port() == udp_port) .unwrap() .pid; assert_eq!(udp_pid, std::process::id()); } } mitmproxy_rs-0.12.8/wireguard-test-client/000077500000000000000000000000001511036467100206045ustar00rootroot00000000000000mitmproxy_rs-0.12.8/wireguard-test-client/Cargo.toml000066400000000000000000000006401511036467100225340ustar00rootroot00000000000000[package] name = "mitm-wg-test-client" license = "MIT" description = "Test client for mitmproxy_rs's WireGuard functionality" authors.workspace = true version.workspace = true repository.workspace = true edition.workspace = true rust-version.workspace = true publish.workspace = true [lints] workspace = true [dependencies] anyhow = "1.0.100" data-encoding = "2.8.0" boringtun = "0.6" hex = "0.4" smoltcp = "0.12" mitmproxy_rs-0.12.8/wireguard-test-client/src/000077500000000000000000000000001511036467100213735ustar00rootroot00000000000000mitmproxy_rs-0.12.8/wireguard-test-client/src/main.rs000077500000000000000000000134111511036467100226700ustar00rootroot00000000000000use std::env; use std::net::{IpAddr, SocketAddr, UdpSocket}; use std::str::FromStr; use std::time::Duration; use anyhow::{bail, Result}; use boringtun::noise::{Tunn, TunnResult}; use boringtun::x25519::{PublicKey, StaticSecret}; use data_encoding::BASE64; use smoltcp::wire::{Ipv4Packet, TcpPacket, TcpSeqNumber, UdpPacket}; fn main() -> Result<()> { let port = env::args() .nth(1) .map(|x| x.parse::().expect("Not a valid port number.")) .unwrap_or(51820); let static_private = StaticSecret::from( <[u8; 32]>::try_from(BASE64.decode(b"qG8b7LI/s+ezngWpXqj5A7Nj988hbGL+eQ8ePki0iHk=")?) .unwrap(), ); let peer_static_public = PublicKey::from( <[u8; 32]>::try_from(BASE64.decode(b"mitmV5Wo7pRJrHNAKhZEI0nzqqeO8u4fXG+zUbZEXA0=")?) .unwrap(), ); let mut tunn = Tunn::new(static_private, peer_static_public, None, None, 0, None); let socket = UdpSocket::bind("127.0.0.1:0")?; socket.set_read_timeout(Some(Duration::from_secs(1)))?; socket.connect(SocketAddr::new(IpAddr::from_str("127.0.0.1")?, port))?; // IPv4 + UDP + data let udp_dgram = { let mut udp_dgram = Ipv4Packet::new_checked(hex::decode( "450000218d6600008011307f0a0000010a00002a\ 04d27a69000d253f\ 68656c6c6f", )?)?; let (src_addr, dst_addr) = (udp_dgram.src_addr(), udp_dgram.dst_addr()); let mut udp_dgram_inner = UdpPacket::new_checked(udp_dgram.payload_mut())?; udp_dgram_inner.fill_checksum(&src_addr.into(), &dst_addr.into()); udp_dgram.fill_checksum(); udp_dgram }; // IPv4 + TCP SYN let tcp_syn = { let mut tcp_syn = Ipv4Packet::new_checked(hex::decode( "45000034d97b40008006FFFF0a0000010a00002a\ cafe005012345678000000008002faf0FFFF0000020405b40103030801010402", )?)?; let (src_addr, dst_addr) = (tcp_syn.src_addr(), tcp_syn.dst_addr()); let mut tcp_syn_inner = TcpPacket::new_checked(tcp_syn.payload_mut())?; tcp_syn_inner.fill_checksum(&src_addr.into(), &dst_addr.into()); tcp_syn.fill_checksum(); tcp_syn }; let mut packets_to_do = vec![tcp_syn.into_inner(), udp_dgram.into_inner()]; let mut buf_in = [0u8; 1500]; let mut buf_out = [0u8; 1500]; let mut udp_done = false; let mut tcp_done = false; while !(udp_done && tcp_done) { while let Some(packet) = packets_to_do.pop() { println!("Sending packet: {}", hex::encode(&packet)); match tunn.encapsulate(&packet, &mut buf_out) { TunnResult::WriteToNetwork(b) => { socket.send(b)?; } TunnResult::Done => (), _ => unreachable!("encapsulate"), }; } let len = match socket.recv(&mut buf_in) { Ok(len) => len, // errno == EAGAIN / Resource Temporarily Unavailable: just try again later Err(err) if matches!(err.raw_os_error(), Some(11)) => continue, Err(err) => return Err(err.into()), }; let mut result = tunn.decapsulate(None, &buf_in[..len], &mut buf_out); while let TunnResult::WriteToNetwork(b) = result { socket.send(b)?; result = tunn.decapsulate(None, &[0; 0], &mut buf_out); } match result { TunnResult::WriteToTunnelV4(buf, _) => { println!("Received packet: {}", hex::encode(&buf)); if buf[9] == 0x11 && !udp_done { if &buf[28..] == b"HELLO" { println!("It's the UDP reply we were looking for."); udp_done = true; } else { println!("It's an unexpected UDP packet."); } } else if buf[9] == 0x6 && !tcp_done { if buf[33] & 0x12 == 0x12 { println!("It's a TCP SYN/ACK."); let tcp_ack = { let mut tcp_ack = Ipv4Packet::new_checked(hex::decode( "45000034d97b40008006FFFF0a0000010a00002a\ cafe0050123456790000000050100204FFFF0000\ 68656c6c6f20776f726c6421", )?)?; // Update ACK number let ack = i32::from_be_bytes(buf[24..28].try_into().unwrap()) + 1; let (src_addr, dst_addr) = (tcp_ack.src_addr(), tcp_ack.dst_addr()); let mut tcp_ack_inner = TcpPacket::new_checked(tcp_ack.payload_mut())?; tcp_ack_inner.set_ack_number(TcpSeqNumber(ack)); tcp_ack_inner.fill_checksum(&src_addr.into(), &dst_addr.into()); tcp_ack.fill_checksum(); tcp_ack }; packets_to_do.push(tcp_ack.into_inner()); } else if buf[33] & 0x10 == 0x10 { if buf.len() == 40 { println!("It's a TCP ACK with no data."); } else if &buf[40..] == b"HELLO WORLD!" { println!("It's a TCP ACK with the data we were looking for."); tcp_done = true; } else { println!("It's a TCP packet with unexpected data."); } } else { println!("It's an unexpected TCP packet."); } } else { println!("It's neither TCP nor UDP."); } } TunnResult::Done => (), _ => bail!("Unexpected decapsulatation result: {:?}", result), } } println!("All set!"); Ok(()) } mitmproxy_rs-0.12.8/wireguard-test-client/wireguard_echo_test_server.py000066400000000000000000000054151511036467100265770ustar00rootroot00000000000000#!/usr/bin/env python3 import asyncio import logging import signal import sys import textwrap import time import mitmproxy_rs # (private key, public key) server_keypair = ( "EG47ZWjYjr+Y97TQ1A7sVl7Xn3mMWDnvjU/VxU769ls=", "mitmV5Wo7pRJrHNAKhZEI0nzqqeO8u4fXG+zUbZEXA0=", ) client_keypair = ( "qG8b7LI/s+ezngWpXqj5A7Nj988hbGL+eQ8ePki0iHk=", "Test1sbpTFmJULgSlJ5hJ1RdzsXWrl3Mg7k9UTN//jE=", ) LOG_FORMAT = "[%(asctime)s %(levelname)-5s %(name)s] %(message)s" TIME_FORMAT = "%Y-%m-%dT%H:%M:%SZ" try: from rich import print from rich.logging import RichHandler logging.basicConfig(format=LOG_FORMAT, datefmt=TIME_FORMAT, handlers=[RichHandler()]) except ImportError: logging.basicConfig(format=LOG_FORMAT, datefmt=TIME_FORMAT) logging.Formatter.convert = time.gmtime logger = logging.getLogger() logger.setLevel(logging.DEBUG) async def main(): server = await mitmproxy_rs.start_wireguard_server( "0.0.0.0", 51820, server_keypair[0], [client_keypair[1]], handle_stream, handle_stream, ) print( textwrap.dedent( f""" :white_check_mark: Server started. Use the following WireGuard config for testing: ------------------------------------------------------------ [Interface] PrivateKey = {client_keypair[0]} Address = 10.0.0.1/32 MTU = 1420 [Peer] PublicKey = {server_keypair[1]} AllowedIPs = 10.0.0.0/24 Endpoint = 127.0.0.1:51820 ------------------------------------------------------------ And then run `nc 10.0.0.42 1234` or `nc -u 10.0.0.42 1234` to talk to the echo server. """ ) ) def stop(*_): server.close() signal.signal(signal.SIGINT, lambda *_: sys.exit()) signal.signal(signal.SIGINT, stop) await server.wait_closed() async def handle_stream(rw: mitmproxy_rs.Stream): logger.debug(f"connection task {rw=}") logger.debug(f"{rw.get_extra_info('peername')=}") for _ in range(2): logger.debug("reading...") try: data = await rw.read(4096) except Exception as exc: logger.debug(f"read {exc=}") data = b"" logger.debug(f"read complete. writing... {len(data)=} {data[:10]=} ") try: rw.write(data.upper()) except Exception as exc: logger.debug(f"write {exc=}") logger.debug("write complete. draining...") try: await rw.drain() except Exception as exc: logger.debug(f"drain {exc=}") logger.debug("drained.") logger.debug("closing...") try: rw.close() except Exception as exc: logger.debug(f"close {exc=}") logger.debug("closed.") if __name__ == "__main__": asyncio.run(main(), debug=True)

P>P̯_3.VXb?'0G``cRAAGl C n`@0JvnőoG 0̗%|,sY (X*T"PmPA5ԸR ?~www{f0Gߗv @wN,8?9pKuKuKDj= ̧S[(8La&H2__<^Ԣ͌}L.A08'XqMqMq * 4P^zu 20 0E1 9?<~8p={dɐ!+G\jwݥv˝/w h5Z6~L7Gϯ"x` q]9K a cCĊ6{lLA 9ɤm6lH`M 6jvٱfG*]t%Szfyܓ09,Ӗ-M[ ^q̏4du.qmOu>@s.]jYpppd/e/e/38nĀn0LV$,,,q+;2K0!!vvv@eueue5в[n-uz]7PXSXSX0aV#sEa/E&鍪4p=>P@i! cp>qwe4c 0;nt9Cm0ٕLL(P80py啗Wnnnut ЬԬԬ*rU $er<NJ;H2L΄܀Aby( ;K{u} ;aޏ VxE"Z;vn i*(䊒+>}dp^0Ln!GRz[`G-wTSeO{s]ϾT1]'㠁LLN'TlXAl x`0dPm_}]VvYe%0aX0 g̞`+2 0Lqzn`LIP?8=&I9a@~󑢻;PPB =80z뭯^q^q^q+ GxP,R,@.B.u׺k^khvivivuuuvvv@o ` X{hOiOiO²²€Va$'9<<<|||5 w]~~~@~X~X~5d?xɃ'V[moljŦ?QDRZJK0_09ˆ/IY܁2& WSDϢB(_܏cPB i_7n~WϾzѫF@Kז-]|eg21q>QE^DDHsLsLs %J*$lIؒ-X5v+-z[6 jlت@\qRqJkƯ'O$['['[NNN@EE>u}z@3N3N3U+^^^BC63tT*B* HV$+m̷G,X Y*XZZɀm -pppNkeˎ o=7mog?e2ɃAL6%:40404}|ǁn_r˝)))A '#,x8daqy~v&+pǘVo \TR Ar=*vvv@/W үJ*@)48v,X8q!WBdK@[[S)7o?$JJJD*U?~?5kjWcdrk5`ѲeGmGێ@+y,X u*P8phPp] w{nv+VpGeO 4G9F9F9RwJVTXQaEbe.AsG*"x{M\*U c8a 5/)+gq29(UUU B@ | bc+VΣ!1dov`vq 5^L{14~瀛n x0ÁPPPW RLJfff|.dsss111ȊȊeΖ9[,PJ+E֮֮րmO۞=A@=0@DB.]+Xbpmf؄Mؤw^vД14w#Tϐ'0Ɓ&;` A3@ǂ%9t2]w@-Ng;tprގ8dq*5*j(Qx+SL.ֺXb-f盝ov=s rYezzz/5|dÐ!o]u Y***9sOL)R0'$Ojjn dr_*_*_*u֭Z XhգULz0)q)bD*5c8]I'0 0PkY@$;;={OӁtɖ'[l!hIKZb>7Y7oD RK݈\6sLzy\r 5 &ϛ/1IkjHjHjу>JC[ i1ŐD444DN3f8  l&`555|ohGF!dO=M= zDM7c'C /i8 'pµ ׈.uɯK^d{)#;[;>v? UH%ar(7eG 6sP@ￛ?2df&:y8p$zzzE)5ImR^"q:yn繝Ds78w#Q-|Nu"fuf}R6o+B /t7 %K>3~}"444K.ٻ޹z#RޜϞ?ˠLɔlR Պ~v?tyفgU]vD6|k'/,69DՋU/VOOpÉDc7vb 0 ノ: <|DN*8Uub킧Sa- =6`1$ uI(dm,,,MƯ_?ѧOGlM3(qǑɔxxxON<9h܆qm (P0 Y3Wlu $vhڡiG8AM&j?>=b ` ];ёGN9M8qJ"pppNM̒Vg pC0i=C MVտ^"DjT-V[%NX:T2v˄$JdD7͍ofE͊ET{@9;;sEf)))QF#Z\oq6n3"AA_as?~}n_Ka.YϟϽ&a W'`C-l ~v۵'vķ#A`σ=dPF& $/r?Em^D1chP"b\qEfƆEXEDΤ"ijjJTqmŵM19jɫ%$RUz K:#uі߶7?YFujmMSmn`!l!xT=M$C&c=yb!~hD S)3(R*dlĆ r|q֯[nyynV[`Lҟ?1D]t=ў={G=z2O#=y?5#% {j[wCzxa>7B,8U6S5aWsX͑ϯϯ4DM^I{?jӴi4wmt2ӅՊW+^%2`|{L'KRIT5jP [PQԣGQz PŪbUD곫Qs҆agly鑌exo*(8Y`ql?OsMn2WWW{b#0 0Ϗh1SL%?t\xO=yѷ-m"Y<n`PakZi9"eˬe=alc;^eWmҶI&D'k3 IJ޳gK={`@"KX2ےUz(X~鑌ey/!CY/0l6m }wy/`Nn93-54E+W!C8YtfM6j"t@I=aS*|n W5wl`=x-ҚH___/'έC Pmuuu$Z~b'J *5Ԡo.l6}8c Dfn&Q܄ s3ȟrrX: ?NTvSMe7ep_yy/a 1a$dr z^ M6%CwwwzW]w緞z~+7I40Rx_QF7}60ft6N9U9U9uuZ!:z2d(E;wz"jP PLr/aumMiS'6al<+M$AFd];g;g;gڞ(1 1 1@/'5Ҟc1p/߿|2CNgeyVfpy.?f? /$_Q`5nx 2U@ǛovM4löY4hfL~J?So'u+5k,m'N .\:Xx_#)Hzpwy~<~㧀PۡC]~vptt\s.]6J,uAC J,+fʛ1=@]])SR'uב_M=z68Xc=k-77h|h]X_ܒhʙʙʙDh"XXX+G27.a`NoJ4Sj{qOl6;'@PZ}}2'Dqvqvqv٤ld2tJGi{,X8Pyb4NI}`φH5l =͡-x /yu )\XxqōFci4FonMɲE6mۼIs'͝4w 0 9V(s̩2-hܳ' ** Hƾj7&o=}S^{}{q>^o$5Ij(:*:*:NNN={}oq@uXd $` N;98`@tn]vi@TjVG RLpk;67d_[ ~l? Dy-Ģ<>Oв1p=pEh;$&kG6f^q:hDF?~A]d=-by-S#FNDn-Z$R*Jۛ٘.&S1*FňM>6DG{$QYѳ2BUx='GurlپOΈ $x4jrJUo ~~Q\dm -ߪ|ΧO; d10lDG]{tְϑfdI!|||VZ]hu撛Kn. ?7Gu{ԍh샱> *Y0`+Imbrkܮqhc}6!Jl4ia|g{}Q|!B>dJ@$JäC2qt/mGJ"]vڥL:::Dk;`//"5Vcꊪ+܋s7 fO?cט!Cg kXHB} c\,Z,X X`=pqq[:tl 8w.\p'矀-p>!YYY hkk @ZiRKHR'@µk ׀+1bvOD>DGGo^yD,YbKƖ- $M8Hݗ/u%X%~ C* kM'N6N{Z@JF5vQc5uͯo *l3B_3&\b{,eހ?e:PծoE}f̀1sUV[5&!o o oe pe+ xyJJJ >*#{f@vo8vp,--O-rrrƾO83gZO 5k DoxuյW׀^>zx6gcDZcOJ<)rI/'+#VFGŏh6j6j609Tz^y~]:ڏ~qug#!DRB# ,,߷|}z@@ `nqP+P-kƕi-.Xb,͐FYGp)z6 mSz j%p8\^x@?WX2P!h$ W+_|mW]h=C?n?woi&c$:^?#_׽Y,y+ TFp W;TPC;\tpy.cK64m(ܲrS7o߄g~(|hVìY qXDZ PijgO";)>VXclGsGsGsJiRY,7!AO)=G%JD?~2$[wD݉n߿}}A4^Lz1$ Ydfs>7&'udxyy3f:K>K>_V׋fGOMM7 V?>p_k=puqWK.q?= Hh$I>(g̙܎n8F (((Znh Ϸo?YN&LlLJ4)L\2AUHM̧*_ qMv(${Doo/&%\Xr!rNut~W槉w1"ЩzꝪg*54")x[ϗ@u5&7w YT4hݐO8@V`(*ߠ/pi_6U iZJ16J/)R,@ǁ󹒑ʆ+hx{_ ]T+-oha/[0*)[O\G'r>^s# ߿`ͼ5۔)oc/ 10r /l.|r᳇;3Lɂe`@e J(UT ʵ*ת\WK9r\s)(++gsJYLLL"FL |;8}WN 81~W'^xuYs'A\bbb5]w]u= }->@=Áßױe]Ws/[~~EQ8/NĆEw'>؝?Yo{S xGfsq mr,wцhC@h禹ta5kpWG)]+]l](׌Rp x~ :$=EZVwYeuJP*AS>0b爝#vowq93aE&PPPjWVoXa@UnV [poV?X`br;)ST_|q0p~g꟩>8q@@5N5NQkn`!{(^(Px%''~+]9D#{6[ 7aDoM%ml`e+Rd% s@P*F#1驽9>N~M~M~ t3&лk﮽pó b,;w.6-8Qt"IW8eR7矗H{?~X]qu:u"Do=hړړړk{ ps?ZPSg&fM̚Z*Py浚 S4L 8x8{8{8o*5E1̇i〗~/^瞜{r pp'֜Xsb pN;ɪɪ0F饦^v:tXXXd~ܹf皝k4xk@]]ݿ5qfmc5?a/@ HVQv Ł(yb-ˊuK]@ //O,ײ\rۦoX4hl8=3;Ƒ#Gq 0lH Ċ PpGw=֣zzkCC Zj+}W'xOWcJ^n/<^yxjg XdٓeO.?"k,'}tybo)h+.m.a k;Lq0SkN9[>nXoIC_b݁i͞6W~^yԋS/3tdjHy TYyf@땭W^ ԿSN;y>==~;~#4 N)5#;1Xh3̀6'+x9螣'D #OlllPԵkQ׬^^^x'xJaEZ<81[ W OiOsׁڕ4 _QaGz4pcٍe7EQEqw9{.mq&n?1ꔧ@p0q?]S> 6ˮwH'|2t$! IUgVK.~g7e$hhh7`XvJ+EEEC'RRR@;4?\s@m-9^xPP==a _!_!_B!;wԕ뻯ﾾ\?>Ǒ?q+V|ЩC 쾻zFt0L-B[:}N__5Wǭgp^S0 @y 28utRJ](l?O;Ŀ+0[JL<* ^pA A;,ˏCgA\Hc|2$V[o%. xxx]p9tiKuXױ֫(pşa>~_bnhh T3Xlɳ%π'ON+:4Q߳777rO3i5x@u:O!Y'DgP7[/;666u.cVݬYuc_ёŞ%\ a(o &R^6IF2tʡ*6yyW]w%u l>Ì&0~\_dt=Gܣ;1Pᗹ\d.20'`Nk;Lw݀C& ~SeSeS?듮Ouց[skTQF"{\FQh_q?l3`1ӘVU3 *Ⱦ5u; zDSkd~EAy;y;y\yy)NUQXV3qAQO%,I2],%mS#^_ Sakkkz>|]nSC7TSp t7v@m?^_oۙ;UdJ?zu9Ûo:ܷoqϨ"] + c:H$g70 t[mE* EEEW^yx!@"gԥ<,GR#FJ bY?e7no&mRj0 "9a{@fͯB}YAf+%=ћ4I>NJy+Ȫ˪>G?UWƾl p\ << kH7:'|~\H;v.\[~nJJJo.蝩+Xsν;]}A_p?w , `bb24d(0 z 0c(H^o& glsOSYNLf&˨E$uoN9CCC?~I ^5/רnhXИH)&X6){3[߇T2O{+TPB514F 1Eg;Sxm.?F 'Gצ*(/P!|??1i&xhuՁV뮚rG/~@>L9rR/;=g =S Nמ^{zwgzp6m g܃.m-`[;\u:D 7(_Կpi3'9YifO{߲~Ni]_C72Evvgp [Jd}Q=[ZptĞ J.Yd\ФICe}^нK❷*&x5$XFpHf3-)tΉUd4=a|3ߌ  !~VE>úN'N8ep_⟳%,9vVŭ 7po^`O{tQ#z ?0ȤA555ukԭQp`c5nnn1-$?,'6|e2_ھjdddՐ~=N~% p+)*OOEK*hcF;( x;~#>&eBv̽̽́Jn+-Dx:霧s}I\IK /+,&ogDk>8`x񮀲0 7WYPtOG >$bs cc=6\ׁ_|~7oq#0ǒI@ׅ^z Lf7ӿ  ٷfߚ v'._!Mߘy_ z-WǫWʕLѵF]dd􌿺_D[X suM! GB x\5t1t憚n*s$W^µpӘaL$wդiR7d8_%xdMJ3gF\^G閥[n 3{=.]λnY?SiG<68aXFa!ۇl8\pCĸ3UPA'ԞP{yAA'O(Je211Xc>B"LCNқʨ@em ,=C~{nϺ=6}3x^&[rw=pZ֏mXa] 9OImwj W}^c.HT]"^SO_}ņxS֧OiMoYYY$]y橛@ʰa)Ìz'L]GLiU<`[:`:U6϶bصuxt߿"/| 7lްhإa]% 08~{C8D({  6, 豰 pppu")#5}lE11$nOܞH|(V[ b4i?/~C?I$RSŚ4J4M&Pw_ODO@qQqQq077,YX,X&hMe󴎶:uԽSw??C- G/_bScScS5^x];v6,/O*?2Oja#F"*ETD߈}HIIF$H٥٥o $$ 1b6PVV/[_ fo9s>y}n'N<==OWOWOW肣 t?wipttϛ7S/L w-z(0g͜5swo޽y78+qV,9Heu-ZֵScO /ۿl4&&&ԡCS%G]r4*Z tNQ@?4 n!A Eh7A1@J`뎋{*:x6v"+(! x:s8p >uSlpFHHN=t]SkN@KKy9 q.%Zp kS3{yV+NF9~~~Z`QE},W[\%IA(LJ2c,ւZ4\i覲D*U C@-eee%w3NVxۛ>/U?U?U?41K/DO8aߺߺ 7PK*}>PjCG7x6!ͽZ|gn97wG@{J Pt= Atb$UZ+OJ8פ Zt]HDMsQ;3g:msmsms`V9r^l짟1Ex^ &M*6cm XۮaVìы/IDId:HE*eeeDb'N%2;mv}09̳`7!"Ysd͑5'=OzB)b7P0`BAoݞhm㷍' <x$Q7M4}CTXbE d7++{[}Wqv)DZ\h1Q#FtaL-Rf雥o&)nߺ\-tqDe%ʳ#ώ<;2x (]n|ѼyGs?RH_+W9p.\Bsl`"׮|/Q`F#"qP#D-~+eC^赜(mODjDlW5ťj[ګ=o8DKz- =o;Q;{/Kͳr"2'c )l8ᴆӈ^5~Uc OTJH~a؅aĹĹe3NrToHo7|ѽ{Gi'N%Vא4zh#oMd5jpm5U*@EEPG#IChIKwKReD?(8ѶoO4 љ\grEW+{$VTRTRT"rr6QWO4gp7|N;}%J=?@MjRԤi4iD!C&L$WjelնmW.{]=OC rZNˉ_z~y"m}-ladQE`3J)D/pu%zg*3G["<=9 /&y55k"{e\fW\QqEDT2sΡ֦^_P0IOͮ#6?ؒR:::%7\rإAmDTީSy.(̶m3hXa&zQE3x_ 0ŊV]ѻN?T g,ȫW1bDfZ6g)z+z+zt;vI&'>fc:v)QzT/_|hČ3F m7n4NfɈڨ zc]S୩C8yqd"={3ُErn8Q-1!*ūғ$g ;̟>2Mvfs(] %ޯ*ë 'ꓫO7t@R^8x1v}gHp3m)wa%c/Ldܯ_~%''%ҞtW2p^[ڲ6-(]vD[8oq&RmPmPm{! df蛡oxtсGDW"_ٿ?i`;8΍(n݀D+0џ;N~^};#WWW蹣玞D%lXaT_/'cRI=z.m"/"ڱ|ˉn/翆 |Dz lg>(((uЩB Dyo>NDJ|\\\ITQF}NN}P ]ޝP$s>tR_МcIwfUjFӗO_%6_2?dD[nU[ V9?κQUU-[3x?xN kkkNwQG-?D&TPaC?Y|_ [*LT֦MYQwGuH#E%3&f{~ HԹvڝk)((Nٟf0ٻmюGQQQ~5RRR}}[_"-i[ҶH31QPB -蹠炞DNNN,Yr3^{e皫j./Eq ~bp$xsNωx>yFmTfM԰I& do6Pp\۹6́3HGA➾dr?TTTnqIVf[UV}[mDvvvY9}m[ٶmETRKU/M2ʴ+DW]wuQZi?0p? 3l0"KKˏnȘ"c!0ˆ #M-Z6,Qؐ!cڞm{Y"N| *"KN;e;l-/D3X>c9pLNM}Iur& Vl2Y@@hJ)%CLI nBN cJv-Jo޾yzZO?Ȥgo~xn?KԹTRKNv:U/,m}E}kִiDnrۿ5Deʆ zTXэ7xˬȹ9)sRtKDN?8 Q3fuBXֱcY"},)(()(( 忔RKD;w&mۮ:u~v{i|̦JCODK,ٲd m>}#)xt%09 IϿk/v ~Ij3l:(*&*&*F/4IBYYYH4˓/)**]?/WdZLQEɢdQD;0ݢw-{a*}ОԞԞ$sΝ;wfݚuk-J?VҏDVVVbfgKg3gޏgyDO?}<ۑ#[[[3qL #m޷%!C,N'_N| RK/5e5d[)RnbD/_':ˉ G7aoe=^[o' !|jl*QU*TJ O`zcCeK &QG&'0j`*%/[+D_8|^i=Dv#F؍л~CAjӒL3~/ 5PQQQ!:;촳ӈ,h""!^C9H LwoI&dɄ Di  zb? ջ@Wq sn>470s3fMc~1yz+&੷41om$Z1c6h"ENɔL6X~OTfٛeof=`%=DMj7ݤ6QϣG=ԣԣԣ2xƎɈHHHo D[nAaž[L01 $=ߗ(β%`y>|]{5V/4!''N&y鞧fSF7ltvo=0vKc%TjRDڌn3h"Nl;epy(?lbj=zHZ>j(diҐD/$_=b;>DMK5-մTGtq?Q?~~N>umrR˽~xY<_Ĕ)S֍\7rH竟~H@@n֦.HS`sFL! -$Zu?C¿6f%g]k;ֻ~œ-)K%ɒzyy#aGŽ||1P (4 ؓcO%%K(mmm\{4lcD]u>>Mac1ß|7n]͡C7 Ї0fhg{0 6X`cI dAzrDN9駗<" g?- 2^ {XFqLߒ9p#rrҟo9\s̅3loɈ ]vhu'" ӣhظjϫ=UV[E"˫W-fp?=6гj1bx;Z] x)0&  nq Q~6GA6;mqQ,K1X=jI;NJF#u IDAT+lq&X |ϣÎ;:ezs%-^nzxюG<@C[]]!B5k %,a '6 wiiiD:4QGAz$Y='`vjW+"k<7^ߝ閌x.HEz$#ҙ/т8(>D)))Ν?Ipuu5QV_w7{ZRw_}-ў{6ё(b hSB7lܰqC"yyy #haنl }"_~;vر 'SYC1ĆĆy=zDqC8՜RHz|_$RKٙYq0?6S,ZYYYYY>rD#_G΁:4G4G4GfYdf"eee#69KFG[_r -ނJJc2O%J>/~)K)mMۚB s3@ 5Ԁ칿'ZҲm跡T Pp @ގ(<<\&Q%pYgz}^'aٹŒ: xS;O<79$[쏱?Hc}=g=d٦c%5Yv`dmȒō*7ܨ2Q\߸q}2̟Ԟ?n~ :R9O[iDnPAj܂ .hnfYOoMI~#GXƕWj\)<6_->Z"W:Rݔ4}Q$7矂ՇmجYC?NqZ/cJJ1v$тO?q}|||*T@s5an9sD7{sLJ0KGU6lV囓oN9z{l6;c+vވy#Vn[m6"M%M%M%GIn׻]lͲ54lK[rпZR!dɮQJF) fɈq5_|}ss<͸T\{rEtءb%$R"%Lv% 9svKzݬݬ݈ :4)&R$C7ݓݓ݉~:әYXXpf%駲?%^Mxpl2LZ3i$"6m.ol8歐h4`c?8煞z^ RWW7v$A8=qzDTj]d 8L!SDcY0fjjj4$/#)X/_hāF 2jl}!l6i, Q(Bj+zqNMIeqqqq5טH6D6D6pf%#ք V D/3K2yz/p$gW  /;CzuDQoD{=!$ɸ"qE}{ۛ$]z4s`g?YYY7(zM5oA2"3ZkDm궩ۦn6xl6?Q%#=6(s$ F݂Ca/$_H7?\/c1)=SzuYXRrױ/QptptpߖON4zk"YgYgYgs1l68q5׬_3hʾJѹsG3v&!I那}%C_y"u:\nl+ HDOZ?5|/^ɇȇȇM3u9DpmV2 Dt7d2O{ l66II0(ndȸl4?=BGь3f̘A$?'?'?#6NpH$~a^9993 8$A .*2*2*ڷj/e fXaDb{&2-ɔL6v$HA4I-65656ܶsf6 1]å+*oo (x{AjcZ ++@HP$(ͭD_[o9 7HF5Hkրh?$2hьVlY`nnN4n踡nIݒp~7lpQEwx56D|`K{ئԮ@Lyٓg{adמYɲ7/K,Qr)R+`_֒ VY-"ZtK$jR5T9ӏb&MzliZ2bPTF?"xiFdƎ;x,w-Z޵,R,߭4y{5R۽{/0Y6+䌒3J0j#DA.0nd9dd ׿u׵^W!8)N2(2fȘ!Я4(E)!M._// !.*!¦M.GyˉۺJɇљ3g…mo|,e)KY#&7!N8ImAۂ TѩSESd)K &qvLT& gPZMb5E5_E[[?ʰLuuu(P"DSO?[n}ٚٚL{~pׄ(_|5L,?yi[O2>B}vgiO>4+5+5+W_~-e)KY%{Ti_R2OWv/__Wc^y5ܯ3|ÇZ@~(2< x1Y_J5^xYm_v41<y:j٪?YREfC i6D'OŸ~XL"]}tU!U j^9ɭ,ei2f,ݗG]_|7 ɾ%N^H#vn 39grdv#o&/j;G;G;G!zy!vn]_:::B /8BHcX:,e)KYH ys^|N)#RFPXWw]uuj[ն,e&iӖ#v?Znz}{CzzKE&w#!!<SlҳIO`)KYz_- 㳺B+ CCCQ9OM"$ ~`잱{6ۜosX-ZbT:]cr}j0c㌍36)FbRH!JȘ~(A Js*ϩ G]p4to;qW./v=w\PnPnPn02*4i4 Z k a -kl*cG&Ba}1;9e ^?wͭ[0ypwPyuý[HWlyŖ,,,TTSNFH" R=~w2(XE"T U U 3#-Z:W $@8t~o;< y({ 8edddd>.'xMMMu]\wʕ*W\)XL }T@ jPJ|fffw }6g::,پO<*Ŧ?7w"J>q-"lii5k8ýiݛ?uL #JG‹ /* E 6*o跴 t888kkW5ܰa}O QGQQQQ٨lTq1W_"l· .||KPlPlP0#R6~ҠA_^/^ؽۆn Gld៚$X=zbC;4/ꚫccc˿o A}]]]k?YiA Z@ *ԪYd͒5 <)Oͭq*k\H6|h1r:߲4Hݚo~}!$ Ibeod㚏k>)DUVXe>y.v4IWԿQ!.ri$+zPAE>lÄ\-ZR=TCCCC-Z il >}JMkMkMk!{ 8,e)ˏZ.һH"B$iI"H#B4X`qFiOCŇ Ju4K w/ՃՃՃ!dCc2}I' N j៽SN; q_d/_H?!&xj)!>Lr t*u]-C-X.%g]rB=!!!BUVZiP?9ir~mmmXg:2,&8RH#|G`{ؓ;Xc , :,e)KYci?]tq)lל|Bu{I?MS媃& C3( l2D/_|B(Ôa0:;3qgNL+@>>>biץ]v"뭬zLfȄM(jT Hs$^XXXVl[ qgӝMw6ez"ss97G߁}ݲ wKMjRSsBp4.Y}J95r"(H{HFF&}fF͌)DWhlyC/OyOI}UL6| Wx^6(/Yr,q.q.q.JJJ:' ! >+3g`vvaCR?}? g,a22z2v"""p9>9^hhh!? .)Scjs"DΉg}?ujթUyi666?e5׿˺/>!NU;UT5$^ċ~1{ ^Pl?wsQ=ƒg|*}?k5j,ʶ*۪lyϻ|ޅ˟PW6f9s"ʺF0*X`킵aO=9}}&#z}7-?ՃCOjHxF:Z Cu898PqC &\q$'Br0"5b p7:s":-f5,pAXHDcIB;w_.`7nTr0&w_c{(++MMM4EEEAA?^;999C{ lؖ-cF?R+aa†J+C.\3\:s .^  =pqK㖾erIdcֿ #VG+b5X /k&xcRDEJޯ~+9K,ͭ01...຃S_N}9JZn<12f˘-o)hҿs"D́V[oUW~_y^?_䣷<_Y/)-m}{w8An?O5nK 7!Y>FmYvvX# ׇUUU ̎5; |/fx^y }g@y/8PmᶅBUW)UBT B -+ r# PNPNPN0֖nnn>o~keǖ[z|1\Yqeŕ>(|PPeJw;L0” wk߭}[+ Gq/k|Yp­ ځfp}tO՟|_c@rgt?A%$I֓ͭM|Qalf36 w߭~ABFs:96؜cTS}NnnnQC]m㭿p y:x]V}ڛ,C_}$AtYI6xE2\p30`ކZ!XbQB(PH" X*`;Ο ׀\r #*Ë /6L%}J[9KfShg[SDdE}lš ïſ,%TSNi3;&[o\x}F,q1iպUV 6mrnRRRGK-y&7trSط~}aޫy潂:댮3\6lp`wPIM PUYUYU ӫN:*fO=aXbu@}[}[}Nczdtce6vl۱ͨܧL&ݷ;+fWܕ߫@yȿ];J~6ɟaRdOi777|PPPoLoiҾ%U:W\4iSضzmA]]{|ǀ/u QrD(11WJM~ 7)ZA"U8Rj_ 8n  'nyxtMnnnPadsL 9Hzzz$TSWSWSâ.n 4pMgwyv^j/'q(' /PPP a6/ց[s.\ιH;$Ҟ2Ⱦ}c8{썳Æl8,lTYgȧȧߗ7ap#3s6TIP`?ژ}̐Bn~/G +CP27߰~CihЦK}^yvJ;gWz#Yd풵 ֶm[;nvKH<.y\twR]5%O!1՛#㮺*ݤ iW{RI'5 lWخ]?w~}Gn̿ƐLAطocq\qa{}_uWɥK'-'41"w0anԺQFݖv[ԇSN}s;v6gm܍L {eW]wm5uDQ9DF-xQ J/D{T0J|:db֋PuqU[`;^xuo7*giS,?t!EH=lȳ! (1PIY&ܭzgX-q/qͣ .oIS(PL!᜗8/q^*[a`ԇڌm3"8ضbۊm+`DЈAuJ)Y3<$o2otQG7o"l}qe/|Y;Tw$@Q}9[vj媖?Na7j"##Nj'{)hCژ[+K! ^{+d~. ty+d"4?Gz RlRlRl=`wLTe.C]]]ݣ[*ZxJ䇔A4b.!#8Z>III7%nJܔGUUGYeVd4F /~XXma`qšP̩S1'9IH%`x$ku sϹ>:h͊6PPB% 7ԳÎ R ׁ>HݡaƔSfL$)IJMȼQAFR.Kͭટ df<_:u* ]vڵʥϽ[UU ~y[JCml].@~q&"x˺B4:KG ?2o e0i$_7we!.f]̺t*ݩtҰ%ǖ[r@*69lroɷ}2ӑ|CrIJ@nM5?B_oT_vD}8$m?ͭe*`U*?e e3l 1\{OYsXcʷU򭹵y 7AI'E5rI/^$Dd$mn=1}vU$'^Cз OH؝$Υ]\FFlll2~Y )WS\5weP7| Ca}=wê:8d-a K?OܧOs<0覣qwgTa ;?-CŒG3xOT.pF,E)wY1!rX888 b?Nl؂!aT¨Q@9QܭkdkUZVi M6q]vF #_Q1 ױ멪^h8 5 vUnW9`+[䁦9d>NLw[ou^zA B-BU"Ձ*#2 &P:IN J>+ ,Ycn,\ReF; XЂ4nb2wzUW6m,1[MMM gׯ ‹ /*@G3>/TSCЕՕՕ{[^N)J}k ܝ'*@[kT+0p )!zroǻwp^߽~ۯnCq4pb%\\\N;{~vY sG闱D xha 0ss S$NoG>DSESESpG>s+'pw@; jnBQ>E}_F~in̍kTkh`byDTi5Mt\jv *GU,&#iϲ? ĆĆ$ᧇ()JeX n:eٺ_m…,%k@QJjNM@B{ԁCCo-Lf3.cSO<\6zLo}o!ᧄ~2w?a SSSk:鸦0a ׫Ye>HL#R#Gp?-iOaJ)t=NW40]TF <+p_q_qx70|(Ul!]K \OOVP0_|A>T߷hj)}Y_'xO? /0p &W;mumH֔ ?FJcB1_1pm3r3  ntT*\p xxxW_-b&>A s|4i ̻2 3l -G=VSB½ . ,β8  (P{WFF==|{vw1b u_}5L)R0"|txZ|J*ݪt œœ̭Msk̭1pqʼn'm0Yy;";Ev!C.mHG9ru^{vͻKt~t?ēlK4@rKn( /F]ݧO{PuZiUe3gτ /l2SE,y+,}WE/*QRHA^6M0u$|#F~`WLb(Vɔy8q:B`wdd$[mKFkdӲ\OnݬAJupC79 jꫩEz8H# AwMwMw?LF;h|}}[DHǺ9WKH=j$P^Pl>x@u>&8`+c=ug?!or伙?3km6_?L(z赢`yPh34Xa!#1zar/_|"lE؊0(|ٌɎw/HHHs+>E)S Uj*hL: 2UV[F,%Kb_j,_=8{I4B *t >yk3w=~o|[~[–C[m9{i ulԱQp3[j9$M8phF3>@Ҹo,KX4aiTY%gFdG;# 乗^{zߠޔ*ThLN D%K8Ɣ{5ոW.j.j.j__Kc~i]JWx j27pQ(i|iϧs ;';w|y=G:$ެ#?;l6KaXz{iEn5uc#p뽾d4OP:)F%>Onh^8K0rL]g~ ,X6ШI_b^e<) SÿbɊ%+,^yyCOՀ`c{ ϒ%?K;[l~t<拚/jBWW-[$6Il砋EA\%JR'uKAVjP(m6`V[CWҹsKvvvrlȱt!O(Т@- rߓ'}OSmNu/ 7\rK={y~:222p.\pµ H `lM6rt9Ggx ^[)axP`T="R{,. ,^:> .d'ٙ>xD5j8=$zH̟%__gggXa`8hUdMB\=rOB$k!$Db[r 7{ ggF&Ο$DJ3~" \W<<ț7􏤗vat_r~B<ޣzF,E:&Q$?w=oy'by3f;Xϳ,e)ˏO9p~ntͲ}$N G%-+]w/ęgΟ9o$}4M봮ӺQ{$$cRNH6$ N ~NY~uIӜFQB%jTo:oyjx5RM,fe#DrW'DJB|1wOB$Ϟۯ"~CH9;?^`Ԁ>Ņh׿LBOPz\O28ޞ#G6!8@ ~H7!L™3B4_|QEo >xi=+H"B^~"Ro!xA!/s_.D쭳.DΨQ9P]P]P]ys&P~\_~M_4}   Br{-BhjjB+>!&ՕYWf]%Dbq6 KY򃕵Zk '7 <'reɐReM,+K9r( D}}#GΏ0}tRߕU>VaÊ7:it%g*B}W~ K&U輡W?mx; qwMQELaY ,e)ˌJ} cz#@uouo^˔i3 _YYF,_ܫrr?HL|-υPWTWTW4}RQ[Q[Q[I&T -ZD?_W?Ygݞ 4>6`c[B8[ qa'!s*x TQBXV%8:s>υX;uԵSa"L7> B,Y.-?Xcs"EX*qU"W>L;bumVazoW p~-m QUVU[ $K 9sH743+{mﵽ={7?G,e)KY'Gڏ)É}sm̵1]һwIex7>gre4r[qnŹ}[d8Kl}WN4:脘 G@)SPuB Uӣgo2r+O#>R K!ZkmH!,~lqUŪbpbÉ ---M|aG>|XVtZIJJJj!YM~?22;BVjXaB?B«7E5C% />#m>|GYRLK]8w܅~إOإKat1._* g [H-Vz~7B\q~ܷEDTQ*!(w'#MF+ԿR!<~c#bD[N`Fˉrru(u&MBAA-Yd- 7lO;<ړvڭj'UW+\E~_"hF'"9,4ddd7!ܾrJ!j.r!:Zuz׎6W4SWuUQ aTD;R!!B޷z"B=C!K#id.~URRb+bo"UBVo8KRAv$'$'$'1A Nֲs^#{/뽬2s?2,)).D-*l~,Gxt֯ i|ʤS-A+ˎ+;8!"c"c"c9t鼓n&M4}겭W[^BDGG;s1b3gtO!U_W}]u!mPA]!srW*cBYgEB{B\hrɅ&B_+|Lod. PCe+WFz$?&!U«W ٸgq"Ow@՝Ww^)Dŝw^,C+V_&9>2-3i;Xߓ c*Ul\ Dˮ%İzN9?Y/ztBgB??WJbOR^ ޡۄX嶇mZqM;贷\BhMyx]T-ig^j4B k*Lg? c~M"6m DM 65dYR{-~ro/~{;9&&&@T)@$;w*{vٹg'R.K,*mW:\p%3\ ~GR_oϦ[4~_ߵLcי kgήa}m%BK[   sjΩ9?G[+SGTkP &8zh(X`Ua8[<C jnjnjnΫ; #6 ;3.uRڿ/_qGa 1DT`# _8|puՕWWH:NPDiɠ@ҹ6/^JE` qgKGʁ;*\E~5@ĉN?0ް{]z VzCȺʹ8E RUME4]uי3!4 ZB/yt/ ROgs#o}vϹ(l,_`j:W݂p %-Lϫǜ9s>d׍n /br8烹0D>>u}ԅ~kC쑑yܙqgƝ ׅ9///skci٦J5[xeNH_ D=`H!qY8C\ru+.2\4Fjv" hll6mm@/VY{~m o*~%L\2E< Ik$?9 mW]v%,`Zk&ib3ߪ`'-"M9閠vUw8愠~3ZP~ACm-b{1ڟ̛#JP8I "y׊>kr>r.:w7M!'dwfigigiJ|Sah@sρ>`\(ߢ|-`O=#G[z[ si2 }:~Rĝ-i|C*]Ǚ 5k`-nZͫ'z5jt.;Ǥ@ |*.ĐА0-l# g}^Y~u ;FGW؍ێRnu`3< ׆%%4, ٲi,@E܀TYQ$d`'phH3AxW HLon C @1V y&({%~ N|'Q};H@dnJ<*_ݗ`нC5*o03M F+Ee'ڱ]!g#M.U>hu8#1nB}Ā puEVʁ4AI75E.tQ7"ǟY!rcF#DoJHU>ɣ1~)K")$iP|4ZIarG16]3j T P[s79K _:Cd]O~mEC4<޶Sn Kpu*QBJ#N?O.>bmo~ -nߖ[m|8IXMV5}<ǡm>Ч~}vvv"F8 !߄| 丗^{*m CCCV[skenlJ߆H>,9oZii'p\q2$w哗OΑ#;GQ(~42LfWRR PiTd)YJ&&&HY*e$z%z%zvvvoC̃IdE}%ۋl/dOi$߳*? uzFӻH"y21ήֺ {wgU^ra-?F.C}` HXۤIxqEm"e\ R+Ý4m Tw Cb`HѴ:hƋ1"s& -(nJCҷQ>pp+)7wj-^ d+hUrXҀsY~!h)Q:5_P%"ю *?1Mlsh@ϫ+ÒkK-9rIh]18bp`h,Y2yxd~ 444X/KдoӾM[9z+ԍ[7b5XͿH}qHiD?!~q~skL^hw`1X 6r2L.goo'T UͿnusz$둬GYOKL  m5]S!q~2D]/H@N"xJ,&SR2)-rg)o g-aj$/d{WAVqDUia$ԑ}qP Rln@ؗFU7aoDք{kWUbw4h|7?},.RK.Y`C{I\'Av}ixz $LI0ȘMMMx4GңGKpx&={ZY 9'O`VY4UH-[eKeꦩnM7?/~^EL;w?[qp2x.\XYJJLpқ^M2ʖI.'!̜3s46s@h`h`hyd`]5UoW]&04qLlϷ=|0!rC&E!0[(jw &Uj1)xtZ< %όɯ!*kPT ψۧ{]x'荘p峧RP-$C -=A2fh` ;fEk&}w74Tv#r9h+ڰjGچ) m_gVj(|W ݔZ ,:~-VBxy0?SSS0M5M5M-mb$yaէUV} 5]kt-[# # HȖ-!_3,6mW=z^̭=UIaM^M_ [UK%xma1!aFFF潢@WQQ;|.;]vs7pM_ io#hL*bs8WuU2~EyiyA. p󻫒VB˲}^~Z"ЖDe5=^19^!5~m/Ҽ:{]Ϛ8t?IY}sqCE lࢂ'ȃ CZq\888/5wQsb .60*oaacs輸΋mMۚXsCFF I}4"4Y#U:3J@ ڤW_=ln-ddd+&#AAAPϿ=a$0Jb-UW>Sd$W&tyZr/9VB1]e fANZSW 60Z[8(tZhb%Ъu \k3i. MػrI>l +HSAuY:ǵpe:@O!rCRgh al]͢«c+kwr>7ό:Yg#p \JU$Ï-tH֨$\̙"u\S=矬(Vo3Xd[鱺(Q}&Gqú=86zʊҟ@%|䮺jfAؒ|NRqK{Sc%~) erEmGDf(Y ~M ݏ?Lw&&\|xO~1W(gZ麟4H& G@8a8NU3O),{8i9#wU~Wy?~aСC hsıc+VvJ)mɇA֩uVAsM׌E*U'6 RN6- 0=4g-qO^{-17cn[ݯv M 6-ش HzR=,wαb{ l!\z8r;2 m2A4c/A\ijHG)[]>|puW4"}y r^f?Zbl*Pw [s?q{iS}R"v߁9 ;}K?%D"D@XLGS<@A'55U6iJ:J 6 7m~$Y|T5[cg`ՠ36.R?jHS #\u78Mm`wCn0sY;gٛgom|@ 5Moƫk VNFF?'dOs+>΅ 9z6lLһBjV`vOy4k3xTQڤϝo|sW[wɋ誢ҡCK9QkN_buZ~yڟ;{C0ī~`{Ԫ3ҟnV0a׀ On_xxv.`OoNqS˻%YgQ s 6z խ.챍h{.bE!AM ^66TW.UJ|Y:)&&*Ǐ!_;+zE`q@:/ +H_O\ ``uYH bjx8-Z7p㤗I/^¬*Ϊ!C uȽ9L.\J?(wsUW^0R lWٮ26DZTiMKnVRg 8w(Pڤ.poὅ[ɋC]2eID:[lGkyQB Fbjȿ]QTwĩ4{4QX>6@Qpb0`_#6Qմs[.r9q|jQEF,\Q#FD X8x!pm9aҦŖ݃u,ve#4;^JmqOPt {꫰&ν$,^1,{K!O@Ao.ZTd5wX1)LڡO{vc@(aϫ08ۯMee[  :!y|&nϓrbq_AKW5P#!Mh۷ta{cUzw *UDQZ2k,x>Mc㪏>zojnmdddK"*ET)OR<16iczrp8q4 :58c2̭oξ9[8q$< x,OFFr)2Ȱ"àPB e3`i#&ixwwywg8}:q&$>Mj}zDs~! h~Ŀt|Y)~F&ɷʧo0PRlN#z{৔@~vOT#As^\d<%C?U"Isqa 3VMcϠ^5"͠#Assl0bȓr+z>(H:JeL VEU>rrY%{v&)\;lQ9KoMȽ*ܫ7Kpedd=g"D-)[R[j=z*-[fX._V vyPTT~[y9嘗c QDFFFF}RlUʂS%JNx~4D܉m 7Hِ!e-&&mgŞV3+t;=JtgEncŗ2. #zi0H7&˫3*=lXQ5"cV tw[!TMM1zr w׵`FbfFL7Up̀" vA-YY].qCA MDVƯ_R\6m #>hG.{bT?&I+J8&X-Y+~CGsfiOK>-ͭM ++ 6p`rWГwfޙygB湛nnnmddd $Ih'.66i Q8ZҀE*?rJe/sfik@GGGI, <,zA}KV~XN;e &덧EN{I-zB(Ce5QMj@E`coH+rJqЯYHPkO5+qxd['~M;;B6 EԘ??.N|1*7|VH6[LJ|>|o۾m߂9SBJ7+ BR!yg$H>|>kZXRT:pohbn, ^ǽmx1bEx9ė22%v}c  Zh#455a=ݒ Of*dM}m\!!j8`RΝ_.~z!x. {Q]Z9 }]';x8،RVE{llFhҟpaXytp č Uj"PyO݋v]NCm6J2.Ȟ>"E sw0oȼO444 ^bz&}l -ln-,W'*nG/^%JxUUUsk6q*UB~ ȼ\r=uP3I' ,|N|A41{_bcN*{/s7ћR.%\,gqri-ۦ`e2,58#901w/zD &ж (cmQr0m /_9+Ó ;De1|aU`/ dl2@!ӧN2w/k>| yyhshshs@Hb6m[ KũܪX*^^^"}"G.\1ecƔ56222lsʉ'(L,cwS=Fj ϵQ⺔F5tb*&~.\8*74& >r|ߪ蔢:@?Bo5! p;t5TR҉0r.!˪;$'g1Cx_yoX_~V@}}.D㓎O:> D?O3wgFe] t-ȼOtQ(]$I\ڤUUUT/?ǺVP,V,V,C^22̄ņņBIͭ;$D8߽|3R={lw8+2_G~U6(t6z/~ dVtU>\,"e9d䃚4FM^*k_hRow \nWN3OY uB};N2*VJFSޏV&Pi8 8!kUj$䫕G T4/=~!;9};_oH`#߈o@sTsTs}cu-%-iinm, &47VҰ?[-Z&}BG 7&ov7x[;K^ԷշշJSO6_F<E/Em #9E|~o"螧{ؿMAh_z6.*T;rBw)OoQ bDN6pzz *QoX}7oTM5c3|Dor_@8׶=ejloיz;qVǭq/^e&`{T]MĞ#vtUC[_IaT@[>VNS hVsLfѵ >KX_Y=@E7՝^2ⓒ%ygᚁ:(^dWB^aQâ,8燌тHbIPyZM V-ȤKԠAQ ---}ڸQ6qEuxDXoG:& & I Eu揟+Y@pޯX™0wdV!(!_N2# bU|NQZN(Ё^*GU>G?H}5jU,Y,TFFFB'I:׹nnm,[jw([#K /*VU[':,:,: ͏Y9T,dC~#ٲY/~sqct 6!1Z0/ 2E<' (JU tl~"D%]8{W]EZ-d=|XRjd~|J rjȩUA`#̭tHC7pXa (:):):['vs͐X)RbS4:QFwSx(e*'D^u21[ԁq'Id, 'VZ''w LwM ]f$Y3^_\OHDxPmU^`VkzizizAԫWQݩ2222 b<E4 {{{FFFF]"vhiieJ0p i m&Yg&vՅhMd0/f h4:"+J3^=%v Q%iԊLm*@HnS:ggg$Ilsẇ 0 66 0"pÁ娹|$I*0].,7`}\.pL;pq4"#11p\hAL:8<%#I`?1d@،o3Z|8hhhH "!-)L򐤌חIASA+zE\X+Kj 'L/c xPQzJq|>[0H.+ &9Ϥ^ǪV9LEUE+fxVcdIӓ[ E܊Xl'N02222?R76iknE, A`n-dddd>;]wAAA"W2;PT(3ROәrn"hk )Wt"'HT@%hx(ŠqbwSne* xbI"u>)&3m6m ΃;XȤvvv Ĩc1iWc 35? q8ipp>|(w?EլM}䛱spt ~nUc3Sb%_RV~c^4)G6 kM6Aam@H +N"ifNNNz"###.ڽڽڽkkkonm,)UX2Y{s+!###`?~ϻ_?O$N pL?_TSP;Aƨ{;NM9&MzWe2b4J|;w#Zu*JX5Z7V4k ~*5$i!OM̷ /w$1*ArJ"2XFF!(̭8A y6`ajZ5@1Y XkjCEnA>u{}EFF Ή#: Zj ",#[Hs/㳀+/!cq b_Efo> g Q17HIChH?ȳ.Ϻ<@URURUܽb%JDMHĎ;BMMTgW&}lsd)趘[+rU/W!ککک@^J+}`5j<оB \-س]`wvU[Vm!eUʪU׋M&jõc,X0nFR݋˅.΅.NRBKKK*i|?܅<ަݜٝ3r&"D^ zrp6t~1P|Kg 8~ws_gK$2s wDX; wۃf@xKEkSRU=9QH(9Ut ] g B^D yrr8  SaxpA엦`SZhjI@WX;r4g3"Jc)H` uY|15 "CRo<.W/so=@ dtu: ޡd<QJ`5j`+wf'O6mIII{зu P@RZ)VPEQT߶}={;;;PNtبo y y y }[=BP,--- `"^I^I^Ih6 Z*(D}wׄd$; 1Ep@z‰*ǜKXXE9 U`-&[];o80'(`.081P6HaA]' F8aw&#LA}X/ύE Y&-lv E_;"{D D D s_ ^A ۨ챪lU٪2ͧO?͘sIrᚢ­+*Z@=:No}sHNJ*n `rU r \(@hQZryCLҨPq@x W~G9 {d(wbEߙ=/^ ǔǔm /9 rok'fH̐!,L& ӷ5JtCn'炠O❀@ X{||==U{T ''Rzf KiQS`QN\1B bXph)ME8(D*O!0 lB Bڳn@OzAkLE bH ` xO)G Fٸ5$.[N/^SʍA=XW'.⊥z(7|PQf\͸1 !!֍_y}[`0~}#FmMD.] 8btvm#cG}[=& & & I$m Fu_wbݫok<ʣ<>y}dF/ًҷ@ش)_\&9r!hR[(X@`GZr3>tw>vƾ~Hݠ p`e9B&(tRSƍi3d:yGhkvHKfk.= 1g@ ?Oӟۊ"""m VLZxXaմPBiFFGm|js9WՒ-#eB\qOqHTYYP-HTGveT>cf 0z`J@t\f}@p%lQA=/hi $Qt?~lx{4|/GCC@*u,g?t!AY3 RKҗ ӎ)s2"[ӰfÚ kf!f!f!}\qǕk}`0~N}873`/QII !D-IHW ;*m2ZFmn3m`x#=o{ {D@R'N aaax^v l !Wc\ X?)Mljp@f6;ϡa_j8ӹqXR hd Q (2 M֖x9=%AٍfTmqڜ'PR)A?sC$nHf/|چGv o~ǐ#~=$--Ț_1'K.706 iҶmh1THrBgMzc%\=N{ (** xK&L &Lzҷ5 sz8( 毘bҷqSn{V"r?z^T&#`%@Ͱ@l.5j>ozΈk2+V]eqp'Qfpb~/ Eu.{x}W x:uP80HII{ / t&v<ŞbO1>N7T$G$G$G8CAe(UHKm i$i$i(j+j+j5k<0cǬa0?7gߜ}sx֧[0CP@׷_YYYD&2p>o%wwCRTϼڨPnx 8+\`1AY鐃{I@:MUc#ZI tt|?%_@Y8k2*_Gsľ"F$W2-CY6Sj>W (԰U%mm8@MѸ p "&QvLN {#S#S#S///P  @cca0?)={hM $''CEWq6*ئo өSOF7Fv,n[ܶc0O]]puAW5C!f}ޯzJ *-@8#3ܺћ3{߾Pb>;R ȟ_^c@ĦrBLkn\CM{ < 7=e )PPh>N:_~U 77b0~IL6o---ER4Kiok K&lxJm3ugN@JJJFYYlbIJa0?K/H L L Է5_@=5222qǹ888rȿ87`g˛)'#.s ,g6He#0l]BQI Z@싌IeV l.3) t$@[l -0UZr[o:&F};5q?IfddFQízA= YY⡢-/#{_k\S^Xd6ϻ>D.N7@ז][vm 86vlX߅aaa>`:XձcU+3;0ok :JMeRoGiが362*dT)aS¦a0?m-[<Ж5ּ[n@^{u\g5ߢhyWJ qf:\MQ;IGC~ D`NVlm\V: /:8)kFP2g ѳݎ =x8 E\~"1 Ь1g@r7QqŁqw~(D[IG("#0@BBvm3Ŧ5da{@iIOqgde` d^TZz`sve:i/[/[/[+ۯ:О[^z p睞wz iq4\-ihR\\з5J#&t7LHzo p 33S+ɕJvavava`L?\h~)>"αc;Zi KՁ{Rg=% /v#>:brp(9up`{l@ލš A`~iW32mrXC4 X[ nG,ԏM Pz44P_CLB%@`]Gńƀ﫛)GzS_.@mwhP& ;p36;TMu iF;:{[SSS3r}.Wz_}%}[`0~$ u/^dN):FFFC'yJS2T_Zߦ ...Oɟ?mM߰aCV0Q8e}5 ++ɫooٶg۞̫22@db" ̖5@\ʭȚA+bhmGUdْeK]GvU{ AJ8i|1l?W׮(pGq8SW_H~x]w-mxN)MU\1׷iB#G;wۚo?~`0?p?~^½{ Zڶ\z^`/#\4r`Zδi9@tJlyarE@^Y1Z=rK*["2b;^1+ ,%`;>4g;e*=ﯥ\LwxX?!Хvc]Ư[&q33o!8 pg_0r H/_X&tT6[+%+uJ9"i93f [ζzW/ ]ND*7K@1T&ÛM 2 `XaါC/O<pM? ~a0/lSئʞDDD7 {DЉ[Ri;4.!+/+/+$M b8]i'RD~x)> 2 , G7p4ay+9@l\l\, `҈toGC>tbccmUMvw}f(dv 7GQ n sx{텷Ap P,7Yn?\``7}|yS?nM=NVӯy%n-|?? s|^6zA䔜JCC3vΏ[&[&ro _"jڍc~-#`5!Pz!hXT`wo?x8l x9SUM09aW!<$?ӤKF@ֻw[gnMJcka9 ? ^,9( <Hy-e+^L3GWJRdre\RkirUS. PXtTn ed0и9t[ vno3"PiUƏeCJ9@۱D_Z>iNoa Sg/#/}>E&2 6j6ȷo#&jq&0Ihw-8?'O| Pd0Mދy/8v[dOȱc!y<]ll *DUjoKNTQ 4,Y6ˎ-;qfҷU 㧠n{zO}5k`kfkfk9_+++R1$=0>PPB#`MBvnSFB 3;4K @ac@nb`k^;+ HO_%$5N@.Z f.7YmJ`+UELQ"M\q0Ot0j"hm\k,چPNTmP.X@Q"gbjoYsf_3CwViq'o`mupl#4wq]~\y N @8e1`5g>I]Ӡq#u+խT0lpA)`h>i}{{{@̱c֤`rXb LTLշUye] @ ߚ*T7*oT^ȏz? V+Vvvvl {q)SN;u:('= iHZXj\1s@W^zu9񥐵mَ>ʛD? 6-X&>gorʶ8,h*L_٘QQ&S>@rr; Q: Od딖@)U@ 8>w{6^o\  0WVn!Q;9G㿁KQGdjjoЕ>S[\o^2{ 脬)yꅫj`\PrA𩾭M,M&サc03_SiT~x =U8]ߦ 1~1~1~|||эLl&k;vok ^PדoKߖ6Mm f0ӞxVzB '2{`9rHEңAZOԽgJL'+ЉȊS)ur tAI+8/Fsf(ñg 4Ȑvf#{5 Ps\C/QwQd4Vnf7'0I\\PF\`hycoͤI7`Ziȫȫȵt*H6R6R6vo۽mԢESp;. Bd!JƗ/ok'N|:@سgam#QHޭC\bf̊ŦŦywa0zA˫/8slgz;PC1`l뱭Ƕ5rAG3⮎ @oo-#LyO;13\ʦSV9^"b@QQy/ӱxAf$Z0j+7zmkM68r:tqln3f8P[nۚ o$ >f}z}[cĽQi9]t7ߡoS qSI I I #UtVQ0 K~+)ST' >/X)X)X M46 㞏,P@㨟Euv~x;vK5 /E_9WO(Tr9!@˨EF: 1 Lf8p°SNSۙ<)Xø`$Ƶa>|:Lr&@m Z>X?tS 0/@IWQFlFReiB4RR0Yp݀ȰE0v /ג:X,_Cv|mL0y`{dE7m85끌E26lRRRv  pv풾 6PA)5὚UnRN/0iaB ︿ַ5ףG_qm 5oNp=ui[4hnk~f囕oV^xM!ҀW8ra@R;'Ľ|] t A[ B<0JNO{q@ڈ8RG X8juǗzY^*ls!wLW~r ((XK3[zwbE"(K!2UFXPYt# {l\-`[Ʃ{gdSg-ZƵ^:pk_hz酦?G9x3 ƯW}^I6l ןzr)|ȇ|`Ňҏ3tzoS TTT3 t::*xLBMBMB" of/(#(#X5|UÁ7p8p F6 uRO`939{+)-RZ.G^O;A4K4kSԯz"c?н˱e%ZfXO +npkE"_?%]!@@MZb@ 4\|I_Y&3fii@W:@XNrxA^nN+gn\9Jw:tLzSf"}t0rOyykv xlY/Z X9P WXyj婕=){Rd}oKyyy@@iott}Ou_}]5=%zJ}[`0 N8Β;K:4Qyw ϵiC r}uEA`TzUl gemh. 7j+9{X@ [ w@hUEmo0i 26%RۤTqR*I]+)imdk 9'H {pezus%} `W쥠,` SO&ƀ`&XHe %©#Bz$(Bq5C)B1}R)&k7_b{@82_&?OY>[o} x˼eކW5nk8`mo&v o ].?*#k6m@VX 9pÀQVG\l(;+;+;?v%JnӻM@н{A-|~.>}{303>c70u5u5uKKKcp̳-["u:X#K+}[ezWњot˩ 8[6}3eה]Sv3>MQQP]w]f>f>f}h􇙆-\ LLLG֒C.4ë5pr\9ЃB =lвAKY#Ff={'^^^=qXXX7[\os> !_B|俗^{+Wώ=;~uny>h $$ِ\4|JkvWW$3{1QmG.Wo>EGGh٪es,Y*a 0`<Xslͱ5FF!o Cȵk!׀s>?9u|Nތ Lg@Wy0xMWm@-y:IT'D9RdF>Vvp2n!܀1#3^;rq4 9e{$ru431LIfàOOO*TPB. 8O Q%~բ~䩷J_tC!F\@'mM_ +/ii^4.մ3PkH8@xFf6:t59@i 39YbM Q J@2XZ x&NIjHpw3'|1-RH"QQQ}::P?P8qe_? M64StN!绲0xUfUUe`x^}x;wܽ!]WڹnCDre} G* k)SNLj2$|biU0NR)R? 6@Ԯgz75nj3$|8; 9('GTkAiD-˖~n:hDjYNl'yAd ψLVwLu1D7<_cOt{yg<[n'/ѥ"c=;(>[{n Z}C[-9\64ȧG> ^uKDt rn*O/:%:%:E$IB˶m/9/xfPed}L#QGeGeG_NM`6ln"kg'2) 姣y37^{nK*.az8锧SNDuhԡGGA2e-'9ɿ. IH1qiĥD===PFFF{y幗dHKK5jϿܡAǷa g #AF'ltHZQZQZQߏELH8!QƔ)\OU]nFLe2S &`nAGC=u_}D{iQVzK99'L}o2\ '9e)hn#13c)]y_Ak"{;тD6fDL r!H0fO.Qʼ)f6%E$E$E|UA Rh}L4-yZd"""/]0諢"z'X| f׌]3v b`2e9&V&V&VDk1ʾ!RD)Dn&w~Qk&jV|[mD -" '|O1ע9oW],2-2-29V?D{QGM:iuhd$y=t DzNh' 'F0HD̂3 h%$) mQZǛA7ns^ݯ?\yOϑ=GIT*]e9s2xnBR& #AW6Cmݩvڝj~J;&m?L"5)L>;qPXcUUˠcD/Bd Dk%k%k%DUEUEUEDfff_W6"|)EJKy.DKb.% 7Wy\wa߅}D\?s7+!-ꢫ^~k9݇]wiQ*;"pa\T#2!kId޴$BdUdwȸ1 9%³³³DD7boJXvQ[ǶmUWe_#G|{zx#?X`1Q%Xf0/Dۻn&M <+/<';/D~YKܓhd`tDfߋ쾑ANGLt{츂h):XV"Խ|D e܂H/龤N;i%TWoJcc#Q3?u}6SSS QqaEDrSNN$Z"yWR^<~.fIT|Q"p Ꮗ?HQQ#4xu!2hl9jsPعsagdW't MBwKJJ軮ﺾvo]v {<{ݻw@LXLXL|/^= jZմ@)SE"\("AH`-BKQGi}V:'>}PBG Ok2_KA uZhDk}S~Ej===!C 28/:/:j=%W\]r5xz鍧kg#}|d}DhNrA HE XquMpGJp}bND:P#8[XCQG`݌ns ;K EAȬdV2+`~I@FUk8SL3C|S߬Y3f@']t} 8p&l6o܏U V%Zkۚ/y.\^^3g׷qWK"'uJ#CS V/wpnֹYf>>>߻$Ep@6uiDOV1\fdȚF]v)E:(f(f(f@I‰ '$N$I4Ii(Q, 3zFd\X?~hm=z4`ooX[[uDEE+7oX_`H!=Ojq4PBo]&O<}t`ִYfMrPˋ2/ʼ(4YdM5ok,XB& dNFCږ8m PvR'jw/ :y|U:ƿ-@)7/3+W{B E??d<{z_{⫊*?SLqFf#H$tMh8܆skW~ݑ9VNQ/G%J΋:||:a 䭓N:@!q!q!1D(wW\\ql곩&`J+ݮt/iii`,urr‰Q/( 3:{z|3jՕWW^]|;v{9t,ZN 4|YgZ_誯x#v[r5h:zԈ 20)OVuL'ʦ^ u6667|{ F.BG.`@@qc )5K_{N?de8\sMcOPB uyE68RH#?soIzKOn*V3W ^L-n{K Mp(ia' J-#kF];tеa{z_= Dddaⵟ={|8-r5*[N, D4oqQPH%hC26+>z7oWʼy)saJ΄K; xnF CS׋2e<.TRa y}P szW*}XLI5^vew?l׷5nUUVQ(ѷq 㗄߱(b_7`z.|||%@*RD0߉>VYYYŻ^ #x$Iy,^)5R"Wy+'ɓIZ󜗊5@]e@Qa? XRܧy=0}zx厗;r{y]w1coH]ǺusБe )}&M``xL)9^^tJ3+>j&_GUhVYۣn3~q4# ^3z5Ĕ)S}09*#7O5%$$Y3f͘5w#Q0`DA|u?QwQwQw3 yimڦmmwȺE)Ə++#U)cTr+?@{nF;;}Z' <>99   G=zN| hҨI&0z7梛n."H60Sɽ=1kxӲ*QtwgҟChhoEE:pWWWooo g98 N9r#!)H%;Xx!|!|!Eϋ r*T Y#iq0$tlsjů3&gL^WJ_Y]lƋA`Z̴i1Sy9?/aNœ9@xDxD+?(kR|vl%;92/B$3S)Pz޵jCӎmE(B vy@&2 .\.\p'pBߩ7`x3J,UTA{(Q9PPOWRR.xif,,FHR?jo ~]}.%^{MMMNNN}[omЖC[m ?03o#,%$$_~8;쬳i<ƯfsD^I, UfTQh޹3 *,*,*|ChbVP)*EOt?t)OGzK@ۍo7mpM3mԷC+yTP_{ƭ:T?={Xw䗓_N0xQ }Pvkmv=ᗻzMtWWgJ͑6G>>l 3"3"3:>b#?M:4;dC"wjNr~{Ͻ n &}-Pt%gYwj&~Mǿ''PZksP!ԊZQ+L3E2g |#Xf18O15Rkֽ[n]}[`(/F7n+ 0֥K[ & iH' ;w ::e1 cttt-ڶh"e[v]\tqQ aھRC1 Iӓ'My666MO6=u'y$uVºWpMvF2̉"U彞zUw,X1}ѳ#6S C[ˏ歛76.E| eJoG%oJæ>l |!N1<#1lಁˀb}(߁chfhj䪑6o8<ói;vc_"#$#$#85S6m:b  ^5iiiC9?ϦMuJϕ_[Nvu"95E[\s.ŀئ)3'M"ʏ~E"nPDZDZ+y<^{bSxz 7(km\v+(('矜r> ,, [`Xc ~k4d:|߇w z7x'[m a?;w$ h(h(h6y3DEE"ˏ]vYe!pjکiO§̓_eeekVZk5бQF7tz _$_$_v(^*^*^3q3q3qznx-^qSO+Ow_15#W⺠p{[E( jDi(9̒3ssɩɩɩ@ЉxD]0ahgή //Z(Ph!ʮ+hb| Nj;@5_ 3w NNN 0px~]wxRI'Zǩ~3QM~1"pǟ w(ܡ0e]u]z}7 &&ݱ';ՀTw8M6833ぞ=]{m$I/ۿl2 }J`3F~S ( K#׼ֱZjFhNBY?Bjq @2 W;:2OqܖWSrL1@ᧅ~ _ |)|S&}ހwwwPկ_U? |+W<x;@6b#Uz nGa‡4oJttto,Kynkp}}}{Xmb5~)b_ӭM#p1?s-;Z6omleږi@Ľ{#[,(awyCt5"#ڏkׯ]?`&%MJ3LLLbVĬYy[zU]jtZi2uř ?re++hqw/\@7ܥ3g =>L8Ss]hveo_s߃~qk /۠ gf7_ǣ~'rr lll~*Si = PW}걗KTڼ㿿 U`O8>qBF @ з ik|W~:6EmGnՎpq%\Z-[h"E4píeX~з?]X?geeO6=d[{lO>y d̗O|R$͙7gޜ^zx%11|Wۯ_ twwwwwȚ͛}ǀU.OY 9(7`ה POlCOvRg;KOyN=I>p!Rﶢ?JOh*Uuy۔۔={dDFb}{{{8ТI&-h}+ y_}klW{ )~0W=A%Eɀ<y7i09 ^Qu6l #n:wXgoT/[0`,pqwclޱE"㜙QPP===w+ޭxx8q0p{Gwݱ/\A,|I#7ySRG#KKmq۴t; JAlUL:"ޮ$@+D\C2UKm ȄKgsDp q 0 b%ߠi#`N.%%2 h" >vhX>o}ر|ˁV~ZAt'Z2F\YH,$`J)4?x la°Zt3~$LMWݰMt)pK/qlJܔ)>d}>}")ަxȭ"s-j[Զ(`l6 7 |B!vvvi֥f$HDI$Q 4"4"4xi泚jA axW]wŀ$$!}i/-[8p3mٶeۖ_%ZԵkQd95eccX3c͌5@yy9p> >NQ4+K1JOyyTzaYyAR7Mm&QF (CbH>.5@PہiJW"L{Mj,pþie[H׌1FcWO\=q5}- 5ϫ:ߎ?~}ֶ[nm:wu5QqQqQqQ7nFZ{ G܏q$5hJ^% f {՟~X*ՆW^ Xym嵕żmIDATmYk0⣋3gn'_9B].sy6i6i6i;w[oNaNaNav%JV+VX,[/{%J "".]><$f&f&fS6^J/O O0ƬnsrjvQocTTT 涛̈́2|;AKv/eƹm<\D7MN  J)͍^"++Ky?T(BZc#pTT"022222Ǝ;f`릯c#GZmUUYnػ`zgn)SVN-Z ]*t H#`"J<1tR4Q꩔ELJFCCCbk֊E kPY%G$G$GMj7$?LQ%&!CHd$2"Y,EDDDxgxf3eOBa缵[foz?R*u4-hZ4v=jHxVxVxVw@@rT#97N$)0"A"y[0LA^'Nz$:P@ccc ' (|0`~) 6)ؤ`W{W@R.H]@hs͍6>I?U902R:化3Zd0~-vv["ݦMwSL2AZEQh1ND_0߷oq߂;L$2`rO_y*L4*屮K%Ϥ#^ӲO>-KTr%k9anj`iin]\Z@d5jcԄ*]/abғMy muT׉(\ʹs~j\ \NNhO?sΔ)SLm\s΅7No 16 i#:y'QwO٭[g"agaga De+\2DDD1u_GݑxaQ}M_n>(pk/1oUߪUug_mR$ ~Ҷ|ΫtY{CCC"p~GeZfb0x*@" |h@]jw \~id;`0r/^_l|eX^{ t:mUhکi+osҦULGRӫS X`3*G#vU{Wm}(xk2evF4+qøa06)SLTz#JZ3FF2/jL՘DZ;k-_U^~߲e(V@ZZ5`''' 2e˨o5)PQo2)S&YK+GR4hHQ_JRxv&&&uB=DUfʔ)SKkua5kh_rۻ\C6R MJtAӪO>k5kۆoӾM6%̛73oJ,_|iKDܥTZu'ͯ2xJeꐱCK$ rP0$$!B"C"C"L2Dbʔ)^yPCD/z_Wuu-D77x3;&w>=e;HRd7ԑ]J\(q s_R2@pfSL yYeO۟ ÛpmsB -/\+lSLs;wOt"Dԉ(}dJOV=:Qȃ!=[EF]TfRDF#3g c@9Rop}LLL^w{uW+]lw{PJú,c2eSگח__zS:u7ȩSAZgL2ek*oɛu׉6M}E[fFh"""vk-b,{!|< 3^{U]~o텷^HXѱcE\1f*ލL#<ݏx bʔ!E \D$3L^-rRu0eʔ)\F0QgAFY3g͜5D [Vk@3N%s\?SD6zrrroPF(#>j(c.U뗨R`qJegSL ByKL1C}.w}^NqYqYqhẅ#2e˸V>L2e;7r͝NsStLQ sM?7>>>H+ퟫB!1c~G]j_.r'FtS.\Y\ 2P3)SzUHxᅇNx 'h0R(R x 'FfC4h#"ttt|C SL20ϗ())I}ۂཻƻDOT>Q7S̩3ΜۙXpbqSiYR}SLFشicCdddm#RiiiDD222ZM%eʔ)SkZkݮuǵkUv1x EGLfF[ķo]yRJ+U(TXR`RRRH/1_bDtQnw3 PsJTŔ))"--- "gr&gIn 7$xH<4b"\\)SL Cu8mmֶQwwV}]\–[FoMdQ~~~M7YDwɷ3䔒SJ?? Mߡ>*=S3c”)SP^x㉎m>f}x#B I I ID}o::L2eTۢG-zs [^nyy\qM+lʿ~+غc%JP5V9o?xB D[lQE*oIS*;6C|ժcʔ闔W*^U?I=`n P?>Q}}G˸Zb0eʔQk[FnM>9|r_=FiՁS;OGA!Q*wA1e[c[%wwwzHIJR}־Tф O qGQ|`0eʔQK n3`k"i߹E#j ~V{YgI2&h/6bQG>6Jxp`WG몪TƔ))?== c&0H$~x3F6tdS"a0^l*&SL7cU%tZB>r}zuAۊۊj僎L5kD=V喁}?XpWX'` ^zKT*9R$SLsf}mNڜ9) װLLL$|IˉSSST)SLPM`9w_~#{%9sv'9p8pBw0Փ@ ---f<~DZc#ߡTڶ-/;,F|s~P^ SL R`.]<&PB M-ͨQ-Gs}Ddee/SL#DFō#JHHЪs{T^n~XRbIZ:}W_?Qݑ3tTVPVPV qtG s6Ub0U,R,SLWvڥk={jN [hjiRx*<DfmicIǒ`ML2eyu1[chLǙDZon.ˉյkgT`[":<<=^0›onȩSY[t%0*}ҏV)SI5kF~9n:tD=ZhɲoX0eʔo5:$Zmۈ2glUFs㤨(>' ]; "ZfUdilll,Q=>6?0b oXпcs@2eM())))I;Fa1p]p]p]@T]v}&tDfʔ)_Nu86\h3ѱ>5UӅd$q!Bw߁"|aA]} /z~_S:im|Ng;YMb5%/*o9**hLL&5dk5ѸG{D$FI^XlOP+W6Dm\۸q%BGtDG|b0eWUKjSyz靧OyAravvv%_ȸqEӟDZ/ӑ#qG>jD&&&Z:2e(/x T*%ѹGž= {}YXXz7CM66DٗHQQ9wߟOبt߅ѿ?6F*{3e{бdQɢѺ֯[ODikur /AF`F`F цUVmXE_~ye aʔ)SUS_Y~E43ff"rrr1/ӠQDN^N^N^Zv1 ͼpss#SN;ur}똈E"EDǖ[~Vz*̛c߈EW`32k؜9ksh읳wŖkp増UrX3fʔ*oF(v){){){iU|}7 :3332"gg^7 uX a0ŇZ|H737nn8"LDL4[sJ+"Ǟ3U*UoLj KXf}vww':dvghJG o7vQ}N$,,_l(SL Ey۾rj-Zhق'^xAr-:/Ͽ<` vם_L -vb7QRͤI5_ IDs=zJ/ ._zu8UԊaʔiT^GtӉN}k5ץK_Gۺn=q{3c)SLsձ$ޙh陧g&JX4a/\oHM.7]-Oְ7}=Dw *PCCAAﹾ3|5TTöS*BG>RHi" /hbg\ϸ1QɨQ' 8`fwmLZ0i?F6 }ᦒ;T4"EF[׷O"qH]w=u T/P×qxDfAfAfADY,w6?V^Gdɖm\qFM26i9%$!_?TA aaaD{O=7K3f.r00e4׮]yDCӇM'zs^riIdI;9uuU+ykə zTQPsˀo떯[nITҷoI_tL~> -0(x3JSix~,P6Wlk&%MJu}rD/':6c^zYe!v{ۍ(4!4!4O^?!zRI'E.r+{vٹhBڄ iD '6p"Q>yCu:rnߩccc7ߜ(yQEZ/ߥ#@ʹ6ww}D} '>o}s3XL Wu5hZѴ"Qέ;L}"EEE "R(%.Kdcl...D[8oq DCZi=G Hh/$'k*UD;6?^ODo[\VS7nH@t '/{DV[}/k[%z||IAAOĔSOh.'jٶeۖm11ldzQݺu֭Kq%_C:^DzD}#OOOr~9Կ@w%1jc ^PH~PmFjtr?`x0Y έdEEEMl:ĦD!KB,y4STEUDG??ω7 nL$WY%YzW__}}D:p@6ױ=8ݫw޽.w &|fsa= j+++D>S}"PkC b1ʘ4Z=ӥ^q{D͚7kެy6# %e뗭_>э 7\pP|4zz"7ߘw˂($)Йev^[ ȄL$g~S)؟fgv"Ave9Z,9丒6}VGdȅG]v5dszI~AO@̳gn=0i 6ҳJ*=#R4P4P4xu]-d2pÉFUoT=?:(FF޸!R@O˭/J4Ɉ'#޳}0J+d.P O O O%ySMڛ7moJd7n|pch\q ͖7[ތ(QHFDHׇ%W\9pQՍW7ήᜓ l޲yD#kGrkN9IdŨQֈ9LD8B o 2C[Z0J4v[444,OBIHTn "E,"Z:l鰥Èj]vi"#>@"""zOt|I'VVVd34꣫>"*Wޯ_瞌Oss-ZX|c ~} =9H>=}:啗W^^I4ɔ&Sy{{4iR3l;:+x u*ԩPhhўDO &J4%i;~/Y=zzz6lnCTzl鱥fs]xl$Zj"zAM-GzծW#rvR3 _Yւ]*m$LAGrA{QGpߘEmn&Qww?H$JzJV%vnݹuV">U}e2x9Znh# <x6l6j/] v-|.Oq-)(**ԳSNDAYrKW&L^J;v(ha':u8aOÞ={7VtUtUt%r?~Q}gMs=;ۆۆw ٣b/2*DfffY+J\/ؖd/Uʫѩާz7@wYϲ^$`[rc{lp&ڲڲڲD?asdddݲn!o#'2  /J ,&Zuu])?Dwa{6'gŻFȡ-"݈`Km)X"xebÀ!C6V4\pEC"GxEH{(P!fUUmV5 *[Xj,5D㞏{>9Qiii6ד8EVYH#t"1)bRQĆ ?B$$!_gv{^?6 lնm]ۚhÑG>$pf IyyyWFDO$P|r|r|2ѼyB_*~llKr1b/|Zo=l>Oӯ<+rnCьjN_!h́ޟf}YϷYm"և>0x) i3d^ɼъ)+BDy${ѾDVjY׽ZOSݟT'rˍHMM-!\%{${${ݚvkڭiDkwݹv'NTG5{A>ԖD*FU"걵[-]tR+㮌2(--tҡKڔlSMI"}},דK"4&TbR " Չ,7FACR l(QW<U]Nvj"h^~y @NorIpϡ0-a=e{ QPmTπQ~tEKYL͙fR+Wz뽁B;a0 cǛ|2=ݶmIےC >@ V%l *@)(✀'&OLoY߲nL1N;UT=q{Djh4i^cٰagpVͭPvj@KW/ x.\lw20Q(LAx!ߛ?'J0 Xklzbk |\qY=uI`+i*z ,j͢6Ef#逐/|.[$HlB ]KZn]WC5nIy|T(N -XϒP6kی(lԳ߀q"G"gMSfi7SqDԍ,Jt}ٍH.?e[ݥ9Q-[JWereK]\k/;RHrEYDiw$:m_UtC$^?{3Q`ݳ}=Ē>e}ʚRk-XOd@uיNt`ˁ-///fs!$ \?>#VG_r|q!CL5^xADDìY#RWWcbbbe?~J/OT?~BK.hnܘ1Dsp уn>IGDe Kt/sDgfqfQ*H$?-?-?~e=Crt*tuhA/5747476n8"\n`H/,[G}u(/Y&PCч{=ߣ?@ 5Ԁnt?^{%4liRdB @L`j`(4n5̪0ﱅ+`?oG;Q0 ӲN3sվW-\r)++sCv:drXSw=2+N@;\qBn5bC8NO?>'^rv L'@ePϒ=K, l<Ӏ{41hbxg?;c!E~J?_5 }ہƏ?nPN6:moQp#$>/}^_6  BoCADh%'/] {tm$x%:=oy:o*8 XNb N4;Iz-Nʯ|_ @a1VBn>5* ss`むEw'ԿC&MGzU~ssyR;vH׌fY`rWV6={9 sT]wCPH+.JȫW!U W-\Hi#"Ef nDUl|@kW? xIۘ1m#wߙk龦{c Io!!; A. ^=JW`WӮ]M҆J*m*q8u8ؒcKCOUU]4ں؂|SAq i<jJ6NVcld@d@dpr'g_ 'OMMߕ՚ɟHǼ zMmo[oobڊi+rBeN0.$_<:juj`Υ;xl ̛;oY*!k\/RTVq[mkFQ*,&lhe}] ?ŦYO ntۂ~s|d FN8vǂC4}i TަƊr:j(ߚvve9)=.8$zꚤ܌s32S2S2S݊*Ϊ8 y}&+0KC=;6c،a@A,Y4Z,jYp09!IR@ e%(ZsQڌ𺢝_SB`XGqDvhZy@n+kx@:<׍sYe5`RѤIż>z?#-0Ib{joX]bu%gٞVŞͤI}@Eu^ j5ՠV_y/y1QSN;k.PG^G^G 4Irʋe.X4.i\w/^=#]>_b'ђ9}EIJ&۾.HRKÁ ~e!B4f;ƬKrhpkMPSJ\~Tޠ~ x+1@X6B~omy)JRjP P,gζm;Y]@J)$0 iςX x-Z .f]̺`@@/;|Kؼb̓VPc=ύډkGb5g2dx*ݐ|7i4)t3]x+;Id9 CwI$Ծ@(Kacccr^8zq/mL5`XQ$hё4G{ZPb|.`eeR\ Gj8\~G%Ks֙3[0a#Ӗזז.2.6ڼk5^WWt!p۹7{Y }J~1c.\x:_o8쪳UyUyU,N'Un$ܫrʽ5Ik$}.X35f*0؋c/_>~x1!aIp]Dv~ IT@lPymy2`8pB?zU'8)~$Gbֲw y8k5@z5s1 &LO eNc@q-‟c6m 1gş{& ẃ]w]hӽM6݁;~?Nq@UMUMU o*:$!LAOſSuNz>}}gٮVuSݔ}ds~$Kg+H.zENSS3=4{@\ N045-zةuFf(ixikkvG0X ~L7iܤq@V[5o=*huTy<1:8|<߳p][`z?oyk`īF.>S@P+8Jk߯}hx1P.vk6[ 1Zϵk=Y}1T;/xm)z\}O;t?u1$U2Jp诒\PP);3gdHvv b0/Hw,L6%ğӺj?dk1Pi4Ttttg@ VQ3id'[l}XkڪUk+=7㻏111Yo04.q]:/_ 旛_~4G;SgDW}!n\qm`F@UWXP+4h^6ϗ d&d&d&uG}TtgVZ!xx?N7*SD{+ VM.7@i#4{4{4{r]I>%}AO㿣)UFoQXdqеg2qSiQAi3f$`WϮ]\Ļw)SZ3*c>8q سbϊ@&-h:s̡K7.ݸ}վj_Y ~bÜTk5lllUV]Zhwݍv7.SL2kQ&LD50dE"/o[mq`?+W\18$ߣ+_J~>ρ=&H]"u3 o0) U̹vvd=pAr7V||^E@&Mrm* 0ˍqw>xy<lVߚ uX {s B5af7sYe `ޮ]\D%)S3}bOIrj?a%ТO>-|zosΚ:kaaaҐ4dc]u=uwQw1cʹ~)HAJ^BdĀWI#|? W,`ﾂ6Y « o9Q>|Z4111)R*?{y&q 885] T:Ġ8<Ȓ{qNV 8f`qA&kL,~5jL>xHBty@vR;3i$ITèQ{,!SUWgYxl2%ڏknInInIq~s|!A𦥙*D`{UyJo۹M-(M|rnUЀp<{FgU6N;_ yyyg_K%_nYf)G8feD=kB7o x:Mk7ݴ6{*Ď;J(artׁ;w2dO?qplw&MR H``@I+:ϼ X5e6l0ħco9&`\͸q5Z`nӻM! ,T=s'AWre%xAzd} G_& v ~*f[̶mLJ8)+Jzv4pGCwhޡ:Tfzhvܺ90[FeqxNOG&˪>a`/Y=8d*CB x9s pᓇOvSMc~%鍦7lΦ<: #E_EFc#P?~bDif̦wwwPߗ0 2-&vvv^KzIכ_o\~r#H -- HKK0Dב"/>⃀9{왳{ᾇEMEMEMHE*^OW`IG:zCˠA/3:8v[^"n8Uz%t}C IJʂ ث]^͖6#M]L164n@ SYwr]QkO}@CϲA& +JxXn/s)&ZX~bVtm2m؆mK/-\o%%WYo* aNSH#5Sv;WqW?vY*~ /ɡ~~~<}GSǧO؏[ZsU-ZkkkxM.m۬r#<7݂:UQ}B,B ^|zaφ=ܮ}偗^\{tѵG@+bW88'|t%:u%>|˲.AK,'''J +5W]SXWM?س}= .6J22dr,_B05BY(Ifu~pj `Aף)T=h;SB kr`=c=/}Q&D,^xFN $ON<oB ۂ[}G}zz{#F * Mo~T򗕿ʌ)3D5JL5 W N^i7Ҁ[oO< [oH0y.T_ ݗ}&Lu_}]?;#vUfi(4ϩ$$! ,`D8q:a脡}]w=9 Ec> "և{ fMձ3I,2PdYdo=~Ga2)2韤R*Yu[v(ۡl,cs /~tZui+s8"R7\1ej ;aD˖%T'J/[Jl?l'QF]'2(5הRDtuDkWaZH.Y !#^<#N89$Mrr>%-GCd9f'іF[miDT*T@lfE4.i\KD o4[ lA`B!CݛuoֽYDfj&QƝ;wDjZA]w 1cFD+xѷNj:t`ҁDfʛO6,,4Yhh;QoooN:Sz^z? Ho_Z|iIiwݝvs'8;mL| r[_AF }68-x8HV tSM960̦3b0`D[F[F[YmuC5ד}@\S _}Κ4Vclm6m}z0ȂF^HԔK8ވ꿀#oJY,x9%6C(!1 ${ŹնW^\wpA~txx*›\ "g#FF'N\)wܕro}?a} Űa[ö P"DT(TR%K\\\Ynfnڻ'ž(E/֭[f?l3`x~@HH(㣉k⁌ !!H% W? >/|g_<]2t%S/Yg"E8M7HNN )4qjީ=0茣3})ӧ “_xF  ?<[?/ŚY $ONGp@;8`?t7Vy^ uzE'“'Oҁ&ߛ|l糝m'm'm'p(N*N*N&gMΚ,oY޲X.k]kmڮ5`ll +^x}}}8`CfjՀ+`3l mƷFw/ _RT*y y y @LL o~&0 @@Hc14A M kkk3gҵt-!uC aR¤I@gN; 6vm7;w161616@܏q?$g@:U2f;wNNlll5Ԥ&KPoۿLt2|! aVdr\-W:L3Da-Zr@ H%b\sD3X6cOf灯 )THe2R72odވ&&&ȡC'ND*gȵkD/"ӳ'QUeVYETfSMe6QfGD DW"r+VʭQɟJT'"444"HHH";w/3^fH Q.Ȗu}|Dc}B)f1|qDwq~6M/j SLW+т_%ǒ т} -ؗ̓^ߘw=/[nՊ;'2d0`P6C %vz|݉j'N)? T9FFFD/_$*욲k9 Gl6ff)OTdSh_Qe˲)3!Yv[mٜ?%+JcY0k$-aMd ֯`ic#rJ+It`g"MI6mHߐ!o߿}&2 rӓSw.mw!:ૃ9OU"q;vNo;HJJ*Iz"l6fK#EWRqJ)D/q8m\>(G|l$'zR[\q?/r;0F V,=V{&:|&Lp/'t>aDۺo뾭;Q'wLTڵkiW" F&9dDV^Y"qqq%xaⅉ.uR"of}KhS)gj"ݖ-˦Cl66)L,+**u͋(&&&<5LWO~,~,G|+ަ0Ħ0L~ 1FB?PI2hI._uWD׾յѐ4y+艼ZjںuoN$//:-"f`V9r.]<2keʬE*v_H4J{D߷Aqd9o܁~{9A3=0d੏g[p, DSO-?}ds]f`==kMך%dKx|lާz(, D..U&VM?I;O-IG#/!`0Fa>o/ln\*8psc~H+ bċzp{X uA*qnǹ=#a\MST@~ׯ]v󐟇<ؗ/m_q7n,!Zh`a"\{ISN:ՁI!B&-.,,,e?m>)Pޟ'0*eTʨXcݏuϲnZd4L~@L&?sܫ೿Mĝ_ary_r<-#կ~mEPed~+ +:&uLMv6UYfٜOfOa=h%2Jd vwiw"F̍ס'1cDR+VJGpI`&ߣmyl)mKʒlFO=%G}N3$fH̐,oL]\aC XǓ'iO҈F9_-[d(46fzBlll:tBtߥ~e>3]Eq6smZ={9:8:8:ds9O~d:*Xo#IF0L~BSSт3~N#PmND~A=}06= Z/֋ԦSNm"j֏ j4fo9h'WL{ 'lJٔ)WQyO0JNN&|~̾1, f0כUCa0 S`0z{4Cj}J()hhkkN\8qąl^zz -z$&>L|h]u׵&ZjժU}fE~t݉¦M k5D]3ft ===r^⟟gV [ۘa$} S1uѱ#ʄ +2neʸ[TrHSz^yeי^gzOK>-4mfOk=c,],],] 3@K/24Oc:FT5p8]pIX0{0}l4V+]oEDDd2_hɡv;7 l?D6=mz}fz" .1\Bj^yv#R R R RBuP e)odlؒhUU=W$rZiY6# %c_\oM%aH&ZC_?08I৲ypwkޭy7뛮o>>2+dVȬ@t2dT;<ȴiٜw`i=_FTgyumyіGDI=z$}RTKӑ1&o/X(sW]4=zh DAAADs7~qz"'VOHkۮmBUl (cnr8?FFFDv\qid-ҪJ+"nn_0gRMJ5)Մ_~UU%:4ИCc;w硞uFBQ?|1bCm?H@@ sOaǟ ^/ocaFȾ}#{"KBnYm 0L>E`g|i-wS $:s̉3'&?tS">M}b/0f ;VVUVUV%2"Yfy(v؅bƍ7bg!B\cf̎Mtt]Gwy~&ƓOZ6k lvarrr:@ρۣo핶W^(ohоDڮڮڮx3gDe zy??%bO/,[bpşadM'=Iev~+t1uU\W(rbʹ/ 1In1%Q"@ {݈N;d" \\wN>f<͸q;vDGVYq$ѠA!BvYjg)ЊC+inknknFtxW5lL1D|-bD~%.ކ3Y^H!pBlU.1Qqd_C9-оA &~MŨ/o<PSS˲ 4¼y}PB6w朚sjp;v _ 4c5c5ch`^#Fxꍮ7hn\ݸ1P"DxpqQ.L.|gw>vZii'`w>I%,+TPA|$V]>5D?~^o0~0yhq [M6zPPSLLLnﺽv`x-9Us~t Ðˊ@ҌKg}={lpď?2aJ;&MjX!Pq lg?UjW](SL2KKKKKw쐟5PBܛ?_~!n׺]v϶>lka cHו~Bܚb+<#M/ K E몊3*xX)QV-Fyř\St%K}fg&M5O>UT6|Eq}<*ܣr555p7n4u}YW TbRybll 8s:t`Y%P˯_-?΢:,*ԮPBmD}JQ(E;vO q;w&+ʬ( p{홷gflb 4U'տ 6דt1̧_L~@):?&x8kHvW) @-[T|Pq'8;;gY{\whhh+Wߟwۮo^ Ip'xg+XXXc@/V ax '< Xc(䎒;* 5Rk^Ǽy((C?tkH6RK8PC};g]rv e?lmLQ@Ol*x xmE` IW Ѝ2lJk$qC@ACOYYY_ ~`.]:vuɲ==4L6&r Yسgo ~37ޘ{cV[/ƿbWGWGWG[9rn+W^kˮ-(=f*Ua5z*Gg}ʻaaa bbbe?(+Jbn;nd;+LDOA/^z]w pfgV[Y˲]P$Mxx— 瞟{~xZiey\x/ Ϣ?bbb@V{1R `bhbhbXfZfZfŎ;Vsr444|i GbY~!:N qM}[vzʱ pS%8Qт4+bL~FO#G@FumH!@m \js5qm$i̧@cc#1cBG jp /&M"/b"E ::xe>q}z _B~@JDJDJ y}Y Y Y @a0P 7nO6> XXX֓'YO케닯/pϱy~dKVw9r/YdPvC-iiiy}'G`k@IKK-?r`mڤIq$%%e3o%%˗;!cİ%qşpї){V _YXo5 roSߦ@ߦ}m צ^zC:u'dE0 g; AJ ˤ/q8%1~cF !"!"!SũT@3ԄԄT r@+WIG@2]|c T\\\@c1RRR:^'9a7 ^F$O'rrr>dddF.]}}}lBk,zZmIDAT X\olj3`U۪6MmVVVހ]w-ۙL2=1cX777׍ '9\הoRI8y䅓m׷]8>#I%Jdـ{")7d+z ~zb׳0L_LAFU: IL{S8Y`aEOMp>SgrFwgHyPY|BenJb 4\de #z$x^ ˏ+n)0/@ˁzu..._h~ď%~,c6Ya'P1c.D]}m_GX"Dԉ.K ]_ÿO'6%lgzj)pSj {AUuctC ro0 K/bz@zutqoǽ@ ^u f_`+<|4k_ .]R:tH942L6HfJ'xRVOD)(%$IG}6lǹ*9: q0h0aйvڝkddd@10 !)딯S.B`=;8P sh 5Y6P~ߣglKq(4N!XR\1En`" 4r]bֈɮ$q?S$yd:AqL1YD1W}vzB͘"KNۓ8l.z6lZjPRJJd#e#e#7 0 oeE?V\Z5kL?%q~ s@ Se"_ܕEbΒf>7=1E0?ļN#ҼOW,َ0&bbb}FᮆZطoa[p~9 EɢN:0V⼀i7n&pl5kv Hm0a6;>M'/I; 0E.2~tJy|)ւLjWN30&! &LJo+6>w {|-@tP:󸁀a,ѳgEnuV' `C @| ܏y?HIIo0ş* ?N]lk(PapяarF; hbb: ;Hstͼ94 (((.\|}}AuԝSw7o2  3TS@x5iӮ'r pьG3RnKݖ0og$Vp_3L6pa=CjYp]/v|r =#8888UUWeYgџE}W}TSyL1@jūsa>Jx-lll \yqŝ /\{uս;<c{tYMzj?]4qgp ѓ=ֹ 'İ%cpM˙3-Yf雀M>7{SyC{VOH?)a -[.k \{qŽ)<Ĝ9s2aKL[yDђ8ğa\`nYqZ GeI%={˶m/<[yjM5ֶZjm*?---vvv1a=N{xapq^{/p_\7ސ{C#:2eV{ǎ'I9lK., !HQAlvApW$-  C6=ռyWjְa T:P@@fnRK.AUU` 5HP$(;>?tCC]?Hz#xx釧M^6yPRR`$_{C |d;40 xIBc&";8J# ^G0Lp,[  8q>|(߰| U#FW_?Pnٺeۜ9ol @Rub3I&+9"rD'-bm;ܿ<]t@+22Ͳ>$؈*x ɒuxbIp|:$)Jpx1 !n{+N*N*NZ?8qn)S(򇁲˞.{|Pt%KvW]L,6Y Ȝe2> LAErW _&|%K/O?>x5jUAȃ!@PA-PPP+ jL՘@ztztzt.>0:#H? >sXr0H0̧GO~6c!%l9"4`ll ؗ/e_ pqpqpq\\\<* p s s 8qX{[{[{G,X 6>:CO:H0>a<9.r\8E܋q@ȨQ!;~>h Xdb@|RPP"<)zHCcz*3 1{mS΂Ord{MaȫɫɫfdFfX/B_"_F| >}HJJ&+ C udx{%ĜCh0yW&ܼK-]:EjaraSæY5jfj,֗/[_===;;;, }g`v^v `փ֖-[e`l^q?~Q}Fxxx}AAAINrd5d5d5\nld62@V\V\V@ETDEGP@ Sʔ2%@@7&  @[h m333umumum@}D}D}P]R]R]TpU80aC JJ*@J>)}I7n &b>}n^=y i@lzlzl: $J HR7.~#F @BB"o)R@ CUk=l a n`򊾂,/dd{]C |r+++? 008fp<<<n#FK , 5W(((022Jw;ܨܨ( @o߀lll)0` XNdFdFdF2ge333W ***?f#JURFQi }VYW_PjZ۩۩uHa ~V!Yul= `T\p1n84y 0 0@2]/< x%s~pQp"= 0 0EDű._ #f-P# 1DUl68 l<(M8&_;)a057%Um;99t1 xrK*A/ +^3 0 \qfUOpW900LA#ϭ|\hYг3 ü'\dJNP5UMaGca&ϡ& (XWm#/| 0 0L& f{IG ఛ5|.ferٓe4\[ku6 n4Sp-o,s\`FJ. ɂ_=!s^-%[ies\gp0LD$8u1gułwEHr W|3'C53 0a 13,حJu[˧{lsNJ^ 0%oL|NKO9{aa]CA6Ђ=yk$Wi^fw4@pn7!B!B6 -oXrw1 pA0 S4Ѝ氞Fu5$_U~)(`gt=>bQ*]pH_+I]1j9|@n 0L \ 0 !f; ^p%;Wl#ڠ{~?n(` >9|ۻI^-8k.?Ca8\bar{V[Ӏ9e(Fx Rbq=MĊ* `'=Np /ނ,$8H&͉#X(a)p0 B[C Ĭeqrւ vJlZIOqȘB41fPQO?)x??%T̥)'590 -a)@(+R;\J͂KlwHO`! N2kĞ$g>&Up0B:Ep8]T1I? V#daw 0L0EEbr4ۆ;v,%8Kvb8/{ 6Z BRW].OV#ʕr0(i{3JN_(8MLB,8A #A"\5G]?Fp8%Ct#/0 |Ra)|dgbȶ8/8y`1j  ll6VĈKq6Kcq_ 6*`Cqz7AaWUĤtdt>YpJD$\ ;Q1>N؈3V1uFV7@IaB %tEXtdate:create2023-08-17T09:57:38+00:00dV%tEXtdate:modify2023-08-17T09:57:38+00:009(tEXtdate:timestamp2023-08-17T10:01:42+00:00JIENDB`logo-circle-64.png000066400000000000000000000273041511036467100370140ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/macos-redirector/Assets.xcassets/AppIcon.appiconsetPNG  IHDR@@ cHRMz&u0`:pQ<bKGDC pHYsVtIME )I~Z-IDATxw\G>|.қXP1Hƀ1ր{O؃F$X7@ JPO4~߳\{w)眙93s$|:6Ra-*tIWa*Yf7UhB < 3G0e ;*CkUǩHM P*LORalUFт"A(?3V$zr QU[wSaRVL7_PЫ*yЫk|.Wa\jdtI?mUpIϓx/j_B߮*XG`HtAIti:S)czCCCA vJj. (++?---VWVJq ƨ04KǪNZ;A# -@Fs~/c1QbT߱ci=6rm ؙؙؙV&V&V& y<L,ˀ'@@@y4)<1b{7Ǚ3 C )Pw A0>*\pM-;dGG xV" =K!bjpA5k!y79r.\⧧\ȅdVˬY-KL/KN-9>}`RN 2 T8Z?5 +<P*_2al0CW-k1nݤ Zk_}'}'JllAr9z髧KF/3oڿG(HdPf(3@M5ٖ-g"EN y@(>(>,nZܴi%圯OFtљzɮ'I-?-?-r|ЂH?r5Dp0o/OOj]Pi պwdQEMŤ+W*22}i:;Cv}[mo6!6!6!zM9s$٘1gcz|& 444&)))*GEpY * `PקO_2!4!4!"^.z]DnIؒ%l٥e]HɖH 1ğPH_VCVCVl.]ofrkN;(Q^1ԅ.tK߹\?_NԦ1Ҟ*\Py l#3< < ]wYA^=UN}W=~}45M*\C°sM%ʷʷI刲(r9 rŃ&|||j F"H%R000rrr'k}Iv(Qyyy$Gwj*0$$$ol98>ب$8 "9ߓv@]:`JA!,%"&LORUL=Aύ?'CCC+j3gVϬ礨C94]\d."lHdOFjM^wޕzdEė/_ f'&cbb3grAAAc.LrY岊Wo%І6VVV_Do'Ü5ݲ5[˔ S A9|?U{˱jRRax Wk :uV&k_V|aa!n|W@:4itrAȂ!U7W\EcJJX"ϾH333Jꡡꊼ`M+9`LQX?X>")Wǀ?EٓE.cgt &tH$XJF Mԟ?S,J)J)J)cSN=:EzaH*nuirB&dҪUI4 ееЕL1#y9rXұcI{Nƾdg;s̸q?>/--%/캰.O\>q{z25y$ 1 1 1%vm۵mWRl&6iη*hꢩiUUUΆl08~B4K /p87pn ?KS.լ>ffN@nTFΓLaU4@/UJ+ptp.3%_JGvDZuK3 1 1 fΰa >瀩Tl*p pLsttt;]]]L3=.n"999Ԇ-a[¶HY,066(hL_ /ըVZnzr=헩1UX@qY㲦u+/ {:P~Dڧy^}fc+c^Nr!!ݹ%2I-!w~U4h6mZ۴H (+"VЂZ}ԅg/9Bpxh9pEKlɳEPŅrME,"C~=wҸq?~՘}`OQm,D! :P)CR !؟?W*.(nQ~G2aè{qqYm__y`ځ,Iu\^5"jEn6 0\9=Q(VK.R,p3| ?$$%#v`eirA4dXv;__ƒ^ RN\-ƒ&]4d dړW *v~i~i~io2˭?{{{+1۴foC]n훶D>$2,Ư_mmm,tK 03ϐ0e2d2L:dꐩUUkM1c6m~2_>P` Qn].v'V{[r]EV)9|ư;*2H}tȡF%KZ-Knnz69o&wHut%IlP.%:!پHE'(Ś|C C=C!"ZVg_} ooo2O#w߱eV})EtZdG,'oͶٝlo_!٪uW2 I e4R{PI42gZ[RZ=aN }xI~d .-3gύ.Hؑ mܦs%ʵrA+U~a` P!tDGtJ<+yPmA"$$$$~63+/Ml,O]=#Om<"p E0 N@v>k+2NGё&lӊg<hFn:[oĽŽŽ??XYV'N ))YN?~:.ҔCAIM1SRVK`VYf`fGol-5H]OGHT$*UV-[ kK 1dF  6|p@ @vnvnv煊%aW4\sy2";/;/;lf̨ѿoO<9HY:'9?brt3ᖮL֫Ȝ[5Cʻ *jJʽ6|AسaC2hۤGC#<2zlqdggphQe&ʼnbG}OkþEFa'&y ˞uLuLuL-f[̶|sJ??Q{ێ/65+2x|pa`o?7 ͸5~Dj kg79o|s^]KKvON?nm3uw#V6p~U%̨̨L_̯:cU jCm 68bX (f 3gUy=k)E `Va +ˊZqjUG$aTMM :ЯG_}}О=@%0OkE?#ޓm[|' \|p$w7f,xpy0U1Ylj?]p ik?> d^y2%lllRVN3(^/_|Q_MjWki4M2[Gz:s cO'5jԨQ9'𬂬 ""ɢ* XlJ<4y(YgݾCCCfU|DRۏ MG7ti՛]Դ'XVh%m \[ ?U2H =x84o`P?6y3y fL3 mW g=XocN֓L'% g.ܽ)[nwT`hh4~e?y͓7@jPjPjP%7/}sS U,+mN&IZ$!O+ϺE$ 6ºu FgggWg?v)dY}rAIxdD^fzYJpGk+ދ+&ggΞI\W[V>[, o,n{0[HPc\EEE<xTzJ) k&-[MMU}DLQ&"{E hCІ @]Pa[# L6l:x30Z&Jhh7-Q\D}(:Yg!8ddffOn>$b+999м,KfÁO&#'5?X,iY>7hTؽӦ@QS[p'c:tSOȲȲ8쒳K3:9uUxSh0hWM+j:bGؑl㶏P"d 6mې^^^??2dH2nbĺd8L&&N:4RT>T>9s8\~a AmVd+^m}V'@#JiU.R0 -^e/5!<e/׿#0.p(vsv]Tu˘Vqͧ*+\/|KYeSAiӖ-PRIp $ZN¡ ꚣE6hf̂lұ#/\_7'^]zuURYSYSYL###+q5S;v?ֶluQrFdQaHN(&!/ =~5l%7q7q7q'Y:gUƧ)S2-[z,Q}եy"*J݋?]3ft<6شc* 6۰oC?d'Ŀl 1s0<2xd0!wCM{ЩCψ#HۗRRRDJ.H.H.TxOMnׅ@5~3"4hؠa7x^Q:u>LMhWٹK!4O+SwO=u7 A΃kמcĎ;*IŪAsXϑ-淘K7O7O7'ݮ]sVlDs#4I\hZBCjpNNNxCN޳gwϮ"ܜ|s;NR. WNJ R3I&o" )rOKK'N3fZ㈆raaaimg\m~=)Y*KMNIT訶Pr*&SLl0\d0Ŏ(r5VZ3lܤA[`.ϟ?"r]GUW7)]/]/][&&&SNY:e)"E|K>2}$9aR\$.U?#Z111exz鍧dm+~<\p|pu !q$\&mj95m&"O"}U+mgζہo4ifSC]'~zI@&f?@jiiۑpQ(%%%%IOOOnJݔ) A^ȵs];|qW[ux{z< m_Ծ}jjjP篟~N~kͷ6{P5<h9.|#,X6Z7'5L\yoIrסM#F$^yXAFF={y[ſZk% ~CfhтnD۟n䞸=q{]vՊ<w$HyoI;v&$5[$K<\gi=z&4݄_>~}YŻw&猛3n8//꩔*~Gjc RYv=2_Ϛ_F ߹ʊPsVf[IGD~bd)?6?6?{;v,{'O8M8k6ɸJ lڲi˦-nnnBD=\?8D~T+ႆq Г#;8\ۻ{--2ZwW}6Y۲֌ WR!zqꨁ:u'Ml6Dr8q:d3(((2>>ΞLx% I>??̮]3#:.rAтEdVZujEZ,Xh C!sqS맕)))#M{21= Q/S_ LoMi 7hПEk=NiW6[',SŒ1N 2 9 9 nf{gHz:,NY"kov^:zd &Ԛ@=3zf={'Bfgg \Y,T!=Bz ͊͊͊˥00q©?ߑzH! Gitu_馱OY] s&\q|deK+jf^Iڷok߮~P`>jvA#G'777 -={$W]K.1\bDC ^kשPIͷŸ wWX:uy块w^VTrod;vZHڗ/U(H4 iҐ7хBU8AP.@ Ώz|2j8p*f盝oZZZWCx A5wkV+W6e/\dhghghn@vv67opZ#F*PӳgMOkLJLJLJ ы___^o{-c;GvtQ+VFr/T~Qڅ UQԹHќ]~epx"\1}:{u_6ɥK&/_6&neʺE"/ǟSnvnvn6ykᭅH"%;08 7*75\Bد+\~7ܕ1r#warIv|E;}41jh+P?~@cSǦ@.48p8pZlj1`lblblP*r@gg'+ mBۄ@1}n?& X *.Uw0r _jwH_6d yV (գUERkгճճ5k&&&I$P>S>S>Nn.(]ػ:<+ήkJg!BϪ˜T%K^4zJ• 孂jU@(\77GPk櫭ykձTx} >RaƗTpYsga[_Xy"lNe.lB{m~EV"Lkzz6?-W g}BapWo~תP?EZnBB 2y{Y5"8^Pۂ1{KnYU>!!%tEXtdate:create2023-08-17T09:57:38+00:00dV%tEXtdate:modify2023-08-17T09:57:38+00:009(tEXtdate:timestamp2023-08-17T10:01:41+00:000dIENDB`mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/macos-redirector/Assets.xcassets/Contents.json000066400000000000000000000000771511036467100327300ustar00rootroot00000000000000{ "info" : { "author" : "xcode", "version" : 1 } } mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/macos-redirector/app.swift000066400000000000000000000110121511036467100267670ustar00rootroot00000000000000import NetworkExtension import OSLog import SwiftProtobuf import SwiftUI import SystemExtensions let log = Logger(subsystem: "org.mitmproxy.macos-redirector", category: "app") let networkExtensionIdentifier = "org.mitmproxy.macos-redirector.network-extension" /// Helper app to install the system extension and setup the transaprent proxy. @main struct App { static func main() async throws { let version = Bundle.main.infoDictionary!["CFBundleShortVersionString"] as! String log.debug("starting mitmproxy redirector app \(version, privacy: .public) with \(CommandLine.arguments, privacy: .public)") if #unavailable(macOS 12.0) { exitModal("This application only works on macOS 12 or above.") } let unixSocketPath = CommandLine.arguments.last! if !unixSocketPath.starts(with: "/tmp/") { exitModal( "This helper application is used to redirect local traffic to your mitmproxy instance. It cannot be run standalone." ) } try await SystemExtensionInstaller.run() try await startProxy(unixSocketPath: unixSocketPath) } static func exitModal(_ message: String) { let notification = NSAlert() notification.messageText = "Mitmproxy Redirector" notification.informativeText = message notification.runModal() exit(1) } } class SystemExtensionInstaller: NSObject, OSSystemExtensionRequestDelegate { static func run() async throws { let inst = SystemExtensionInstaller() try await withCheckedThrowingContinuation { continuation in inst.continuation = continuation let request = OSSystemExtensionRequest.activationRequest( forExtensionWithIdentifier: networkExtensionIdentifier, queue: DispatchQueue.main ) request.delegate = inst OSSystemExtensionManager.shared.submitRequest(request) log.debug("system extension request submitted") } } var continuation: CheckedContinuation? func request( _ request: OSSystemExtensionRequest, actionForReplacingExtension existing: OSSystemExtensionProperties, withExtension ext: OSSystemExtensionProperties ) -> OSSystemExtensionRequest.ReplacementAction { log.debug("requesting to replace existing network extension \(existing.bundleShortVersion, privacy: .public) with \(ext.bundleShortVersion, privacy: .public)") return .replace } func requestNeedsUserApproval(_ request: OSSystemExtensionRequest) { log.debug("requestNeedsUserApproval") } func request(_ request: OSSystemExtensionRequest, didFailWithError error: Error) { log.debug("system extension install failed: \(error, privacy: .public)") continuation?.resume(throwing: error) } func request( _ request: OSSystemExtensionRequest, didFinishWithResult result: OSSystemExtensionRequest.Result ) { log.debug("system extension install succeeded: {} \(result.rawValue, privacy: .public)") continuation?.resume() } } func startProxy(unixSocketPath: String) async throws { let savedManagers = try await NETransparentProxyManager.loadAllFromPreferences() let manager = savedManagers.first(where: { m in (m.protocolConfiguration as? NETunnelProviderProtocol)?.providerBundleIdentifier == networkExtensionIdentifier && (!m.isEnabled || m.connection.status != NEVPNStatus.connected) }) ?? NETransparentProxyManager() let providerProtocol = NETunnelProviderProtocol() providerProtocol.providerBundleIdentifier = networkExtensionIdentifier providerProtocol.serverAddress = unixSocketPath /* // NETransparentProxyManager does not support these properties and setting them causes silent failures. providerProtocol.includeAllNetworks = true providerProtocol.enforceRoutes = true providerProtocol.excludeLocalNetworks = false providerProtocol.excludeAPNs = false providerProtocol.excludeCellularServices = false */ manager.protocolConfiguration = providerProtocol manager.localizedDescription = "mitmproxy" manager.isEnabled = true try await manager.saveToPreferences() // https://stackoverflow.com/a/47569982/934719 - we need to call load again before starting the tunnel. try await manager.loadFromPreferences() try manager.connection.startVPNTunnel() log.debug("VPN initialized.") } mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/macos-redirector/macos_redirector.entitlements000066400000000000000000000006031511036467100331160ustar00rootroot00000000000000 com.apple.developer.networking.networkextension app-proxy-provider-systemextension com.apple.developer.system-extension.install mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/network-extension/000077500000000000000000000000001511036467100253775ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/network-extension/FlowExtensions.swift000066400000000000000000000132361511036467100314510ustar00rootroot00000000000000import NetworkExtension /// Inbound and outbound copying for TCP flows, based on https://developer.apple.com/documentation/networkextension/app_proxy_provider/handling_flow_copying /// This could be a bit nicer with async syntax, but we stick to the callback-style from the example. extension NEAppProxyTCPFlow { func outboundCopier(_ conn: NWConnection) { // log.debug("outbound copier: reading...") readData { data, error in if error == nil, let readData = data, !readData.isEmpty { // log.debug("outbound copier: forwarding \(readData.count) bytes.") conn.send( content: readData, completion: .contentProcessed({ error in if error == nil { // log.debug("outbound copier: forward complete.") self.outboundCopier(conn) } else { // log.debug("outbound copier: error copying: \(String(describing: error), privacy: .public)") self.closeConnection(conn, error) } })) } else { log.debug( "outbound copier end: \(String(describing: data), privacy: .public) \(String(describing: error), privacy: .public)" ) conn.send(content: nil, isComplete: true, completion: .contentProcessed({ error in // log.debug("outbound copier: sent end.") self.closeConnection(conn, error) })) } } } func inboundCopier(_ conn: NWConnection) { conn.receive(minimumIncompleteLength: 1, maximumLength: 8192) { (data, _, isComplete, error) in switch (data, isComplete, error) { case (let data?, _, _): self.write(data) { error in if error == nil { self.inboundCopier(conn) } else { self.closeConnection(conn, error) } } case (_, true, _): self.closeConnection(conn, error) default: self.closeConnection(conn, error) log.info( "inbound copier error=\(String(describing: error), privacy: .public) isComplete=\(String(describing: isComplete), privacy: .public)" ) } } } } /// Inbound and outbound copying for UDP flows. /// Async is substantially nicer here because readDatagrams returns multiple datagrams at once. extension NEAppProxyUDPFlow { func readDatagrams() async throws -> ([Data], [NetworkExtension.NWEndpoint]) { return try await withCheckedThrowingContinuation { continuation in readDatagrams { datagrams, endpoints, error in if let error { continuation.resume(throwing: error) return } guard let datagrams = datagrams, let endpoints = endpoints else { fatalError("No error, but also no datagrams") } continuation.resume(returning: (datagrams, endpoints)) } } } func outboundCopier(_ conn: NWConnection) { Task { do { while true { // log.debug("UDP outbound: receiving...") let (datagrams, endpoints) = try await readDatagrams() if datagrams.isEmpty { // log.debug("outbound udp copier end") conn.send(content: nil, isComplete: true, completion: .idempotent) break } // log.debug("UDP outbound: received \(datagrams.count, privacy: .public) datagrams.") for (datagram, endpoint) in zip(datagrams, endpoints) { guard let endpoint = endpoint as? NWHostEndpoint else { continue } let message = MitmproxyIpc_UdpPacket.with { $0.data = datagram $0.remoteAddress = MitmproxyIpc_Address.init(endpoint: endpoint) } try await conn.send(ipc: message) } } self.closeConnection(conn, nil) } catch { log.error("Error in outbound UDP copier: \(String(describing: error), privacy: .public)") self.closeConnection(conn, error) } } } func inboundCopier(_ conn: NWConnection) { Task { do { while true { // log.debug("UDP inbound: receiving...") guard let packet = try await conn.receive(ipc: MitmproxyIpc_UdpPacket.self) else { break } // log.debug("UDP inbound: received packet.: \(String(describing: packet), privacy: .public)") let endpoint = NWHostEndpoint(address: packet.remoteAddress) try await self.writeDatagrams([packet.data], sentBy: [endpoint]) } self.closeConnection(conn, nil) } catch { log.error("Error in inbound UDP copier: \(String(describing: error), privacy: .public)") self.closeConnection(conn, error) } } } } extension NEAppProxyFlow { func closeConnection(_ conn: NWConnection, _ error: Error?) { conn.cancel() self.closeReadWithError(error) self.closeWriteWithError(error) } } mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/network-extension/Info.plist000066400000000000000000000007611511036467100273530ustar00rootroot00000000000000 NSSystemExtensionUsageDescription Redirect traffic to mitmproxy NetworkExtension NEProviderClasses com.apple.networkextension.app-proxy $(PRODUCT_MODULE_NAME).TransparentProxyProvider mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/network-extension/InterceptConf.swift000066400000000000000000000037361511036467100312310ustar00rootroot00000000000000import Foundation enum Action { case include(Pattern) case exclude(Pattern) init(from string: String) throws { if string.hasPrefix("!") { self = .exclude(Pattern(from: String(string.dropFirst()))) } else { self = .include(Pattern(from: string)) } } } enum Pattern { case pid(UInt32) case process(String) init(from string: String) { if let pid = UInt32(string) { self = .pid(pid) } else { self = .process(string) } } func matches(_ processInfo: ProcessInfo) -> Bool { switch self { case .pid(let pid): return processInfo.pid == pid case .process(let name): if let processName = processInfo.path { return processName.contains(name) } else { return false } } } } /// The intercept spec decides whether a TCP/UDP flow should be intercepted or not. class InterceptConf { private var defaultAction: Bool private var actions: [Action] init(defaultAction: Bool, actions: [Action]) { self.defaultAction = defaultAction self.actions = actions } convenience init(from ipc: MitmproxyIpc_InterceptConf) throws { let actions = try ipc.actions.map { try Action(from: $0) } let defaultAction = ipc.actions[0].hasPrefix("!") self.init(defaultAction: defaultAction, actions: actions) } /// Mirrored after the Rust implementation func shouldIntercept(_ processInfo: ProcessInfo) -> Bool { var intercept = self.defaultAction for action in actions { switch action { case .include(let pattern): intercept = intercept || pattern.matches(processInfo) case .exclude(let pattern): intercept = intercept && !pattern.matches(processInfo) } } return intercept } } mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/network-extension/ProcessInfoCache.swift000066400000000000000000000025101511036467100316310ustar00rootroot00000000000000import Foundation struct ProcessInfo { var pid: UInt32 var path: String? } let PROC_PIDPATHINFO_MAXSIZE = UInt32(MAXPATHLEN * 4) /// An audit token -> (pid, process path) lookup cache. class ProcessInfoCache { private static var cache: [Data: ProcessInfo] = [:] static func getInfo(fromAuditToken tokenData: Data?) -> ProcessInfo? { guard let tokenData = tokenData else { return nil } if let cached = cache[tokenData] { return cached } // Data -> audit_token_t guard tokenData.count == MemoryLayout.size else { return nil } let token = tokenData.withUnsafeBytes { buf in buf.baseAddress!.assumingMemoryBound(to: audit_token_t.self).pointee } let pid = audit_token_to_pid(token) // pid -> path let pathBuffer = UnsafeMutablePointer.allocate( capacity: Int(PROC_PIDPATHINFO_MAXSIZE)) defer { pathBuffer.deallocate() } let path: String? if proc_pidpath(pid, pathBuffer, PROC_PIDPATHINFO_MAXSIZE) > 0 { path = String(cString: pathBuffer) } else { path = nil } let procInfo = ProcessInfo(pid: UInt32(pid), path: path) cache[tokenData] = procInfo return procInfo } } mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/network-extension/TransparentProxyProvider.swift000066400000000000000000000166211511036467100335410ustar00rootroot00000000000000import Darwin import Foundation import Network import NetworkExtension enum TransparentProxyError: Error { case serverAddressMissing case noRemoteEndpoint case noLocalEndpoint case unexpectedFlow } class TransparentProxyProvider: NETransparentProxyProvider { var unixSocket: String? var controlChannel: NWConnection? var spec: InterceptConf? override func startProxy(options: [String: Any]? = nil) async throws { log.debug("Starting proxy...") guard let unixSocket = self.protocolConfiguration.serverAddress else { throw TransparentProxyError.serverAddressMissing } self.unixSocket = unixSocket log.debug("Establishing control channel via \(unixSocket, privacy: .public)...") let control = NWConnection( to: .unix(path: unixSocket), using: .tcp ) controlChannel = control try await control.establish() control.stateUpdateHandler = { state in switch state { case .failed(.posix(.ENETDOWN)): log.debug("control channel closed, stopping proxy.") control.forceCancel() self.cancelProxyWithError(.none) case .failed(let err): log.error("control channel failed: \(err, privacy: .public)") control.forceCancel() self.cancelProxyWithError(err) default: break } } Task { do { while let spec = try await control.receive(ipc: MitmproxyIpc_InterceptConf.self) { log.debug("Received spec: \(String(describing: spec), privacy: .public)") self.spec = try InterceptConf(from: spec) } } catch { log.error("Error on control channel: \(String(describing: error), privacy: .public)") control.forceCancel() self.cancelProxyWithError(error) } } log.debug("Established. Applying tunnel settings...") let proxySettings = NETransparentProxyNetworkSettings(tunnelRemoteAddress: "127.0.0.1") proxySettings.includedNetworkRules = [ NENetworkRule( remoteNetwork: nil, remotePrefix: 0, localNetwork: nil, localPrefix: 0, protocol: .any, // https://developer.apple.com/documentation/networkextension/netransparentproxynetworksettings/3143656-includednetworkrules: // The matchDirection property must be NETrafficDirection.outbound. direction: .outbound ) ] try await setTunnelNetworkSettings(proxySettings) log.debug("Applied. Proxy start complete.") } override func stopProxy(with reason: NEProviderStopReason) async { log.debug("stopProxy \(String(describing: reason), privacy: .public)") self.controlChannel?.forceCancel() } override func handleNewFlow(_ flow: NEAppProxyFlow) -> Bool { // Called for every new flow that is started. // We first want to figure out if we want to intercept this one. // Our intercept specs are based on process name and pid, so we first need to convert from // audit token to that. let processInfo = ProcessInfoCache.getInfo(fromAuditToken: flow.metaData.sourceAppAuditToken) guard let processInfo = processInfo else { log.debug("Skipping flow without process info.") return false } log.debug("Handling new flow: \(String(describing: processInfo), privacy: .public)") guard let spec = self.spec else { log.debug("Skipping flow, no intercept spec provided.") return false } guard spec.shouldIntercept(processInfo) else { log.debug("Flow not in scope, leaving it to the system.") return false } let message: MitmproxyIpc_NewFlow do { message = try self.makeIpcHandshake(flow: flow, processInfo: processInfo) } catch { log.error("Failed to create IPC handshake: \(error, privacy: .public), flow=\(flow, privacy: .public)") return false } Task { do { log.debug("Intercepting...") try await flow.open(withLocalEndpoint: nil) let conn = NWConnection( to: .unix(path: self.unixSocket!), using: .tcp ) do { try await conn.establish() } catch { flow.closeReadWithError(error) flow.closeWriteWithError(error) throw error } try await conn.send(ipc: message) log.debug("Handshake sent.") if let tcp_flow = flow as? NEAppProxyTCPFlow { tcp_flow.outboundCopier(conn) tcp_flow.inboundCopier(conn) } else if let udp_flow = flow as? NEAppProxyUDPFlow { udp_flow.outboundCopier(conn) udp_flow.inboundCopier(conn) } } catch { log.error("Error handling flow: \(String(describing: error), privacy: .public)") flow.closeReadWithError(error) flow.closeWriteWithError(error) } } return true } func makeIpcHandshake(flow: NEAppProxyFlow, processInfo: ProcessInfo) throws -> MitmproxyIpc_NewFlow { let tunnelInfo = MitmproxyIpc_TunnelInfo.with { $0.pid = processInfo.pid if let path = processInfo.path { $0.processName = path } } // Do not use remoteHostname property; for DNS UDP flows that's already pointing at the name that we want to look up. // log.debug("remoteHostname: \(String(describing: flow.remoteHostname), privacy: .public) flow:\(String(describing: flow), privacy: .public)") let message: MitmproxyIpc_NewFlow if let tcp_flow = flow as? NEAppProxyTCPFlow { guard let remoteEndpoint = tcp_flow.remoteEndpoint as? NWHostEndpoint else { throw TransparentProxyError.noRemoteEndpoint } // log.debug("remoteEndpoint: \(String(describing: remoteEndpoint), privacy: .public)") // It would be nice if we could also include info on the local endpoint here, but that's not exposed. message = MitmproxyIpc_NewFlow.with { $0.tcp = MitmproxyIpc_TcpFlow.with { $0.remoteAddress = MitmproxyIpc_Address.init(endpoint: remoteEndpoint) $0.tunnelInfo = tunnelInfo } } } else if let udp_flow = flow as? NEAppProxyUDPFlow { guard let localEndpoint = udp_flow.localEndpoint as? NWHostEndpoint else { throw TransparentProxyError.noLocalEndpoint } message = MitmproxyIpc_NewFlow.with { $0.udp = MitmproxyIpc_UdpFlow.with { $0.localAddress = MitmproxyIpc_Address.init(endpoint: localEndpoint) $0.tunnelInfo = tunnelInfo } } } else { throw TransparentProxyError.unexpectedFlow } return message } } mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/network-extension/libproc-Bridging-Header.h000066400000000000000000000001171511036467100321120ustar00rootroot00000000000000#ifndef Header_h #define Header_h #include #endif /* Header_h */ mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/network-extension/main.swift000066400000000000000000000010201511036467100273720ustar00rootroot00000000000000import Foundation import NetworkExtension import OSLog let log = Logger(subsystem: "org.mitmproxy.macos-redirector", category: "extension") let networkExtensionIdentifier = "org.mitmproxy.macos-redirector.network-extension" autoreleasepool { let version = Bundle.main.infoDictionary!["CFBundleShortVersionString"] as! String log.error("starting mitmproxy redirector \(version, privacy: .public) system extension") log.debug("debug-level logging active") NEProvider.startSystemExtensionMode() } dispatchMain() mitmproxy_rs-0.12.8/mitmproxy-macos/redirector/network-extension/network_extension.entitlements000066400000000000000000000005011511036467100336150ustar00rootroot00000000000000 com.apple.developer.networking.networkextension app-proxy-provider-systemextension mitmproxy_rs-0.12.8/mitmproxy-macos/version-info.toml000077700000000000000000000000001511036467100252032../Cargo.tomlustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-rs/000077500000000000000000000000001511036467100170545ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-rs/.gitignore000066400000000000000000000001641511036467100210450ustar00rootroot00000000000000mitmproxy_rs/WinDivert* mitmproxy_rs/windows-redirector.exe mitmproxy_rs/*.pyd mitmproxy_rs/*.so mitmproxy_rs/*.app mitmproxy_rs-0.12.8/mitmproxy-rs/Cargo.toml000066400000000000000000000024541511036467100210110ustar00rootroot00000000000000[package] name = "mitmproxy_rs" license = "MIT" authors.workspace = true version.workspace = true repository.workspace = true edition.workspace = true rust-version.workspace = true publish.workspace = true [lints] workspace = true [lib] name = "mitmproxy_rs" crate-type = ["lib", "cdylib"] [dependencies] mitmproxy = { path = "../" } mitmproxy-highlight = { path = "../mitmproxy-highlight" } mitmproxy-contentviews = { path = "../mitmproxy-contentviews" } anyhow = { version = "1.0.100", features = ["backtrace"] } data-encoding = "2.8.0" log = "0.4.28" pyo3 = { version = "0.25", features = ["abi3", "abi3-py312", "anyhow"] } pyo3-async-runtimes = { version = "0.25", features = ["tokio-runtime", "testing", "attributes"] } pyo3-log = "0.12" rand_core = { version = "0.6.4", features = ["getrandom"] } # https://github.com/dalek-cryptography/curve25519-dalek/issues/731 tokio = { version = "1.47", features = ["macros", "net", "rt-multi-thread", "sync"] } boringtun = "0.6" tar = "0.4.44" console-subscriber = { version = "0.4.1", optional = true } [target.'cfg(target_os = "linux")'.dependencies] nix = { version = "0.30.1", features = ["user"] } [dev-dependencies] env_logger = "0.11" [features] tracing = ["console-subscriber"] docs = [] [[test]] name = "test_task" path = "pytests/test_task.rs" harness = false mitmproxy_rs-0.12.8/mitmproxy-rs/README.md000066400000000000000000000003531511036467100203340ustar00rootroot00000000000000# mitmproxy_rs This package contains mitmproxy's Rust bits. [![dev documentation](https://shields.mitmproxy.org/badge/docs-Python%20API-blue.svg)](https://mitmproxy.github.io/mitmproxy_rs/) https://github.com/mitmproxy/mitmproxy_rs mitmproxy_rs-0.12.8/mitmproxy-rs/mitmproxy_rs/000077500000000000000000000000001511036467100216305ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-rs/mitmproxy_rs/__init__.py000066400000000000000000000005321511036467100237410ustar00rootroot00000000000000import sys import types from .mitmproxy_rs import * __doc__ = mitmproxy_rs.__doc__ if hasattr(mitmproxy_rs, "__all__"): __all__ = mitmproxy_rs.__all__ # Hacky workaround for https://github.com/PyO3/pyo3/issues/759 for k, v in vars(mitmproxy_rs).items(): if isinstance(v, types.ModuleType): sys.modules[f"mitmproxy_rs.{k}"] = v mitmproxy_rs-0.12.8/mitmproxy-rs/mitmproxy_rs/__init__.pyi000066400000000000000000000036611511036467100241200ustar00rootroot00000000000000from __future__ import annotations from typing import Any, Literal from typing import final, overload, TypeVar from . import certs, contentviews, dns, local, process_info, tun, udp, wireguard, syntax_highlight T = TypeVar("T") # TCP / UDP @final class Stream: async def read(self, n: int) -> bytes: ... def write(self, data: bytes): ... async def drain(self) -> None: ... def write_eof(self): ... def close(self): ... def is_closing(self) -> bool: ... async def wait_closed(self) -> None: ... @overload def get_extra_info( self, name: Literal["transport_protocol"], default: None = None ) -> Literal["tcp", "udp"]: ... @overload def get_extra_info( self, name: Literal["transport_protocol"], default: T ) -> Literal["tcp", "udp"] | T: ... @overload def get_extra_info( self, name: Literal[ "peername", "sockname", "original_src", "original_dst", "remote_endpoint" ], default: None = None, ) -> tuple[str, int]: ... @overload def get_extra_info( self, name: Literal[ "peername", "sockname", "original_src", "original_dst", "remote_endpoint" ], default: T, ) -> tuple[str, int] | T: ... @overload def get_extra_info(self, name: Literal["pid"], default: None = None) -> int: ... @overload def get_extra_info(self, name: Literal["pid"], default: T) -> int | T: ... @overload def get_extra_info( self, name: Literal["process_name"], default: None = None ) -> str: ... @overload def get_extra_info(self, name: Literal["process_name"], default: T) -> str | T: ... @overload def get_extra_info(self, name: str, default: Any) -> Any: ... def __repr__(self) -> str: ... __all__ = [ "certs", "contentviews", "dns", "local", "process_info", "syntax_highlight", "tun", "udp", "wireguard", "Stream", ] mitmproxy_rs-0.12.8/mitmproxy-rs/mitmproxy_rs/_pyinstaller/000077500000000000000000000000001511036467100243355ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-rs/mitmproxy_rs/_pyinstaller/__init__.py000066400000000000000000000001711511036467100264450ustar00rootroot00000000000000from pathlib import Path here = Path(__file__).parent.absolute() def hook_dirs() -> list[str]: return [str(here)] mitmproxy_rs-0.12.8/mitmproxy-rs/mitmproxy_rs/_pyinstaller/hook-mitmproxy_linux.py000066400000000000000000000002051511036467100311310ustar00rootroot00000000000000import sysconfig import os.path binaries = [ (os.path.join(sysconfig.get_path("scripts"), "mitmproxy-linux-redirector"), ".") ] mitmproxy_rs-0.12.8/mitmproxy-rs/mitmproxy_rs/_pyinstaller/hook-mitmproxy_macos.py000066400000000000000000000001461511036467100311000ustar00rootroot00000000000000from PyInstaller.utils.hooks import collect_data_files datas = collect_data_files("mitmproxy_macos") mitmproxy_rs-0.12.8/mitmproxy-rs/mitmproxy_rs/_pyinstaller/hook-mitmproxy_rs.py000066400000000000000000000005541511036467100304250ustar00rootroot00000000000000import platform from PyInstaller.utils.hooks import collect_data_files datas = collect_data_files("mitmproxy_rs") hiddenimports = [] match platform.system(): case "Darwin": hiddenimports.append("mitmproxy_macos") case "Windows": hiddenimports.append("mitmproxy_windows") case "Linux": hiddenimports.append("mitmproxy_linux") mitmproxy_rs-0.12.8/mitmproxy-rs/mitmproxy_rs/_pyinstaller/hook-mitmproxy_windows.py000066400000000000000000000001501511036467100314630ustar00rootroot00000000000000from PyInstaller.utils.hooks import collect_data_files datas = collect_data_files("mitmproxy_windows") mitmproxy_rs-0.12.8/mitmproxy-rs/mitmproxy_rs/certs.pyi000066400000000000000000000002311511036467100234670ustar00rootroot00000000000000from __future__ import annotations def add_cert(pem: str) -> None: ... def remove_cert() -> None: ... __all__ = [ "add_cert", "remove_cert", ] mitmproxy_rs-0.12.8/mitmproxy-rs/mitmproxy_rs/contentviews.pyi000066400000000000000000000014631511036467100251070ustar00rootroot00000000000000from __future__ import annotations from typing import ClassVar, final, Literal class Contentview: name: ClassVar[str] syntax_highlight: ClassVar[Literal["xml", "yaml", "none", "error"]] def prettify(self, data: bytes, metadata) -> str: pass def render_priority(self, data: bytes, metadata) -> float: pass @final class InteractiveContentview(Contentview): def reencode(self, data: str, metadata) -> bytes: pass _test_inspect_metadata: Contentview hex_dump: Contentview hex_stream: InteractiveContentview msgpack: InteractiveContentview protobuf: InteractiveContentview grpc: InteractiveContentview __all__ = [ "Contentview", "InteractiveContentview", "hex_dump", "hex_stream", "msgpack", "protobuf", "grpc", "_test_inspect_metadata", ] mitmproxy_rs-0.12.8/mitmproxy-rs/mitmproxy_rs/dns.pyi000066400000000000000000000007651511036467100231470ustar00rootroot00000000000000from __future__ import annotations from typing import final @final class DnsResolver: def __init__( self, *, name_servers: list[str] | None = None, use_hosts_file: bool = True ) -> None: ... async def lookup_ip(self, host: str) -> list[str]: ... async def lookup_ipv4(self, host: str) -> list[str]: ... async def lookup_ipv6(self, host: str) -> list[str]: ... def get_system_dns_servers() -> list[str]: ... __all__ = [ "DnsResolver", "get_system_dns_servers", ] mitmproxy_rs-0.12.8/mitmproxy-rs/mitmproxy_rs/local.pyi000066400000000000000000000012351511036467100234460ustar00rootroot00000000000000from __future__ import annotations from collections.abc import Awaitable, Callable from typing import final from . import Stream async def start_local_redirector( handle_tcp_stream: Callable[[Stream], Awaitable[None]], handle_udp_stream: Callable[[Stream], Awaitable[None]], ) -> LocalRedirector: ... @final class LocalRedirector: @staticmethod def describe_spec(spec: str) -> None: ... def set_intercept(self, spec: str) -> None: ... def close(self) -> None: ... async def wait_closed(self) -> None: ... @staticmethod def unavailable_reason() -> str | None: ... __all__ = [ "start_local_redirector", "LocalRedirector", ] mitmproxy_rs-0.12.8/mitmproxy-rs/mitmproxy_rs/process_info.pyi000066400000000000000000000007561511036467100250540ustar00rootroot00000000000000from __future__ import annotations from pathlib import Path from typing import final def active_executables() -> list[Process]: ... def executable_icon(path: Path | str) -> bytes: ... @final class Process: @property def executable(self) -> Path: ... @property def display_name(self) -> str: ... @property def is_visible(self) -> bool: ... @property def is_system(self) -> bool: ... __all__ = [ "active_executables", "executable_icon", "Process", ] mitmproxy_rs-0.12.8/mitmproxy-rs/mitmproxy_rs/py.typed000066400000000000000000000000001511036467100233150ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-rs/mitmproxy_rs/syntax_highlight.pyi000066400000000000000000000005151511036467100257310ustar00rootroot00000000000000from __future__ import annotations from typing import Literal def highlight(text: str, language: Literal["css", "javascript", "xml", "yaml", "none", "error"]) -> list[tuple[str, str]]: pass def languages() -> list[str]: pass def tags() -> list[str]: pass __all__ = [ "highlight", "languages", "tags", ] mitmproxy_rs-0.12.8/mitmproxy-rs/mitmproxy_rs/tun.pyi000066400000000000000000000012031511036467100231550ustar00rootroot00000000000000from __future__ import annotations from collections.abc import Awaitable, Callable from typing import final from . import Stream async def create_tun_interface( handle_tcp_stream: Callable[[Stream], Awaitable[None]], handle_udp_stream: Callable[[Stream], Awaitable[None]], tun_name: str | None = None, ) -> TunInterface: ... @final class TunInterface: def tun_name(self) -> str: ... def close(self) -> None: ... async def wait_closed(self) -> None: ... def __repr__(self) -> str: ... @staticmethod def unavailable_reason() -> str | None: ... __all__ = [ "create_tun_interface", "TunInterface", ] mitmproxy_rs-0.12.8/mitmproxy-rs/mitmproxy_rs/udp.pyi000066400000000000000000000012401511036467100231400ustar00rootroot00000000000000from __future__ import annotations from collections.abc import Awaitable, Callable from typing import final from . import Stream async def start_udp_server( host: str, port: int, handle_udp_stream: Callable[[Stream], Awaitable[None]], ) -> UdpServer: ... @final class UdpServer: def getsockname(self) -> tuple[str, int]: ... def close(self) -> None: ... async def wait_closed(self) -> None: ... def __repr__(self) -> str: ... async def open_udp_connection( host: str, port: int, *, local_addr: tuple[str, int] | None = None, ) -> Stream: ... __all__ = [ "start_udp_server", "UdpServer", "open_udp_connection", ] mitmproxy_rs-0.12.8/mitmproxy-rs/mitmproxy_rs/wireguard.pyi000066400000000000000000000013571511036467100243520ustar00rootroot00000000000000from __future__ import annotations from collections.abc import Awaitable, Callable from typing import final from . import Stream def genkey() -> str: ... def pubkey(private_key: str) -> str: ... async def start_wireguard_server( host: str, port: int, private_key: str, peer_public_keys: list[str], handle_tcp_stream: Callable[[Stream], Awaitable[None]], handle_udp_stream: Callable[[Stream], Awaitable[None]], ) -> WireGuardServer: ... @final class WireGuardServer: def getsockname(self) -> tuple[str, int]: ... def close(self) -> None: ... async def wait_closed(self) -> None: ... def __repr__(self) -> str: ... __all__ = [ "genkey", "pubkey", "start_wireguard_server", "WireGuardServer", ] mitmproxy_rs-0.12.8/mitmproxy-rs/pyproject.toml000066400000000000000000000021761511036467100217760ustar00rootroot00000000000000[build-system] requires = ["maturin>=1,<2"] build-backend = "maturin" [project] name = "mitmproxy_rs" dynamic = ["version"] requires-python = ">=3.12" classifiers = [ "Programming Language :: Rust", "Programming Language :: Python :: Implementation :: CPython", "Programming Language :: Python :: Implementation :: PyPy", "Programming Language :: Python :: 3 :: Only", "Programming Language :: Python :: 3.12", "Programming Language :: Python :: 3.13", "Development Status :: 5 - Production/Stable", ] dependencies = [ "mitmproxy_windows; os_name == 'nt'", "mitmproxy_linux; sys_platform == 'linux'", "mitmproxy_macos; sys_platform == 'darwin'", ] [tool.black] line-length = 140 include = '\.pyi?$' [project.entry-points.pyinstaller40] hook-dirs = "mitmproxy_rs._pyinstaller:hook_dirs" [tool.mypy] exclude = [ 'mitmproxy_rs/_pyinstaller' ] # https://pyo3.rs/v0.22.2/faq.html?highlight=cargo%20test#i-cant-run-cargo-test-or-i-cant-build-in-a-cargo-workspace-im-having-linker-issues-like-symbol-not-found-or-undefined-reference-to-_pyexc_systemerror [tool.maturin] features = ["pyo3/extension-module"] mitmproxy_rs-0.12.8/mitmproxy-rs/pytests/000077500000000000000000000000001511036467100205675ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-rs/pytests/logger.rs000066400000000000000000000044421511036467100224200ustar00rootroot00000000000000use log::{LevelFilter, Log, Metadata, Record}; use std::sync::LazyLock; use tokio::sync::mpsc::{UnboundedReceiver, UnboundedSender}; use tokio::sync::{mpsc, Mutex, MutexGuard}; /// A logger for tests to ensure that log statements are made. pub struct TestLogger { tx: UnboundedSender, rx: Mutex>, buf: Mutex>, } impl Log for TestLogger { fn enabled(&self, _metadata: &Metadata) -> bool { true } fn log(&self, record: &Record) { self.tx.send(format!("{}", record.args())).unwrap() } fn flush(&self) {} } impl TestLogger { /// Wait for a log line to appear. If the log message already appeared, /// we return immediately. pub async fn wait_for(&self, needle: &str) { let mut buf = self.buf.lock().await; if buf.iter().any(|m| m.contains(needle)) { return; } let mut rx = self.rx.lock().await; while let Some(m) = rx.recv().await { let done = m.contains(needle); buf.push(m); if done { break; } } } /// Get a copy of all log lines so far. pub async fn logs(&self) -> Vec { let mut buf = self.buf.lock().await; let mut rx = self.rx.lock().await; while let Ok(m) = rx.try_recv() { buf.push(m); } buf.clone() } /// Clear log buffer. pub async fn clear(&self) { while let Ok(x) = self.rx.lock().await.try_recv() { drop(x); } self.buf.lock().await.clear(); } } static _LOGGER: LazyLock> = LazyLock::new(|| { let (tx, rx) = mpsc::unbounded_channel(); let logger = Box::leak(Box::new(TestLogger { tx, rx: Mutex::new(rx), buf: Mutex::new(vec![]), })); log::set_logger(logger).expect("cannot set logger"); log::set_max_level(LevelFilter::Debug); Mutex::new(logger) }); /// Initialize the logger. /// pyo3_async_runtimes tests all run in parallel in the same runtime, so we use a mutex to ensure /// that only one test that uses TestLogger runs at the same time. pub async fn setup_logger() -> MutexGuard<'static, &'static TestLogger> { let logger = _LOGGER.lock().await; logger.clear().await; logger } mitmproxy_rs-0.12.8/mitmproxy-rs/pytests/test_task.rs000066400000000000000000000062311511036467100231400ustar00rootroot00000000000000mod logger; mod tests { use std::ffi::CString; use std::future::Future; use mitmproxy::messages::{ConnectionId, TransportEvent, TunnelInfo}; use mitmproxy_rs::task::PyInteropTask; use pyo3::prelude::*; use pyo3::types::PyDict; use crate::logger::setup_logger; use mitmproxy::shutdown; use tokio::sync::mpsc; #[pyo3_async_runtimes::tokio::test] async fn test_handler_invalid_signature() -> PyResult<()> { let logger = setup_logger().await; _test_task_error_handling( "async def handler(): pass", logger.wait_for("Failed to spawn connection handler"), ) .await?; logger.wait_for("shutting down").await; Ok(()) } #[pyo3_async_runtimes::tokio::test] async fn test_handler_runtime_error() -> PyResult<()> { let logger = setup_logger().await; _test_task_error_handling( "async def handler(stream): raise RuntimeError('task failed successfully')", logger.wait_for("RuntimeError: task failed successfully"), ) .await?; logger.wait_for("shutting down").await; Ok(()) } #[pyo3_async_runtimes::tokio::test] async fn test_handler_cancelled() -> PyResult<()> { let logger = setup_logger().await; _test_task_error_handling( "async def handler(stream): import asyncio; asyncio.current_task().cancel()", async {}, ) .await?; logger.wait_for("shutting down").await; assert!(!logger .logs() .await .into_iter() .any(|l| l.contains("exception"))); Ok(()) } async fn _test_task_error_handling(code: &str, verify: F) -> PyResult<()> where F: Future, { let (command_tx, _command_rx) = mpsc::unbounded_channel(); let (event_tx, event_rx) = mpsc::channel(1); let (shutdown_tx, shutdown_rx) = shutdown::channel(); let (tcp_handler, udp_handler) = Python::with_gil(|py| { let locals = PyDict::new(py); let code = CString::new(code).unwrap(); py.run(&code, None, Some(&locals)).unwrap(); let handler = locals.get_item("handler").unwrap().unwrap().unbind(); (handler.clone_ref(py), handler) }); let task = PyInteropTask::new(command_tx, event_rx, tcp_handler, udp_handler, shutdown_rx)?; let task = tokio::spawn(task.run()); event_tx .send(TransportEvent::ConnectionEstablished { connection_id: ConnectionId::unassigned_udp(), src_addr: "127.0.0.1:51232".parse()?, dst_addr: "127.0.0.1:53".parse()?, tunnel_info: TunnelInfo::None, command_tx: None, }) .await .unwrap(); // ensure previous event is processed. let _ = event_tx.reserve().await.unwrap(); verify.await; shutdown_tx.send(()).unwrap(); task.await.unwrap()?; Ok(()) } } #[pyo3_async_runtimes::tokio::main] async fn main() -> pyo3::PyResult<()> { pyo3_async_runtimes::testing::main().await } mitmproxy_rs-0.12.8/mitmproxy-rs/src/000077500000000000000000000000001511036467100176435ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-rs/src/contentviews.rs000066400000000000000000000115421511036467100227440ustar00rootroot00000000000000use mitmproxy_contentviews::{Metadata, Prettify, Reencode}; use pyo3::{exceptions::PyValueError, prelude::*}; use std::cell::OnceCell; use std::path::{Path, PathBuf}; pub struct PythonMetadata<'py> { inner: Bound<'py, PyAny>, content_type: OnceCell>, protobuf_definitions: OnceCell>, path: OnceCell>, } impl<'py> PythonMetadata<'py> { pub fn new(inner: Bound<'py, PyAny>) -> Self { PythonMetadata { inner, content_type: OnceCell::new(), protobuf_definitions: OnceCell::new(), path: OnceCell::new(), } } } impl Metadata for PythonMetadata<'_> { fn content_type(&self) -> Option<&str> { self.content_type .get_or_init(|| { self.inner .getattr("content_type") .ok()? .extract::() .ok() }) .as_deref() } fn get_header(&self, name: &str) -> Option { let http_message = self.inner.getattr("http_message").ok()?; let headers = http_message.getattr("headers").ok()?; headers.get_item(name).ok()?.extract::().ok() } fn get_path(&self) -> Option<&str> { self.path .get_or_init(|| { let flow = self.inner.getattr("flow").ok()?; let request = flow.getattr("request").ok()?; request.getattr("path").ok()?.extract::().ok() }) .as_deref() } fn protobuf_definitions(&self) -> Option<&Path> { self.protobuf_definitions .get_or_init(|| { self.inner .getattr("protobuf_definitions") .ok()? .extract::() .ok() }) .as_deref() } fn is_http_request(&self) -> bool { let Ok(http_message) = self.inner.getattr("http_message") else { return false; }; let Ok(request) = self .inner .getattr("flow") .and_then(|flow| flow.getattr("request")) else { return false; }; http_message.is(&request) } } impl<'py> FromPyObject<'py> for PythonMetadata<'py> { fn extract_bound(ob: &Bound<'py, PyAny>) -> PyResult { Ok(PythonMetadata::new(ob.clone())) } } #[pyclass(frozen, module = "mitmproxy_rs.contentviews", subclass)] pub struct Contentview(&'static dyn Prettify); impl Contentview { pub fn new<'py>( py: Python<'py>, contentview: &'static dyn Prettify, ) -> PyResult> { Contentview(contentview).into_pyobject(py) } } #[pymethods] impl Contentview { /// The name of this contentview. #[getter] pub fn name(&self) -> &str { self.0.name() } /// Pretty-print an (encoded) message. pub fn prettify(&self, data: Vec, metadata: PythonMetadata) -> PyResult { self.0 .prettify(&data, &metadata) .map_err(|e| PyValueError::new_err(format!("{e:?}"))) } /// Return the priority of this view for rendering data. pub fn render_priority(&self, data: Vec, metadata: PythonMetadata) -> PyResult { Ok(self.0.render_priority(&data, &metadata)) } /// Optional syntax highlighting that should be applied to the prettified output. #[getter] pub fn syntax_highlight(&self) -> &'static str { self.0.syntax_highlight().as_str() } fn __lt__(&self, py: Python<'_>, other: PyObject) -> PyResult { Ok(self.name() < other.getattr(py, "name")?.extract::(py)?.as_str()) } fn __repr__(&self) -> PyResult { Ok(format!( "", self.0.name() )) } } #[pyclass(frozen, module = "mitmproxy_rs.contentviews", extends=Contentview)] pub struct InteractiveContentview(&'static dyn Reencode); impl InteractiveContentview { /// Argument passed twice because of https://github.com/rust-lang/rust/issues/65991 pub fn new<'py, T: Prettify + Reencode>( py: Python<'py>, cv: &'static T, ) -> PyResult> { let cls = PyClassInitializer::from(Contentview(cv)).add_subclass(InteractiveContentview(cv)); Bound::new(py, cls) } } #[pymethods] impl InteractiveContentview { pub fn reencode(&self, data: &str, metadata: PythonMetadata) -> PyResult> { self.0 .reencode(data, &metadata) .map_err(|e| PyValueError::new_err(format!("{e:?}"))) } fn __repr__(self_: PyRef<'_, Self>) -> PyResult { Ok(format!( "", self_.as_super().name() )) } } mitmproxy_rs-0.12.8/mitmproxy-rs/src/dns_resolver.rs000066400000000000000000000110421511036467100227140ustar00rootroot00000000000000use mitmproxy::dns::{ResolveError, DNS_SERVERS}; use pyo3::exceptions::socket::gaierror; use pyo3::prelude::*; use pyo3::types::PyAny; use std::sync::OnceLock; use std::{net::IpAddr, net::SocketAddr, sync::Arc}; /// A DNS resolver backed by [hickory-dns](https://github.com/hickory-dns/hickory-dns). /// This can serve as a replacement for `getaddrinfo` with configurable resolution behavior. /// /// By default, the resolver will use the name servers configured by the operating system. /// It can optionally be configured to use custom name servers or ignore the hosts file. #[pyclass] pub struct DnsResolver(Arc); #[pymethods] impl DnsResolver { #[new] #[pyo3(signature = (*, name_servers=None, use_hosts_file=true))] fn new(name_servers: Option>, use_hosts_file: bool) -> PyResult { let name_servers = name_servers.map(|ns| { ns.into_iter() .map(|ip| SocketAddr::from((ip, 53))) .collect() }); let resolver = mitmproxy::dns::DnsResolver::new(name_servers, use_hosts_file).map_err(|e| { pyo3::exceptions::PyRuntimeError::new_err(format!( "failed to create dns resolver: {e}" )) })?; Ok(Self(Arc::new(resolver))) } /// Lookup the IPv4 and IPv6 addresses for a hostname. /// /// Raises `socket.gaierror` if the domain does not exist, has no records, or there is a general connectivity failure. pub fn lookup_ip<'py>(&self, py: Python<'py>, host: String) -> PyResult> { let resolver = self.0.clone(); pyo3_async_runtimes::tokio::future_into_py(py, async move { let resolved = resolver.lookup_ip(host).await; resolve_result_to_py(resolved) }) } /// Lookup the IPv4 addresses for a hostname. /// /// Raises `socket.gaierror` if the domain does not exist, has no records, or there is a general connectivity failure. pub fn lookup_ipv4<'py>(&self, py: Python<'py>, host: String) -> PyResult> { let resolver = self.0.clone(); pyo3_async_runtimes::tokio::future_into_py(py, async move { let resolved = resolver.lookup_ipv4(host).await; resolve_result_to_py(resolved) }) } /// Lookup the IPv6 addresses for a hostname. /// /// Raises `socket.gaierror` if the domain does not exist, has no records, or there is a general connectivity failure. pub fn lookup_ipv6<'py>(&self, py: Python<'py>, host: String) -> PyResult> { let resolver = self.0.clone(); pyo3_async_runtimes::tokio::future_into_py(py, async move { let resolved = resolver.lookup_ipv6(host).await; resolve_result_to_py(resolved) }) } } /// Returns the operating system's DNS servers as IP addresses. /// Raises a RuntimeError on unsupported platforms. /// /// *Availability: Windows, Unix* #[pyfunction] pub fn get_system_dns_servers() -> PyResult> { DNS_SERVERS.clone().map_err(|e| { pyo3::exceptions::PyRuntimeError::new_err(format!("failed to get dns servers: {e}")) }) } struct AddrInfoErrorConst(&'static str, OnceLock); impl AddrInfoErrorConst { const fn new(identifier: &'static str) -> Self { AddrInfoErrorConst(identifier, OnceLock::new()) } fn get(&self) -> isize { *self.1.get_or_init(|| { Python::with_gil(|py| { py.import("socket") .and_then(|m| m.getattr(self.0)) .and_then(|m| m.extract()) .unwrap_or_else(|e| { log::error!("Failed to resolve socket constant: {e}"); 0 }) }) }) } } static EAI_AGAIN: AddrInfoErrorConst = AddrInfoErrorConst::new("EAI_AGAIN"); static EAI_NONAME: AddrInfoErrorConst = AddrInfoErrorConst::new("EAI_NONAME"); static EAI_NODATA: AddrInfoErrorConst = AddrInfoErrorConst::new("EAI_NODATA"); fn resolve_result_to_py(resolved: Result, ResolveError>) -> Result, PyErr> { match resolved { Ok(resp) => Ok(resp .into_iter() .map(|ip| ip.to_string()) .collect::>()), Err(e) if e.is_nx_domain() => Err(gaierror::new_err((EAI_NONAME.get(), "NXDOMAIN"))), Err(e) if e.is_no_records_found() => Err(gaierror::new_err((EAI_NODATA.get(), "NOERROR"))), Err(e) => Err(gaierror::new_err((EAI_AGAIN.get(), e.to_string()))), } } mitmproxy_rs-0.12.8/mitmproxy-rs/src/lib.rs000066400000000000000000000106711511036467100207640ustar00rootroot00000000000000extern crate core; use std::sync::{LazyLock, Mutex}; use crate::contentviews::{Contentview, InteractiveContentview}; use mitmproxy_contentviews::{Prettify, Reencode}; use pyo3::{exceptions::PyException, prelude::*}; mod contentviews; mod dns_resolver; mod process_info; mod server; mod stream; mod syntax_highlight; pub mod task; mod udp_client; mod util; static LOGGER_INITIALIZED: LazyLock> = LazyLock::new(|| Mutex::new(false)); fn init_logger() -> PyResult<()> { if *LOGGER_INITIALIZED.lock().unwrap() { // logger already initialized Ok(()) } else if pyo3_log::try_init().is_ok() { // logger successfully initialized *LOGGER_INITIALIZED.lock().unwrap() = true; Ok(()) } else { // logger was not initialized and could not be initialized Err(PyException::new_err( "Failed to initialize mitmproxy_rs logger.", )) } } #[pymodule] mod mitmproxy_rs { use super::*; #[pymodule] mod certs { #[pymodule_export] use crate::util::{add_cert, remove_cert}; } #[pymodule] mod dns { #[pymodule_export] use crate::dns_resolver::{get_system_dns_servers, DnsResolver}; } #[pymodule] mod local { #[pymodule_export] use crate::server::{start_local_redirector, LocalRedirector}; } #[pymodule] mod process_info { #[pymodule_export] use crate::process_info::{active_executables, executable_icon, Process}; } #[pymodule] mod tun { #[pymodule_export] use crate::server::{create_tun_interface, TunInterface}; } #[pymodule] mod udp { #[pymodule_export] use crate::server::{start_udp_server, UdpServer}; #[pymodule_export] use crate::udp_client::open_udp_connection; } #[pymodule] mod wireguard { #[pymodule_export] use crate::server::{start_wireguard_server, WireGuardServer}; #[pymodule_export] use crate::util::{genkey, pubkey}; } #[pymodule] mod contentviews { use super::*; #[pymodule_export] use crate::contentviews::Contentview; #[pymodule_export] use crate::contentviews::InteractiveContentview; use mitmproxy_contentviews::{ HexDump, HexStream, MsgPack, Protobuf, TestInspectMetadata, GRPC, }; #[pymodule_init] fn init(m: &Bound<'_, PyModule>) -> PyResult<()> { m.add_contentview(&HexDump)?; m.add_interactive_contentview(&HexStream)?; m.add_interactive_contentview(&MsgPack)?; m.add_interactive_contentview(&Protobuf)?; m.add_interactive_contentview(&GRPC)?; m.add_contentview(&TestInspectMetadata)?; Ok(()) } } #[pymodule_export] use crate::stream::Stream; #[pymodule_init] #[allow(unused_variables)] fn init(m: &Bound<'_, PyModule>) -> PyResult<()> { // set up the Rust logger to send messages to the Python logger init_logger()?; // set up tracing subscriber for introspection with tokio-console #[cfg(feature = "tracing")] console_subscriber::init(); // Import platform-specific modules here so that missing dependencies are raising immediately. #[cfg(target_os = "macos")] m.py().import("mitmproxy_macos")?; #[cfg(all(target_os = "linux", not(feature = "docs")))] m.py().import("mitmproxy_linux")?; #[cfg(windows)] m.py().import("mitmproxy_windows")?; Ok(()) } #[pymodule] mod syntax_highlight { #[pymodule_export] use crate::syntax_highlight::highlight; #[pymodule_export] use crate::syntax_highlight::languages; #[pymodule_export] use crate::syntax_highlight::tags; } } trait AddContentview { fn add_contentview(&self, cv: &'static T) -> PyResult<()>; fn add_interactive_contentview(&self, i: &'static T) -> PyResult<()>; } impl AddContentview for Bound<'_, PyModule> { fn add_contentview(&self, cv: &'static T) -> PyResult<()> { let view = Contentview::new(self.py(), cv)?; self.add(cv.instance_name(), view) } fn add_interactive_contentview(&self, cv: &'static T) -> PyResult<()> { let view = InteractiveContentview::new(self.py(), cv)?; self.add(cv.instance_name(), view) } } mitmproxy_rs-0.12.8/mitmproxy-rs/src/process_info.rs000066400000000000000000000052341511036467100227060ustar00rootroot00000000000000use std::path::{Path, PathBuf}; #[cfg(any(windows, target_os = "macos"))] use anyhow::Context; use pyo3::prelude::*; #[cfg(any(windows, target_os = "macos"))] use pyo3::IntoPyObjectExt; #[cfg(any(windows, target_os = "macos", target_os = "linux"))] use mitmproxy::processes; #[pyclass(module = "mitmproxy_rs.process_info", frozen)] pub struct Process(mitmproxy::processes::ProcessInfo); #[pymethods] impl Process { /// Absolute path for the executable. #[getter] fn executable(&self) -> &Path { &self.0.executable } /// Process name suitable for display in the UI. #[getter] fn display_name(&self) -> &str { &self.0.display_name } /// `True` if the process has a visible window, `False` otherwise. /// This information is useful when sorting the process list. #[getter] fn is_visible(&self) -> bool { self.0.is_visible } /// `True` if the process is a system process, `False` otherwise. /// This information is useful to hide noise in the process list. #[getter] fn is_system(&self) -> bool { self.0.is_system } fn __repr__(&self) -> String { format!( "Process(executable={:?}, display_name={:?}, is_visible={}, is_system={})", self.executable(), self.display_name(), self.is_visible(), self.is_system(), ) } } /// Return a list of all running executables. /// Note that this groups multiple processes by executable name. /// /// *Availability: Windows, macOS, Linux* #[pyfunction] pub fn active_executables() -> PyResult> { #[cfg(any(windows, target_os = "macos", target_os = "linux"))] { processes::active_executables() .map(|p| p.into_iter().map(Process).collect()) .map_err(|e| pyo3::exceptions::PyRuntimeError::new_err(format!("{e}"))) } #[cfg(not(any(windows, target_os = "macos", target_os = "linux")))] Err(pyo3::exceptions::PyNotImplementedError::new_err( "active_executables not supported on the current OS", )) } /// Get a PNG icon for an executable path. /// /// *Availability: Windows, macOS* #[pyfunction] #[allow(unused_variables)] pub fn executable_icon(py: Python<'_>, path: PathBuf) -> PyResult { #[cfg(any(windows, target_os = "macos"))] { let mut icon_cache = processes::ICON_CACHE.lock().unwrap(); icon_cache .get_png(path) .context("failed to get image")? .into_py_any(py) } #[cfg(not(any(windows, target_os = "macos")))] Err(pyo3::exceptions::PyNotImplementedError::new_err( "executable_icon is only available on Windows", )) } mitmproxy_rs-0.12.8/mitmproxy-rs/src/server/000077500000000000000000000000001511036467100211515ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-rs/src/server/base.rs000066400000000000000000000055041511036467100224350ustar00rootroot00000000000000use crate::task::PyInteropTask; use anyhow::Result; use mitmproxy::packet_sources::{PacketSourceConf, PacketSourceTask}; use mitmproxy::shutdown::shutdown_task; use pyo3::prelude::*; use mitmproxy::shutdown; use tokio::sync::mpsc; use tokio::sync::watch; use tokio::task::JoinSet; #[derive(Debug)] pub struct Server { shutdown_done: shutdown::Receiver, start_shutdown: Option>, } impl Server { pub fn close(&mut self) { if let Some(trigger) = self.start_shutdown.take() { log::debug!("Shutting down."); trigger.send(()).ok(); } } pub fn wait_closed<'py>(&self, py: Python<'py>) -> PyResult> { let mut receiver = self.shutdown_done.clone(); pyo3_async_runtimes::tokio::future_into_py(py, async move { receiver.recv().await; Ok(()) }) } } impl Server { /// Set up and initialize a new WireGuard server. pub async fn init( packet_source_conf: T, py_tcp_handler: PyObject, py_udp_handler: PyObject, ) -> Result<(Self, T::Data)> where T: PacketSourceConf, { let typ = packet_source_conf.name(); log::debug!("Initializing {typ} ..."); // Channel used to notify Python land of incoming connections. let (transport_events_tx, transport_events_rx) = mpsc::channel(256); // Channel used to send data and ask for packets. // This needs to be unbounded because write() is not async. let (transport_commands_tx, transport_commands_rx) = mpsc::unbounded_channel(); // Channel used to trigger graceful shutdown let (shutdown_start_tx, shutdown_start_rx) = shutdown::channel(); let (packet_source_task, data) = packet_source_conf .build( transport_events_tx, transport_commands_rx, shutdown_start_rx.clone(), ) .await?; // initialize Python interop task let py_task = PyInteropTask::new( transport_commands_tx, transport_events_rx, py_tcp_handler, py_udp_handler, shutdown_start_rx, )?; // spawn tasks let mut tasks = JoinSet::new(); tasks.spawn(async move { packet_source_task.run().await }); tasks.spawn(async move { py_task.run().await }); let (shutdown_done_tx, shutdown_done_rx) = shutdown::channel(); tokio::spawn(shutdown_task(tasks, shutdown_done_tx)); log::debug!("{typ} successfully initialized."); Ok(( Server { shutdown_done: shutdown_done_rx, start_shutdown: Some(shutdown_start_tx), }, data, )) } } impl Drop for Server { fn drop(&mut self) { self.close() } } mitmproxy_rs-0.12.8/mitmproxy-rs/src/server/local_redirector.rs000066400000000000000000000170021511036467100250330ustar00rootroot00000000000000use mitmproxy::intercept_conf::InterceptConf; use pyo3::exceptions::PyValueError; #[cfg(target_os = "linux")] use mitmproxy::packet_sources::linux::LinuxConf; #[cfg(target_os = "macos")] use mitmproxy::packet_sources::macos::MacosConf; #[cfg(windows)] use mitmproxy::packet_sources::windows::WindowsConf; use pyo3::prelude::*; use crate::server::base::Server; use tokio::sync::mpsc; #[pyclass(module = "mitmproxy_rs.local")] #[derive(Debug)] pub struct LocalRedirector { server: Server, conf_tx: mpsc::UnboundedSender, spec: String, } impl LocalRedirector { pub fn new(server: Server, conf_tx: mpsc::UnboundedSender) -> Self { Self { server, conf_tx, spec: "inactive".to_string(), } } } #[pymethods] impl LocalRedirector { /// Return a textual description of the given spec, /// or raise a ValueError if the spec is invalid. #[staticmethod] fn describe_spec(spec: &str) -> PyResult { InterceptConf::try_from(spec) .map(|conf| conf.description()) .map_err(|e| PyValueError::new_err(format!("{e:?}"))) } /// Set a new intercept spec. pub fn set_intercept(&mut self, spec: String) -> PyResult<()> { let conf = InterceptConf::try_from(spec.as_str())?; self.spec = spec; self.conf_tx .send(conf) .map_err(crate::util::event_queue_unavailable)?; Ok(()) } /// Close the OS proxy server. pub fn close(&mut self) { self.server.close() } pub fn wait_closed<'p>(&self, py: Python<'p>) -> PyResult> { self.server.wait_closed(py) } /// Returns a `str` describing why local redirect mode is unavailable, or `None` if it is available. /// /// Reasons for unavailability may be an unsupported platform, or missing privileges. #[staticmethod] pub fn unavailable_reason() -> Option { #[cfg(any(windows, target_os = "macos"))] return None; #[cfg(target_os = "linux")] if nix::unistd::geteuid().is_root() { None } else { Some("mitmproxy is not running as root.".to_string()) } #[cfg(not(any(windows, target_os = "macos", target_os = "linux")))] Some(format!( "Local redirect mode is not supported on {}", std::env::consts::OS )) } pub fn __repr__(&self) -> String { format!("Local Redirector({})", self.spec) } } /// Start an OS-level proxy to intercept traffic from the current machine. /// /// - `handle_tcp_stream`: An async function that will be called for each new TCP `Stream`. /// - `handle_udp_stream`: An async function that will be called for each new UDP `Stream`. /// /// *Availability: Windows, Linux, and macOS* #[pyfunction] #[allow(unused_variables)] pub fn start_local_redirector( py: Python<'_>, handle_tcp_stream: PyObject, handle_udp_stream: PyObject, ) -> PyResult> { #[cfg(windows)] { let executable_path: std::path::PathBuf = py .import("mitmproxy_windows")? .call_method0("executable_path")? .extract()?; if !executable_path.exists() { return Err(anyhow::anyhow!("{} does not exist", executable_path.display()).into()); } let conf = WindowsConf { executable_path }; pyo3_async_runtimes::tokio::future_into_py(py, async move { let (server, conf_tx) = Server::init(conf, handle_tcp_stream, handle_udp_stream).await?; Ok(LocalRedirector::new(server, conf_tx)) }) } #[cfg(target_os = "linux")] { let executable_path: std::path::PathBuf = py .import("mitmproxy_linux")? .call_method0("executable_path")? .extract()?; if !executable_path.exists() { return Err(anyhow::anyhow!("{} does not exist", executable_path.display()).into()); } let conf = LinuxConf { executable_path }; pyo3_async_runtimes::tokio::future_into_py(py, async move { let (server, conf_tx) = Server::init(conf, handle_tcp_stream, handle_udp_stream).await?; Ok(LocalRedirector::new(server, conf_tx)) }) } #[cfg(target_os = "macos")] { let copy_task = macos::copy_redirector_app(&py)?; let conf = MacosConf; pyo3_async_runtimes::tokio::future_into_py(py, async move { if let Some(copy_task) = copy_task { tokio::task::spawn_blocking(copy_task) .await .map_err(|e| anyhow::anyhow!("failed to copy: {}", e))??; } let (server, conf_tx) = Server::init(conf, handle_tcp_stream, handle_udp_stream).await?; Ok(LocalRedirector::new(server, conf_tx)) }) } #[cfg(not(any(windows, target_os = "macos", target_os = "linux")))] Err(pyo3::exceptions::PyNotImplementedError::new_err( LocalRedirector::unavailable_reason(), )) } #[cfg(target_os = "macos")] mod macos { use super::*; use anyhow::{Context, Result}; use std::path::Path; use std::{env, fs}; /// Ensure "Mitmproxy Redirector.app" is installed into /Applications and up-to-date. pub(super) fn copy_redirector_app( py: &Python, ) -> PyResult Result<()>>> { if env::var_os("MITMPROXY_KEEP_REDIRECTOR").is_some_and(|x| x == "1") { log::info!("Using existing mitmproxy redirector app."); return Ok(None); } let info_plist = Path::new("/Applications/Mitmproxy Redirector.app/Contents/Info.plist"); let redirector_tar = { let module_filename = py.import("mitmproxy_macos")?.filename()?; let path = Path::new(module_filename.to_str()?) .parent() .ok_or_else(|| anyhow::anyhow!("invalid path"))? .join("Mitmproxy Redirector.app.tar"); if !path.exists() { return Err(anyhow::anyhow!("{} does not exist", path.display()).into()); } path }; let expected_mtime = fs::metadata(&redirector_tar) .and_then(|x| x.modified()) .context("failed to get mtime for redirector")?; if let Ok(actual_mtime) = fs::metadata(info_plist).and_then(|m| m.modified()) { if actual_mtime == expected_mtime { log::debug!("Existing mitmproxy redirector app is up-to-date."); return Ok(None); } log::info!("Updating mitmproxy redirector app..."); } else { log::info!("Installing mitmproxy redirector app..."); }; Ok(Some(move || { let archive_file = fs::File::open(redirector_tar)?; let mut archive = tar::Archive::new(archive_file); let destination_path = Path::new("/Applications/Mitmproxy Redirector.app/"); if destination_path.exists() { // archive.unpack with overwrite does not work, so we do this. fs::remove_dir_all(destination_path) .context("failed to remove existing mitmproxy redirector app")?; } archive .unpack(destination_path.parent().unwrap()) .context("failed to unpack redirector")?; fs::File::open(info_plist) .and_then(|f| f.set_modified(expected_mtime)) .context("failed to set redirector mtime") })) } } mitmproxy_rs-0.12.8/mitmproxy-rs/src/server/mod.rs000066400000000000000000000004441511036467100223000ustar00rootroot00000000000000mod base; mod local_redirector; mod tun; mod udp; mod wireguard; pub use local_redirector::{start_local_redirector, LocalRedirector}; pub use tun::{create_tun_interface, TunInterface}; pub use udp::{start_udp_server, UdpServer}; pub use wireguard::{start_wireguard_server, WireGuardServer}; mitmproxy_rs-0.12.8/mitmproxy-rs/src/server/tun.rs000066400000000000000000000051061511036467100223270ustar00rootroot00000000000000use crate::server::base::Server; use pyo3::prelude::*; #[cfg(target_os = "linux")] use nix::unistd; /// An open TUN interface. /// /// A new tun interface can be created by calling `create_tun_interface`. #[pyclass(module = "mitmproxy_rs.tun")] #[derive(Debug)] pub struct TunInterface { tun_name: String, server: Server, } #[pymethods] impl TunInterface { /// Get the tunnel interface name. pub fn tun_name(&self) -> &str { &self.tun_name } /// Request the interface to be closed. pub fn close(&mut self) { self.server.close() } /// Wait until the interface has shut down. pub fn wait_closed<'p>(&self, py: Python<'p>) -> PyResult> { self.server.wait_closed(py) } /// Returns a `str` describing why tun mode is unavailable, or `None` if TUN mode is available. /// /// Reasons for unavailability may be an unsupported platform, or missing privileges. #[staticmethod] pub fn unavailable_reason() -> Option { #[cfg(target_os = "linux")] if !unistd::geteuid().is_root() { Some(String::from("mitmproxy is not running as root")) } else { None } #[cfg(not(target_os = "linux"))] Some(String::from("TUN proxy mode is only supported on Linux")) } pub fn __repr__(&self) -> String { format!("TunInterface({})", self.tun_name) } } /// Create a TUN interface that is configured with the given parameters: /// /// - `handle_tcp_stream`: An async function that will be called for each new TCP `Stream`. /// - `handle_udp_stream`: An async function that will be called for each new UDP `Stream`. /// - `tun_name`: An optional string to specify the tunnel name. By default, tun0, ... will be used. /// /// *Availability: Linux* #[pyfunction] #[allow(unused_variables)] #[pyo3(signature = (handle_tcp_stream, handle_udp_stream, tun_name=None))] pub fn create_tun_interface( py: Python<'_>, handle_tcp_stream: PyObject, handle_udp_stream: PyObject, tun_name: Option, ) -> PyResult> { #[cfg(target_os = "linux")] { let conf = mitmproxy::packet_sources::tun::TunConf { tun_name }; pyo3_async_runtimes::tokio::future_into_py(py, async move { let (server, tun_name) = Server::init(conf, handle_tcp_stream, handle_udp_stream).await?; Ok(TunInterface { server, tun_name }) }) } #[cfg(not(target_os = "linux"))] Err(pyo3::exceptions::PyNotImplementedError::new_err( TunInterface::unavailable_reason(), )) } mitmproxy_rs-0.12.8/mitmproxy-rs/src/server/udp.rs000066400000000000000000000043361511036467100223150ustar00rootroot00000000000000use std::net::{IpAddr, SocketAddr}; use mitmproxy::packet_sources::udp::UdpConf; use crate::server::base::Server; use pyo3::prelude::*; /// A running UDP server. /// /// A new server can be started by calling `start_udp_server`. /// The public API is intended to be similar to the API provided by /// [`asyncio.Server`](https://docs.python.org/3/library/asyncio-eventloop.html#asyncio.Server) /// from the Python standard library. #[pyclass(module = "mitmproxy_rs.udp")] #[derive(Debug)] pub struct UdpServer { /// local address of the UDP socket local_addr: SocketAddr, server: Server, } #[pymethods] impl UdpServer { /// Request the server to gracefully shut down. /// /// The server will stop accepting new connections on its UDP socket, but will flush pending /// outgoing data before shutting down. pub fn close(&mut self) { self.server.close() } /// Wait until the server has shut down. /// /// This coroutine will yield once pending data has been flushed and all server tasks have /// successfully terminated after calling the `Server.close` method. pub fn wait_closed<'p>(&self, py: Python<'p>) -> PyResult> { self.server.wait_closed(py) } /// Get the local socket address that the UDP server is listening on. pub fn getsockname(&self) -> (String, u16) { (self.local_addr.ip().to_string(), self.local_addr.port()) } pub fn __repr__(&self) -> String { format!("UdpServer({})", self.local_addr) } } /// Start a UDP server that is configured with the given parameters: /// /// - `host`: The host IP address. /// - `port`: The listen port. /// - `handle_udp_stream`: An async function that will be called for each new UDP `Stream`. #[pyfunction] pub fn start_udp_server( py: Python<'_>, host: IpAddr, port: u16, handle_udp_stream: PyObject, ) -> PyResult> { let conf = UdpConf { listen_addr: SocketAddr::from((host, port)), }; let handle_tcp_stream = py.None(); pyo3_async_runtimes::tokio::future_into_py(py, async move { let (server, local_addr) = Server::init(conf, handle_tcp_stream, handle_udp_stream).await?; Ok(UdpServer { server, local_addr }) }) } mitmproxy_rs-0.12.8/mitmproxy-rs/src/server/wireguard.rs000066400000000000000000000060561511036467100235170ustar00rootroot00000000000000use std::net::{IpAddr, SocketAddr}; use crate::util::string_to_key; use mitmproxy::packet_sources::wireguard::WireGuardConf; use pyo3::prelude::*; use boringtun::x25519::PublicKey; use crate::server::base::Server; /// A running WireGuard server. /// /// A new server can be started by calling `start_udp_server`. /// The public API is intended to be similar to the API provided by /// [`asyncio.Server`](https://docs.python.org/3/library/asyncio-eventloop.html#asyncio.Server) /// from the Python standard library. #[pyclass(module = "mitmproxy_rs.wireguard")] #[derive(Debug)] pub struct WireGuardServer { /// local address of the WireGuard UDP socket local_addr: SocketAddr, server: Server, } #[pymethods] impl WireGuardServer { /// Request the WireGuard server to gracefully shut down. /// /// The server will stop accepting new connections on its UDP socket, but will flush pending /// outgoing data before shutting down. pub fn close(&mut self) { self.server.close() } /// Wait until the WireGuard server has shut down. /// /// This coroutine will yield once pending data has been flushed and all server tasks have /// successfully terminated after calling the `Server.close` method. pub fn wait_closed<'p>(&self, py: Python<'p>) -> PyResult> { self.server.wait_closed(py) } /// Get the local socket address that the WireGuard server is listening on. pub fn getsockname(&self) -> (String, u16) { (self.local_addr.ip().to_string(), self.local_addr.port()) } pub fn __repr__(&self) -> String { format!("WireGuardServer({})", self.local_addr) } } /// Start a WireGuard server that is configured with the given parameters: /// /// - `host`: The host address for the WireGuard UDP socket. /// - `port`: The listen port for the WireGuard server. The default port for WireGuard is `51820`. /// - `private_key`: The private X25519 key for the WireGuard server as a base64-encoded string. /// - `peer_public_keys`: List of public X25519 keys for WireGuard peers as base64-encoded strings. /// - `handle_tcp_stream`: An async function that will be called for each new TCP `Stream`. /// - `handle_udp_stream`: An async function that will be called for each new UDP `Stream`. #[pyfunction] pub fn start_wireguard_server( py: Python<'_>, host: IpAddr, port: u16, private_key: String, peer_public_keys: Vec, handle_tcp_stream: PyObject, handle_udp_stream: PyObject, ) -> PyResult> { let private_key = string_to_key(private_key)?; let peer_public_keys = peer_public_keys .into_iter() .map(string_to_key) .collect::>>()?; let conf = WireGuardConf { listen_addr: SocketAddr::from((host, port)), private_key, peer_public_keys, }; pyo3_async_runtimes::tokio::future_into_py(py, async move { let (server, local_addr) = Server::init(conf, handle_tcp_stream, handle_udp_stream).await?; Ok(WireGuardServer { server, local_addr }) }) } mitmproxy_rs-0.12.8/mitmproxy-rs/src/stream.rs000066400000000000000000000162471511036467100215160ustar00rootroot00000000000000use std::net::SocketAddr; use pyo3::exceptions::PyKeyError; use pyo3::{exceptions::PyOSError, intern, prelude::*, IntoPyObjectExt}; use tokio::sync::{ mpsc::{self}, oneshot::{self}, }; use mitmproxy::messages::{ConnectionId, TransportCommand, TunnelInfo}; use crate::util::{event_queue_unavailable, socketaddr_to_py}; #[derive(Debug)] pub enum StreamState { Open, HalfClosed, Closed, } /// An individual TCP or UDP stream with an API that is similar to /// [`asyncio.StreamReader` and `asyncio.StreamWriter`](https://docs.python.org/3/library/asyncio-stream.html) /// from the Python standard library. #[pyclass(module = "mitmproxy_rs")] #[derive(Debug)] pub struct Stream { pub connection_id: ConnectionId, pub state: StreamState, pub command_tx: mpsc::UnboundedSender, pub peername: SocketAddr, pub sockname: SocketAddr, pub tunnel_info: TunnelInfo, } #[pymethods] impl Stream { /// Read up to `n` bytes of a TCP stream, or a single UDP packet (`n` is ignored for UDP). /// /// Return an empty `bytes` object if the connection was closed /// or the server has been shut down. fn read<'py>(&self, py: Python<'py>, n: u32) -> PyResult> { match self.state { StreamState::Open | StreamState::HalfClosed => { let (tx, rx) = oneshot::channel(); self.command_tx .send(TransportCommand::ReadData(self.connection_id, n, tx)) .ok(); // if this fails tx is dropped and rx.await will error. pyo3_async_runtimes::tokio::future_into_py(py, async move { Ok(rx.await.unwrap_or_default()) }) } StreamState::Closed => { pyo3_async_runtimes::tokio::future_into_py(py, async move { Ok(Vec::::new()) }) } } } /// Write bytes onto the TCP stream, or send a single UDP packet. /// /// For TCP, this queues the data into a write buffer. To wait until the stream can be written /// to again, await `Stream.drain`. /// /// Raises: /// OSError if the connection has previously been closed or if server has been shut down. fn write(&self, data: Vec) -> PyResult<()> { match self.state { StreamState::Open => self .command_tx .send(TransportCommand::WriteData(self.connection_id, data)) .map_err(event_queue_unavailable), StreamState::HalfClosed => Err(PyOSError::new_err("connection closed")), StreamState::Closed => Err(PyOSError::new_err("connection closed")), } } /// Wait until the stream can be written to again. /// /// Raises: /// OSError if the stream is closed or the server has been shut down. fn drain<'py>(&self, py: Python<'py>) -> PyResult> { let (tx, rx) = oneshot::channel(); self.command_tx .send(TransportCommand::DrainWriter(self.connection_id, tx)) .map_err(event_queue_unavailable)?; pyo3_async_runtimes::tokio::future_into_py(py, async move { rx.await .map_err(|_| PyOSError::new_err("connection closed")) }) } /// Close the TCP stream after flushing the write buffer. /// This method is a no-op for UDP streams, but may still raise an error (see below). /// /// Raises: /// OSError if the server has been shut down. fn write_eof(&mut self) -> PyResult<()> { match self.state { StreamState::Open => { self.state = StreamState::HalfClosed; self.command_tx .send(TransportCommand::CloseConnection(self.connection_id, true)) .map_err(event_queue_unavailable) } StreamState::HalfClosed => Ok(()), StreamState::Closed => Ok(()), } } /// Close the stream for both reading and writing. /// /// Raises: /// OSError if the server has been shut down. fn close(&mut self) -> PyResult<()> { match self.state { StreamState::Open | StreamState::HalfClosed => { self.state = StreamState::Closed; self.command_tx .send(TransportCommand::CloseConnection(self.connection_id, false)) .map_err(event_queue_unavailable) } StreamState::Closed => Ok(()), } } /// Check whether this stream is being closed. fn is_closing(&self) -> bool { match self.state { StreamState::Open => false, StreamState::HalfClosed | StreamState::Closed => true, } } /// Wait until the stream is closed (currently a no-op). fn wait_closed<'py>(&self, py: Python<'py>) -> PyResult> { pyo3_async_runtimes::tokio::future_into_py(py, std::future::ready(Ok(()))) } /// Query the stream for details of the underlying network connection. /// /// Supported values: /// - Always available: `transport_protocol`, `peername`, `sockname` /// - WireGuard mode: `original_dst`, `original_src` /// - Local redirector mode: `pid`, `process_name`, `remote_endpoint` #[pyo3(signature = (name, default=None))] fn get_extra_info( &self, py: Python, name: String, default: Option, ) -> PyResult { match name.as_str() { "transport_protocol" => { let proto = if self.connection_id.is_tcp() { intern!(py, "tcp") } else { intern!(py, "udp") }; return Ok(proto.clone().unbind().into_any()); } "peername" => return socketaddr_to_py(py, self.peername), "sockname" => return socketaddr_to_py(py, self.sockname), _ => (), } match &self.tunnel_info { TunnelInfo::WireGuard { src_addr, dst_addr } => match name.as_str() { "original_src" => return socketaddr_to_py(py, *src_addr), "original_dst" => return socketaddr_to_py(py, *dst_addr), _ => (), }, TunnelInfo::LocalRedirector { pid, process_name, remote_endpoint, } => match name.as_str() { "pid" => return pid.into_py_any(py), "process_name" => return process_name.clone().into_py_any(py), "remote_endpoint" => { if let Some(endpoint) = remote_endpoint { return endpoint.into_py_any(py); } } _ => (), }, TunnelInfo::None => (), } match default { Some(x) => Ok(x), None => Err(PyKeyError::new_err(name)), } } fn __repr__(&self) -> String { format!( "Stream({}, peer={}, sock={}, tunnel_info={:?})", self.connection_id, self.peername, self.sockname, self.tunnel_info, ) } } impl Drop for Stream { fn drop(&mut self) { self.close().ok(); } } mitmproxy_rs-0.12.8/mitmproxy-rs/src/syntax_highlight.rs000066400000000000000000000024631511036467100235730ustar00rootroot00000000000000#[allow(unused_imports)] use anyhow::{anyhow, Result}; use std::str::FromStr; use mitmproxy_highlight::{Language, Tag}; use pyo3::{exceptions::PyValueError, prelude::*}; /// Transform text into a list of tagged chunks. /// /// Example: /// /// ```python /// from mitmproxy_rs.syntax_highlight import highlight /// highlighted = highlight("key: 42", "yaml") /// print(highlighted) # [('name', 'key'), ('', ': '), ('number', '42')] /// ``` #[pyfunction] pub fn highlight(text: String, language: &str) -> PyResult> { let language = Language::from_str(language)?; language .highlight(text.as_bytes()) .map(|chunks| { chunks .into_iter() .map(|(tag, text)| (tag.as_str(), text)) .collect() }) .map_err(|e| PyValueError::new_err(format!("{e:?}"))) } /// Return the list of all possible syntax highlight tags. #[pyfunction] pub fn tags() -> PyResult> { Ok(Tag::VALUES .iter() .map(|tag| tag.as_str()) .filter(|&x| !x.is_empty()) .collect()) } /// Return the list of all supported languages for syntax highlighting. #[pyfunction] pub fn languages() -> PyResult> { Ok(Language::VALUES.iter().map(|lang| lang.as_str()).collect()) } mitmproxy_rs-0.12.8/mitmproxy-rs/src/task.rs000066400000000000000000000135471511036467100211650ustar00rootroot00000000000000use std::collections::HashMap; use std::sync::Arc; use anyhow::{Context, Result}; use pyo3::exceptions::asyncio::CancelledError; use pyo3::prelude::*; use pyo3_async_runtimes::TaskLocals; use tokio::sync::{mpsc, Mutex}; use crate::stream::Stream; use crate::stream::StreamState; use mitmproxy::messages::{TransportCommand, TransportEvent}; use mitmproxy::shutdown; pub struct PyInteropTask { locals: TaskLocals, transport_commands: mpsc::UnboundedSender, transport_events: mpsc::Receiver, py_tcp_handler: PyObject, py_udp_handler: PyObject, shutdown: shutdown::Receiver, } impl PyInteropTask { #[allow(clippy::too_many_arguments)] pub fn new( transport_commands: mpsc::UnboundedSender, transport_events: mpsc::Receiver, py_tcp_handler: PyObject, py_udp_handler: PyObject, shutdown: shutdown::Receiver, ) -> Result { // Note: The current asyncio event loop needs to be determined here on the main thread. let locals = Python::with_gil(|py| -> Result { let py_loop = pyo3_async_runtimes::tokio::get_current_loop(py)?; TaskLocals::new(py_loop).copy_context(py) }) .context("failed to get python task locals")?; Ok(PyInteropTask { locals, transport_commands, transport_events, py_tcp_handler, py_udp_handler, shutdown, }) } pub async fn run(mut self) -> Result<()> { let active_streams = Arc::new(Mutex::new(HashMap::new())); loop { tokio::select! { // wait for graceful shutdown _ = self.shutdown.recv() => break, // wait for network events event = self.transport_events.recv() => { let Some(event) = event else { // channel was closed break; }; match event { TransportEvent::ConnectionEstablished { connection_id, src_addr, dst_addr, tunnel_info, command_tx, } => { let command_tx = command_tx.unwrap_or_else(|| self.transport_commands.clone()); // initialize new stream let stream = Stream { connection_id, state: StreamState::Open, command_tx, peername: src_addr, sockname: dst_addr, tunnel_info, }; let mut conns = active_streams.lock().await; // spawn connection handler coroutine if let Err(err) = Python::with_gil(|py| -> Result<(), PyErr> { // calling Python coroutine object yields an awaitable object let coro = if connection_id.is_tcp() { self.py_tcp_handler.call1(py, (stream, ))? } else { self.py_udp_handler.call1(py, (stream, ))? }; // convert Python awaitable into Rust Future let future = pyo3_async_runtimes::into_future_with_locals(&self.locals, coro.into_bound(py))?; // run Future on a new Tokio task let handle = { let active_streams = active_streams.clone(); tokio::spawn(async move { if let Err(err) = future.await { let is_cancelled = Python::with_gil(|py| err.is_instance_of::(py)); if !is_cancelled { log::error!("TCP connection handler coroutine raised an exception:\n{err}"); } } active_streams.lock().await.remove(&connection_id); }) }; conns.insert(connection_id, handle); Ok(()) }) { log::error!("Failed to spawn connection handler:\n{err}"); }; }, } } }; } log::debug!("Python interoperability task shutting down."); while let Some((_, handle)) = active_streams.lock().await.drain().next() { if handle.is_finished() { // Future is already finished: just await; // Python exceptions are already logged by the wrapper coroutine if let Err(err) = handle.await { log::warn!("TCP connection handler coroutine could not be joined: {err}"); } } else { // Future is not finished: abort tokio task handle.abort(); if let Err(err) = handle.await { if !err.is_cancelled() { // JoinError was not caused by cancellation: coroutine panicked, log error log::error!("TCP connection handler coroutine panicked: {err}"); } } } } Ok(()) } } mitmproxy_rs-0.12.8/mitmproxy-rs/src/udp_client.rs000066400000000000000000000154311511036467100223430ustar00rootroot00000000000000use anyhow::Context; use std::net::{IpAddr, Ipv4Addr, Ipv6Addr, SocketAddr}; use anyhow::Result; use pyo3::prelude::*; use tokio::net::{lookup_host, UdpSocket}; use tokio::sync::mpsc::{unbounded_channel, UnboundedReceiver}; use tokio::sync::oneshot; use crate::stream::{Stream, StreamState}; use mitmproxy::messages::{ConnectionId, TransportCommand, TunnelInfo}; use mitmproxy::MAX_PACKET_SIZE; use mitmproxy::packet_sources::udp::remote_host_closed_conn; /// Start a UDP client that is configured with the given parameters: /// /// - `host`: The host address. /// - `port`: The listen port. /// - `local_addr`: The local address to bind to. #[pyfunction] #[pyo3(signature = (host, port, *, local_addr = None))] pub fn open_udp_connection( py: Python<'_>, host: String, port: u16, local_addr: Option<(String, u16)>, ) -> PyResult> { pyo3_async_runtimes::tokio::future_into_py(py, async move { let socket = udp_connect(host, port, local_addr).await?; let peername = socket.peer_addr()?; let sockname = socket.local_addr()?; let (command_tx, command_rx) = unbounded_channel(); tokio::spawn(async { let task = UdpClientTask { socket, transport_commands_rx: command_rx, }; if let Err(e) = task.run().await { log::error!("UDP client errored: {e}"); } }); let stream = Stream { connection_id: ConnectionId::unassigned_udp(), state: StreamState::Open, command_tx, peername, sockname, tunnel_info: TunnelInfo::None, }; Ok(stream) }) } /// Open an UDP socket from bind_to to host:port. /// This is a bit trickier than expected because we want to support IPv4 and IPv6. async fn udp_connect( host: String, port: u16, local_addr: Option<(String, u16)>, ) -> Result { let addrs: Vec = lookup_host((host.as_str(), port)) .await .with_context(|| format!("unable to resolve hostname: {host}"))? .collect(); let socket = if let Some((host, port)) = local_addr { UdpSocket::bind((host.as_str(), port)) .await .with_context(|| format!("unable to bind to ({host}, {port})"))? } else if addrs.iter().any(|x| x.is_ipv4()) { // we initially tried to bind to IPv6 by default if that doesn't fail, // but binding mysteriously works if there are only IPv4 addresses in addrs, // and then we get a weird "invalid argument" error when calling socket.recv(). // So we just do the lazy thing and do IPv4 by default. UdpSocket::bind(SocketAddr::new(IpAddr::V4(Ipv4Addr::UNSPECIFIED), 0)) .await .context("unable to bind to 127.0.0.1:0")? } else { UdpSocket::bind(SocketAddr::new(IpAddr::V6(Ipv6Addr::UNSPECIFIED), 0)) .await .context("unable to bind to [::]:0")? }; socket .connect(addrs.as_slice()) .await .with_context(|| format!("unable to connect to {host}"))?; Ok(socket) } #[derive(Debug)] pub struct UdpClientTask { socket: UdpSocket, transport_commands_rx: UnboundedReceiver, } impl UdpClientTask { pub async fn run(mut self) -> Result<()> { let mut udp_buf = vec![0; MAX_PACKET_SIZE]; // this here isn't perfect because we block the entire transport_commands_rx channel if we // cannot send (so we also block receiving new packets), but that's hopefully good enough. let mut packet_needs_sending = false; let mut packet_payload = Vec::new(); let mut packet_tx: Option>> = None; loop { tokio::select! { // wait for transport_events_tx channel capacity... r = self.socket.recv(udp_buf.as_mut_slice()), if packet_tx.is_some() => { if remote_host_closed_conn(&r) { continue; } let len = r.context("UDP recv() failed")?; packet_tx .take() .unwrap() .send(udp_buf[..len].to_vec()) .ok(); }, // send_to is cancel safe, so we can use that for backpressure. e = self.socket.send(&packet_payload), if packet_needs_sending => { e.context("UDP send() failed")?; packet_needs_sending = false; }, command = self.transport_commands_rx.recv(), if !packet_needs_sending => { let Some(command) = command else { break; }; match command { TransportCommand::ReadData(_,_,tx) => { packet_tx = Some(tx); }, TransportCommand::WriteData(_, data) => { packet_payload = data; packet_needs_sending = true; }, TransportCommand::DrainWriter(_,tx) => { tx.send(()).ok(); }, TransportCommand::CloseConnection(_, half_close) => { if !half_close { break; } }, } } } } assert!(!packet_needs_sending); log::debug!("UDP client task shutting down."); Ok(()) } } #[cfg(test)] mod tests { use super::*; #[tokio::test] async fn test_udp_client_echo() -> Result<()> { let server = UdpSocket::bind("127.0.0.1:0").await?; let addr = server.local_addr()?; let socket = udp_connect(addr.ip().to_string(), addr.port(), None).await?; let (command_tx, command_rx) = unbounded_channel(); let handle = tokio::spawn( UdpClientTask { socket, transport_commands_rx: command_rx, } .run(), ); let cid = ConnectionId::unassigned_udp(); command_tx.send(TransportCommand::WriteData(cid, b"Hello World".to_vec()))?; let mut recv_buf = [0u8; 20]; let (n, src) = server.recv_from(&mut recv_buf).await?; assert_eq!(&recv_buf[..n], b"Hello World"); server.send_to(b"Hello back", src).await?; let (tx, rx) = oneshot::channel(); command_tx.send(TransportCommand::ReadData(cid, 0, tx))?; assert_eq!(rx.await?, b"Hello back"); command_tx.send(TransportCommand::CloseConnection(cid, false))?; handle.await??; Ok(()) } } mitmproxy_rs-0.12.8/mitmproxy-rs/src/util.rs000066400000000000000000000061561511036467100211760ustar00rootroot00000000000000#[allow(unused_imports)] use anyhow::{anyhow, Result}; use data_encoding::BASE64; #[cfg(target_os = "macos")] use mitmproxy::certificates; use pyo3::exceptions::PyOSError; use pyo3::{exceptions::PyValueError, prelude::*, IntoPyObjectExt}; use rand_core::OsRng; use std::net::SocketAddr; use boringtun::x25519::{PublicKey, StaticSecret}; use tokio::sync::mpsc; pub fn string_to_key(data: String) -> PyResult where T: From<[u8; 32]>, { BASE64 .decode(data.as_bytes()) .ok() .and_then(|bytes| <[u8; 32]>::try_from(bytes).ok()) .map(T::from) .ok_or_else(|| PyValueError::new_err("Invalid key.")) } pub fn socketaddr_to_py(py: Python, s: SocketAddr) -> PyResult { (s.ip().to_string(), s.port()).into_py_any(py) } pub fn event_queue_unavailable(_: mpsc::error::SendError) -> PyErr { PyOSError::new_err("Server has been shut down.") } /// Generate a WireGuard private key, analogous to the `wg genkey` command. #[pyfunction] pub fn genkey() -> String { BASE64.encode(&StaticSecret::random_from_rng(OsRng).to_bytes()) } /// Derive a WireGuard public key from a private key, analogous to the `wg pubkey` command. #[pyfunction] pub fn pubkey(private_key: String) -> PyResult { let private_key: StaticSecret = string_to_key(private_key)?; Ok(BASE64.encode(PublicKey::from(&private_key).as_bytes())) } /// Convert pem certificate to der certificate and add it to macOS keychain. #[pyfunction] #[allow(unused_variables)] pub fn add_cert(py: Python<'_>, pem: String) -> PyResult<()> { #[cfg(target_os = "macos")] { let pem_body = pem .lines() .skip(1) .take_while(|&line| line != "-----END CERTIFICATE-----") .collect::(); let filename = py.import("mitmproxy_rs")?.filename()?; let executable_path = std::path::Path::new(filename.to_str()?) .parent() .ok_or_else(|| anyhow!("invalid path"))? .join("macos-certificate-truster.app"); if !executable_path.exists() { return Err(anyhow!("{} does not exist", executable_path.display()).into()); } let der = BASE64.decode(pem_body.as_bytes()).unwrap(); match certificates::add_cert(der, executable_path.to_str().unwrap()) { Ok(_) => Ok(()), Err(e) => Err(PyErr::new::(format!( "Failed to add certificate: {e:?}" ))), } } #[cfg(not(target_os = "macos"))] Err(pyo3::exceptions::PyNotImplementedError::new_err( "OS proxy mode is only available on macos", )) } /// Delete mitmproxy certificate from the keychain. #[pyfunction] pub fn remove_cert() -> PyResult<()> { #[cfg(target_os = "macos")] { match certificates::remove_cert() { Ok(_) => Ok(()), Err(e) => Err(PyErr::new::(format!( "Failed to remove certificate: {e:?}" ))), } } #[cfg(not(target_os = "macos"))] Err(pyo3::exceptions::PyNotImplementedError::new_err( "OS proxy mode is only available on macos", )) } mitmproxy_rs-0.12.8/mitmproxy-rs/stubtest-allowlist.txt000066400000000000000000000004121511036467100234770ustar00rootroot00000000000000mitmproxy_rs.mitmproxy_rs mitmproxy_rs._pyinstaller.hook-mitmproxy_rs mitmproxy_rs._pyinstaller.hook-mitmproxy_windows mitmproxy_rs._pyinstaller.hook-mitmproxy_macos mitmproxy_rs._pyinstaller.hook-mitmproxy_linux mitmproxy_rs.T mitmproxy_rs.dns.DnsResolver.__init__ mitmproxy_rs-0.12.8/mitmproxy-windows/000077500000000000000000000000001511036467100201225ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-windows/README.md000066400000000000000000000010531511036467100214000ustar00rootroot00000000000000# mitmproxy-windows This package contains the following precompiled binaries for Windows: - `windows-redirector.exe`: A Rust executable that redirects traffic to mitmproxy via a Windows named pipe. - A vendored copy of [WinDivert](https://reqrypt.org/windivert.html), used by the redirector. ## Redirector Development Setup 1. Run `pip install -e .` to install `mitmproxy_windows` as editable. 2. Run something along the lines of `mitmdump --mode local:curl`. You should see a `Development mode: Compiling windows-redirector.exe...` message. mitmproxy_rs-0.12.8/mitmproxy-windows/mitmproxy_windows/000077500000000000000000000000001511036467100237445ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-windows/mitmproxy_windows/LICENSE000066400000000000000000001676451511036467100247740ustar00rootroot00000000000000WinDivert is dual-licensed under your choice of the GNU Lesser General Public License (LGPL) Version 3 or the GNU General Public License (GPL) Version 2. Copies of the LGPLv3, GPLv3 and GPLv2 are provided below. ============================================================================== GNU LESSER GENERAL PUBLIC LICENSE Version 3, 29 June 2007 Copyright (C) 2007 Free Software Foundation, Inc. Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. This version of the GNU Lesser General Public License incorporates the terms and conditions of version 3 of the GNU General Public License, supplemented by the additional permissions listed below. 0. Additional Definitions. As used herein, "this License" refers to version 3 of the GNU Lesser General Public License, and the "GNU GPL" refers to version 3 of the GNU General Public License. "The Library" refers to a covered work governed by this License, other than an Application or a Combined Work as defined below. An "Application" is any work that makes use of an interface provided by the Library, but which is not otherwise based on the Library. Defining a subclass of a class defined by the Library is deemed a mode of using an interface provided by the Library. A "Combined Work" is a work produced by combining or linking an Application with the Library. The particular version of the Library with which the Combined Work was made is also called the "Linked Version". The "Minimal Corresponding Source" for a Combined Work means the Corresponding Source for the Combined Work, excluding any source code for portions of the Combined Work that, considered in isolation, are based on the Application, and not on the Linked Version. The "Corresponding Application Code" for a Combined Work means the object code and/or source code for the Application, including any data and utility programs needed for reproducing the Combined Work from the Application, but excluding the System Libraries of the Combined Work. 1. Exception to Section 3 of the GNU GPL. You may convey a covered work under sections 3 and 4 of this License without being bound by section 3 of the GNU GPL. 2. Conveying Modified Versions. If you modify a copy of the Library, and, in your modifications, a facility refers to a function or data to be supplied by an Application that uses the facility (other than as an argument passed when the facility is invoked), then you may convey a copy of the modified version: a) under this License, provided that you make a good faith effort to ensure that, in the event an Application does not supply the function or data, the facility still operates, and performs whatever part of its purpose remains meaningful, or b) under the GNU GPL, with none of the additional permissions of this License applicable to that copy. 3. Object Code Incorporating Material from Library Header Files. The object code form of an Application may incorporate material from a header file that is part of the Library. You may convey such object code under terms of your choice, provided that, if the incorporated material is not limited to numerical parameters, data structure layouts and accessors, or small macros, inline functions and templates (ten or fewer lines in length), you do both of the following: a) Give prominent notice with each copy of the object code that the Library is used in it and that the Library and its use are covered by this License. b) Accompany the object code with a copy of the GNU GPL and this license document. 4. Combined Works. You may convey a Combined Work under terms of your choice that, taken together, effectively do not restrict modification of the portions of the Library contained in the Combined Work and reverse engineering for debugging such modifications, if you also do each of the following: a) Give prominent notice with each copy of the Combined Work that the Library is used in it and that the Library and its use are covered by this License. b) Accompany the Combined Work with a copy of the GNU GPL and this license document. c) For a Combined Work that displays copyright notices during execution, include the copyright notice for the Library among these notices, as well as a reference directing the user to the copies of the GNU GPL and this license document. d) Do one of the following: 0) Convey the Minimal Corresponding Source under the terms of this License, and the Corresponding Application Code in a form suitable for, and under terms that permit, the user to recombine or relink the Application with a modified version of the Linked Version to produce a modified Combined Work, in the manner specified by section 6 of the GNU GPL for conveying Corresponding Source. 1) Use a suitable shared library mechanism for linking with the Library. A suitable mechanism is one that (a) uses at run time a copy of the Library already present on the user's computer system, and (b) will operate properly with a modified version of the Library that is interface-compatible with the Linked Version. e) Provide Installation Information, but only if you would otherwise be required to provide such information under section 6 of the GNU GPL, and only to the extent that such information is necessary to install and execute a modified version of the Combined Work produced by recombining or relinking the Application with a modified version of the Linked Version. (If you use option 4d0, the Installation Information must accompany the Minimal Corresponding Source and Corresponding Application Code. If you use option 4d1, you must provide the Installation Information in the manner specified by section 6 of the GNU GPL for conveying Corresponding Source.) 5. Combined Libraries. You may place library facilities that are a work based on the Library side by side in a single library together with other library facilities that are not Applications and are not covered by this License, and convey such a combined library under terms of your choice, if you do both of the following: a) Accompany the combined library with a copy of the same work based on the Library, uncombined with any other library facilities, conveyed under the terms of this License. b) Give prominent notice with the combined library that part of it is a work based on the Library, and explaining where to find the accompanying uncombined form of the same work. 6. Revised Versions of the GNU Lesser General Public License. The Free Software Foundation may publish revised and/or new versions of the GNU Lesser General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number. If the Library as you received it specifies that a certain numbered version of the GNU Lesser General Public License "or any later version" applies to it, you have the option of following the terms and conditions either of that published version or of any later version published by the Free Software Foundation. If the Library as you received it does not specify a version number of the GNU Lesser General Public License, you may choose any version of the GNU Lesser General Public License ever published by the Free Software Foundation. If the Library as you received it specifies that a proxy can decide whether future versions of the GNU Lesser General Public License shall apply, that proxy's public statement of acceptance of any version is permanent authorization for you to choose that version for the Library. ============================================================================== GNU GENERAL PUBLIC LICENSE Version 3, 29 June 2007 Copyright (C) 2007 Free Software Foundation, Inc. Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Preamble The GNU General Public License is a free, copyleft license for software and other kinds of works. The licenses for most software and other practical works are designed to take away your freedom to share and change the works. By contrast, the GNU General Public License is intended to guarantee your freedom to share and change all versions of a program--to make sure it remains free software for all its users. We, the Free Software Foundation, use the GNU General Public License for most of our software; it applies also to any other work released this way by its authors. You can apply it to your programs, too. When we speak of free software, we are referring to freedom, not price. Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software (and charge for them if you wish), that you receive source code or can get it if you want it, that you can change the software or use pieces of it in new free programs, and that you know you can do these things. To protect your rights, we need to prevent others from denying you these rights or asking you to surrender the rights. Therefore, you have certain responsibilities if you distribute copies of the software, or if you modify it: responsibilities to respect the freedom of others. For example, if you distribute copies of such a program, whether gratis or for a fee, you must pass on to the recipients the same freedoms that you received. You must make sure that they, too, receive or can get the source code. And you must show them these terms so they know their rights. Developers that use the GNU GPL protect your rights with two steps: (1) assert copyright on the software, and (2) offer you this License giving you legal permission to copy, distribute and/or modify it. For the developers' and authors' protection, the GPL clearly explains that there is no warranty for this free software. For both users' and authors' sake, the GPL requires that modified versions be marked as changed, so that their problems will not be attributed erroneously to authors of previous versions. Some devices are designed to deny users access to install or run modified versions of the software inside them, although the manufacturer can do so. This is fundamentally incompatible with the aim of protecting users' freedom to change the software. The systematic pattern of such abuse occurs in the area of products for individuals to use, which is precisely where it is most unacceptable. Therefore, we have designed this version of the GPL to prohibit the practice for those products. If such problems arise substantially in other domains, we stand ready to extend this provision to those domains in future versions of the GPL, as needed to protect the freedom of users. Finally, every program is threatened constantly by software patents. States should not allow patents to restrict development and use of software on general-purpose computers, but in those that do, we wish to avoid the special danger that patents applied to a free program could make it effectively proprietary. To prevent this, the GPL assures that patents cannot be used to render the program non-free. The precise terms and conditions for copying, distribution and modification follow. TERMS AND CONDITIONS 0. Definitions. "This License" refers to version 3 of the GNU General Public License. "Copyright" also means copyright-like laws that apply to other kinds of works, such as semiconductor masks. "The Program" refers to any copyrightable work licensed under this License. Each licensee is addressed as "you". "Licensees" and "recipients" may be individuals or organizations. To "modify" a work means to copy from or adapt all or part of the work in a fashion requiring copyright permission, other than the making of an exact copy. The resulting work is called a "modified version" of the earlier work or a work "based on" the earlier work. A "covered work" means either the unmodified Program or a work based on the Program. To "propagate" a work means to do anything with it that, without permission, would make you directly or secondarily liable for infringement under applicable copyright law, except executing it on a computer or modifying a private copy. Propagation includes copying, distribution (with or without modification), making available to the public, and in some countries other activities as well. To "convey" a work means any kind of propagation that enables other parties to make or receive copies. Mere interaction with a user through a computer network, with no transfer of a copy, is not conveying. An interactive user interface displays "Appropriate Legal Notices" to the extent that it includes a convenient and prominently visible feature that (1) displays an appropriate copyright notice, and (2) tells the user that there is no warranty for the work (except to the extent that warranties are provided), that licensees may convey the work under this License, and how to view a copy of this License. If the interface presents a list of user commands or options, such as a menu, a prominent item in the list meets this criterion. 1. Source Code. The "source code" for a work means the preferred form of the work for making modifications to it. "Object code" means any non-source form of a work. A "Standard Interface" means an interface that either is an official standard defined by a recognized standards body, or, in the case of interfaces specified for a particular programming language, one that is widely used among developers working in that language. The "System Libraries" of an executable work include anything, other than the work as a whole, that (a) is included in the normal form of packaging a Major Component, but which is not part of that Major Component, and (b) serves only to enable use of the work with that Major Component, or to implement a Standard Interface for which an implementation is available to the public in source code form. A "Major Component", in this context, means a major essential component (kernel, window system, and so on) of the specific operating system (if any) on which the executable work runs, or a compiler used to produce the work, or an object code interpreter used to run it. The "Corresponding Source" for a work in object code form means all the source code needed to generate, install, and (for an executable work) run the object code and to modify the work, including scripts to control those activities. However, it does not include the work's System Libraries, or general-purpose tools or generally available free programs which are used unmodified in performing those activities but which are not part of the work. For example, Corresponding Source includes interface definition files associated with source files for the work, and the source code for shared libraries and dynamically linked subprograms that the work is specifically designed to require, such as by intimate data communication or control flow between those subprograms and other parts of the work. The Corresponding Source need not include anything that users can regenerate automatically from other parts of the Corresponding Source. The Corresponding Source for a work in source code form is that same work. 2. Basic Permissions. All rights granted under this License are granted for the term of copyright on the Program, and are irrevocable provided the stated conditions are met. This License explicitly affirms your unlimited permission to run the unmodified Program. The output from running a covered work is covered by this License only if the output, given its content, constitutes a covered work. This License acknowledges your rights of fair use or other equivalent, as provided by copyright law. You may make, run and propagate covered works that you do not convey, without conditions so long as your license otherwise remains in force. You may convey covered works to others for the sole purpose of having them make modifications exclusively for you, or provide you with facilities for running those works, provided that you comply with the terms of this License in conveying all material for which you do not control copyright. Those thus making or running the covered works for you must do so exclusively on your behalf, under your direction and control, on terms that prohibit them from making any copies of your copyrighted material outside their relationship with you. Conveying under any other circumstances is permitted solely under the conditions stated below. Sublicensing is not allowed; section 10 makes it unnecessary. 3. Protecting Users' Legal Rights From Anti-Circumvention Law. No covered work shall be deemed part of an effective technological measure under any applicable law fulfilling obligations under article 11 of the WIPO copyright treaty adopted on 20 December 1996, or similar laws prohibiting or restricting circumvention of such measures. When you convey a covered work, you waive any legal power to forbid circumvention of technological measures to the extent such circumvention is effected by exercising rights under this License with respect to the covered work, and you disclaim any intention to limit operation or modification of the work as a means of enforcing, against the work's users, your or third parties' legal rights to forbid circumvention of technological measures. 4. Conveying Verbatim Copies. You may convey verbatim copies of the Program's source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice; keep intact all notices stating that this License and any non-permissive terms added in accord with section 7 apply to the code; keep intact all notices of the absence of any warranty; and give all recipients a copy of this License along with the Program. You may charge any price or no price for each copy that you convey, and you may offer support or warranty protection for a fee. 5. Conveying Modified Source Versions. You may convey a work based on the Program, or the modifications to produce it from the Program, in the form of source code under the terms of section 4, provided that you also meet all of these conditions: a) The work must carry prominent notices stating that you modified it, and giving a relevant date. b) The work must carry prominent notices stating that it is released under this License and any conditions added under section 7. This requirement modifies the requirement in section 4 to "keep intact all notices". c) You must license the entire work, as a whole, under this License to anyone who comes into possession of a copy. This License will therefore apply, along with any applicable section 7 additional terms, to the whole of the work, and all its parts, regardless of how they are packaged. This License gives no permission to license the work in any other way, but it does not invalidate such permission if you have separately received it. d) If the work has interactive user interfaces, each must display Appropriate Legal Notices; however, if the Program has interactive interfaces that do not display Appropriate Legal Notices, your work need not make them do so. A compilation of a covered work with other separate and independent works, which are not by their nature extensions of the covered work, and which are not combined with it such as to form a larger program, in or on a volume of a storage or distribution medium, is called an "aggregate" if the compilation and its resulting copyright are not used to limit the access or legal rights of the compilation's users beyond what the individual works permit. Inclusion of a covered work in an aggregate does not cause this License to apply to the other parts of the aggregate. 6. Conveying Non-Source Forms. You may convey a covered work in object code form under the terms of sections 4 and 5, provided that you also convey the machine-readable Corresponding Source under the terms of this License, in one of these ways: a) Convey the object code in, or embodied in, a physical product (including a physical distribution medium), accompanied by the Corresponding Source fixed on a durable physical medium customarily used for software interchange. b) Convey the object code in, or embodied in, a physical product (including a physical distribution medium), accompanied by a written offer, valid for at least three years and valid for as long as you offer spare parts or customer support for that product model, to give anyone who possesses the object code either (1) a copy of the Corresponding Source for all the software in the product that is covered by this License, on a durable physical medium customarily used for software interchange, for a price no more than your reasonable cost of physically performing this conveying of source, or (2) access to copy the Corresponding Source from a network server at no charge. c) Convey individual copies of the object code with a copy of the written offer to provide the Corresponding Source. This alternative is allowed only occasionally and noncommercially, and only if you received the object code with such an offer, in accord with subsection 6b. d) Convey the object code by offering access from a designated place (gratis or for a charge), and offer equivalent access to the Corresponding Source in the same way through the same place at no further charge. You need not require recipients to copy the Corresponding Source along with the object code. If the place to copy the object code is a network server, the Corresponding Source may be on a different server (operated by you or a third party) that supports equivalent copying facilities, provided you maintain clear directions next to the object code saying where to find the Corresponding Source. Regardless of what server hosts the Corresponding Source, you remain obligated to ensure that it is available for as long as needed to satisfy these requirements. e) Convey the object code using peer-to-peer transmission, provided you inform other peers where the object code and Corresponding Source of the work are being offered to the general public at no charge under subsection 6d. A separable portion of the object code, whose source code is excluded from the Corresponding Source as a System Library, need not be included in conveying the object code work. A "User Product" is either (1) a "consumer product", which means any tangible personal property which is normally used for personal, family, or household purposes, or (2) anything designed or sold for incorporation into a dwelling. In determining whether a product is a consumer product, doubtful cases shall be resolved in favor of coverage. For a particular product received by a particular user, "normally used" refers to a typical or common use of that class of product, regardless of the status of the particular user or of the way in which the particular user actually uses, or expects or is expected to use, the product. A product is a consumer product regardless of whether the product has substantial commercial, industrial or non-consumer uses, unless such uses represent the only significant mode of use of the product. "Installation Information" for a User Product means any methods, procedures, authorization keys, or other information required to install and execute modified versions of a covered work in that User Product from a modified version of its Corresponding Source. The information must suffice to ensure that the continued functioning of the modified object code is in no case prevented or interfered with solely because modification has been made. If you convey an object code work under this section in, or with, or specifically for use in, a User Product, and the conveying occurs as part of a transaction in which the right of possession and use of the User Product is transferred to the recipient in perpetuity or for a fixed term (regardless of how the transaction is characterized), the Corresponding Source conveyed under this section must be accompanied by the Installation Information. But this requirement does not apply if neither you nor any third party retains the ability to install modified object code on the User Product (for example, the work has been installed in ROM). The requirement to provide Installation Information does not include a requirement to continue to provide support service, warranty, or updates for a work that has been modified or installed by the recipient, or for the User Product in which it has been modified or installed. Access to a network may be denied when the modification itself materially and adversely affects the operation of the network or violates the rules and protocols for communication across the network. Corresponding Source conveyed, and Installation Information provided, in accord with this section must be in a format that is publicly documented (and with an implementation available to the public in source code form), and must require no special password or key for unpacking, reading or copying. 7. Additional Terms. "Additional permissions" are terms that supplement the terms of this License by making exceptions from one or more of its conditions. Additional permissions that are applicable to the entire Program shall be treated as though they were included in this License, to the extent that they are valid under applicable law. If additional permissions apply only to part of the Program, that part may be used separately under those permissions, but the entire Program remains governed by this License without regard to the additional permissions. When you convey a copy of a covered work, you may at your option remove any additional permissions from that copy, or from any part of it. (Additional permissions may be written to require their own removal in certain cases when you modify the work.) You may place additional permissions on material, added by you to a covered work, for which you have or can give appropriate copyright permission. Notwithstanding any other provision of this License, for material you add to a covered work, you may (if authorized by the copyright holders of that material) supplement the terms of this License with terms: a) Disclaiming warranty or limiting liability differently from the terms of sections 15 and 16 of this License; or b) Requiring preservation of specified reasonable legal notices or author attributions in that material or in the Appropriate Legal Notices displayed by works containing it; or c) Prohibiting misrepresentation of the origin of that material, or requiring that modified versions of such material be marked in reasonable ways as different from the original version; or d) Limiting the use for publicity purposes of names of licensors or authors of the material; or e) Declining to grant rights under trademark law for use of some trade names, trademarks, or service marks; or f) Requiring indemnification of licensors and authors of that material by anyone who conveys the material (or modified versions of it) with contractual assumptions of liability to the recipient, for any liability that these contractual assumptions directly impose on those licensors and authors. All other non-permissive additional terms are considered "further restrictions" within the meaning of section 10. If the Program as you received it, or any part of it, contains a notice stating that it is governed by this License along with a term that is a further restriction, you may remove that term. If a license document contains a further restriction but permits relicensing or conveying under this License, you may add to a covered work material governed by the terms of that license document, provided that the further restriction does not survive such relicensing or conveying. If you add terms to a covered work in accord with this section, you must place, in the relevant source files, a statement of the additional terms that apply to those files, or a notice indicating where to find the applicable terms. Additional terms, permissive or non-permissive, may be stated in the form of a separately written license, or stated as exceptions; the above requirements apply either way. 8. Termination. You may not propagate or modify a covered work except as expressly provided under this License. Any attempt otherwise to propagate or modify it is void, and will automatically terminate your rights under this License (including any patent licenses granted under the third paragraph of section 11). However, if you cease all violation of this License, then your license from a particular copyright holder is reinstated (a) provisionally, unless and until the copyright holder explicitly and finally terminates your license, and (b) permanently, if the copyright holder fails to notify you of the violation by some reasonable means prior to 60 days after the cessation. Moreover, your license from a particular copyright holder is reinstated permanently if the copyright holder notifies you of the violation by some reasonable means, this is the first time you have received notice of violation of this License (for any work) from that copyright holder, and you cure the violation prior to 30 days after your receipt of the notice. Termination of your rights under this section does not terminate the licenses of parties who have received copies or rights from you under this License. If your rights have been terminated and not permanently reinstated, you do not qualify to receive new licenses for the same material under section 10. 9. Acceptance Not Required for Having Copies. You are not required to accept this License in order to receive or run a copy of the Program. Ancillary propagation of a covered work occurring solely as a consequence of using peer-to-peer transmission to receive a copy likewise does not require acceptance. However, nothing other than this License grants you permission to propagate or modify any covered work. These actions infringe copyright if you do not accept this License. Therefore, by modifying or propagating a covered work, you indicate your acceptance of this License to do so. 10. Automatic Licensing of Downstream Recipients. Each time you convey a covered work, the recipient automatically receives a license from the original licensors, to run, modify and propagate that work, subject to this License. You are not responsible for enforcing compliance by third parties with this License. An "entity transaction" is a transaction transferring control of an organization, or substantially all assets of one, or subdividing an organization, or merging organizations. If propagation of a covered work results from an entity transaction, each party to that transaction who receives a copy of the work also receives whatever licenses to the work the party's predecessor in interest had or could give under the previous paragraph, plus a right to possession of the Corresponding Source of the work from the predecessor in interest, if the predecessor has it or can get it with reasonable efforts. You may not impose any further restrictions on the exercise of the rights granted or affirmed under this License. For example, you may not impose a license fee, royalty, or other charge for exercise of rights granted under this License, and you may not initiate litigation (including a cross-claim or counterclaim in a lawsuit) alleging that any patent claim is infringed by making, using, selling, offering for sale, or importing the Program or any portion of it. 11. Patents. A "contributor" is a copyright holder who authorizes use under this License of the Program or a work on which the Program is based. The work thus licensed is called the contributor's "contributor version". A contributor's "essential patent claims" are all patent claims owned or controlled by the contributor, whether already acquired or hereafter acquired, that would be infringed by some manner, permitted by this License, of making, using, or selling its contributor version, but do not include claims that would be infringed only as a consequence of further modification of the contributor version. For purposes of this definition, "control" includes the right to grant patent sublicenses in a manner consistent with the requirements of this License. Each contributor grants you a non-exclusive, worldwide, royalty-free patent license under the contributor's essential patent claims, to make, use, sell, offer for sale, import and otherwise run, modify and propagate the contents of its contributor version. In the following three paragraphs, a "patent license" is any express agreement or commitment, however denominated, not to enforce a patent (such as an express permission to practice a patent or covenant not to sue for patent infringement). To "grant" such a patent license to a party means to make such an agreement or commitment not to enforce a patent against the party. If you convey a covered work, knowingly relying on a patent license, and the Corresponding Source of the work is not available for anyone to copy, free of charge and under the terms of this License, through a publicly available network server or other readily accessible means, then you must either (1) cause the Corresponding Source to be so available, or (2) arrange to deprive yourself of the benefit of the patent license for this particular work, or (3) arrange, in a manner consistent with the requirements of this License, to extend the patent license to downstream recipients. "Knowingly relying" means you have actual knowledge that, but for the patent license, your conveying the covered work in a country, or your recipient's use of the covered work in a country, would infringe one or more identifiable patents in that country that you have reason to believe are valid. If, pursuant to or in connection with a single transaction or arrangement, you convey, or propagate by procuring conveyance of, a covered work, and grant a patent license to some of the parties receiving the covered work authorizing them to use, propagate, modify or convey a specific copy of the covered work, then the patent license you grant is automatically extended to all recipients of the covered work and works based on it. A patent license is "discriminatory" if it does not include within the scope of its coverage, prohibits the exercise of, or is conditioned on the non-exercise of one or more of the rights that are specifically granted under this License. You may not convey a covered work if you are a party to an arrangement with a third party that is in the business of distributing software, under which you make payment to the third party based on the extent of your activity of conveying the work, and under which the third party grants, to any of the parties who would receive the covered work from you, a discriminatory patent license (a) in connection with copies of the covered work conveyed by you (or copies made from those copies), or (b) primarily for and in connection with specific products or compilations that contain the covered work, unless you entered into that arrangement, or that patent license was granted, prior to 28 March 2007. Nothing in this License shall be construed as excluding or limiting any implied license or other defenses to infringement that may otherwise be available to you under applicable patent law. 12. No Surrender of Others' Freedom. If conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot convey a covered work so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not convey it at all. For example, if you agree to terms that obligate you to collect a royalty for further conveying from those to whom you convey the Program, the only way you could satisfy both those terms and this License would be to refrain entirely from conveying the Program. 13. Use with the GNU Affero General Public License. Notwithstanding any other provision of this License, you have permission to link or combine any covered work with a work licensed under version 3 of the GNU Affero General Public License into a single combined work, and to convey the resulting work. The terms of this License will continue to apply to the part which is the covered work, but the special requirements of the GNU Affero General Public License, section 13, concerning interaction through a network will apply to the combination as such. 14. Revised Versions of this License. The Free Software Foundation may publish revised and/or new versions of the GNU General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number. If the Program specifies that a certain numbered version of the GNU General Public License "or any later version" applies to it, you have the option of following the terms and conditions either of that numbered version or of any later version published by the Free Software Foundation. If the Program does not specify a version number of the GNU General Public License, you may choose any version ever published by the Free Software Foundation. If the Program specifies that a proxy can decide which future versions of the GNU General Public License can be used, that proxy's public statement of acceptance of a version permanently authorizes you to choose that version for the Program. Later license versions may give you additional or different permissions. However, no additional obligations are imposed on any author or copyright holder as a result of your choosing to follow a later version. 15. Disclaimer of Warranty. THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 16. Limitation of Liability. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. 17. Interpretation of Sections 15 and 16. If the disclaimer of warranty and limitation of liability provided above cannot be given local legal effect according to their terms, reviewing courts shall apply local law that most closely approximates an absolute waiver of all civil liability in connection with the Program, unless a warranty or assumption of liability accompanies a copy of the Program in return for a fee. END OF TERMS AND CONDITIONS How to Apply These Terms to Your New Programs If you develop a new program, and you want it to be of the greatest possible use to the public, the best way to achieve this is to make it free software which everyone can redistribute and change under these terms. To do so, attach the following notices to the program. It is safest to attach them to the start of each source file to most effectively state the exclusion of warranty; and each file should have at least the "copyright" line and a pointer to where the full notice is found. Copyright (C) This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see . Also add information on how to contact you by electronic and paper mail. If the program does terminal interaction, make it output a short notice like this when it starts in an interactive mode: Copyright (C) This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'. This is free software, and you are welcome to redistribute it under certain conditions; type `show c' for details. The hypothetical commands `show w' and `show c' should show the appropriate parts of the General Public License. Of course, your program's commands might be different; for a GUI interface, you would use an "about box". You should also get your employer (if you work as a programmer) or school, if any, to sign a "copyright disclaimer" for the program, if necessary. For more information on this, and how to apply and follow the GNU GPL, see . The GNU General Public License does not permit incorporating your program into proprietary programs. If your program is a subroutine library, you may consider it more useful to permit linking proprietary applications with the library. If this is what you want to do, use the GNU Lesser General Public License instead of this License. But first, please read . ============================================================================== GNU GENERAL PUBLIC LICENSE Version 2, June 1991 Copyright (C) 1989, 1991 Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. Preamble The licenses for most software are designed to take away your freedom to share and change it. By contrast, the GNU General Public License is intended to guarantee your freedom to share and change free software--to make sure the software is free for all its users. This General Public License applies to most of the Free Software Foundation's software and to any other program whose authors commit to using it. (Some other Free Software Foundation software is covered by the GNU Lesser General Public License instead.) You can apply it to your programs, too. When we speak of free software, we are referring to freedom, not price. Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software (and charge for this service if you wish), that you receive source code or can get it if you want it, that you can change the software or use pieces of it in new free programs; and that you know you can do these things. To protect your rights, we need to make restrictions that forbid anyone to deny you these rights or to ask you to surrender the rights. These restrictions translate to certain responsibilities for you if you distribute copies of the software, or if you modify it. For example, if you distribute copies of such a program, whether gratis or for a fee, you must give the recipients all the rights that you have. You must make sure that they, too, receive or can get the source code. And you must show them these terms so they know their rights. We protect your rights with two steps: (1) copyright the software, and (2) offer you this license which gives you legal permission to copy, distribute and/or modify the software. Also, for each author's protection and ours, we want to make certain that everyone understands that there is no warranty for this free software. If the software is modified by someone else and passed on, we want its recipients to know that what they have is not the original, so that any problems introduced by others will not reflect on the original authors' reputations. Finally, any free program is threatened constantly by software patents. We wish to avoid the danger that redistributors of a free program will individually obtain patent licenses, in effect making the program proprietary. To prevent this, we have made it clear that any patent must be licensed for everyone's free use or not licensed at all. The precise terms and conditions for copying, distribution and modification follow. GNU GENERAL PUBLIC LICENSE TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION 0. This License applies to any program or other work which contains a notice placed by the copyright holder saying it may be distributed under the terms of this General Public License. The "Program", below, refers to any such program or work, and a "work based on the Program" means either the Program or any derivative work under copyright law: that is to say, a work containing the Program or a portion of it, either verbatim or with modifications and/or translated into another language. (Hereinafter, translation is included without limitation in the term "modification".) Each licensee is addressed as "you". Activities other than copying, distribution and modification are not covered by this License; they are outside its scope. The act of running the Program is not restricted, and the output from the Program is covered only if its contents constitute a work based on the Program (independent of having been made by running the Program). Whether that is true depends on what the Program does. 1. You may copy and distribute verbatim copies of the Program's source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty; keep intact all the notices that refer to this License and to the absence of any warranty; and give any other recipients of the Program a copy of this License along with the Program. You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee. 2. You may modify your copy or copies of the Program or any portion of it, thus forming a work based on the Program, and copy and distribute such modifications or work under the terms of Section 1 above, provided that you also meet all of these conditions: a) You must cause the modified files to carry prominent notices stating that you changed the files and the date of any change. b) You must cause any work that you distribute or publish, that in whole or in part contains or is derived from the Program or any part thereof, to be licensed as a whole at no charge to all third parties under the terms of this License. c) If the modified program normally reads commands interactively when run, you must cause it, when started running for such interactive use in the most ordinary way, to print or display an announcement including an appropriate copyright notice and a notice that there is no warranty (or else, saying that you provide a warranty) and that users may redistribute the program under these conditions, and telling the user how to view a copy of this License. (Exception: if the Program itself is interactive but does not normally print such an announcement, your work based on the Program is not required to print an announcement.) These requirements apply to the modified work as a whole. If identifiable sections of that work are not derived from the Program, and can be reasonably considered independent and separate works in themselves, then this License, and its terms, do not apply to those sections when you distribute them as separate works. But when you distribute the same sections as part of a whole which is a work based on the Program, the distribution of the whole must be on the terms of this License, whose permissions for other licensees extend to the entire whole, and thus to each and every part regardless of who wrote it. Thus, it is not the intent of this section to claim rights or contest your rights to work written entirely by you; rather, the intent is to exercise the right to control the distribution of derivative or collective works based on the Program. In addition, mere aggregation of another work not based on the Program with the Program (or with a work based on the Program) on a volume of a storage or distribution medium does not bring the other work under the scope of this License. 3. You may copy and distribute the Program (or a work based on it, under Section 2) in object code or executable form under the terms of Sections 1 and 2 above provided that you also do one of the following: a) Accompany it with the complete corresponding machine-readable source code, which must be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or, b) Accompany it with a written offer, valid for at least three years, to give any third party, for a charge no more than your cost of physically performing source distribution, a complete machine-readable copy of the corresponding source code, to be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange; or, c) Accompany it with the information you received as to the offer to distribute corresponding source code. (This alternative is allowed only for noncommercial distribution and only if you received the program in object code or executable form with such an offer, in accord with Subsection b above.) The source code for a work means the preferred form of the work for making modifications to it. For an executable work, complete source code means all the source code for all modules it contains, plus any associated interface definition files, plus the scripts used to control compilation and installation of the executable. However, as a special exception, the source code distributed need not include anything that is normally distributed (in either source or binary form) with the major components (compiler, kernel, and so on) of the operating system on which the executable runs, unless that component itself accompanies the executable. If distribution of executable or object code is made by offering access to copy from a designated place, then offering equivalent access to copy the source code from the same place counts as distribution of the source code, even though third parties are not compelled to copy the source along with the object code. 4. You may not copy, modify, sublicense, or distribute the Program except as expressly provided under this License. Any attempt otherwise to copy, modify, sublicense or distribute the Program is void, and will automatically terminate your rights under this License. However, parties who have received copies, or rights, from you under this License will not have their licenses terminated so long as such parties remain in full compliance. 5. You are not required to accept this License, since you have not signed it. However, nothing else grants you permission to modify or distribute the Program or its derivative works. These actions are prohibited by law if you do not accept this License. Therefore, by modifying or distributing the Program (or any work based on the Program), you indicate your acceptance of this License to do so, and all its terms and conditions for copying, distributing or modifying the Program or works based on it. 6. Each time you redistribute the Program (or any work based on the Program), the recipient automatically receives a license from the original licensor to copy, distribute or modify the Program subject to these terms and conditions. You may not impose any further restrictions on the recipients' exercise of the rights granted herein. You are not responsible for enforcing compliance by third parties to this License. 7. If, as a consequence of a court judgment or allegation of patent infringement or for any other reason (not limited to patent issues), conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot distribute so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not distribute the Program at all. For example, if a patent license would not permit royalty-free redistribution of the Program by all those who receive copies directly or indirectly through you, then the only way you could satisfy both it and this License would be to refrain entirely from distribution of the Program. If any portion of this section is held invalid or unenforceable under any particular circumstance, the balance of the section is intended to apply and the section as a whole is intended to apply in other circumstances. It is not the purpose of this section to induce you to infringe any patents or other property right claims or to contest validity of any such claims; this section has the sole purpose of protecting the integrity of the free software distribution system, which is implemented by public license practices. Many people have made generous contributions to the wide range of software distributed through that system in reliance on consistent application of that system; it is up to the author/donor to decide if he or she is willing to distribute software through any other system and a licensee cannot impose that choice. This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License. 8. If the distribution and/or use of the Program is restricted in certain countries either by patents or by copyrighted interfaces, the original copyright holder who places the Program under this License may add an explicit geographical distribution limitation excluding those countries, so that distribution is permitted only in or among countries not thus excluded. In such case, this License incorporates the limitation as if written in the body of this License. 9. The Free Software Foundation may publish revised and/or new versions of the General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number. If the Program specifies a version number of this License which applies to it and "any later version", you have the option of following the terms and conditions either of that version or of any later version published by the Free Software Foundation. If the Program does not specify a version number of this License, you may choose any version ever published by the Free Software Foundation. 10. If you wish to incorporate parts of the Program into other free programs whose distribution conditions are different, write to the author to ask for permission. For software which is copyrighted by the Free Software Foundation, write to the Free Software Foundation; we sometimes make exceptions for this. Our decision will be guided by the two goals of preserving the free status of all derivatives of our free software and of promoting the sharing and reuse of software generally. NO WARRANTY 11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. END OF TERMS AND CONDITIONS How to Apply These Terms to Your New Programs If you develop a new program, and you want it to be of the greatest possible use to the public, the best way to achieve this is to make it free software which everyone can redistribute and change under these terms. To do so, attach the following notices to the program. It is safest to attach them to the start of each source file to most effectively convey the exclusion of warranty; and each file should have at least the "copyright" line and a pointer to where the full notice is found. Copyright (C) This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. Also add information on how to contact you by electronic and paper mail. If the program is interactive, make it output a short notice like this when it starts in an interactive mode: Gnomovision version 69, Copyright (C) year name of author Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'. This is free software, and you are welcome to redistribute it under certain conditions; type `show c' for details. The hypothetical commands `show w' and `show c' should show the appropriate parts of the General Public License. Of course, the commands you use may be called something other than `show w' and `show c'; they could even be mouse-clicks or menu items--whatever suits your program. You should also get your employer (if you work as a programmer) or your school, if any, to sign a "copyright disclaimer" for the program, if necessary. Here is a sample; alter the names: Yoyodyne, Inc., hereby disclaims all copyright interest in the program `Gnomovision' (which makes passes at compilers) written by James Hacker. , 1 April 1989 Ty Coon, President of Vice This General Public License does not permit incorporating your program into proprietary programs. If your program is a subroutine library, you may consider it more useful to permit linking proprietary applications with the library. If this is what you want to do, use the GNU Lesser General Public License instead of this License. mitmproxy_rs-0.12.8/mitmproxy-windows/mitmproxy_windows/WINDIVERT_VERSION000066400000000000000000000000061511036467100264430ustar00rootroot000000000000002.2.2 mitmproxy_rs-0.12.8/mitmproxy-windows/mitmproxy_windows/WinDivert.dll000066400000000000000000001350001511036467100263530ustar00rootroot00000000000000MZ@ !L!This program cannot be run in DOS mode. $PEd Я." z<{b0 0tH ,.textxz P`.data ~@P.rdata"$@`@.pdataH@0@.xdata @0@.bssP.edata0@0@.idatat@0.reloc @0BA;A rALAAH(IIAt LIH(ËA 9Art H1VSH(AAHΉAtG1EtAAuA>AAAuA>AADD!HA HH%EuH([^E11fI9s FQIDD1H9s EPHDAt AQAЉSLANE1G ADHLX9sEHvEPE9s1HtH H1[ËQ;Q r ALAQSH0E1HA1M9tt1vLD$(AHHLD$( v/PHɀv$Hv PHv<+t<=u1IDɅtAH0[VSH(A E1Aʚ;HAӻ D1AAD1…At DE1uQ0HOAAuH([^VSH(AHB H΃8uHEtAIcL1ADщAA#u 1u w0WHAuAIAuu0HH([^H([^VSH(HˉHٺ.sHفHٺ.SHHHٺ.8@HH([^wAUATUWVSHHz HHD$ HD$(uzuzu VLD$0)D$01AfAxu9AO9LA1IuLl$ L%p9uHHIE),HcLHDD0D$ HQHIEYyHH[^_]A\A]HDAHAFu1  HHuHøQЀ v1Aøʃ߃Av 01 ËAЋQIIЉH HЋQAH IHЋQ AH LIQ H UWVSH81탼$IHLHD$ HD$(t90yxLH|$ HD$ HALH I‹D$$T$ T$(LЉD$$H HЋT$,D$(H HЉD$,H u6DUEt1EDt!AB< w EPкHu1@I9uARAB DFEAWHtH+1EL9s T HH8[^_]AVAUATUWVSHIʅu-zu'zu!z u0Hİ[^_]A\A]A^D$(BE1D$,BD$0B D$41|$(EH|$8H5xH|$d Hl$8LL$d1H|$Lt(E1BTF$HAw'Ht"EH FtdALBLdH HIIuHHuT$xE1ۉT$(T$|T$,$T$0$T$4CDHk w#HtމH |LHLLH HIIu@t$`V0BII(A(!|$,|$0|$4AAtDLHİ[^_]A\A]A^VSH(HLƺA %HuHH1@}SPSPS P H([^VSH8MLtFMLL$(tHvHHH[^_]A\A]A^A_HrvHHH[^_]A\A]A^A_nHHH[^_]A\A]A^A_JHx}Hc HH3vHHH[^_]A\A]A^A_HvHHH[^_]A\A]A^A_HvHHH[^_]A\A]A^A_HuHHH[^_]A\A]A^A_HuHHH[^_]A\A]A^A_HHH[^_]A\A]A^A_t$ u>HuHHH[^_]A\A]A^A_^HxuHHH[^_]A\A]A^A_?HHH[^_]A\A]A^A_]HHH[^_]A\A]A^A_Ct*H(uHHHHH[^_]A\A]A^A_HHHH[^_]A\A]A^A_QHtHHH[^_]A\A]A^A_HtHHH[^_]A\A]A^A_HtHHH[^_]A\A]A^A_gHtHHH[^_]A\A]A^A_HHtHHH[^_]A\A]A^A_)HptHntH HctHctHHH[^_]A\A]A^A_HKtHHH[^_]A\A]A^A_H6tH9tH>tHCtHFt|HHtpHJtHHH[^_]A\A]A^A_jH3tHHH[^_]A\A]A^A_KHtHHH[^_]A\A]A^A_,HtHHH[^_]A\A]A^A_ HsHHH[^_]A\A]A^A_HsHHH[^_]A\A]A^A_HsHHH[^_]A\A]A^A_HsHHH[^_]A\A]A^A_HsHHH[^_]A\A]A^A_rHmsHHH[^_]A\A]A^A_SHRsHHH[^_]A\A]A^A_4H:sHHH[^_]A\A]A^A_H(sHHH[^_]A\A]A^A_HsHHH[^_]A\A]A^A_HrHHH[^_]A\A]A^A_HrHHH[^_]A\A]A^A_HrHHH[^_]A\A]A^A_zHrHHH[^_]A\A]A^A_[HrHHH[^_]A\A]A^A_pHHH[^_]A\A]A^A_{H*pHHH[^_]A\A]A^A_\HpHHH[^_]A\A]A^A_=HpHHH[^_]A\A]A^A_HoHHH[^_]A\A]A^A_HoHHH[^_]A\A]A^A_HoHHH[^_]A\A]A^A_HoHHH[^_]A\A]A^A_HoHHH[^_]A\A]A^A_HoHHH[^_]A\A]A^A_dHoHHH[^_]A\A]A^A_EHroHHH[^_]A\A]A^A_&H]oHHH[^_]A\A]A^A_HHoHHH[^_]A\A]A^A_H4oHHH[^_]A\A]A^A_HoHHH[^_]A\A]A^A_H oHHH[^_]A\A]A^A_HnHHH[^_]A\A]A^A_lHnHHH[^_]A\A]A^A_MHnHHH[^_]A\A]A^A_.HnHHH[^_]A\A]A^A_HHHH[^_]A\A]A^A_[HD Ey-HADHHYnHHH[^_]A\A]A^A_HH[^_]A\A]A^A_WVDT$@EɉAHA1A9|!E)E9DMcH|$8J4 H^_AWAVWVSH@H\$0HIEHD$0HD$8HΊ0< wn HLD$(7LD$(u1uD$0Hƃ0 HH H‹D$4L$0HЋT$8D$4H HЋT$HtDXHdvAJH3UJtDXL CvHωK3mA LHuHr@|H(LpLhRIHHk,xu A7t}tVHH H1=HVILDhIH$MLH8[^_]A\A]A^A_ H8[^_]A\A]A^A_AUATUWVSH8H$EHILEiy AHkTHH H$tH|$ EH|$(D$ EHHHHkAyt9zuoEILH|$(D$ HGH|$ IIغz*EILH|$ HH|$ IIغyHr1HH8[^_]A\A]AVUWVSHLLD$`Lu1Ht$hHt0@u*D11fF IAAHfF tK Hl$xHH#D$`DL$dHt%@HufEAI11H$H@ZHWHD$pAHL$8I@HDD$_:d$\%D% D к(D$8D$XL$HfEfEH$Htf@HE Lt$8HT$pAHLt$ AtmHNts9:HuiLH6qKFT ;IHIUAemfDT`Et t11u HLT$PASDCKArELBÃHCA FDD`TT`AIA D ABL@ut<|$Lc|$HX|$@MD$D=t:D$0D$@Ht(D$@Hx[^_]A\A]A^A_AWAVAUATUWVSH9@IH$EMH$H$DŽ$DŽ$DŽ$H<@ H$AWMGHك кAGAGAHH f>w$f=sCffvxfv*fOwfGsxBfv;fQt0Mo MwMHUIM9uvMG H_u 0AG AGAGBIH,$-AG AGAGAG HT$8H9>HH&>D$~$fAWfAGfv9H$0;rAGfv9YH$0;IzH1= +1AxH$HJ1HD$@AH$H|$@HD$PHDL$11D$dIGHD$hl$8HkH\$@HCH{HD$X1D$8|$8L|$HJw D$HD$8ڀ t|$8l$H{@8@:e@&@@!@)@-@(l@HG@?,!@=@<^@]t8@|*@[Dn~1mzomp`vA|=ul$8sAx6DD$8AA|=rIDA|=vul$8utA|=vul$8wvA|:tb{|l$HA|-&l$8y~l$HA|-|l$8zZ@@$uDOA1HLs{HD$H+|$8ALL$`L$`.1wHHH8H|$HHD$HH|$H'HD$hL$` 8E뎋l$HHH HH$H yH$HT$@H$L$D$ AHD$(DŽ$Hu H$$HkHT$@:~tZHH H|$PH$AAHfDŽ$H|$ ff$M>f=|TfAD$fAD$H$0A$AD$Ad$AD$AD$ AD$AD$H$0DE1ASH=9ZHt$PDED)MkLARMI2IJrLc,APIA  (APDnAWw H_B*EhAփAD EhAPyAD APAPQAP QAPQ APN&wHHtAP ARfv)։fAPfARfv)։fAPAE9HHHtWH AZ',ƄG:ut W:t ƄAnE1CH jHcHH1HD$8HHD$HHD$HDEF9D\$`D$`A9uEVHDJE9}$bu$u qH$L$ALHHD$81tTH$r$A 1A~81ɉ$1 1H1ɉ$1 181ɉ$1 At>r$AJ 1A~81ɉ$1 1M1ɉ$1t 181ɉ$1[ 1Ƀ$1F F1ɉ$12 fF1Ɇ$1 fF1Ɇ$1 fF1f$1 fF1f$1 fF1ɉ Љ$1 F1ɉ$1 F 1ɉ$1~ fF 1Ɇ$1e F DŽ$1DŽ$DŽ$ȉ$, FDŽ$1DŽ$DŽ$ȉ$ S1Ƀ Љ$1 SC  1 1$ fC1Ɇ$1 C1ɉ$1o C1ɉ$1[ C1ȉ$C ȉ$Cȉ$Cȉ$ C1ȉ$Cȉ$C ȉ$C$ȉ$ HD$@1$1 HD$@1@$1 HD$@1f@f$$1 HD$@1ɋ@ȉ$1r AE1ɉ$1] AE1ɉ$1H fAE1Ɇ$1. AE1ȉ$1 fE1Ɇ$1fE1Ɇ$1E1ȉ$1E1ȉ$1E 1$1E 1$1E 1$1qE 1$1XE 1$1?E 1$1'E 1Ƀ$1fE1Ɇ$1fE1Ɇ$1fE1Ɇ$1$1ɉ$1fA$1Ɇ$1fAD$1Ɇ$1zfAD$1Ɇ$1_fAD$1Ɇ$1D$1ɉ$1-AgAEHEDŽ$DŽ$DŽ$tV щ V% EtV V% EtV V1 Љ$HtF$tYA?NA@CAA8AB-AC"ADA& A'A(A6A7A8AGAHAIAJAKA AE1AuA2jA_ATAIA>A3A (AAAAA AA AAAAAAAAAxAmAbA WALAAA6A-+A# A,A! A%A/A A*A+A.A$A1A"A0A)A:A4~A5vA3nA9fAL^AMVANNAOFAP>AQ6AR.AS&ATAUAVAWA;AIڃHtuAD$ DL$LA HىD$8HIDL$LHT$@IHDHD$8AAD$D$tD$pD$lD$hɢHuAHDrHIyIT$IH蘢H`AD$t@AT$CH E8HcHs!tuv wrHl$ IMHxHAT$fAL$fHHcfPH̀fv HԀB@fv HĀ@IH$H$@D$\h:L4M&M A|$AD$fAT$v{L̀1AuiAOf9uL$(D$ AfA;Wu@A HHHD$8HL$8@|L LxH8HA1DfAjDNĀASfA;Gu(D$(T$ E1MHHHD$8Ld$8fA;GusA HHHD$8HL$8@|L H7LyHAAGfAfAGfAAD$AAT$HaAT$HS|LĀAGA9CL\$@A HHHD$8tpL\$@@|L LxHL$8LXACfAfAGfAAD$AAT$HѬAT$HìHD$8HP責HD$8PIM&E1HHHtj$D$AHD$ Ll$hD$pD$xt$tHt$hHH迖HK|$xzt H'/1HĈ[^_]A\A]A^A_SHH$LLL$xLD$pHD$`HD$XHD$@H$HD$PHD$HHD$ HD$8H$HD$pHD$xHDŽ$HD$0H$HDŽ$HDŽ$HDŽ$HD$(1tAH$L$HLD$xHT$pHD$0H$HD$(H$HD$ ˽HĠ[ÉȆÉȆÉHHڙՙЙ˙H(trPt%tnH ttu1rE1E111?HtH‹ tG tHt H tk wteHtHڕH(AWAVAUATUWVSHHAD$L$(H$(H$(HH$( H $f0uf=`A0}H1HB1AHVHHu 0HMU1 H$IEHHHD$ H HtHW$E1E1Hىb Aw}AAHE1;t E1AH$MIAAAH1҅tE1ɉAHHH҃ I A~E1AAH账1҅tE1ɉAH蛦HH҃@I AAHv1҅t"E1ɉAH]HHҁI AAAAFH!AAFHHHҁI ։AAFHHHҁI ։ѥAAFHHHҁ I ։詥AAFHHHҁI ։聥AAFHbHEL LE1E1HD$0D$(@D$ H O/iHIL-mAՉǍ@L=L$v Hp$(tHY$A1A11L.HHD$x$DHTt  11A?oHILAH.HUHHOH.fL HAԉ]HHALH9fDBHDŽ$E1fC<~tI{IH$E1E1HD$@HD$0H,+HD$8D$(HD$ 7%CD?E1H$Lt$ AH*D$(H$H$D$(AE1H*HD$ ،H$H[^_]A\A]A^A_WH@1LT$0I˹LHD$pLL$(LDD$ IMкdHD$0gH@_HXL$H$DL$LD$@L\$@L$L\$HtW18MuLL$(D$ IѺdLL$(LT$0IщD$ d茔HXHHHD$pDD$ LD$0LL$(IѺHD$8PHD$0詔HHHXL$H$DL$LD$@L\$@D$L\$HtW18MuLL$(D$ IѺALL$(LT$0IщD$ ϓHXWH@1E1LD$0IʹLT$0HD$(D$ LH@_H%WH@1E1LT$0I˹LT$8LD$0HD$(D$ ML莓H@_WH@1LT$0I˹MLMT$0HD$(dD$ LGH@_Ð%%֊%Ɗ%%%%%v%f%V%F%6%&%%%%%։%%%%%~%n%^%N%>%.SH0H膉 >= NETWORKNETWORK_FORWARDFLOWSOCKETREFLECTPACKETESTABLISHEDDELETEDBINDCONNECTLISTENACCEPTCLOSEOPEN0xzeroeventrandom8random16random32packetpacket16packet32lengthtimestamptcp.Payloadtcp.Payload16tcp.Payload32udp.Payloadudp.Payload16udp.Payload32inboundoutboundfragmentifIdxsubIfIdxipipv6icmptcpudpicmpv6ip.HdrLengthip.TOSip.Lengthip.Idip.DFip.MFip.FragOffip.TTLip.Protocolip.Checksumip.SrcAddrip.DstAddripv6.TrafficClassipv6.FlowLabelipv6.Lengthipv6.NextHdripv6.HopLimitipv6.SrcAddripv6.DstAddricmp.Typeicmp.Codeicmp.Checksumicmp.Bodyicmpv6.Typeicmpv6.Codeicmpv6.Checksumicmpv6.Bodytcp.SrcPorttcp.DstPorttcp.SeqNumtcp.AckNumtcp.HdrLengthtcp.Urgtcp.Acktcp.Pshtcp.Rsttcp.Syntcp.Fintcp.Windowtcp.Checksumtcp.UrgPtrtcp.PayloadLengthudp.SrcPortudp.DstPortudp.Lengthudp.Checksumudp.PayloadLengthloopbackimpostorprocessIdlocalAddrremoteAddrlocalPortremotePortprotocolendpointIdparentEndpointIdlayerpriorityb]Ռx Q2qB+iƊ#aJY݋:Ή*͍"Ihp Ŏ`ʈAه6?S\{ֈ3R܏9XwԐ1kkkkkkkkkkkkkkkkkkkkkkkkkk߂߂߂߂߂߂k kP__|__o%Dc)Xς ŕ̕ӕڕ" 6ZȩZ6BNZfNo errorOut of memoryFilter expression too deepFilter expression too longFilter expression contains a bad tokenFilter expression contains a bad token for layerFilter expression parse errorFilter expression array index is out-of-boundsFilter object buffer is too shortFilter object is invalidInternal assertion failedUnknown error@WinDiv_6ܬ $-qqȮȮݮٴAYq`/C\uϷIٸVù-G]vҺ6Nd}ƻ1*H%ɿs?TLҳ%ҳ%.Eβ´y(Ydz'2=HS^it$/:EP[fq| "-8CN o\\.\WinDivertWinDivertDriverInstallMutexWinDivert\WinDivert64.sysEventMessageFileTypesSupportedSystem\CurrentControlSet\Services\EventLog\System\WinDivert!  %$#"   ,)2'0*JKL4-.(&/+31 867MNO95FRSTGHIPQU:;<=>?@ABCDEFEFED7q/B۵Y[V9^?[} U1$ހt]rtܛGi0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz+=}}  !"#$%)*+,-./0123459:;<=>?CDEFGHIJKLMNOPQRSTUVW   FALSEICMPICMPV6TCPTRUEUDPandnotor/bcb`6be bab_b^bg졀bXbjbk(bbԡbZܡb[b2b&b bJFbM㢀bG b vb Lb b Xb(bFb`b?Ob=cbPxbRbKbb }b!Ѥb"fb#b$b%b&b'b(餀b)b*b+rb,Zb-b.b/ޤb0Ƥb1bDbEb2b3b4b5b6Ǣb7բb8+b9b:Db;??Y Y@@ (Q,Q4m@mLX l 't'ExE|55ZZJJggI$I$%,%%@%k&Dk&7T77l78t8Y;Y;;;??@@CCzCzCDDnFnFTTUUX0XpHpWp`Wpphpypyzzzzzzzzzzzzzzzzzz{{{{{{~~;;҆҆ZBB0`0R0B0`B0`B0`  0`pP"b0`pP  0 `pPB0`b0`B0`pP0  0 ` p PB " 0 ` p P  0 ` p P   0`pP  0`pP  0 ` p P`p  r0`p  20`pP b 0 ` p P  b0`pP  0`pPR0`p  0 ` p P  0 ` p P  0 ` p P  0 ` p P % 0 ` p Pr0r0  0 ` p P0B Y 0 ` p PrprprprpR0W)cT(҆@UCXppWpyz{zzzzzzzzzCDT{~;bq0Qk'<Rg  WinDivert.dllWinDivertCloseWinDivertGetParamWinDivertHelperCalcChecksumsWinDivertHelperCompileFilterWinDivertHelperDecrementTTLWinDivertHelperEvalFilterWinDivertHelperFormatFilterWinDivertHelperFormatIPv4AddressWinDivertHelperFormatIPv6AddressWinDivertHelperHashPacketWinDivertHelperHtonIPv6AddressWinDivertHelperHtonIpv6AddressWinDivertHelperHtonlWinDivertHelperHtonllWinDivertHelperHtonsWinDivertHelperNtohIPv6AddressWinDivertHelperNtohIpv6AddressWinDivertHelperNtohlWinDivertHelperNtohllWinDivertHelperNtohsWinDivertHelperParseIPv4AddressWinDivertHelperParseIPv6AddressWinDivertHelperParsePacketWinDivertOpenWinDivertRecvWinDivertRecvExWinDivertSendWinDivertSendExWinDivertSetParamWinDivertShutdown< ,d2DTfv(>T`n|2DTfv(>T`n|WCloseServiceHandleCreateServiceWDeleteServiceOpenSCManagerWOpenServiceW0RegCloseKey8RegCreateKeyExA}RegSetValueExA~RegSetValueExWStartServiceWUCloseHandleCreateEventWCreateFileWCreateMutexWDeviceIoControlGetLastError#GetModuleFileNameWIGetOverlappedResultHeapAllocHeapCreateHeapDestroyReleaseMutexlSetLastErrorTlsAllocTlsFreeTlsGetValueTlsSetValueWaitForSingleObjectADVAPI32.dllKERNEL32.dllЫ 0@P`pЬ 0@P`pЭ 0@P`pЮ 0@P`pЯ` 0@P`pР 0@P`pС 0@P`pmitmproxy_rs-0.12.8/mitmproxy-windows/mitmproxy_windows/WinDivert.lib000066400000000000000000000615161511036467100263600ustar00rootroot00000000000000! / 1663636311 0 0 0 1950 ` > ~ f f00~~DD ##&&)),h,h/>/>225577::==@x@xClClF`F`IBIBL:L:O2O2RRTTWWZZ]]``__install_MINGW_amd64_WinDivert_lib_iname_head_install_MINGW_amd64_WinDivert_libWinDivertShutdown__imp_WinDivertShutdownWinDivertSetParam__imp_WinDivertSetParamWinDivertSendEx__imp_WinDivertSendExWinDivertSend__imp_WinDivertSendWinDivertRecvEx__imp_WinDivertRecvExWinDivertRecv__imp_WinDivertRecvWinDivertOpen__imp_WinDivertOpenWinDivertHelperParsePacket__imp_WinDivertHelperParsePacketWinDivertHelperParseIPv6Address__imp_WinDivertHelperParseIPv6AddressWinDivertHelperParseIPv4Address__imp_WinDivertHelperParseIPv4AddressWinDivertHelperNtohs__imp_WinDivertHelperNtohsWinDivertHelperNtohll__imp_WinDivertHelperNtohllWinDivertHelperNtohl__imp_WinDivertHelperNtohlWinDivertHelperNtohIpv6Address__imp_WinDivertHelperNtohIpv6AddressWinDivertHelperNtohIPv6Address__imp_WinDivertHelperNtohIPv6AddressWinDivertHelperHtons__imp_WinDivertHelperHtonsWinDivertHelperHtonll__imp_WinDivertHelperHtonllWinDivertHelperHtonl__imp_WinDivertHelperHtonlWinDivertHelperHtonIpv6Address__imp_WinDivertHelperHtonIpv6AddressWinDivertHelperHtonIPv6Address__imp_WinDivertHelperHtonIPv6AddressWinDivertHelperHashPacket__imp_WinDivertHelperHashPacketWinDivertHelperFormatIPv6Address__imp_WinDivertHelperFormatIPv6AddressWinDivertHelperFormatIPv4Address__imp_WinDivertHelperFormatIPv4AddressWinDivertHelperFormatFilter__imp_WinDivertHelperFormatFilterWinDivertHelperEvalFilter__imp_WinDivertHelperEvalFilterWinDivertHelperDecrementTTL__imp_WinDivertHelperDecrementTTLWinDivertHelperCompileFilter__imp_WinDivertHelperCompileFilterWinDivertHelperCalcChecksums__imp_WinDivertHelperCalcChecksumsWinDivertGetParam__imp_WinDivertGetParamWinDivertClose__imp_WinDivertClosedudqt.o/ 1663636311 1000 1000 100664 608 ` d$.text P`.data@P.bssP.idata$4@0.idata$5 @0.idata$7@0WinDivert.dll.filegfake.text.data.bss.idata$4.idata$5.idata$7.__install_MINGW_amd64_WinDivert_lib_inamedudqh.o/ 1663636311 1000 1000 100664 684 ` d6.text P`.data@P.bssP.idata$2@0.idata$5@0.idata$4@0   .filegfakehnamefthunk.text.data.bss.idata$2.idata$4.idata$5,V_head_install_MINGW_amd64_WinDivert_lib__install_MINGW_amd64_WinDivert_lib_inamedudqs00029.o/ 1663636311 1000 1000 100664 654 ` d .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4@z0.idata$6H %WinDivertShutdown .text.data.bss.idata$7.idata$5.idata$4.idata$6.VWinDivertShutdown__imp_WinDivertShutdown_head_install_MINGW_amd64_WinDivert_libdudqs00028.o/ 1663636311 1000 1000 100664 654 ` d .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4@z0.idata$6H %WinDivertSetParam .text.data.bss.idata$7.idata$5.idata$4.idata$6.VWinDivertSetParam__imp_WinDivertSetParam_head_install_MINGW_amd64_WinDivert_libdudqs00027.o/ 1663636311 1000 1000 100664 650 ` d .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4@z0.idata$6H %WinDivertSendEx .text.data.bss.idata$7.idata$5.idata$4.idata$6*RWinDivertSendEx__imp_WinDivertSendEx_head_install_MINGW_amd64_WinDivert_libdudqs00026.o/ 1663636311 1000 1000 100664 642 ` d .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4@v0.idata$6H %WinDivertSend .text.data.bss.idata$7.idata$5.idata$4.idata$6&NWinDivertSend__imp_WinDivertSend_head_install_MINGW_amd64_WinDivert_libdudqs00025.o/ 1663636311 1000 1000 100664 650 ` d .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4@z0.idata$6H %WinDivertRecvEx .text.data.bss.idata$7.idata$5.idata$4.idata$6*RWinDivertRecvEx__imp_WinDivertRecvEx_head_install_MINGW_amd64_WinDivert_libdudqs00024.o/ 1663636311 1000 1000 100664 642 ` d .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4@v0.idata$6H %WinDivertRecv .text.data.bss.idata$7.idata$5.idata$4.idata$6&NWinDivertRecv__imp_WinDivertRecv_head_install_MINGW_amd64_WinDivert_libdudqs00023.o/ 1663636311 1000 1000 100664 642 ` d .text,X 0`.data@0.bss0.idata$74b0.idata$58l0.idata$4@v0.idata$6H %WinDivertOpen .text.data.bss.idata$7.idata$5.idata$4.idata$6&NWinDivertOpen__imp_WinDivertOpen_head_install_MINGW_amd64_WinDivert_libdudqs00022.o/ 1663636311 1000 1000 100664 684 ` d .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4@0.idata$6H %WinDivertHelperParsePacket .text.data.bss.idata$7.idata$5.idata$4.idata$6@hWinDivertHelperParsePacket__imp_WinDivertHelperParsePacket_head_install_MINGW_amd64_WinDivert_libdudqs00021.o/ 1663636311 1000 1000 100664 698 ` d .text,l 0`.data@0.bss0.idata$74v0.idata$580.idata$4@0.idata$6"H %WinDivertHelperParseIPv6Address .text.data.bss.idata$7.idata$5.idata$4.idata$6$JrWinDivertHelperParseIPv6Address__imp_WinDivertHelperParseIPv6Address_head_install_MINGW_amd64_WinDivert_libdudqs00020.o/ 1663636311 1000 1000 100664 698 ` d .text,l 0`.data@0.bss0.idata$74v0.idata$580.idata$4@0.idata$6"H %WinDivertHelperParseIPv4Address .text.data.bss.idata$7.idata$5.idata$4.idata$6$JrWinDivertHelperParseIPv4Address__imp_WinDivertHelperParseIPv4Address_head_install_MINGW_amd64_WinDivert_libdudqs00019.o/ 1663636311 1000 1000 100664 664 ` d .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %WinDivertHelperNtohs .text.data.bss.idata$7.idata$5.idata$4.idata$64\WinDivertHelperNtohs__imp_WinDivertHelperNtohs_head_install_MINGW_amd64_WinDivert_libdudqs00018.o/ 1663636311 1000 1000 100664 666 ` d .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %WinDivertHelperNtohll .text.data.bss.idata$7.idata$5.idata$4.idata$66^WinDivertHelperNtohll__imp_WinDivertHelperNtohll_head_install_MINGW_amd64_WinDivert_libdudqs00017.o/ 1663636311 1000 1000 100664 664 ` d .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %WinDivertHelperNtohl .text.data.bss.idata$7.idata$5.idata$4.idata$64\WinDivertHelperNtohl__imp_WinDivertHelperNtohl_head_install_MINGW_amd64_WinDivert_libdudqs00016.o/ 1663636311 1000 1000 100664 696 ` d .text,l 0`.data@0.bss0.idata$74v0.idata$580.idata$4@0.idata$6"H %WinDivertHelperNtohIpv6Address .text.data.bss.idata$7.idata$5.idata$4.idata$6#HpWinDivertHelperNtohIpv6Address__imp_WinDivertHelperNtohIpv6Address_head_install_MINGW_amd64_WinDivert_libdudqs00015.o/ 1663636311 1000 1000 100664 696 ` d .text,l 0`.data@0.bss0.idata$74v0.idata$580.idata$4@0.idata$6"H %WinDivertHelperNtohIPv6Address .text.data.bss.idata$7.idata$5.idata$4.idata$6#HpWinDivertHelperNtohIPv6Address__imp_WinDivertHelperNtohIPv6Address_head_install_MINGW_amd64_WinDivert_libdudqs00014.o/ 1663636311 1000 1000 100664 664 ` d .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H %WinDivertHelperHtons .text.data.bss.idata$7.idata$5.idata$4.idata$64\WinDivertHelperHtons__imp_WinDivertHelperHtons_head_install_MINGW_amd64_WinDivert_libdudqs00013.o/ 1663636311 1000 1000 100664 666 ` d .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H % WinDivertHelperHtonll .text.data.bss.idata$7.idata$5.idata$4.idata$66^WinDivertHelperHtonll__imp_WinDivertHelperHtonll_head_install_MINGW_amd64_WinDivert_libdudqs00012.o/ 1663636311 1000 1000 100664 664 ` d .text,` 0`.data@0.bss0.idata$74j0.idata$58t0.idata$4@~0.idata$6H % WinDivertHelperHtonl .text.data.bss.idata$7.idata$5.idata$4.idata$64\WinDivertHelperHtonl__imp_WinDivertHelperHtonl_head_install_MINGW_amd64_WinDivert_libdudqs00011.o/ 1663636311 1000 1000 100664 696 ` d .text,l 0`.data@0.bss0.idata$74v0.idata$580.idata$4@0.idata$6"H % WinDivertHelperHtonIpv6Address .text.data.bss.idata$7.idata$5.idata$4.idata$6#HpWinDivertHelperHtonIpv6Address__imp_WinDivertHelperHtonIpv6Address_head_install_MINGW_amd64_WinDivert_libdudqs00010.o/ 1663636311 1000 1000 100664 696 ` d .text,l 0`.data@0.bss0.idata$74v0.idata$580.idata$4@0.idata$6"H % WinDivertHelperHtonIPv6Address .text.data.bss.idata$7.idata$5.idata$4.idata$6#HpWinDivertHelperHtonIPv6Address__imp_WinDivertHelperHtonIPv6Address_head_install_MINGW_amd64_WinDivert_libdudqs00009.o/ 1663636311 1000 1000 100664 678 ` d .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4@0.idata$6H % WinDivertHelperHashPacket .text.data.bss.idata$7.idata$5.idata$4.idata$6>fWinDivertHelperHashPacket__imp_WinDivertHelperHashPacket_head_install_MINGW_amd64_WinDivert_libdudqs00008.o/ 1663636311 1000 1000 100664 700 ` d .text,l 0`.data@0.bss0.idata$74v0.idata$580.idata$4@0.idata$6$H %WinDivertHelperFormatIPv6Address .text.data.bss.idata$7.idata$5.idata$4.idata$6%LtWinDivertHelperFormatIPv6Address__imp_WinDivertHelperFormatIPv6Address_head_install_MINGW_amd64_WinDivert_libdudqs00007.o/ 1663636311 1000 1000 100664 700 ` d .text,l 0`.data@0.bss0.idata$74v0.idata$580.idata$4@0.idata$6$H %WinDivertHelperFormatIPv4Address .text.data.bss.idata$7.idata$5.idata$4.idata$6%LtWinDivertHelperFormatIPv4Address__imp_WinDivertHelperFormatIPv4Address_head_install_MINGW_amd64_WinDivert_libdudqs00006.o/ 1663636311 1000 1000 100664 686 ` d .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4@0.idata$6H %WinDivertHelperFormatFilter .text.data.bss.idata$7.idata$5.idata$4.idata$6 BjWinDivertHelperFormatFilter__imp_WinDivertHelperFormatFilter_head_install_MINGW_amd64_WinDivert_libdudqs00005.o/ 1663636311 1000 1000 100664 678 ` d .text,d 0`.data@0.bss0.idata$74n0.idata$58x0.idata$4@0.idata$6H %WinDivertHelperEvalFilter .text.data.bss.idata$7.idata$5.idata$4.idata$6>fWinDivertHelperEvalFilter__imp_WinDivertHelperEvalFilter_head_install_MINGW_amd64_WinDivert_libdudqs00004.o/ 1663636311 1000 1000 100664 686 ` d .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4@0.idata$6H %WinDivertHelperDecrementTTL .text.data.bss.idata$7.idata$5.idata$4.idata$6 BjWinDivertHelperDecrementTTL__imp_WinDivertHelperDecrementTTL_head_install_MINGW_amd64_WinDivert_libdudqs00003.o/ 1663636311 1000 1000 100664 688 ` d .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4@0.idata$6 H %WinDivertHelperCompileFilter .text.data.bss.idata$7.idata$5.idata$4.idata$6!DlWinDivertHelperCompileFilter__imp_WinDivertHelperCompileFilter_head_install_MINGW_amd64_WinDivert_libdudqs00002.o/ 1663636311 1000 1000 100664 688 ` d .text,h 0`.data@0.bss0.idata$74r0.idata$58|0.idata$4@0.idata$6 H %WinDivertHelperCalcChecksums .text.data.bss.idata$7.idata$5.idata$4.idata$6!DlWinDivertHelperCalcChecksums__imp_WinDivertHelperCalcChecksums_head_install_MINGW_amd64_WinDivert_libdudqs00001.o/ 1663636311 1000 1000 100664 654 ` d .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4@z0.idata$6H %WinDivertGetParam .text.data.bss.idata$7.idata$5.idata$4.idata$6.VWinDivertGetParam__imp_WinDivertGetParam_head_install_MINGW_amd64_WinDivert_libdudqs00000.o/ 1663636311 1000 1000 100664 648 ` d .text,\ 0`.data@0.bss0.idata$74f0.idata$58p0.idata$4@z0.idata$6H %WinDivertClose .text.data.bss.idata$7.idata$5.idata$4.idata$6(PWinDivertClose__imp_WinDivertClose_head_install_MINGW_amd64_WinDivert_libmitmproxy_rs-0.12.8/mitmproxy-windows/mitmproxy_windows/WinDivert64.sys000066400000000000000000002677001511036467100266050ustar00rootroot00000000000000MZ@ !L!This program cannot be run in DOS mode. $SЏ۾۾۾5۾6۾-۾ۿ.۾5۾5۾5۾܀۾܅A۾܀۾Rich۾PEd)c" @ `dxxpS8.text h.rdataEF@H.data8@ @.pdatap@H.gfids@HINIT  b.rsrcx@B.reloc@BH(H ULNHBH MH(邬H(HMHtHH;tH(H\$Hl$Ht$WH 3HHH;u 3H MH XMfSMHMf-CMHDML OMLH!MH׫;H r5;ŋ|mHHG;ŋ|WHM@8h0t$HLH9ohHEGhHLHHGh"@tHFHLHHvF3H\$0Hl$8Ht$@H _H\$WH HHg~HHH\$0H _H\$WH HHH HH;tEH;w@HC@HtL,LH ϪLHHLLH質HPH;vH\$0H _H\$Ht$WH H3H]H5VH;sN;PuDHC8HIHtLKH JLHHKLH.x HP벸H\$0Ht$8H _H\$WH H H H;sAuEtADAʅt H-ASA;S r AC0C DL#LII3AEHDLA )A ACEtADAH\$Hl$Ht$H|$ @SH AHLt$@L;A r A HH_CHˁAH AVH˃AVHA%5wlHHHHHt$0H|$8I~ fDHHHuH|$8Ht$0AV AV HXAFȋЋCtLt-;C rHC+LHHLHC5;C r C'HHX;C r C HHACAFLt$@ȋЋCtPt3;C rHCH [HHLHCH [;C sHHXCH [;C r CH [HHACH [wGGGGH\$UVWAVAWHl$HHH3HE'3LEHE3HELH HHEDHEHE(fEH]Y}H HELMHD$ E3HGH}H MLM3LEHEHHEHEHEHEHEHIHEE8EE dE=#-dt =HEPLpHMt\H HEDOHD$ MHHUE3H  L8HGH=`OwHu HH KHELHD$ LHcS-ttbt]HEHxLHGH=`OwMtH HELHD$ HxDHUE3H N HHEHHExHELpH LIyH DH3HM'H3oH$HA_A^_^]H\$UVWATAVHPLAHHH 4 HLX3MfHIHT$0A=t =I~(Iv(L$EAAH;HL$0L$cAL%uDG W$HOoB (Au%=tH ~AE3Ld$ HO H?H;uMfIHT$0L$IvPIL$H96DH>H9w"HFH90HH9wH9xHHL$0HpINhGI)FxHGH;|H+H+HHuI; H`HO HtWDivH13qHT$0IH0A>.H96:I~@H9?H7H9~HGH98HH9~H9pHHL$0HxIN`HFH;|H+))H+HHuI; H`HN HtWDivHW3HT$0IHVA>uXH9?7IHL$0*H sE3E3HH ]HL HT$0IA>tHL$0@))IHL$0H HhH HH$HPA^A\_^]@SH@LHH HT$ HHHa;HL$ u@H@[H\$Ht$WH0AHD$ AE3HTlHt#DHHmH\$@Ht$HH0_AD$ LNjHlHuH\$@Ht$HH0_H\$ UVWATAUAVAWHl$HPH H3HE@MHL$HLLHIH q3A HH~pHi 3HHG(H_E2LoHW`HWhHGpHWxHLJ@HLJHHHfHfHHHW HPHXH`HhHpHxHWH@HHG@HW8H@HHGPH@H@AHHH؅HH؅mAA r3HMDBX@fA;*A;A@f#ffu] tEA@ E3E3D$\Ix`gA((\$ AY`HEH`D;HfHI;tD`E3E3Dd$\I_D@A=HʣttHA\$ E3IAQ_EHpADuf#fAV;A\$ E3IAQf_HtGHA3AADу :A;w"D IDd$\E3E3_f&LuWDeODfL$\tY t2)H9]DI؉\$ QE3I^HEA\$ E3IAQ^HEA\$ E3IAQ^HD$hHtwP t$`f#fPsH\$h[DD+ 9;DFD:LEMt-A\$ E3IAQ^HEHHEADt$`E3E3I];A+t$`9]t 9#LULD$hLuD]B.MӉEAE߃D$@H]D\$XHL$PÿfDHD$HADMH @HAt!ARHMHT$Hy8 HMHT$Hy8 LD$hHT$HM A~>At!A HMHT$Hy8 HMHT$Hy8 HT$HH9E LEHT$HAw LEHT$HAHd LEHT$HAH F LEHT$HAH ( LEHT$HAH LEHT$HAH LEHT$HA@ LEHT$HAH LEHT$HAH LEHT$HAH  LED$DDӉ\$@Dۉ\$XAH ы% H|$PA@DD$D HT$H E LED$DDӉ\$@Dۉ\$XAHы% H|$PA@DD$D HT$H LEHT$HAA@ HEPH Ћ ȁ HT$H HEHHT$H d HEHT$HHR HEHT$HH@ LED$DAHDًA%D ؁A@ AD AH D DыA%D D\$XA@AD AHD Ћ% A@ AH ы% A@DD$D H|$PHT$H DT$@{ LED$DAHDًA%D ؁A@AD AHD DыA%D D\$XA@AD AH D Ћ% DT$@A@# AH$ % H|$PA@'DD$D HT$H HEHT$HHEHT$HHyHEHHT$H \LEAHы% ЁA@ HT$H 'HEHT$HHEHT$HHHELEAHы% ЁA@ HT$H LD$hHT$HA LD$hHT$HAH LD$hLD$hAHы% ЁA@  HT$H OLD$hHT$HAH 5LD$hHT$HAH LD$hHT$HAH LD$hHT$HAH LD$hHT$HAH LD$hHT$HAH LD$hHT$HAH LD$hHT$HAH zLD$hHT$HAH [LD$hHT$HAH <L$`HT$H.HEHT$H HEHEHEHT$HH L$`HT$HAADD$DEt?tA;HEHEHxDPDX HT$HDT$@H|$PD\$XLEMt]DDH|$P\$@\$X9]wtA@ A@ЋȁDA A DD$D HT$H*LEMt9]wDD$DDHT$HH]׋}H]D]D\$XH|$P\$@AADD$DEt<t A;HEH$x(DP,DX0HEH$x(DP,DX0LEMt*DDH|$P\$@\$X9]wA@ LEM@9]w AHDًA%D ؁A@AD AHD DыA%D D\$XA@AD AH D Ћ% A@# AH$ ы% A@'AEt2tHEHT$HH4sHEHT$HH4aLD$hMtLUwtAA@ȅtAHT$H %A@HT$H HEHtLUwt@HEtHT$H @HT$H HEHt9]wHT$HHEH 9]wHT$HrAEt2tHEHT$HH6LHEHT$HH6:LD$hMt>9]wuAHT$H AHHT$H HEHt<9]wuHT$H HHT$H HEHt9]wHT$HHEH9]wHT$HiAEt2tHEHT$HH8CHEHT$HH81L$\HT$H"Ãt0t6HEHT$HHHEHT$HHHEHT$HHẢ\$X\$@ADDӃt'A;HEHT$HHH H|$PHEHHT$HH H|$PẢ\$X\$@ADDӃt%A;}HEHT$HH@H H|$PDHEH@HEHT$HH HEHЅHT$Ht؋DH|$PDT$@EAAtubtWHD$HEEt,AAD;s6w4AAD;s'w%AA ;swEAA;s A;ȋG‹A L$AvIҋ&ҋҋҋtAQAQʁt)tDMfEtLULD$h4ËË3H$0HA_A^A]A\_^]Õ\J\\f_k_q_w_}____f_ddde5eKe^eeTfeffffg(gAgagtggggYh{hhhhhijjjjk!k3k9knkkkkkll6lPljllllll m%m.m7mTme%erbmbnopq^rr ss_X`aabicdbicd__!`8`L`dssssttH\$Hl$Ht$ HL$WATAUAVAWH LHHELHHH[HL;HCH=H[3HHuD AWDiv;ZLD$PLMDHHHSHIL,ADAAU5%=(%CL(vfA; H;GL(AɍvA;AH;AA̸Ћ3ABDD݋w%L\$PCT+ A'=Nw{DH hBh{,{HQH0uAHD$PBD(Ex A~dAtPAt;AuvNWDivIX3H\$XHl$`Ht$hH A_A^A]A\_Ãw˹ oȃw au VOHA:'.'DAAAS AAt EBEuTEAAELD$PC|(w-C|(w%GD( E;swL\$PGD+D;svLD$PEu>CD(;rYCD(;rJCD( ;r;CD(;r,$C|(uC|( uC|(u C|({C /HgfAA ʽC /C3(%3C/CD(fCD/CD(fCD/CL/C3L(C1L/CD(CD/CD( CD/ CD(CD/CD(ACD/H;Ifx^yeysylyyyyyxxxzyyy  HT$SWATAVHH$EMHًG3 THK H$H$U;3&HHH$H$H$HL$H$L$EtD{8D{HL$(t}Q4HG H$HL$LHGH~HD$H*Q3H\$@HD$hHMIE@3HD$pHHD$xIEHDBXHED$X@IEHMI]03HEAIEHEE)E?D$HIE HH EHEIE(HEIE8)E0Ep@EtHD$@EPHEX)E@H HLD$ HT$X:Mt"HT$(HN%PD$ HL$(A$ P3I:؅E3HUE3I:؅xyE3HUE3I:؅xaIj:؅xSHT$(HNO>tHL$(OH94L$$DŽPHL$(iO3I:H9H$L$HH38HA_A]A\_^]H\$Ht$H|$ UATAUAVAWHl$HHuH3HE'M3LHMDB`>MMIIMIIHMH MIMI I I AI AHD$ AA3AAA2ۋ@/t; 3HL$ ttHQHD$0tiEtH\SHT0EtHTHT0EtHpUHT0Et"HZRHT0HSHT0EUtH QHL0E7EtH ,SHL0EtH THL0EtH @UHL0EH &RHL0H StIF8HEH^UHD$0EH IFt8t&tHMDE ! HM EHDqHUH1HOD?EtrAt5AzHH=gHMHDHFH=>?HHMHޓHHhDMHFH=?HMHGpFD+LIH EIHLg(؅yH bDIL$I[0Is8I{@IA_A^A]A\]@SUWAVAWHpHMH3HD$h43D=4 4HL$0MHD$8Mt7BIf9t HHuHɸ EtH+Hx H HHH$Ht;HD$HD$ HHD$(BLD$ HCt$ Hy?D$J??fD$Hf\$NH_JHHwwHBHHtcL3H1D$8H]0E0L$0LE -1tEIKfD{HHg.H ;LHT$HV.H BH$HL$hH3+HpA_A^_][DD$HT$UVAVAWHH$XHL$`EAA H>HNH$H$ t4u H ǐGL$HEt H Ɛ9H 0u H H EuH L$H+HMH$ZA}$AH uE3$HH$L$LH$H 1L$LmIHD$ L$$L$H$@CDŽ$Xu DŽ$X3>H$HEIA$PH$E3E3Hf*A@H aHB0E3HD$ I1L$H$L$H$ HA_A^^]Ë$9$7AA$HNA4xH$D$@H$LL$(Hˋ$HD$P$XDd$HD$@$0Dl$8Dt$0D$(D$ \uHH$HuHuLH$H2/H CAaE3HD$ H$E3E3)H$H$$H;H$3DGLHD$x$XT$pD$h$0Dl$`Dt$XD$P$D$HH$(HL$@H͉T$8HD$0$D$(HT$ H!H?H$iH$LDGHHD$x$XD$pD$h$0Dl$`Dt$XD$P$D$HH$(HL$@3ɉL$8HD$0$D$(HL$ H$PtH$E3E3'HH$0D$XH$HL$L$($HD$PDd$HD|$@Dl$8Dt$0|$(D$ 0H$LDCHHL$x3ɉD$p$D|$hDl$`Dt$X|$PD$HH$HD$@H$(L$8HD$0$D$(HL$ Ht HH3L$`H$H,H AE3HD$ }$>AOAgA(H$<-3H\$Hl$Ht$WH@HH3:HT$ HHK;;NHH;xHFH;|H+H+HH;*HKxH;wHChHH;CpH{PHKPH9OHAH9HH9OH9xHHHHL$ HKhGH)Cx;HO Ht:WDivH:3*9HT$ HHK:;HL$ :HYH\$PHl$XHt$`H@_HCPHKPH9Hu/HAH9u&HHFH0HqHL$ HChFHCxq:뮹)))HL$ O:HN Ht9WDivH":lHL$ ":HN Ht9WDivH9?H\$Hl$Ht$LL$ WATAUAVAWHH$3D$HÃAHD$xMLH|$pHuAuD$@$Eu.L$I[0Ik8Is@IA_A^A]A\_uHH$F9>uC9u;HFPH9u2HF@H9u)HLD$pH YHL$pHHHL$pH$8HD$pHtoD$MHD$`H$HIHD$X$8D$P$0D$H$(D$@$ D$8H$H\$0D|$(HD$ 蹽D$EAAtzAttAD}WAE AWDiv8HHH$Lʼnh,I@0IHHPH@#D$(Nj׋ 3wAWDivD7HH0D$(׉x,H$C0HK@@ CPH0K`'D}?AE AWDiv87HHh,HS8H$DHHK0I۴uWDivH6H$D$(HȋEt  ҃ЃD$ADsAD DCED{9$ D E9$8D E9$0D EED ዌ$ED C % A$D C(H$H$HDcHCHK Ht5HNH$5>tH$5Hh339t9tH9|$xúcHF`H~`v5H~@HN@H9OHAH9u~HH9OunH9xuhHHHHN`HF@HN@H9Hu]HAH9uTH HCHHYHH eH$5H}Hp)))H\$WH@HHHHT$ 4;tHL$ 4H\$PH@_tHL$ r4 H\$PH@_LHH ۼHL$ >4y H\$PH@_H H\$P3H@_H\$Hl$Ht$ WAVAWH@H3-2HT$ HHO3?H_PE3H9H3H9^HCH9HH9^H9pHHXHNH;|HH+HH+L|$`H;!HLD$`H HOhHL$ FH)Gx+3LL$`LHH03H1HT$ HHO3?*t{HGPH9urHG@H9ui?uaffHLD$`H Wx:HL$ 2HT$`AH ξxHT$ HOq2?tHL$ V2H\$hHl$pHt$xH@A_A^_H H9Yu)HCH9u H9Yt)HH^HqH3)))LL$ LD$SUVATAVHE3MDt$0IHHMu,HJ HtP1WDivH1HĐA^A\^][ËBH$L$L$v!vtAE33H|$8|H LD$@IzDvLT$@AB t IzH|$8(E3ɉD$(3Dt$ IEA0LT$@HHD$8Hu AEr(L<IH ̶E3E3HHDL@HT$HLD$XHL$PKA#A8uQtLC,HL$8PAEAHA;BEGDƋ=H|$8D+t$0H$HT$HLL$PHHCOILICA@CA@ KA3HA1HKA3HA3HAHC3%3A@K3ȁ3AHC3%3A@K3ȁ 3AHS3с@3APC3A@ %3A@A@ CȃvIttuBC0A@K@AH .C0A@K@AH CPA@0K`AH@HC0I@APAAHPI;&AHM3HT$`.}HMPH9 H9H9OHAH9HH9OH9xHHHHWH;|HH+HH+D9w,wH; HMhGH)Ex(HH9JueHAH9u\H9JuOHHOHzH93HL$`.HtKHK Ht-WDivH-HT$HHLL$PU))))HD$XDt$0L$HtD(HK HtJ-WDivH-H ݹEEIL$H$L$HĐA^A\^][H\$WH@HHT$ H4-HL$ -HHT$ H{H ||C ,Hp|H i|H9HuZHd|H9uN=@|H HCHHG|uHf|H I|HL$ ,H\$PH@_ù)@UATAUHLHH$H[,}H$t<,HA]A\]HH$H$HH$ H$+H{H{H;H$3L$L$fH|$PL`HMt$HM̉t$@Mljt$8t$03D$(D$ 踳H9{$INH$H$HDŽ$/L+IH$A'+DH$H{H$HM +I~ H$*H$3D$E3H$HLd$xD$pt$ht$`t$XD$Pt$HHD$@D$8L|$0D$(H|$ tH$ H zH;L$H$L$H$HMH*}H$H$H$Dž *HHA]A\]HT$VWAUAVAWHLH$HE3E3)IF H$H$()H5>yH7yH;H$ H$L$MH`H6HMH$S)HH$HH$')L$MH\$P33ۉ\$H\$@\$8\$0SD$(Dl$ &HuwHx$H$H$INHDŽ$/(IH$A(DH$HD$3H$H$E3HD$xEH$HD$pH͉\$h\$`\$XD$P\$HHD$@H$(Dl$8Ld$0D$(HD$ HwH;L$H$H$ HA_A^A]_^LHxHBwH/wH8wL YwH"wMCH'wH(wISHwHwHwHw3ICICH_D$ IC3ICICICICICICD$88D$PD$TIKH ^D$0x iv3HxH\$WHPHHT$0H&HSHH AE3HD$ ֬HL$0ǃ&HHT$0H_H uGu&HuH uH9HuZHuH9uN=uHHGH8H=uuHuH uDZuHL$0 &H\$`HP_ù)H\$Hl$Ht$WATAUAVAWHPHT$0H Pu%HKuL5DuI;L%DuL-L=FufDL9sHuL90HH9XHtHL$0Lp[%H{HT$0[HOM%HoHL$00%3`#Lȃt/uhHLHQI9HH9  LIP>HtjHttL9`HktL9 L!HAHH QttDIH uYH AE3Ll$ H9HtL9xHtL98uL9IHAHH sHHT$0H s6$HsI;HL$0s $L\$PI[0Ik8Is@IA_A^A]A\_ù)))))H\$Ht$WH HBHHI HHp HtD#WDivH~#HM#HH\$0Ht$8H _ @SHPHًIr#HK Ht"WDivH*#HP[Ht$hs,%H|$p=t0LE3A IIL HK8IQCtHK8}jE3HD$ E3HK8"HHCH"HL$`3HL$0E3H qLHt$(T$ CS(<ubH eq%H\$@AHE UqAHnHD$8HD$`fEEHD$0EȋC0E3D$(D$ s;H qH"H\$0HB qE3HD$(E3HD$`HD$ E GH pH\$@HHB pE3HD$8E3HD$`HD$0C4D$(C0D$  y0HL$` H+!HK Ht WDivH6!Ht$hH|$pHP[@UVWATAUHHE3AL=H$H$DWAt HNH$ >H HH$AHE3L$LvIL$LHD$ H$] L$3H\$PMʼnD$HD$@3ɋ$D$8$D$0Dd$(l$ P؅H$3HD$xE3ɋ$E3\$p3҉L$hD$`$D$XDd$PL$HL|$@l$8Ll$0D$(HL$ HuLH HAHD$ E3IL$H$L$HĠA]A\_^]H HAHD$ E3IptGttAuOGH$HĠA]A\_^]H\$Hl$Ht$ WATAUAVAWH`HMmH3HD$XHYDLHT$ HE9.VIHL$ 3H& Dy H# 3IMP@HT$ HRHL$ E9.@AD$8ED$Ht%HT$HHx8HT$8HDx$I^IH rEx HyH{I^3IPI@fHT$ HE9.uOEHL$ D$8yt HL$8I^HH rPH HL$ ;HL$XH3L\$`I[8Ik@IsHIA_A^A]A\_@SH HH HjHŸL HHH [H\$Hl$Ht$WH@HH TLjHH HT$ HHH>H^@H9ttH;H9_HCH9HH9_uyH9xusHHL$ HXHN`$Gt HHHHT$ HN>tHL$ HH\$PHl$XHt$`H@_ù))HHXHPUVWATAUAVAWHE3LHLhHLhHPDl$PAAEIs;H$tUA9t=)DHD$D$T AF<H @LD$pI*؅ Bj 8jLT$pAB tMr#L$(E33Dl$ IEA|LT$pLMu {FE3HAEj(ET$`H\$xDD$hDD$dH$HPDALD$XIAA<t+<A(AFf(D$AFfDŽ$D;D 'iAWDivAHHcEIHAL%%%%8%*%%%%%%%%%%%%%T%6%(%% %n%%%%&%(%*%,%.%0%%%%ffffM3%IIIIIfIHuH$dL$,)<tL<tL<tM<t M<tM3L3I@%@LH+IOsXMItDH HIHAuItf HIȈAuIffffffHrpكtL+BoAIMII vIo oL H fAfIIuOffffffffffffft IȈHufHr D @HuHo oL ffIH@oD oL fAfIuIIs $MIyIIOsOMItHD HIHuItfD HIȈuIffffffHwtHtL+HoD@HMII vIoD oL H fAf IuTffffffffffffftHɊ IȈufHwH D @uHoD oL fAfIH@oD o fAf uIIs $MI~HIr,IIIGs`MIIITIuItDATIufffffffffffffffffffffكtL+HHMIMIItIJ IILOAHHQHQHQHQ HQ(HQ0HQ8H@IuIt ATIuwindivert.c@WinDiv_\Device\WinDivert\??\WinDivertUNLOADWinDivertWinDivert providerLOADWinDivert2.2Δ~^>"`vN:\*tԗBҕ&Dnt\J:" ޓғ“lX@Вȼ@@0@@EI" )9!M-QY&;;A7ݸuAFHg׵:N/zarfxEP  NF"FqHr t9[~LAG^WA3pSyD4hͰDGҷYzhHhs J)2XE#ћC@tad5%Iփ_歩I^(CڒW:@%ޫA{5y%zZ)MG<{2iSQkIAԋQ}@0@@@@@@@ @*@@P@@@`@@X@0@)@@`@@@p@@H@@@,@ @@@0@@@H@P@+@@@@@@@@@X@`@-@P@@@P@@@@p@ @`@@0@@@P@8@@@@@@@@@@x@@P@@`@@@p@@@@@ @@@0@@@@@@@@@@@@@@@@ @@@@@@@@@8@@@@@@@P@@@@@P@`@@ @p@@ @@@ @@@0@@@ @h@ @ "@p@@ @p@@@h@0@@#@`@@@`@@@@@@$@p@@ @p@@ @@P@&@@@@@@@@@@@@'@@@`@@@`@(@@`@'@D7q/B۵Y[V9^?[} U1$ހt]rtܛGi0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz+=   WinDivert2.2_SubLayerInboundNetworkIPv4WinDivert2.2 sublayer network (inbound IPv4)WinDivert2.2_CalloutInboundNetworkIPv4WinDivert2.2 callout network (inbound IPv4)WinDivert2.2_FilterInboundNetworkIPv4WinDivert2.2 filter network (inbound IPv4)WinDivert2.2_SubLayerOutboundNetworkIPv4WinDivert2.2 sublayer network (outbound IPv4)WinDivert2.2_CalloutOutboundNetworkIPv4WinDivert2.2 callout network (outbound IPv4)WinDivert2.2_FilterOutboundNetworkIPv4WinDivert2.2 filter network (outbound IPv4)WinDivert2.2_SubLayerInboundNetworkIPv6WinDivert2.2 sublayer network (inbound IPv6)WinDivert2.2_CalloutInboundNetworkIPv6WinDivert2.2 callout network (inbound IPv6)WinDivert2.2_FilterInboundNetworkIPv6WinDivert2.2 filter network (inbound IPv6)WinDivert2.2_SubLayerOutboundNetworkIPv6WinDivert2.2 sublayer network (outbound IPv6)WinDivert2.2_CalloutOutboundNetworkIPv6WinDivert2.2 callout network (outbound IPv6)WinDivert2.2_FilterOutboundNetworkIPv6WinDivert2.2 filter network (outbound IPv6)WinDivert2.2_SubLayerForwardNetworkIPv4WinDivert2.2 sublayer network (forward IPv4)WinDivert2.2_CalloutForwardNetworkIPv4WinDivert2.2 callout network (forward IPv4)WinDivert2.2_FilterForwardNetworkIPv4WinDivert2.2 filter network (forward IPv4)WinDivert2.2_SubLayerForwardNetworkIPv6WinDivert2.2 sublayer network (forward IPv6)WinDivert2.2_CalloutForwardNetworkIPv6WinDivert2.2 callout network (forward IPv6)WinDivert2.2_FilterForwardNetworkIPv6WinDivert2.2 filter network (forward IPv6)WinDivert2.2_SubLayerResourceAssignmentIPv4WinDivert2.2 sublayer resource assignment (IPv4)WinDivert2.2_CalloutResourceAssignmentIPv4WinDivert2.2 callout resource assignment (IPv4)WinDivert2.2_FilterResourceAssignmentIPv4WinDivert2.2 filter resource assignment (IPv4)WinDivert2.2_SubLayerResourceAssignmentIPv6WinDivert2.2 sublayer resource assignment (IPv6)WinDivert2.2_CalloutResourceAssignmentIPv6WinDivert2.2 callout resource assignment (IPv6)WinDivert2.2_FilterResourceAssignmentIPv6WinDivert2.2 filter resource assignment (IPv6)WinDivert2.2_SubLayerResourceReleaseIPv4WinDivert2.2 sublayer resource release (IPv4)WinDivert2.2_CalloutResourceReleaseIPv4WinDivert2.2 callout resource release (IPv4)WinDivert2.2_FilterResourceReleaseIPv4WinDivert2.2 filter resource release (IPv4)WinDivert2.2_SubLayerResourceReleaseIPv6WinDivert2.2 sublayer resource release (IPv6)WinDivert2.2_CalloutResourceReleaseIPv6WinDivert2.2 callout resource release (IPv6)WinDivert2.2_FilterResourceReleaseIPv6WinDivert2.2 filter resource release (IPv6)WinDivert2.2_SubLayerAuthConnectIPv4WinDivert2.2 sublayer auth connect (IPv4)WinDivert2.2_CalloutAuthConnectIPv4WinDivert2.2 callout auth connect (IPv4)WinDivert2.2_FilterAuthConnectIPv4WinDivert2.2 filter auth connect (IPv4)WinDivert2.2_SubLayerAuthConnectIPv6WinDivert2.2 sublayer auth connect (IPv6)WinDivert2.2_CalloutAuthConnectIPv6WinDivert2.2 callout auth connect (IPv6)WinDivert2.2_FilterAuthConnectIPv6WinDivert2.2 filter auth connect (IPv6)WinDivert2.2_SubLayerEndpointClosureIPv4WinDivert2.2 sublayer endpoint closure (IPv4)WinDivert2.2_CalloutEndpointClosureIPv4WinDivert2.2 callout endpoint closure (IPv4)WinDivert2.2_FilterEndpointClosureIPv4WinDivert2.2 filter endpoint closure (IPv4)WinDivert2.2_SubLayerEndpointClosureIPv6WinDivert2.2 sublayer endpoint closure (IPv6)WinDivert2.2_CalloutEndpointClosureIPv6WinDivert2.2 callout endpoint closure (IPv6)WinDivert2.2_FilterEndpointClosureIPv6WinDivert2.2 filter endpoint closure (IPv6)WinDivert2.2_SubLayerAuthListenIPv4WinDivert2.2 sublayer auth listen (IPv4)WinDivert2.2_CalloutAuthListenIPv4WinDivert2.2 callout auth listen (IPv4)WinDivert2.2_FilterAuthListenIPv4WinDivert2.2 filter auth listen (IPv4)WinDivert2.2_SubLayerAuthListenIPv6WinDivert2.2 sublayer auth listen (IPv6)WinDivert2.2_CalloutAuthListenIPv6WinDivert2.2 callout auth listen (IPv6)WinDivert2.2_FilterAuthListenIPv6WinDivert2.2 filter auth listen (IPv6)WinDivert2.2_SubLayerAuthRecvAcceptIPv4WinDivert2.2 sublayer auth recv accept (IPv4)WinDivert2.2_CalloutAuthRecvAcceptIPv4WinDivert2.2 callout auth recv accept (IPv4)WinDivert2.2_FilterAuthRecvAcceptIPv4WinDivert2.2 filter auth recv accept (IPv4)WinDivert2.2_SubLayerAuthRecvAcceptIPv6WinDivert2.2 sublayer auth recv accept (IPv6)WinDivert2.2_CalloutAuthRecvAcceptIPv6WinDivert2.2 callout auth recv accept (IPv6)WinDivert2.2_FilterAuthRecvAcceptIPv6WinDivert2.2 filter auth recv accept (IPv6)WinDivert2.2_SubLayerFlowEstablishedIPv4WinDivert2.2 sublayer flow established (IPv4)WinDivert2.2_CalloutFlowEstablishedIPv4WinDivert2.2 callout flow established (IPv4)WinDivert2.2_FilterFlowEstablishedIPv4WinDivert2.2 filter flow established (IPv4)WinDivert2.2_SubLayerFlowEstablishedIPv6WinDivert2.2 sublayer flow established (IPv6)WinDivert2.2_CalloutFlowEstablishedIPv6WinDivert2.2 callout flow established (IPv6)WinDivert2.2_FilterFlowEstablishedIPv6WinDivert2.2 filter flow established (IPv6)context_sreq_context_sKmdfLibraryD:P(A;;GA;;;SY)(A;;GA;;;BA)68@mG` JDqU: 2 F&E$*NNe%$zHZ2PU _NS;&lSUGKi{H{:I,6Ҍ'dvzF~Z ,rF~ă%N/T{\6t@4~sBY.H{P GULSoygo!~IB\\XWç3LO!pn@j;9rJ1DúTܳkd5HN'c\5A1 T"ͭ]v'Bq >׾~)cN)c  P @@@RSDS:=ʤLM)MC:\WinDivert-2.2.2\install\MSVC\amd64\WinDivert64.pdb .text .text$mnм.text$mn$00@.text$mn$21.text$s.idata$5 .00cfg6.rdata\.rdata$zzzdbg  .xdata .data .kmdfclassbind$a .kmdfclassbind$c .kmdfclassbind$d .kmdftypeinit$a .kmdftypeinit$c h?.bssp.pdata.gfids$ydINITdd.idata$2Ȑ.idata$3.idata$4В.idata$6.rsrc$01.rsrc$02. de4d^ p Ph20& 4  p`Ph$ $t$d$4$P* 45* p`Ph@4 p`P"K/L "/LWL "/LWL "K/L r0rp"4 SS "4 SS  d T 4 rp -dT4p B Lp 4 rp MdT4 rph` hp2 $t)$d($4'$ Ph*? p`Ph"=4>Y " Y + dT4phX 4p ` P  4 2pd42 p"d **"d **"**  4 p"d ,,"d ,,",,c 4Ph" 4p`Phh"4P"Ph 0hPh"4 T" T"d"Php0Ph"4@##"@##"4$$"$$p0Ph"d&5&"&5& p0"77'dT{=|<"dT{=|<"{=|<551-)%dT4 pp`P"// 4"4" ` P"4$0"44t@"@"0"t4$0"4$0$ F$d$T$4$p d T 4 rpH&Ht9d 0202d 4R p* |&*4&*p`P! &!d !T !4 !2p   4 p   4 rp p`"T4$B" B   P"t4#P"d""P pP0hh"dT"T 4 Rp`Ph "  @6$7"@6$74 td T420"FF"tdFwG"FwG"K^pFF 7d42 p  b`P" t4 @-At"t4 @-At"@-Atp0Ph`"  d0=g="0=g={"`vN:\*tԗBҕ&Dnt\J:" ޓғ“lX@ВRtlIntegerToUnicodeStringRtlGetVersionKeAcquireInStackQueuedSpinLock_KeReleaseInStackQueuedSpinLockExAllocatePoolWithTagExFreePoolWithTagMmBuildMdlForNonPagedPoolMmMapLockedPagesSpecifyCachebIoAllocateErrorLogEntryeIoAllocateMdlIoFreeMdlIoGetCurrentProcessIoWriteErrorLogEntryObfReferenceObjectObfDereferenceObject=ExUuidCreatepPsGetProcessIdIoGetRequestorProcessKeBugCheckExntoskrnl.exeSKeQueryPerformanceCounterHAL.dll-RtlCopyUnicodeStringNdisAllocateNetBufferPoolNdisFreeNetBufferPoolNdisAllocateNetBufferListPoolNdisFreeNetBufferListPoolNdisRetreatNetBufferDataStart NdisAdvanceNetBufferDataStartNdisGetDataBufferNDIS.SYSFwpsCalloutRegister0FwpsCalloutUnregisterByKey0FwpsFlowAssociateContext0FwpsFlowRemoveContext0FwpsInjectionHandleCreate0FwpsInjectionHandleDestroy0FwpsAllocateNetBufferAndNetBufferList0FwpsFreeNetBufferList0FwpsInjectNetworkSendAsync0FwpsInjectForwardAsync0FwpsInjectNetworkReceiveAsync0FwpsQueryPacketInjectionState0-FwpmEngineOpen0*FwpmEngineClose0oFwpmTransactionBegin0pFwpmTransactionCommit0nFwpmTransactionAbort0GFwpmProviderAdd0[FwpmProviderDeleteByKey0fFwpmSubLayerAdd0hFwpmSubLayerDeleteByKey0FwpmCalloutAdd0FwpmCalloutDeleteByKey00FwpmFilterAdd03FwpmFilterDeleteByKey0fwpkclnt.sysWdfVersionUnbindWdfVersionBindWdfVersionBindClass WdfVersionUnbindClassWDFLDR.SYS 8Ph  D-1tE-1tE4%2 %3 (processId=%4) 4VS_VERSION_INFO? StringFileInfo040904B0,CompanyNameBasil qFileDescriptionThe WinDivert 2.2 driver [URL: https://reqrypt.org/windivert.html] [Bitcoin: 1C5vZVSbizPeZ8ydTYhUfm4LA2cNwBfcYh](FileVersion2.2<InternalNameWinDivert.sys\LegalCopyrightCopyright Basil 2011-2022DOriginalFilenameWinDivert.sysJProductNameWinDivert 2.2 driver,ProductVersion2.2DVarFileInfo$Translation |`hpxȣУأ (08@HPX` @HPX`hpxȥХإ (08@`hpxȦЦئ (08@HPX` @HPX`hpxȨШب (08@`hpxȩЩة (08@HPX`hȪ008 0@hS0S *H S0S10  `He0\ +7N0L0 +70 010  `He Z]k1XI3&U072*$0200  *H 0{1 0 UGB10U Greater Manchester10U Salford10U Comodo CA Limited1!0U AAA Certificate Services0 040101000000Z 281231235959Z0{1 0 UGB10U Greater Manchester10U Salford10U Comodo CA Limited1!0U AAA Certificate Services0"0  *H 0 @nvMEDFȃ*]P1 p"I-Tc̶nhF SL$rNT z3`ډU"XOhF'v5,^deHav PfxbV18'2Xok+c_s8x6Qx:B /I-߬tMG)b&{>%ݝ5h Ä ^/00U #>)00U0U00{Ut0r08642http://crl.comodoca.com/AAACertificateServices.crl06420http://crl.comodo.net/AAACertificateServices.crl0  *H V{DOX̦Ihv]`֍PO&N氥tTAOZ``J¿Ĺt-}kF/j4,}Z  /\:l7U S@lXen}1QoRЇc$;}'keӥ iI9mn䠃'ښ +PK[d6~J=qas< 3W47]=v?fҔ1im4zxܒPdǪ-j/n!@ ٞ v' ֺ)p6.O2tFkG5w3Oc.-ekqm>,ugmcc6iE>nZ_[˝00@ 8gS0eoti>h;g3H@dFsleU[WxF|p@)\+EgO(^Lz>2F 6귪F : fX\) 08)00U2뒚5H/(@Bp 6\0U0U00U% 0 +0U 00U 0g 0CU<0:08642http://crl.comodoca.com/AAACertificateServices.crl04+(0&0$+0http://ocsp.comodoca.com0  *H  tDiF$ g:E}RN!9k^- y;SʹD\cg@Dr*2]@gB'r#8L FO&|fQ6TXl. S)oO ]ƋHR12L=l9s 9 hH86%wňLf}/cΘi߬<][/tϸ~׃bEGRU靌:bQ$)XE{Z003@S⥻9n0  *H  0V1 0 UGB10U Sectigo Limited1-0+U$Sectigo Public Code Signing Root R460 210322000000Z 360321235959Z0W1 0 UGB10U Sectigo Limited1.0,U%Sectigo Public Code Signing CA EV R3600  *H 0B[x,!0{KŻ(rv,ūz@J9_O0005%s=@ 9 Uն '>"ese(ݻ}2UI<j:!C;a>jZ] [i8h[# CCnSs*D1ny R 'qa/3YU" YsCOٽVY ݷtF N 4p%ߏׄ3l hO|Di%y!5wOUVyȆiNjbkP3ah&q >6wuzF6jSƔq:!2gnTdc0_0U#02뒚5H/(@Bp 6\0U2A+(FĢ*9H?0U0U00U% 0 +0U 00U 0g 0KUD0B0@><:http://crl.sectigo.com/SectigoPublicCodeSigningRootR46.crl0{+o0m0F+0:http://crt.sectigo.com/SectigoPublicCodeSigningRootR46.p7c0#+0http://ocsp.sectigo.com0  *H  _6rZ -9ցJZBJ -iJKLfe-tԫjw|i۟$\ִ8չm'drv,Iӳ A]6wʀA?cTTKfӔqG1Ӿ ?R_ rCJ&6rܽ 4^+8cu1.k┲*t5+/K'lZv^چݫdj1%!/iLL*0yA* |v &k_*ͯN/* fu&@5o7zQc*Vl~dsm6uk+MjQFAVqӟEZRA'<;F-56}'6KOcm)S1"uPwjk>#+~zA X=:5,TDzYXTeQB G00Ԡ0oft|F6x-0  *H  01 0 UUS10U New Jersey10U Jersey City10U The USERTRUST Network1.0,U%USERTrust RSA Certification Authority0 190502000000Z 380118235959Z0}1 0 UGB10UGreater Manchester10USalford10U Sectigo Limited1%0#USectigo RSA Time Stamping CA0"0  *H 0 ,~}? !TϠ>SZvGI4Eed& 2Ry.c?fo!qyF*Z]IMrVS:*XIӿ9#B\8pӣ߳r. w Rs$=( On'uU;4!{ WVF `~M ?ꅌVq-LȌ<&S `iX T1ȅǸ))/Fۑ_?6>0g+F5L`̨ 0t!bV!sXwU9T-&E:oׄ(Od(m'Җk[}vi J,w+xVD%-^SgʱdɈY˨F}WvA$rԭCIA9)"MЍk@WsqJ}E6 S}9X2oPO3ޕAzZ0V0U#0SyZ+JT؛f0Ua AwE(5_U0U0U00U% 0 +0U  00U 0PUI0G0ECA?http://crl.usertrust.com/USERTrustRSACertificationAuthority.crl0v+j0h0?+03http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt0%+0http://ocsp.usertrust.com0  *H  mT3]Suz2 -%*}*;'ZIY)la˵P}@íVXAB}t\ 3^&X\XxHvDgmC8bŅL̲S0V\rRj;B7|x9ܲmAmgo=Er#UffK^+B!oZ%pbsc^J=8$->w6w˜.#G]֡sWh7eBC ѡN= ldZ*"K9^LH=4 _R?uq[C]e=Pn&]]`j˓CVzd(V"KD9]ZI~rCkɠ?lJO Ž,vpEBi&D(jtE:Δe< 8f}YZBWUP Ktr*1&4dY:A)t? w+<=[U*mbΜp}}KhZ)aӠ\%'hX-k_dk( ڬxAޒ-oTQl3Y`"yAb{ڮF inAPcaGFFSl'9lu zY.d,BGTX7i%ƭཱ7B{=ZҐI:W}0~0U#0a AwE(5_U0U%.h85'ӇἦcLA*Y3U H3s.NpYZv`3VJMI1}Vyz-`I֊ggw}"RK<"ݹe(OزBN"C00U#02A+(FĢ*9H?0U?mp&8[v0U0 U00U% 0 +0IU B0@05 +10%0#+https://sectigo.com/CPS0g 0KUD0B0@><:http://crl.sectigo.com/SectigoPublicCodeSigningCAEVR36.crl0{+o0m0F+0:http://crt.sectigo.com/SectigoPublicCodeSigningCAEVR36.crt0#+0http://ocsp.sectigo.com0HUA0?%+0 CN-91510107MA7E8Y2876fplyth0ner@foxmail.com0  *H  _I>8Jz6)izqKks0;J̢)b&RQBC8 1~? x6yɶ!,4!~jupKJgU?>NUbyqF񳣈d,׷r ^ǹ(}H*fh,=@Nb/\{JРhX(% Bڤ_ڶ4wt L\||U̼II)bH.\ɇLuOeGM#INq1W `;{*)uӀsyS")QNf͢[yC㘻iQ5uq7%6> )Oj'wc<΀UQLQ8_1.g0.c0k0W1 0 UGB10U Sectigo Limited1.0,U%Sectigo Public Code Signing CA EV R36aP28RQ7%Z0  `HeL0 *H  1  +70/ *H  1" Xb4B[e%Hĥ6ʀC ]0  *H 䄑z<K fE̠4;bZWjD{.kjCAA7A 56#AP ;8qƎY Ow^ mg7@[<,\h("Gj5@ Tm lN]Uy*yC)t&L)cA?:o"#'&ːjjc&톟Fĩp//P!¡*G\q v(et(}LDV]Ë*{j jW><ęa#ړ֊ PG e'ئ ߘ!s 'FK,Eis4|b|[S.VD R 2_ ] v\vXK]A| {w9ZS ~&P!B eL>X9 W6U^T9{LI~Gjޤ*3)8(+0H *H  190500}1 0 UGB10UGreater Manchester10USalford10U Sectigo Limited1%0#USectigo RSA Time Stamping CA9J:_8C0  `Hey0 *H  1  *H 0 *H  1 220920045419Z0? *H  1201Yul 6z'<ݵ `kl'FXv'/鎁(: _S*kӈC&%zmY3J]U)[` m;ЧT \XvFD\z_\ЪD#V &jY.1K64͏ 3¶J<71b]`!g.+ *oC!IlL] "~zZu'J I a:AIDnzL nmWңrD X, @0(/ +71(0( *H ( 0(10  `He0\ +7N0L0 +70 010  `He Z]k1XI3&U072* 0|0d3WMe>|W0  *H  01 0 UUS10U Washington10URedmond10U Microsoft Corporation1806U/Microsoft Windows Third Party Component CA 20140 220607180806Z 230601180806Z01 0 UUS10U Washington10URedmond10U Microsoft Corporation1;09U2Microsoft Windows Hardware Compatibility Publisher0"0  *H 0 DcHѭmEU\dEՓOLҳJY73bs1Q4`Men0T1ϭ:(B@5Y4ؾqlmzC%IY!_BS?ja.!$D˽!T$❠(|VByQw ^#W5.nT[0`q;a @~L700,U%%0# +7  +7 +0UAx6"vkX)0PUI0GE0C1)0'U  Microsoft Operations Puerto Rico10U 232147+4707690U#0:J#%~ګ)STá0tUm0k0igechttp://www.microsoft.com/pkiops/crl/Microsoft%20Windows%20Third%20Party%20Component%20CA%202014.crl0+u0s0q+0ehttp://www.microsoft.com/pkiops/certs/Microsoft%20Windows%20Third%20Party%20Component%20CA%202014.crt0 U00  *H   ^@Ͷ'ۿdj2еߝ͜]p7spWz4'2h}Fr › qăJ/^u鷆Yoכs 8]R"z| wb=t:UCϰY bq]˙d7mt1׹r=Dh3.'`&{hGF?zi 嶹9XsZ173WCZJa#Y Ϛ$H ?4:!FVܽ,~ҷ9us]__ő֚6:BI9IWyDrGJ1[l/7}.n1SmЖ2Q-9|eiS|{"Q-ڌLGï_Kvۈw|46e3Iym8@q wBKUH"H'K=Q*@VBz&rM^UYPI3R`E1W;&$[՟c@"0P083 i ]xv 0  *H  01 0 UUS10U Washington10URedmond10U Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100 141015203127Z 291015204127Z01 0 UUS10U Washington10URedmond10U Microsoft Corporation1806U/Microsoft Windows Third Party Component CA 20140"0  *H 0 _Q}a-%\u#U6jo <'Ek~G8sk=( $,/9HF^S`Ɍ0}c!F/o)y؎93W0rzY5uɲrV˷,Ǜ/kI:9ӽ i[Ng 7&eZIʉg"q[t$z(hB/$~'dpghri,"3%M/v1|򘟎j`23HY\X=)x(0t5NZ`=}NJ e!q""S`RQ:5uC,ӷbR'5s?I?ԓp٬[ I1s_S, uHD3Iw0"VV.$܌ěaDtmivyQ܇6>QqN[5p ;Us5qkVk4t;mn1GKI eˡ#{[diγu"xo9g Fqz~u>WVP00 +70U:J#%~ګ)STá0dU ]0[0U 0Q +7L}0A0?+3http://www.microsoft.com/pkiops/Docs/Repository.htm0 +7  SubCA0 U0U00U#0Vˏ\bh=[Κ0VUO0M0KIGEhttp://crl.microsoft.com/pki/crl/products/MicRooCerAut_2010-06-23.crl0Z+N0L0J+0>http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0  *H  ;1{kYt,7d3G]W?YP;)A[̽BľфĽ GZ,/߿f+ ʄiE'?s#2j#kAsWmI5~nkg%ۧM@YDWî{;zq[+Ѕ#K7wJ/cDY0| R叀Gќqvw*l f/PV اS*ix_K c\NzM(Fx!M2`BF65s_+YEzCc6v(ʨD2fH\J `+F`3!wmGrڢFndh+N5?mw~jJ!qgp]|]MrtMh$w*Uu'ͩ,|i,t%38|Ol:k7xrUYd`3>.-, %o tn*2ʹ;2mC 10001 0 UUS10U Washington10URedmond10U Microsoft Corporation1806U/Microsoft Windows Third Party Component CA 20143WMe>|W0  `He0 *H  10 *H  1  +70 +7 10  +70/ *H  1" Xb4B[e%Hĥ6ʀC ]0V +7 1H0Fb[`T,ybg PQlS*(https://www.microsoft.com/en-us/windows 0  *H =yU4p59Z+ʢf&@} HG|4ʊ]) oyGɺ6tLqJnWnӆ3h0.u( It?|AHs~"(Z  :GG+l4t7tʡmRn{އ`TZ}Q\%wxb/C^:s 2FU9`ve<`PRdW41{\  0 +710 *H 010  `He0U *H  D@0< +Y 010  `He 8WbZHg JQW;5.'cKKf20220920050426.425Z0Ԥ01 0 UUS10U Washington10URedmond10U Microsoft Corporation1)0'U  Microsoft Operations Puerto Rico1&0$U Thales TSS ESN:0A56-E329-4D4D1%0#UMicrosoft Time-Stamp Service_0035.dP)0  *H  0|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100 220302185122Z 230511185122Z01 0 UUS10U Washington10URedmond10U Microsoft Corporation1)0'U  Microsoft Operations Puerto Rico1&0$U Thales TSS ESN:0A56-E329-4D4D1%0#UMicrosoft Time-Stamp Service0"0  *H 0 #8Pp%^F-X|l<|EU|ȑDIo00CkY N6-+ISHNdCAߦfdŖӣ$w+9kI퉥TA̞B q99>y!vr})PXG5flQkLj^|p_/Hq\agg{N+3p?mک7ƐS>'Eټc1,"H)>,r2iHnL7k= AjŲE`͊&&13nq,N$=ePU!$uĀwqS7 Xˤ ~,C[p)V_f`-;Vz/wy{LQAAwO#R5/ap+vzdʗp̒D U@ճ#rK,wo֌(BdiY:*`١Pw6020Ul.0oBZE0U#0]^b]eS5r0_UX0V0TRPNhttp://www.microsoft.com/pkiops/crl/Microsoft%20Time-Stamp%20PCA%202010(1).crl0l+`0^0\+0Phttp://www.microsoft.com/pkiops/certs/Microsoft%20Time-Stamp%20PCA%202010(1).crt0 U00U% 0 +0  *H  O1:}1҆\ڗ|9omXZLeq?m=Mv< iQv49Wjcd '2LPC,$MZ:=bMXΛ{yB WkZБ3s9϶Ɛ9r7Hp25ܪiu;%VGvuIUfX)HOQrԀ#8qI-y= f)܁0DoeFr_',{ܔO6 G਷EӶ_ @FsxE"kh!ۮtP͢t?-v?I$X;|Ӥe#&@B(N۸9C. /x>'|-_冰6$tM2av3TUySz9+[cj-{q!*gYDNmn^55Sȩ_Y25=ho(K3G+! yW./~dDٕlBfB+ 0q0Y3kI0  *H  01 0 UUS10U Washington10URedmond10U Microsoft Corporation1200U)Microsoft Root Certificate Authority 20100 210930182225Z 300930183225Z0|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100"0  *H 0 Lr! y$yՂҩlNu5WlJ⽹>`3\OfSqZ~JZ6gF# w2`}jRDFkvPDq\Q17 8n&S|9azĪri65&dژ;{3[~Rb%j]SVMݼ㑏9,Qpi 6-p15(㴇$ɏ~TUmh;Fz)7EFn20\O,b͹⍈䖬Jq[g`= s}AFu_4 }~ٞE߶r/}_۪~66L+nQsM7t4G|?Lۯ^s=CN39LBh.QFѽjZasg^(v3rק  co 6d[!]_0tعP a65Gk\RQ]%PzlrRą<7?xE^ڏriƮ{>j.00 +70# +7*RdĚhttp://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0  *H  U}*,g1$[rKo\>NGdx=139q6?dl|u9m1lѡ"fg:SMݘx6.Vi {jo)n?Hum m#TxSu$Wݟ=heV(U'$@]='@8)üTB  jBRu6as.,k{n?, x鑲[It 쑀=J>f;O2ٖtLrou04zP X@1Q{p( 6ںL 4$5g+ 挙"'B=%tt[jў>~13}{8pDѐȫ::bpcSMmqjU3Xpf0;0Ԥ01 0 UUS10U Washington10URedmond10U Microsoft Corporation1)0'U  Microsoft Operations Puerto Rico1&0$U Thales TSS ESN:0A56-E329-4D4D1%0#UMicrosoft Time-Stamp Service# 0+~)7,*c[ڝD0~0|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100  *H ӄU0"20220920041413Z20220921041413Z0w0= +Y 1/0-0 ӄU0 00 06 +Y 1(0&0  +Y  0 00  *H 0TTO3;][`D7@S!Ew[ nﾾ|QBNQI_T-h:$Z4F@R]Tx&91Ɉ8ϥ≬򐎍׀EmU*=/ptB;/U1 0 00|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 201035.dP)0  `HeJ0 *H  1  *H  0/ *H  1" 32QxR#;E;Zh K͈0 *H  /1000 G }L)\M>ڎ00~0|1 0 UUS10U Washington10URedmond10U Microsoft Corporation1&0$UMicrosoft Time-Stamp PCA 201035.dP)0" !J˳w&CMZW0  *H  Bdj#X'H]"Z .RR\rȽoZxrs!q//2kqcL$(FǬPr}.Vw^XLp4V]>7j¶nrS!)rz!>|Pt5p TKq;od( ܜqE5ݑi`ßɾa.\=@H'JHU)j> v|_]Mm]ּ6kԉh!h)9K Wu^W{K̅\!mB:/724Tc#;9YJ}MMqKS qe t nF}TM];9M{ N|Fq܍HQ>V @:n`Gzs/0?<8#$BGO:R[D!һX3lfmd^א{\8mitmproxy_rs-0.12.8/mitmproxy-windows/mitmproxy_windows/__init__.py000066400000000000000000000023031511036467100260530ustar00rootroot00000000000000from pathlib import Path def executable_path() -> Path: """ Return the Path for windows-redirector.exe. For shipped wheels this is just the file in the package, for development setups this may invoke cargo to build it. """ here = Path(__file__).parent.absolute() exe = here / "windows-redirector.exe" # Development path: This should never happen with precompiled wheels. if not exe.exists() and (here / "../Cargo.toml").exists(): import logging import shutil import subprocess logger = logging.getLogger(__name__) logger.warning("Development mode: Compiling windows-redirector.exe...") # Build Redirector subprocess.run(["cargo", "build"], cwd=here.parent / "redirector", check=True) # Copy WinDivert to target/debug/ target_debug = here.parent.parent / "target/debug" for f in ["WinDivert.dll", "WinDivert.lib", "WinDivert64.sys"]: if not (target_debug / f).exists(): shutil.copy(here / f, target_debug / f) logger.warning("Development mode: Using target/debug/windows-redirector.exe...") exe = target_debug / "windows-redirector.exe" return exe mitmproxy_rs-0.12.8/mitmproxy-windows/pyproject.toml000066400000000000000000000010441511036467100230350ustar00rootroot00000000000000[build-system] requires = ["hatchling"] build-backend = "hatchling.build" [project] name = "mitmproxy-windows" dynamic = ["version"] license = "LGPL-3.0-or-later" requires-python = ">=3.12" readme = "README.md" [project.urls] Source = "https://github.com/mitmproxy/mitmproxy-rs" [tool.hatch.build] only-include = ["mitmproxy_windows"] [tool.hatch.version] path = "../Cargo.toml" pattern = "version = \"(?P.+?)\"" [tool.hatch.build.force-include] "../target/release/windows-redirector.exe" = "mitmproxy_windows/windows-redirector.exe" mitmproxy_rs-0.12.8/mitmproxy-windows/redirector/000077500000000000000000000000001511036467100222645ustar00rootroot00000000000000mitmproxy_rs-0.12.8/mitmproxy-windows/redirector/Cargo.toml000066400000000000000000000017501511036467100242170ustar00rootroot00000000000000[package] name = "windows-redirector" license = "LGPL-3.0-or-later" authors.workspace = true version.workspace = true repository.workspace = true edition.workspace = true rust-version.workspace = true publish.workspace = true [lints] workspace = true # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html [target.'cfg(windows)'.dependencies] mitmproxy = { path = "../../" } tokio = { version = "1.47", features = ["macros", "net", "rt-multi-thread", "sync", "io-util"] } anyhow = { version = "1.0.100", features = ["backtrace"] } windivert = "0.6.0" lru_time_cache = "0.11.11" log = "0.4.28" env_logger = "0.11.5" prost = "0.14.1" internet-packet = { version = "0.2.2", features = ["checksums"] } [target.'cfg(windows)'.dev-dependencies] hex = "0.4.3" [target.'cfg(windows)'.build-dependencies] winres = "0.1.12" [package.metadata.winres] ProductName = "Mitmproxy Redirector" FileDescription = "Transparently redirect traffic to a mitmproxy instance" mitmproxy_rs-0.12.8/mitmproxy-windows/redirector/README.md000066400000000000000000000002151511036467100235410ustar00rootroot00000000000000# windows-redirector `windows-redirector.exe` spawns with elevated privileges and redirects traffic to mitmproxy via a Windows named pipe. mitmproxy_rs-0.12.8/mitmproxy-windows/redirector/build.rs000066400000000000000000000011211511036467100237240ustar00rootroot00000000000000#[cfg(windows)] fn main() { let mut res = winres::WindowsResource::new(); res.set_manifest( r#" "#, ); res.set_icon("mitmproxy.ico"); res.compile().unwrap(); } #[cfg(not(windows))] fn main() {} mitmproxy_rs-0.12.8/mitmproxy-windows/redirector/mitmproxy.ico000066400000000000000000013111151511036467100250330ustar00rootroot00000000000000   (R (T`` \@@ (B}00 %3(( hMY  s ] hPNG  IHDR t%IDATxexTG߻ٸ{ $Xpww/Zikqw(ŋ$ݝnJ+HBg;w̹3sΜ;#G?[ևN@BʮE]G}hcՕ(2ueddd4Bh=O,$H۠C u_SLܡO'pwT}(?V?JYuPozETMŧ%mWy CDuddddd>>.C29'^VDo8_O<"A!:_HJTJl z|ߙ飛3ܷ; "####5HYw(!!e5sVW?ЫeGm@ ek!̰AFPEzחE7\p }Ӻ22222 cp`ڞI_C0H_Wzs?K]ϒLz}h S!}Cѷ0aߕ :222222]+!bݴ6R{ߵ>ȴ̧o_.?D߂'g@I|Is AQ;_~K/!˲◑8azni>/d CQzCRz.P**/####ڦs\zoÆaJ!73\_л 2[(PL5y[XFFFFF&q4lDP9@F{ҵSzk[aHw?qP>ٯU0Cdiz)С^SG N}0moL~CddddddGbMsj~z38 x^ˤ沔0SXG!0=e܂A+MΆ~٤l&+~l^w(׳5s_XK -QcLha˖ Jt222222zC`#]# 5z?DՏegiDZLFFFFF@Wx{^@BO6>}dxpc>ʤddddddk~mOyz9aW0(~eyz-&/ϭAE] \222T^wu6ei X[>kjSp)!#!HRT%)IIP\T.ޥޭ 0U*N0:Fy...PPT(HHP[VT*` NGq]!]!]!-nDψ=h===999{$ $zzz g7ߑꔑ>~YF߯o#G _>߮A]o5Ӻ22OT`ִi02s4n;KgGnڥ4p4i8qnr/-g[ζX[[ۃ$I֓&&&LmLmLm@QUQUQ@Qh`9YO| u@II bbb nf̸}9re;aw@h% <<&M_ u_{Q A3f̀ѭ[CTPTPT$4Oh8|{PHNdd M}^o)3Xc)Iq=z?KVZ[Fo ~$# &oLBLBb8qµkK'AvM@֩YYǀG_ʣGcpp86a LmMM-M yJGZ ^^^q*C!?gå>\ < ٪Wn٥X(*#$+ ̅\N^N^N^'4OX0(0 p_C9'n܎V:}%@oN] Uc-nA!::W wjip)v3F Yƶڬ~my_A2By< 7_p8Я}`a+`}B2V J"|RJW0{i%8wz͝778TPCPdeEVBy^y`|2 h?Uk>p_/> mzXa)ly%\1bv .{^ O= D QS|O@&àWzl51:B?bO|{H;A b2d>O>9dx⭊B * !Cy}jV=ՠA,|!qC+п;/＄cs?Nx}R; ޓlȤ[48?y]uDz`F!ڹ.{I,j Ir[o]5TzSM7PDWDWDNK:-~~/+Ϳx!!rsȱ kرcX%8|<3kOfzj]%$O%Ȥ5wrY~Rj3Wfi].|u:N!YdUT^T 4(`0 'SvOAKK=ʮ&2zћ>u2jkbxѐGCev1BXa4 F貧@&-ı;xk$mW}-u9dٯg ;}QPvRYeQ8SVMCK/nuܪU*F*&_V2‡ ԧ>e`G؎aw{è!cbĎ oFd)Jo;4Iد*4G|)Qw#U8x?#ݬmkPog~u}m~͏vRKV2_`M&^{1X8o/2 N/;R|,=y@k"Y)}}EguesR(|SWSWSW(вBˡ勖~-BݨY<ځbbb2߯OROCx8.` 6l}=^9e E W .o#XL||gP7o߀6+ o[mqS-Z,8Z;Z;ZX"2L.*J] '5^1͢B؎$QdC^{AUU$lMؚAc1טY,ub!}Wկ_i)R```'Of Ui2VerRQOSS'S055e!e!eO_F}KRWG_}u4ZjŰ 0ÁRA ZDu͗-f; )#aR(|fCőGT?7͠j㪍63g%(A 2NijjB3!lN؜9 Ϛy@=R_Q6GPH,ʤ3R۽+`;Znej"t5[aCMxnI[KC .@סU߫p屗^±Dz 7N8u V tttM7"t#6+dV'Oq%STTm`Pzk@杙wf F-JNZt\!B.UWm^{2 hu?h. 7bt.bPe3ebĖGXzj47^h ?~; QQp`_yÁL\8ÍW7^xwSy܁fLŃ`ll6VGYr\lrPq5Cr1by>} NIH{OAJ mhv=`̯;*lUP;dw揲u;:K2iLT6YZgi Nv;=l۳o^^^ٞf{ aw׀Λ^DQ]TL`- j+hhllʶ yyy~$,Xf2E[7o ߒ> >DtUaudRmo6@b]t }\w8JhBhxhxh8왴gҞIvr85S!NS'KGd#)}6lW]f=jڬl͟X9πtZ:.)a|a癝w k 6]FG  _udR$SaԅQ3F6Ff 7+ջgv#s1a1a1apޡ{|1_BٱWLF$!.mJ;!c;9BV.\ZZ\Ѫd>}0Y۵oVY~sM9b爝#@UU=fl%a+ˡ_-á1EnB[8BGG)fff\saǠ>;C 5!:r#=rDQ(d[pawx΍1_ HFo_[9ssy .4" o:tTh?saD#a.; qz5t`3GW]%NK8*U< `P5DDH &&WUC^}{攛Sn2.d\?U='%%l<ÍZOj?쾤8ճ:DcNc tZֹyggmb#_ĐbM& f]`vZj@mE[E{22#AgYLfөSO']!wF4_'MXc57>n|~k[g6(%JRdd++ݫu||Rn22_Nf Fލyใ >Y|d| H+ J]gBhHhHh\zeꕩњGk۞m{{Mvܟ IR}ڰ*`Zട?>s}&ڊ?Hx!ù7M}g_[7<җ$D'>g`AśZjY 17Rގ{p/-[Q(i:::AM6evjE;E;Ews]w{@a#wQrgdaB___m[mV^zJE#4B#"6<;BtԥcBo2dm>#t J$$U(&E,bE)"!N;i!4!M\'DGI ߉G㣏>>ZUVZE\rʕKkcֵ0}le6Hf^ a/͢7^b䖑GnnBx /n QsU:^3Z4XeVeVeV!ڴiӦM! 3nnnG={e\˸qB U* -(ttF:# 7ɢE{!ll,m,p(Pơ.\ʻ !\v-M7p]u]V©SIBn]kZ!jUPRTҔgi-ZB\.DŽ=lYVBDoּYf#~ۈ߄p\ ;ٓY!0BUl@-)A u"wTܑBADu:Q!p幖Z k ~}n(O5I{7P6P6 6l& a–-5Bku/׿\5k׀k׀$ՂW_͇EaAѿF eeGڑ>If/">rmd #- 2˰ybwHHtOt+/~F(s&ݡuƃTsоf)c{K9,:@(kF;/ptODCo(R!2i$(>/`쓨0ޖk69A5j볮 QQQo7芣+¨㣎:|r|Bӕ"\;_~`ʊ)+.]:?ņ&ݚtk {! &??jFu6@W叕?V)VXbCS,DI|3ROhyR>V>V>Ff4i^@ñ 5C#D4} N?9Y8>C\sΕA{S Dlc?&مvUUZa9$9')1(ji4T֒d-AEyE9[,tr딩S&xa·9qΰy^g8˙gC]}=^o_]=wfR6$\xr;w vU_Z]5a!Js/Go} Fz@hD'mI- 0?K]r) o~jU|5_ͻ@9F ^^^"/K4iӌ!kG|-TxnG?{W_5ܙ~gƝ:Ĕ m.ReK-UW^aVZj |y3TTU>%o7(E) f%J'?|C,l/]vw vbW xAYAffBtkrk Í##F=Lr/T,Hu"1"T@ʀ` !*Ǫ !Q5Me7{!l٘`lL53ToDž̿ {V03\3sArȝ,~j)mq_~e7~ɘ'cMT.]tZjUZj=,(** -+)JC:>|seɇ<))La\snj -K0fո+oͿ}83qVw7md7(mVJGH[',}y>zj bfggp<NIqR[6oټ~Iv+Z 9 t?!c;O?TTTx,+uc8TN*hvϡjg~&,__zq$z%z%z/* 46h,hhhʀDDDkkk<H p&LQwY3XzT,b&:1M+E4!9s4EE%333W.\^43$msIyQyV[!1c (, R]ӒmO=߷_03`&߿O1Bzl14РB οw7*ިx#PRR")T>d嫑;̟+c'NcbĎP'Nthxc㍍aūۺZO' ǃr@T*QUlHHH(~W2 \zR/~~>aTI-,1,C),5scF ? F3C wJEEEɼXbыEUWZ\R(op~Y_Vl٦I}J(7{C= |0]URURU3#3 >'*vQS5!\s{-ĵ}a®Ac7!ydȦ={Tw??ГL Tih3gr̎3;nnn`V[K,ufց(Q&@F p; )љtWU>ԪQF¶ Zk]!( (0(0Yz {{=WWW_u_WBJW 3,<9;m7nWmn+3@\ $'-i-(Mi g3Fفe.}*V0`n/^a·ˀЧBFki W_5o7j}\b;>0ro_{ߕgR555:Kt%W\e}}}59j2? ~J{щG|!W`^ T« //ZBHe(٣3#}H|4)ꊂ"+!(9J KA P=6zbuW0L!s2lӳM6r6m wLz6__Mz-`;w0xi⥉ /MgMgMg2^Kj_uGO=aQDM&F=l׳,s8.u)ګ@K+,7^.XE;y!Bk!:U $_ö .Tzr>d22SM5sx$&1 "GNj>zᮇ)2椓C 2LBl=Vڧ]eɕBTx`CV R/U/U/S]ǺBWWW x0`opHǞ:{jjj &Mh!.KbI%{>Bp ABotAg,|  p tL1M1wDžoW]x+Hȓ'!{Q\e_6b|ABd;KC~N;1D!Y޳gn6n3!(s̍dg B[b{68;׬.xT||L+V}ݝv {uz=ȴf͕躲ʮ+8q>b닭/j9rh{Zi*jjjcƎ;f5?k~NEşxs?!*uBt`>2bŜ 1~' "H!W0>5L"lh|5_!^n|F!@ېO ri+ !p|Oy $~o{;!;;!LlL|!BXbP{)G5^[(].=nQݢ ѧrJ}* 888By a#˹8✋a]u-׵- [saaa0/3W\ڵڵڵd9IIIjZi0CCٖg[,i/圽%؀:2;恛'n^ goq: 9r&7{?Ku>d=({qZTlRI%M'[Iqf\Nq`SM65!CFö>lڞ !ӏ~#̸:ꌫФfMjbbb躅?YUgVY7Xwcd#YK\Ϲs}(RH"堨iQӢ`˾}/`.s6[Qn8Gyɛ 6{lXtb! 2+$Ē K., '{8Or%FkB7oܼqB4i;l 屟g?~N>3s"DI~m޷b℉S'pB >Q}O=#mZ{ S%X1NchbNBDԌQ7WI #a$ĩ'D**W,~ڷ!O8?bƳf<"|w9/΋B{{{-!"wM\ׄx<#薥g7O!Lw0ݑQ4@z StZkٮ"/E^J}şľ{msi-T=x/Ěky.FHs_Nutt;˅z}ׅ*g˜-PVV>J\nrw]tttBD+d[!HC!7?BYPY@Y +CLf1"Dn4!?!"""F# :/"+ Qb +!ݖnK32X(O'&O 35k׌Tމ{Cmj+-Y<% 2k++ȶ"[l'O< *_|U bz.Yqc +ka7W܄{QEh,.FR;eӺ'Q3G%K\8(ӶL2mAVjIFa9{NXvqm!CLv$RdnJ . UViZ)XXXCKKKYEVlll{톋}/śS[Lm1jYղŽI}SC -ػ`/VVVBx3ß{ӈtbNS qj!% ċxzsGy|q;t@B[L1B<џ#~ lxכ]BL2=ӴR.yR SR߁0ukL7/Ds>},h/ڋ3` fB̈́B̞?{BvhQr@+.La&İ[(&\ O}+WҨJ*Dwu%"(D=z܅xjm2iFh^)fb^ ɦ'xpBv򔧼9\sݖ-w"77oĿbs7lo&y/%EJ_2PZ)V_NNVן?~~G%DAFz )\|UV}\%'8<Č@-H"$נAxm[\o -2lZiᦅ?&~ld]2zr{?ޏЫqF```-ϼ]T⬎/mնj[\seax`ooedA:Dodd$ĒK.yV?{p|n! qBS\Izzz 1ЖC[ a| ܟa<ijͬ5L!BK -.y &5y~3#)SsXH O:6جc"fFUuV֮ eeMZ#~bç/mtxJd)װ:gk[ڃn M&շBNGnUUV= (G&kkk wN9}'56؜$rIR贈O#G~|]=v%mC۳mV+SRmgCìoֆ OR>:k34r([p(Roi~τ>L;aw%/+~-[f{ k1c2Lf2Zfnef\s@7oȆ{g-+@2LO "EݦۦۦcYyL/)Г"4i|' ~68z .]xpH!+5ԼRz흷w^fұdd>$C`C܆ 0Ӭ:¬: u$! B_}=:Y<I*3h]޽}k0Lu 4 .%K8@'~Wqco7f 8MqNP=Ku<Š)>x)owpIyIu)y-L/I TFF0f$k~/tjǫ(((@7W_ mD]^)^KSR+,R(׵l?%Js[n)\\yqi]O/g<9xzy-ӟ G9vlg0x׃yj*~BJ)CCCpxٓœ~v _R@v[qƕC=h*GʑzäV%FLU'}}XgM5yR{u?_EGP$=}oȇ TSNU{111 }gLI.[&n3|Hnr(iNR~I.ϻ%}JnnnBl:ئcB誼[xxx+!.4B#!y)DjJREJ)UDw-~Wkf] qѶG 56kld 83#w:az BCCC>}bggg$$L0:<3 իVL0{+\5q- j?+Yid呕I&՚TtH:6=>.33ll9ԽZ,\"j}5WiIˌq 7re$%ާ<<< hU*: _!WugO: ?}}}X^dyEx╊WV>?KO|Z;>Z*kŬZ /u>k<6j* 3z [0l!cX' a\¸q|/EyjVYihݸu֍A,M&~5 ԫ/oP SR#I2zY{ǫr4WԞ;!/#= $o 0.\,vŢ0a܄CE5\,g9ˡؙbg;^xqEH0;av/k(+)10a>v c:6VZsA=M=]=(G9AB %!-- "6Gl AM5PPPk(MxOc?C{q+Lx:鄧+9sZgR&%yZ^We.s93 d\a^z7Q N{*ש\r;֥̻3μzK0g^2ɢ'ˡi?uߥpϾA.]*kb\+[ Y׃E)erC[bH{AaySq??+?Gު{`ىe'T"0Z[Qr4H{=`U˪UMȺ;(xxxB9x Y/e2qnƹ7!FC@9S9S9GGGJTu:wfAAoUE[ W\=pǏ=~Q krʆGq#Fh4dҐIC``1b|R\#GPrG%wK\.[:H@\YZo~Ů9s"z)FY,`+FC'__Qr=` [@O6!:ʉ0΁ ^"Hz؀"^*H9!19"~9D%Pd哕O닯/FFFo`߂} Ae^MMMP鍔 =Ygm؞- Z@U[.Ι;g`ܶms0Ү'VPL־[nO>q :~~~ ^x!aaޅ6ks,Y<H[ b}gn---I[P5+׬T"8np\.s󗛿u9Pd腚5YkR4z,oμ96I \|[['mAkb H8 j.Ah fԯ@>OMk~?j =i~2?1c%{OWX.poz} \?WQVԆ;3̼ެ{MhzŦW ^xxx*W<]{d6:`h?8INN8T,SL2pýÍ[7n߸ [m9lݼuMlγ8Ays[m5VYg֙I趢ۊnn3fcKcˡC/z7IEcwGui +د`wpp|OY܄Nul& x4Y5*$ N\* Yb%^(oBBB ְa{-.d\r L3FBz^9 3| kF3<” S*Lֻw>0) 3|Fembmbme )X L3v۽~z>mS!'rְt" _, +;츲#z[ |vdڑi[dN9i'y nPA'K,y^AG|NvB4weq7oB_ gjU =k^+Ml2CG)`K!UE"Rxb1c@Oa? .X,X`1WaNAH/)6S,2iek wܥr)AJ類֊=H:;")4UTT OO|.>p=,׳{OUփis!&{l85:*+u׶e 1(~ i1[sU5'mw-LUyUtޫz?Y+f&1cPG[{Z@/ݗC6 ^Y4嫗oRJ')rc1sI (Zg455A%Eɷ>:o^ O~X<i:PTTTTT俳V Iᧅ͸6 /^"3|M B֕äl1bB_K7`{p鋧,\1brqe^e^e^(|6X[<`qO8)0a/m~hE'k94 @ 6x4$!~VD?'^F-Q*_.R5ԉs$={/4?$ſJZ%UZTiQ:j(pm9H"-گJ)-ikkCx_W}}gמ] U "F *'T1MLx~`U٪U%p\۹6d9rdʑ)G&Ȕ/SLzV뭠\\\,)W6)Ddsi?=3kRִ_~M{E{ўtמew5E^yQl&ͱ$ǒKaEбL= H~R.W\BFV6qL_xߖ[fo-Y:>ɐ//S//!;\wTj| *}T-%DEM; ȴ1ۄ7qe('DXo2𲮝ԸzcBح5ϣh6]-[&[naº Q\fS5јFcO_BZk}BlnFB]Bh.j.j.&SH_AN)e ))IlxRDt\0M۹IM&5X_x}SO -ZNr!Bʅ2W̅Xwo/E ddd!W_ :ҁBݧVZB$I(P]{!|*柚%X,n) Qsn޾&Vq}V`]& 6!D=B(J}(6N;bɴ%ӖLBkZ#VX1BIM'f**5+OC(A$Ȓec…p9rC 2j]M4{8,9ӳgyC 7d~5"nbĺ Hz/VzXa%!RJFhr}ĪFz\!D;t]g_^!hqyYhBTSN}@.veJەbÕ W6\yO]+։ Bg,D+6['e!e@B;|I$Dey.Įj/ȯy>{97E9 +*!M#GF!nu!0zh!<EZBp>Q=CZjJe^vX !mbۻy8‡K_j⧐s%|禝vn?H5|z.B,G!r]u)e!Rv)GfW9-{+#!ؚ еJX]b[bK q"HB\,ŹC<٠ߜo a37X8Roj^:#D=w? 55J >08k!^0{l!O ?LYI&&&۷OQӤWpnB *T(_CP!̚53k]g_Fd.tڟ?kZ}{ϛ/bbby:|1(rO!Vr[I!%^Ka fb:Bؿ_ /8b/jz b6B\$KSY QͷjDž`;ؑjȗjjjO}Ӆvvv ?n~͵}¬6d򒐐@#lpxfO1Lڂ^bɂ6>v5Bsu*DByH H?y "a|7B$Qxt"a|'^B$o1L#= uҎjZ.㻌2 ^6xd(HS|x=ŮSȣhJ\_e/ -Z+0=J͸[;oqP)UtҵK&+l;'>Kl=Ǟ{v >0p䅒Jx_wfAŮB2Rǂr;+q]$ Cnؠ.1)>DN,@Zr 8(l  {DB1XܡX>jpj9PW8CQ)LW<\0%,IDA@6&mL@4i>MX7a_/^C>C}/TZJ%馞[M2̶J*AQV _F9ϕtBRK~ʻeʟ ߘyB?7=5լ[xUU ,Y(:ֱ444 &8&8&O < Ggqtl6l8LO&jK[6.m`[o W^zx_xx3vwywg7o4< 냬ަn$ .=0.j =-C q7@Ry 65H Fk&V+˲UF0iH"?7A*wA<q$t~8RQ?;qg7܍#%ΊSCb^x[?hLo1P'NBKƩ> 3g Z/jBi.O? q$}[C!ՀYf 5zUUW5XDoi8pùH7,qcx5J\yr-x>ƏP+1=zg [oYrxmσB* b~|xI'{'W^z &6L M֡P^{e%ʊfkvz>xɊwo[bSQzvr2t 08LW9#N6nA:LAyGQƠ)\1NxR7KO<OھI3$,0FӧF}jdWU blF%󴽷7[f>{k1ж5d=UPzKPFN; k963Q`ݱ͛ro? =W\sK^B]R7\?$gH+oZjy2WmE:ݱM"b?<-R@5Q/wFFF>}Okn=ubh*`<9blEŖCYԆ7UukF^얳kή^zAL?uȞ(K,±Eb?C [f;9y?NjKg3wSL1-QcF\OvAn xj-(ТHKRRm$%쉳'Ξq>|@Eـ+.*.*.B-\=y4te24ząDžDžAB)r~9>?&ݩ>F,A9dK9u)e:)W?sU5W\UR!$Ԅ^U6/z{ V-([7d>'cUh.X7Ps AGfVbC6'cXu܀LS`} qӡGiok;dfnkdLɎϯKX;hK]p=orAԖ sh /aаufǡ{銻,_bcߦ-{\w17bn{w8UPT5T5T5q(HȯW/e' 7W_^#lG؎.F:u)ߒ .U]}5jR/GS}Vi]JoEa- H #N888Xnd QQQMJC;-F4DmJ'"a4ga"4ܼ;.V"ަnh/9C2YΆ5˕t-$9̓RZC`ySBq4?Ume2hor604JڃoF}tpP-ƵoCڲ/%(H ho n ^Z*GEՙ+0TH+˘ J)r&^zkY m (r"iafRe2 6&la;v^6wmF u)ߒ n[ܶ  #QW5J\.W#˶#+++{O_? myםX}UVG%k&$.tob;lat]a;Nub X:}8/ȯWAIz,umV:VpMˆG`'n ,:h]D@Fz.u"oc_u=}a?,¿O:80͸a]WOA:+PԐN t Mnm5Y)V$Ko&3 7%nJ;?ޫM69rM+7p> Y#~yzIyyyyZ-5SL]tj_ <=,F2mC&囔O>Rzԃ^WsOϽ~7C^}nnAGLAJh85{yH+>$Mu"? {a*Fk)1,nWtLsUD"n:RvX C9+3 aJzn j6pʬ~ĸwģ⏊Æ⊸"츲ˎ6m&~yʤK!lD؈Hm˭u)ߒ@ %K W+d q⎁2`o@d5Y[dm%x{{^";,u*Mc U`5( +P r?oP 6}9 6Og: ˱6?gUTl@׊[}ڙ示b7Vl@-uE')%֙"pQ?5MƁ%A` `44%;cbw| d`.Xr.B}C}C}=$E=Q2G%ywu}ïڏ/o`GtM&]Kߞ}(I%D ST1UUU@x oᝎC&śox)^~gqqq`Z߶-?ҍ`rLl;y _r#G´}M7B|'$m9栌Q(c{r}>seb6b /Aj@Mx V$&sB^vMCb֓ Q!`ĺ&PP4/Ƚ?gWҤ7X;:َ{w=^fMOB5A`_ DO&!L^X7_d?xPAE|$\={lSM]4upk\+|/HRe`{b/TU*UqCABP,Lv=}ci1ELTM=/P/Ƌus)AJ(Nqbbb H#H _|*Ti43i4K+hn sw`r$IjŃRqTەەӺ2 45 >&<;b>{b-!mǠjR47NtK[?IbJLj"J-;Y dpXz ƊL_.$IȓG`&՛t+({*{*sÿ)]O9O}^jtJS@{>߮g8y;%d8LsEwDq$n jܦ\J+lEIIRI`8+_~ 8ƽ4QVl~RaN/6&F,Qt@MH(mGŨ&Õku7) c A ` +oWA'Pg!!Gqmx"Lju6b=$ f(~N΂]pmlJU L{<Fv huA7& r(1MTkgiaaa :?/ /#c`P+ 5-IDAT݌[ҍ`@gi=fff8Qܣw+/fkv;F@7N{{[W]ujZg{ā(( " {wwl} M&y$O,pT<$(+FNTa+$\U.aWI'艬2O\VCX5.' AG'tVVAX@)rb ƹ)o``j;.3mqK@FF&SJQ+*Sc?Q< >N$eEr>>/] u8VkI&OX; M4@ \0{߻fhSOqX_.S=!P*$ et Т S~K-SJQRi0ESSL7DMYA_7Xr + ! 1H8VUV, A@v0"Jk|'m&.FZbhw d(VˋH#[~JaoPmH~?iQSwSwuuu0E5Y5Y57oP>J>R>mnqt 333`֦MO$~PNPI&{lp7#'Xiz@ *Ӈj="GJ@Px_U7HHTmڻgϏ%+#($Tk5OɁXCT/$۪-E]1md 222&MgZiDzDz[H"a1s̅%o:_PX>ӄ4çA7CL`yɴl4(]WDBf W}'QIqPA6."ERk왴(y6<~<:62<}bkHnK8CĿ4Wݔ(DTVV1V1P}W/φż'jOeD QCOH9zG%)mz ZiDUQETIyQ^@zi^@PG<X8jqF]ue(HA Cs/^2$(g*g(g[+b$5"Vu0-r 3ǿ?Cqbåp ^:{ ˥o[oa{l~?FWF ͮ7:ܸz4&:ro8zixc'\th.g,u䅙-^Gpx,}Q&o:+z]O"JIA5ECaboG!ic9Li~fLl@Ċ,T*D55A^ ߣNcDXոqUc8PC~v_9dGuyM7% IpRinݠēOJ<ѩS/Ov3h7WD^{k2@RI5AsCsCsfK`2䁱>\q_|IͿ>oR2|*[{O= I[tLvLv^<1>b3uqwNpNͿd_>,Yȳ +%nUTyJPȳPs~Iݵ/*_]jN}qH0~).>Vd Tu<~u@ .=/chBGT3̓r| Or0;_C*Ni@.I3ra3avӇw _KP:6)b*Te&nP9|H:B3#~ʛ-o٠핶W^V|V \^pyD5335Л4g̀Xb'O(A YPd$ŗ/_ /^:u.]F2::zgO=%lKئ75V"째VM8:fQ1ɘ'+ΐIK׵ ;ĖWUxßEˇER7+!yAD\@+2$9)R!1rZ d$wl1ɔ=ɒrD/ t#ϛ۰ǧ Bl7(2L#z'hndI%YBM8{,f> kٔ&,txEPC:w8q$8q6m>2Ɉf!_|Jڒ$$$@PA3:itKɗ UԫW}v8ΥogE ۫oR:ynynynsϕ>W}J{?'bm!yhF4.+70oQvqФf1/@Ҟl\Y%1gقVwz[=_br&Uoi@S:yɇ> 9:,X:F[Pz̤6D'W/Cwk5^.;C{oƼeH#0%c6l.4br[+ ]c<Π,]4 1@y/WJ\)q컲J;nz\3]jbEpkA2eK=z.\F}2 y#A^^j =\3h,LO~`vek]n4GMZW<ދ ;e'< = = ^4:P⊏:bINhLBg>Z;Nlmu8YS T#_s|myQl3Pm "6,3fgppp5Zj|9zDGGŊi SP̡Cqp)R¥DbË /6@ܖq3:iNLHZ~//[c[c[ce}6-o3:>)S5#\8rTpPA(F1}I)#N:밮j%6x/{̸֚0JnGz /3[ &!>'G!OL(Xa]M(*W?‰ĿAX71>+$"Ny8a H0Cq\2 0[+; שf]".e \=l{Ԟ@Ԟ 4QSFM˒$u[V䅤)rTj8}RA'cg`OuVZ5miÐfuZZ>7~"s";P'dpݓ#!ÑjO=&>|s\k2=kjj¶3l;|zT`nn8V~Ɠ*eHL"x Z?w:r6ЍRomۏµӅGQx/4BPħȓ"OVU>>"qgR}PtcAvPRP4)OAAU̡t\>Ʒav65lGz8IT6%fM6VdG˜@3#EGOpUWW]]杞wzi0oTߨ>%TK G.p ^yHBmU nǣmaZNCl hFis 4_ePp^wPvp[cOvi#l*xz|oxj !רAby@a W 0o[߁|U\\AS(.29H04gpFz1 \#M#in+x/v0,[^{q1o]v .x U|V@9.+ۮl-bߺ6~z#XFCv9B *4 .ɻ8bi6'ByE<{ճWYg!BЀ8#L& aìAŶ <ްaJo~|2:'=kl  K~!穔RJ 5KAέoz6kh^y hK_84F`MKns^xSunTx1) VU(Թ]xi^0j+5M/1.>1ś/杌_Cf4B zh cU 5^И R BHhY]ISrT'l+/`yc<ߞS!X=F[Qˋ.y"EB⍊7*r\zN9r8Wm_}IfEW[6o 5|^9=`ۃP}ZiէA9"|hѠاد"pΐ\.|rys92e $I<Lv2%xPԷԷշ@K;oo3.ϸd #y1k4CN×ӕиbp0 <>0nÜ@UUΟ7TyPAcz[OXxxᡅ B!"2wH 0zѣGCm -6m.\,8)N]@qq d#Hu+\?C2]Kw- .(ܷr34gh#BwRl?N/;={]6ӻwO==z:0\۾3Ӆ7oBJ Nxs0Ab"n0Ό=3XãnXja֧[B  HNS;זΞk|6> {\k7BCU!^RcFYK lZ݆/<wW34_o8%O?4l-~E%X:w6lޑ*c!/&^L!B |A늯+ᮠ**J{x@k~&5O`'/92dBd:|xB 7P Dg:BT *D=J{/mp3Esrqrqr ,OM"95ژ1ec fКAk Q_龥 A,1Ĥq7ɓy D'ٶUB4TY}!&j|+sv=dUCWwR11ُ q{/cbU$!.Y~LC}Lt&Ċ]/bBtk/!O+cT;Yw )x''סC-ZB|q'gBo!DW؞'?{00DEBNg;t6 |!E)RB;qĽ_QHx)7M!|}}t\qMg:vi]|Rc!AjiNi+, 2JY'SB/-/ S3i2OV A^m<\Z.D#y#~!Ow?-.N=tCBPl|ːRWI% Aȃ:uk!t?.DȪU#0RT\Vk6 ѧOG!wY!Dagٝew=G{UT} DаaCOF-,[X( OG>P+"| =~-4η.ŭzkدq JLG!F?~-ĤvMj'D)Rl0jŬ 9}Ůfz䁒Kb'ޙ{g"arFi%.]~)E:u~넨׹^z@{ץbBl~7_BbB8suM //"LQB/V޼#bO!XY $w;τ>˺,@VaR,8x>|PWWbDFT'q;9专ૅZS{Cy~y>yL\]^˽#6GlN? mGvdt"<hp3(Nq ҴiKS!^Mx5Մ40GPԕԕԕxuչWعk箝:|ȡ? QծwB8?u.}f} B*( {/I0{hN*U*B ?Bܸs΍B_B@@ M9}қIym_~/۹^7l^zy!:>tFHw:[;ɑFaou`/K߰(Nk%Ҟmmmo[R TF*~=RII$k;wr0V9V9V jz)`,tc䜖sZiPK.ջ{J<,d,AVZm=*hOΦL `b$~b(/AuQYE͛¸N oϩ|IL;0Хkb@-*Mu6io¢?Yy8_ʧYb]iR>&3;gv WMɭ% I𒗼BM4ZkSDjoy(QFv$-NZL 7Dj"5궫[,ӬҬYTS D+ASH@,ImJ?}iEvJaRZ˃/<.\Hd3V=W:s 0ޤAr> &&9LJ* EwHҟI& "Ei -=#M,ZF -F[І6Q8pDa;ȲOK& g%nI$.Qkk܁!yr'Y+oHzx_'9LsMۛ7K+VO78|RJ *5H˨UQVW]XN"0)zܟs9>!|BptivZkD{Jd0(qiwUEpO.7Bֺr8l۳NЯf_>k!,.|GD߯Q2) :׸ޭ[z,?x0l0a9ix1igBYDI$ .\D-ZW,_|DC~,~ 6smqēfd}6lYMU>emI> L{m΂7A"LNiJ8?1*}Q."yhsPVVVVVӗ/M_Q F%'KftkuվV{pZӵ&vOF? v? ^68x{:(FVVaK!1M4>h׬ Xj*ȴ?NkHQ3`ʦ+Q]G o020yfajBb<_U(P'6c?Yxxa6kAUZh>pfUxHxvr XFtIA=AXRp @.G/KiUl[AuD.Ṱ̬̠'58y<_ӛ?{쭳]wu2L߄E n~;ߗժolpkd\ۏ?>2nedtm@tIrW9sOyCϺ=ntoۍ.>Zy8TPeWeWe'uě~Ɨ#|]USSz FU|TqS὇å.jjj9ߝO!|s js#6Gl&ۍR͔ qUt#$@~J3D9'Xjjޜmmm$$$ 8ֻ[]iSM6Po徕q2jqpՙWg^=\̼IM1iWWWՐp1bŌNJ(UTc;ω>S d3 )K"[zBͧ5 ~.pݻwBqxO@=Bj;%|ƪƪZk=ۯ -(Ңsş+UQVL ~ZAlضmSյkWJy.Ŕ'[vՔuHg$YaR4eJkrdxi9З)2)eR---R+Vo<_hz顦}[_޷o{߆77|s34}Կ?56oÅ+{~TAH bRZFH "NGS ք_vtr˕ގ444cǐkH!ho=!O:*/^"?HMR SNm`{r.ʙFun[m6xM734;:ĪJ+Os"uh)((vt'\J\ R!N8z*W:\`pc7[6vꦔgFՕjneyn"-BXt5dtni v |s}??k3i.=]sO}muk_ޒ@[͹77ŸUU]44W51C}h$oXݾҖfff N.8$t5,n-đKgZiy@E b؞щjHo]ߦ T;\pi}m!Yf囕0ʀ.M7ޜƟA/l:t-귨srpۣ])kiiA\q=@__U*7-nŻ1BU%Kė7~?xSM7ȸv+/ׁ[>'L ׳^z= ~?Κ;k20N&׮ )L~'n^5z+DSkPt\ZI^vZ/0lp㮮+.).*. _L$M&I0Q$?EJJJOSzEEED&jtT^5{BO <1SX|υ0cRǤN&:YW :X巪~nAݎ/_Zѳ-%JRN /dGo@$eWLJS;>;>riV'RF)rgCo -Ƕr,-ڲgggGƏ|SFk>}"D@٧g~n ؿcߎ}t.\9 ` }5hu ,QqE$7?nqS1/b^$IȓO. fgL4`.4lgPnr䤹./o3l?eB,"t]mrC `ӨM6G}HwEl&M0n%h`~) ^}-UTRuabKAzMlSM}j1b<~ˣ(`Xam֏A@#07o꯫QMF5\} Sbccw3D{HV;t u֥ZK9ߢ7Sr~iNj/3f =yUW]abщE'3g|Ϥ^G:D={1Fc_q|aP d.cW+ +RJ+UO?fffƪ6ڀ&R$ B (T8pFیmKW1'bNĜ}W]:Guѹdc]W\㓎Oz+W03I7+_|...߿䮮\d.2!kVYY!yu>_}_}"{}An5k h墕V !<"Oo,sYf04UIAD쩱"_F|IɬM֘1YD?O^+{~~~if | tLf&3F lTlSMQ?-/Z8帤qIv۵oגnPAm6۴n'1KX.*~Ux B2&bp ^ k_ZGf}n\qE!꿨s!yyy{6=uϡDGQ?Fcr"WwJ)qe֗Y_f3atw=z^.6Q P_-/B2.i\2 {F'fmWp,-[dbY7gBPP)?;V^Vi)GGgtyܬԟb;waæB$LΙ+ ʇ+ʻ*UB)>BcWRJ1(7} vCXVs|U!'@J}V Xjݪu(l\ظ ~ջcĴi2BtvBx}}k+B4,۰lòߏOqkv=!B.]?dB6?Br%,\~fJ7Eho .&6~Jv v/н,6Yla4yJZK-["_"Y$}ޣ{ 5M2߁ҥ?|C jݯvO/כ9PB p͹wP~ _zaF_6pV˭ 1͜9!B$^Mx+N)Ib' kZ/!n+V!$[V5(9W]4i~Su^G{pNQGuA}\FUkTG3!ZkY.!4>Oy|)D5c:rm7eJH%ź52,d!5j>5k 9.]컀];fw@ ¤0P]V]R]\/'K.]p n\pE{Q(} `\˸qU@u:?Zq L24zݯw53jf̄OgwjÐ!1Cb+;H_w+!;`lv͍V)2teX2ve,h55p9;Dn\fʃ*xh⡉/|_^#FzUȫW!BzB;@OV>YY-涘Bfov_v+V A+Z2 h)Of? 1кC  FXPz(=B\+s̵2BtbB6ml|``!w2EWt /.c_ǾB,IJoXS(!JB9s"FJ,;zݪw_ K:N!t;W>U0S+RJ+5bF&B888 j|ſg,6 -'&DK-/$)S@EץOWWOv5oWE>O~ _3{ )6)6I 6>\.b$Il̈́5IhP2'hE%RӦN:m>%|JBsRsRs2͇Zko[$nuk~w59פ\8SL35B;3gtO!;,O\]2a>| 4x/<_xBDH!"BK[[qGw>D sZ,l-sg@OIߟYjU(I5B[a'dkRФ闺$4J('s虯[B8˝r!RYfGlhLl5*Ds)Ă "3 PDG=V=~_r!Yo]~Y/^$ĚMk6$&mN_x ٢ arIV3ִؕ=̗/qWF}{mo1b|MiJSk*ypꝫwۆom<<<`ڮ]+(޲x⭠J*=ױc]ǂlllPjǚgÞ{~F\q ^6mN];,RI0Ƅj@5]tY%KH"5ݯEcRIЇCCW]9t :4 nػ1$E$E&E~ 2zkJ(y^Y{Mw/x u ˃TS)TPq6zk>|L3g8Nn; abĆ|?Bמ]3.M<2L\8qą`ddDvڱkǠK`]^@A~I4, A wbG"B܅# 1맯~5([Vs< ֳ#HrRHXS[rB_ 1=zz(!^{b}}G agef]҄ui9rf 1l/rW:MMOMO!4fӘMcۦo뾭(TPB0b4h#WZ,- a־}!꽨s!>`!nZݴi%DOOŷd*A(rۅ~x≧Ct"Iē'_1Mjp{ *^Ūz+xuMo %ďf!{w7&Ifne!r5[(_-D6b4Nxm 7}?RB|1rȁBHR,0t锕:?Y33 T+ÿ\=¿MMOÞ= ⯪UVZk_T|lBG[(YS(MiJ a۴i/!\s'DG)cSN=*ĥ엲_.Dȉ`18ƫS2 QvtڑiGp8pw,tTQMG &;).).)N&8R%E| @&qufhB|ґJw>/_ 1ـ O urc73tB~:uF%>2SwǕ,ě7oB» QBaΪBݕv(QDepۡ&Lƛz'fRWAAA߬'[O"Os?mmڶB,1BloB<1b\e˦龯Y}'F;w$\s=\(((, lUWVz<(=r[ a6m︜kb^y-V׭[]e'Nx&1 vYaI\e̩Ab|R.P).5nPJ~S7 )OGUy g5DS-?ou+Rb(cǤsX$`I;;;ZyoSkSjM= b >d52Apj9&\pa[j~Lf2$I(eDW_M~5|}}o="pE '(j֫Y.]ػ0PTR|y:hkkw`0 $'+Y%Y%Y%PlPlPlP& ?*'66YV9ryp5ϖ?[lPSN;A 'O˱c-ǂ+}7L0I}s֯Z++" <4M־>N"QE`u -ʓ+V4t?u={Nb狝/“O>)Jy܎A),YdŒ0h To/x\r]upCI-;aRP1wޑ&1@21T\Vrcdd3hKZ`Н-m=਍W7`t?a{7۟B㥍6^-[陦ǛwUUyWAuDN95c:gp`ؐbC YaYaYa2`GEchT*;$NI8;w9+D)QJz:5Ļǻǻ*R=TDQQTTT* Ɨ/_ G G GjfH96}mY)f;Y`|!j>F_;_ۨ3;fvl8a饥^kIההvP;ȺS起B\ ’%K¡^JRoʼ) `>_9|4rONNNp2|'AnmZv0QpWRՃ^l=*XO]qH!GEY}v_eb;zMĻ{fxh4h,!b_ľ}0._|A'[kD㽏Cϳ=<9{앳&** Efc=N'N: ]w1xH'۞ls ݋w'Ztk —/ FoO~?`؃0vec+o HM& Eq':::/Xxcگ;B988%SPFK4ٚq(7ĸg[SnM5"GD]P8gᜅsfti~R:&41oe~+[Yhߡ}am|9reRmEUtV4?UNQNQN 6ƴjL+2˔.S`>}niJ}+)L17`UtlwpQ yD">oBTTTtTGb#G8trV[溸.?+|=*أ"V[ur`XG_>2c7n8pu6\4:H#x{KMF?,iªU + dIwߞ{ s6$^LxwFH1R\ă2͚LRo-gbC<%OHch́ZPWP S"K$H:tnq[N; wnܱqtq|tbӉM'@n8qnijK;3lG;Ag-[nn6[8pí!TSiNsGU/RHuП<7 ~7xz#3>⻋ aP!quuCuC-h=`кuC`/ifAc)1~&V 6|Y:TsDx7-Z3/wZ&M*e+Vx|TW)K3HݒݒRV[\<,x-7$MV\qtS-OMyyyyyy^., A kuwO7~綝v  nNnNnNP#ʏ*:@ge}9=rzpppϕϕ%Op1R>0 al{³"9ͭp?7oBBv rxSB'M 6- ]w90Ly3͔7k^zY"?pe0uW8|'S:ݾ)s)Ta9rް~O gsNv6gsCOv=ՃW^=$U90jTwkJW-0kdU%;:)'*{{脢JEeEe6I6I6I`,Y60 4 4 ^nљ.@SS-[^x mƷ xxxOOOxo bVJ>}}zfff0zjC ٬Yg#om|7}?i^{U Ddrͥb>80r\-chjj~k㋍wE @ir^7~ 1n,fbtCu\:uz4٥ĭS.h +Ww|՟`Zlo޲=Sw)So: <8p03^_sSO lllXholַ.]޸?],rрkwWQv)ya`ll Vv[ f6bbb5/H@qSTHU$č7{q'NƝ b+@ɐ!'!hfЌ:|AܠyA^?w gbĞ@?e{bba꼩·7;p6:Wsυ|绰 [/ /_-BM7Uܔ-##v7pwC7yoqX{~P,d z)1 Q <\$ wupWzm赡vv||Na6 0tPuVY]/s ghߖO(N ( &yME"FF yyyJJ%@,~ >lS;A5W5W5gg%< /m/z#//u+խX"Li7PA}om?F a1]D>OЯd E `M5oFf߈F4>/|^flGL1fsc4MD?dkoӛH5+˾/0c3ãꏪ?x'mDooZݴiuh*U?2#Pqƥ:7N8n=6\ruխ^xa29 Лmn Ż%ӾEl ^+~vz,D" xb'&&&e)G>>lGC_m\; qcKRgҗO{K-mu޶ a~M10^ -Kˡ不 ۏ0 h*,X8+W͋7/ X-#chY|ʊ;NO{4ﱼ'`?Lvۭn L4׿]of Q$O2^x w-޹x;u>lvHh.#BmR>a9r n=+++!F2|o 8qcz|ak巖I5jb 3ڐoĿ 8P+xlo#}i(6;یljԨI3H751Q$BCdž4*=3bo`7?<5B`FO)lSئ02jeʆʆʠ(-J PWW'}} {(,sĎ]6 PRwN2-7ugnSͦԩSN:Х\r]A[VaN՝՝՝\s0C!͐’ K.,M9M9M9 꿂@ z@Smə2Τ^AV^Vjqq:u+ \+ [-߮JAO!>{av{SM7 F Fi1,HOsqXW3Pc}+[n݆jz\ ,YK['~ؼya`SWOE!B@yyypB a:~mY?e+סs~cC߁}9h9`fdB@A RB 9]qa igQp !dYhwV ډi l5e|&\\pq,ZNkٰ )Z>3kh%M|ߺjk`ۙ3ԌS3O### ⿎@ 8ҎGgt |#R((@*UaB P]vځFvFJ+:%N z< ;dyw8\={H4J4J4@GO:,snB%y_++ukZ?VC~9|?7ߌ3V_\}qEXŪdddMφzotK|tV7>w2e73DN@B= (CN93 =u{lfG:)t)<<2ʘ+@OO7~v|3fjP ttN:+K.Q 6l +о{{{ Q A )H<,y+!WB̭37܄k幖^}!ng'5{ j5mIے%x`W_A:u"ά:̂%]KKv/p OQ&"H^#Gzm!^Țiꩁm?Xմ ߵlft d03mks vjةa:#kLqS|d ?BQs|p厗;µ׶_|;vǑ#Cr fO9 fzK'n.=lpeC*C*G@ucUǂ{)ww`sI KihAR :*myٚgٯ_g9iADNݽu @ ڎnHF'@&Cc_e~%C 0ꀪBoFC %()|B1ttt(((w˿3gr<zz{½<__59&ϋ?(Bt}~1 -Ckg ܇SKN-9J( (ԂR E`jj 4 MDY} ? bTĨQppgxw )x && f"htUF[V3:29){_\ v) Ү ԷsPE_O!#K g;D~1c&=X'fO=<8<8<N]9uXSzM5J+ԃ@ @ Cŵ @溑P"$O٠`t"ɞ$'!̼3΀wi{L2t(1ĸ(((̯9iNĩqj",X 1AU^M#޼ oN9 ×/b}}}ΧΧxu:TTT@..@4Cw,J)IFFF?d()(ܤ}j8rdy2e;㜏!Cn)S'3'k,[tyyyOz3G_b rI%p&LęXm|9\q ? M<̐A SL0B|R[MVk߹UlF@C_!$@+gϜ=ySgNP1bB0]c4]V ЌҌҌĉ'B'@i4UB\ϸq=!<6<6<"DXcKǖ GB:^k jjj7)gyyy0b2dw4hLLMzV`vJng#}g̦2g&Q&`k0YddHsҹPYEc@2:vuh6m~)7.n\ W#f_nK;x9q\o 2XKVRk3:8 AS---;jx v%Jֲؕd])>Sa|#?]r׋/*c;n_!?~Ð<3yV4o@ aSjjj oO sNozpŲiO?b!&MD|6\+W7zOrmҖ%(j ~6ĄPiF+P!Bd0(ۤlMp BOaȏc+V~:췲7n W]-_\oqu_ui3zY{ bڶjQ-j G(cNhܬr:2:k |5oc{:i(ӸL2|}r7(w Zׂ"Ev IMj?7( BD?],v z y2Zkm<;@ЇA5M5M5 |7РA3֛\8ర,/yǻ=|RH; yj WBczE>O\&#[˭ZeVAݹ%KݻnZت]>5`y5.c\hD#}F:BXWb5$I9aDFv^|y}|'S hУ"RD07^^mG)|\ТX'F=&@wΪʧή0ogټjT{(_)(p@|Jop@8nʹsq,[ηL+VSSSPUUJS]qZABB& M 'OwM{7 ^xe; >}L|gOփVI1O@HHIa$o?KR )rkV?3ZwoDY6`iHCqU*UEU`9rlp8q6d|kp;ɝmZ٦M7.]6lvjN;| `ZԴiQ0^cx (\. ` Xd&d#H6#|h&i&i&zzz0(JR ~~~111+WTK ; 5!CVۇo}A:upppwwwvہ?(7`}q_N6X,ا-=2VS[ݵ?瘛7` SO lEQw4 JcAC*wL 03~nZ0kutEEAQSQSQU&&@bZ@Y[YGY'K>ꫠ w$UUUHvLvLvBe2r_}R~Ao'xMtZm+:;_y/mj.>W0`_^i00P]sB+gu>Wy\ R{j_R+*?dt0}` 8\U+g['jv m @5+3| 0`rwx=(]G6PnYBxԺ.Ο 0`t#7Ӵsr@, S 9ru ڟ?W0`"֝|]+_RBz2ʵ#~smB&Eq 0`{fjFݎ~Q]_Ӝ hSF ,|"4`q sn;\Llns?vW&.*G*Zo&Eq0`JڑsZ9ނ?n4~D;ڌM;u|0`q;) !mҝ3Ӌ8%P*(?Xni_== 0`@Pwp"?1tI Wrja_L:n \GÀ:tH1iu!'xAoz!9OCã`Q0<_%Hy e```d`|~R=.l qV> 5ö~ WIENDB`( @ 7ec6EF$vu$%$lj77cbed87%%%'''***+++(((!!! n%%&???XXXrrreeeHHH000 k%+++PPP{{|eee;;;% ---\\\{{{DDD&CDD\\]$%%%vAAA___ u---sssIIIHGGGhhh !!G[[[+++hhhdddOOO>>>111((( ###---999EEFYYZrrr3338cccyyyOOO... ???eee///7f RRRiii888 &&&NNNe666HHH 112nnncdd~~~FFF ...qqq:::HHHccd AAA|||BBB """opp>>>???334cccuuu iii000ggg&&&566qqqJJJ444MMM &&&mmm $$$AAANNNEEE***STTuuuDDDWXX555uuu ***sss<<<---111fffUTT```=>>666---   VVV:::~~ 0P\ja :a wwwmmm ,,,KKKiiikkkKKK---111===!!! Uf qqq888mmmsss=>>777[[[gggEr[@@@SST[[\  444*)) z3LLLWWWmmm'''5 5Y %%%ooo~~~...]]]5 6Z '''333WWW*)( {4###,,,TTT[[[eeeEt\@??kkk}}}ZZZccc!!!Vh ??@HHHkkkMMM<<<222+++))))))))),,,444===MMNjjjWWW ___??? 1Q\lb ;c uuv WXX---***SSS'''ttt,,+223???www444 000pppPPP 222eeeTTT___MMM kkk;;; 555aaa+++@AArss eee!!!!!!000ZZZlll'''kkkZZZ666;;; %%%AAAMMMEEE+++ 889 mmmGGGgggccc:::444'''LLL (((>??kkkVVVTTT 777:::+++IIIMMMGGG,,,???!!!www bbb000 bbb^^^IIIZZZ|||XXXDDD kkkVVVQQQ===ppp<<<((([[[GGG===iii kkkTTTnnnEEE...eefooo ]]]___ccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccbbbmmm EEE,,, nnn(()fff998/..??>rrrJJJBBBVVV !!!!!!HHHwww  (((222###HHHvvvuuuHHHZZZ'SwsGv{{{###VVV"""[[[ZZZOOO3xh+++GGGgggeee&&&+++222 hRWWWddd  $=$$#nnn222999GGGWWWTTT 8^!7'''sssiiiooo  3V0 ,--+++*s221ZZZ---___777:::xxxONNN 7\xxwNNN ddd)))333888XYY999***%%%%%%***:::YYY:::222 S Al,,+LLL...vvv...  ...uuu...%>J{UDr0"!!hhhfffsssnnn!3$;$<3!mmm <<<  PPP...???((( 1RVrsV 0Q)))444rrr\\\ZZZooo DrwwDr qqqXXX&&&<<< YYZ 6Zvv 5X ZZZ FFF666WWW'(($$$[[[ TiEt *F+""+ *FEtjT [[[%%%***""" ......999---nnncY!7  #:Zcqqq,,,SSSQQQ  cr)D+ : :+*Frc  wwwggg&&&Tc F6!I%R'V'U%Q!I6 E cT)))|||www^^^lll 5Yc 5='V*[)[)[)Z)Z)[)[*['V= 4c 5Xmmm]]]XXX |||ws U$O*[)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z*[$OT sw777lllwwwEs *F U&S)[)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)[&ST)EDryyy###)))```HHH//0wY 5$O)[)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)[$O 5Yw111FFF>>>YYYttt 0P"9 >*[)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z*[= "9 /O rrrTTTjjj"""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""""Ti G'V)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z'V G iT"""!!!!!!!!!"""!!!!!!!!!!!!!!!!!!!!!"""!!!"""!!!!!!!!!!!!!!!!!!!!!"""!!!!!!!!!!!!!!!!!!!!!"""!!!"""!!!!!!!!!!!!!!!!!!!!!"""!!!!!!!!!!!!###fffWWW qEs7*[)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z*[6Etq XXXyyy888! *G!I)[)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)[!I +G 99:)))3--%R)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)[%R,,1)))####;# :'V)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z'U 9##:#######;# 9'V)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z'U 9$#:###)))2+,%R)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)[%R+,2***888!)E"J)[)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)[!I *F!999{{{WWW rDr7*[)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z*[7Esq YYYiii&&&$$$%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%$$$%%%Uh I'V)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z'V H hU%%%$$$$$$$$$$$$%%%$$$$$$$$$$$$$$$$$$$$$%%%$$$$$$$$$$$$$$$$$$$$$$$$$$$%%%$$$$$$$$$$$$$$$$$$$$$%%%$$$$$$$$$$$$$$$$$$$$$$$$$$$%%%$$$$$$$$$ mmmVVVuuu 0Q!7 >*[)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z*[> !7 0P tttZZZ@@@III///xV 7$P)[)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)[$P 7Xx///HHHaaa*** !!wwwFu(B"Y&T)[)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)[&T!X)DFtwwwmmm455 yq!X$O*[)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z*[$O Wqy}}} VVV___jjj 6[a  7?'V*[)[)[)Z)Z)[)[*['V? 6a 6Zmmm___vvvxxy$$%U` G6!I%R'V'V%R!I6 F bT'''eeeyyy er(B+ : :+(Brd PPPUUU---mmmeV4  4Veooo)))888111---"""***%%%XXX TiEt *F,""+ *GFuiT XXX$$$'''TTT334CCC ###WWW 7\zz 6ZWWW<<<&&&^^^kkk  FuwyGv lllZZZ\\\uuu 222 %%% 0QVsrV 1R%%%AAA+++OOO ===kkk!3$<$<3!lllrrraaaggg !!.DqUIz#<../vvv...  ///uuu...LLL,,+ AmR222999YYY:::***%%%%%%***:::YYY:::222(((hhhOOOyyy 6ZLPPQwww:::<<<___000WWW322r(001/// 0 3U jjjjjjvvw%%%!9 9_ ^^^]]] DDD999444iii#""%> %%%$$$ eeeUUUTi 221------bbbjjjDDD,,,jy3MMM___```""" WWW%%%xxxIzswU(XXXHHHvvvuuuGGG###...***~~  tttGGG !!!!!!SSSFFFLLLrrr?>>/..998fff'''nnn'''HHHssshhhiiihhhiiiiiihhhiiihhhiiihhhhhhiiihhhiiihhhiiiiiihhhiiihhhiiihhhhhhiiiiiiiiihhhiiihhheee```!!!lllhhh)))EEEnnnPPPjjj mmnBBBBBBWWW,,,889tuu999PPPYYYqqq ===SSSWWWGGG]]]eee111]^^ xxx BBC{{{---JJKGGGRRR'''777:::YYYSSS jjj???++,UUU&&&444===jjj^__IIJkkk777 ,,,DDDMMMAAA%%%778999XXXjjj(((kkkXXX444&&&```jjjAAA***hhh{{{/// 888ppp NNN___UUUeee111 TTTggg,,, 555uuuEEE333..-"""mmm)))PPP)))...UUU sss  9`bl\ .L }}}CCC\\\ XXXgggLLM<<<333)))%%%%%%&&&***222<<>>AAAnno""# BBB<<< \]]III;;;ppp--- GGG}}}effnnn111 HHH555hMMM$$$ 888iiiQRR g9000bbb=== ...OOOyyybbb9444rrrYYZDEE888---### (((111<<>>/ABBSSS/222}}}EEEOOOgggG^^^mmm___UUUPPPPPPTTT[[[iiiyzzzzz!!!F XXXnnnCCC$$$ 888```xxx???sss888 +++```^^^ uuu/// !!!___555NNNLLL555sss999%%%}}}+++001<<<%%%SSS NOOPPP 333xxx QQQ ZZZCCC$$%:99211  kkk###mmm  >>MMM###```&&&'''eeevvv`aa,,, >>>??????zzzUUU|||\\\$$$ |||(((<<>>fffppp...###EEEIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIGGGmmmZZZ}}}tttrrrYYY%%%[YX---000b`_ 111\\\}}}ZZZ111rrr,MVR%@!WWWOOOGGG...||||||000"#$ Eu 6\444 ...DDD,,,+++888(z """###zzz,,, mmmlll GGGywu%A.000TTT___111,,,,,,,,,,,,,,,,,,,,-,,,,,,,,,,,,,,,,,-,,,,,,,,,,,----!!!:::,|$$$###$$$ L =h... 555UUUttt655655ttt{{{5[_\-N___UUUIIIYYY000 fff ": 8] Cp Cp 7]": fff IHG"#$%&&SRQ """{||ppp))((MyyM())(nnn... Amobbo Al ,,, DDD::: Yq 9_!! :arY QQQ999~~~111('' YHx  N(k(k N  HxY ))(000,,,\\\hhh~~~edd Am :` 2$O(Y)[)[(Y$O2  :` Amfff~~~$$$VVV)Hy 2!H)[)[)Z)Z)Z)Z)[)[ G2Hy)---III111uvvNq  !G*[)Z)Z)Z)Z)Z)Z)Z)Z*[ G  qMwww000333CCD\\\655 y :`3)[)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)[3 :`y 766[[[}}}777"9! !$O)[)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)[$O ""9777 7\oO(Y)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z(Y Oo 7\$$$555 Boc(l)[)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)[(kc Bn---... Boc(k)[)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)[(kc Bn444%%% 7]oP(Y)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z(Y Oo 7\666":  !$O)[)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)[$O !!"9666|||]]]554 y 9_3)[)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z)[3 9_y 765\\\EEE333222uuuOo  !!H*[)Z)Z)Z)Z)Z)Z)Z)Z*[!H  pNuuu222III---*Gv 4!H)[)[)Z)Z)Z)Z)[)[!H 3Gw*WWW###ccc Bn 8] 3$O(Y)[)[(Y$O3  9_ Bnfffhhh^^^*++111&&& ZGw  N(k(l N  GwZ (('///~~~:::OOO Zo 8]!! 8]oZ ~~~889BBB 111 Bnobbo Bm ...sss%%%*NyzO*&&%ppp|||!!! SRQ$%&"#$JHGccc #; 7] Cp Cp 7]#; ddc 000YYYKKKSSS___,M\_4Yyyyttt654655uuuUUU555 ... >>ppp---*###pppVVV)l---xxxwww{{{mmmk$$$RRR--- 666^^^iiikkk```'''555vvvHII666}}}... AAA hhhmmm,,,BBB{{{000lll&&&ttt000NNNRRRjkk 333.; 8\1O=BG<<<+++FFF___rrryyyzzzvvvjjjTTT::: ___+<u OJMPQQQ***dddIII=== H{/BjjjXXX777+++ I{0Bkkkhhh>>>$$$*<v PJNQ===PPP%%%%%%ggg444.; 7\1O=CH ~~~EEF ---]]]YYY...===SSS:::??? aaaCCC'''tttVVVSSS///VVVggg[[[GGG|||!!!>>>UUUFFF""" AAAuuu '''ZZZXXX###jjj  qqqkkk$$$>>>YYY 999=======================================:::uuu--- PPP8?F-9C_`a===BBB<<<JJJJJJ%%%}}} 1Qp{ K6=Cnnnfffggg]]]#2>| :bWWW555 888777qqq0F O|{z VVVccc TTTUUUTTT,7@q 3SUUUYWV20/""!""!20/YWVVVV*>Ye 8_PSVZZZMMMTTT;;;0.- $? BpSS Bp$> /.-999OOO^_`QSV 888333rqq 0Srr0R srq???mmm fff'''iiirqq R}Gu"7  "7Hw~R srrhhh"""}}}::: S\ ![11![ \R QQQIIIKKK0/.1T\ !Z#M)Z*[*[)Z#M!Y \1T0/.KKK111VVV r} !Z'V)[)Z)Z)Z)Z)['V!Z }r (((^^^  &&&YWV$>Gv #M)[)Z)Z)Z)Z)Z)Z)[#M Gw#>ZXW%%%,,,:::aaa20. Bp"7"\)Z)Z)Z)Z)Z)Z)Z)Z)Z)Z"\"8 Ao20/JJJ___"! R!1*[)Z)Z)Z)Z)Z)Z)Z)Z*[1!R"! VVVWWW"! R 1*[)Z)Z)Z)Z)Z)Z)Z)Z*[1!R"!!^^^KKK10. Bp"7"])Z)Z)Z)Z)Z)Z)Z)Z)Z)Z"\"7 Bo20/```;;;... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!'''YWV$>Gu #M)[)Z)Z)Z)Z)Z)Z)[#M Gu$>ZXW'''!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"""]]]))) s|"\'V)[)Z)Z)Z)Z)['V"\}s UUU011LLL/.-2U[ "[#M)Z*[*[)Z#M!Z [2U10/LLLHHH PPP S[ ![11![ \S 999{||"""jjjqpp S|Fu"7  "7Fu|S qqpggg'''hhh lmm>>>poo 2Uss1U ppo333999 PSV^_`NNN<<<.-, $> BpSS Bp$? /-,999UUULLLZZZORU 8_eY*>VVVYWV20/#"!#"!20/YWVVVV 2Sp,7@SSSWWWWWW cccWWW {zz O0Fqqq<<<;;;666UUU ;c|#2?]]]jjjjjjooo5>>@FJ I|wX =g =gXw I|AFJ>>> AAA`__<<<$$$vvvDDD`ab I|q %D$b88%b %Dq I|abcBBB4441Hw %D8)Z*\*\)Z8 %Dw1H[[[___yyyYYY[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[[XXX LX%c)Z)Z)Z)Z)Z)Z%cX LXXX[[[ZZZ[[[[[[ZZZ[[[[[[ZZZ[[[[[[ZZZ[[[XXXvvvacd_ >h9*\)Z)Z)Z)Z*\9 >h_bcdacd_ =g9*\)Z)Z)Z)Z*\9 >h_bcdwwwZZZ\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ZZZ LX%d)Z)Z)Z)Z)Z)Z%cX LZZZ\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ZZZzzz___ZZZ2Iw %D9)Z*\*\)Z8 %Dw2I555BBB~~~_ab I}p %D%b88%b %Dp I|abcDDDuuu$$$<<<`__@@@ ???@EI I}wW =g =gXw I|@EI===]]]]]]  `ab0G L__ L1H`ab@@@EEESSSQ{nR___bcdbcd"""LLMcr~~Wjzyyy srr|fkoz~~???>>>vvvbbb&&&es2Wv]m{999AAAVVVVVVAAA666FFF444222yyy111333333333333333333333444000 fffCCChhh777$$$aaauuu $$$'''ppp&&&NNN444fffeeesss888000///)))KKKGGGCCCMMM### 000eee)))jw=\uq|!!!www;;;SSS|{{vfaonn @@@)))]]]Viycq~UUUFFF}}}hhh000 StRXXX y CCC SSSkjjIIH ___444AAAJJJ///NNNYYZ!!! YYY]]]222  999fffIIIbbbSSSA CCC999 A999hhh```222- """,OOOO,,AA0 @@0 (0` $ HH"""777EEELLLIII===***I!!![[\sss444 I:::YYY,,,uuu@@@  222```OOO eee888 !!!nnn332RQP333zzz777XWWd{iii 666EEEFFF;;;%%% :::DDD%j9k)))sss<<<>>>%j:l~""";;;)))XXWd|<<<PPPZZZ((( IIIxxx 433QPN'''jjk???'''***ooodddXXX [[['''??@wwwGGG ]]]  rrqA@@DDD"""++++++yxwGox2j ggg333sssjjjjjjjjjjjjjjjlll:::aaaaaa0jleee[[[bbbN_n.Rp.RpN_naaaPPOFpvllk)))"""~~~,,,{Ly\MN\Ly{,,,DCCqomSRQ IIIjjjLyS-l==-lSLyoooppp)))N`n\-l'U*\*\'U-l\N`n(((.RpN>*\)Z)Z*\>N.Rp.RpN>*\)Z)Z*\>N.Rp )))N`n\-l'U*\*\'U-l\N`n))) qqqoooLyR-l==-lRLzjjjIII RRQqomCCB---zLz\MM\Lyz,,,~~~""")))llkuFpPOObbbN_n.Rp.RpN_nbbb[[[dddl0jbbbbbb999jjjiiiiiiiiiiiihhhrrr333hhh 1jyGoyxw,,,,,,"""CCCAAAqqp  ^^^ FFFvvv@@@(((ZZZ WWWdddppp)))&&&>>>kkk'''QON332 yyyGGG '''ZZZQQQ<<=;a9vjjiRRRxxx >_{UU>_{rtvn|---222MMMQ~ J;};} JQ~MMM )('AAA~~~ >_{ J<(V(V< J>_{ ...EEEU;~(V)Z)Z(V;~U>>>???U;~(V)Z)Z(V;~UEEE/// >_{ J<(V(V< J>_{ AAA)(' NNNQ~ J;};} JQ~MMM222---{nqtv >_{UU>_{ yyyRRRkji9va>=;YYY[[[[[[[[[ZZZeee 555_^^R|!ts210 MMMMMM 666iiiBBB fffZZZ[[[[[[[[[[[[ZZZ"""KKKPPP;;;^^^(((]]]__`ggg:::'&%+++888NNNggg--- 777{{{000A@@zqeefSSS000"""ooovxz)u}q'&%gggAAA###cccSSSAx)uzcccrrr333uwyAA@EFFUUU***FFF"""  111```NNN---ZZZKFFF|||ccc...K   JJ@@( @  HGdcH222YYYwwwlllIII!!!H&&&{{{SSTyyyMMM$$$ 222hhhDDDEDB BBByyy "!!f{^BBA 222aaa|||~~~hhh<<< xxx <:9N{fr| RRRggg___`flgw?@ARRR EEE'''mmmUUU [[[BBB'''$$$((((((''''''EEE+++332...sss===jjjllllllpw}Ga,+*wwwZZZNNNOOOOOOGGG ;;;;;; eox)|U764BBBBBB6`K}K}6`---bhmPRT yyylll6`BEEB6`lllK~E*\*\EK~K~E*\*\EK~lll6`BEEB6`lllyyy PRTbhm---6`K}K}6`BBBAAB764U)|eox ;;;;;; FFFNNNNNNMMMYYYwww,+*aGpw|lllllljjj===ttt---332***EEE((((((((()))%%%'''AAAZZZ VVVlll'((DDD QQQ?@Agw`fl^^^hhhSSS fr|{N<:9 www ===hhh}}}aaa333 AAA]f{"!! zzzAAA FDCDDDhhh222 $$$MMMyyyTTT|||&&&I"""JJJlllwwwZZZ222IddHH(0 ???'''444222 ?CCC|||***+++==="""NNN{{{R^i...000555CGK<]x:::HHHO[f5:>ppp~~~111+++ppp  kkk777''' )));;;>>>999wvuwvu999DEFsPdt 333QQQCCCEEE222pppppp123J}Sn 444QQQ:::BiCCBi999(((<<<\\\D'T'TCTTTTTTC'T'TC\\\===(((::9AiCCBi:99QQQ333 SnJ}023qqpqpp111DDDCCCPPP333 PdusDEF:::wvuwvu:::>>>;;;))) &&&777lll  ooo+++111}}}ppp5:>O[fHHH:::]x, Vec), SocketInfo(WinDivertAddress), Ipc(ipc::from_proxy::Message), } #[derive(Debug)] enum ConnectionState { Known(ConnectionAction), Unknown(Vec<(WinDivertAddress, InternetPacket)>), } #[derive(Debug, Clone)] enum ConnectionAction { None, Intercept(ProcessInfo), } struct ActiveListeners(HashMap<(SocketAddr, TransportProtocol), ProcessInfo>); impl ActiveListeners { pub fn new() -> Self { Self(HashMap::new()) } pub fn insert( &mut self, mut socket: SocketAddr, protocol: TransportProtocol, process_info: ProcessInfo, ) -> Option { if socket.ip() == IpAddr::V6(Ipv6Addr::UNSPECIFIED) { // Dual-stack binds: binding to [::] actually binds to 0.0.0.0 as well. socket.set_ip(IpAddr::V4(Ipv4Addr::UNSPECIFIED)) } self.0.insert((socket, protocol), process_info) } pub fn remove( &mut self, mut socket: SocketAddr, protocol: TransportProtocol, ) -> Option { if socket.ip() == IpAddr::V6(Ipv6Addr::UNSPECIFIED) { socket.set_ip(IpAddr::V4(Ipv4Addr::UNSPECIFIED)) } self.0.remove(&(socket, protocol)) } pub fn get(&self, mut socket: SocketAddr, protocol: TransportProtocol) -> Option<&ProcessInfo> { if !self.0.contains_key(&(socket, protocol)) { socket.set_ip(Ipv4Addr::UNSPECIFIED.into()); } self.0.get(&(socket, protocol)) } pub fn clear(&mut self) { self.0.clear(); } } #[tokio::main] async fn main() -> Result<()> { if cfg!(debug_assertions) { env_logger::Builder::from_env(env_logger::Env::default().default_filter_or("info")).init(); } let args: Vec = env::args().collect(); let pipe_name = args .get(1) .map(|x| x.as_str()) .unwrap_or(r"\\.\pipe\mitmproxy-transparent-proxy"); let ipc_client = ClientOptions::new() .pipe_mode(PipeMode::Message) .open(pipe_name) .context("Cannot open pipe")?; let (event_tx, mut event_rx) = mpsc::unbounded_channel::(); let (mut ipc_tx, ipc_rx) = mpsc::unbounded_channel::(); // We currently rely on handles being automatically closed when the program exits. // only needed for forward mode // let _icmp_handle = WinDivert::new("icmp", WinDivertLayer::Network, 1042, WinDivertFlags::new().set_drop()).context("Error opening WinDivert handle")?; let socket_handle = WinDivert::socket( "tcp || udp", 1041, WinDivertFlags::new().set_recv_only().set_sniff(), )?; // WinDivert's syntax supports IP ranges (https://github.com/basil00/Divert/issues/250#issuecomment-723515347) let wd_net_filter = "!loopback && ((ip && remoteAddr < 224.0.0.0) || (ipv6 && remoteAddr < ff00::)) && (tcp || udp)"; let network_handle = WinDivert::network(wd_net_filter, 1040, WinDivertFlags::new())?; let inject_handle = WinDivert::network("false", 1039, WinDivertFlags::new().set_send_only())?; let tx_clone = event_tx.clone(); thread::spawn(move || relay_socket_events(socket_handle, tx_clone)); let tx_clone = event_tx.clone(); thread::spawn(move || relay_network_events(network_handle, tx_clone)); let mut state = InterceptConf::disabled(); event_tx.send(Event::Ipc(ipc::from_proxy::Message::InterceptConf(state.clone().into())))?; tokio::spawn(async move { if let Err(e) = handle_ipc(ipc_client, ipc_rx, event_tx).await { error!("Error handling IPC: {}", e); std::process::exit(1); } }); let mut connections = LruCache::::with_expiry_duration( Duration::from_secs(60 * 10), ); let mut active_listeners = ActiveListeners::new(); loop { let result = event_rx.recv().await.unwrap(); match result { Event::NetworkPacket(address, data) => { // We received a network packet and now need to figure out what to do with it. let packet = match InternetPacket::try_from(data) { Ok(p) => p, Err(e) => { debug!("Error parsing packet: {:?}", e); continue; } }; debug!( "Received packet: {} {} {}", packet.connection_id(), packet.tcp_flag_str(), packet.payload().len() ); let is_multicast = packet.src_ip().is_multicast() || packet.dst_ip().is_multicast(); let is_loopback_only = packet.src_ip().is_loopback() && packet.dst_ip().is_loopback(); if is_multicast || is_loopback_only { debug!( "skipping multicast={} loopback={}", is_multicast, is_loopback_only ); inject_handle.send(&WinDivertPacket { address, data: packet.inner().into(), })?; continue; } match connections.get_mut(&packet.connection_id()) { Some(state) => match state { ConnectionState::Known(s) => { process_packet(address, packet, s, &inject_handle, &mut ipc_tx).await?; } ConnectionState::Unknown(packets) => { packets.push((address, packet)); } }, None => { if address.outbound() { // We expect a corresponding socket event soon. debug!("Adding unknown packet: {}", packet.connection_id()); connections.insert( packet.connection_id(), ConnectionState::Unknown(vec![(address, packet)]), ); } else { // For incoming packets, there won't be a socket event if we capture // before it reaches the socket, so we need to make a decision now. let action = { if let Some(proc_info) = active_listeners.get(packet.dst(), packet.protocol()) { debug!( "Inbound packet for known application: {:?} ({})", &proc_info.process_name, &proc_info.pid ); if state.should_intercept(proc_info) { ConnectionAction::Intercept(proc_info.clone()) } else { ConnectionAction::None } } else { debug!("Unknown inbound packet. Passing through."); ConnectionAction::None } }; insert_into_connections( packet.connection_id(), &action, &address.event(), &mut connections, &inject_handle, &mut ipc_tx, ) .await?; process_packet(address, packet, &action, &inject_handle, &mut ipc_tx) .await?; } } } } Event::SocketInfo(address) => { if address.process_id() == 4 { // We get some weird operating system events here, which are not useful. debug!("Skipping PID 4"); continue; } let Ok(proto) = TransportProtocol::try_from(address.protocol()) else { warn!("Unknown transport protocol: {}", address.protocol()); continue; }; let connection_id = ConnectionId { proto, src: SocketAddr::from((address.local_address(), address.local_port())), dst: SocketAddr::from((address.remote_address(), address.remote_port())), }; if connection_id.src.ip().is_multicast() || connection_id.dst.ip().is_multicast() { continue; } match address.event() { WinDivertEvent::SocketConnect | WinDivertEvent::SocketAccept => { let make_entry = match connections.get(&connection_id) { None => true, Some(e) => matches!(e, ConnectionState::Unknown(_)), }; debug!( "{:<15?} make_entry={} pid={} {}", address.event(), make_entry, address.process_id(), connection_id ); if !make_entry { continue; } let proc_info = { let pid = address.process_id(); ProcessInfo { pid, process_name: get_process_name(pid) .map(|x| x.to_string_lossy().into_owned()) .ok(), } }; let action = if state.should_intercept(&proc_info) { ConnectionAction::Intercept(proc_info) } else { ConnectionAction::None }; insert_into_connections( connection_id, &action, &address.event(), &mut connections, &inject_handle, &mut ipc_tx, ) .await?; } WinDivertEvent::SocketListen => { let pid = address.process_id(); let process_name = get_process_name(pid) .map(|x| x.to_string_lossy().into_owned()) .ok(); debug!("Registering {:?} on {}.", process_name, connection_id.src); active_listeners.insert( connection_id.src, proto, ProcessInfo { pid, process_name }, ); } WinDivertEvent::SocketClose => { // We cannot clean up here because there are still final packets on connections after this event, // But at least we can release memory for unknown connections. if let Some(ConnectionState::Unknown(packets)) = connections.get_mut(&connection_id) { packets.clear(); } // There might be listen sockets we can clean up. active_listeners.remove(connection_id.src, proto); } _ => {} } } Event::Ipc(ipc::from_proxy::Message::Packet(ipc::Packet { data: buf })) => { let mut address = unsafe { WinDivertAddress::::new() }; // if outbound is false, incoming connections are not re-injected into the right iface. address.set_outbound(true); address.set_ip_checksum(false); address.set_tcp_checksum(false); address.set_udp_checksum(false); // TODO: Use Bytes everywhere to avoid allocation. let packet = match InternetPacket::try_from(buf.to_vec()) { Ok(p) => p, Err(e) => { info!("Error parsing packet: {:?}", e); continue; } }; info!( "Injecting: {} {} with outbound={} loopback={}", packet.connection_id(), packet.tcp_flag_str(), address.outbound(), address.loopback() ); let packet = WinDivertPacket:: { address, data: packet.inner().into(), }; inject_handle.send(&packet)?; } Event::Ipc(ipc::from_proxy::Message::InterceptConf(conf)) => { state = conf.try_into()?; info!("{}", state.description()); // Handle preexisting connections. connections.clear(); active_listeners.clear(); for e in network_table()? { let proc_info = ProcessInfo { pid: e.pid, process_name: get_process_name(e.pid) .map(|x| x.to_string_lossy().into_owned()) .ok(), }; let proto = TransportProtocol::try_from(e.protocol)?; if e.remote_addr.ip().is_unspecified() { active_listeners.insert(e.local_addr, proto, proc_info); } else { let connection_id = ConnectionId { proto, src: e.local_addr, dst: e.remote_addr, }; let action = if state.should_intercept(&proc_info) { ConnectionAction::Intercept(proc_info) } else { ConnectionAction::None }; insert_into_connections( connection_id, &action, &WinDivertEvent::ReflectOpen, &mut connections, &inject_handle, &mut ipc_tx, ) .await?; } } } } } } async fn handle_ipc( mut ipc: NamedPipeClient, mut ipc_rx: UnboundedReceiver, tx: UnboundedSender, ) -> Result<()> { let mut buf = [0u8; IPC_BUF_SIZE]; loop { tokio::select! { r = ipc.read(&mut buf) => { match r { Ok(len) if len > 0 => { let mut cursor = Cursor::new(&buf[..len]); let Ok(FromProxy { message: Some(message)}) = FromProxy::decode(&mut cursor) else { return Err(anyhow!("Received invalid IPC message: {:?}", &buf[..len])); }; assert_eq!(cursor.position(), len as u64); tx.send(Event::Ipc(message))?; } _ => { info!("IPC read failed. Exiting."); std::process::exit(0); } } }, Some(packet) = ipc_rx.recv() => { packet.encode(&mut buf.as_mut_slice())?; let len = packet.encoded_len(); ipc.write_all(&buf[..len]).await?; } } } } /// Repeatedly call WinDivertRecvEx to get socket info and feed them into the channel. fn relay_socket_events(handle: WinDivert, tx: UnboundedSender) { loop { let packets = handle.recv_ex(1); // FIXME: more? match packets { Ok(packets) => { for packet in packets { if tx.send(Event::SocketInfo(packet.address)).is_err() { return; // main thread shut down. } } } Err(err) => { eprintln!("WinDivert Error: {err:?}"); std::process::exit(74); } }; } } /// Repeatedly call WinDivertRecvEx to get network packets and feed them into the channel. fn relay_network_events(handle: WinDivert, tx: UnboundedSender) { const MAX_PACKETS: usize = 1; let mut buf = [0u8; MAX_PACKET_SIZE * MAX_PACKETS]; loop { let packets = handle.recv_ex(Some(&mut buf), MAX_PACKETS); match packets { Ok(packets) => { for packet in packets { if tx .send(Event::NetworkPacket(packet.address, packet.data.into())) .is_err() { return; // main thread shut down. } } } Err(err) => { eprintln!("WinDivert Error: {err:?}"); std::process::exit(74); } }; } } async fn insert_into_connections( connection_id: ConnectionId, action: &ConnectionAction, event: &WinDivertEvent, connections: &mut LruCache, inject_handle: &WinDivert, ipc_tx: &mut UnboundedSender, ) -> Result<()> { debug!("Adding: {} with {:?} ({:?})", &connection_id, action, event); // no matter which action we do, the reverse direction is whitelisted. let existing1 = connections.insert( connection_id.reverse(), ConnectionState::Known(ConnectionAction::None), ); let existing2 = connections.insert(connection_id, ConnectionState::Known(action.clone())); if let Some(ConnectionState::Unknown(packets)) = existing1 { for (a, p) in packets { process_packet(a, p, &ConnectionAction::None, inject_handle, ipc_tx).await?; } } if let Some(ConnectionState::Unknown(packets)) = existing2 { for (a, p) in packets { process_packet(a, p, action, inject_handle, ipc_tx).await?; } } Ok(()) } async fn process_packet( address: WinDivertAddress, mut packet: InternetPacket, action: &ConnectionAction, inject_handle: &WinDivert, ipc_tx: &mut UnboundedSender, ) -> Result<()> { match action { ConnectionAction::None => { debug!( "Forwarding: {} {} outbound={} loopback={}", packet.connection_id(), packet.tcp_flag_str(), address.outbound(), address.loopback() ); inject_handle .send(&WinDivertPacket:: { address, data: packet.inner().into(), }) .context("failed to re-inject packet")?; } ConnectionAction::Intercept(ProcessInfo { pid, process_name }) => { info!( "Intercepting: {} {} outbound={} loopback={}", packet.connection_id(), packet.tcp_flag_str(), address.outbound(), address.loopback() ); if !address.ip_checksum() { packet.recalculate_ip_checksum(); } if !address.tcp_checksum() { packet.recalculate_tcp_checksum(); } if !address.udp_checksum() { packet.recalculate_udp_checksum(); } ipc_tx.send(ipc::PacketWithMeta { data: packet.inner().into(), tunnel_info: Some(ipc::TunnelInfo { pid: Some(*pid), process_name: process_name.clone(), }), })?; } } Ok(()) } mitmproxy_rs-0.12.8/src/000077500000000000000000000000001511036467100151515ustar00rootroot00000000000000mitmproxy_rs-0.12.8/src/bin/000077500000000000000000000000001511036467100157215ustar00rootroot00000000000000mitmproxy_rs-0.12.8/src/bin/process-list.rs000066400000000000000000000030051511036467100207140ustar00rootroot00000000000000#[cfg(not(any(windows, target_os = "macos")))] fn main() { unimplemented!(); } #[cfg(any(windows, target_os = "macos"))] use mitmproxy::processes; #[cfg(any(windows, target_os = "macos"))] fn main() -> anyhow::Result<()> { let mut processes = processes::active_executables()?; processes.sort_by_cached_key(|p| (p.is_system, !p.is_visible)); let mut icon_cache = processes::ICON_CACHE.lock().unwrap(); println!( r#""# ); for process in processes { let image = if !process.is_system && process.is_visible { match icon_cache.get_png(process.executable.clone()) { Ok(data) => { let data = data_encoding::BASE64.encode(data); format!("") } Err(e) => e.to_string(), } } else { "".to_string() }; println!( r#" "#, image, process.display_name, process.is_visible, process.is_system, process.executable.to_string_lossy(), ); } println!("
Icon display_name is_visible is_system executable
{} {} {} {} {}
"); Ok(()) } mitmproxy_rs-0.12.8/src/certificates/000077500000000000000000000000001511036467100176165ustar00rootroot00000000000000mitmproxy_rs-0.12.8/src/certificates/macos.rs000066400000000000000000000025421511036467100212710ustar00rootroot00000000000000use anyhow::{anyhow, Result}; use security_framework::{ certificate::SecCertificate, item::{ AddRef, ItemAddOptions, ItemAddValue, ItemClass, ItemSearchOptions, Reference, SearchResult, }, }; use tokio::process::Command; pub fn add_cert(der: Vec, path: &str) -> Result<()> { let cert = SecCertificate::from_der(&der)?; let add_ref = AddRef::Certificate(cert); let mut add_option = ItemAddOptions::new(ItemAddValue::Ref(add_ref)); add_option.set_label("mitmproxy"); let search_result = ItemSearchOptions::new() .class(ItemClass::certificate()) .load_refs(true) .label("mitmproxy") .search() .map_err(|e| anyhow!(e))?; if let Some(SearchResult::Ref(Reference::Certificate(cert))) = search_result.first() { cert.delete()?; } add_option.add()?; Command::new("open") .arg(path) .spawn() .map_err(|e| anyhow!(e))?; Ok(()) } pub fn remove_cert() -> Result<()> { if let SearchResult::Ref(Reference::Certificate(cert)) = ItemSearchOptions::new() .class(ItemClass::certificate()) .load_refs(true) .label("mitmproxy") .search() .map_err(|e| anyhow!(e))? .first() .ok_or_else(|| anyhow!("Certificate not found"))? { cert.delete().map_err(|e| anyhow!(e))?; }; Ok(()) } mitmproxy_rs-0.12.8/src/certificates/mod.rs000066400000000000000000000001611511036467100207410ustar00rootroot00000000000000#[cfg(target_os = "macos")] mod macos; #[cfg(target_os = "macos")] pub use self::macos::{add_cert, remove_cert}; mitmproxy_rs-0.12.8/src/dns.rs000066400000000000000000000152071511036467100163100ustar00rootroot00000000000000use hickory_resolver::config::NameServerConfig; use hickory_resolver::config::ResolverConfig; use hickory_resolver::config::{LookupIpStrategy, ResolveHosts}; use hickory_resolver::lookup_ip::LookupIp; use hickory_resolver::name_server::TokioConnectionProvider; pub use hickory_resolver::proto::op::Query; pub use hickory_resolver::proto::op::ResponseCode; use hickory_resolver::proto::xfer::Protocol; use hickory_resolver::proto::ProtoError; use hickory_resolver::system_conf::read_system_conf; pub use hickory_resolver::ResolveError; use hickory_resolver::TokioResolver; use std::net::IpAddr; use std::net::SocketAddr; use std::sync::LazyLock; pub static DNS_SERVERS: LazyLock, ResolveError>> = LazyLock::new(|| { let (config, _opts) = read_system_conf()?; Ok(config .name_servers() .iter() .filter(|ns| ns.protocol == Protocol::Udp) .map(|ns| ns.socket_addr.ip().to_string()) .collect::>()) }); pub struct DnsResolver(TokioResolver); impl DnsResolver { pub fn new( name_servers: Option>, use_hosts_file: bool, ) -> Result { let (config, mut opts) = if let Some(ns) = name_servers { // Try to get opts from system, but fall back gracefully if that is unavailable. let opts = read_system_conf().map(|r| r.1).unwrap_or_default(); let mut conf = ResolverConfig::new(); for addr in ns.into_iter() { conf.add_name_server(NameServerConfig::new(addr, Protocol::Udp)); conf.add_name_server(NameServerConfig::new(addr, Protocol::Tcp)); } (conf, opts) } else { read_system_conf()? }; opts.use_hosts_file = if use_hosts_file { ResolveHosts::Always } else { ResolveHosts::Never }; opts.ip_strategy = LookupIpStrategy::Ipv4AndIpv6; let mut builder = TokioResolver::builder_with_config(config, TokioConnectionProvider::default()); *builder.options_mut() = opts; Ok(Self(builder.build())) } pub async fn lookup_ip(&self, host: String) -> Result, ResolveError> { self.0.lookup_ip(host).await.map(_interleave_addrinfos) } // hickory_resolver's ipv4/v6_lookup() doesn't use the hosts file for lookups but lookup_ip does, // so we instead filter addresses returned from lookup_ip for now // // https://github.com/hickory-dns/hickory-dns/pull/2149 pub async fn lookup_ipv4(&self, host: String) -> Result, ResolveError> { self.lookup_ipvx(host, IpAddr::is_ipv4).await } pub async fn lookup_ipv6(&self, host: String) -> Result, ResolveError> { self.lookup_ipvx(host, IpAddr::is_ipv6).await } async fn lookup_ipvx(&self, host: String, filter: F) -> Result, ResolveError> where F: FnMut(&IpAddr) -> bool, { let lookup = self.0.lookup_ip(host).await?; let addrs: Vec = lookup.iter().filter(filter).collect(); if addrs.is_empty() { Err(ProtoError::nx_error( Box::new(lookup.query().clone()), None, None, None, ResponseCode::NoError, true, None, ) .into()) } else { Ok(addrs) } } } fn _interleave_addrinfos(lookup_ip: LookupIp) -> Vec { let (mut ipv4_addrs, mut ipv6_addrs): (Vec, Vec) = lookup_ip.into_iter().partition(|addr| addr.is_ipv4()); let mut interleaved: Vec = Vec::with_capacity(ipv4_addrs.len() + ipv6_addrs.len()); while let Some(ipv4) = ipv4_addrs.pop() { interleaved.push(ipv4); if let Some(ipv6) = ipv6_addrs.pop() { interleaved.push(ipv6); } } interleaved.append(&mut ipv6_addrs); interleaved } #[cfg(test)] mod tests { use hickory_resolver::config::NameServerConfig; use hickory_server::proto::rr::rdata::{A, AAAA}; use hickory_server::proto::rr::{DNSClass, Name, RData, Record}; use std::net::SocketAddr; use std::str::FromStr; use std::sync::Arc; use hickory_server::authority::ZoneType; use hickory_server::store::in_memory::InMemoryAuthority; use super::*; #[test] fn dns_servers() { assert!(DNS_SERVERS.as_ref().is_ok_and(|s| !s.is_empty())) } #[tokio::test] async fn resolver() -> anyhow::Result<()> { let listen_addr = test_server().await?; let mut config = ResolverConfig::new(); config.add_name_server(NameServerConfig::new(listen_addr, Protocol::Udp)); let resolver = DnsResolver::new(Some(vec![listen_addr]), false)?; let mut results = resolver.lookup_ip("example.com.".to_string()).await?; assert_eq!( results, vec![ IpAddr::from_str("93.184.215.14")?, IpAddr::from_str("2606:2800:21f:cb07:6820:80da:af6b:8b2c")?, ] ); results = resolver.lookup_ipv4("example.com.".to_string()).await?; assert_eq!(results, vec![IpAddr::from_str("93.184.215.14")?,]); results = resolver.lookup_ipv6("example.com.".to_string()).await?; assert_eq!( results, vec![IpAddr::from_str("2606:2800:21f:cb07:6820:80da:af6b:8b2c")?,] ); Ok(()) } async fn test_server() -> anyhow::Result { let sock = tokio::net::UdpSocket::bind("127.0.0.1:0").await?; let listen_addr = sock.local_addr()?; let origin: Name = Name::parse("example.com.", None).unwrap(); let mut records = InMemoryAuthority::empty(origin.clone(), ZoneType::Primary, false); records.upsert_mut( Record::from_rdata(origin.clone(), 86400, RData::A(A::new(93, 184, 215, 14))) .set_dns_class(DNSClass::IN) .clone(), 0, ); records.upsert_mut( Record::from_rdata( origin, 86400, RData::AAAA(AAAA::new( 0x2606, 0x2800, 0x21f, 0xcb07, 0x6820, 0x80da, 0xaf6b, 0x8b2c, )), ) .set_dns_class(DNSClass::IN) .clone(), 0, ); let mut catalog = hickory_server::authority::Catalog::new(); catalog.upsert(Name::root().into(), vec![Arc::new(records)]); let mut server = hickory_server::ServerFuture::new(catalog); server.register_socket(sock); tokio::spawn(async move { server.block_until_done().await }); Ok(listen_addr) } } mitmproxy_rs-0.12.8/src/intercept_conf.rs000077500000000000000000000130141511036467100205230ustar00rootroot00000000000000use anyhow::{anyhow, ensure}; pub type PID = u32; #[derive(Debug, Clone)] pub struct ProcessInfo { pub pid: PID, pub process_name: Option, } #[derive(PartialEq, Eq, Debug, Clone)] pub struct InterceptConf { default: bool, actions: Vec, } #[derive(PartialEq, Eq, Debug, Clone)] enum Action { Include(Pattern), Exclude(Pattern), } #[derive(PartialEq, Eq, Debug, Clone)] enum Pattern { Pid(PID), Process(String), } impl Pattern { #[inline(always)] fn matches(&self, process_info: &ProcessInfo) -> bool { match self { Pattern::Pid(pid) => process_info.pid == *pid, Pattern::Process(name) => process_info .process_name .as_ref() .map(|n| n.contains(name)) .unwrap_or(false), } } } impl TryFrom<&str> for InterceptConf { type Error = anyhow::Error; fn try_from(value: &str) -> Result { let val = value.trim(); if val.is_empty() { return Ok(InterceptConf::new(vec![])); } let actions: Vec<&str> = val.split(',').collect(); InterceptConf::try_from(actions).map_err(|_| anyhow!("invalid intercept spec: {}", value)) } } impl> TryFrom> for InterceptConf { type Error = anyhow::Error; fn try_from(value: Vec) -> Result { let actions = value .into_iter() .map(|a| Action::try_from(a.as_ref())) .collect::, _>>()?; Ok(InterceptConf::new(actions)) } } impl TryFrom<&str> for Action { type Error = anyhow::Error; fn try_from(value: &str) -> Result { let value = value.trim(); if let Some(value) = value.strip_prefix('!') { Ok(Action::Exclude(Pattern::try_from(value)?)) } else { Ok(Action::Include(Pattern::try_from(value)?)) } } } impl TryFrom<&str> for Pattern { type Error = anyhow::Error; fn try_from(value: &str) -> Result { let value = value.trim(); ensure!(!value.is_empty(), "pattern must not be empty"); Ok(match value.parse::() { Ok(pid) => Pattern::Pid(pid), Err(_) => Pattern::Process(value.to_string()), }) } } impl std::fmt::Display for Action { fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result { match self { Action::Include(pat) => write!(f, "{pat}"), Action::Exclude(pat) => write!(f, "!{pat}"), } } } impl std::fmt::Display for Pattern { fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result { match self { Pattern::Pid(pid) => write!(f, "{pid}"), Pattern::Process(name) => write!(f, "{name}"), } } } impl InterceptConf { fn new(actions: Vec) -> Self { let default = matches!(actions.first(), Some(Action::Exclude(_))); Self { default, actions } } pub fn disabled() -> Self { Self::new(vec![]) } pub fn actions(&self) -> Vec { self.actions.iter().map(|a| a.to_string()).collect() } pub fn default(&self) -> bool { self.default } pub fn should_intercept(&self, process_info: &ProcessInfo) -> bool { let mut intercept = self.default; for action in &self.actions { match action { Action::Include(pattern) => { intercept = intercept || pattern.matches(process_info); } Action::Exclude(pattern) => { intercept = intercept && !pattern.matches(process_info); } } } intercept } pub fn description(&self) -> String { if self.actions.is_empty() { return "Intercept nothing.".to_string(); } let parts: Vec = self .actions .iter() .map(|a| match a { Action::Include(Pattern::Pid(pid)) => format!("Include PID {pid}."), Action::Include(Pattern::Process(name)) => { format!("Include processes matching \"{name}\".") } Action::Exclude(Pattern::Pid(pid)) => format!("Exclude PID {pid}."), Action::Exclude(Pattern::Process(name)) => { format!("Exclude processes matching \"{name}\".") } }) .collect(); parts.join(" ") } } #[cfg(test)] mod tests { use super::*; #[test] fn test_intercept_conf() { let a = ProcessInfo { pid: 1, process_name: Some("a".into()), }; let b = ProcessInfo { pid: 2242, process_name: Some("mitmproxy".into()), }; let conf = InterceptConf::try_from("1,2,3").unwrap(); assert!(conf.should_intercept(&a)); assert!(!conf.should_intercept(&b)); let conf = InterceptConf::try_from("").unwrap(); assert!(!conf.should_intercept(&a)); assert!(!conf.should_intercept(&b)); assert_eq!(conf, InterceptConf::disabled()); let conf = InterceptConf::try_from("!1234").unwrap(); assert!(conf.should_intercept(&a)); assert!(conf.should_intercept(&b)); let conf = InterceptConf::try_from("mitm").unwrap(); assert!(!conf.should_intercept(&a)); assert!(conf.should_intercept(&b)); assert!(InterceptConf::try_from(",,").is_err()); } } mitmproxy_rs-0.12.8/src/ipc/000077500000000000000000000000001511036467100157245ustar00rootroot00000000000000mitmproxy_rs-0.12.8/src/ipc/mitmproxy_ipc.proto000066400000000000000000000034321511036467100217160ustar00rootroot00000000000000syntax = "proto3"; package mitmproxy_ipc; // Note: The protobuf definition is shared between the Rust and Swift parts. // We are not using prost-build because providing protoc is a hassle on many platforms. // See .github/workflows/autofix.yml for how to update the respective files, // or file a PR and let CI handle it. // Packet with associated tunnel info (Windows pipe to mitmproxy) message PacketWithMeta { bytes data = 1; TunnelInfo tunnel_info = 2; } message TunnelInfo { optional uint32 pid = 1; optional string process_name = 2; } // Packet or intercept spec (Windows pipe to redirector) message FromProxy { oneof message { Packet packet = 1; InterceptConf intercept_conf = 2; } } // Packet (macOS UDP Stream) // ⚠️ Bump network extension version on changes, https://github.com/mitmproxy/mitmproxy_rs/pull/227. message Packet { bytes data = 1; } // Intercept conf (macOS Control Stream) // ⚠️ Bump network extension version on changes, https://github.com/mitmproxy/mitmproxy_rs/pull/227. message InterceptConf { repeated string actions = 1; } // New flow (macOS TCP/UDP Stream) // ⚠️ Bump network extension version on changes, https://github.com/mitmproxy/mitmproxy_rs/pull/227. message NewFlow { oneof message { TcpFlow tcp = 1; UdpFlow udp = 2; } } // ⚠️ Bump network extension version on changes, https://github.com/mitmproxy/mitmproxy_rs/pull/227. message TcpFlow { Address remote_address = 1; TunnelInfo tunnel_info = 2; } // ⚠️ Bump network extension version on changes, https://github.com/mitmproxy/mitmproxy_rs/pull/227. message UdpFlow { optional Address local_address = 1; TunnelInfo tunnel_info = 3; } message UdpPacket { bytes data = 1; Address remote_address = 2; } message Address { string host = 1; uint32 port = 2; }mitmproxy_rs-0.12.8/src/ipc/mitmproxy_ipc.rs000066400000000000000000000075631511036467100212100ustar00rootroot00000000000000// @generated // This file is @generated by prost-build. // Note: The protobuf definition is shared between the Rust and Swift parts. // We are not using prost-build because providing protoc is a hassle on many platforms. // See .github/workflows/autofix.yml for how to update the respective files, // or file a PR and let CI handle it. /// Packet with associated tunnel info (Windows pipe to mitmproxy) #[derive(Clone, PartialEq, ::prost::Message)] pub struct PacketWithMeta { #[prost(bytes = "bytes", tag = "1")] pub data: ::prost::bytes::Bytes, #[prost(message, optional, tag = "2")] pub tunnel_info: ::core::option::Option, } #[derive(Clone, PartialEq, ::prost::Message)] pub struct TunnelInfo { #[prost(uint32, optional, tag = "1")] pub pid: ::core::option::Option, #[prost(string, optional, tag = "2")] pub process_name: ::core::option::Option<::prost::alloc::string::String>, } /// Packet or intercept spec (Windows pipe to redirector) #[derive(Clone, PartialEq, ::prost::Message)] pub struct FromProxy { #[prost(oneof = "from_proxy::Message", tags = "1, 2")] pub message: ::core::option::Option, } /// Nested message and enum types in `FromProxy`. pub mod from_proxy { #[derive(Clone, PartialEq, ::prost::Oneof)] pub enum Message { #[prost(message, tag = "1")] Packet(super::Packet), #[prost(message, tag = "2")] InterceptConf(super::InterceptConf), } } /// Packet (macOS UDP Stream) /// ⚠️ Bump network extension version on changes, #[derive(Clone, PartialEq, ::prost::Message)] pub struct Packet { #[prost(bytes = "bytes", tag = "1")] pub data: ::prost::bytes::Bytes, } /// Intercept conf (macOS Control Stream) /// ⚠️ Bump network extension version on changes, #[derive(Clone, PartialEq, ::prost::Message)] pub struct InterceptConf { #[prost(string, repeated, tag = "1")] pub actions: ::prost::alloc::vec::Vec<::prost::alloc::string::String>, } /// New flow (macOS TCP/UDP Stream) /// ⚠️ Bump network extension version on changes, #[derive(Clone, PartialEq, ::prost::Message)] pub struct NewFlow { #[prost(oneof = "new_flow::Message", tags = "1, 2")] pub message: ::core::option::Option, } /// Nested message and enum types in `NewFlow`. pub mod new_flow { #[derive(Clone, PartialEq, ::prost::Oneof)] pub enum Message { #[prost(message, tag = "1")] Tcp(super::TcpFlow), #[prost(message, tag = "2")] Udp(super::UdpFlow), } } /// ⚠️ Bump network extension version on changes, #[derive(Clone, PartialEq, ::prost::Message)] pub struct TcpFlow { #[prost(message, optional, tag = "1")] pub remote_address: ::core::option::Option